<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="0.69411,2.78935,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="145.3.10.183" dst_port="1636" proto="tcp" src_ip="196.36.128.24" src_port="80"/>
      <filter dst_ip="145.3.10.183" dst_port="1628" proto="tcp" src_ip="196.36.128.24" src_port="80"/>
      <from sec="1036991413" usec="0"/>
      <to sec="1036991418" usec="0"/>
    </slice>
    <from sec="1036991413" usec="0"/>
    <to sec="1036991419" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="145.208.145.243" dst_port="137" proto="tcp" src_ip="78.89.238.36" src_port="443"/>
      <filter dst_ip="145.208.145.243" dst_port="137" proto="udp" src_ip="78.89.238.36" src_port="443"/>
      <filter dst_ip="145.208.145.243" dst_port="137" proto="tcp" src_ip="78.89.238.36" src_port="1026"/>
      <filter dst_ip="145.208.145.243" dst_port="137" proto="udp" src_ip="78.89.238.36" src_port="1026"/>
      <from sec="1036990945" usec="0"/>
      <to sec="1036990973" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="145.208.145.243" dst_port="137" proto="tcp" src_ip="76.104.214.36" src_port="443"/>
      <filter dst_ip="145.208.145.243" dst_port="137" proto="udp" src_ip="76.104.214.36" src_port="443"/>
      <filter dst_ip="145.208.145.243" dst_port="137" proto="tcp" src_ip="76.104.214.36" src_port="1026"/>
      <filter dst_ip="145.208.145.243" dst_port="137" proto="udp" src_ip="76.104.214.36" src_port="1026"/>
      <from sec="1036990945" usec="0"/>
      <to sec="1036990973" usec="0"/>
    </slice>
    <from sec="1036990945" usec="0"/>
    <to sec="1036990973" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="1433" proto="tcp" src_ip="199.145.150.37" src_port="6699"/>
      <from sec="1036991449" usec="0"/>
      <to sec="1036991517" usec="0"/>
    </slice>
    <from sec="1036991449" usec="0"/>
    <to sec="1036991517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="223.7.39.187" dst_port="80" proto="tcp" src_ip="148.242.163.37" src_port="1028"/>
      <filter dst_ip="223.7.39.187" dst_port="80" proto="udp" src_ip="148.242.163.37" src_port="1028"/>
      <filter dst_ip="223.7.39.187" dst_port="137" proto="tcp" src_ip="148.242.163.37" src_port="1028"/>
      <filter dst_ip="223.7.39.187" dst_port="137" proto="udp" src_ip="148.242.163.37" src_port="1028"/>
      <filter dst_ip="223.7.39.187" dst_port="6699" proto="tcp" src_ip="148.242.163.37" src_port="1028"/>
      <filter dst_ip="223.7.39.187" dst_port="6699" proto="udp" src_ip="148.242.163.37" src_port="1028"/>
      <from sec="1036990961" usec="0"/>
      <to sec="1036991170" usec="0"/>
    </slice>
    <from sec="1036990961" usec="0"/>
    <to sec="1036991170" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="148.242.92.64" src_port="1026"/>
      <filter dst_port="137" proto="udp" src_ip="148.242.92.64" src_port="1026"/>
      <filter dst_port="80" proto="tcp" src_ip="148.242.92.64" src_port="1026"/>
      <filter dst_port="80" proto="udp" src_ip="148.242.92.64" src_port="1026"/>
      <filter dst_port="6699" proto="tcp" src_ip="148.242.92.64" src_port="1026"/>
      <filter dst_port="6699" proto="udp" src_ip="148.242.92.64" src_port="1026"/>
      <from sec="1036991279" usec="0"/>
      <to sec="1036991286" usec="0"/>
    </slice>
    <from sec="1036991279" usec="0"/>
    <to sec="1036991286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="201.75.67.213" dst_port="80" proto="tcp" src_ip="214.142.98.76" src_port="5001"/>
      <from sec="1036990934" usec="0"/>
      <to sec="1036991429" usec="0"/>
    </slice>
    <from sec="1036990934" usec="0"/>
    <to sec="1036991429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="8.133.70.105" dst_port="137" proto="tcp" src_ip="215.156.88.82"/>
      <filter dst_ip="8.133.70.105" dst_port="137" proto="udp" src_ip="215.156.88.82"/>
      <filter dst_ip="8.133.70.105" dst_port="6699" proto="tcp" src_ip="215.156.88.82"/>
      <filter dst_ip="8.133.70.105" dst_port="6699" proto="udp" src_ip="215.156.88.82"/>
      <from sec="1036991079" usec="0"/>
      <to sec="1036991517" usec="0"/>
    </slice>
    <from sec="1036991079" usec="0"/>
    <to sec="1036991517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="215.156.88.82" dst_port="80" proto="tcp" src_ip="8.133.70.105"/>
      <filter dst_ip="215.156.88.82" dst_port="80" proto="udp" src_ip="8.133.70.105"/>
      <from sec="1036991112" usec="0"/>
      <to sec="1036991482" usec="0"/>
    </slice>
    <from sec="1036991112" usec="0"/>
    <to sec="1036991482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="8.54.242.142" dst_port="80" proto="tcp" src_ip="148.242.164.116" src_port="2162"/>
      <filter dst_ip="8.54.242.142" dst_port="80" proto="udp" src_ip="148.242.164.116" src_port="2162"/>
      <filter dst_ip="8.54.242.142" dst_port="137" proto="tcp" src_ip="148.242.164.116" src_port="2162"/>
      <filter dst_ip="8.54.242.142" dst_port="137" proto="udp" src_ip="148.242.164.116" src_port="2162"/>
      <filter dst_ip="8.54.242.142" dst_port="80" proto="tcp" src_ip="148.242.164.116" src_port="1026"/>
      <filter dst_ip="8.54.242.142" dst_port="80" proto="udp" src_ip="148.242.164.116" src_port="1026"/>
      <filter dst_ip="8.54.242.142" dst_port="137" proto="tcp" src_ip="148.242.164.116" src_port="1026"/>
      <filter dst_ip="8.54.242.142" dst_port="137" proto="udp" src_ip="148.242.164.116" src_port="1026"/>
      <from sec="1036991213" usec="0"/>
      <to sec="1036991218" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="8.54.242.142" dst_port="80" proto="tcp" src_ip="9.65.132.116" src_port="2162"/>
      <filter dst_ip="8.54.242.142" dst_port="80" proto="udp" src_ip="9.65.132.116" src_port="2162"/>
      <filter dst_ip="8.54.242.142" dst_port="137" proto="tcp" src_ip="9.65.132.116" src_port="2162"/>
      <filter dst_ip="8.54.242.142" dst_port="137" proto="udp" src_ip="9.65.132.116" src_port="2162"/>
      <filter dst_ip="8.54.242.142" dst_port="80" proto="tcp" src_ip="9.65.132.116" src_port="1026"/>
      <filter dst_ip="8.54.242.142" dst_port="80" proto="udp" src_ip="9.65.132.116" src_port="1026"/>
      <filter dst_ip="8.54.242.142" dst_port="137" proto="tcp" src_ip="9.65.132.116" src_port="1026"/>
      <filter dst_ip="8.54.242.142" dst_port="137" proto="udp" src_ip="9.65.132.116" src_port="1026"/>
      <from sec="1036991213" usec="0"/>
      <to sec="1036991218" usec="0"/>
    </slice>
    <from sec="1036991213" usec="0"/>
    <to sec="1036991218" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="150.1.193.197" dst_port="80" proto="tcp" src_ip="148.242.42.130" src_port="6699"/>
      <filter dst_ip="150.1.193.197" dst_port="80" proto="udp" src_ip="148.242.42.130" src_port="6699"/>
      <filter dst_ip="145.208.135.136" dst_port="80" proto="tcp" src_ip="148.242.42.130" src_port="6699"/>
      <filter dst_ip="145.208.135.136" dst_port="80" proto="udp" src_ip="148.242.42.130" src_port="6699"/>
      <from sec="1036991070" usec="0"/>
      <to sec="1036991112" usec="0"/>
    </slice>
    <from sec="1036991070" usec="0"/>
    <to sec="1036991113" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="133.213.79.22" dst_port="80" proto="tcp" src_ip="199.222.212.135" src_port="80"/>
      <filter dst_ip="133.213.79.22" dst_port="80" proto="udp" src_ip="199.222.212.135" src_port="80"/>
      <from sec="1036991225" usec="0"/>
      <to sec="1036991421" usec="0"/>
    </slice>
    <from sec="1036991225" usec="0"/>
    <to sec="1036991421" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="145.208.135.136" src_port="1025"/>
      <filter dst_port="137" proto="udp" src_ip="145.208.135.136" src_port="1025"/>
      <filter dst_port="6699" proto="tcp" src_ip="145.208.135.136" src_port="1025"/>
      <filter dst_port="6699" proto="udp" src_ip="145.208.135.136" src_port="1025"/>
      <filter dst_port="137" proto="tcp" src_ip="145.208.135.136" src_port="1026"/>
      <filter dst_port="137" proto="udp" src_ip="145.208.135.136" src_port="1026"/>
      <filter dst_port="6699" proto="tcp" src_ip="145.208.135.136" src_port="1026"/>
      <filter dst_port="6699" proto="udp" src_ip="145.208.135.136" src_port="1026"/>
      <from sec="1036990801" usec="0"/>
      <to sec="1036991517" usec="0"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="145.208.247.103" dst_port="137" proto="tcp" src_ip="9.204.87.147" src_port="1025"/>
      <filter dst_ip="145.208.247.103" dst_port="137" proto="udp" src_ip="9.204.87.147" src_port="1025"/>
      <filter dst_ip="145.208.247.103" dst_port="6699" proto="tcp" src_ip="9.204.87.147" src_port="1025"/>
      <filter dst_ip="145.208.247.103" dst_port="6699" proto="udp" src_ip="9.204.87.147" src_port="1025"/>
      <filter dst_ip="145.208.247.103" dst_port="80" proto="tcp" src_ip="9.204.87.147" src_port="1025"/>
      <filter dst_ip="145.208.247.103" dst_port="80" proto="udp" src_ip="9.204.87.147" src_port="1025"/>
      <filter dst_ip="145.208.247.103" dst_port="137" proto="tcp" src_ip="9.204.87.147" src_port="1029"/>
      <filter dst_ip="145.208.247.103" dst_port="137" proto="udp" src_ip="9.204.87.147" src_port="1029"/>
      <filter dst_ip="145.208.247.103" dst_port="6699" proto="tcp" src_ip="9.204.87.147" src_port="1029"/>
      <filter dst_ip="145.208.247.103" dst_port="6699" proto="udp" src_ip="9.204.87.147" src_port="1029"/>
      <filter dst_ip="145.208.247.103" dst_port="80" proto="tcp" src_ip="9.204.87.147" src_port="1029"/>
      <filter dst_ip="145.208.247.103" dst_port="80" proto="udp" src_ip="9.204.87.147" src_port="1029"/>
      <from sec="1036991005" usec="0"/>
      <to sec="1036991013" usec="0"/>
    </slice>
    <from sec="1036991005" usec="0"/>
    <to sec="1036991013" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="173.27.144.95" dst_port="137" proto="tcp" src_ip="145.208.17.166" src_port="1026"/>
      <filter dst_ip="173.27.144.95" dst_port="137" proto="udp" src_ip="145.208.17.166" src_port="1026"/>
      <filter dst_ip="173.27.144.95" dst_port="6699" proto="tcp" src_ip="145.208.17.166" src_port="1026"/>
      <filter dst_ip="173.27.144.95" dst_port="6699" proto="udp" src_ip="145.208.17.166" src_port="1026"/>
      <filter dst_ip="173.27.144.95" dst_port="80" proto="tcp" src_ip="145.208.17.166" src_port="1026"/>
      <filter dst_ip="173.27.144.95" dst_port="80" proto="udp" src_ip="145.208.17.166" src_port="1026"/>
      <from sec="1036990857" usec="0"/>
      <to sec="1036991510" usec="0"/>
    </slice>
    <from sec="1036990857" usec="0"/>
    <to sec="1036991510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="201.196.17.126" dst_port="443" proto="tcp" src_ip="175.177.218.171" src_port="80"/>
      <filter dst_ip="201.196.17.126" dst_port="443" proto="udp" src_ip="175.177.218.171" src_port="80"/>
      <filter dst_ip="201.196.17.126" dst_port="80" proto="tcp" src_ip="175.177.218.171" src_port="80"/>
      <filter dst_ip="201.196.17.126" dst_port="80" proto="udp" src_ip="175.177.218.171" src_port="80"/>
      <filter dst_ip="133.213.79.22" dst_port="443" proto="tcp" src_ip="175.177.218.171" src_port="80"/>
      <filter dst_ip="133.213.79.22" dst_port="443" proto="udp" src_ip="175.177.218.171" src_port="80"/>
      <filter dst_ip="133.213.79.22" dst_port="80" proto="tcp" src_ip="175.177.218.171" src_port="80"/>
      <filter dst_ip="133.213.79.22" dst_port="80" proto="udp" src_ip="175.177.218.171" src_port="80"/>
      <from sec="1036991175" usec="0"/>
      <to sec="1036991186" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="201.196.17.126" dst_port="443" proto="tcp" src_ip="199.222.212.135" src_port="80"/>
      <filter dst_ip="201.196.17.126" dst_port="443" proto="udp" src_ip="199.222.212.135" src_port="80"/>
      <filter dst_ip="201.196.17.126" dst_port="80" proto="tcp" src_ip="199.222.212.135" src_port="80"/>
      <filter dst_ip="201.196.17.126" dst_port="80" proto="udp" src_ip="199.222.212.135" src_port="80"/>
      <filter dst_ip="133.213.79.22" dst_port="443" proto="tcp" src_ip="199.222.212.135" src_port="80"/>
      <filter dst_ip="133.213.79.22" dst_port="443" proto="udp" src_ip="199.222.212.135" src_port="80"/>
      <filter dst_ip="133.213.79.22" dst_port="80" proto="tcp" src_ip="199.222.212.135" src_port="80"/>
      <filter dst_ip="133.213.79.22" dst_port="80" proto="udp" src_ip="199.222.212.135" src_port="80"/>
      <from sec="1036991176" usec="0"/>
      <to sec="1036991186" usec="0"/>
    </slice>
    <from sec="1036991175" usec="0"/>
    <to sec="1036991186" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="148.242.162.179" src_port="1025"/>
      <filter dst_port="137" proto="udp" src_ip="148.242.162.179" src_port="1025"/>
      <filter dst_port="80" proto="tcp" src_ip="148.242.162.179" src_port="1025"/>
      <filter dst_port="80" proto="udp" src_ip="148.242.162.179" src_port="1025"/>
      <filter dst_port="6699" proto="tcp" src_ip="148.242.162.179" src_port="1025"/>
      <filter dst_port="6699" proto="udp" src_ip="148.242.162.179" src_port="1025"/>
      <from sec="1036991046" usec="0"/>
      <to sec="1036991093" usec="0"/>
    </slice>
    <from sec="1036991046" usec="0"/>
    <to sec="1036991093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="223.7.39.187" dst_port="137" proto="tcp" src_ip="148.242.162.187" src_port="1025"/>
      <filter dst_ip="223.7.39.187" dst_port="137" proto="udp" src_ip="148.242.162.187" src_port="1025"/>
      <filter dst_ip="223.7.39.187" dst_port="6699" proto="tcp" src_ip="148.242.162.187" src_port="1025"/>
      <filter dst_ip="223.7.39.187" dst_port="6699" proto="udp" src_ip="148.242.162.187" src_port="1025"/>
      <filter dst_ip="223.7.39.187" dst_port="80" proto="tcp" src_ip="148.242.162.187" src_port="1025"/>
      <filter dst_ip="223.7.39.187" dst_port="80" proto="udp" src_ip="148.242.162.187" src_port="1025"/>
      <filter dst_ip="223.7.39.187" dst_port="137" proto="tcp" src_ip="148.242.162.187" src_port="1026"/>
      <filter dst_ip="223.7.39.187" dst_port="137" proto="udp" src_ip="148.242.162.187" src_port="1026"/>
      <filter dst_ip="223.7.39.187" dst_port="6699" proto="tcp" src_ip="148.242.162.187" src_port="1026"/>
      <filter dst_ip="223.7.39.187" dst_port="6699" proto="udp" src_ip="148.242.162.187" src_port="1026"/>
      <filter dst_ip="223.7.39.187" dst_port="80" proto="tcp" src_ip="148.242.162.187" src_port="1026"/>
      <filter dst_ip="223.7.39.187" dst_port="80" proto="udp" src_ip="148.242.162.187" src_port="1026"/>
      <from sec="1036991202" usec="0"/>
      <to sec="1036991252" usec="0"/>
    </slice>
    <from sec="1036991202" usec="0"/>
    <to sec="1036991254" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="80" proto="tcp" src_ip="148.242.162.193" src_port="1025"/>
      <filter dst_port="80" proto="udp" src_ip="148.242.162.193" src_port="1025"/>
      <filter dst_port="137" proto="tcp" src_ip="148.242.162.193" src_port="1025"/>
      <filter dst_port="137" proto="udp" src_ip="148.242.162.193" src_port="1025"/>
      <filter dst_port="6699" proto="tcp" src_ip="148.242.162.193" src_port="1025"/>
      <filter dst_port="6699" proto="udp" src_ip="148.242.162.193" src_port="1025"/>
      <from sec="1036991072" usec="0"/>
      <to sec="1036991094" usec="0"/>
    </slice>
    <from sec="1036991072" usec="0"/>
    <to sec="1036991094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="201.98.209.199" dst_port="1049" proto="tcp" src_ip="175.177.2.232" src_port="80"/>
      <from sec="1036990941" usec="0"/>
      <to sec="1036990945" usec="0"/>
    </slice>
    <from sec="1036990939" usec="0"/>
    <to sec="1036990945" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="208.15.179.8" dst_port="80" proto="tcp" src_ip="214.167.107.238" src_port="80"/>
      <filter dst_ip="208.15.179.8" dst_port="80" proto="udp" src_ip="214.167.107.238" src_port="80"/>
      <filter dst_ip="208.15.179.8" dst_port="53" proto="tcp" src_ip="214.167.107.238" src_port="80"/>
      <filter dst_ip="208.15.179.8" dst_port="53" proto="udp" src_ip="214.167.107.238" src_port="80"/>
      <filter dst_ip="208.15.179.8" dst_port="80" proto="tcp" src_ip="214.167.107.238" src_port="6699"/>
      <filter dst_ip="208.15.179.8" dst_port="80" proto="udp" src_ip="214.167.107.238" src_port="6699"/>
      <filter dst_ip="208.15.179.8" dst_port="53" proto="tcp" src_ip="214.167.107.238" src_port="6699"/>
      <filter dst_ip="208.15.179.8" dst_port="53" proto="udp" src_ip="214.167.107.238" src_port="6699"/>
      <from sec="1036991389" usec="0"/>
      <to sec="1036991400" usec="0"/>
    </slice>
    <from sec="1036991389" usec="0"/>
    <to sec="1036991401" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="148.242.177.214" dst_port="1188" proto="tcp" src_ip="156.228.6.245" src_port="80"/>
      <filter dst_ip="148.242.177.214" dst_port="1185" proto="tcp" src_ip="156.228.6.245" src_port="80"/>
      <filter dst_ip="148.242.177.214" dst_port="1186" proto="tcp" src_ip="156.228.6.245" src_port="80"/>
      <from sec="1036990913" usec="0"/>
      <to sec="1036990919" usec="0"/>
    </slice>
    <from sec="1036990913" usec="0"/>
    <to sec="1036990919" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="148.242.164.96" dst_port="80" proto="tcp" src_ip="198.33.28.251" src_port="80"/>
      <filter dst_ip="148.242.164.96" dst_port="80" proto="udp" src_ip="198.33.28.251" src_port="80"/>
      <filter dst_ip="148.242.164.96" dst_port="25" proto="tcp" src_ip="198.33.28.251" src_port="80"/>
      <filter dst_ip="148.242.164.96" dst_port="25" proto="udp" src_ip="198.33.28.251" src_port="80"/>
      <filter dst_ip="148.242.182.8" dst_port="80" proto="tcp" src_ip="198.33.28.251" src_port="80"/>
      <filter dst_ip="148.242.182.8" dst_port="80" proto="udp" src_ip="198.33.28.251" src_port="80"/>
      <filter dst_ip="148.242.182.8" dst_port="25" proto="tcp" src_ip="198.33.28.251" src_port="80"/>
      <filter dst_ip="148.242.182.8" dst_port="25" proto="udp" src_ip="198.33.28.251" src_port="80"/>
      <from sec="1036991031" usec="0"/>
      <to sec="1036991132" usec="0"/>
    </slice>
    <from sec="1036991031" usec="0"/>
    <to sec="1036991133" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="192.168.1.4" dst_port="53" proto="tcp" src_ip="192.168.1.4" src_port="65534"/>
      <filter dst_ip="192.168.1.4" dst_port="53" proto="udp" src_ip="192.168.1.4" src_port="65534"/>
      <filter dst_ip="192.168.1.4" dst_port="53" proto="tcp" src_ip="192.168.1.4" src_port="65534"/>
      <filter dst_ip="192.168.1.4" dst_port="53" proto="udp" src_ip="192.168.1.4" src_port="65534"/>
      <filter dst_ip="192.168.1.4" dst_port="53" proto="tcp" src_ip="192.168.1.4" src_port="65534"/>
      <filter dst_ip="192.168.1.4" dst_port="53" proto="udp" src_ip="192.168.1.4" src_port="65534"/>
      <filter dst_ip="192.168.1.4" dst_port="53" proto="tcp" src_ip="192.168.1.4" src_port="65534"/>
      <filter dst_ip="192.168.1.4" dst_port="53" proto="udp" src_ip="192.168.1.4" src_port="65534"/>
      <filter dst_ip="192.168.1.4" dst_port="80" proto="tcp" src_ip="192.168.1.4" src_port="65534"/>
      <filter dst_ip="192.168.1.4" dst_port="80" proto="udp" src_ip="192.168.1.4" src_port="65534"/>
      <filter dst_ip="192.168.1.4" dst_port="80" proto="tcp" src_ip="192.168.1.4" src_port="65534"/>
      <filter dst_ip="192.168.1.4" dst_port="80" proto="udp" src_ip="192.168.1.4" src_port="65534"/>
      <filter dst_ip="192.168.1.4" dst_port="80" proto="tcp" src_ip="192.168.1.4" src_port="65534"/>
      <filter dst_ip="192.168.1.4" dst_port="80" proto="udp" src_ip="192.168.1.4" src_port="65534"/>
      <filter dst_ip="192.168.1.4" dst_port="80" proto="tcp" src_ip="192.168.1.4" src_port="65534"/>
      <filter dst_ip="192.168.1.4" dst_port="80" proto="udp" src_ip="192.168.1.4" src_port="65534"/>
      <filter dst_ip="192.168.1.4" dst_port="53" proto="tcp" src_ip="192.168.1.4" src_port="53"/>
      <filter dst_ip="192.168.1.4" dst_port="53" proto="udp" src_ip="192.168.1.4" src_port="53"/>
      <filter dst_ip="192.168.1.4" dst_port="53" proto="tcp" src_ip="192.168.1.4" src_port="53"/>
      <filter dst_ip="192.168.1.4" dst_port="53" proto="udp" src_ip="192.168.1.4" src_port="53"/>
      <filter dst_ip="192.168.1.4" dst_port="53" proto="tcp" src_ip="192.168.1.4" src_port="53"/>
      <filter dst_ip="192.168.1.4" dst_port="53" proto="udp" src_ip="192.168.1.4" src_port="53"/>
      <filter dst_ip="192.168.1.4" dst_port="53" proto="tcp" src_ip="192.168.1.4" src_port="53"/>
      <filter dst_ip="192.168.1.4" dst_port="53" proto="udp" src_ip="192.168.1.4" src_port="53"/>
      <filter dst_ip="192.168.1.4" dst_port="80" proto="tcp" src_ip="192.168.1.4" src_port="53"/>
      <filter dst_ip="192.168.1.4" dst_port="80" proto="udp" src_ip="192.168.1.4" src_port="53"/>
      <filter dst_ip="192.168.1.4" dst_port="80" proto="tcp" src_ip="192.168.1.4" src_port="53"/>
      <filter dst_ip="192.168.1.4" dst_port="80" proto="udp" src_ip="192.168.1.4" src_port="53"/>
      <filter dst_ip="192.168.1.4" dst_port="80" proto="tcp" src_ip="192.168.1.4" src_port="53"/>
      <filter dst_ip="192.168.1.4" dst_port="80" proto="udp" src_ip="192.168.1.4" src_port="53"/>
      <filter dst_ip="192.168.1.4" dst_port="80" proto="tcp" src_ip="192.168.1.4" src_port="53"/>
      <filter dst_ip="192.168.1.4" dst_port="80" proto="udp" src_ip="192.168.1.4" src_port="53"/>
      <from sec="1036991186" usec="0"/>
      <to sec="1036991207" usec="0"/>
    </slice>
    <from sec="1036991186" usec="0"/>
    <to sec="1036991207" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="208.15.179.8" dst_port="80" proto="tcp" src_ip="214.167.107.237" src_port="6699"/>
      <filter dst_ip="208.15.179.8" dst_port="80" proto="udp" src_ip="214.167.107.237" src_port="6699"/>
      <filter dst_ip="208.15.179.8" dst_port="80" proto="tcp" src_ip="214.167.107.237" src_port="6699"/>
      <filter dst_ip="208.15.179.8" dst_port="80" proto="udp" src_ip="214.167.107.237" src_port="6699"/>
      <filter dst_ip="208.15.179.8" dst_port="80" proto="tcp" src_ip="214.167.107.237" src_port="6699"/>
      <filter dst_ip="208.15.179.8" dst_port="80" proto="udp" src_ip="214.167.107.237" src_port="6699"/>
      <filter dst_ip="208.15.179.8" dst_port="80" proto="tcp" src_ip="214.167.107.237" src_port="6699"/>
      <filter dst_ip="208.15.179.8" dst_port="80" proto="udp" src_ip="214.167.107.237" src_port="6699"/>
      <filter dst_ip="208.15.179.8" dst_port="137" proto="tcp" src_ip="214.167.107.237" src_port="6699"/>
      <filter dst_ip="208.15.179.8" dst_port="137" proto="udp" src_ip="214.167.107.237" src_port="6699"/>
      <filter dst_ip="208.15.179.8" dst_port="137" proto="tcp" src_ip="214.167.107.237" src_port="6699"/>
      <filter dst_ip="208.15.179.8" dst_port="137" proto="udp" src_ip="214.167.107.237" src_port="6699"/>
      <filter dst_ip="208.15.179.8" dst_port="137" proto="tcp" src_ip="214.167.107.237" src_port="6699"/>
      <filter dst_ip="208.15.179.8" dst_port="137" proto="udp" src_ip="214.167.107.237" src_port="6699"/>
      <filter dst_ip="208.15.179.8" dst_port="137" proto="tcp" src_ip="214.167.107.237" src_port="6699"/>
      <filter dst_ip="208.15.179.8" dst_port="137" proto="udp" src_ip="214.167.107.237" src_port="6699"/>
      <filter dst_ip="208.15.179.8" dst_port="80" proto="tcp" src_ip="214.167.107.237" src_port="80"/>
      <filter dst_ip="208.15.179.8" dst_port="80" proto="udp" src_ip="214.167.107.237" src_port="80"/>
      <filter dst_ip="208.15.179.8" dst_port="80" proto="tcp" src_ip="214.167.107.237" src_port="80"/>
      <filter dst_ip="208.15.179.8" dst_port="80" proto="udp" src_ip="214.167.107.237" src_port="80"/>
      <filter dst_ip="208.15.179.8" dst_port="80" proto="tcp" src_ip="214.167.107.237" src_port="80"/>
      <filter dst_ip="208.15.179.8" dst_port="80" proto="udp" src_ip="214.167.107.237" src_port="80"/>
      <filter dst_ip="208.15.179.8" dst_port="80" proto="tcp" src_ip="214.167.107.237" src_port="80"/>
      <filter dst_ip="208.15.179.8" dst_port="80" proto="udp" src_ip="214.167.107.237" src_port="80"/>
      <filter dst_ip="208.15.179.8" dst_port="137" proto="tcp" src_ip="214.167.107.237" src_port="80"/>
      <filter dst_ip="208.15.179.8" dst_port="137" proto="udp" src_ip="214.167.107.237" src_port="80"/>
      <filter dst_ip="208.15.179.8" dst_port="137" proto="tcp" src_ip="214.167.107.237" src_port="80"/>
      <filter dst_ip="208.15.179.8" dst_port="137" proto="udp" src_ip="214.167.107.237" src_port="80"/>
      <filter dst_ip="208.15.179.8" dst_port="137" proto="tcp" src_ip="214.167.107.237" src_port="80"/>
      <filter dst_ip="208.15.179.8" dst_port="137" proto="udp" src_ip="214.167.107.237" src_port="80"/>
      <filter dst_ip="208.15.179.8" dst_port="137" proto="tcp" src_ip="214.167.107.237" src_port="80"/>
      <filter dst_ip="208.15.179.8" dst_port="137" proto="udp" src_ip="214.167.107.237" src_port="80"/>
      <filter dst_ip="208.15.179.8" dst_port="80" proto="tcp" src_ip="214.167.107.236" src_port="6699"/>
      <filter dst_ip="208.15.179.8" dst_port="80" proto="udp" src_ip="214.167.107.236" src_port="6699"/>
      <filter dst_ip="208.15.179.8" dst_port="80" proto="tcp" src_ip="214.167.107.236" src_port="6699"/>
      <filter dst_ip="208.15.179.8" dst_port="80" proto="udp" src_ip="214.167.107.236" src_port="6699"/>
      <filter dst_ip="208.15.179.8" dst_port="80" proto="tcp" src_ip="214.167.107.236" src_port="6699"/>
      <filter dst_ip="208.15.179.8" dst_port="80" proto="udp" src_ip="214.167.107.236" src_port="6699"/>
      <filter dst_ip="208.15.179.8" dst_port="80" proto="tcp" src_ip="214.167.107.236" src_port="6699"/>
      <filter dst_ip="208.15.179.8" dst_port="80" proto="udp" src_ip="214.167.107.236" src_port="6699"/>
      <filter dst_ip="208.15.179.8" dst_port="137" proto="tcp" src_ip="214.167.107.236" src_port="6699"/>
      <filter dst_ip="208.15.179.8" dst_port="137" proto="udp" src_ip="214.167.107.236" src_port="6699"/>
      <filter dst_ip="208.15.179.8" dst_port="137" proto="tcp" src_ip="214.167.107.236" src_port="6699"/>
      <filter dst_ip="208.15.179.8" dst_port="137" proto="udp" src_ip="214.167.107.236" src_port="6699"/>
      <filter dst_ip="208.15.179.8" dst_port="137" proto="tcp" src_ip="214.167.107.236" src_port="6699"/>
      <filter dst_ip="208.15.179.8" dst_port="137" proto="udp" src_ip="214.167.107.236" src_port="6699"/>
      <filter dst_ip="208.15.179.8" dst_port="137" proto="tcp" src_ip="214.167.107.236" src_port="6699"/>
      <filter dst_ip="208.15.179.8" dst_port="137" proto="udp" src_ip="214.167.107.236" src_port="6699"/>
      <filter dst_ip="208.15.179.8" dst_port="80" proto="tcp" src_ip="214.167.107.236" src_port="80"/>
      <filter dst_ip="208.15.179.8" dst_port="80" proto="udp" src_ip="214.167.107.236" src_port="80"/>
      <filter dst_ip="208.15.179.8" dst_port="80" proto="tcp" src_ip="214.167.107.236" src_port="80"/>
      <filter dst_ip="208.15.179.8" dst_port="80" proto="udp" src_ip="214.167.107.236" src_port="80"/>
      <filter dst_ip="208.15.179.8" dst_port="80" proto="tcp" src_ip="214.167.107.236" src_port="80"/>
      <filter dst_ip="208.15.179.8" dst_port="80" proto="udp" src_ip="214.167.107.236" src_port="80"/>
      <filter dst_ip="208.15.179.8" dst_port="80" proto="tcp" src_ip="214.167.107.236" src_port="80"/>
      <filter dst_ip="208.15.179.8" dst_port="80" proto="udp" src_ip="214.167.107.236" src_port="80"/>
      <filter dst_ip="208.15.179.8" dst_port="137" proto="tcp" src_ip="214.167.107.236" src_port="80"/>
      <filter dst_ip="208.15.179.8" dst_port="137" proto="udp" src_ip="214.167.107.236" src_port="80"/>
      <filter dst_ip="208.15.179.8" dst_port="137" proto="tcp" src_ip="214.167.107.236" src_port="80"/>
      <filter dst_ip="208.15.179.8" dst_port="137" proto="udp" src_ip="214.167.107.236" src_port="80"/>
      <filter dst_ip="208.15.179.8" dst_port="137" proto="tcp" src_ip="214.167.107.236" src_port="80"/>
      <filter dst_ip="208.15.179.8" dst_port="137" proto="udp" src_ip="214.167.107.236" src_port="80"/>
      <filter dst_ip="208.15.179.8" dst_port="137" proto="tcp" src_ip="214.167.107.236" src_port="80"/>
      <filter dst_ip="208.15.179.8" dst_port="137" proto="udp" src_ip="214.167.107.236" src_port="80"/>
      <from sec="1036990841" usec="0"/>
      <to sec="1036990852" usec="0"/>
    </slice>
    <from sec="1036990840" usec="0"/>
    <to sec="1036990852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="201.59.55.12" dst_port="80" proto="tcp" src_port="53"/>
      <filter dst_ip="201.59.55.12" dst_port="80" proto="udp" src_port="53"/>
      <filter dst_ip="201.59.55.12" dst_port="80" proto="tcp" src_port="53"/>
      <filter dst_ip="201.59.55.12" dst_port="80" proto="udp" src_port="53"/>
      <filter dst_ip="201.59.55.12" dst_port="80" proto="tcp" src_port="53"/>
      <filter dst_ip="201.59.55.12" dst_port="80" proto="udp" src_port="53"/>
      <filter dst_ip="201.59.55.12" dst_port="80" proto="tcp" src_port="53"/>
      <filter dst_ip="201.59.55.12" dst_port="80" proto="udp" src_port="53"/>
      <from sec="1036990914" usec="0"/>
      <to sec="1036991482" usec="0"/>
    </slice>
    <from sec="1036990914" usec="0"/>
    <to sec="1036991482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="148.242.182.21" dst_port="80" proto="tcp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.182.21" dst_port="80" proto="udp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.182.21" dst_port="80" proto="tcp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.182.21" dst_port="80" proto="udp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.182.21" dst_port="80" proto="tcp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.182.21" dst_port="80" proto="udp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.182.21" dst_port="80" proto="tcp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.182.21" dst_port="80" proto="udp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.182.21" dst_port="137" proto="tcp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.182.21" dst_port="137" proto="udp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.182.21" dst_port="137" proto="tcp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.182.21" dst_port="137" proto="udp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.182.21" dst_port="137" proto="tcp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.182.21" dst_port="137" proto="udp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.182.21" dst_port="137" proto="tcp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.182.21" dst_port="137" proto="udp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.182.21" dst_port="80" proto="tcp" src_ip="76.161.141.52" src_port="6699"/>
      <filter dst_ip="148.242.182.21" dst_port="80" proto="udp" src_ip="76.161.141.52" src_port="6699"/>
      <filter dst_ip="148.242.182.21" dst_port="80" proto="tcp" src_ip="76.161.141.52" src_port="6699"/>
      <filter dst_ip="148.242.182.21" dst_port="80" proto="udp" src_ip="76.161.141.52" src_port="6699"/>
      <filter dst_ip="148.242.182.21" dst_port="80" proto="tcp" src_ip="76.161.141.52" src_port="6699"/>
      <filter dst_ip="148.242.182.21" dst_port="80" proto="udp" src_ip="76.161.141.52" src_port="6699"/>
      <filter dst_ip="148.242.182.21" dst_port="80" proto="tcp" src_ip="76.161.141.52" src_port="6699"/>
      <filter dst_ip="148.242.182.21" dst_port="80" proto="udp" src_ip="76.161.141.52" src_port="6699"/>
      <filter dst_ip="148.242.182.21" dst_port="137" proto="tcp" src_ip="76.161.141.52" src_port="6699"/>
      <filter dst_ip="148.242.182.21" dst_port="137" proto="udp" src_ip="76.161.141.52" src_port="6699"/>
      <filter dst_ip="148.242.182.21" dst_port="137" proto="tcp" src_ip="76.161.141.52" src_port="6699"/>
      <filter dst_ip="148.242.182.21" dst_port="137" proto="udp" src_ip="76.161.141.52" src_port="6699"/>
      <filter dst_ip="148.242.182.21" dst_port="137" proto="tcp" src_ip="76.161.141.52" src_port="6699"/>
      <filter dst_ip="148.242.182.21" dst_port="137" proto="udp" src_ip="76.161.141.52" src_port="6699"/>
      <filter dst_ip="148.242.182.21" dst_port="137" proto="tcp" src_ip="76.161.141.52" src_port="6699"/>
      <filter dst_ip="148.242.182.21" dst_port="137" proto="udp" src_ip="76.161.141.52" src_port="6699"/>
      <from sec="1036991024" usec="0"/>
      <to sec="1036991079" usec="0"/>
    </slice>
    <from sec="1036991024" usec="0"/>
    <to sec="1036991082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="210.169.213.33" dst_port="80" proto="tcp" src_port="6699"/>
      <filter dst_ip="210.169.213.33" dst_port="80" proto="udp" src_port="6699"/>
      <filter dst_ip="210.169.213.33" dst_port="80" proto="tcp" src_port="6699"/>
      <filter dst_ip="210.169.213.33" dst_port="80" proto="udp" src_port="6699"/>
      <filter dst_ip="210.169.213.33" dst_port="80" proto="tcp" src_port="6699"/>
      <filter dst_ip="210.169.213.33" dst_port="80" proto="udp" src_port="6699"/>
      <filter dst_ip="210.169.213.33" dst_port="80" proto="tcp" src_port="6699"/>
      <filter dst_ip="210.169.213.33" dst_port="80" proto="udp" src_port="6699"/>
      <from sec="1036990884" usec="0"/>
      <to sec="1036991421" usec="0"/>
    </slice>
    <from sec="1036990884" usec="0"/>
    <to sec="1036991421" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="76.161.157.61" dst_port="80" proto="tcp" src_ip="76.161.157.61"/>
      <filter dst_ip="76.161.157.61" dst_port="80" proto="udp" src_ip="76.161.157.61"/>
      <filter dst_ip="76.161.157.61" dst_port="80" proto="tcp" src_ip="76.161.157.61"/>
      <filter dst_ip="76.161.157.61" dst_port="80" proto="udp" src_ip="76.161.157.61"/>
      <filter dst_ip="76.161.157.61" dst_port="80" proto="tcp" src_ip="76.161.157.61"/>
      <filter dst_ip="76.161.157.61" dst_port="80" proto="udp" src_ip="76.161.157.61"/>
      <filter dst_ip="76.161.157.61" dst_port="80" proto="tcp" src_ip="76.161.157.61"/>
      <filter dst_ip="76.161.157.61" dst_port="80" proto="udp" src_ip="76.161.157.61"/>
      <from sec="1036990990" usec="0"/>
      <to sec="1036991492" usec="0"/>
    </slice>
    <from sec="1036990990" usec="0"/>
    <to sec="1036991492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="76.161.152.69" dst_port="80" proto="tcp" src_ip="76.161.152.69"/>
      <filter dst_ip="76.161.152.69" dst_port="80" proto="udp" src_ip="76.161.152.69"/>
      <filter dst_ip="76.161.152.69" dst_port="80" proto="tcp" src_ip="76.161.152.69"/>
      <filter dst_ip="76.161.152.69" dst_port="80" proto="udp" src_ip="76.161.152.69"/>
      <filter dst_ip="76.161.152.69" dst_port="80" proto="tcp" src_ip="76.161.152.69"/>
      <filter dst_ip="76.161.152.69" dst_port="80" proto="udp" src_ip="76.161.152.69"/>
      <filter dst_ip="76.161.152.69" dst_port="80" proto="tcp" src_ip="76.161.152.69"/>
      <filter dst_ip="76.161.152.69" dst_port="80" proto="udp" src_ip="76.161.152.69"/>
      <from sec="1036990958" usec="0"/>
      <to sec="1036991502" usec="0"/>
    </slice>
    <from sec="1036990958" usec="0"/>
    <to sec="1036991502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="133.213.64.87" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="133.213.64.87" dst_port="80" proto="udp" src_port="80"/>
      <filter dst_ip="133.213.64.87" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="133.213.64.87" dst_port="80" proto="udp" src_port="80"/>
      <filter dst_ip="133.213.64.87" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="133.213.64.87" dst_port="80" proto="udp" src_port="80"/>
      <filter dst_ip="133.213.64.87" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="133.213.64.87" dst_port="80" proto="udp" src_port="80"/>
      <filter dst_ip="133.213.64.87" dst_port="137" proto="tcp" src_port="80"/>
      <filter dst_ip="133.213.64.87" dst_port="137" proto="udp" src_port="80"/>
      <filter dst_ip="133.213.64.87" dst_port="137" proto="tcp" src_port="80"/>
      <filter dst_ip="133.213.64.87" dst_port="137" proto="udp" src_port="80"/>
      <filter dst_ip="133.213.64.87" dst_port="137" proto="tcp" src_port="80"/>
      <filter dst_ip="133.213.64.87" dst_port="137" proto="udp" src_port="80"/>
      <filter dst_ip="133.213.64.87" dst_port="137" proto="tcp" src_port="80"/>
      <filter dst_ip="133.213.64.87" dst_port="137" proto="udp" src_port="80"/>
      <filter dst_ip="133.213.64.87" dst_port="80" proto="tcp" src_port="6699"/>
      <filter dst_ip="133.213.64.87" dst_port="80" proto="udp" src_port="6699"/>
      <filter dst_ip="133.213.64.87" dst_port="80" proto="tcp" src_port="6699"/>
      <filter dst_ip="133.213.64.87" dst_port="80" proto="udp" src_port="6699"/>
      <filter dst_ip="133.213.64.87" dst_port="80" proto="tcp" src_port="6699"/>
      <filter dst_ip="133.213.64.87" dst_port="80" proto="udp" src_port="6699"/>
      <filter dst_ip="133.213.64.87" dst_port="80" proto="tcp" src_port="6699"/>
      <filter dst_ip="133.213.64.87" dst_port="80" proto="udp" src_port="6699"/>
      <filter dst_ip="133.213.64.87" dst_port="137" proto="tcp" src_port="6699"/>
      <filter dst_ip="133.213.64.87" dst_port="137" proto="udp" src_port="6699"/>
      <filter dst_ip="133.213.64.87" dst_port="137" proto="tcp" src_port="6699"/>
      <filter dst_ip="133.213.64.87" dst_port="137" proto="udp" src_port="6699"/>
      <filter dst_ip="133.213.64.87" dst_port="137" proto="tcp" src_port="6699"/>
      <filter dst_ip="133.213.64.87" dst_port="137" proto="udp" src_port="6699"/>
      <filter dst_ip="133.213.64.87" dst_port="137" proto="tcp" src_port="6699"/>
      <filter dst_ip="133.213.64.87" dst_port="137" proto="udp" src_port="6699"/>
      <from sec="1036991216" usec="0"/>
      <to sec="1036991225" usec="0"/>
    </slice>
    <from sec="1036991215" usec="0"/>
    <to sec="1036991225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="80" proto="tcp" src_port="6699"/>
      <filter dst_port="80" proto="udp" src_port="6699"/>
      <filter dst_port="80" proto="tcp" src_port="6699"/>
      <filter dst_port="80" proto="udp" src_port="6699"/>
      <filter dst_port="80" proto="tcp" src_port="6699"/>
      <filter dst_port="80" proto="udp" src_port="6699"/>
      <filter dst_port="80" proto="tcp" src_port="6699"/>
      <filter dst_port="80" proto="udp" src_port="6699"/>
      <filter dst_port="53" proto="tcp" src_port="6699"/>
      <filter dst_port="53" proto="udp" src_port="6699"/>
      <filter dst_port="53" proto="tcp" src_port="6699"/>
      <filter dst_port="53" proto="udp" src_port="6699"/>
      <filter dst_port="53" proto="tcp" src_port="6699"/>
      <filter dst_port="53" proto="udp" src_port="6699"/>
      <filter dst_port="53" proto="tcp" src_port="6699"/>
      <filter dst_port="53" proto="udp" src_port="6699"/>
    </slice>
    <from sec="1036991410" usec="0"/>
    <to sec="1036991421" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="145.208.136.125" dst_port="80" proto="tcp" src_port="6699"/>
      <filter dst_ip="145.208.136.125" dst_port="80" proto="udp" src_port="6699"/>
      <filter dst_ip="145.208.136.125" dst_port="80" proto="tcp" src_port="6699"/>
      <filter dst_ip="145.208.136.125" dst_port="80" proto="udp" src_port="6699"/>
      <filter dst_ip="145.208.136.125" dst_port="80" proto="tcp" src_port="6699"/>
      <filter dst_ip="145.208.136.125" dst_port="80" proto="udp" src_port="6699"/>
      <filter dst_ip="145.208.136.125" dst_port="80" proto="tcp" src_port="6699"/>
      <filter dst_ip="145.208.136.125" dst_port="80" proto="udp" src_port="6699"/>
      <filter dst_ip="145.208.136.125" dst_port="137" proto="tcp" src_port="6699"/>
      <filter dst_ip="145.208.136.125" dst_port="137" proto="udp" src_port="6699"/>
      <filter dst_ip="145.208.136.125" dst_port="137" proto="tcp" src_port="6699"/>
      <filter dst_ip="145.208.136.125" dst_port="137" proto="udp" src_port="6699"/>
      <filter dst_ip="145.208.136.125" dst_port="137" proto="tcp" src_port="6699"/>
      <filter dst_ip="145.208.136.125" dst_port="137" proto="udp" src_port="6699"/>
      <filter dst_ip="145.208.136.125" dst_port="137" proto="tcp" src_port="6699"/>
      <filter dst_ip="145.208.136.125" dst_port="137" proto="udp" src_port="6699"/>
      <filter dst_ip="145.208.136.125" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="145.208.136.125" dst_port="80" proto="udp" src_port="80"/>
      <filter dst_ip="145.208.136.125" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="145.208.136.125" dst_port="80" proto="udp" src_port="80"/>
      <filter dst_ip="145.208.136.125" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="145.208.136.125" dst_port="80" proto="udp" src_port="80"/>
      <filter dst_ip="145.208.136.125" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="145.208.136.125" dst_port="80" proto="udp" src_port="80"/>
      <filter dst_ip="145.208.136.125" dst_port="137" proto="tcp" src_port="80"/>
      <filter dst_ip="145.208.136.125" dst_port="137" proto="udp" src_port="80"/>
      <filter dst_ip="145.208.136.125" dst_port="137" proto="tcp" src_port="80"/>
      <filter dst_ip="145.208.136.125" dst_port="137" proto="udp" src_port="80"/>
      <filter dst_ip="145.208.136.125" dst_port="137" proto="tcp" src_port="80"/>
      <filter dst_ip="145.208.136.125" dst_port="137" proto="udp" src_port="80"/>
      <filter dst_ip="145.208.136.125" dst_port="137" proto="tcp" src_port="80"/>
      <filter dst_ip="145.208.136.125" dst_port="137" proto="udp" src_port="80"/>
      <from sec="1036990801" usec="0"/>
      <to sec="1036991482" usec="0"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="145.208.132.128" dst_port="80" proto="tcp" src_ip="145.208.169.141" src_port="6699"/>
      <filter dst_ip="145.208.132.128" dst_port="80" proto="udp" src_ip="145.208.169.141" src_port="6699"/>
      <filter dst_ip="145.208.132.128" dst_port="80" proto="tcp" src_ip="145.208.169.141" src_port="6699"/>
      <filter dst_ip="145.208.132.128" dst_port="80" proto="udp" src_ip="145.208.169.141" src_port="6699"/>
      <filter dst_ip="145.208.132.128" dst_port="80" proto="tcp" src_ip="145.208.169.141" src_port="6699"/>
      <filter dst_ip="145.208.132.128" dst_port="80" proto="udp" src_ip="145.208.169.141" src_port="6699"/>
      <filter dst_ip="145.208.132.128" dst_port="80" proto="tcp" src_ip="145.208.169.141" src_port="6699"/>
      <filter dst_ip="145.208.132.128" dst_port="80" proto="udp" src_ip="145.208.169.141" src_port="6699"/>
      <filter dst_ip="145.208.132.128" dst_port="80" proto="tcp" src_ip="145.208.169.141" src_port="80"/>
      <filter dst_ip="145.208.132.128" dst_port="80" proto="udp" src_ip="145.208.169.141" src_port="80"/>
      <filter dst_ip="145.208.132.128" dst_port="80" proto="tcp" src_ip="145.208.169.141" src_port="80"/>
      <filter dst_ip="145.208.132.128" dst_port="80" proto="udp" src_ip="145.208.169.141" src_port="80"/>
      <filter dst_ip="145.208.132.128" dst_port="80" proto="tcp" src_ip="145.208.169.141" src_port="80"/>
      <filter dst_ip="145.208.132.128" dst_port="80" proto="udp" src_ip="145.208.169.141" src_port="80"/>
      <filter dst_ip="145.208.132.128" dst_port="80" proto="tcp" src_ip="145.208.169.141" src_port="80"/>
      <filter dst_ip="145.208.132.128" dst_port="80" proto="udp" src_ip="145.208.169.141" src_port="80"/>
      <from sec="1036991196" usec="0"/>
      <to sec="1036991207" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="9.224.166.59" dst_port="80" proto="tcp" src_ip="145.208.169.141" src_port="6699"/>
      <filter dst_ip="9.224.166.59" dst_port="80" proto="udp" src_ip="145.208.169.141" src_port="6699"/>
      <filter dst_ip="9.224.166.59" dst_port="80" proto="tcp" src_ip="145.208.169.141" src_port="6699"/>
      <filter dst_ip="9.224.166.59" dst_port="80" proto="udp" src_ip="145.208.169.141" src_port="6699"/>
      <filter dst_ip="9.224.166.59" dst_port="80" proto="tcp" src_ip="145.208.169.141" src_port="6699"/>
      <filter dst_ip="9.224.166.59" dst_port="80" proto="udp" src_ip="145.208.169.141" src_port="6699"/>
      <filter dst_ip="9.224.166.59" dst_port="80" proto="tcp" src_ip="145.208.169.141" src_port="6699"/>
      <filter dst_ip="9.224.166.59" dst_port="80" proto="udp" src_ip="145.208.169.141" src_port="6699"/>
      <filter dst_ip="9.224.166.59" dst_port="80" proto="tcp" src_ip="145.208.169.141" src_port="80"/>
      <filter dst_ip="9.224.166.59" dst_port="80" proto="udp" src_ip="145.208.169.141" src_port="80"/>
      <filter dst_ip="9.224.166.59" dst_port="80" proto="tcp" src_ip="145.208.169.141" src_port="80"/>
      <filter dst_ip="9.224.166.59" dst_port="80" proto="udp" src_ip="145.208.169.141" src_port="80"/>
      <filter dst_ip="9.224.166.59" dst_port="80" proto="tcp" src_ip="145.208.169.141" src_port="80"/>
      <filter dst_ip="9.224.166.59" dst_port="80" proto="udp" src_ip="145.208.169.141" src_port="80"/>
      <filter dst_ip="9.224.166.59" dst_port="80" proto="tcp" src_ip="145.208.169.141" src_port="80"/>
      <filter dst_ip="9.224.166.59" dst_port="80" proto="udp" src_ip="145.208.169.141" src_port="80"/>
      <from sec="1036991205" usec="0"/>
      <to sec="1036991206" usec="0"/>
    </slice>
    <from sec="1036991196" usec="0"/>
    <to sec="1036991207" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="148.242.92.130" dst_port="80" proto="tcp" src_ip="168.100.198.157" src_port="80"/>
      <filter dst_ip="148.242.92.130" dst_port="80" proto="udp" src_ip="168.100.198.157" src_port="80"/>
      <filter dst_ip="148.242.92.130" dst_port="80" proto="tcp" src_ip="168.100.198.157" src_port="80"/>
      <filter dst_ip="148.242.92.130" dst_port="80" proto="udp" src_ip="168.100.198.157" src_port="80"/>
      <filter dst_ip="148.242.92.130" dst_port="80" proto="tcp" src_ip="168.100.198.157" src_port="80"/>
      <filter dst_ip="148.242.92.130" dst_port="80" proto="udp" src_ip="168.100.198.157" src_port="80"/>
      <filter dst_ip="148.242.92.130" dst_port="80" proto="tcp" src_ip="168.100.198.157" src_port="80"/>
      <filter dst_ip="148.242.92.130" dst_port="80" proto="udp" src_ip="168.100.198.157" src_port="80"/>
      <filter dst_ip="148.242.92.130" dst_port="25" proto="tcp" src_ip="168.100.198.157" src_port="80"/>
      <filter dst_ip="148.242.92.130" dst_port="25" proto="udp" src_ip="168.100.198.157" src_port="80"/>
      <filter dst_ip="148.242.92.130" dst_port="25" proto="tcp" src_ip="168.100.198.157" src_port="80"/>
      <filter dst_ip="148.242.92.130" dst_port="25" proto="udp" src_ip="168.100.198.157" src_port="80"/>
      <filter dst_ip="148.242.92.130" dst_port="25" proto="tcp" src_ip="168.100.198.157" src_port="80"/>
      <filter dst_ip="148.242.92.130" dst_port="25" proto="udp" src_ip="168.100.198.157" src_port="80"/>
      <filter dst_ip="148.242.92.130" dst_port="25" proto="tcp" src_ip="168.100.198.157" src_port="80"/>
      <filter dst_ip="148.242.92.130" dst_port="25" proto="udp" src_ip="168.100.198.157" src_port="80"/>
      <from sec="1036990865" usec="0"/>
      <to sec="1036990874" usec="0"/>
    </slice>
    <from sec="1036990862" usec="0"/>
    <to sec="1036990874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="145.208.135.136" dst_port="80" proto="tcp" src_port="6699"/>
      <filter dst_ip="145.208.135.136" dst_port="80" proto="udp" src_port="6699"/>
      <filter dst_ip="145.208.135.136" dst_port="80" proto="tcp" src_port="6699"/>
      <filter dst_ip="145.208.135.136" dst_port="80" proto="udp" src_port="6699"/>
      <filter dst_ip="145.208.135.136" dst_port="80" proto="tcp" src_port="6699"/>
      <filter dst_ip="145.208.135.136" dst_port="80" proto="udp" src_port="6699"/>
      <filter dst_ip="145.208.135.136" dst_port="80" proto="tcp" src_port="6699"/>
      <filter dst_ip="145.208.135.136" dst_port="80" proto="udp" src_port="6699"/>
      <filter dst_ip="145.208.135.136" dst_port="137" proto="tcp" src_port="6699"/>
      <filter dst_ip="145.208.135.136" dst_port="137" proto="udp" src_port="6699"/>
      <filter dst_ip="145.208.135.136" dst_port="137" proto="tcp" src_port="6699"/>
      <filter dst_ip="145.208.135.136" dst_port="137" proto="udp" src_port="6699"/>
      <filter dst_ip="145.208.135.136" dst_port="137" proto="tcp" src_port="6699"/>
      <filter dst_ip="145.208.135.136" dst_port="137" proto="udp" src_port="6699"/>
      <filter dst_ip="145.208.135.136" dst_port="137" proto="tcp" src_port="6699"/>
      <filter dst_ip="145.208.135.136" dst_port="137" proto="udp" src_port="6699"/>
      <from sec="1036990851" usec="0"/>
      <to sec="1036991492" usec="0"/>
    </slice>
    <from sec="1036990851" usec="0"/>
    <to sec="1036991492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="145.208.139.146" dst_port="80" proto="tcp" src_ip="145.208.139.146" src_port="6699"/>
      <filter dst_ip="145.208.139.146" dst_port="80" proto="tcp" src_ip="145.208.139.146" src_port="6699"/>
      <filter dst_ip="145.208.139.146" dst_port="80" proto="tcp" src_ip="145.208.139.146" src_port="6699"/>
      <filter dst_ip="145.208.139.146" dst_port="80" proto="tcp" src_ip="145.208.139.146" src_port="6699"/>
      <from sec="1036990862" usec="0"/>
      <to sec="1036991379" usec="0"/>
    </slice>
    <from sec="1036990862" usec="0"/>
    <to sec="1036991379" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="78.65.28.147" dst_port="80" proto="tcp" src_port="5001"/>
      <filter dst_ip="78.65.28.147" dst_port="80" proto="udp" src_port="5001"/>
      <filter dst_ip="78.65.28.147" dst_port="80" proto="tcp" src_port="5001"/>
      <filter dst_ip="78.65.28.147" dst_port="80" proto="udp" src_port="5001"/>
      <filter dst_ip="78.65.28.147" dst_port="80" proto="tcp" src_port="5001"/>
      <filter dst_ip="78.65.28.147" dst_port="80" proto="udp" src_port="5001"/>
      <filter dst_ip="78.65.28.147" dst_port="80" proto="tcp" src_port="5001"/>
      <filter dst_ip="78.65.28.147" dst_port="80" proto="udp" src_port="5001"/>
      <filter dst_ip="78.65.28.147" dst_port="137" proto="tcp" src_port="5001"/>
      <filter dst_ip="78.65.28.147" dst_port="137" proto="udp" src_port="5001"/>
      <filter dst_ip="78.65.28.147" dst_port="137" proto="tcp" src_port="5001"/>
      <filter dst_ip="78.65.28.147" dst_port="137" proto="udp" src_port="5001"/>
      <filter dst_ip="78.65.28.147" dst_port="137" proto="tcp" src_port="5001"/>
      <filter dst_ip="78.65.28.147" dst_port="137" proto="udp" src_port="5001"/>
      <filter dst_ip="78.65.28.147" dst_port="137" proto="tcp" src_port="5001"/>
      <filter dst_ip="78.65.28.147" dst_port="137" proto="udp" src_port="5001"/>
      <filter dst_ip="78.65.28.147" dst_port="53" proto="tcp" src_port="5001"/>
      <filter dst_ip="78.65.28.147" dst_port="53" proto="udp" src_port="5001"/>
      <filter dst_ip="78.65.28.147" dst_port="53" proto="tcp" src_port="5001"/>
      <filter dst_ip="78.65.28.147" dst_port="53" proto="udp" src_port="5001"/>
      <filter dst_ip="78.65.28.147" dst_port="53" proto="tcp" src_port="5001"/>
      <filter dst_ip="78.65.28.147" dst_port="53" proto="udp" src_port="5001"/>
      <filter dst_ip="78.65.28.147" dst_port="53" proto="tcp" src_port="5001"/>
      <filter dst_ip="78.65.28.147" dst_port="53" proto="udp" src_port="5001"/>
      <from sec="1036990820" usec="0"/>
      <to sec="1036991071" usec="0"/>
    </slice>
    <from sec="1036990820" usec="0"/>
    <to sec="1036991071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="148.242.166.167" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="148.242.166.167" dst_port="80" proto="udp" src_port="80"/>
      <filter dst_ip="148.242.166.167" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="148.242.166.167" dst_port="80" proto="udp" src_port="80"/>
      <filter dst_ip="148.242.166.167" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="148.242.166.167" dst_port="80" proto="udp" src_port="80"/>
      <filter dst_ip="148.242.166.167" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="148.242.166.167" dst_port="80" proto="udp" src_port="80"/>
      <filter dst_ip="148.242.166.167" dst_port="53" proto="tcp" src_port="80"/>
      <filter dst_ip="148.242.166.167" dst_port="53" proto="udp" src_port="80"/>
      <filter dst_ip="148.242.166.167" dst_port="53" proto="tcp" src_port="80"/>
      <filter dst_ip="148.242.166.167" dst_port="53" proto="udp" src_port="80"/>
      <filter dst_ip="148.242.166.167" dst_port="53" proto="tcp" src_port="80"/>
      <filter dst_ip="148.242.166.167" dst_port="53" proto="udp" src_port="80"/>
      <filter dst_ip="148.242.166.167" dst_port="53" proto="tcp" src_port="80"/>
      <filter dst_ip="148.242.166.167" dst_port="53" proto="udp" src_port="80"/>
      <from sec="1036991020" usec="0"/>
      <to sec="1036991254" usec="0"/>
    </slice>
    <from sec="1036991020" usec="0"/>
    <to sec="1036991254" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.119.134.171" dst_port="80" proto="tcp" src_ip="214.119.134.171" src_port="80"/>
      <filter dst_ip="214.119.134.171" dst_port="80" proto="udp" src_ip="214.119.134.171" src_port="80"/>
      <filter dst_ip="214.119.134.171" dst_port="80" proto="tcp" src_ip="214.119.134.171" src_port="80"/>
      <filter dst_ip="214.119.134.171" dst_port="80" proto="udp" src_ip="214.119.134.171" src_port="80"/>
      <filter dst_ip="214.119.134.171" dst_port="80" proto="tcp" src_ip="214.119.134.171" src_port="80"/>
      <filter dst_ip="214.119.134.171" dst_port="80" proto="udp" src_ip="214.119.134.171" src_port="80"/>
      <filter dst_ip="214.119.134.171" dst_port="80" proto="tcp" src_ip="214.119.134.171" src_port="80"/>
      <filter dst_ip="214.119.134.171" dst_port="80" proto="udp" src_ip="214.119.134.171" src_port="80"/>
      <from sec="1036991040" usec="0"/>
      <to sec="1036991502" usec="0"/>
    </slice>
    <from sec="1036991040" usec="0"/>
    <to sec="1036991502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="145.208.128.174" dst_port="80" proto="tcp" src_ip="145.208.128.174" src_port="80"/>
      <filter dst_ip="145.208.128.174" dst_port="80" proto="udp" src_ip="145.208.128.174" src_port="80"/>
      <filter dst_ip="145.208.128.174" dst_port="80" proto="tcp" src_ip="145.208.128.174" src_port="80"/>
      <filter dst_ip="145.208.128.174" dst_port="80" proto="udp" src_ip="145.208.128.174" src_port="80"/>
      <filter dst_ip="145.208.128.174" dst_port="80" proto="tcp" src_ip="145.208.128.174" src_port="80"/>
      <filter dst_ip="145.208.128.174" dst_port="80" proto="udp" src_ip="145.208.128.174" src_port="80"/>
      <filter dst_ip="145.208.128.174" dst_port="80" proto="tcp" src_ip="145.208.128.174" src_port="80"/>
      <filter dst_ip="145.208.128.174" dst_port="80" proto="udp" src_ip="145.208.128.174" src_port="80"/>
      <filter dst_ip="145.208.128.174" dst_port="53" proto="tcp" src_ip="145.208.128.174" src_port="80"/>
      <filter dst_ip="145.208.128.174" dst_port="53" proto="udp" src_ip="145.208.128.174" src_port="80"/>
      <filter dst_ip="145.208.128.174" dst_port="53" proto="tcp" src_ip="145.208.128.174" src_port="80"/>
      <filter dst_ip="145.208.128.174" dst_port="53" proto="udp" src_ip="145.208.128.174" src_port="80"/>
      <filter dst_ip="145.208.128.174" dst_port="53" proto="tcp" src_ip="145.208.128.174" src_port="80"/>
      <filter dst_ip="145.208.128.174" dst_port="53" proto="udp" src_ip="145.208.128.174" src_port="80"/>
      <filter dst_ip="145.208.128.174" dst_port="53" proto="tcp" src_ip="145.208.128.174" src_port="80"/>
      <filter dst_ip="145.208.128.174" dst_port="53" proto="udp" src_ip="145.208.128.174" src_port="80"/>
      <filter dst_ip="145.208.128.174" dst_port="137" proto="tcp" src_ip="145.208.128.174" src_port="80"/>
      <filter dst_ip="145.208.128.174" dst_port="137" proto="udp" src_ip="145.208.128.174" src_port="80"/>
      <filter dst_ip="145.208.128.174" dst_port="137" proto="tcp" src_ip="145.208.128.174" src_port="80"/>
      <filter dst_ip="145.208.128.174" dst_port="137" proto="udp" src_ip="145.208.128.174" src_port="80"/>
      <filter dst_ip="145.208.128.174" dst_port="137" proto="tcp" src_ip="145.208.128.174" src_port="80"/>
      <filter dst_ip="145.208.128.174" dst_port="137" proto="udp" src_ip="145.208.128.174" src_port="80"/>
      <filter dst_ip="145.208.128.174" dst_port="137" proto="tcp" src_ip="145.208.128.174" src_port="80"/>
      <filter dst_ip="145.208.128.174" dst_port="137" proto="udp" src_ip="145.208.128.174" src_port="80"/>
      <from sec="1036990841" usec="0"/>
      <to sec="1036990848" usec="0"/>
    </slice>
    <from sec="1036990840" usec="0"/>
    <to sec="1036990852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="201.75.67.213" dst_port="80" proto="tcp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="80" proto="udp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="80" proto="tcp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="80" proto="udp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="80" proto="tcp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="80" proto="udp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="80" proto="tcp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="80" proto="udp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="137" proto="tcp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="137" proto="udp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="137" proto="tcp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="137" proto="udp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="137" proto="tcp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="137" proto="udp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="137" proto="tcp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="137" proto="udp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="6699" proto="tcp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="6699" proto="udp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="6699" proto="tcp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="6699" proto="udp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="6699" proto="tcp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="6699" proto="udp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="6699" proto="tcp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="6699" proto="udp" src_port="1025"/>
      <from sec="1036991187" usec="0"/>
      <to sec="1036991250" usec="0"/>
    </slice>
    <from sec="1036991187" usec="0"/>
    <to sec="1036991250" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.119.132.239" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="80" proto="udp" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="80" proto="udp" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="80" proto="udp" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="80" proto="udp" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="137" proto="tcp" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="137" proto="udp" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="137" proto="tcp" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="137" proto="udp" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="137" proto="tcp" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="137" proto="udp" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="137" proto="tcp" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="137" proto="udp" src_port="80"/>
      <from sec="1036990947" usec="0"/>
      <to sec="1036990969" usec="0"/>
    </slice>
    <from sec="1036990947" usec="0"/>
    <to sec="1036990969" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="77.133.144.129" dst_port="80" proto="tcp" src_ip="145.3.107.31" src_port="2154"/>
      <filter dst_ip="77.133.144.129" dst_port="443" proto="tcp" src_ip="145.3.107.31" src_port="2154"/>
      <filter dst_ip="77.133.144.129" dst_port="80" proto="tcp" src_ip="145.3.107.31" src_port="2151"/>
      <filter dst_ip="77.133.144.129" dst_port="443" proto="tcp" src_ip="145.3.107.31" src_port="2151"/>
      <filter dst_ip="201.137.132.55" dst_port="80" proto="tcp" src_ip="145.3.107.31" src_port="2154"/>
      <filter dst_ip="201.137.132.55" dst_port="443" proto="tcp" src_ip="145.3.107.31" src_port="2154"/>
      <filter dst_ip="201.137.132.55" dst_port="80" proto="tcp" src_ip="145.3.107.31" src_port="2151"/>
      <filter dst_ip="201.137.132.55" dst_port="443" proto="tcp" src_ip="145.3.107.31" src_port="2151"/>
      <filter dst_ip="201.137.132.175" dst_port="80" proto="tcp" src_ip="145.3.107.31" src_port="2154"/>
      <filter dst_ip="201.137.132.175" dst_port="443" proto="tcp" src_ip="145.3.107.31" src_port="2154"/>
      <filter dst_ip="201.137.132.175" dst_port="80" proto="tcp" src_ip="145.3.107.31" src_port="2151"/>
      <filter dst_ip="201.137.132.175" dst_port="443" proto="tcp" src_ip="145.3.107.31" src_port="2151"/>
      <from sec="1036990929" usec="0"/>
      <to sec="1036990942" usec="0"/>
    </slice>
    <from sec="1036990929" usec="0"/>
    <to sec="1036990942" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,504,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="9.50.40.159" dst_port="443" proto="tcp" src_ip="133.213.122.33" src_port="4040"/>
      <from sec="1036991314" usec="0"/>
      <to sec="1036991317" usec="0"/>
    </slice>
    <from sec="1036991314" usec="0"/>
    <to sec="1036991318" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="78.200.20.173" dst_port="80" proto="tcp" src_ip="215.156.79.69" src_port="1027"/>
      <filter dst_ip="78.200.20.173" dst_port="80" proto="udp" src_ip="215.156.79.69" src_port="1027"/>
      <filter dst_ip="78.200.20.173" dst_port="137" proto="tcp" src_ip="215.156.79.69" src_port="1027"/>
      <filter dst_ip="78.200.20.173" dst_port="137" proto="udp" src_ip="215.156.79.69" src_port="1027"/>
      <from sec="1036990925" usec="0"/>
      <to sec="1036991490" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="78.200.20.173" dst_port="80" proto="tcp" src_ip="202.6.183.69" src_port="1027"/>
      <filter dst_ip="78.200.20.173" dst_port="80" proto="udp" src_ip="202.6.183.69" src_port="1027"/>
      <filter dst_ip="78.200.20.173" dst_port="137" proto="tcp" src_ip="202.6.183.69" src_port="1027"/>
      <filter dst_ip="78.200.20.173" dst_port="137" proto="udp" src_ip="202.6.183.69" src_port="1027"/>
      <from sec="1036990923" usec="0"/>
      <to sec="1036990929" usec="0"/>
    </slice>
    <from sec="1036990923" usec="0"/>
    <to sec="1036991490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="137.6.46.194" dst_port="80" proto="tcp" src_ip="145.208.129.122" src_port="6699"/>
      <filter dst_ip="137.6.46.194" dst_port="80" proto="udp" src_ip="145.208.129.122" src_port="6699"/>
      <filter dst_ip="137.6.46.194" dst_port="137" proto="tcp" src_ip="145.208.129.122" src_port="6699"/>
      <filter dst_ip="137.6.46.194" dst_port="137" proto="udp" src_ip="145.208.129.122" src_port="6699"/>
      <filter dst_ip="76.161.154.187" dst_port="80" proto="tcp" src_ip="145.208.129.122" src_port="6699"/>
      <filter dst_ip="76.161.154.187" dst_port="80" proto="udp" src_ip="145.208.129.122" src_port="6699"/>
      <filter dst_ip="76.161.154.187" dst_port="137" proto="tcp" src_ip="145.208.129.122" src_port="6699"/>
      <filter dst_ip="76.161.154.187" dst_port="137" proto="udp" src_ip="145.208.129.122" src_port="6699"/>
      <from sec="1036991420" usec="0"/>
      <to sec="1036991431" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="137.6.46.194" dst_port="80" proto="tcp" src_ip="148.242.5.52" src_port="6699"/>
      <filter dst_ip="137.6.46.194" dst_port="80" proto="udp" src_ip="148.242.5.52" src_port="6699"/>
      <filter dst_ip="137.6.46.194" dst_port="137" proto="tcp" src_ip="148.242.5.52" src_port="6699"/>
      <filter dst_ip="137.6.46.194" dst_port="137" proto="udp" src_ip="148.242.5.52" src_port="6699"/>
      <filter dst_ip="76.161.154.187" dst_port="80" proto="tcp" src_ip="148.242.5.52" src_port="6699"/>
      <filter dst_ip="76.161.154.187" dst_port="80" proto="udp" src_ip="148.242.5.52" src_port="6699"/>
      <filter dst_ip="76.161.154.187" dst_port="137" proto="tcp" src_ip="148.242.5.52" src_port="6699"/>
      <filter dst_ip="76.161.154.187" dst_port="137" proto="udp" src_ip="148.242.5.52" src_port="6699"/>
      <from sec="1036991422" usec="0"/>
      <to sec="1036991427" usec="0"/>
    </slice>
    <from sec="1036991420" usec="0"/>
    <to sec="1036991431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="211.197.38.186" dst_port="80" proto="tcp" src_ip="148.242.5.216" src_port="6699"/>
      <filter dst_ip="211.197.38.186" dst_port="80" proto="udp" src_ip="148.242.5.216" src_port="6699"/>
      <filter dst_ip="211.197.38.186" dst_port="137" proto="tcp" src_ip="148.242.5.216" src_port="6699"/>
      <filter dst_ip="211.197.38.186" dst_port="137" proto="udp" src_ip="148.242.5.216" src_port="6699"/>
      <from sec="1036991281" usec="0"/>
      <to sec="1036991511" usec="0"/>
    </slice>
    <from sec="1036991281" usec="0"/>
    <to sec="1036991512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="76.161.152.174" dst_port="80" proto="tcp" src_ip="148.242.130.227" src_port="80"/>
      <filter dst_ip="9.142.141.110" dst_port="80" proto="tcp" src_ip="148.242.130.227" src_port="80"/>
      <from sec="1036991301" usec="0"/>
      <to sec="1036991306" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="76.161.152.174" dst_port="80" proto="tcp" src_ip="148.242.170.233" src_port="80"/>
      <filter dst_ip="9.142.141.110" dst_port="80" proto="tcp" src_ip="148.242.170.233" src_port="80"/>
      <from sec="1036991302" usec="0"/>
      <to sec="1036991306" usec="0"/>
    </slice>
    <from sec="1036991300" usec="0"/>
    <to sec="1036991307" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="148.242.42.16" dst_port="80" proto="tcp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.42.16" dst_port="80" proto="udp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.42.16" dst_port="80" proto="tcp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.42.16" dst_port="80" proto="udp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.42.16" dst_port="80" proto="tcp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.42.16" dst_port="80" proto="udp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.42.16" dst_port="80" proto="tcp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.42.16" dst_port="80" proto="udp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.42.16" dst_port="80" proto="tcp" src_ip="168.100.161.70" src_port="80"/>
      <filter dst_ip="148.242.42.16" dst_port="80" proto="udp" src_ip="168.100.161.70" src_port="80"/>
      <filter dst_ip="148.242.42.16" dst_port="80" proto="tcp" src_ip="168.100.161.70" src_port="80"/>
      <filter dst_ip="148.242.42.16" dst_port="80" proto="udp" src_ip="168.100.161.70" src_port="80"/>
      <filter dst_ip="148.242.42.16" dst_port="80" proto="tcp" src_ip="168.100.161.70" src_port="80"/>
      <filter dst_ip="148.242.42.16" dst_port="80" proto="udp" src_ip="168.100.161.70" src_port="80"/>
      <filter dst_ip="148.242.42.16" dst_port="80" proto="tcp" src_ip="168.100.161.70" src_port="80"/>
      <filter dst_ip="148.242.42.16" dst_port="80" proto="udp" src_ip="168.100.161.70" src_port="80"/>
      <from sec="1036991381" usec="0"/>
      <to sec="1036991390" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="201.38.192.45" dst_port="80" proto="tcp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="201.38.192.45" dst_port="80" proto="udp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="201.38.192.45" dst_port="80" proto="tcp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="201.38.192.45" dst_port="80" proto="udp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="201.38.192.45" dst_port="80" proto="tcp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="201.38.192.45" dst_port="80" proto="udp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="201.38.192.45" dst_port="80" proto="tcp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="201.38.192.45" dst_port="80" proto="udp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="201.38.192.45" dst_port="80" proto="tcp" src_ip="168.100.161.70" src_port="80"/>
      <filter dst_ip="201.38.192.45" dst_port="80" proto="udp" src_ip="168.100.161.70" src_port="80"/>
      <filter dst_ip="201.38.192.45" dst_port="80" proto="tcp" src_ip="168.100.161.70" src_port="80"/>
      <filter dst_ip="201.38.192.45" dst_port="80" proto="udp" src_ip="168.100.161.70" src_port="80"/>
      <filter dst_ip="201.38.192.45" dst_port="80" proto="tcp" src_ip="168.100.161.70" src_port="80"/>
      <filter dst_ip="201.38.192.45" dst_port="80" proto="udp" src_ip="168.100.161.70" src_port="80"/>
      <filter dst_ip="201.38.192.45" dst_port="80" proto="tcp" src_ip="168.100.161.70" src_port="80"/>
      <filter dst_ip="201.38.192.45" dst_port="80" proto="udp" src_ip="168.100.161.70" src_port="80"/>
      <from sec="1036991379" usec="0"/>
      <to sec="1036991390" usec="0"/>
    </slice>
    <from sec="1036991378" usec="0"/>
    <to sec="1036991390" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="209.137.160.139" dst_port="80" proto="tcp" src_port="5001"/>
      <filter dst_ip="209.137.160.139" dst_port="80" proto="udp" src_port="5001"/>
      <filter dst_ip="209.137.160.139" dst_port="80" proto="tcp" src_port="5001"/>
      <filter dst_ip="209.137.160.139" dst_port="80" proto="udp" src_port="5001"/>
      <filter dst_ip="209.137.160.139" dst_port="80" proto="tcp" src_port="5001"/>
      <filter dst_ip="209.137.160.139" dst_port="80" proto="udp" src_port="5001"/>
      <filter dst_ip="209.137.160.139" dst_port="80" proto="tcp" src_port="5001"/>
      <filter dst_ip="209.137.160.139" dst_port="80" proto="udp" src_port="5001"/>
      <from sec="1036990830" usec="0"/>
      <to sec="1036990841" usec="0"/>
    </slice>
    <from sec="1036990830" usec="0"/>
    <to sec="1036990841" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="76.161.154.187" dst_port="80" proto="tcp" src_ip="76.161.154.187"/>
      <filter dst_ip="76.161.154.187" dst_port="80" proto="udp" src_ip="76.161.154.187"/>
      <filter dst_ip="76.161.154.187" dst_port="80" proto="tcp" src_ip="76.161.154.187"/>
      <filter dst_ip="76.161.154.187" dst_port="80" proto="udp" src_ip="76.161.154.187"/>
      <filter dst_ip="76.161.154.187" dst_port="80" proto="tcp" src_ip="76.161.154.187"/>
      <filter dst_ip="76.161.154.187" dst_port="80" proto="udp" src_ip="76.161.154.187"/>
      <filter dst_ip="76.161.154.187" dst_port="80" proto="tcp" src_ip="76.161.154.187"/>
      <filter dst_ip="76.161.154.187" dst_port="80" proto="udp" src_ip="76.161.154.187"/>
      <filter dst_ip="76.161.154.187" dst_port="137" proto="tcp" src_ip="76.161.154.187"/>
      <filter dst_ip="76.161.154.187" dst_port="137" proto="udp" src_ip="76.161.154.187"/>
      <filter dst_ip="76.161.154.187" dst_port="137" proto="tcp" src_ip="76.161.154.187"/>
      <filter dst_ip="76.161.154.187" dst_port="137" proto="udp" src_ip="76.161.154.187"/>
      <filter dst_ip="76.161.154.187" dst_port="137" proto="tcp" src_ip="76.161.154.187"/>
      <filter dst_ip="76.161.154.187" dst_port="137" proto="udp" src_ip="76.161.154.187"/>
      <filter dst_ip="76.161.154.187" dst_port="137" proto="tcp" src_ip="76.161.154.187"/>
      <filter dst_ip="76.161.154.187" dst_port="137" proto="udp" src_ip="76.161.154.187"/>
      <from sec="1036990842" usec="0"/>
      <to sec="1036991482" usec="0"/>
    </slice>
    <from sec="1036990842" usec="0"/>
    <to sec="1036991482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="76.161.167.190" dst_port="80" proto="tcp" src_ip="76.161.167.190"/>
      <filter dst_ip="76.161.167.190" dst_port="80" proto="udp" src_ip="76.161.167.190"/>
      <filter dst_ip="76.161.167.190" dst_port="80" proto="tcp" src_ip="76.161.167.190"/>
      <filter dst_ip="76.161.167.190" dst_port="80" proto="udp" src_ip="76.161.167.190"/>
      <filter dst_ip="76.161.167.190" dst_port="80" proto="tcp" src_ip="76.161.167.190"/>
      <filter dst_ip="76.161.167.190" dst_port="80" proto="udp" src_ip="76.161.167.190"/>
      <filter dst_ip="76.161.167.190" dst_port="80" proto="tcp" src_ip="76.161.167.190"/>
      <filter dst_ip="76.161.167.190" dst_port="80" proto="udp" src_ip="76.161.167.190"/>
      <filter dst_ip="76.161.167.190" dst_port="25" proto="tcp" src_ip="76.161.167.190"/>
      <filter dst_ip="76.161.167.190" dst_port="25" proto="udp" src_ip="76.161.167.190"/>
      <filter dst_ip="76.161.167.190" dst_port="25" proto="tcp" src_ip="76.161.167.190"/>
      <filter dst_ip="76.161.167.190" dst_port="25" proto="udp" src_ip="76.161.167.190"/>
      <filter dst_ip="76.161.167.190" dst_port="25" proto="tcp" src_ip="76.161.167.190"/>
      <filter dst_ip="76.161.167.190" dst_port="25" proto="udp" src_ip="76.161.167.190"/>
      <filter dst_ip="76.161.167.190" dst_port="25" proto="tcp" src_ip="76.161.167.190"/>
      <filter dst_ip="76.161.167.190" dst_port="25" proto="udp" src_ip="76.161.167.190"/>
      <from sec="1036991092" usec="0"/>
      <to sec="1036991206" usec="0"/>
    </slice>
    <from sec="1036991092" usec="0"/>
    <to sec="1036991206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="197.242.102.212" dst_port="80" proto="tcp" src_ip="197.242.102.212"/>
      <filter dst_ip="197.242.102.212" dst_port="80" proto="udp" src_ip="197.242.102.212"/>
      <filter dst_ip="197.242.102.212" dst_port="80" proto="tcp" src_ip="197.242.102.212"/>
      <filter dst_ip="197.242.102.212" dst_port="80" proto="udp" src_ip="197.242.102.212"/>
      <filter dst_ip="197.242.102.212" dst_port="80" proto="tcp" src_ip="197.242.102.212"/>
      <filter dst_ip="197.242.102.212" dst_port="80" proto="udp" src_ip="197.242.102.212"/>
      <filter dst_ip="197.242.102.212" dst_port="80" proto="tcp" src_ip="197.242.102.212"/>
      <filter dst_ip="197.242.102.212" dst_port="80" proto="udp" src_ip="197.242.102.212"/>
      <filter dst_ip="197.242.102.212" dst_port="53" proto="tcp" src_ip="197.242.102.212"/>
      <filter dst_ip="197.242.102.212" dst_port="53" proto="udp" src_ip="197.242.102.212"/>
      <filter dst_ip="197.242.102.212" dst_port="53" proto="tcp" src_ip="197.242.102.212"/>
      <filter dst_ip="197.242.102.212" dst_port="53" proto="udp" src_ip="197.242.102.212"/>
      <filter dst_ip="197.242.102.212" dst_port="53" proto="tcp" src_ip="197.242.102.212"/>
      <filter dst_ip="197.242.102.212" dst_port="53" proto="udp" src_ip="197.242.102.212"/>
      <filter dst_ip="197.242.102.212" dst_port="53" proto="tcp" src_ip="197.242.102.212"/>
      <filter dst_ip="197.242.102.212" dst_port="53" proto="udp" src_ip="197.242.102.212"/>
      <from sec="1036990801" usec="0"/>
      <to sec="1036990893" usec="0"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036990895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24844,2.7534,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_53{
style=filled;
color=gray75;
292[label="9.241.118.3s;1pkt 1fpkt", shape=rectangle, color=red];
293[label="199.17.162.3s;1pkt 1fpkt", shape=rectangle, color=red];
294[label="77.153.210.3s;1pkt 1fpkt", shape=rectangle, color=red];
1257[label="214.194.182.241;d;1pkt 1fpkt", shape=diamond, color=yellow];
1259[label="148.242.22.3;s;71pkt 71fpkt", shape=diamond, color=yellow];
3051[label="214.194.182.241;d;1pkt 1fpkt", shape=hexagon, color=black];
stat53[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.242.22.3:*, 217.164.72.220:80}[46.4789%]&lt;BR/&gt;{148.242.22.3:*, 217.164.72.238:80}[22.5352%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.7895%)&lt;BR/&gt; 1755: (3.94737%)&lt;BR/&gt; 1460: (3.94737%)&lt;BR/&gt; 1024: (3.94737%)&lt;BR/&gt; 53: (3.94737%)&gt;];
}
292--293[label="1;1pkt 1fpkt"];
292--294[label="1;1pkt 1fpkt"];
292--1257[label="1;1pkt 1fpkt"];
292--1259[label="1;1pkt 1fpkt"];
292--3051[label="1;1pkt 1fpkt"];
293--294[label="1;1pkt 1fpkt"];
293--1257[label="1;1pkt 1fpkt"];
293--1259[label="1;1pkt 1fpkt"];
293--3051[label="1;1pkt 1fpkt"];
294--1257[label="1;1pkt 1fpkt"];
294--1259[label="1;1pkt 1fpkt"];
294--3051[label="1;1pkt 1fpkt"];
1257--1259[label="1;1pkt 1fpkt"];
1257--3051[label="1;1pkt 1fpkt"];
1259--3051[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="217.164.72.220" dst_port="80" src_ip="148.242.22.3"/>
      <filter dst_ip="217.164.72.238" dst_port="80" src_ip="148.242.22.3"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="215.172.24.165" dst_port="137" proto="tcp" src_ip="205.214.152.5" src_port="80"/>
      <filter dst_ip="215.172.24.165" dst_port="137" proto="udp" src_ip="205.214.152.5" src_port="80"/>
      <filter dst_ip="215.172.24.165" dst_port="56515" proto="tcp" src_ip="205.214.152.5" src_port="80"/>
      <filter dst_ip="215.172.24.165" dst_port="56515" proto="udp" src_ip="205.214.152.5" src_port="80"/>
      <filter dst_ip="215.172.24.165" dst_port="5739" proto="tcp" src_ip="205.214.152.5" src_port="80"/>
      <filter dst_ip="215.172.24.165" dst_port="5739" proto="udp" src_ip="205.214.152.5" src_port="80"/>
      <filter dst_ip="215.172.24.165" dst_port="137" proto="tcp" src_ip="205.214.152.5" src_port="1026"/>
      <filter dst_ip="215.172.24.165" dst_port="137" proto="udp" src_ip="205.214.152.5" src_port="1026"/>
      <filter dst_ip="215.172.24.165" dst_port="56515" proto="tcp" src_ip="205.214.152.5" src_port="1026"/>
      <filter dst_ip="215.172.24.165" dst_port="56515" proto="udp" src_ip="205.214.152.5" src_port="1026"/>
      <filter dst_ip="215.172.24.165" dst_port="5739" proto="tcp" src_ip="205.214.152.5" src_port="1026"/>
      <filter dst_ip="215.172.24.165" dst_port="5739" proto="udp" src_ip="205.214.152.5" src_port="1026"/>
      <filter dst_ip="145.208.139.72" dst_port="137" proto="tcp" src_ip="205.214.152.5" src_port="80"/>
      <filter dst_ip="145.208.139.72" dst_port="137" proto="udp" src_ip="205.214.152.5" src_port="80"/>
      <filter dst_ip="145.208.139.72" dst_port="56515" proto="tcp" src_ip="205.214.152.5" src_port="80"/>
      <filter dst_ip="145.208.139.72" dst_port="56515" proto="udp" src_ip="205.214.152.5" src_port="80"/>
      <filter dst_ip="145.208.139.72" dst_port="5739" proto="tcp" src_ip="205.214.152.5" src_port="80"/>
      <filter dst_ip="145.208.139.72" dst_port="5739" proto="udp" src_ip="205.214.152.5" src_port="80"/>
      <filter dst_ip="145.208.139.72" dst_port="137" proto="tcp" src_ip="205.214.152.5" src_port="1026"/>
      <filter dst_ip="145.208.139.72" dst_port="137" proto="udp" src_ip="205.214.152.5" src_port="1026"/>
      <filter dst_ip="145.208.139.72" dst_port="56515" proto="tcp" src_ip="205.214.152.5" src_port="1026"/>
      <filter dst_ip="145.208.139.72" dst_port="56515" proto="udp" src_ip="205.214.152.5" src_port="1026"/>
      <filter dst_ip="145.208.139.72" dst_port="5739" proto="tcp" src_ip="205.214.152.5" src_port="1026"/>
      <filter dst_ip="145.208.139.72" dst_port="5739" proto="udp" src_ip="205.214.152.5" src_port="1026"/>
      <filter dst_ip="214.119.132.239" dst_port="137" proto="tcp" src_ip="205.214.152.5" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="137" proto="udp" src_ip="205.214.152.5" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="56515" proto="tcp" src_ip="205.214.152.5" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="56515" proto="udp" src_ip="205.214.152.5" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="5739" proto="tcp" src_ip="205.214.152.5" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="5739" proto="udp" src_ip="205.214.152.5" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="137" proto="tcp" src_ip="205.214.152.5" src_port="1026"/>
      <filter dst_ip="214.119.132.239" dst_port="137" proto="udp" src_ip="205.214.152.5" src_port="1026"/>
      <filter dst_ip="214.119.132.239" dst_port="56515" proto="tcp" src_ip="205.214.152.5" src_port="1026"/>
      <filter dst_ip="214.119.132.239" dst_port="56515" proto="udp" src_ip="205.214.152.5" src_port="1026"/>
      <filter dst_ip="214.119.132.239" dst_port="5739" proto="tcp" src_ip="205.214.152.5" src_port="1026"/>
      <filter dst_ip="214.119.132.239" dst_port="5739" proto="udp" src_ip="205.214.152.5" src_port="1026"/>
      <from sec="1036991500" usec="0"/>
      <to sec="1036991505" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="215.172.24.165" dst_port="137" proto="tcp" src_ip="198.69.52.5" src_port="80"/>
      <filter dst_ip="215.172.24.165" dst_port="137" proto="udp" src_ip="198.69.52.5" src_port="80"/>
      <filter dst_ip="215.172.24.165" dst_port="56515" proto="tcp" src_ip="198.69.52.5" src_port="80"/>
      <filter dst_ip="215.172.24.165" dst_port="56515" proto="udp" src_ip="198.69.52.5" src_port="80"/>
      <filter dst_ip="215.172.24.165" dst_port="5739" proto="tcp" src_ip="198.69.52.5" src_port="80"/>
      <filter dst_ip="215.172.24.165" dst_port="5739" proto="udp" src_ip="198.69.52.5" src_port="80"/>
      <filter dst_ip="215.172.24.165" dst_port="137" proto="tcp" src_ip="198.69.52.5" src_port="1026"/>
      <filter dst_ip="215.172.24.165" dst_port="137" proto="udp" src_ip="198.69.52.5" src_port="1026"/>
      <filter dst_ip="215.172.24.165" dst_port="56515" proto="tcp" src_ip="198.69.52.5" src_port="1026"/>
      <filter dst_ip="215.172.24.165" dst_port="56515" proto="udp" src_ip="198.69.52.5" src_port="1026"/>
      <filter dst_ip="215.172.24.165" dst_port="5739" proto="tcp" src_ip="198.69.52.5" src_port="1026"/>
      <filter dst_ip="215.172.24.165" dst_port="5739" proto="udp" src_ip="198.69.52.5" src_port="1026"/>
      <filter dst_ip="145.208.139.72" dst_port="137" proto="tcp" src_ip="198.69.52.5" src_port="80"/>
      <filter dst_ip="145.208.139.72" dst_port="137" proto="udp" src_ip="198.69.52.5" src_port="80"/>
      <filter dst_ip="145.208.139.72" dst_port="56515" proto="tcp" src_ip="198.69.52.5" src_port="80"/>
      <filter dst_ip="145.208.139.72" dst_port="56515" proto="udp" src_ip="198.69.52.5" src_port="80"/>
      <filter dst_ip="145.208.139.72" dst_port="5739" proto="tcp" src_ip="198.69.52.5" src_port="80"/>
      <filter dst_ip="145.208.139.72" dst_port="5739" proto="udp" src_ip="198.69.52.5" src_port="80"/>
      <filter dst_ip="145.208.139.72" dst_port="137" proto="tcp" src_ip="198.69.52.5" src_port="1026"/>
      <filter dst_ip="145.208.139.72" dst_port="137" proto="udp" src_ip="198.69.52.5" src_port="1026"/>
      <filter dst_ip="145.208.139.72" dst_port="56515" proto="tcp" src_ip="198.69.52.5" src_port="1026"/>
      <filter dst_ip="145.208.139.72" dst_port="56515" proto="udp" src_ip="198.69.52.5" src_port="1026"/>
      <filter dst_ip="145.208.139.72" dst_port="5739" proto="tcp" src_ip="198.69.52.5" src_port="1026"/>
      <filter dst_ip="145.208.139.72" dst_port="5739" proto="udp" src_ip="198.69.52.5" src_port="1026"/>
      <filter dst_ip="214.119.132.239" dst_port="137" proto="tcp" src_ip="198.69.52.5" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="137" proto="udp" src_ip="198.69.52.5" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="56515" proto="tcp" src_ip="198.69.52.5" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="56515" proto="udp" src_ip="198.69.52.5" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="5739" proto="tcp" src_ip="198.69.52.5" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="5739" proto="udp" src_ip="198.69.52.5" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="137" proto="tcp" src_ip="198.69.52.5" src_port="1026"/>
      <filter dst_ip="214.119.132.239" dst_port="137" proto="udp" src_ip="198.69.52.5" src_port="1026"/>
      <filter dst_ip="214.119.132.239" dst_port="56515" proto="tcp" src_ip="198.69.52.5" src_port="1026"/>
      <filter dst_ip="214.119.132.239" dst_port="56515" proto="udp" src_ip="198.69.52.5" src_port="1026"/>
      <filter dst_ip="214.119.132.239" dst_port="5739" proto="tcp" src_ip="198.69.52.5" src_port="1026"/>
      <filter dst_ip="214.119.132.239" dst_port="5739" proto="udp" src_ip="198.69.52.5" src_port="1026"/>
      <from sec="1036991500" usec="0"/>
      <to sec="1036991505" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="215.172.24.165" dst_port="137" proto="tcp" src_ip="209.137.180.5" src_port="80"/>
      <filter dst_ip="215.172.24.165" dst_port="137" proto="udp" src_ip="209.137.180.5" src_port="80"/>
      <filter dst_ip="215.172.24.165" dst_port="56515" proto="tcp" src_ip="209.137.180.5" src_port="80"/>
      <filter dst_ip="215.172.24.165" dst_port="56515" proto="udp" src_ip="209.137.180.5" src_port="80"/>
      <filter dst_ip="215.172.24.165" dst_port="5739" proto="tcp" src_ip="209.137.180.5" src_port="80"/>
      <filter dst_ip="215.172.24.165" dst_port="5739" proto="udp" src_ip="209.137.180.5" src_port="80"/>
      <filter dst_ip="215.172.24.165" dst_port="137" proto="tcp" src_ip="209.137.180.5" src_port="1026"/>
      <filter dst_ip="215.172.24.165" dst_port="137" proto="udp" src_ip="209.137.180.5" src_port="1026"/>
      <filter dst_ip="215.172.24.165" dst_port="56515" proto="tcp" src_ip="209.137.180.5" src_port="1026"/>
      <filter dst_ip="215.172.24.165" dst_port="56515" proto="udp" src_ip="209.137.180.5" src_port="1026"/>
      <filter dst_ip="215.172.24.165" dst_port="5739" proto="tcp" src_ip="209.137.180.5" src_port="1026"/>
      <filter dst_ip="215.172.24.165" dst_port="5739" proto="udp" src_ip="209.137.180.5" src_port="1026"/>
      <filter dst_ip="145.208.139.72" dst_port="137" proto="tcp" src_ip="209.137.180.5" src_port="80"/>
      <filter dst_ip="145.208.139.72" dst_port="137" proto="udp" src_ip="209.137.180.5" src_port="80"/>
      <filter dst_ip="145.208.139.72" dst_port="56515" proto="tcp" src_ip="209.137.180.5" src_port="80"/>
      <filter dst_ip="145.208.139.72" dst_port="56515" proto="udp" src_ip="209.137.180.5" src_port="80"/>
      <filter dst_ip="145.208.139.72" dst_port="5739" proto="tcp" src_ip="209.137.180.5" src_port="80"/>
      <filter dst_ip="145.208.139.72" dst_port="5739" proto="udp" src_ip="209.137.180.5" src_port="80"/>
      <filter dst_ip="145.208.139.72" dst_port="137" proto="tcp" src_ip="209.137.180.5" src_port="1026"/>
      <filter dst_ip="145.208.139.72" dst_port="137" proto="udp" src_ip="209.137.180.5" src_port="1026"/>
      <filter dst_ip="145.208.139.72" dst_port="56515" proto="tcp" src_ip="209.137.180.5" src_port="1026"/>
      <filter dst_ip="145.208.139.72" dst_port="56515" proto="udp" src_ip="209.137.180.5" src_port="1026"/>
      <filter dst_ip="145.208.139.72" dst_port="5739" proto="tcp" src_ip="209.137.180.5" src_port="1026"/>
      <filter dst_ip="145.208.139.72" dst_port="5739" proto="udp" src_ip="209.137.180.5" src_port="1026"/>
      <filter dst_ip="214.119.132.239" dst_port="137" proto="tcp" src_ip="209.137.180.5" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="137" proto="udp" src_ip="209.137.180.5" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="56515" proto="tcp" src_ip="209.137.180.5" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="56515" proto="udp" src_ip="209.137.180.5" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="5739" proto="tcp" src_ip="209.137.180.5" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="5739" proto="udp" src_ip="209.137.180.5" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="137" proto="tcp" src_ip="209.137.180.5" src_port="1026"/>
      <filter dst_ip="214.119.132.239" dst_port="137" proto="udp" src_ip="209.137.180.5" src_port="1026"/>
      <filter dst_ip="214.119.132.239" dst_port="56515" proto="tcp" src_ip="209.137.180.5" src_port="1026"/>
      <filter dst_ip="214.119.132.239" dst_port="56515" proto="udp" src_ip="209.137.180.5" src_port="1026"/>
      <filter dst_ip="214.119.132.239" dst_port="5739" proto="tcp" src_ip="209.137.180.5" src_port="1026"/>
      <filter dst_ip="214.119.132.239" dst_port="5739" proto="udp" src_ip="209.137.180.5" src_port="1026"/>
      <from sec="1036991504" usec="0"/>
      <to sec="1036991505" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="215.172.24.165" dst_port="137" proto="tcp" src_ip="217.185.148.5" src_port="80"/>
      <filter dst_ip="215.172.24.165" dst_port="137" proto="udp" src_ip="217.185.148.5" src_port="80"/>
      <filter dst_ip="215.172.24.165" dst_port="56515" proto="tcp" src_ip="217.185.148.5" src_port="80"/>
      <filter dst_ip="215.172.24.165" dst_port="56515" proto="udp" src_ip="217.185.148.5" src_port="80"/>
      <filter dst_ip="215.172.24.165" dst_port="5739" proto="tcp" src_ip="217.185.148.5" src_port="80"/>
      <filter dst_ip="215.172.24.165" dst_port="5739" proto="udp" src_ip="217.185.148.5" src_port="80"/>
      <filter dst_ip="215.172.24.165" dst_port="137" proto="tcp" src_ip="217.185.148.5" src_port="1026"/>
      <filter dst_ip="215.172.24.165" dst_port="137" proto="udp" src_ip="217.185.148.5" src_port="1026"/>
      <filter dst_ip="215.172.24.165" dst_port="56515" proto="tcp" src_ip="217.185.148.5" src_port="1026"/>
      <filter dst_ip="215.172.24.165" dst_port="56515" proto="udp" src_ip="217.185.148.5" src_port="1026"/>
      <filter dst_ip="215.172.24.165" dst_port="5739" proto="tcp" src_ip="217.185.148.5" src_port="1026"/>
      <filter dst_ip="215.172.24.165" dst_port="5739" proto="udp" src_ip="217.185.148.5" src_port="1026"/>
      <filter dst_ip="145.208.139.72" dst_port="137" proto="tcp" src_ip="217.185.148.5" src_port="80"/>
      <filter dst_ip="145.208.139.72" dst_port="137" proto="udp" src_ip="217.185.148.5" src_port="80"/>
      <filter dst_ip="145.208.139.72" dst_port="56515" proto="tcp" src_ip="217.185.148.5" src_port="80"/>
      <filter dst_ip="145.208.139.72" dst_port="56515" proto="udp" src_ip="217.185.148.5" src_port="80"/>
      <filter dst_ip="145.208.139.72" dst_port="5739" proto="tcp" src_ip="217.185.148.5" src_port="80"/>
      <filter dst_ip="145.208.139.72" dst_port="5739" proto="udp" src_ip="217.185.148.5" src_port="80"/>
      <filter dst_ip="145.208.139.72" dst_port="137" proto="tcp" src_ip="217.185.148.5" src_port="1026"/>
      <filter dst_ip="145.208.139.72" dst_port="137" proto="udp" src_ip="217.185.148.5" src_port="1026"/>
      <filter dst_ip="145.208.139.72" dst_port="56515" proto="tcp" src_ip="217.185.148.5" src_port="1026"/>
      <filter dst_ip="145.208.139.72" dst_port="56515" proto="udp" src_ip="217.185.148.5" src_port="1026"/>
      <filter dst_ip="145.208.139.72" dst_port="5739" proto="tcp" src_ip="217.185.148.5" src_port="1026"/>
      <filter dst_ip="145.208.139.72" dst_port="5739" proto="udp" src_ip="217.185.148.5" src_port="1026"/>
      <filter dst_ip="214.119.132.239" dst_port="137" proto="tcp" src_ip="217.185.148.5" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="137" proto="udp" src_ip="217.185.148.5" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="56515" proto="tcp" src_ip="217.185.148.5" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="56515" proto="udp" src_ip="217.185.148.5" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="5739" proto="tcp" src_ip="217.185.148.5" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="5739" proto="udp" src_ip="217.185.148.5" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="137" proto="tcp" src_ip="217.185.148.5" src_port="1026"/>
      <filter dst_ip="214.119.132.239" dst_port="137" proto="udp" src_ip="217.185.148.5" src_port="1026"/>
      <filter dst_ip="214.119.132.239" dst_port="56515" proto="tcp" src_ip="217.185.148.5" src_port="1026"/>
      <filter dst_ip="214.119.132.239" dst_port="56515" proto="udp" src_ip="217.185.148.5" src_port="1026"/>
      <filter dst_ip="214.119.132.239" dst_port="5739" proto="tcp" src_ip="217.185.148.5" src_port="1026"/>
      <filter dst_ip="214.119.132.239" dst_port="5739" proto="udp" src_ip="217.185.148.5" src_port="1026"/>
      <from sec="1036991502" usec="0"/>
      <to sec="1036991505" usec="0"/>
    </slice>
    <from sec="1036991500" usec="0"/>
    <to sec="1036991505" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="215.211.200.7" src_port="1028"/>
      <from sec="1036991232" usec="0"/>
      <to sec="1036991251" usec="0"/>
    </slice>
    <from sec="1036991232" usec="0"/>
    <to sec="1036991251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="145.208.65.88" dst_port="137" proto="tcp" src_ip="202.165.112.10" src_port="1030"/>
      <filter dst_ip="145.208.65.88" dst_port="137" proto="udp" src_ip="202.165.112.10" src_port="1030"/>
      <filter dst_ip="145.208.65.88" dst_port="80" proto="tcp" src_ip="202.165.112.10" src_port="1030"/>
      <filter dst_ip="145.208.65.88" dst_port="80" proto="udp" src_ip="202.165.112.10" src_port="1030"/>
      <from sec="1036991170" usec="0"/>
      <to sec="1036991181" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="145.208.65.88" dst_port="137" proto="tcp" src_ip="9.246.160.10" src_port="1030"/>
      <filter dst_ip="145.208.65.88" dst_port="137" proto="udp" src_ip="9.246.160.10" src_port="1030"/>
      <filter dst_ip="145.208.65.88" dst_port="80" proto="tcp" src_ip="9.246.160.10" src_port="1030"/>
      <filter dst_ip="145.208.65.88" dst_port="80" proto="udp" src_ip="9.246.160.10" src_port="1030"/>
      <from sec="1036991173" usec="0"/>
      <to sec="1036991178" usec="0"/>
    </slice>
    <from sec="1036991170" usec="0"/>
    <to sec="1036991181" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="8.133.181.14" src_port="1047"/>
      <filter dst_port="137" proto="udp" src_ip="8.133.181.14" src_port="1047"/>
      <from sec="1036991370" usec="0"/>
      <to sec="1036991376" usec="0"/>
    </slice>
    <from sec="1036991370" usec="0"/>
    <to sec="1036991376" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.62.184.16" dst_port="137" proto="tcp" src_ip="9.209.147.22" src_port="1028"/>
      <filter dst_ip="214.62.184.16" dst_port="137" proto="udp" src_ip="9.209.147.22" src_port="1028"/>
      <filter dst_ip="214.62.184.16" dst_port="4360" proto="tcp" src_ip="9.209.147.22" src_port="1028"/>
      <filter dst_ip="214.62.184.16" dst_port="4360" proto="udp" src_ip="9.209.147.22" src_port="1028"/>
      <filter dst_ip="214.62.184.16" dst_port="137" proto="tcp" src_ip="9.209.147.22" src_port="80"/>
      <filter dst_ip="214.62.184.16" dst_port="137" proto="udp" src_ip="9.209.147.22" src_port="80"/>
      <filter dst_ip="214.62.184.16" dst_port="4360" proto="tcp" src_ip="9.209.147.22" src_port="80"/>
      <filter dst_ip="214.62.184.16" dst_port="4360" proto="udp" src_ip="9.209.147.22" src_port="80"/>
      <from sec="1036990973" usec="0"/>
      <to sec="1036990979" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="214.62.184.16" dst_port="137" proto="tcp" src_ip="214.124.43.22" src_port="1028"/>
      <filter dst_ip="214.62.184.16" dst_port="137" proto="udp" src_ip="214.124.43.22" src_port="1028"/>
      <filter dst_ip="214.62.184.16" dst_port="4360" proto="tcp" src_ip="214.124.43.22" src_port="1028"/>
      <filter dst_ip="214.62.184.16" dst_port="4360" proto="udp" src_ip="214.124.43.22" src_port="1028"/>
      <filter dst_ip="214.62.184.16" dst_port="137" proto="tcp" src_ip="214.124.43.22" src_port="80"/>
      <filter dst_ip="214.62.184.16" dst_port="137" proto="udp" src_ip="214.124.43.22" src_port="80"/>
      <filter dst_ip="214.62.184.16" dst_port="4360" proto="tcp" src_ip="214.124.43.22" src_port="80"/>
      <filter dst_ip="214.62.184.16" dst_port="4360" proto="udp" src_ip="214.124.43.22" src_port="80"/>
      <from sec="1036990973" usec="0"/>
      <to sec="1036990979" usec="0"/>
    </slice>
    <from sec="1036990973" usec="0"/>
    <to sec="1036990979" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="210.246.17.88" dst_port="137" proto="tcp" src_ip="199.13.101.24" src_port="1028"/>
      <filter dst_ip="210.246.17.88" dst_port="137" proto="udp" src_ip="199.13.101.24" src_port="1028"/>
      <filter dst_ip="210.246.17.88" dst_port="20" proto="tcp" src_ip="199.13.101.24" src_port="1028"/>
      <filter dst_ip="210.246.17.88" dst_port="20" proto="udp" src_ip="199.13.101.24" src_port="1028"/>
      <from sec="1036991295" usec="0"/>
      <to sec="1036991302" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="210.246.17.88" dst_port="137" proto="tcp" src_ip="168.100.165.24" src_port="1028"/>
      <filter dst_ip="210.246.17.88" dst_port="137" proto="udp" src_ip="168.100.165.24" src_port="1028"/>
      <filter dst_ip="210.246.17.88" dst_port="20" proto="tcp" src_ip="168.100.165.24" src_port="1028"/>
      <filter dst_ip="210.246.17.88" dst_port="20" proto="udp" src_ip="168.100.165.24" src_port="1028"/>
      <from sec="1036991295" usec="0"/>
      <to sec="1036991301" usec="0"/>
    </slice>
    <from sec="1036991295" usec="0"/>
    <to sec="1036991302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="217.66.115.252" dst_port="137" proto="tcp" src_ip="48.64.10.27" src_port="1025"/>
      <filter dst_ip="217.66.115.252" dst_port="137" proto="udp" src_ip="48.64.10.27" src_port="1025"/>
      <filter dst_ip="217.66.115.252" dst_port="995" proto="tcp" src_ip="48.64.10.27" src_port="1025"/>
      <filter dst_ip="217.66.115.252" dst_port="995" proto="udp" src_ip="48.64.10.27" src_port="1025"/>
      <filter dst_ip="217.66.115.252" dst_port="137" proto="tcp" src_ip="48.64.10.27" src_port="2539"/>
      <filter dst_ip="217.66.115.252" dst_port="137" proto="udp" src_ip="48.64.10.27" src_port="2539"/>
      <filter dst_ip="217.66.115.252" dst_port="995" proto="tcp" src_ip="48.64.10.27" src_port="2539"/>
      <filter dst_ip="217.66.115.252" dst_port="995" proto="udp" src_ip="48.64.10.27" src_port="2539"/>
      <from sec="1036990913" usec="0"/>
      <to sec="1036990934" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="217.66.115.252" dst_port="137" proto="tcp" src_ip="145.3.106.27" src_port="1025"/>
      <filter dst_ip="217.66.115.252" dst_port="137" proto="udp" src_ip="145.3.106.27" src_port="1025"/>
      <filter dst_ip="217.66.115.252" dst_port="995" proto="tcp" src_ip="145.3.106.27" src_port="1025"/>
      <filter dst_ip="217.66.115.252" dst_port="995" proto="udp" src_ip="145.3.106.27" src_port="1025"/>
      <filter dst_ip="217.66.115.252" dst_port="137" proto="tcp" src_ip="145.3.106.27" src_port="2539"/>
      <filter dst_ip="217.66.115.252" dst_port="137" proto="udp" src_ip="145.3.106.27" src_port="2539"/>
      <filter dst_ip="217.66.115.252" dst_port="995" proto="tcp" src_ip="145.3.106.27" src_port="2539"/>
      <filter dst_ip="217.66.115.252" dst_port="995" proto="udp" src_ip="145.3.106.27" src_port="2539"/>
      <from sec="1036990913" usec="0"/>
      <to sec="1036990934" usec="0"/>
    </slice>
    <from sec="1036990913" usec="0"/>
    <to sec="1036990934" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="156.29.16.143" dst_port="137" proto="udp" src_ip="199.244.11.28" src_port="1026"/>
      <filter dst_ip="156.29.16.143" dst_port="137" proto="icmp" src_ip="199.244.11.28" src_port="1026"/>
      <from sec="1036991396" usec="0"/>
      <to sec="1036991403" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="156.29.16.143" dst_port="137" proto="udp" src_ip="148.242.39.28" src_port="1026"/>
      <filter dst_ip="156.29.16.143" dst_port="137" proto="icmp" src_ip="148.242.39.28" src_port="1026"/>
      <from sec="1036991401" usec="0"/>
      <to sec="1036991402" usec="0"/>
    </slice>
    <from sec="1036991396" usec="0"/>
    <to sec="1036991403" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="202.11.171.31" src_port="1028"/>
      <from sec="1036991445" usec="0"/>
      <to sec="1036991452" usec="0"/>
    </slice>
    <from sec="1036991445" usec="0"/>
    <to sec="1036991452" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="168.100.160.173" dst_port="137" proto="tcp" src_ip="76.104.244.34" src_port="1031"/>
      <filter dst_ip="168.100.160.173" dst_port="137" proto="udp" src_ip="76.104.244.34" src_port="1031"/>
      <filter dst_ip="168.100.160.173" dst_port="137" proto="tcp" src_ip="76.104.244.34" src_port="80"/>
      <filter dst_ip="168.100.160.173" dst_port="137" proto="udp" src_ip="76.104.244.34" src_port="80"/>
      <from sec="1036990934" usec="0"/>
      <to sec="1036990946" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="168.100.160.173" dst_port="137" proto="tcp" src_ip="78.31.228.34" src_port="1031"/>
      <filter dst_ip="168.100.160.173" dst_port="137" proto="udp" src_ip="78.31.228.34" src_port="1031"/>
      <filter dst_ip="168.100.160.173" dst_port="137" proto="tcp" src_ip="78.31.228.34" src_port="80"/>
      <filter dst_ip="168.100.160.173" dst_port="137" proto="udp" src_ip="78.31.228.34" src_port="80"/>
      <from sec="1036990934" usec="0"/>
      <to sec="1036990943" usec="0"/>
    </slice>
    <from sec="1036990934" usec="0"/>
    <to sec="1036990946" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="215.156.92.53" dst_port="137" proto="udp" src_ip="199.14.24.37" src_port="2030"/>
      <filter dst_ip="215.156.92.53" dst_port="53" proto="udp" src_ip="199.14.24.37" src_port="2030"/>
      <from sec="1036991116" usec="0"/>
      <to sec="1036991122" usec="0"/>
    </slice>
    <from sec="1036991116" usec="0"/>
    <to sec="1036991122" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="9.32.199.37" src_port="10806"/>
      <from sec="1036991295" usec="0"/>
      <to sec="1036991302" usec="0"/>
    </slice>
    <from sec="1036991295" usec="0"/>
    <to sec="1036991302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="73.82.167.57" src_port="1028"/>
      <from sec="1036990939" usec="0"/>
      <to sec="1036990946" usec="0"/>
    </slice>
    <from sec="1036990939" usec="0"/>
    <to sec="1036990946" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="199.160.42.73" src_port="65274"/>
      <filter dst_port="137" proto="udp" src_ip="199.160.42.73" src_port="65274"/>
      <from sec="1036991306" usec="0"/>
      <to sec="1036991319" usec="0"/>
    </slice>
    <from sec="1036991306" usec="0"/>
    <to sec="1036991319" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="199.56.208.73" src_port="1025"/>
      <from sec="1036990898" usec="0"/>
      <to sec="1036990904" usec="0"/>
    </slice>
    <from sec="1036990898" usec="0"/>
    <to sec="1036990904" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="214.239.117.76" src_port="1028"/>
      <from sec="1036991144" usec="0"/>
      <to sec="1036991151" usec="0"/>
    </slice>
    <from sec="1036991144" usec="0"/>
    <to sec="1036991151" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="202.175.147.76" src_port="1025"/>
      <from sec="1036991349" usec="0"/>
      <to sec="1036991355" usec="0"/>
    </slice>
    <from sec="1036991349" usec="0"/>
    <to sec="1036991355" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="9.67.89.78" src_port="1036"/>
      <filter dst_port="137" proto="icmp" src_ip="9.67.89.78" src_port="1036"/>
      <from sec="1036991155" usec="0"/>
      <to sec="1036991161" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="udp" src_ip="168.100.161.78" src_port="1036"/>
      <filter dst_port="137" proto="icmp" src_ip="168.100.161.78" src_port="1036"/>
      <from sec="1036991157" usec="0"/>
      <to sec="1036991160" usec="0"/>
    </slice>
    <from sec="1036991155" usec="0"/>
    <to sec="1036991161" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="202.1.100.79" src_port="1025"/>
      <from sec="1036990861" usec="0"/>
      <to sec="1036990867" usec="0"/>
    </slice>
    <from sec="1036990861" usec="0"/>
    <to sec="1036990867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="198.238.66.84" src_port="1025"/>
      <from sec="1036991081" usec="0"/>
      <to sec="1036991087" usec="0"/>
    </slice>
    <from sec="1036991081" usec="0"/>
    <to sec="1036991087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="202.145.94.90" src_port="1028"/>
      <from sec="1036991235" usec="0"/>
      <to sec="1036991241" usec="0"/>
    </slice>
    <from sec="1036991235" usec="0"/>
    <to sec="1036991241" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="214.18.144.96" src_port="1028"/>
      <from sec="1036991337" usec="0"/>
      <to sec="1036991343" usec="0"/>
    </slice>
    <from sec="1036991337" usec="0"/>
    <to sec="1036991343" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="133.213.36.82" dst_port="137" proto="tcp" src_ip="9.1.226.98" src_port="1026"/>
      <filter dst_ip="133.213.36.82" dst_port="137" proto="udp" src_ip="9.1.226.98" src_port="1026"/>
      <filter dst_ip="133.213.36.82" dst_port="80" proto="tcp" src_ip="9.1.226.98" src_port="1026"/>
      <filter dst_ip="133.213.36.82" dst_port="80" proto="udp" src_ip="9.1.226.98" src_port="1026"/>
      <from sec="1036991144" usec="0"/>
      <to sec="1036991156" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="133.213.36.82" dst_port="137" proto="tcp" src_ip="201.141.2.98" src_port="1026"/>
      <filter dst_ip="133.213.36.82" dst_port="137" proto="udp" src_ip="201.141.2.98" src_port="1026"/>
      <filter dst_ip="133.213.36.82" dst_port="80" proto="tcp" src_ip="201.141.2.98" src_port="1026"/>
      <filter dst_ip="133.213.36.82" dst_port="80" proto="udp" src_ip="201.141.2.98" src_port="1026"/>
      <from sec="1036991146" usec="0"/>
      <to sec="1036991155" usec="0"/>
    </slice>
    <from sec="1036991144" usec="0"/>
    <to sec="1036991156" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="145.208.135.34" dst_port="137" proto="tcp" src_ip="199.14.22.100" src_port="1078"/>
      <filter dst_ip="145.208.135.34" dst_port="137" proto="udp" src_ip="199.14.22.100" src_port="1078"/>
      <filter dst_ip="145.208.135.34" dst_port="137" proto="icmp" src_ip="199.14.22.100" src_port="1078"/>
      <filter dst_ip="145.208.135.34" dst_port="137" proto="tcp" src_ip="199.14.22.100" src_port="80"/>
      <filter dst_ip="145.208.135.34" dst_port="137" proto="udp" src_ip="199.14.22.100" src_port="80"/>
      <filter dst_ip="145.208.135.34" dst_port="137" proto="icmp" src_ip="199.14.22.100" src_port="80"/>
      <from sec="1036991285" usec="0"/>
      <to sec="1036991296" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="145.208.135.34" dst_port="137" proto="tcp" src_ip="76.161.178.100" src_port="1078"/>
      <filter dst_ip="145.208.135.34" dst_port="137" proto="udp" src_ip="76.161.178.100" src_port="1078"/>
      <filter dst_ip="145.208.135.34" dst_port="137" proto="icmp" src_ip="76.161.178.100" src_port="1078"/>
      <filter dst_ip="145.208.135.34" dst_port="137" proto="tcp" src_ip="76.161.178.100" src_port="80"/>
      <filter dst_ip="145.208.135.34" dst_port="137" proto="udp" src_ip="76.161.178.100" src_port="80"/>
      <filter dst_ip="145.208.135.34" dst_port="137" proto="icmp" src_ip="76.161.178.100" src_port="80"/>
      <from sec="1036991285" usec="0"/>
      <to sec="1036991295" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="145.208.135.34" dst_port="137" proto="tcp" src_ip="145.208.86.100" src_port="1078"/>
      <filter dst_ip="145.208.135.34" dst_port="137" proto="udp" src_ip="145.208.86.100" src_port="1078"/>
      <filter dst_ip="145.208.135.34" dst_port="137" proto="icmp" src_ip="145.208.86.100" src_port="1078"/>
      <filter dst_ip="145.208.135.34" dst_port="137" proto="tcp" src_ip="145.208.86.100" src_port="80"/>
      <filter dst_ip="145.208.135.34" dst_port="137" proto="udp" src_ip="145.208.86.100" src_port="80"/>
      <filter dst_ip="145.208.135.34" dst_port="137" proto="icmp" src_ip="145.208.86.100" src_port="80"/>
      <from sec="1036991286" usec="0"/>
      <to sec="1036991296" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="145.208.135.34" dst_port="137" proto="tcp" src_ip="168.100.158.100" src_port="1078"/>
      <filter dst_ip="145.208.135.34" dst_port="137" proto="udp" src_ip="168.100.158.100" src_port="1078"/>
      <filter dst_ip="145.208.135.34" dst_port="137" proto="icmp" src_ip="168.100.158.100" src_port="1078"/>
      <filter dst_ip="145.208.135.34" dst_port="137" proto="tcp" src_ip="168.100.158.100" src_port="80"/>
      <filter dst_ip="145.208.135.34" dst_port="137" proto="udp" src_ip="168.100.158.100" src_port="80"/>
      <filter dst_ip="145.208.135.34" dst_port="137" proto="icmp" src_ip="168.100.158.100" src_port="80"/>
      <from sec="1036991286" usec="0"/>
      <to sec="1036991296" usec="0"/>
    </slice>
    <from sec="1036991285" usec="0"/>
    <to sec="1036991296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="198.160.223.102" src_port="1026"/>
      <from sec="1036991230" usec="0"/>
      <to sec="1036991246" usec="0"/>
    </slice>
    <from sec="1036991230" usec="0"/>
    <to sec="1036991246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="9.200.237.103" src_port="1025"/>
      <from sec="1036990855" usec="0"/>
      <to sec="1036990862" usec="0"/>
    </slice>
    <from sec="1036990855" usec="0"/>
    <to sec="1036990862" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="199.11.104.106" src_port="1027"/>
      <filter dst_port="53" proto="udp" src_ip="199.11.104.106" src_port="1027"/>
      <from sec="1036991097" usec="0"/>
      <to sec="1036991107" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="udp" src_ip="218.106.104.106" src_port="1027"/>
      <filter dst_port="53" proto="udp" src_ip="218.106.104.106" src_port="1027"/>
      <from sec="1036991099" usec="0"/>
      <to sec="1036991104" usec="0"/>
    </slice>
    <from sec="1036991097" usec="0"/>
    <to sec="1036991107" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="134.34.244.111" src_port="1026"/>
      <from sec="1036990945" usec="0"/>
      <to sec="1036990952" usec="0"/>
    </slice>
    <from sec="1036990945" usec="0"/>
    <to sec="1036990952" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="199.163.174.113" src_port="1084"/>
      <from sec="1036991160" usec="0"/>
      <to sec="1036991171" usec="0"/>
    </slice>
    <from sec="1036991160" usec="0"/>
    <to sec="1036991171" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="9.69.240.118" src_port="1025"/>
      <from sec="1036991318" usec="0"/>
      <to sec="1036991325" usec="0"/>
    </slice>
    <from sec="1036991318" usec="0"/>
    <to sec="1036991325" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="199.14.47.124" src_port="1032"/>
      <from sec="1036991359" usec="0"/>
      <to sec="1036991376" usec="0"/>
    </slice>
    <from sec="1036991359" usec="0"/>
    <to sec="1036991376" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="9.46.97.124" src_port="1025"/>
      <from sec="1036991150" usec="0"/>
      <to sec="1036991176" usec="0"/>
    </slice>
    <from sec="1036991150" usec="0"/>
    <to sec="1036991176" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="80" proto="tcp" src_ip="145.208.136.125" src_port="6699"/>
      <filter dst_port="80" proto="udp" src_ip="145.208.136.125" src_port="6699"/>
      <filter dst_port="137" proto="tcp" src_ip="145.208.136.125" src_port="6699"/>
      <filter dst_port="137" proto="udp" src_ip="145.208.136.125" src_port="6699"/>
      <filter dst_port="80" proto="tcp" src_ip="145.208.136.125" src_port="80"/>
      <filter dst_port="80" proto="udp" src_ip="145.208.136.125" src_port="80"/>
      <filter dst_port="137" proto="tcp" src_ip="145.208.136.125" src_port="80"/>
      <filter dst_port="137" proto="udp" src_ip="145.208.136.125" src_port="80"/>
      <from sec="1036991030" usec="0"/>
      <to sec="1036991429" usec="0"/>
    </slice>
    <from sec="1036991030" usec="0"/>
    <to sec="1036991429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="146.174.212.187" dst_port="137" proto="tcp" src_ip="9.246.199.125" src_port="1027"/>
      <filter dst_ip="146.174.212.187" dst_port="137" proto="udp" src_ip="9.246.199.125" src_port="1027"/>
      <filter dst_ip="146.174.212.187" dst_port="80" proto="tcp" src_ip="9.246.199.125" src_port="1027"/>
      <filter dst_ip="146.174.212.187" dst_port="80" proto="udp" src_ip="9.246.199.125" src_port="1027"/>
      <from sec="1036990940" usec="0"/>
      <to sec="1036990968" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="146.174.212.187" dst_port="137" proto="tcp" src_ip="148.242.119.125" src_port="1027"/>
      <filter dst_ip="146.174.212.187" dst_port="137" proto="udp" src_ip="148.242.119.125" src_port="1027"/>
      <filter dst_ip="146.174.212.187" dst_port="80" proto="tcp" src_ip="148.242.119.125" src_port="1027"/>
      <filter dst_ip="146.174.212.187" dst_port="80" proto="udp" src_ip="148.242.119.125" src_port="1027"/>
      <from sec="1036990957" usec="0"/>
      <to sec="1036990959" usec="0"/>
    </slice>
    <from sec="1036990940" usec="0"/>
    <to sec="1036990968" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="215.156.92.53" dst_port="137" proto="udp" src_ip="199.16.223.131" src_port="1030"/>
      <filter dst_ip="215.156.92.53" dst_port="53" proto="udp" src_ip="199.16.223.131" src_port="1030"/>
      <from sec="1036990945" usec="0"/>
      <to sec="1036990957" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="215.156.92.53" dst_port="137" proto="udp" src_ip="201.23.215.131" src_port="1030"/>
      <filter dst_ip="215.156.92.53" dst_port="53" proto="udp" src_ip="201.23.215.131" src_port="1030"/>
      <from sec="1036990948" usec="0"/>
      <to sec="1036990954" usec="0"/>
    </slice>
    <from sec="1036990945" usec="0"/>
    <to sec="1036990957" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="6699" proto="tcp" src_ip="148.242.165.134" src_port="1025"/>
      <filter dst_port="6699" proto="udp" src_ip="148.242.165.134" src_port="1025"/>
      <filter dst_port="137" proto="tcp" src_ip="148.242.165.134" src_port="1025"/>
      <filter dst_port="137" proto="udp" src_ip="148.242.165.134" src_port="1025"/>
      <filter dst_port="80" proto="tcp" src_ip="148.242.165.134" src_port="1025"/>
      <filter dst_port="80" proto="udp" src_ip="148.242.165.134" src_port="1025"/>
      <from sec="1036990894" usec="0"/>
      <to sec="1036990901" usec="0"/>
    </slice>
    <from sec="1036990894" usec="0"/>
    <to sec="1036990901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="200.78.218.142" src_port="1029"/>
      <from sec="1036990866" usec="0"/>
      <to sec="1036990872" usec="0"/>
    </slice>
    <from sec="1036990866" usec="0"/>
    <to sec="1036990872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="76.104.161.143" src_port="1025"/>
      <from sec="1036990898" usec="0"/>
      <to sec="1036990919" usec="0"/>
    </slice>
    <from sec="1036990898" usec="0"/>
    <to sec="1036990919" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="9.251.110.147" src_port="1030"/>
      <filter dst_port="137" proto="udp" src_ip="9.251.110.147" src_port="1030"/>
      <filter dst_port="80" proto="tcp" src_ip="9.251.110.147" src_port="1030"/>
      <filter dst_port="80" proto="udp" src_ip="9.251.110.147" src_port="1030"/>
      <from sec="1036991245" usec="0"/>
      <to sec="1036991255" usec="0"/>
    </slice>
    <from sec="1036991245" usec="0"/>
    <to sec="1036991255" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="202.168.180.149" src_port="1028"/>
      <from sec="1036990951" usec="0"/>
      <to sec="1036990957" usec="0"/>
    </slice>
    <from sec="1036990951" usec="0"/>
    <to sec="1036990957" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.119.134.242" dst_port="137" proto="tcp" src_ip="202.4.208.154" src_port="10012"/>
      <filter dst_ip="214.119.134.242" dst_port="137" proto="udp" src_ip="202.4.208.154" src_port="10012"/>
      <filter dst_ip="214.119.134.242" dst_port="137" proto="tcp" src_ip="202.4.208.154" src_port="80"/>
      <filter dst_ip="214.119.134.242" dst_port="137" proto="udp" src_ip="202.4.208.154" src_port="80"/>
      <from sec="1036991285" usec="0"/>
      <to sec="1036991291" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="214.119.134.242" dst_port="137" proto="tcp" src_ip="201.26.72.154" src_port="10012"/>
      <filter dst_ip="214.119.134.242" dst_port="137" proto="udp" src_ip="201.26.72.154" src_port="10012"/>
      <filter dst_ip="214.119.134.242" dst_port="137" proto="tcp" src_ip="201.26.72.154" src_port="80"/>
      <filter dst_ip="214.119.134.242" dst_port="137" proto="udp" src_ip="201.26.72.154" src_port="80"/>
      <from sec="1036991287" usec="0"/>
      <to sec="1036991291" usec="0"/>
    </slice>
    <from sec="1036991285" usec="0"/>
    <to sec="1036991291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="199.186.201.156" src_port="1029"/>
      <from sec="1036990951" usec="0"/>
      <to sec="1036990963" usec="0"/>
    </slice>
    <from sec="1036990951" usec="0"/>
    <to sec="1036990963" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="148.242.139.55" dst_port="137" proto="tcp" src_ip="215.208.225.158" src_port="1026"/>
      <filter dst_ip="148.242.139.55" dst_port="137" proto="udp" src_ip="215.208.225.158" src_port="1026"/>
      <filter dst_ip="148.242.139.55" dst_port="1050" proto="tcp" src_ip="215.208.225.158" src_port="1026"/>
      <filter dst_ip="148.242.139.55" dst_port="1050" proto="udp" src_ip="215.208.225.158" src_port="1026"/>
      <filter dst_ip="148.242.139.55" dst_port="137" proto="tcp" src_ip="215.208.225.158" src_port="80"/>
      <filter dst_ip="148.242.139.55" dst_port="137" proto="udp" src_ip="215.208.225.158" src_port="80"/>
      <filter dst_ip="148.242.139.55" dst_port="1050" proto="tcp" src_ip="215.208.225.158" src_port="80"/>
      <filter dst_ip="148.242.139.55" dst_port="1050" proto="udp" src_ip="215.208.225.158" src_port="80"/>
      <from sec="1036991423" usec="0"/>
      <to sec="1036991429" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="148.242.139.55" dst_port="137" proto="tcp" src_ip="197.45.65.158" src_port="1026"/>
      <filter dst_ip="148.242.139.55" dst_port="137" proto="udp" src_ip="197.45.65.158" src_port="1026"/>
      <filter dst_ip="148.242.139.55" dst_port="1050" proto="tcp" src_ip="197.45.65.158" src_port="1026"/>
      <filter dst_ip="148.242.139.55" dst_port="1050" proto="udp" src_ip="197.45.65.158" src_port="1026"/>
      <filter dst_ip="148.242.139.55" dst_port="137" proto="tcp" src_ip="197.45.65.158" src_port="80"/>
      <filter dst_ip="148.242.139.55" dst_port="137" proto="udp" src_ip="197.45.65.158" src_port="80"/>
      <filter dst_ip="148.242.139.55" dst_port="1050" proto="tcp" src_ip="197.45.65.158" src_port="80"/>
      <filter dst_ip="148.242.139.55" dst_port="1050" proto="udp" src_ip="197.45.65.158" src_port="80"/>
      <from sec="1036991425" usec="0"/>
      <to sec="1036991426" usec="0"/>
    </slice>
    <from sec="1036991423" usec="0"/>
    <to sec="1036991429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="9.138.196.159" src_port="1027"/>
      <from sec="1036991290" usec="0"/>
      <to sec="1036991296" usec="0"/>
    </slice>
    <from sec="1036991290" usec="0"/>
    <to sec="1036991296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="9.64.147.161" src_port="1027"/>
      <from sec="1036991360" usec="0"/>
      <to sec="1036991365" usec="0"/>
    </slice>
    <from sec="1036991360" usec="0"/>
    <to sec="1036991365" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="215.16.164.124" dst_port="137" proto="udp" src_ip="215.211.81.163" src_port="1026"/>
      <filter dst_ip="215.16.164.124" dst_port="137" proto="icmp" src_ip="215.211.81.163" src_port="1026"/>
      <from sec="1036990811" usec="0"/>
      <to sec="1036990817" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="215.16.164.124" dst_port="137" proto="udp" src_ip="145.208.169.163" src_port="1026"/>
      <filter dst_ip="215.16.164.124" dst_port="137" proto="icmp" src_ip="145.208.169.163" src_port="1026"/>
      <from sec="1036990811" usec="0"/>
      <to sec="1036990816" usec="0"/>
    </slice>
    <from sec="1036990811" usec="0"/>
    <to sec="1036990817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="77.225.2.170" src_port="29691"/>
      <from sec="1036991411" usec="0"/>
      <to sec="1036991419" usec="0"/>
    </slice>
    <from sec="1036991411" usec="0"/>
    <to sec="1036991419" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="9.83.160.175" src_port="1026"/>
      <from sec="1036991170" usec="0"/>
      <to sec="1036991176" usec="0"/>
    </slice>
    <from sec="1036991170" usec="0"/>
    <to sec="1036991176" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="76.27.75.178" src_port="1031"/>
      <from sec="1036990855" usec="0"/>
      <to sec="1036990867" usec="0"/>
    </slice>
    <from sec="1036990855" usec="0"/>
    <to sec="1036990867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="85.103.212.187" src_port="1025"/>
      <from sec="1036991301" usec="0"/>
      <to sec="1036991307" usec="0"/>
    </slice>
    <from sec="1036991301" usec="0"/>
    <to sec="1036991307" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="199.11.195.188" src_port="1027"/>
      <from sec="1036990939" usec="0"/>
      <to sec="1036990957" usec="0"/>
    </slice>
    <from sec="1036990939" usec="0"/>
    <to sec="1036990957" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="9.251.84.189" src_port="1130"/>
      <from sec="1036990994" usec="0"/>
      <to sec="1036991000" usec="0"/>
    </slice>
    <from sec="1036990994" usec="0"/>
    <to sec="1036991000" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="198.106.165.193" src_port="1081"/>
      <from sec="1036991336" usec="0"/>
      <to sec="1036991344" usec="0"/>
    </slice>
    <from sec="1036991336" usec="0"/>
    <to sec="1036991344" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="215.156.92.53" dst_port="137" proto="udp" src_ip="170.40.64.204" src_port="1025"/>
      <filter dst_ip="215.156.92.53" dst_port="53" proto="udp" src_ip="170.40.64.204" src_port="1025"/>
      <from sec="1036991230" usec="0"/>
      <to sec="1036991236" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="215.156.92.53" dst_port="137" proto="udp" src_ip="9.77.80.204" src_port="1025"/>
      <filter dst_ip="215.156.92.53" dst_port="53" proto="udp" src_ip="9.77.80.204" src_port="1025"/>
      <from sec="1036991230" usec="0"/>
      <to sec="1036991236" usec="0"/>
    </slice>
    <from sec="1036991230" usec="0"/>
    <to sec="1036991236" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="9.171.68.240" dst_port="137" proto="udp" src_ip="202.161.11.205" src_port="64437"/>
      <filter dst_ip="9.171.68.240" dst_port="137" proto="icmp" src_ip="202.161.11.205" src_port="64437"/>
      <from sec="1036990989" usec="0"/>
      <to sec="1036990995" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="9.171.68.240" dst_port="137" proto="udp" src_ip="133.213.39.205" src_port="64437"/>
      <filter dst_ip="9.171.68.240" dst_port="137" proto="icmp" src_ip="133.213.39.205" src_port="64437"/>
      <from sec="1036990989" usec="0"/>
      <to sec="1036990994" usec="0"/>
    </slice>
    <from sec="1036990989" usec="0"/>
    <to sec="1036990995" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="9.171.68.240" dst_port="137" proto="udp" src_ip="222.106.131.205" src_port="1031"/>
      <filter dst_ip="9.171.68.240" dst_port="137" proto="icmp" src_ip="222.106.131.205" src_port="1031"/>
      <from sec="1036991463" usec="0"/>
      <to sec="1036991469" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="9.171.68.240" dst_port="137" proto="udp" src_ip="133.213.39.205" src_port="1031"/>
      <filter dst_ip="9.171.68.240" dst_port="137" proto="icmp" src_ip="133.213.39.205" src_port="1031"/>
      <from sec="1036991463" usec="0"/>
      <to sec="1036991468" usec="0"/>
    </slice>
    <from sec="1036991463" usec="0"/>
    <to sec="1036991469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="9.68.182.55" dst_port="137" proto="tcp" src_ip="199.60.176.212" src_port="1026"/>
      <filter dst_ip="9.68.182.55" dst_port="137" proto="udp" src_ip="199.60.176.212" src_port="1026"/>
      <filter dst_ip="9.68.182.55" dst_port="80" proto="tcp" src_ip="199.60.176.212" src_port="1026"/>
      <filter dst_ip="9.68.182.55" dst_port="80" proto="udp" src_ip="199.60.176.212" src_port="1026"/>
      <from sec="1036991259" usec="0"/>
      <to sec="1036991264" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="9.68.182.55" dst_port="137" proto="tcp" src_ip="148.242.136.212" src_port="1026"/>
      <filter dst_ip="9.68.182.55" dst_port="137" proto="udp" src_ip="148.242.136.212" src_port="1026"/>
      <filter dst_ip="9.68.182.55" dst_port="80" proto="tcp" src_ip="148.242.136.212" src_port="1026"/>
      <filter dst_ip="9.68.182.55" dst_port="80" proto="udp" src_ip="148.242.136.212" src_port="1026"/>
      <from sec="1036991262" usec="0"/>
      <to sec="1036991264" usec="0"/>
    </slice>
    <from sec="1036991259" usec="0"/>
    <to sec="1036991264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.119.134.242" dst_port="137" proto="tcp" src_ip="9.14.183.217" src_port="1032"/>
      <filter dst_ip="214.119.134.242" dst_port="137" proto="udp" src_ip="9.14.183.217" src_port="1032"/>
      <filter dst_ip="214.119.134.242" dst_port="137" proto="tcp" src_ip="9.14.183.217" src_port="80"/>
      <filter dst_ip="214.119.134.242" dst_port="137" proto="udp" src_ip="9.14.183.217" src_port="80"/>
      <from sec="1036990962" usec="0"/>
      <to sec="1036990979" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="214.119.134.242" dst_port="137" proto="tcp" src_ip="209.137.171.217" src_port="1032"/>
      <filter dst_ip="214.119.134.242" dst_port="137" proto="udp" src_ip="209.137.171.217" src_port="1032"/>
      <filter dst_ip="214.119.134.242" dst_port="137" proto="tcp" src_ip="209.137.171.217" src_port="80"/>
      <filter dst_ip="214.119.134.242" dst_port="137" proto="udp" src_ip="209.137.171.217" src_port="80"/>
      <from sec="1036990973" usec="0"/>
      <to sec="1036990978" usec="0"/>
    </slice>
    <from sec="1036990962" usec="0"/>
    <to sec="1036990979" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.121.188.210" dst_port="137" proto="tcp" src_ip="202.0.112.220" src_port="1027"/>
      <filter dst_ip="214.121.188.210" dst_port="137" proto="udp" src_ip="202.0.112.220" src_port="1027"/>
      <filter dst_ip="214.121.188.210" dst_port="137" proto="icmp" src_ip="202.0.112.220" src_port="1027"/>
      <from sec="1036990962" usec="0"/>
      <to sec="1036990973" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="214.121.188.210" dst_port="137" proto="tcp" src_ip="214.229.160.220" src_port="1027"/>
      <filter dst_ip="214.121.188.210" dst_port="137" proto="udp" src_ip="214.229.160.220" src_port="1027"/>
      <filter dst_ip="214.121.188.210" dst_port="137" proto="icmp" src_ip="214.229.160.220" src_port="1027"/>
      <from sec="1036990963" usec="0"/>
      <to sec="1036990973" usec="0"/>
    </slice>
    <from sec="1036990962" usec="0"/>
    <to sec="1036990973" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="199.8.69.228" src_port="1046"/>
      <from sec="1036991419" usec="0"/>
      <to sec="1036991424" usec="0"/>
    </slice>
    <from sec="1036991419" usec="0"/>
    <to sec="1036991424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.167.107.236" dst_port="137" proto="tcp" src_ip="198.239.113.233" src_port="1027"/>
      <filter dst_ip="214.167.107.236" dst_port="137" proto="udp" src_ip="198.239.113.233" src_port="1027"/>
      <filter dst_ip="214.167.107.236" dst_port="137" proto="tcp" src_ip="198.239.113.233" src_port="80"/>
      <filter dst_ip="214.167.107.236" dst_port="137" proto="udp" src_ip="198.239.113.233" src_port="80"/>
      <from sec="1036991349" usec="0"/>
      <to sec="1036991360" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="214.167.107.236" dst_port="137" proto="tcp" src_ip="76.161.157.233" src_port="1027"/>
      <filter dst_ip="214.167.107.236" dst_port="137" proto="udp" src_ip="76.161.157.233" src_port="1027"/>
      <filter dst_ip="214.167.107.236" dst_port="137" proto="tcp" src_ip="76.161.157.233" src_port="80"/>
      <filter dst_ip="214.167.107.236" dst_port="137" proto="udp" src_ip="76.161.157.233" src_port="80"/>
      <from sec="1036991348" usec="0"/>
      <to sec="1036991353" usec="0"/>
    </slice>
    <from sec="1036991348" usec="0"/>
    <to sec="1036991360" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.119.132.239" dst_port="137" proto="tcp" src_ip="215.233.13.234" src_port="1026"/>
      <filter dst_ip="214.119.132.239" dst_port="137" proto="udp" src_ip="215.233.13.234" src_port="1026"/>
      <filter dst_ip="214.119.132.239" dst_port="137" proto="tcp" src_ip="215.233.13.234" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="137" proto="udp" src_ip="215.233.13.234" src_port="80"/>
      <from sec="1036991330" usec="0"/>
      <to sec="1036991337" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="214.119.132.239" dst_port="137" proto="tcp" src_ip="215.130.245.234" src_port="1026"/>
      <filter dst_ip="214.119.132.239" dst_port="137" proto="udp" src_ip="215.130.245.234" src_port="1026"/>
      <filter dst_ip="214.119.132.239" dst_port="137" proto="tcp" src_ip="215.130.245.234" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="137" proto="udp" src_ip="215.130.245.234" src_port="80"/>
      <from sec="1036991330" usec="0"/>
      <to sec="1036991336" usec="0"/>
    </slice>
    <from sec="1036991330" usec="0"/>
    <to sec="1036991337" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="214.149.8.238" src_port="1024"/>
      <from sec="1036991510" usec="0"/>
      <to sec="1036991515" usec="0"/>
    </slice>
    <from sec="1036991510" usec="0"/>
    <to sec="1036991515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="202.6.177.238" src_port="1028"/>
      <from sec="1036991042" usec="0"/>
      <to sec="1036991047" usec="0"/>
    </slice>
    <from sec="1036991042" usec="0"/>
    <to sec="1036991047" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="157.130.32.243" src_port="1025"/>
      <from sec="1036991330" usec="0"/>
      <to sec="1036991337" usec="0"/>
    </slice>
    <from sec="1036991330" usec="0"/>
    <to sec="1036991337" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.119.133.64" dst_port="137" proto="tcp" src_ip="9.246.0.247" src_port="1025"/>
      <filter dst_ip="214.119.133.64" dst_port="137" proto="udp" src_ip="9.246.0.247" src_port="1025"/>
      <filter dst_ip="214.119.133.64" dst_port="80" proto="tcp" src_ip="9.246.0.247" src_port="1025"/>
      <filter dst_ip="214.119.133.64" dst_port="80" proto="udp" src_ip="9.246.0.247" src_port="1025"/>
      <filter dst_ip="214.119.133.64" dst_port="137" proto="tcp" src_ip="9.246.0.247" src_port="39135"/>
      <filter dst_ip="214.119.133.64" dst_port="137" proto="udp" src_ip="9.246.0.247" src_port="39135"/>
      <filter dst_ip="214.119.133.64" dst_port="80" proto="tcp" src_ip="9.246.0.247" src_port="39135"/>
      <filter dst_ip="214.119.133.64" dst_port="80" proto="udp" src_ip="9.246.0.247" src_port="39135"/>
      <from sec="1036990923" usec="0"/>
      <to sec="1036990944" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="214.119.133.64" dst_port="137" proto="tcp" src_ip="77.214.236.247" src_port="1025"/>
      <filter dst_ip="214.119.133.64" dst_port="137" proto="udp" src_ip="77.214.236.247" src_port="1025"/>
      <filter dst_ip="214.119.133.64" dst_port="80" proto="tcp" src_ip="77.214.236.247" src_port="1025"/>
      <filter dst_ip="214.119.133.64" dst_port="80" proto="udp" src_ip="77.214.236.247" src_port="1025"/>
      <filter dst_ip="214.119.133.64" dst_port="137" proto="tcp" src_ip="77.214.236.247" src_port="39135"/>
      <filter dst_ip="214.119.133.64" dst_port="137" proto="udp" src_ip="77.214.236.247" src_port="39135"/>
      <filter dst_ip="214.119.133.64" dst_port="80" proto="tcp" src_ip="77.214.236.247" src_port="39135"/>
      <filter dst_ip="214.119.133.64" dst_port="80" proto="udp" src_ip="77.214.236.247" src_port="39135"/>
      <from sec="1036990924" usec="0"/>
      <to sec="1036990928" usec="0"/>
    </slice>
    <from sec="1036990923" usec="0"/>
    <to sec="1036990944" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="214.30.243.251" src_port="1026"/>
      <from sec="1036990929" usec="0"/>
      <to sec="1036990934" usec="0"/>
    </slice>
    <from sec="1036990929" usec="0"/>
    <to sec="1036990934" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="78.176.206.255" src_port="1026"/>
      <filter dst_port="137" proto="udp" src_ip="78.176.206.255" src_port="1027"/>
      <from sec="1036990887" usec="0"/>
      <to sec="1036991240" usec="0"/>
    </slice>
    <from sec="1036990887" usec="0"/>
    <to sec="1036991241" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="133.213.39.150" dst_port="137" proto="tcp" src_ip="201.59.55.12" src_port="80"/>
      <filter dst_ip="133.213.39.150" dst_port="137" proto="udp" src_ip="201.59.55.12" src_port="80"/>
      <filter dst_ip="133.213.39.150" dst_port="137" proto="tcp" src_ip="201.59.55.12" src_port="1026"/>
      <filter dst_ip="133.213.39.150" dst_port="137" proto="udp" src_ip="201.59.55.12" src_port="1026"/>
      <from sec="1036990872" usec="0"/>
      <to sec="1036991494" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="133.213.39.150" dst_port="137" proto="tcp" src_ip="214.236.163.12" src_port="80"/>
      <filter dst_ip="133.213.39.150" dst_port="137" proto="udp" src_ip="214.236.163.12" src_port="80"/>
      <filter dst_ip="133.213.39.150" dst_port="137" proto="tcp" src_ip="214.236.163.12" src_port="1026"/>
      <filter dst_ip="133.213.39.150" dst_port="137" proto="udp" src_ip="214.236.163.12" src_port="1026"/>
      <from sec="1036990872" usec="0"/>
      <to sec="1036990883" usec="0"/>
    </slice>
    <from sec="1036990859" usec="0"/>
    <to sec="1036991494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="145.3.106.46" dst_port="137" proto="tcp" src_ip="201.59.55.13" src_port="80"/>
      <filter dst_ip="145.3.106.46" dst_port="137" proto="udp" src_ip="201.59.55.13" src_port="80"/>
      <from sec="1036991175" usec="0"/>
      <to sec="1036991337" usec="0"/>
    </slice>
    <from sec="1036991056" usec="0"/>
    <to sec="1036991337" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="200.180.151.89"/>
      <from sec="1036991259" usec="0"/>
      <to sec="1036991291" usec="0"/>
    </slice>
    <from sec="1036991259" usec="0"/>
    <to sec="1036991291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="211.118.53.90"/>
      <from sec="1036990892" usec="0"/>
      <to sec="1036990903" usec="0"/>
    </slice>
    <from sec="1036990892" usec="0"/>
    <to sec="1036990903" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="202.30.100.142" src_port="80"/>
      <filter dst_port="137" proto="udp" src_ip="202.30.100.142" src_port="80"/>
      <from sec="1036990866" usec="0"/>
      <to sec="1036990883" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="198.21.144.142" src_port="80"/>
      <filter dst_port="137" proto="udp" src_ip="198.21.144.142" src_port="80"/>
      <from sec="1036990881" usec="0"/>
      <to sec="1036990883" usec="0"/>
    </slice>
    <from sec="1036990866" usec="0"/>
    <to sec="1036990883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="148.242.22.193" dst_port="137" proto="tcp" src_ip="202.8.163.204" src_port="6699"/>
      <filter dst_ip="148.242.22.193" dst_port="137" proto="udp" src_ip="202.8.163.204" src_port="6699"/>
      <filter dst_ip="148.242.22.193" dst_port="2844" proto="tcp" src_ip="202.8.163.204" src_port="6699"/>
      <filter dst_ip="148.242.22.193" dst_port="2844" proto="udp" src_ip="202.8.163.204" src_port="6699"/>
      <from sec="1036990967" usec="0"/>
      <to sec="1036990973" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="148.242.22.193" dst_port="137" proto="tcp" src_ip="77.173.199.204" src_port="6699"/>
      <filter dst_ip="148.242.22.193" dst_port="137" proto="udp" src_ip="77.173.199.204" src_port="6699"/>
      <filter dst_ip="148.242.22.193" dst_port="2844" proto="tcp" src_ip="77.173.199.204" src_port="6699"/>
      <filter dst_ip="148.242.22.193" dst_port="2844" proto="udp" src_ip="77.173.199.204" src_port="6699"/>
      <from sec="1036990969" usec="0"/>
      <to sec="1036990973" usec="0"/>
    </slice>
    <from sec="1036990967" usec="0"/>
    <to sec="1036990973" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
369[label="9.196.110.64s;78pkt 78fpkt", shape=rectangle, color=red];
493[label="199.10.88.158s;65pkt 65fpkt", shape=rectangle, color=red];
503[label="202.168.38.168s;212pkt 212fpkt", shape=rectangle, color=red];
629[label="148.242.177.209s;214pkt 214fpkt", shape=rectangle, color=red];
5761[label="202.0.112.220;225pkt 225fpkt", shape=pentagon, color=darkviolet];
7431[label="202.0.112.220;224pkt 224fpkt", shape=invtriangle, color=brown];
8374[label="202.0.112.220;225pkt 225fpkt", shape=invhouse, color=bisque];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.0.112.220:1027, *:137}[34.2466%]&lt;BR/&gt;{202.168.38.168:1027, *:137}[32.2679%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
369--629[label="0.333333;26pkt 26fpkt"];
493--629[label="0.384615;25pkt 25fpkt"];
503--629[label="0.283019;60pkt 60fpkt"];
629--671[label="0.0046729;1pkt 1fpkt"];
629--672[label="0.0046729;1pkt 1fpkt"];
629--1175[label="0.0046729;1pkt 1fpkt"];
629--1590[label="0.0046729;1pkt 1fpkt"];
629--2786[label="0.0046729;1pkt 1fpkt"];
629--3023[label="0.0046729;1pkt 1fpkt"];
629--3614[label="0.0046729;1pkt 1fpkt"];
629--3835[label="0.0046729;1pkt 1fpkt"];
629--5761[label="0.121495;26pkt 26fpkt"];
629--6095[label="0.0046729;1pkt 1fpkt"];
629--7431[label="0.121495;26pkt 26fpkt"];
629--8374[label="0.121495;26pkt 26fpkt"];
5761--7431[label="1;224pkt 224fpkt"];
5761--8374[label="1;225pkt 225fpkt"];
7431--8374[label="1;224pkt 224fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.0.112.220" src_port="1027"/>
      <filter dst_port="137" src_ip="202.168.38.168" src_port="1027"/>
    </slice>
    <from sec="1036990953" usec="0"/>
    <to sec="1036991000" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="148.242.56.210" dst_port="80" proto="tcp" src_ip="209.2.185.244" src_port="80"/>
      <filter dst_ip="148.242.56.210" dst_port="80" proto="udp" src_ip="209.2.185.244" src_port="80"/>
      <filter dst_ip="148.242.56.210" dst_port="137" proto="tcp" src_ip="209.2.185.244" src_port="80"/>
      <filter dst_ip="148.242.56.210" dst_port="137" proto="udp" src_ip="209.2.185.244" src_port="80"/>
      <filter dst_ip="148.242.56.210" dst_port="80" proto="tcp" src_ip="209.2.185.244" src_port="6699"/>
      <filter dst_ip="148.242.56.210" dst_port="80" proto="udp" src_ip="209.2.185.244" src_port="6699"/>
      <filter dst_ip="148.242.56.210" dst_port="137" proto="tcp" src_ip="209.2.185.244" src_port="6699"/>
      <filter dst_ip="148.242.56.210" dst_port="137" proto="udp" src_ip="209.2.185.244" src_port="6699"/>
      <filter dst_ip="133.213.0.229" dst_port="80" proto="tcp" src_ip="209.2.185.244" src_port="80"/>
      <filter dst_ip="133.213.0.229" dst_port="80" proto="udp" src_ip="209.2.185.244" src_port="80"/>
      <filter dst_ip="133.213.0.229" dst_port="137" proto="tcp" src_ip="209.2.185.244" src_port="80"/>
      <filter dst_ip="133.213.0.229" dst_port="137" proto="udp" src_ip="209.2.185.244" src_port="80"/>
      <filter dst_ip="133.213.0.229" dst_port="80" proto="tcp" src_ip="209.2.185.244" src_port="6699"/>
      <filter dst_ip="133.213.0.229" dst_port="80" proto="udp" src_ip="209.2.185.244" src_port="6699"/>
      <filter dst_ip="133.213.0.229" dst_port="137" proto="tcp" src_ip="209.2.185.244" src_port="6699"/>
      <filter dst_ip="133.213.0.229" dst_port="137" proto="udp" src_ip="209.2.185.244" src_port="6699"/>
      <from sec="1036991219" usec="0"/>
      <to sec="1036991225" usec="0"/>
    </slice>
    <from sec="1036991215" usec="0"/>
    <to sec="1036991225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="145.208.129.0" dst_port="80" proto="tcp" src_port="6699"/>
      <filter dst_ip="145.208.129.0" dst_port="80" proto="udp" src_port="6699"/>
      <filter dst_ip="145.208.129.0" dst_port="80" proto="tcp" src_port="6699"/>
      <filter dst_ip="145.208.129.0" dst_port="80" proto="udp" src_port="6699"/>
      <filter dst_ip="145.208.129.0" dst_port="80" proto="tcp" src_port="6699"/>
      <filter dst_ip="145.208.129.0" dst_port="80" proto="udp" src_port="6699"/>
      <filter dst_ip="145.208.129.0" dst_port="80" proto="tcp" src_port="6699"/>
      <filter dst_ip="145.208.129.0" dst_port="80" proto="udp" src_port="6699"/>
      <filter dst_ip="145.208.129.0" dst_port="137" proto="tcp" src_port="6699"/>
      <filter dst_ip="145.208.129.0" dst_port="137" proto="udp" src_port="6699"/>
      <filter dst_ip="145.208.129.0" dst_port="137" proto="tcp" src_port="6699"/>
      <filter dst_ip="145.208.129.0" dst_port="137" proto="udp" src_port="6699"/>
      <filter dst_ip="145.208.129.0" dst_port="137" proto="tcp" src_port="6699"/>
      <filter dst_ip="145.208.129.0" dst_port="137" proto="udp" src_port="6699"/>
      <filter dst_ip="145.208.129.0" dst_port="137" proto="tcp" src_port="6699"/>
      <filter dst_ip="145.208.129.0" dst_port="137" proto="udp" src_port="6699"/>
      <from sec="1036991020" usec="0"/>
      <to sec="1036991482" usec="0"/>
    </slice>
    <from sec="1036991020" usec="0"/>
    <to sec="1036991482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="145.208.205.48" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="145.208.205.48" dst_port="80" proto="udp" src_port="80"/>
      <filter dst_ip="145.208.205.48" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="145.208.205.48" dst_port="80" proto="udp" src_port="80"/>
      <filter dst_ip="145.208.205.48" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="145.208.205.48" dst_port="80" proto="udp" src_port="80"/>
      <filter dst_ip="145.208.205.48" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="145.208.205.48" dst_port="80" proto="udp" src_port="80"/>
      <filter dst_ip="145.208.205.48" dst_port="137" proto="tcp" src_port="80"/>
      <filter dst_ip="145.208.205.48" dst_port="137" proto="udp" src_port="80"/>
      <filter dst_ip="145.208.205.48" dst_port="137" proto="tcp" src_port="80"/>
      <filter dst_ip="145.208.205.48" dst_port="137" proto="udp" src_port="80"/>
      <filter dst_ip="145.208.205.48" dst_port="137" proto="tcp" src_port="80"/>
      <filter dst_ip="145.208.205.48" dst_port="137" proto="udp" src_port="80"/>
      <filter dst_ip="145.208.205.48" dst_port="137" proto="tcp" src_port="80"/>
      <filter dst_ip="145.208.205.48" dst_port="137" proto="udp" src_port="80"/>
      <from sec="1036991092" usec="0"/>
      <to sec="1036991099" usec="0"/>
    </slice>
    <from sec="1036991092" usec="0"/>
    <to sec="1036991103" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="168.100.160.173" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="168.100.160.173" dst_port="80" proto="udp" src_port="80"/>
      <filter dst_ip="168.100.160.173" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="168.100.160.173" dst_port="80" proto="udp" src_port="80"/>
      <filter dst_ip="168.100.160.173" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="168.100.160.173" dst_port="80" proto="udp" src_port="80"/>
      <filter dst_ip="168.100.160.173" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="168.100.160.173" dst_port="80" proto="udp" src_port="80"/>
      <filter dst_ip="168.100.160.173" dst_port="53" proto="tcp" src_port="80"/>
      <filter dst_ip="168.100.160.173" dst_port="53" proto="udp" src_port="80"/>
      <filter dst_ip="168.100.160.173" dst_port="53" proto="tcp" src_port="80"/>
      <filter dst_ip="168.100.160.173" dst_port="53" proto="udp" src_port="80"/>
      <filter dst_ip="168.100.160.173" dst_port="53" proto="tcp" src_port="80"/>
      <filter dst_ip="168.100.160.173" dst_port="53" proto="udp" src_port="80"/>
      <filter dst_ip="168.100.160.173" dst_port="53" proto="tcp" src_port="80"/>
      <filter dst_ip="168.100.160.173" dst_port="53" proto="udp" src_port="80"/>
      <from sec="1036990864" usec="0"/>
      <to sec="1036991512" usec="0"/>
    </slice>
    <from sec="1036990864" usec="0"/>
    <to sec="1036991512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="148.242.130.190" dst_port="80" proto="tcp" src_ip="148.242.132.197" src_port="80"/>
      <filter dst_ip="148.242.130.190" dst_port="80" proto="udp" src_ip="148.242.132.197" src_port="80"/>
      <filter dst_ip="148.242.130.190" dst_port="80" proto="tcp" src_ip="148.242.132.197" src_port="80"/>
      <filter dst_ip="148.242.130.190" dst_port="80" proto="udp" src_ip="148.242.132.197" src_port="80"/>
      <filter dst_ip="148.242.130.190" dst_port="80" proto="tcp" src_ip="148.242.132.197" src_port="80"/>
      <filter dst_ip="148.242.130.190" dst_port="80" proto="udp" src_ip="148.242.132.197" src_port="80"/>
      <filter dst_ip="148.242.130.190" dst_port="80" proto="tcp" src_ip="148.242.132.197" src_port="80"/>
      <filter dst_ip="148.242.130.190" dst_port="80" proto="udp" src_ip="148.242.132.197" src_port="80"/>
      <filter dst_ip="148.242.130.190" dst_port="137" proto="tcp" src_ip="148.242.132.197" src_port="80"/>
      <filter dst_ip="148.242.130.190" dst_port="137" proto="udp" src_ip="148.242.132.197" src_port="80"/>
      <filter dst_ip="148.242.130.190" dst_port="137" proto="tcp" src_ip="148.242.132.197" src_port="80"/>
      <filter dst_ip="148.242.130.190" dst_port="137" proto="udp" src_ip="148.242.132.197" src_port="80"/>
      <filter dst_ip="148.242.130.190" dst_port="137" proto="tcp" src_ip="148.242.132.197" src_port="80"/>
      <filter dst_ip="148.242.130.190" dst_port="137" proto="udp" src_ip="148.242.132.197" src_port="80"/>
      <filter dst_ip="148.242.130.190" dst_port="137" proto="tcp" src_ip="148.242.132.197" src_port="80"/>
      <filter dst_ip="148.242.130.190" dst_port="137" proto="udp" src_ip="148.242.132.197" src_port="80"/>
      <filter dst_ip="148.242.130.190" dst_port="80" proto="tcp" src_ip="148.242.132.197" src_port="6699"/>
      <filter dst_ip="148.242.130.190" dst_port="80" proto="udp" src_ip="148.242.132.197" src_port="6699"/>
      <filter dst_ip="148.242.130.190" dst_port="80" proto="tcp" src_ip="148.242.132.197" src_port="6699"/>
      <filter dst_ip="148.242.130.190" dst_port="80" proto="udp" src_ip="148.242.132.197" src_port="6699"/>
      <filter dst_ip="148.242.130.190" dst_port="80" proto="tcp" src_ip="148.242.132.197" src_port="6699"/>
      <filter dst_ip="148.242.130.190" dst_port="80" proto="udp" src_ip="148.242.132.197" src_port="6699"/>
      <filter dst_ip="148.242.130.190" dst_port="80" proto="tcp" src_ip="148.242.132.197" src_port="6699"/>
      <filter dst_ip="148.242.130.190" dst_port="80" proto="udp" src_ip="148.242.132.197" src_port="6699"/>
      <filter dst_ip="148.242.130.190" dst_port="137" proto="tcp" src_ip="148.242.132.197" src_port="6699"/>
      <filter dst_ip="148.242.130.190" dst_port="137" proto="udp" src_ip="148.242.132.197" src_port="6699"/>
      <filter dst_ip="148.242.130.190" dst_port="137" proto="tcp" src_ip="148.242.132.197" src_port="6699"/>
      <filter dst_ip="148.242.130.190" dst_port="137" proto="udp" src_ip="148.242.132.197" src_port="6699"/>
      <filter dst_ip="148.242.130.190" dst_port="137" proto="tcp" src_ip="148.242.132.197" src_port="6699"/>
      <filter dst_ip="148.242.130.190" dst_port="137" proto="udp" src_ip="148.242.132.197" src_port="6699"/>
      <filter dst_ip="148.242.130.190" dst_port="137" proto="tcp" src_ip="148.242.132.197" src_port="6699"/>
      <filter dst_ip="148.242.130.190" dst_port="137" proto="udp" src_ip="148.242.132.197" src_port="6699"/>
      <from sec="1036991491" usec="0"/>
      <to sec="1036991496" usec="0"/>
    </slice>
    <from sec="1036991491" usec="0"/>
    <to sec="1036991502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="9.88.51.74" proto="icmp"/>
      <filter dst_ip="9.88.51.74" proto="icmp"/>
      <filter dst_ip="9.88.51.74" proto="icmp"/>
      <filter dst_ip="9.88.51.74" proto="icmp"/>
      <from sec="1036991380" usec="0"/>
      <to sec="1036991386" usec="0"/>
    </slice>
    <from sec="1036991380" usec="0"/>
    <to sec="1036991386" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="202.144.188.141" proto="icmp"/>
      <filter dst_ip="202.144.188.141" proto="icmp"/>
      <filter dst_ip="202.144.188.141" proto="icmp"/>
      <filter dst_ip="202.144.188.141" proto="icmp"/>
      <from sec="1036990866" usec="0"/>
      <to sec="1036990873" usec="0"/>
    </slice>
    <from sec="1036990866" usec="0"/>
    <to sec="1036990873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="80" proto="tcp" src_ip="201.75.67.213" src_port="80"/>
      <filter dst_port="80" proto="udp" src_ip="201.75.67.213" src_port="80"/>
      <filter dst_port="53" proto="tcp" src_ip="201.75.67.213" src_port="80"/>
      <filter dst_port="53" proto="udp" src_ip="201.75.67.213" src_port="80"/>
      <filter dst_port="137" proto="tcp" src_ip="201.75.67.213" src_port="80"/>
      <filter dst_port="137" proto="udp" src_ip="201.75.67.213" src_port="80"/>
      <from sec="1036991003" usec="0"/>
      <to sec="1036991234" usec="0"/>
    </slice>
    <from sec="1036991003" usec="0"/>
    <to sec="1036991235" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="148.242.133.11" dst_port="80" proto="tcp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.133.11" dst_port="80" proto="udp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.133.11" dst_port="80" proto="tcp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.133.11" dst_port="80" proto="udp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.133.11" dst_port="80" proto="tcp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.133.11" dst_port="80" proto="udp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.133.11" dst_port="80" proto="tcp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.133.11" dst_port="80" proto="udp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.133.11" dst_port="53" proto="tcp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.133.11" dst_port="53" proto="udp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.133.11" dst_port="53" proto="tcp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.133.11" dst_port="53" proto="udp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.133.11" dst_port="53" proto="tcp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.133.11" dst_port="53" proto="udp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.133.11" dst_port="53" proto="tcp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.133.11" dst_port="53" proto="udp" src_ip="76.161.141.52" src_port="80"/>
      <filter dst_ip="148.242.133.11" dst_port="80" proto="tcp" src_ip="76.161.141.52" src_port="6699"/>
      <filter dst_ip="148.242.133.11" dst_port="80" proto="udp" src_ip="76.161.141.52" src_port="6699"/>
      <filter dst_ip="148.242.133.11" dst_port="80" proto="tcp" src_ip="76.161.141.52" src_port="6699"/>
      <filter dst_ip="148.242.133.11" dst_port="80" proto="udp" src_ip="76.161.141.52" src_port="6699"/>
      <filter dst_ip="148.242.133.11" dst_port="80" proto="tcp" src_ip="76.161.141.52" src_port="6699"/>
      <filter dst_ip="148.242.133.11" dst_port="80" proto="udp" src_ip="76.161.141.52" src_port="6699"/>
      <filter dst_ip="148.242.133.11" dst_port="80" proto="tcp" src_ip="76.161.141.52" src_port="6699"/>
      <filter dst_ip="148.242.133.11" dst_port="80" proto="udp" src_ip="76.161.141.52" src_port="6699"/>
      <filter dst_ip="148.242.133.11" dst_port="53" proto="tcp" src_ip="76.161.141.52" src_port="6699"/>
      <filter dst_ip="148.242.133.11" dst_port="53" proto="udp" src_ip="76.161.141.52" src_port="6699"/>
      <filter dst_ip="148.242.133.11" dst_port="53" proto="tcp" src_ip="76.161.141.52" src_port="6699"/>
      <filter dst_ip="148.242.133.11" dst_port="53" proto="udp" src_ip="76.161.141.52" src_port="6699"/>
      <filter dst_ip="148.242.133.11" dst_port="53" proto="tcp" src_ip="76.161.141.52" src_port="6699"/>
      <filter dst_ip="148.242.133.11" dst_port="53" proto="udp" src_ip="76.161.141.52" src_port="6699"/>
      <filter dst_ip="148.242.133.11" dst_port="53" proto="tcp" src_ip="76.161.141.52" src_port="6699"/>
      <filter dst_ip="148.242.133.11" dst_port="53" proto="udp" src_ip="76.161.141.52" src_port="6699"/>
      <from sec="1036991136" usec="0"/>
      <to sec="1036991145" usec="0"/>
    </slice>
    <from sec="1036991132" usec="0"/>
    <to sec="1036991145" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="133.146.209.186" dst_port="80" proto="tcp" src_ip="199.181.29.13" src_port="80"/>
      <filter dst_ip="133.146.209.186" dst_port="80" proto="udp" src_ip="199.181.29.13" src_port="80"/>
      <filter dst_ip="133.146.209.186" dst_port="53" proto="tcp" src_ip="199.181.29.13" src_port="80"/>
      <filter dst_ip="133.146.209.186" dst_port="53" proto="udp" src_ip="199.181.29.13" src_port="80"/>
      <from sec="1036990946" usec="0"/>
      <to sec="1036990948" usec="0"/>
    </slice>
    <from sec="1036990935" usec="0"/>
    <to sec="1036990948" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="133.213.71.90" dst_port="80" proto="tcp" src_ip="201.141.2.164" src_port="37476"/>
      <filter dst_ip="133.213.71.90" dst_port="80" proto="udp" src_ip="201.141.2.164" src_port="37476"/>
      <filter dst_ip="133.213.71.90" dst_port="137" proto="tcp" src_ip="201.141.2.164" src_port="37476"/>
      <filter dst_ip="133.213.71.90" dst_port="137" proto="udp" src_ip="201.141.2.164" src_port="37476"/>
      <filter dst_ip="133.213.71.90" dst_port="53" proto="tcp" src_ip="201.141.2.164" src_port="37476"/>
      <filter dst_ip="133.213.71.90" dst_port="53" proto="udp" src_ip="201.141.2.164" src_port="37476"/>
      <from sec="1036991239" usec="0"/>
      <to sec="1036991242" usec="0"/>
    </slice>
    <from sec="1036991234" usec="0"/>
    <to sec="1036991245" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="80" proto="tcp" src_ip="168.100.160.173" src_port="1027"/>
      <filter dst_port="80" proto="udp" src_ip="168.100.160.173" src_port="1027"/>
      <filter dst_port="53" proto="tcp" src_ip="168.100.160.173" src_port="1027"/>
      <filter dst_port="53" proto="udp" src_ip="168.100.160.173" src_port="1027"/>
      <filter dst_port="137" proto="tcp" src_ip="168.100.160.173" src_port="1027"/>
      <filter dst_port="137" proto="udp" src_ip="168.100.160.173" src_port="1027"/>
      <filter dst_port="25" proto="tcp" src_ip="168.100.160.173" src_port="1027"/>
      <filter dst_port="25" proto="udp" src_ip="168.100.160.173" src_port="1027"/>
      <from sec="1036991050" usec="0"/>
      <to sec="1036991132" usec="0"/>
    </slice>
    <from sec="1036991050" usec="0"/>
    <to sec="1036991132" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69411,2.78935,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="168.100.161.70" dst_port="80" proto="tcp" src_ip="214.119.134.171" src_port="80"/>
      <filter dst_ip="168.100.161.70" dst_port="80" proto="udp" src_ip="214.119.134.171" src_port="80"/>
      <filter dst_ip="168.100.161.70" dst_port="80" proto="tcp" src_ip="214.119.134.171" src_port="80"/>
      <filter dst_ip="168.100.161.70" dst_port="80" proto="udp" src_ip="214.119.134.171" src_port="80"/>
      <filter dst_ip="168.100.161.70" dst_port="80" proto="tcp" src_ip="214.119.134.171" src_port="80"/>
      <filter dst_ip="168.100.161.70" dst_port="80" proto="udp" src_ip="214.119.134.171" src_port="80"/>
      <filter dst_ip="168.100.161.70" dst_port="80" proto="tcp" src_ip="214.119.134.171" src_port="80"/>
      <filter dst_ip="168.100.161.70" dst_port="80" proto="udp" src_ip="214.119.134.171" src_port="80"/>
      <filter dst_ip="168.100.161.70" dst_port="53" proto="tcp" src_ip="214.119.134.171" src_port="80"/>
      <filter dst_ip="168.100.161.70" dst_port="53" proto="udp" src_ip="214.119.134.171" src_port="80"/>
      <filter dst_ip="168.100.161.70" dst_port="53" proto="tcp" src_ip="214.119.134.171" src_port="80"/>
      <filter dst_ip="168.100.161.70" dst_port="53" proto="udp" src_ip="214.119.134.171" src_port="80"/>
      <filter dst_ip="168.100.161.70" dst_port="53" proto="tcp" src_ip="214.119.134.171" src_port="80"/>
      <filter dst_ip="168.100.161.70" dst_port="53" proto="udp" src_ip="214.119.134.171" src_port="80"/>
      <filter dst_ip="168.100.161.70" dst_port="53" proto="tcp" src_ip="214.119.134.171" src_port="80"/>
      <filter dst_ip="168.100.161.70" dst_port="53" proto="udp" src_ip="214.119.134.171" src_port="80"/>
      <filter dst_ip="168.100.161.70" dst_port="137" proto="tcp" src_ip="214.119.134.171" src_port="80"/>
      <filter dst_ip="168.100.161.70" dst_port="137" proto="udp" src_ip="214.119.134.171" src_port="80"/>
      <filter dst_ip="168.100.161.70" dst_port="137" proto="tcp" src_ip="214.119.134.171" src_port="80"/>
      <filter dst_ip="168.100.161.70" dst_port="137" proto="udp" src_ip="214.119.134.171" src_port="80"/>
      <filter dst_ip="168.100.161.70" dst_port="137" proto="tcp" src_ip="214.119.134.171" src_port="80"/>
      <filter dst_ip="168.100.161.70" dst_port="137" proto="udp" src_ip="214.119.134.171" src_port="80"/>
      <filter dst_ip="168.100.161.70" dst_port="137" proto="tcp" src_ip="214.119.134.171" src_port="80"/>
      <filter dst_ip="168.100.161.70" dst_port="137" proto="udp" src_ip="214.119.134.171" src_port="80"/>
      <from sec="1036991347" usec="0"/>
      <to sec="1036991358" usec="0"/>
    </slice>
    <from sec="1036991347" usec="0"/>
    <to sec="1036991358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.71164,2.8924,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="223.7.39.187" dst_port="80" proto="tcp" src_ip="148.242.163.37" src_port="1028"/>
      <filter dst_ip="223.7.39.187" dst_port="80" proto="udp" src_ip="148.242.163.37" src_port="1028"/>
      <filter dst_ip="223.7.39.187" dst_port="137" proto="tcp" src_ip="148.242.163.37" src_port="1028"/>
      <filter dst_ip="223.7.39.187" dst_port="137" proto="udp" src_ip="148.242.163.37" src_port="1028"/>
      <filter dst_ip="223.7.39.187" dst_port="6699" proto="tcp" src_ip="148.242.163.37" src_port="1028"/>
      <filter dst_ip="223.7.39.187" dst_port="6699" proto="udp" src_ip="148.242.163.37" src_port="1028"/>
      <from sec="1036990961" usec="0"/>
      <to sec="1036990977" usec="0"/>
    </slice>
    <from sec="1036990961" usec="0"/>
    <to sec="1036990977" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.77516,2.87185,503,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_144{
style=filled;
color=gray75;
47[label="175.177.32.42s;29pkt 29fpkt", shape=rectangle, color=red];
679[label="175.177.32.42s;27pkt 27fpkt", shape=ellipse, color=green];
stat144[shape=component, label=&lt;Rules:&lt;BR/&gt;{175.177.32.42:*, 210.169.144.235:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1084: (1.78571%)&lt;BR/&gt; 1083: (1.78571%)&lt;BR/&gt; 1082: (1.78571%)&lt;BR/&gt; 1081: (1.78571%)&gt;];
}
47--679[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="210.169.144.235" dst_port="80" src_ip="175.177.32.42"/>
    </slice>
    <from sec="1036990835" usec="0"/>
    <to sec="1036990849" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.71164,2.8924,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="8.133.70.105" dst_port="137" proto="tcp" src_ip="215.156.88.82"/>
      <filter dst_ip="8.133.70.105" dst_port="137" proto="udp" src_ip="215.156.88.82"/>
      <filter dst_ip="8.133.70.105" dst_port="6699" proto="tcp" src_ip="215.156.88.82"/>
      <filter dst_ip="8.133.70.105" dst_port="6699" proto="udp" src_ip="215.156.88.82"/>
      <from sec="1036991087" usec="0"/>
      <to sec="1036991517" usec="0"/>
    </slice>
    <from sec="1036991087" usec="0"/>
    <to sec="1036991517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.71164,2.8924,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="145.208.247.103" dst_port="137" proto="tcp" src_ip="9.204.87.147" src_port="1025"/>
      <filter dst_ip="145.208.247.103" dst_port="137" proto="udp" src_ip="9.204.87.147" src_port="1025"/>
      <filter dst_ip="145.208.247.103" dst_port="6699" proto="tcp" src_ip="9.204.87.147" src_port="1025"/>
      <filter dst_ip="145.208.247.103" dst_port="6699" proto="udp" src_ip="9.204.87.147" src_port="1025"/>
      <filter dst_ip="145.208.247.103" dst_port="80" proto="tcp" src_ip="9.204.87.147" src_port="1025"/>
      <filter dst_ip="145.208.247.103" dst_port="80" proto="udp" src_ip="9.204.87.147" src_port="1025"/>
      <filter dst_ip="145.208.247.103" dst_port="137" proto="tcp" src_ip="9.204.87.147" src_port="1029"/>
      <filter dst_ip="145.208.247.103" dst_port="137" proto="udp" src_ip="9.204.87.147" src_port="1029"/>
      <filter dst_ip="145.208.247.103" dst_port="6699" proto="tcp" src_ip="9.204.87.147" src_port="1029"/>
      <filter dst_ip="145.208.247.103" dst_port="6699" proto="udp" src_ip="9.204.87.147" src_port="1029"/>
      <filter dst_ip="145.208.247.103" dst_port="80" proto="tcp" src_ip="9.204.87.147" src_port="1029"/>
      <filter dst_ip="145.208.247.103" dst_port="80" proto="udp" src_ip="9.204.87.147" src_port="1029"/>
      <from sec="1036991005" usec="0"/>
      <to sec="1036991013" usec="0"/>
    </slice>
    <from sec="1036991005" usec="0"/>
    <to sec="1036991013" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.71164,2.8924,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="173.27.144.95" dst_port="137" proto="tcp" src_ip="145.208.17.166" src_port="1028"/>
      <filter dst_ip="173.27.144.95" dst_port="137" proto="udp" src_ip="145.208.17.166" src_port="1028"/>
      <filter dst_ip="173.27.144.95" dst_port="6699" proto="tcp" src_ip="145.208.17.166" src_port="1028"/>
      <filter dst_ip="173.27.144.95" dst_port="6699" proto="udp" src_ip="145.208.17.166" src_port="1028"/>
      <filter dst_ip="173.27.144.95" dst_port="80" proto="tcp" src_ip="145.208.17.166" src_port="1028"/>
      <filter dst_ip="173.27.144.95" dst_port="80" proto="udp" src_ip="145.208.17.166" src_port="1028"/>
      <from sec="1036990857" usec="0"/>
      <to sec="1036991510" usec="0"/>
    </slice>
    <from sec="1036990857" usec="0"/>
    <to sec="1036991510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.71164,2.8924,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="223.7.39.187" dst_port="137" proto="tcp" src_ip="148.242.162.187" src_port="1026"/>
      <filter dst_ip="223.7.39.187" dst_port="137" proto="udp" src_ip="148.242.162.187" src_port="1026"/>
      <filter dst_ip="223.7.39.187" dst_port="6699" proto="tcp" src_ip="148.242.162.187" src_port="1026"/>
      <filter dst_ip="223.7.39.187" dst_port="6699" proto="udp" src_ip="148.242.162.187" src_port="1026"/>
      <filter dst_ip="223.7.39.187" dst_port="80" proto="tcp" src_ip="148.242.162.187" src_port="1026"/>
      <filter dst_ip="223.7.39.187" dst_port="80" proto="udp" src_ip="148.242.162.187" src_port="1026"/>
      <filter dst_ip="223.7.39.187" dst_port="137" proto="tcp" src_ip="148.242.162.187" src_port="1025"/>
      <filter dst_ip="223.7.39.187" dst_port="137" proto="udp" src_ip="148.242.162.187" src_port="1025"/>
      <filter dst_ip="223.7.39.187" dst_port="6699" proto="tcp" src_ip="148.242.162.187" src_port="1025"/>
      <filter dst_ip="223.7.39.187" dst_port="6699" proto="udp" src_ip="148.242.162.187" src_port="1025"/>
      <filter dst_ip="223.7.39.187" dst_port="80" proto="tcp" src_ip="148.242.162.187" src_port="1025"/>
      <filter dst_ip="223.7.39.187" dst_port="80" proto="udp" src_ip="148.242.162.187" src_port="1025"/>
      <filter dst_ip="223.7.39.187" dst_port="137" proto="tcp" src_ip="148.242.162.187" src_port="1028"/>
      <filter dst_ip="223.7.39.187" dst_port="137" proto="udp" src_ip="148.242.162.187" src_port="1028"/>
      <filter dst_ip="223.7.39.187" dst_port="6699" proto="tcp" src_ip="148.242.162.187" src_port="1028"/>
      <filter dst_ip="223.7.39.187" dst_port="6699" proto="udp" src_ip="148.242.162.187" src_port="1028"/>
      <filter dst_ip="223.7.39.187" dst_port="80" proto="tcp" src_ip="148.242.162.187" src_port="1028"/>
      <filter dst_ip="223.7.39.187" dst_port="80" proto="udp" src_ip="148.242.162.187" src_port="1028"/>
      <from sec="1036991208" usec="0"/>
      <to sec="1036991223" usec="0"/>
    </slice>
    <from sec="1036991208" usec="0"/>
    <to sec="1036991223" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.71164,2.8924,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="80" proto="tcp" src_ip="148.242.162.193" src_port="1025"/>
      <filter dst_port="80" proto="udp" src_ip="148.242.162.193" src_port="1025"/>
      <filter dst_port="137" proto="tcp" src_ip="148.242.162.193" src_port="1025"/>
      <filter dst_port="137" proto="udp" src_ip="148.242.162.193" src_port="1025"/>
      <filter dst_port="6699" proto="tcp" src_ip="148.242.162.193" src_port="1025"/>
      <filter dst_port="6699" proto="udp" src_ip="148.242.162.193" src_port="1025"/>
      <from sec="1036991072" usec="0"/>
      <to sec="1036991094" usec="0"/>
    </slice>
    <from sec="1036991072" usec="0"/>
    <to sec="1036991094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.71164,2.8924,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="201.75.67.213" dst_port="137" proto="tcp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="137" proto="udp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="137" proto="tcp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="137" proto="udp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="137" proto="tcp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="137" proto="udp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="137" proto="tcp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="137" proto="udp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="80" proto="tcp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="80" proto="udp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="80" proto="tcp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="80" proto="udp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="80" proto="tcp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="80" proto="udp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="80" proto="tcp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="80" proto="udp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="6699" proto="tcp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="6699" proto="udp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="6699" proto="tcp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="6699" proto="udp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="6699" proto="tcp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="6699" proto="udp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="6699" proto="tcp" src_port="1025"/>
      <filter dst_ip="201.75.67.213" dst_port="6699" proto="udp" src_port="1025"/>
      <from sec="1036991187" usec="0"/>
      <to sec="1036991250" usec="0"/>
    </slice>
    <from sec="1036991187" usec="0"/>
    <to sec="1036991250" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.77516,2.87185,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_152{
style=filled;
color=gray75;
403[label="9.27.50.87s;84pkt 84fpkt", shape=rectangle, color=red];
725[label="9.27.50.87s;52pkt 52fpkt", shape=ellipse, color=green];
stat152[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.27.50.87:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
403--725[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.27.50.87" src_port="1028"/>
    </slice>
    <from sec="1036990934" usec="0"/>
    <to sec="1036990946" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.77516,2.87185,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_153{
style=filled;
color=gray75;
445[label="215.216.134.121s;242pkt 242fpkt", shape=rectangle, color=red];
727[label="215.216.134.121s;228pkt 228fpkt", shape=ellipse, color=green];
stat153[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.216.134.121:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
445--727[label="1;228pkt 228fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.216.134.121" src_port="1026"/>
    </slice>
    <from sec="1036990900" usec="0"/>
    <to sec="1036990918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.71164,2.8924,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="6699" proto="tcp" src_ip="148.242.165.134" src_port="1025"/>
      <filter dst_port="6699" proto="udp" src_ip="148.242.165.134" src_port="1025"/>
      <filter dst_port="137" proto="tcp" src_ip="148.242.165.134" src_port="1025"/>
      <filter dst_port="137" proto="udp" src_ip="148.242.165.134" src_port="1025"/>
      <filter dst_port="80" proto="tcp" src_ip="148.242.165.134" src_port="1025"/>
      <filter dst_port="80" proto="udp" src_ip="148.242.165.134" src_port="1025"/>
      <from sec="1036990894" usec="0"/>
      <to sec="1036990901" usec="0"/>
    </slice>
    <from sec="1036990894" usec="0"/>
    <to sec="1036990901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.71164,2.8924,999,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="133.213.39.162" dst_port="137" proto="tcp" src_ip="199.162.76.49" src_port="2005"/>
      <filter dst_ip="133.213.39.162" dst_port="137" proto="udp" src_ip="199.162.76.49" src_port="2005"/>
      <filter dst_ip="133.213.39.162" dst_port="139" proto="tcp" src_ip="199.162.76.49" src_port="2005"/>
      <filter dst_ip="133.213.39.162" dst_port="139" proto="udp" src_ip="199.162.76.49" src_port="2005"/>
      <filter dst_ip="133.213.39.162" dst_port="25" proto="tcp" src_ip="199.162.76.49" src_port="2005"/>
      <filter dst_ip="133.213.39.162" dst_port="25" proto="udp" src_ip="199.162.76.49" src_port="2005"/>
      <from sec="1036991013" usec="0"/>
      <to sec="1036991031" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="133.213.39.162" dst_port="137" proto="tcp" src_ip="9.150.224.49" src_port="2005"/>
      <filter dst_ip="133.213.39.162" dst_port="137" proto="udp" src_ip="9.150.224.49" src_port="2005"/>
      <filter dst_ip="133.213.39.162" dst_port="139" proto="tcp" src_ip="9.150.224.49" src_port="2005"/>
      <filter dst_ip="133.213.39.162" dst_port="139" proto="udp" src_ip="9.150.224.49" src_port="2005"/>
      <filter dst_ip="133.213.39.162" dst_port="25" proto="tcp" src_ip="9.150.224.49" src_port="2005"/>
      <filter dst_ip="133.213.39.162" dst_port="25" proto="udp" src_ip="9.150.224.49" src_port="2005"/>
      <from sec="1036991026" usec="0"/>
      <to sec="1036991030" usec="0"/>
    </slice>
    <from sec="1036991013" usec="0"/>
    <to sec="1036991031" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23877,2.68008,504,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_165{
style=filled;
color=gray75;
173[label="145.208.145.243s;299pkt 299fpkt", shape=rectangle, color=red];
272[label="78.89.238.36d;245pkt 245fpkt", shape=rectangle, color=red];
800[label="78.89.238.36;d;327pkt 327fpkt", shape=diamond, color=yellow];
803[label="145.208.145.243;s;335pkt 335fpkt", shape=diamond, color=yellow];
2894[label="78.89.238.36;d;248pkt 248fpkt", shape=hexagon, color=black];
3050[label="145.208.145.243;s;204pkt 204fpkt", shape=hexagon, color=black];
5955[label="145.208.145.243;335pkt 335fpkt", shape=pentagon, color=darkviolet];
7570[label="145.208.145.243;334pkt 334fpkt", shape=invtriangle, color=brown];
stat165[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.145.243:*, 78.89.238.36:443}[94.1349%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (49.0116%)&lt;BR/&gt; 80: (0.451225%)&lt;BR/&gt; 1863: (0.408251%)&lt;BR/&gt; 61178: (0.171895%)&lt;BR/&gt; 61177: (0.171895%)&gt;];
}
173--272[label="0.934694;229pkt 229fpkt"];
173--800[label="1;299pkt 299fpkt"];
173--803[label="1;299pkt 299fpkt"];
173--2894[label="0.96371;239pkt 239fpkt"];
173--3050[label="0.95098;194pkt 194fpkt"];
173--5955[label="1;299pkt 299fpkt"];
173--7570[label="1;299pkt 299fpkt"];
272--800[label="1;245pkt 245fpkt"];
272--803[label="1;245pkt 245fpkt"];
272--2894[label="0.689796;169pkt 169fpkt"];
272--3050[label="0.607843;124pkt 124fpkt"];
272--5955[label="1;245pkt 245fpkt"];
272--7570[label="1;245pkt 245fpkt"];
800--803[label="0.981651;321pkt 321fpkt"];
800--2894[label="1;248pkt 248fpkt"];
800--3050[label="0.97549;199pkt 199fpkt"];
800--5955[label="0.981651;321pkt 321fpkt"];
800--7570[label="0.981651;321pkt 321fpkt"];
803--2894[label="0.983871;244pkt 244fpkt"];
803--3050[label="1;204pkt 204fpkt"];
803--5955[label="1;335pkt 335fpkt"];
803--7570[label="1;334pkt 334fpkt"];
2894--3050[label="0.97549;199pkt 199fpkt"];
2894--5955[label="0.983871;244pkt 244fpkt"];
2894--7570[label="0.983871;244pkt 244fpkt"];
3050--5955[label="1;204pkt 204fpkt"];
3050--7570[label="0.995098;203pkt 203fpkt"];
5955--7570[label="1;334pkt 334fpkt"];
</description>
    <slice>
      <filter dst_ip="78.89.238.36" dst_port="443" src_ip="145.208.145.243"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981541,2.74006,999,0 0 0 1 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_166{
style=filled;
color=gray75;
818[label="145.208.128.35;d;2pkt 2fpkt", shape=diamond, color=yellow];
819[label="198.2.47.226;s;1pkt 1fpkt", shape=diamond, color=yellow];
7457[label="198.2.47.226;1pkt 1fpkt", shape=invtriangle, color=brown];
8390[label="198.2.47.226;1pkt 1fpkt", shape=invhouse, color=bisque];
stat166[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.161.136.139:1863, 145.208.128.35:1035}[50%]&lt;BR/&gt;{198.2.47.226:8864, 145.208.128.35:8864}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8864: (80%)&lt;BR/&gt; 1863: (10%)&lt;BR/&gt; 1035: (10%)&gt;];
}
818--819[label="1;1pkt 1fpkt"];
818--7457[label="1;1pkt 1fpkt"];
818--8390[label="1;1pkt 1fpkt"];
819--7457[label="1;1pkt 1fpkt"];
819--8390[label="1;1pkt 1fpkt"];
7457--8390[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.128.35" dst_port="8864" src_ip="198.2.47.226" src_port="8864"/>
      <filter dst_ip="145.208.128.35" dst_port="1035" src_ip="76.161.136.139" src_port="1863"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991009" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.1762,2.74579,999,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_167{
style=filled;
color=gray75;
825[label="77.52.90.86;d;1pkt 1fpkt", shape=diamond, color=yellow];
828[label="133.213.3.208;s;1pkt 1fpkt", shape=diamond, color=yellow];
2720[label="77.52.90.86;d;1pkt 1fpkt", shape=hexagon, color=black];
7350[label="133.213.3.208;1pkt 1fpkt", shape=invtriangle, color=brown];
stat167[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.213.3.208:6699, 77.52.90.86:3290}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3290: (50%)&gt;];
}
825--828[label="1;1pkt 1fpkt"];
825--2720[label="1;1pkt 1fpkt"];
825--7350[label="1;1pkt 1fpkt"];
828--2720[label="1;1pkt 1fpkt"];
828--7350[label="1;1pkt 1fpkt"];
2720--7350[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="77.52.90.86" dst_port="3290" src_ip="133.213.3.208" src_port="6699"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12548,2.73159,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_168{
style=filled;
color=gray75;
842[label="214.121.184.250;d;3pkt 3fpkt", shape=diamond, color=yellow];
843[label="214.122.98.66;s;1pkt 1fpkt", shape=diamond, color=yellow];
2817[label="214.122.98.66;s;1pkt 1fpkt", shape=hexagon, color=black];
3818[label="73.16.140.7;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat168[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.16.140.7:6699, 214.121.184.250:1185}[33.3333%]&lt;BR/&gt;{214.122.98.66:6699, 214.121.184.250:1978}[33.3333%]&lt;BR/&gt;{214.239.117.76:1028, 214.121.184.250:137}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (41.6667%)&lt;BR/&gt; 1978: (25%)&lt;BR/&gt; 1185: (16.6667%)&lt;BR/&gt; 1028: (8.33333%)&lt;BR/&gt; 137: (8.33333%)&gt;];
}
842--843[label="1;1pkt 1fpkt"];
842--2817[label="1;1pkt 1fpkt"];
842--3818[label="1;1pkt 1fpkt"];
843--2817[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.121.184.250" dst_port="137" src_ip="214.239.117.76" src_port="1028"/>
      <filter dst_ip="214.121.184.250" dst_port="1978" src_ip="214.122.98.66" src_port="6699"/>
      <filter dst_ip="214.121.184.250" dst_port="1185" src_ip="73.16.140.7" src_port="6699"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32241,2.66004,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_169{
style=filled;
color=gray75;
0[label="48.75.123.0s;1pkt 1fpkt", shape=rectangle, color=red];
143[label="205.147.48.206s;1pkt 1fpkt", shape=rectangle, color=red];
847[label="145.208.135.97;d;370pkt 370fpkt", shape=diamond, color=yellow];
849[label="205.147.48.206;s;1pkt 1fpkt", shape=diamond, color=yellow];
962[label="48.175.154.161;s;1pkt 1fpkt", shape=diamond, color=yellow];
1137[label="48.75.123.0;s;1pkt 1fpkt", shape=diamond, color=yellow];
1357[label="48.4.41.236;s;1pkt 1fpkt", shape=diamond, color=yellow];
1725[label="48.172.204.23;s;1pkt 1fpkt", shape=diamond, color=yellow];
2686[label="203.115.77.148;s;2pkt 2fpkt", shape=diamond, color=yellow];
2726[label="145.208.135.97;d;98pkt 98fpkt", shape=hexagon, color=black];
2983[label="48.172.204.23;s;1pkt 1fpkt", shape=hexagon, color=black];
3212[label="48.4.41.236;s;1pkt 1fpkt", shape=hexagon, color=black];
3740[label="48.75.123.0;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3989[label="78.203.151.23;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4024[label="73.43.55.27;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5136[label="203.115.77.148;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6187[label="78.203.151.23;1pkt 1fpkt", shape=invtriangle, color=brown];
6216[label="73.43.55.27;2pkt 2fpkt", shape=invtriangle, color=brown];
7080[label="48.175.154.161;1pkt 1fpkt", shape=invtriangle, color=brown];
7696[label="78.203.151.23;1pkt 1fpkt", shape=invhouse, color=bisque];
stat169[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6257, 145.208.135.97:6257}[90%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (88.0123%)&lt;BR/&gt; 5688: (3.27869%)&lt;BR/&gt; 6699: (0.922131%)&lt;BR/&gt; 1034: (0.614754%)&lt;BR/&gt; 2124: (0.512295%)&gt;];
}
0--847[label="1;1pkt 1fpkt"];
0--1137[label="1;1pkt 1fpkt"];
0--2726[label="1;1pkt 1fpkt"];
0--3740[label="1;1pkt 1fpkt"];
143--847[label="1;1pkt 1fpkt"];
143--849[label="1;1pkt 1fpkt"];
143--2726[label="1;1pkt 1fpkt"];
847--849[label="1;1pkt 1fpkt"];
847--962[label="1;1pkt 1fpkt"];
847--1137[label="1;1pkt 1fpkt"];
847--1357[label="1;1pkt 1fpkt"];
847--1725[label="1;1pkt 1fpkt"];
847--2686[label="1;2pkt 2fpkt"];
847--2726[label="1;98pkt 98fpkt"];
847--2983[label="1;1pkt 1fpkt"];
847--3212[label="1;1pkt 1fpkt"];
847--3714[label="0.0243243;9pkt 9fpkt"];
847--3726[label="0.0243243;9pkt 9fpkt"];
847--3731[label="0.0243243;9pkt 9fpkt"];
847--3740[label="1;1pkt 1fpkt"];
847--3989[label="1;1pkt 1fpkt"];
847--4024[label="1;1pkt 1fpkt"];
847--5136[label="1;1pkt 1fpkt"];
847--6187[label="1;1pkt 1fpkt"];
847--6216[label="1;2pkt 2fpkt"];
847--7080[label="1;1pkt 1fpkt"];
847--7696[label="1;1pkt 1fpkt"];
849--2726[label="1;1pkt 1fpkt"];
962--2726[label="1;1pkt 1fpkt"];
962--7080[label="1;1pkt 1fpkt"];
1137--2726[label="1;1pkt 1fpkt"];
1137--3740[label="1;1pkt 1fpkt"];
1357--2726[label="1;1pkt 1fpkt"];
1357--3212[label="1;1pkt 1fpkt"];
1725--2726[label="1;1pkt 1fpkt"];
1725--2983[label="1;1pkt 1fpkt"];
2686--5136[label="1;1pkt 1fpkt"];
2726--2983[label="1;1pkt 1fpkt"];
2726--3212[label="1;1pkt 1fpkt"];
2726--3714[label="0.0918367;9pkt 9fpkt"];
2726--3726[label="0.0918367;9pkt 9fpkt"];
2726--3731[label="0.0918367;9pkt 9fpkt"];
2726--3740[label="1;1pkt 1fpkt"];
2726--4024[label="1;1pkt 1fpkt"];
2726--6216[label="1;2pkt 2fpkt"];
2726--7080[label="1;1pkt 1fpkt"];
3989--6187[label="1;1pkt 1fpkt"];
3989--7696[label="1;1pkt 1fpkt"];
4024--6216[label="1;1pkt 1fpkt"];
6187--7696[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.135.97" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21992,2.70982,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_170{
style=filled;
color=gray75;
17[label="145.208.128.14s;1pkt 1fpkt", shape=rectangle, color=red];
852[label="145.208.128.14;s;5pkt 5fpkt", shape=diamond, color=yellow];
853[label="197.25.220.213;d;1pkt 1fpkt", shape=diamond, color=yellow];
1468[label="192.218.105.59;d;1pkt 1fpkt", shape=diamond, color=yellow];
2727[label="197.25.220.213;d;1pkt 1fpkt", shape=hexagon, color=black];
3053[label="145.208.128.14;s;5pkt 5fpkt", shape=hexagon, color=black];
3902[label="145.208.128.14;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat170[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.128.14:6699, 42.84.96.48:19928}[20%]&lt;BR/&gt;{145.208.128.14:6699, 192.218.105.59:1031}[20%]&lt;BR/&gt;{145.208.128.14:1096, 76.161.137.97:1863}[20%]&lt;BR/&gt;{145.208.128.14:6699, 197.25.220.213:15670}[20%]&lt;BR/&gt;{145.208.128.14:1094, 193.187.9.249:6699}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (41.6667%)&lt;BR/&gt; 15670: (16.6667%)&lt;BR/&gt; 19928: (8.33333%)&lt;BR/&gt; 1863: (8.33333%)&lt;BR/&gt; 1096: (8.33333%)&gt;];
}
17--852[label="1;1pkt 1fpkt"];
17--853[label="1;1pkt 1fpkt"];
17--2727[label="1;1pkt 1fpkt"];
17--3053[label="1;1pkt 1fpkt"];
17--3902[label="1;1pkt 1fpkt"];
852--853[label="1;1pkt 1fpkt"];
852--1468[label="1;1pkt 1fpkt"];
852--2727[label="1;1pkt 1fpkt"];
852--3053[label="1;5pkt 5fpkt"];
852--3902[label="1;4pkt 4fpkt"];
853--2727[label="1;1pkt 1fpkt"];
853--3053[label="1;1pkt 1fpkt"];
853--3902[label="1;1pkt 1fpkt"];
1468--3053[label="1;1pkt 1fpkt"];
2727--3053[label="1;1pkt 1fpkt"];
2727--3902[label="1;1pkt 1fpkt"];
3053--3902[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="193.187.9.249" dst_port="6699" src_ip="145.208.128.14" src_port="1094"/>
      <filter dst_ip="197.25.220.213" dst_port="15670" src_ip="145.208.128.14" src_port="6699"/>
      <filter dst_ip="76.161.137.97" dst_port="1863" src_ip="145.208.128.14" src_port="1096"/>
      <filter dst_ip="192.218.105.59" dst_port="1031" src_ip="145.208.128.14" src_port="6699"/>
      <filter dst_ip="42.84.96.48" dst_port="19928" src_ip="145.208.128.14" src_port="6699"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15633,2.77483,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_171{
style=filled;
color=gray75;
804[label="145.208.34.117;d;22pkt 22fpkt", shape=diamond, color=yellow];
879[label="202.176.51.209;s;1pkt 1fpkt", shape=diamond, color=yellow];
3057[label="202.176.51.209;s;1pkt 1fpkt", shape=hexagon, color=black];
3470[label="145.208.34.117;d;22pkt 22fpkt", shape=hexagon, color=black];
stat171[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 145.208.34.117:7743}[45.4545%]&lt;BR/&gt;{*:7743, 145.208.34.117:*}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7743: (41.3043%)&lt;BR/&gt; 5190: (4.34783%)&lt;BR/&gt; 2522: (4.34783%)&lt;BR/&gt; 64026: (2.17391%)&lt;BR/&gt; 63234: (2.17391%)&gt;];
}
804--879[label="1;1pkt 1fpkt"];
804--3057[label="1;1pkt 1fpkt"];
804--3470[label="1;22pkt 22fpkt"];
879--3057[label="1;1pkt 1fpkt"];
879--3470[label="1;1pkt 1fpkt"];
3057--3470[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.34.117" src_port="7743"/>
      <filter dst_ip="145.208.34.117" dst_port="7743"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.795292,2.74539,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_172{
style=filled;
color=gray75;
898[label="197.176.20.103;d;2pkt 2fpkt", shape=diamond, color=yellow];
899[label="145.208.138.89;s;1pkt 1fpkt", shape=diamond, color=yellow];
4628[label="145.208.138.89;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat172[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.133.33:8864, 197.176.20.103:8864}[50%]&lt;BR/&gt;{145.208.138.89:8864, 197.176.20.103:8864}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8864: (100%)&gt;];
}
898--899[label="1;1pkt 1fpkt"];
898--1204[label="0.5;1pkt 1fpkt"];
898--4079[label="0.5;1pkt 1fpkt"];
898--4628[label="1;1pkt 1fpkt"];
899--4628[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.176.20.103" dst_port="8864" src_ip="145.208.138.89" src_port="8864"/>
      <filter dst_ip="197.176.20.103" dst_port="8864" src_ip="145.208.133.33" src_port="8864"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991406" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14589,2.70209,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_173{
style=filled;
color=gray75;
900[label="8.123.130.75;d;2pkt 2fpkt", shape=diamond, color=yellow];
902[label="145.208.176.181;s;14pkt 14fpkt", shape=diamond, color=yellow];
1139[label="34.6.226.87;d;1pkt 1fpkt", shape=diamond, color=yellow];
2777[label="34.6.226.87;d;1pkt 1fpkt", shape=hexagon, color=black];
5430[label="145.208.176.181;15pkt 15fpkt", shape=pentagon, color=darkviolet];
7217[label="145.208.176.181;16pkt 16fpkt", shape=invtriangle, color=brown];
stat173[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.176.181:*, 85.89.102.248:*}[56.25%]&lt;BR/&gt;{145.208.176.181:17010, *:*}[37.5%]&lt;BR/&gt;{145.208.176.181:17009, *:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 17010: (16.3265%)&lt;BR/&gt; 17009: (15.3061%)&lt;BR/&gt; 3789: (5.10204%)&lt;BR/&gt; 1132: (4.08163%)&lt;BR/&gt; 1131: (4.08163%)&gt;];
}
900--902[label="1;2pkt 2fpkt"];
900--5430[label="1;2pkt 2fpkt"];
900--7217[label="1;2pkt 2fpkt"];
902--1139[label="1;1pkt 1fpkt"];
902--2777[label="1;1pkt 1fpkt"];
902--5430[label="0.928571;13pkt 13fpkt"];
902--7217[label="1;14pkt 14fpkt"];
1139--2777[label="1;1pkt 1fpkt"];
1139--5430[label="1;1pkt 1fpkt"];
1139--7217[label="1;1pkt 1fpkt"];
2777--5430[label="1;1pkt 1fpkt"];
2777--7217[label="1;1pkt 1fpkt"];
5430--7217[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="85.89.102.248" src_ip="145.208.176.181"/>
      <filter src_ip="145.208.176.181" src_port="17010"/>
      <filter src_ip="145.208.176.181" src_port="17009"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24844,2.7534,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_174{
style=filled;
color=gray75;
14[label="48.73.150.13s;1pkt 1fpkt", shape=rectangle, color=red];
788[label="145.208.134.83;d;3pkt 3fpkt", shape=diamond, color=yellow];
790[label="198.153.210.214;s;1pkt 1fpkt", shape=diamond, color=yellow];
925[label="48.73.150.13;s;1pkt 1fpkt", shape=diamond, color=yellow];
2709[label="145.208.134.83;d;2pkt 2fpkt", shape=hexagon, color=black];
stat174[shape=component, label=&lt;Rules:&lt;BR/&gt;{223.132.68.6:0, 145.208.134.83:0}[33.3333%]&lt;BR/&gt;{48.73.150.13:6699, 145.208.134.83:3185}[33.3333%]&lt;BR/&gt;{198.153.210.214:6699, 145.208.134.83:3267}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (43.75%)&lt;BR/&gt; 3185: (25%)&lt;BR/&gt; 3267: (18.75%)&lt;BR/&gt; 0: (12.5%)&gt;];
}
14--788[label="1;1pkt 1fpkt"];
14--925[label="1;1pkt 1fpkt"];
14--2709[label="1;1pkt 1fpkt"];
788--790[label="1;1pkt 1fpkt"];
788--925[label="1;1pkt 1fpkt"];
788--2709[label="1;2pkt 2fpkt"];
790--2709[label="1;1pkt 1fpkt"];
925--2709[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.134.83" dst_port="3267" src_ip="198.153.210.214" src_port="6699"/>
      <filter dst_ip="145.208.134.83" dst_port="3185" src_ip="48.73.150.13" src_port="6699"/>
      <filter dst_ip="145.208.134.83" src_ip="223.132.68.6"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945007,2.69627,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_175{
style=filled;
color=gray75;
926[label="78.191.27.222;d;1pkt 1fpkt", shape=diamond, color=yellow];
927[label="145.32.1.85;s;988pkt 988fpkt", shape=diamond, color=yellow];
4589[label="145.32.1.85;1086pkt 1086fpkt", shape=pentagon, color=darkviolet];
6610[label="145.32.1.85;1085pkt 1085fpkt", shape=invtriangle, color=brown];
7920[label="145.32.1.85;1086pkt 1086fpkt", shape=invhouse, color=bisque];
stat175[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.32.1.85:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
926--927[label="1;1pkt 1fpkt"];
926--4589[label="1;1pkt 1fpkt"];
926--6610[label="1;1pkt 1fpkt"];
926--7920[label="1;1pkt 1fpkt"];
927--4589[label="1;988pkt 988fpkt"];
927--6610[label="0.998988;987pkt 987fpkt"];
927--7920[label="1;988pkt 988fpkt"];
4589--6610[label="1;1085pkt 1085fpkt"];
4589--7920[label="1;1086pkt 1086fpkt"];
6610--7920[label="1;1085pkt 1085fpkt"];
</description>
    <slice>
      <filter src_ip="145.32.1.85"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21992,2.70982,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_176{
style=filled;
color=gray75;
622[label="175.177.157.134s;1pkt 1fpkt", shape=rectangle, color=red];
795[label="85.89.249.151;d;1pkt 1fpkt", shape=diamond, color=yellow];
797[label="175.177.157.134;s;175pkt 175fpkt", shape=diamond, color=yellow];
944[label="218.16.70.111;d;1pkt 1fpkt", shape=diamond, color=yellow];
1647[label="200.38.137.207;d;9pkt 9fpkt", shape=diamond, color=yellow];
1869[label="34.136.71.147;d;1pkt 1fpkt", shape=diamond, color=yellow];
2235[label="85.90.97.112;d;1pkt 1fpkt", shape=diamond, color=yellow];
2748[label="218.16.70.111;d;1pkt 1fpkt", shape=hexagon, color=black];
2921[label="200.38.137.207;d;8pkt 8fpkt", shape=hexagon, color=black];
5006[label="175.177.157.134;182pkt 182fpkt", shape=pentagon, color=darkviolet];
stat176[shape=component, label=&lt;Rules:&lt;BR/&gt;{175.177.157.134:4735, *:4665}[29.6703%]&lt;BR/&gt;{175.177.157.134:*, *:4662}[20.8791%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4735: (19.2105%)&lt;BR/&gt; 4665: (14.2105%)&lt;BR/&gt; 1412: (10.3947%)&lt;BR/&gt; 4662: (10.1316%)&lt;BR/&gt; 412: (6.18421%)&gt;];
}
622--797[label="1;1pkt 1fpkt"];
622--944[label="1;1pkt 1fpkt"];
622--2748[label="1;1pkt 1fpkt"];
622--5006[label="1;1pkt 1fpkt"];
795--797[label="1;1pkt 1fpkt"];
795--5006[label="1;1pkt 1fpkt"];
797--944[label="1;1pkt 1fpkt"];
797--1647[label="1;9pkt 9fpkt"];
797--1869[label="1;1pkt 1fpkt"];
797--2114[label="0.0140845;1pkt 1fpkt"];
797--2235[label="1;1pkt 1fpkt"];
797--2748[label="1;1pkt 1fpkt"];
797--2921[label="1;8pkt 8fpkt"];
797--3249[label="0.0204082;1pkt 1fpkt"];
797--5006[label="1;175pkt 175fpkt"];
944--2748[label="1;1pkt 1fpkt"];
944--5006[label="1;1pkt 1fpkt"];
1647--2921[label="1;8pkt 8fpkt"];
1647--5006[label="1;9pkt 9fpkt"];
1869--5006[label="1;1pkt 1fpkt"];
2235--5006[label="1;1pkt 1fpkt"];
2748--5006[label="1;1pkt 1fpkt"];
2921--5006[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_port="4662" src_ip="175.177.157.134"/>
      <filter dst_port="4665" src_ip="175.177.157.134" src_port="4735"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05572,2.67421,999,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_177{
style=filled;
color=gray75;
80[label="199.16.95.92s;1pkt 1fpkt", shape=rectangle, color=red];
901[label="145.208.176.181;d;15pkt 15fpkt", shape=diamond, color=yellow];
1004[label="199.16.95.92;s;3pkt 3fpkt", shape=diamond, color=yellow];
4649[label="199.16.95.92;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6656[label="199.16.95.92;3pkt 3fpkt", shape=invtriangle, color=brown];
7943[label="199.16.95.92;2pkt 2fpkt", shape=invhouse, color=bisque];
stat177[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.16.95.92:*, 145.208.176.181:17009}[20%]&lt;BR/&gt;{85.89.102.248:*, 145.208.176.181:17010}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 17009: (27.7778%)&lt;BR/&gt; 2943: (11.1111%)&lt;BR/&gt; 17010: (9.25926%)&lt;BR/&gt; 3014: (9.25926%)&lt;BR/&gt; 2870: (7.40741%)&gt;];
}
80--901[label="1;1pkt 1fpkt"];
80--1004[label="1;1pkt 1fpkt"];
80--4649[label="1;1pkt 1fpkt"];
80--6656[label="1;1pkt 1fpkt"];
80--7943[label="1;1pkt 1fpkt"];
901--1004[label="1;3pkt 3fpkt"];
901--4649[label="1;3pkt 3fpkt"];
901--6656[label="1;3pkt 3fpkt"];
901--7943[label="1;2pkt 2fpkt"];
1004--4649[label="1;3pkt 3fpkt"];
1004--6656[label="1;3pkt 3fpkt"];
1004--7943[label="1;2pkt 2fpkt"];
4649--6656[label="1;3pkt 3fpkt"];
4649--7943[label="1;2pkt 2fpkt"];
6656--7943[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.176.181" dst_port="17010" src_ip="85.89.102.248"/>
      <filter dst_ip="145.208.176.181" dst_port="17009" src_ip="199.16.95.92"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15633,2.77483,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_178{
style=filled;
color=gray75;
1016[label="145.197.245.53;d;6pkt 6fpkt", shape=diamond, color=yellow];
1017[label="193.110.139.154;s;6pkt 6fpkt", shape=diamond, color=yellow];
2759[label="193.110.139.154;s;6pkt 6fpkt", shape=hexagon, color=black];
3076[label="145.197.245.53;d;6pkt 6fpkt", shape=hexagon, color=black];
stat178[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.110.139.154:7070, 145.197.245.53:*}[50%]&lt;BR/&gt;{193.110.139.154:*, 145.197.245.53:6970}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7070: (25%)&lt;BR/&gt; 6970: (16.6667%)&lt;BR/&gt; 63292: (8.33333%)&lt;BR/&gt; 63267: (8.33333%)&lt;BR/&gt; 62354: (8.33333%)&gt;];
}
1016--1017[label="1;6pkt 6fpkt"];
1016--2759[label="1;6pkt 6fpkt"];
1016--3076[label="1;6pkt 6fpkt"];
1017--2759[label="1;6pkt 6fpkt"];
1017--3076[label="1;6pkt 6fpkt"];
2759--3076[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="145.197.245.53" src_ip="193.110.139.154" src_port="7070"/>
      <filter dst_ip="145.197.245.53" dst_port="6970" src_ip="193.110.139.154"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24844,2.7534,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_179{
style=filled;
color=gray75;
172[label="9.177.46.243s;1pkt 1fpkt", shape=rectangle, color=red];
1036[label="145.208.132.173;d;2pkt 2fpkt", shape=diamond, color=yellow];
1037[label="9.177.46.243;s;1pkt 1fpkt", shape=diamond, color=yellow];
2762[label="9.177.46.243;s;1pkt 1fpkt", shape=hexagon, color=black];
2837[label="145.208.132.173;d;2pkt 2fpkt", shape=hexagon, color=black];
stat179[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.161.137.204:1863, 145.208.132.173:1195}[50%]&lt;BR/&gt;{9.177.46.243:5001, 145.208.132.173:1197}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (35.7143%)&lt;BR/&gt; 1197: (35.7143%)&lt;BR/&gt; 1863: (14.2857%)&lt;BR/&gt; 1195: (14.2857%)&gt;];
}
172--1036[label="1;1pkt 1fpkt"];
172--1037[label="1;1pkt 1fpkt"];
172--2762[label="1;1pkt 1fpkt"];
172--2837[label="1;1pkt 1fpkt"];
1036--1037[label="1;1pkt 1fpkt"];
1036--2762[label="1;1pkt 1fpkt"];
1036--2837[label="1;2pkt 2fpkt"];
1037--2762[label="1;1pkt 1fpkt"];
1037--2837[label="1;1pkt 1fpkt"];
2762--2837[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.132.173" dst_port="1197" src_ip="9.177.46.243" src_port="5001"/>
      <filter dst_ip="145.208.132.173" dst_port="1195" src_ip="76.161.137.204" src_port="1863"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.838376,2.78842,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_182{
style=filled;
color=gray75;
1108[label="214.121.190.144;d;2pkt 2fpkt", shape=diamond, color=yellow];
1109[label="9.177.46.237;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat182[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.219.59.112:39220, 214.121.190.144:80}[50%]&lt;BR/&gt;{9.177.46.237:5001, 214.121.190.144:3015}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (33.3333%)&lt;BR/&gt; 3015: (33.3333%)&lt;BR/&gt; 39220: (16.6667%)&lt;BR/&gt; 80: (16.6667%)&gt;];
}
1108--1109[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.121.190.144" dst_port="3015" src_ip="9.177.46.237" src_port="5001"/>
      <filter dst_ip="214.121.190.144" dst_port="80" src_ip="9.219.59.112" src_port="39220"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24844,2.7534,010,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_183{
style=filled;
color=gray75;
83[label="214.121.188.100s;1pkt 1fpkt", shape=rectangle, color=red];
979[label="214.121.188.100;s;1029pkt 1029fpkt", shape=diamond, color=yellow];
1129[label="9.212.127.147;d;2pkt 2fpkt", shape=diamond, color=yellow];
1346[label="9.212.127.152;d;701pkt 701fpkt", shape=diamond, color=yellow];
1931[label="214.228.177.97;d;175pkt 175fpkt", shape=diamond, color=yellow];
2294[label="9.212.127.156;d;1pkt 1fpkt", shape=diamond, color=yellow];
2930[label="9.212.127.152;d;370pkt 370fpkt", shape=hexagon, color=black];
3199[label="214.121.188.100;s;744pkt 744fpkt", shape=hexagon, color=black];
3582[label="9.212.127.156;d;1pkt 1fpkt", shape=hexagon, color=black];
stat183[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.121.188.100:*, 9.212.127.152:1755}[79.7862%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (41.1706%)&lt;BR/&gt; 21: (7.85384%)&lt;BR/&gt; 80: (0.975529%)&lt;BR/&gt; 4998: (0.0661376%)&lt;BR/&gt; 4997: (0.0661376%)&gt;];
}
83--979[label="1;1pkt 1fpkt"];
83--1129[label="1;1pkt 1fpkt"];
83--3199[label="1;1pkt 1fpkt"];
979--1129[label="1;2pkt 2fpkt"];
979--1346[label="1;701pkt 701fpkt"];
979--1931[label="1;175pkt 175fpkt"];
979--2294[label="1;1pkt 1fpkt"];
979--2930[label="1;370pkt 370fpkt"];
979--3199[label="1;744pkt 744fpkt"];
979--3582[label="1;1pkt 1fpkt"];
1129--3199[label="1;2pkt 2fpkt"];
1346--2930[label="1;370pkt 370fpkt"];
1346--3199[label="0.845934;593pkt 593fpkt"];
1931--3199[label="0.714286;125pkt 125fpkt"];
2294--3199[label="1;1pkt 1fpkt"];
2294--3582[label="1;1pkt 1fpkt"];
2930--3199[label="1;370pkt 370fpkt"];
3199--3582[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="9.212.127.152" dst_port="1755" src_ip="214.121.188.100"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.924114,2.72373,999,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_184{
style=filled;
color=gray75;
10[label="145.208.87.8s;1pkt 1fpkt", shape=rectangle, color=red];
1151[label="145.208.87.8;s;1pkt 1fpkt", shape=diamond, color=yellow];
1152[label="210.169.149.236;d;1pkt 1fpkt", shape=diamond, color=yellow];
3827[label="145.208.87.8;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat184[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.87.8:49157, 210.169.149.236:8006}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49157: (50%)&lt;BR/&gt; 8006: (50%)&gt;];
}
10--1151[label="1;1pkt 1fpkt"];
10--1152[label="1;1pkt 1fpkt"];
10--3827[label="1;1pkt 1fpkt"];
1151--1152[label="1;1pkt 1fpkt"];
1151--3827[label="1;1pkt 1fpkt"];
1152--3827[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.169.149.236" dst_port="8006" src_ip="145.208.87.8" src_port="49157"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12548,2.73159,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_185{
style=filled;
color=gray75;
1150[label="145.208.87.8;d;1pkt 1fpkt", shape=diamond, color=yellow];
1153[label="210.169.149.236;s;1pkt 1fpkt", shape=diamond, color=yellow];
3412[label="210.169.149.236;s;1pkt 1fpkt", shape=hexagon, color=black];
5893[label="210.169.149.236;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat185[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.169.149.236:8006, 145.208.87.8:49157}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49157: (50%)&lt;BR/&gt; 8006: (50%)&gt;];
}
1150--1153[label="1;1pkt 1fpkt"];
1150--3412[label="1;1pkt 1fpkt"];
1150--5893[label="1;1pkt 1fpkt"];
1153--3412[label="1;1pkt 1fpkt"];
1153--5893[label="1;1pkt 1fpkt"];
3412--5893[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.87.8" dst_port="49157" src_ip="210.169.149.236" src_port="8006"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12548,2.73159,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_187{
style=filled;
color=gray75;
1240[label="145.208.134.251;d;2pkt 2fpkt", shape=diamond, color=yellow];
1241[label="202.66.52.194;s;1pkt 1fpkt", shape=diamond, color=yellow];
1242[label="202.176.168.40;s;1pkt 1fpkt", shape=diamond, color=yellow];
3149[label="145.208.134.251;d;2pkt 2fpkt", shape=hexagon, color=black];
5522[label="202.66.52.194;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat187[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.176.168.40:8864, 145.208.134.251:8864}[50%]&lt;BR/&gt;{202.66.52.194:8864, 145.208.134.251:8864}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8864: (100%)&gt;];
}
1240--1241[label="1;1pkt 1fpkt"];
1240--1242[label="1;1pkt 1fpkt"];
1240--3149[label="1;2pkt 2fpkt"];
1240--5522[label="1;1pkt 1fpkt"];
1241--3149[label="1;1pkt 1fpkt"];
1241--5522[label="1;1pkt 1fpkt"];
1242--3149[label="1;1pkt 1fpkt"];
3149--5522[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.134.251" dst_port="8864" src_ip="202.66.52.194" src_port="8864"/>
      <filter dst_ip="145.208.134.251" dst_port="8864" src_ip="202.176.168.40" src_port="8864"/>
    </slice>
    <from sec="1036990862" usec="0"/>
    <to sec="1036991437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.34876,2.70443,999,1 0 0 1 1 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_188{
style=filled;
color=gray75;
118[label="9.177.46.168s;2pkt 2fpkt", shape=rectangle, color=red];
1252[label="214.121.73.51;d;2pkt 2fpkt", shape=diamond, color=yellow];
1253[label="9.177.46.168;s;2pkt 2fpkt", shape=diamond, color=yellow];
1321[label="214.121.163.42;d;3pkt 3fpkt", shape=diamond, color=yellow];
1322[label="9.177.46.172;s;1pkt 1fpkt", shape=diamond, color=yellow];
2832[label="214.121.163.42;d;2pkt 2fpkt", shape=hexagon, color=black];
7091[label="9.177.46.163;1pkt 1fpkt", shape=invtriangle, color=brown];
8186[label="9.177.46.163;1pkt 1fpkt", shape=invhouse, color=bisque];
8218[label="9.177.46.172;1pkt 1fpkt", shape=invhouse, color=bisque];
stat188[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.177.46.163:5001, 214.121.163.42:1155}[20%]&lt;BR/&gt;{9.177.46.172:5001, 214.121.163.42:1154}[20%]&lt;BR/&gt;{215.210.4.242:1025, 214.121.73.51:137}[20%]&lt;BR/&gt;{9.177.46.168:5001, 214.121.73.51:1255}[20%]&lt;BR/&gt;{9.177.46.168:5001, 214.121.163.42:1156}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (46.6667%)&lt;BR/&gt; 1155: (13.3333%)&lt;BR/&gt; 1154: (13.3333%)&lt;BR/&gt; 1255: (10%)&lt;BR/&gt; 1156: (10%)&gt;];
}
118--1252[label="0.5;1pkt 1fpkt"];
118--1253[label="1;2pkt 2fpkt"];
118--1321[label="0.5;1pkt 1fpkt"];
1252--1253[label="0.5;1pkt 1fpkt"];
1253--1321[label="0.5;1pkt 1fpkt"];
1321--1322[label="1;1pkt 1fpkt"];
1321--2832[label="1;2pkt 2fpkt"];
1321--7091[label="1;1pkt 1fpkt"];
1321--8186[label="1;1pkt 1fpkt"];
1321--8218[label="1;1pkt 1fpkt"];
1322--2832[label="1;1pkt 1fpkt"];
1322--8218[label="1;1pkt 1fpkt"];
2832--7091[label="1;1pkt 1fpkt"];
2832--8186[label="1;1pkt 1fpkt"];
2832--8218[label="1;1pkt 1fpkt"];
7091--8186[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.121.163.42" dst_port="1156" src_ip="9.177.46.168" src_port="5001"/>
      <filter dst_ip="214.121.73.51" dst_port="1255" src_ip="9.177.46.168" src_port="5001"/>
      <filter dst_ip="214.121.73.51" dst_port="137" src_ip="215.210.4.242" src_port="1025"/>
      <filter dst_ip="214.121.163.42" dst_port="1154" src_ip="9.177.46.172" src_port="5001"/>
      <filter dst_ip="214.121.163.42" dst_port="1155" src_ip="9.177.46.163" src_port="5001"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24844,2.7534,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_189{
style=filled;
color=gray75;
73[label="133.213.1.74s;1pkt 1fpkt", shape=rectangle, color=red];
1277[label="198.85.76.117;d;1pkt 1fpkt", shape=diamond, color=yellow];
1278[label="133.213.1.74;s;1pkt 1fpkt", shape=diamond, color=yellow];
2912[label="133.213.1.74;s;1pkt 1fpkt", shape=hexagon, color=black];
stat189[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.213.1.74:6700, 198.85.76.117:1158}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6700: (50%)&lt;BR/&gt; 1158: (50%)&gt;];
}
73--1277[label="1;1pkt 1fpkt"];
73--1278[label="1;1pkt 1fpkt"];
73--2912[label="1;1pkt 1fpkt"];
1277--1278[label="1;1pkt 1fpkt"];
1277--2912[label="1;1pkt 1fpkt"];
1278--2912[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.85.76.117" dst_port="1158" src_ip="133.213.1.74" src_port="6700"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991447" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.924114,2.72373,999,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_190{
style=filled;
color=gray75;
485[label="215.50.7.153s;1pkt 1fpkt", shape=rectangle, color=red];
1296[label="77.219.171.153;s;1pkt 1fpkt", shape=diamond, color=yellow];
5190[label="77.219.171.153;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat190[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.219.171.153:6699, 145.208.139.146:1367}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1367: (50%)&gt;];
}
485--875[label="1;1pkt 1fpkt"];
485--1296[label="1;1pkt 1fpkt"];
485--5190[label="1;1pkt 1fpkt"];
1296--5190[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.139.146" dst_port="1367" src_ip="77.219.171.153" src_port="6699"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23582,2.68221,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_191{
style=filled;
color=gray75;
954[label="136.20.28.3;s;2pkt 2fpkt", shape=diamond, color=yellow];
1312[label="214.121.162.15;d;2pkt 2fpkt", shape=diamond, color=yellow];
1770[label="214.121.163.55;d;2pkt 2fpkt", shape=diamond, color=yellow];
2749[label="136.20.28.3;s;2pkt 2fpkt", shape=hexagon, color=black];
3776[label="136.20.28.3;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6052[label="136.20.28.3;1pkt 1fpkt", shape=invtriangle, color=brown];
7637[label="136.20.28.3;2pkt 2fpkt", shape=invhouse, color=bisque];
stat191[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.240.192.6:80, 214.121.163.55:1132}[25%]&lt;BR/&gt;{198.65.45.102:1029, 214.121.162.15:137}[25%]&lt;BR/&gt;{136.20.28.3:5002, 214.121.162.15:1417}[25%]&lt;BR/&gt;{136.20.28.3:5001, 214.121.163.55:1040}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (23.0769%)&lt;BR/&gt; 1040: (23.0769%)&lt;BR/&gt; 5002: (19.2308%)&lt;BR/&gt; 1417: (19.2308%)&lt;BR/&gt; 1132: (3.84615%)&gt;];
}
954--1312[label="0.5;1pkt 1fpkt"];
954--1770[label="0.5;1pkt 1fpkt"];
954--2749[label="1;2pkt 2fpkt"];
954--3776[label="1;2pkt 2fpkt"];
954--6052[label="1;1pkt 1fpkt"];
954--7637[label="1;2pkt 2fpkt"];
1312--2749[label="0.5;1pkt 1fpkt"];
1312--3776[label="0.5;1pkt 1fpkt"];
1312--4734[label="0.5;1pkt 1fpkt"];
1312--7637[label="0.5;1pkt 1fpkt"];
1770--2749[label="0.5;1pkt 1fpkt"];
1770--3776[label="0.5;1pkt 1fpkt"];
1770--6052[label="1;1pkt 1fpkt"];
1770--7637[label="0.5;1pkt 1fpkt"];
2749--3776[label="1;2pkt 2fpkt"];
2749--6052[label="1;1pkt 1fpkt"];
2749--7637[label="1;2pkt 2fpkt"];
3776--6052[label="1;1pkt 1fpkt"];
3776--7637[label="1;2pkt 2fpkt"];
6052--7637[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.121.163.55" dst_port="1040" src_ip="136.20.28.3" src_port="5001"/>
      <filter dst_ip="214.121.162.15" dst_port="1417" src_ip="136.20.28.3" src_port="5002"/>
      <filter dst_ip="214.121.162.15" dst_port="137" src_ip="198.65.45.102" src_port="1029"/>
      <filter dst_ip="214.121.163.55" dst_port="1132" src_ip="76.240.192.6" src_port="80"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.924114,2.72373,999,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_192{
style=filled;
color=gray75;
6[label="145.208.35.2s;1pkt 1fpkt", shape=rectangle, color=red];
1344[label="76.172.95.103;d;2pkt 2fpkt", shape=diamond, color=yellow];
1345[label="145.208.35.2;s;3pkt 3fpkt", shape=diamond, color=yellow];
3768[label="145.208.35.2;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat192[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.213.56.222:49249, 76.172.95.103:5190}[25%]&lt;BR/&gt;{145.208.35.2:61789, 76.172.135.109:5190}[25%]&lt;BR/&gt;{145.208.35.2:61791, 76.172.95.160:5190}[25%]&lt;BR/&gt;{145.208.35.2:61827, 76.172.95.103:5190}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5190: (50%)&lt;BR/&gt; 61827: (22.2222%)&lt;BR/&gt; 61791: (11.1111%)&lt;BR/&gt; 61789: (11.1111%)&lt;BR/&gt; 49249: (5.55556%)&gt;];
}
6--1344[label="1;1pkt 1fpkt"];
6--1345[label="1;1pkt 1fpkt"];
6--3768[label="1;1pkt 1fpkt"];
1344--1345[label="0.5;1pkt 1fpkt"];
1344--3768[label="0.5;1pkt 1fpkt"];
1345--3768[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="76.172.95.103" dst_port="5190" src_ip="145.208.35.2" src_port="61827"/>
      <filter dst_ip="76.172.95.160" dst_port="5190" src_ip="145.208.35.2" src_port="61791"/>
      <filter dst_ip="76.172.135.109" dst_port="5190" src_ip="145.208.35.2" src_port="61789"/>
      <filter dst_ip="76.172.95.103" dst_port="5190" src_ip="133.213.56.222" src_port="49249"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991511" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32241,2.66004,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_193{
style=filled;
color=gray75;
71[label="202.77.75.73s;1pkt 1fpkt", shape=rectangle, color=red];
910[label="215.156.88.168;d;73pkt 73fpkt", shape=diamond, color=yellow];
911[label="21.236.73.181;s;1pkt 1fpkt", shape=diamond, color=yellow];
1302[label="205.135.126.187;s;1pkt 1fpkt", shape=diamond, color=yellow];
1368[label="202.77.75.73;s;1pkt 1fpkt", shape=diamond, color=yellow];
2741[label="215.156.88.168;d;16pkt 16fpkt", shape=hexagon, color=black];
2742[label="21.236.73.181;s;1pkt 1fpkt", shape=hexagon, color=black];
2841[label="202.77.75.73;s;1pkt 1fpkt", shape=hexagon, color=black];
4007[label="203.153.135.25;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4080[label="203.126.140.33;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4341[label="202.180.16.59;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4489[label="202.77.75.73;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4915[label="21.234.172.123;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5426[label="21.236.73.181;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6016[label="202.178.208.254;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6204[label="203.153.135.25;1pkt 1fpkt", shape=invtriangle, color=brown];
6256[label="203.126.140.33;1pkt 1fpkt", shape=invtriangle, color=brown];
6446[label="202.180.16.59;1pkt 1fpkt", shape=invtriangle, color=brown];
6546[label="202.77.75.73;1pkt 1fpkt", shape=invtriangle, color=brown];
6849[label="21.234.172.123;1pkt 1fpkt", shape=invtriangle, color=brown];
7616[label="202.178.208.254;1pkt 1fpkt", shape=invtriangle, color=brown];
7705[label="203.153.135.25;1pkt 1fpkt", shape=invhouse, color=bisque];
7725[label="203.126.140.33;2pkt 2fpkt", shape=invhouse, color=bisque];
7823[label="202.180.16.59;1pkt 1fpkt", shape=invhouse, color=bisque];
8056[label="21.234.172.123;1pkt 1fpkt", shape=invhouse, color=bisque];
8474[label="202.178.208.254;2pkt 2fpkt", shape=invhouse, color=bisque];
stat193[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 215.156.88.168:7743}[50.6849%]&lt;BR/&gt;{*:7743, 215.156.88.168:*}[42.4658%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7743: (47.4576%)&lt;BR/&gt; 65367: (2.9661%)&lt;BR/&gt; 3799: (2.11864%)&lt;BR/&gt; 27676: (1.69492%)&lt;BR/&gt; 4042: (1.69492%)&gt;];
}
71--910[label="1;1pkt 1fpkt"];
71--1368[label="1;1pkt 1fpkt"];
71--2741[label="1;1pkt 1fpkt"];
71--2841[label="1;1pkt 1fpkt"];
71--4489[label="1;1pkt 1fpkt"];
71--6546[label="1;1pkt 1fpkt"];
910--911[label="1;1pkt 1fpkt"];
910--1302[label="1;1pkt 1fpkt"];
910--1368[label="1;1pkt 1fpkt"];
910--2741[label="1;16pkt 16fpkt"];
910--2742[label="1;1pkt 1fpkt"];
910--2841[label="1;1pkt 1fpkt"];
910--4007[label="1;2pkt 2fpkt"];
910--4080[label="1;2pkt 2fpkt"];
910--4341[label="1;1pkt 1fpkt"];
910--4489[label="1;1pkt 1fpkt"];
910--4915[label="1;1pkt 1fpkt"];
910--5426[label="1;1pkt 1fpkt"];
910--6016[label="1;2pkt 2fpkt"];
910--6204[label="1;1pkt 1fpkt"];
910--6256[label="1;1pkt 1fpkt"];
910--6446[label="1;1pkt 1fpkt"];
910--6546[label="1;1pkt 1fpkt"];
910--6849[label="1;1pkt 1fpkt"];
910--7616[label="1;1pkt 1fpkt"];
910--7705[label="1;1pkt 1fpkt"];
910--7725[label="1;2pkt 2fpkt"];
910--7823[label="1;1pkt 1fpkt"];
910--8056[label="1;1pkt 1fpkt"];
910--8474[label="1;2pkt 2fpkt"];
911--2741[label="1;1pkt 1fpkt"];
911--2742[label="1;1pkt 1fpkt"];
911--5426[label="1;1pkt 1fpkt"];
1302--2741[label="1;1pkt 1fpkt"];
1368--2741[label="1;1pkt 1fpkt"];
1368--2841[label="1;1pkt 1fpkt"];
1368--4489[label="1;1pkt 1fpkt"];
1368--6546[label="1;1pkt 1fpkt"];
2741--2742[label="1;1pkt 1fpkt"];
2741--2841[label="1;1pkt 1fpkt"];
2741--4489[label="1;1pkt 1fpkt"];
2741--5426[label="1;1pkt 1fpkt"];
2741--6546[label="1;1pkt 1fpkt"];
2742--5426[label="1;1pkt 1fpkt"];
2841--4489[label="1;1pkt 1fpkt"];
2841--6546[label="1;1pkt 1fpkt"];
4007--6204[label="1;1pkt 1fpkt"];
4007--7705[label="1;1pkt 1fpkt"];
4080--6256[label="1;1pkt 1fpkt"];
4080--7725[label="1;2pkt 2fpkt"];
4341--6446[label="1;1pkt 1fpkt"];
4341--7823[label="1;1pkt 1fpkt"];
4489--6546[label="1;1pkt 1fpkt"];
4915--6849[label="1;1pkt 1fpkt"];
4915--8056[label="1;1pkt 1fpkt"];
6016--7616[label="1;1pkt 1fpkt"];
6016--8474[label="1;2pkt 2fpkt"];
6204--7705[label="1;1pkt 1fpkt"];
6256--7725[label="1;1pkt 1fpkt"];
6446--7823[label="1;1pkt 1fpkt"];
6849--8056[label="1;1pkt 1fpkt"];
7616--8474[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.156.88.168" src_port="7743"/>
      <filter dst_ip="215.156.88.168" dst_port="7743"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.924114,2.72373,503,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_194{
style=filled;
color=gray75;
110[label="203.130.114.153s;1pkt 1fpkt", shape=rectangle, color=red];
1060[label="215.156.95.59;d;21pkt 21fpkt", shape=diamond, color=yellow];
1373[label="203.130.114.153;s;1pkt 1fpkt", shape=diamond, color=yellow];
5184[label="203.130.114.153;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat194[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 215.156.95.59:80}[90.4762%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.5833%)&lt;BR/&gt; 554: (10.4167%)&lt;BR/&gt; 53350: (8.33333%)&lt;BR/&gt; 64372: (2.08333%)&lt;BR/&gt; 64370: (2.08333%)&gt;];
}
110--1060[label="1;1pkt 1fpkt"];
110--1373[label="1;1pkt 1fpkt"];
110--5184[label="1;1pkt 1fpkt"];
1060--1373[label="1;1pkt 1fpkt"];
1060--5184[label="1;1pkt 1fpkt"];
1373--5184[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.156.95.59" dst_port="80"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15633,2.77483,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_195{
style=filled;
color=gray75;
1393[label="175.177.213.248;s;1pkt 1fpkt", shape=diamond, color=yellow];
1394[label="201.61.15.1;d;1pkt 1fpkt", shape=diamond, color=yellow];
3231[label="201.61.15.1;d;1pkt 1fpkt", shape=hexagon, color=black];
stat195[shape=component, label=&lt;Rules:&lt;BR/&gt;{175.177.213.248:56336, 201.61.15.1:20592}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56336: (50%)&lt;BR/&gt; 20592: (50%)&gt;];
}
1393--1394[label="1;1pkt 1fpkt"];
1393--3231[label="1;1pkt 1fpkt"];
1394--3231[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.61.15.1" dst_port="20592" src_ip="175.177.213.248" src_port="56336"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.92477,2.89089,999,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_196{
style=filled;
color=gray75;
1428[label="175.177.69.69;s;1pkt 1fpkt", shape=diamond, color=yellow];
1429[label="76.115.101.239;d;1pkt 1fpkt", shape=diamond, color=yellow];
2959[label="175.177.69.69;s;1pkt 1fpkt", shape=hexagon, color=black];
3505[label="76.115.101.239;d;1pkt 1fpkt", shape=hexagon, color=black];
3688[label="175.177.69.69;s;1pkt 1fpkt", shape=polygon, color=gold];
4437[label="175.177.69.69;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat196[shape=component, label=&lt;Rules:&lt;BR/&gt;{175.177.69.69:4414, 76.115.101.239:6080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6080: (50%)&lt;BR/&gt; 4414: (50%)&gt;];
}
1428--1429[label="1;1pkt 1fpkt"];
1428--2959[label="1;1pkt 1fpkt"];
1428--3505[label="1;1pkt 1fpkt"];
1428--3688[label="1;1pkt 1fpkt"];
1428--4437[label="1;1pkt 1fpkt"];
1429--2959[label="1;1pkt 1fpkt"];
1429--3505[label="1;1pkt 1fpkt"];
1429--3688[label="1;1pkt 1fpkt"];
1429--4437[label="1;1pkt 1fpkt"];
2959--3505[label="1;1pkt 1fpkt"];
2959--3688[label="1;1pkt 1fpkt"];
2959--4437[label="1;1pkt 1fpkt"];
3505--3688[label="1;1pkt 1fpkt"];
3505--4437[label="1;1pkt 1fpkt"];
3688--4437[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="76.115.101.239" dst_port="6080" src_ip="175.177.69.69" src_port="4414"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.34876,2.70443,999,1 0 0 1 1 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_197{
style=filled;
color=gray75;
585[label="199.229.49.239s;1pkt 1fpkt", shape=rectangle, color=red];
1427[label="175.177.69.69;d;2pkt 2fpkt", shape=diamond, color=yellow];
1430[label="76.115.101.239;s;1pkt 1fpkt", shape=diamond, color=yellow];
2960[label="76.115.101.239;s;1pkt 1fpkt", shape=hexagon, color=black];
7537[label="76.115.101.239;1pkt 1fpkt", shape=invtriangle, color=brown];
8441[label="76.115.101.239;1pkt 1fpkt", shape=invhouse, color=bisque];
stat197[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.251.84.189:1130, 175.177.69.69:137}[50%]&lt;BR/&gt;{76.115.101.239:6080, 175.177.69.69:4414}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6080: (42.8571%)&lt;BR/&gt; 4414: (42.8571%)&lt;BR/&gt; 1130: (7.14286%)&lt;BR/&gt; 137: (7.14286%)&gt;];
}
585--1427[label="1;1pkt 1fpkt"];
585--1430[label="1;1pkt 1fpkt"];
585--2960[label="1;1pkt 1fpkt"];
585--7537[label="1;1pkt 1fpkt"];
585--8441[label="1;1pkt 1fpkt"];
1427--1430[label="1;1pkt 1fpkt"];
1427--2960[label="1;1pkt 1fpkt"];
1427--7537[label="1;1pkt 1fpkt"];
1427--8441[label="1;1pkt 1fpkt"];
1430--2960[label="1;1pkt 1fpkt"];
1430--7537[label="1;1pkt 1fpkt"];
1430--8441[label="1;1pkt 1fpkt"];
2960--7537[label="1;1pkt 1fpkt"];
2960--8441[label="1;1pkt 1fpkt"];
7537--8441[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.177.69.69" dst_port="4414" src_ip="76.115.101.239" src_port="6080"/>
      <filter dst_ip="175.177.69.69" dst_port="137" src_ip="9.251.84.189" src_port="1130"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32241,2.66004,503,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_198{
style=filled;
color=gray75;
436[label="214.128.105.112s;1pkt 1fpkt", shape=rectangle, color=red];
1443[label="214.128.105.112;s;160pkt 160fpkt", shape=diamond, color=yellow];
2533[label="129.59.143.109;d;24pkt 24fpkt", shape=diamond, color=yellow];
2854[label="214.128.105.112;s;141pkt 141fpkt", shape=hexagon, color=black];
4823[label="214.128.105.112;178pkt 178fpkt", shape=pentagon, color=darkviolet];
6782[label="214.128.105.112;178pkt 178fpkt", shape=invtriangle, color=brown];
8013[label="214.128.105.112;179pkt 179fpkt", shape=invhouse, color=bisque];
stat198[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.128.105.112:80, 9.188.177.140:*}[20.8955%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52339: (0.348432%)&lt;BR/&gt; 4776: (0.348432%)&lt;BR/&gt; 4775: (0.348432%)&lt;BR/&gt; 65212: (0.29036%)&gt;];
}
436--1443[label="1;1pkt 1fpkt"];
436--2854[label="1;1pkt 1fpkt"];
436--4823[label="1;1pkt 1fpkt"];
436--6782[label="1;1pkt 1fpkt"];
436--8013[label="1;1pkt 1fpkt"];
1443--2533[label="0.0833333;2pkt 2fpkt"];
1443--2854[label="1;141pkt 141fpkt"];
1443--4823[label="0.99375;159pkt 159fpkt"];
1443--6782[label="0.99375;159pkt 159fpkt"];
1443--8013[label="1;160pkt 160fpkt"];
2533--2854[label="0.0833333;2pkt 2fpkt"];
2533--3172[label="0.416667;10pkt 10fpkt"];
2533--4823[label="0.0833333;2pkt 2fpkt"];
2533--4840[label="0.5;12pkt 12fpkt"];
2533--6782[label="0.0833333;2pkt 2fpkt"];
2533--6794[label="0.5;12pkt 12fpkt"];
2533--8013[label="0.0833333;2pkt 2fpkt"];
2533--8021[label="0.5;12pkt 12fpkt"];
2854--4823[label="0.992908;140pkt 140fpkt"];
2854--6782[label="0.992908;140pkt 140fpkt"];
2854--8013[label="1;141pkt 141fpkt"];
4823--6782[label="1;178pkt 178fpkt"];
4823--8013[label="1;178pkt 178fpkt"];
6782--8013[label="1;178pkt 178fpkt"];
</description>
    <slice>
      <filter dst_ip="9.188.177.140" src_ip="214.128.105.112" src_port="80"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15633,2.77483,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_201{
style=filled;
color=gray75;
1483[label="201.61.15.21;d;1pkt 1fpkt", shape=diamond, color=yellow];
1484[label="133.213.165.217;s;1pkt 1fpkt", shape=diamond, color=yellow];
2861[label="201.61.15.21;d;1pkt 1fpkt", shape=hexagon, color=black];
2982[label="133.213.165.217;s;1pkt 1fpkt", shape=hexagon, color=black];
stat201[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.213.165.217:49176, 201.61.15.21:20506}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49176: (50%)&lt;BR/&gt; 20506: (50%)&gt;];
}
1483--1484[label="1;1pkt 1fpkt"];
1483--2861[label="1;1pkt 1fpkt"];
1483--2982[label="1;1pkt 1fpkt"];
1484--2861[label="1;1pkt 1fpkt"];
1484--2982[label="1;1pkt 1fpkt"];
2861--2982[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.61.15.21" dst_port="20506" src_ip="133.213.165.217" src_port="49176"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945007,2.69627,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_203{
style=filled;
color=gray75;
1568[label="76.114.91.195;s;12pkt 12fpkt", shape=diamond, color=yellow];
1569[label="148.242.132.218;d;12pkt 12fpkt", shape=diamond, color=yellow];
5530[label="76.114.91.195;11pkt 11fpkt", shape=pentagon, color=darkviolet];
7285[label="76.114.91.195;12pkt 12fpkt", shape=invtriangle, color=brown];
8289[label="76.114.91.195;11pkt 11fpkt", shape=invhouse, color=bisque];
stat203[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.114.91.195:80, 148.242.132.218:*}[91.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.6897%)&lt;BR/&gt; 6080: (4.31034%)&lt;BR/&gt; 2162: (4.31034%)&lt;BR/&gt; 2161: (4.31034%)&lt;BR/&gt; 2160: (4.31034%)&gt;];
}
1568--1569[label="1;12pkt 12fpkt"];
1568--5530[label="1;11pkt 11fpkt"];
1568--7285[label="1;12pkt 12fpkt"];
1568--8289[label="1;11pkt 11fpkt"];
1569--5530[label="1;11pkt 11fpkt"];
1569--7285[label="1;12pkt 12fpkt"];
1569--8289[label="1;11pkt 11fpkt"];
5530--7285[label="1;11pkt 11fpkt"];
5530--8289[label="1;11pkt 11fpkt"];
7285--8289[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="148.242.132.218" src_ip="76.114.91.195" src_port="80"/>
    </slice>
    <from sec="1036990823" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32241,2.66004,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_205{
style=filled;
color=gray75;
61[label="145.3.9.62s;1pkt 1fpkt", shape=rectangle, color=red];
1511[label="145.3.9.62;s;34pkt 34fpkt", shape=diamond, color=yellow];
1588[label="152.145.163.83;d;1pkt 1fpkt", shape=diamond, color=yellow];
3147[label="152.145.163.83;d;1pkt 1fpkt", shape=hexagon, color=black];
4368[label="145.3.9.62;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6463[label="145.3.9.62;1pkt 1fpkt", shape=invtriangle, color=brown];
7831[label="145.3.9.62;1pkt 1fpkt", shape=invhouse, color=bisque];
stat205[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.3.9.62:*, 202.3.91.105:1489}[97.0588%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1489: (41.25%)&lt;BR/&gt; 1569: (8.75%)&lt;BR/&gt; 22: (8.75%)&lt;BR/&gt; 1869: (1.25%)&lt;BR/&gt; 1868: (1.25%)&gt;];
}
61--1511[label="1;1pkt 1fpkt"];
61--1588[label="1;1pkt 1fpkt"];
61--3147[label="1;1pkt 1fpkt"];
61--4368[label="1;1pkt 1fpkt"];
61--6463[label="1;1pkt 1fpkt"];
61--7831[label="1;1pkt 1fpkt"];
1511--1588[label="1;1pkt 1fpkt"];
1511--3147[label="1;1pkt 1fpkt"];
1511--4368[label="1;1pkt 1fpkt"];
1511--6463[label="1;1pkt 1fpkt"];
1511--7831[label="1;1pkt 1fpkt"];
1588--3147[label="1;1pkt 1fpkt"];
1588--4368[label="1;1pkt 1fpkt"];
1588--6463[label="1;1pkt 1fpkt"];
1588--7831[label="1;1pkt 1fpkt"];
3147--4368[label="1;1pkt 1fpkt"];
3147--6463[label="1;1pkt 1fpkt"];
3147--7831[label="1;1pkt 1fpkt"];
4368--6463[label="1;1pkt 1fpkt"];
4368--7831[label="1;1pkt 1fpkt"];
6463--7831[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="202.3.91.105" dst_port="1489" src_ip="145.3.9.62"/>
    </slice>
    <from sec="1036990802" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23877,2.68008,999,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_207{
style=filled;
color=gray75;
176[label="145.3.6.250s;1pkt 1fpkt", shape=rectangle, color=red];
1537[label="145.3.6.250;s;8pkt 8fpkt", shape=diamond, color=yellow];
1607[label="78.81.27.111;d;4pkt 4fpkt", shape=diamond, color=yellow];
2504[label="157.134.212.40;d;2pkt 2fpkt", shape=diamond, color=yellow];
2888[label="78.81.27.111;d;3pkt 3fpkt", shape=hexagon, color=black];
3466[label="157.134.212.40;d;2pkt 2fpkt", shape=hexagon, color=black];
5989[label="145.3.6.250;8pkt 8fpkt", shape=pentagon, color=darkviolet];
7594[label="145.3.6.250;9pkt 9fpkt", shape=invtriangle, color=brown];
stat207[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.3.6.250:*, 78.81.27.111:1214}[40%]&lt;BR/&gt;{145.3.6.250:*, *:1863}[20%]&lt;BR/&gt;{*:*, 157.134.212.40:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (31.0811%)&lt;BR/&gt; 1833: (6.75676%)&lt;BR/&gt; 1832: (6.75676%)&lt;BR/&gt; 1809: (6.75676%)&lt;BR/&gt; 1808: (6.75676%)&gt;];
}
176--1537[label="1;1pkt 1fpkt"];
176--1607[label="1;1pkt 1fpkt"];
176--5989[label="1;1pkt 1fpkt"];
176--7594[label="1;1pkt 1fpkt"];
1537--1607[label="1;4pkt 4fpkt"];
1537--2504[label="0.5;1pkt 1fpkt"];
1537--2888[label="1;3pkt 3fpkt"];
1537--3466[label="0.5;1pkt 1fpkt"];
1537--5989[label="1;8pkt 8fpkt"];
1537--7594[label="1;8pkt 8fpkt"];
1607--2888[label="1;3pkt 3fpkt"];
1607--5989[label="1;4pkt 4fpkt"];
1607--7594[label="1;4pkt 4fpkt"];
2504--3466[label="1;2pkt 2fpkt"];
2504--4547[label="0.5;1pkt 1fpkt"];
2504--5989[label="0.5;1pkt 1fpkt"];
2504--6585[label="0.5;1pkt 1fpkt"];
2504--7594[label="0.5;1pkt 1fpkt"];
2888--5989[label="1;3pkt 3fpkt"];
2888--7594[label="1;3pkt 3fpkt"];
3466--4547[label="0.5;1pkt 1fpkt"];
3466--5989[label="0.5;1pkt 1fpkt"];
3466--6585[label="0.5;1pkt 1fpkt"];
3466--7594[label="0.5;1pkt 1fpkt"];
5989--7594[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="157.134.212.40"/>
      <filter dst_port="1863" src_ip="145.3.6.250"/>
      <filter dst_ip="78.81.27.111" dst_port="1214" src_ip="145.3.6.250"/>
    </slice>
    <from sec="1036990808" usec="0"/>
    <to sec="1036991517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823917,2.71604,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_208{
style=filled;
color=gray75;
1612[label="148.242.103.148;d;1pkt 1fpkt", shape=diamond, color=yellow];
1614[label="48.73.196.85;s;1pkt 1fpkt", shape=diamond, color=yellow];
4596[label="48.73.196.85;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6615[label="48.73.196.85;1pkt 1fpkt", shape=invtriangle, color=brown];
stat208[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.73.196.85:8864, 148.242.103.148:59509}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59509: (50%)&lt;BR/&gt; 8864: (50%)&gt;];
}
1612--1614[label="1;1pkt 1fpkt"];
1612--4596[label="1;1pkt 1fpkt"];
1612--6615[label="1;1pkt 1fpkt"];
1614--4596[label="1;1pkt 1fpkt"];
1614--6615[label="1;1pkt 1fpkt"];
4596--6615[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.242.103.148" dst_port="59509" src_ip="48.73.196.85" src_port="8864"/>
    </slice>
    <from sec="1036990903" usec="0"/>
    <to sec="1036991497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945007,2.69627,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_210{
style=filled;
color=gray75;
1284[label="214.121.74.115;d;8pkt 8fpkt", shape=diamond, color=yellow];
1640[label="202.189.197.214;s;1pkt 1fpkt", shape=diamond, color=yellow];
1746[label="202.77.25.213;s;1pkt 1fpkt", shape=diamond, color=yellow];
2244[label="205.135.69.175;s;2pkt 2fpkt", shape=diamond, color=yellow];
5364[label="205.135.69.175;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7168[label="205.135.69.175;2pkt 2fpkt", shape=invtriangle, color=brown];
8227[label="205.135.69.175;1pkt 1fpkt", shape=invhouse, color=bisque];
8353[label="202.189.197.214;1pkt 1fpkt", shape=invhouse, color=bisque];
stat210[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:7743, 214.121.74.115:*}[62.5%]&lt;BR/&gt;{*:*, 214.121.74.115:7743}[37.5%]&lt;BR/&gt;{203.91.231.53:*, 214.121.74.115:*}[25%]&lt;BR/&gt;{203.125.10.159:*, 214.121.74.115:*}[25%]&lt;BR/&gt;{205.135.69.175:*, 214.121.74.115:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7743: (50%)&lt;BR/&gt; 4375: (13.8889%)&lt;BR/&gt; 4013: (11.1111%)&lt;BR/&gt; 4006: (8.33333%)&lt;BR/&gt; 3894: (5.55556%)&gt;];
}
1284--1640[label="1;1pkt 1fpkt"];
1284--1746[label="1;1pkt 1fpkt"];
1284--2244[label="1;2pkt 2fpkt"];
1284--5364[label="1;2pkt 2fpkt"];
1284--7168[label="1;2pkt 2fpkt"];
1284--8227[label="1;1pkt 1fpkt"];
1284--8353[label="1;1pkt 1fpkt"];
1640--8353[label="1;1pkt 1fpkt"];
2244--5364[label="1;2pkt 2fpkt"];
2244--7168[label="1;2pkt 2fpkt"];
2244--8227[label="1;1pkt 1fpkt"];
5364--7168[label="1;2pkt 2fpkt"];
5364--8227[label="1;1pkt 1fpkt"];
7168--8227[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.121.74.115" src_ip="205.135.69.175"/>
      <filter dst_ip="214.121.74.115" src_ip="203.125.10.159"/>
      <filter dst_ip="214.121.74.115" src_ip="203.91.231.53"/>
      <filter dst_ip="214.121.74.115" src_port="7743"/>
      <filter dst_ip="214.121.74.115" dst_port="7743"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991442" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12548,2.73159,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_211{
style=filled;
color=gray75;
1287[label="210.206.111.169;d;2pkt 2fpkt", shape=diamond, color=yellow];
1641[label="148.242.148.220;s;2pkt 2fpkt", shape=diamond, color=yellow];
2156[label="148.242.148.195;s;2pkt 2fpkt", shape=diamond, color=yellow];
3184[label="148.242.148.220;s;2pkt 2fpkt", shape=hexagon, color=black];
5534[label="148.242.148.195;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat211[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.242.148.195:8197, 208.20.78.120:8194}[25%]&lt;BR/&gt;{148.242.148.195:8277, 210.206.111.169:8292}[25%]&lt;BR/&gt;{148.242.148.220:8197, 208.20.78.120:8194}[25%]&lt;BR/&gt;{148.242.148.220:8277, 210.206.111.169:8292}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8292: (27.7778%)&lt;BR/&gt; 8277: (27.7778%)&lt;BR/&gt; 8197: (22.2222%)&lt;BR/&gt; 8194: (22.2222%)&gt;];
}
1287--1641[label="0.5;1pkt 1fpkt"];
1287--2156[label="0.5;1pkt 1fpkt"];
1287--3184[label="0.5;1pkt 1fpkt"];
1641--3184[label="1;2pkt 2fpkt"];
2156--5534[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.206.111.169" dst_port="8292" src_ip="148.242.148.220" src_port="8277"/>
      <filter dst_ip="208.20.78.120" dst_port="8194" src_ip="148.242.148.220" src_port="8197"/>
      <filter dst_ip="210.206.111.169" dst_port="8292" src_ip="148.242.148.195" src_port="8277"/>
      <filter dst_ip="208.20.78.120" dst_port="8194" src_ip="148.242.148.195" src_port="8197"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15633,2.77483,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_212{
style=filled;
color=gray75;
1645[label="214.121.190.186;d;1pkt 1fpkt", shape=diamond, color=yellow];
1646[label="9.177.46.185;s;1pkt 1fpkt", shape=diamond, color=yellow];
2920[label="9.177.46.185;s;1pkt 1fpkt", shape=hexagon, color=black];
3069[label="214.121.190.186;d;1pkt 1fpkt", shape=hexagon, color=black];
stat212[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.177.46.185:5001, 214.121.190.186:3025}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (50%)&lt;BR/&gt; 3025: (50%)&gt;];
}
1645--1646[label="1;1pkt 1fpkt"];
1645--2920[label="1;1pkt 1fpkt"];
1645--3069[label="1;1pkt 1fpkt"];
1646--2920[label="1;1pkt 1fpkt"];
1646--3069[label="1;1pkt 1fpkt"];
2920--3069[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.121.190.186" dst_port="3025" src_ip="9.177.46.185" src_port="5001"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21992,2.70982,503,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_214{
style=filled;
color=gray75;
167[label="145.208.162.241s;3pkt 3fpkt", shape=rectangle, color=red];
985[label="145.208.162.241;s;113pkt 113fpkt", shape=diamond, color=yellow];
1034[label="48.237.171.141;d;1pkt 1fpkt", shape=diamond, color=yellow];
1689[label="173.88.46.167;d;23pkt 23fpkt", shape=diamond, color=yellow];
2003[label="148.242.146.51;s;164pkt 164fpkt", shape=diamond, color=yellow];
2047[label="9.193.177.67;d;52pkt 52fpkt", shape=diamond, color=yellow];
3247[label="173.88.46.167;d;23pkt 23fpkt", shape=hexagon, color=black];
3327[label="148.242.146.51;s;106pkt 106fpkt", shape=hexagon, color=black];
4456[label="148.242.167.70;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5937[label="145.208.162.241;129pkt 129fpkt", shape=pentagon, color=darkviolet];
stat214[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.242.146.51:80, *:*}[50.7937%]&lt;BR/&gt;{145.208.162.241:80, *:*}[40.6349%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.0307%)&lt;BR/&gt; 0: (1.93861%)&lt;BR/&gt; 11719: (0.403877%)&lt;BR/&gt; 11659: (0.403877%)&lt;BR/&gt; 11651: (0.403877%)&gt;];
}
167--985[label="1;3pkt 3fpkt"];
167--1689[label="1;3pkt 3fpkt"];
167--3247[label="1;3pkt 3fpkt"];
167--5937[label="1;3pkt 3fpkt"];
985--1034[label="1;1pkt 1fpkt"];
985--1689[label="0.434783;10pkt 10fpkt"];
985--3247[label="0.434783;10pkt 10fpkt"];
985--5937[label="1;113pkt 113fpkt"];
1034--5937[label="1;1pkt 1fpkt"];
1689--1909[label="0.434783;10pkt 10fpkt"];
1689--2003[label="0.130435;3pkt 3fpkt"];
1689--3247[label="1;23pkt 23fpkt"];
1689--3248[label="0.434783;10pkt 10fpkt"];
1689--3327[label="0.130435;3pkt 3fpkt"];
1689--5274[label="0.434783;10pkt 10fpkt"];
1689--5937[label="0.434783;10pkt 10fpkt"];
2003--2047[label="0.769231;40pkt 40fpkt"];
2003--3247[label="0.130435;3pkt 3fpkt"];
2003--3327[label="1;106pkt 106fpkt"];
2047--3327[label="0.596154;31pkt 31fpkt"];
2047--4456[label="1;5pkt 5fpkt"];
3247--3248[label="0.434783;10pkt 10fpkt"];
3247--3327[label="0.130435;3pkt 3fpkt"];
3247--5274[label="0.434783;10pkt 10fpkt"];
3247--5937[label="0.434783;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="148.242.146.51" src_port="80"/>
      <filter src_ip="145.208.162.241" src_port="80"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991513" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15633,2.77483,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_215{
style=filled;
color=gray75;
1721[label="175.177.209.221;s;1pkt 1fpkt", shape=diamond, color=yellow];
1722[label="201.61.15.80;d;1pkt 1fpkt", shape=diamond, color=yellow];
3113[label="201.61.15.80;d;1pkt 1fpkt", shape=hexagon, color=black];
stat215[shape=component, label=&lt;Rules:&lt;BR/&gt;{175.177.209.221:3532, 201.61.15.80:15008}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15008: (50%)&lt;BR/&gt; 3532: (50%)&gt;];
}
1721--1722[label="1;1pkt 1fpkt"];
1721--3113[label="1;1pkt 1fpkt"];
1722--3113[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.61.15.80" dst_port="15008" src_ip="175.177.209.221" src_port="3532"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.30476,2.69,999,1 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_216{
style=filled;
color=gray75;
552[label="199.59.88.211s;1pkt 1fpkt", shape=rectangle, color=red];
554[label="202.3.112.211s;2pkt 2fpkt", shape=rectangle, color=red];
1081[label="148.242.64.211;s;1pkt 1fpkt", shape=diamond, color=yellow];
1082[label="201.61.15.17;d;1pkt 1fpkt", shape=diamond, color=yellow];
2768[label="201.61.15.17;d;1pkt 1fpkt", shape=hexagon, color=black];
2947[label="148.242.64.211;s;1pkt 1fpkt", shape=hexagon, color=black];
5658[label="148.242.64.211;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8335[label="148.242.64.211;1pkt 1fpkt", shape=invhouse, color=bisque];
stat216[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.242.64.211:49162, 201.61.15.17:20970}[50%]&lt;BR/&gt;{196.186.160.211:80, 145.208.169.141:43049}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49162: (44.4444%)&lt;BR/&gt; 20970: (44.4444%)&lt;BR/&gt; 43049: (5.55556%)&lt;BR/&gt; 80: (5.55556%)&gt;];
}
552--554[label="1;1pkt 1fpkt"];
552--1081[label="1;1pkt 1fpkt"];
552--1082[label="1;1pkt 1fpkt"];
552--2768[label="1;1pkt 1fpkt"];
552--2947[label="1;1pkt 1fpkt"];
552--5658[label="1;1pkt 1fpkt"];
552--8335[label="1;1pkt 1fpkt"];
554--1065[label="0.5;1pkt 1fpkt"];
554--1081[label="1;1pkt 1fpkt"];
554--1082[label="1;1pkt 1fpkt"];
554--2768[label="1;1pkt 1fpkt"];
554--2843[label="0.5;1pkt 1fpkt"];
554--2947[label="1;1pkt 1fpkt"];
554--3642[label="0.5;1pkt 1fpkt"];
554--5658[label="1;1pkt 1fpkt"];
554--8335[label="1;1pkt 1fpkt"];
1081--1082[label="1;1pkt 1fpkt"];
1081--2768[label="1;1pkt 1fpkt"];
1081--2947[label="1;1pkt 1fpkt"];
1081--5658[label="1;1pkt 1fpkt"];
1081--8335[label="1;1pkt 1fpkt"];
1082--2768[label="1;1pkt 1fpkt"];
1082--2947[label="1;1pkt 1fpkt"];
1082--5658[label="1;1pkt 1fpkt"];
1082--8335[label="1;1pkt 1fpkt"];
2768--2947[label="1;1pkt 1fpkt"];
2768--5658[label="1;1pkt 1fpkt"];
2768--8335[label="1;1pkt 1fpkt"];
2947--5658[label="1;1pkt 1fpkt"];
2947--8335[label="1;1pkt 1fpkt"];
5658--8335[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.169.141" dst_port="43049" src_ip="196.186.160.211" src_port="80"/>
      <filter dst_ip="201.61.15.17" dst_port="20970" src_ip="148.242.64.211" src_port="49162"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981541,2.74006,999,0 0 0 1 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_217{
style=filled;
color=gray75;
999[label="145.208.35.41;d;4pkt 4fpkt", shape=diamond, color=yellow];
1000[label="205.166.20.137;s;1pkt 1fpkt", shape=diamond, color=yellow];
1766[label="203.100.92.123;s;1pkt 1fpkt", shape=diamond, color=yellow];
6935[label="205.166.20.137;1pkt 1fpkt", shape=invtriangle, color=brown];
8091[label="205.166.20.137;1pkt 1fpkt", shape=invhouse, color=bisque];
stat217[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.100.92.123:7743, 145.208.35.41:4181}[25%]&lt;BR/&gt;{205.166.20.137:7743, 145.208.35.41:3756}[25%]&lt;BR/&gt;{202.181.32.192:4940, 145.208.35.41:7743}[25%]&lt;BR/&gt;{202.181.32.192:7743, 145.208.35.41:4208}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7743: (50%)&lt;BR/&gt; 3756: (25%)&lt;BR/&gt; 4181: (12.5%)&lt;BR/&gt; 4940: (6.25%)&lt;BR/&gt; 4208: (6.25%)&gt;];
}
999--1000[label="1;1pkt 1fpkt"];
999--1766[label="1;1pkt 1fpkt"];
999--6935[label="1;1pkt 1fpkt"];
999--8091[label="1;1pkt 1fpkt"];
1000--6935[label="1;1pkt 1fpkt"];
1000--8091[label="1;1pkt 1fpkt"];
6935--8091[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.35.41" dst_port="4208" src_ip="202.181.32.192" src_port="7743"/>
      <filter dst_ip="145.208.35.41" dst_port="7743" src_ip="202.181.32.192" src_port="4940"/>
      <filter dst_ip="145.208.35.41" dst_port="3756" src_ip="205.166.20.137" src_port="7743"/>
      <filter dst_ip="145.208.35.41" dst_port="4181" src_ip="203.100.92.123" src_port="7743"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991368" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15633,2.77483,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_219{
style=filled;
color=gray75;
1777[label="133.213.105.196;d;2pkt 2fpkt", shape=diamond, color=yellow];
1839[label="73.46.28.147;s;1pkt 1fpkt", shape=diamond, color=yellow];
3346[label="73.46.28.147;s;1pkt 1fpkt", shape=hexagon, color=black];
3547[label="133.213.105.196;d;2pkt 2fpkt", shape=hexagon, color=black];
stat219[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.57.198.100:6699, 133.213.105.196:1557}[50%]&lt;BR/&gt;{73.46.28.147:6699, 133.213.105.196:1573}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1573: (33.3333%)&lt;BR/&gt; 1557: (16.6667%)&gt;];
}
1777--1839[label="1;1pkt 1fpkt"];
1777--3346[label="1;1pkt 1fpkt"];
1777--3547[label="1;2pkt 2fpkt"];
1839--3346[label="1;1pkt 1fpkt"];
1839--3547[label="1;1pkt 1fpkt"];
3346--3547[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.213.105.196" dst_port="1573" src_ip="73.46.28.147" src_port="6699"/>
      <filter dst_ip="133.213.105.196" dst_port="1557" src_ip="76.57.198.100" src_port="6699"/>
    </slice>
    <from sec="1036990811" usec="0"/>
    <to sec="1036991449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21992,2.70982,503,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_220{
style=filled;
color=gray75;
60[label="145.208.132.61s;1pkt 1fpkt", shape=rectangle, color=red];
1265[label="145.208.132.61;s;14pkt 14fpkt", shape=diamond, color=yellow];
1635[label="76.161.190.122;d;4pkt 4fpkt", shape=diamond, color=yellow];
1833[label="212.194.113.60;d;1pkt 1fpkt", shape=diamond, color=yellow];
1850[label="73.80.3.225;d;1pkt 1fpkt", shape=diamond, color=yellow];
3038[label="212.194.113.60;d;1pkt 1fpkt", shape=hexagon, color=black];
3056[label="145.208.132.61;s;13pkt 13fpkt", shape=hexagon, color=black];
4360[label="145.208.132.61;72pkt 72fpkt", shape=pentagon, color=darkviolet];
stat220[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.132.61:*, 76.161.154.76:80}[40.2778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (26.1682%)&lt;BR/&gt; 25: (14.486%)&lt;BR/&gt; 6699: (7.47664%)&lt;BR/&gt; 1038: (3.27103%)&lt;BR/&gt; 1036: (3.27103%)&gt;];
}
60--1265[label="1;1pkt 1fpkt"];
60--1850[label="1;1pkt 1fpkt"];
60--3056[label="1;1pkt 1fpkt"];
60--4360[label="1;1pkt 1fpkt"];
1265--1635[label="1;4pkt 4fpkt"];
1265--1833[label="1;1pkt 1fpkt"];
1265--1850[label="1;1pkt 1fpkt"];
1265--3038[label="1;1pkt 1fpkt"];
1265--3056[label="1;13pkt 13fpkt"];
1265--4360[label="1;14pkt 14fpkt"];
1635--3056[label="1;4pkt 4fpkt"];
1635--4360[label="1;4pkt 4fpkt"];
1833--3038[label="1;1pkt 1fpkt"];
1833--3056[label="1;1pkt 1fpkt"];
1833--4360[label="1;1pkt 1fpkt"];
1850--3056[label="1;1pkt 1fpkt"];
1850--4360[label="1;1pkt 1fpkt"];
3038--3056[label="1;1pkt 1fpkt"];
3038--4360[label="1;1pkt 1fpkt"];
3056--4360[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="76.161.154.76" dst_port="80" src_ip="145.208.132.61"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23877,2.68008,999,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_221{
style=filled;
color=gray75;
81[label="76.82.80.96s;1pkt 1fpkt", shape=rectangle, color=red];
1857[label="148.242.163.64;d;9pkt 9fpkt", shape=diamond, color=yellow];
1865[label="76.82.80.96;s;5pkt 5fpkt", shape=diamond, color=yellow];
2531[label="76.82.192.31;s;3pkt 3fpkt", shape=diamond, color=yellow];
3049[label="148.242.163.64;d;4pkt 4fpkt", shape=hexagon, color=black];
4064[label="76.82.192.31;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4680[label="76.82.80.96;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6246[label="76.82.192.31;1pkt 1fpkt", shape=invtriangle, color=brown];
stat221[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.82.192.31:*, 148.242.163.64:*}[33.3333%]&lt;BR/&gt;{*:0, 148.242.163.64:0}[22.2222%]&lt;BR/&gt;{76.82.80.96:*, 148.242.163.64:6970}[22.2222%]&lt;BR/&gt;{76.82.80.96:554, 148.242.163.64:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6970: (28.5714%)&lt;BR/&gt; 0: (21.4286%)&lt;BR/&gt; 554: (14.2857%)&lt;BR/&gt; 6998: (8.92857%)&lt;BR/&gt; 6984: (5.35714%)&gt;];
}
81--1857[label="1;1pkt 1fpkt"];
81--1865[label="1;1pkt 1fpkt"];
81--3049[label="1;1pkt 1fpkt"];
81--4680[label="1;1pkt 1fpkt"];
1857--1865[label="1;5pkt 5fpkt"];
1857--2531[label="1;3pkt 3fpkt"];
1857--3049[label="1;4pkt 4fpkt"];
1857--4064[label="1;1pkt 1fpkt"];
1857--4680[label="1;4pkt 4fpkt"];
1857--6246[label="1;1pkt 1fpkt"];
1865--3049[label="0.75;3pkt 3fpkt"];
1865--4680[label="1;4pkt 4fpkt"];
2531--4064[label="1;1pkt 1fpkt"];
2531--6246[label="1;1pkt 1fpkt"];
3049--4680[label="0.5;2pkt 2fpkt"];
4064--6246[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.242.163.64" src_ip="76.82.192.31"/>
      <filter dst_ip="148.242.163.64" src_ip="76.82.80.96" src_port="554"/>
      <filter dst_ip="148.242.163.64" dst_port="6970" src_ip="76.82.80.96"/>
      <filter dst_ip="148.242.163.64"/>
    </slice>
    <from sec="1036991025" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15633,2.77483,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_222{
style=filled;
color=gray75;
1875[label="78.31.224.56;s;10pkt 10fpkt", shape=diamond, color=yellow];
1876[label="148.242.163.20;d;12pkt 12fpkt", shape=diamond, color=yellow];
3062[label="148.242.163.20;d;12pkt 12fpkt", shape=hexagon, color=black];
3181[label="78.31.224.56;s;9pkt 9fpkt", shape=hexagon, color=black];
stat222[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.31.224.56:80, 148.242.163.20:*}[75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.3488%)&lt;BR/&gt; 11999: (4.65116%)&lt;BR/&gt; 1123: (4.65116%)&lt;BR/&gt; 1122: (4.65116%)&lt;BR/&gt; 1120: (4.65116%)&gt;];
}
1875--1876[label="1;10pkt 10fpkt"];
1875--3062[label="1;10pkt 10fpkt"];
1875--3181[label="1;9pkt 9fpkt"];
1876--3062[label="1;12pkt 12fpkt"];
1876--3181[label="1;9pkt 9fpkt"];
3062--3181[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="148.242.163.20" src_ip="78.31.224.56" src_port="80"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.838376,2.78842,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="9.234.16.205"/>
      <from sec="1036990801" usec="0"/>
      <to sec="1036991449" usec="0"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.838376,2.78842,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="145.197.229.1"/>
      <from sec="1036990801" usec="0"/>
      <to sec="1036991449" usec="0"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.838376,2.78842,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="175.177.124.225"/>
      <from sec="1036990804" usec="0"/>
      <to sec="1036991449" usec="0"/>
    </slice>
    <from sec="1036990804" usec="0"/>
    <to sec="1036991449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945007,2.69627,504,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_226{
style=filled;
color=gray75;
2010[label="217.224.108.193;d;2pkt 2fpkt", shape=diamond, color=yellow];
2011[label="145.208.164.139;s;7pkt 7fpkt", shape=diamond, color=yellow];
5055[label="145.208.164.139;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6952[label="145.208.164.139;6pkt 6fpkt", shape=invtriangle, color=brown];
8101[label="145.208.164.139;6pkt 6fpkt", shape=invhouse, color=bisque];
stat226[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.164.139:*, 217.224.108.194:443}[71.4286%]&lt;BR/&gt;{145.208.164.139:*, 217.224.108.193:443}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1468: (8.92857%)&lt;BR/&gt; 1460: (8.92857%)&lt;BR/&gt; 1467: (7.14286%)&lt;BR/&gt; 1466: (7.14286%)&gt;];
}
2010--2011[label="1;2pkt 2fpkt"];
2010--5055[label="1;2pkt 2fpkt"];
2010--6952[label="1;2pkt 2fpkt"];
2010--8101[label="1;2pkt 2fpkt"];
2011--5055[label="1;7pkt 7fpkt"];
2011--6952[label="1;6pkt 6fpkt"];
2011--8101[label="1;6pkt 6fpkt"];
5055--6952[label="1;6pkt 6fpkt"];
5055--8101[label="1;6pkt 6fpkt"];
6952--8101[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="217.224.108.194" dst_port="443" src_ip="145.208.164.139"/>
      <filter dst_ip="217.224.108.193" dst_port="443" src_ip="145.208.164.139"/>
    </slice>
    <from sec="1036990882" usec="0"/>
    <to sec="1036991214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21992,2.70982,503,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_227{
style=filled;
color=gray75;
236[label="145.3.17.26s;74pkt 74fpkt", shape=rectangle, color=red];
1859[label="197.80.96.39;d;162pkt 162fpkt", shape=diamond, color=yellow];
2046[label="145.3.17.26;s;147pkt 147fpkt", shape=diamond, color=yellow];
3570[label="197.80.96.39;d;162pkt 162fpkt", shape=hexagon, color=black];
4011[label="145.3.17.26;165pkt 165fpkt", shape=pentagon, color=darkviolet];
stat227[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.3.17.26:*, 197.80.96.39:80}[99.4012%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8592%)&lt;BR/&gt; 43225: (0.352113%)&lt;BR/&gt; 43224: (0.352113%)&lt;BR/&gt; 43223: (0.352113%)&lt;BR/&gt; 43222: (0.352113%)&gt;];
}
236--1859[label="1;74pkt 74fpkt"];
236--2046[label="1;74pkt 74fpkt"];
236--3570[label="1;74pkt 74fpkt"];
236--4011[label="0.986486;73pkt 73fpkt"];
1859--2046[label="1;147pkt 147fpkt"];
1859--3570[label="1;162pkt 162fpkt"];
1859--4011[label="0.987654;160pkt 160fpkt"];
1859--4547[label="0.00625;1pkt 1fpkt"];
1859--6585[label="0.00628931;1pkt 1fpkt"];
2046--3570[label="1;147pkt 147fpkt"];
2046--4011[label="0.993197;146pkt 146fpkt"];
3570--4011[label="0.987654;160pkt 160fpkt"];
3570--4547[label="0.00625;1pkt 1fpkt"];
3570--6585[label="0.00628931;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.80.96.39" dst_port="80" src_ip="145.3.17.26"/>
    </slice>
    <from sec="1036991030" usec="0"/>
    <to sec="1036991465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.838376,2.78842,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_228{
style=filled;
color=gray75;
1982[label="145.208.138.112;d;2pkt 2fpkt", shape=diamond, color=yellow];
2067[label="48.165.96.94;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat228[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.165.96.94:6699, 145.208.138.112:4546}[50%]&lt;BR/&gt;{78.155.174.115:6699, 145.208.138.112:4307}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 4546: (33.3333%)&lt;BR/&gt; 4307: (16.6667%)&gt;];
}
1982--2067[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.138.112" dst_port="4307" src_ip="78.155.174.115" src_port="6699"/>
      <filter dst_ip="145.208.138.112" dst_port="4546" src_ip="48.165.96.94" src_port="6699"/>
    </slice>
    <from sec="1036990811" usec="0"/>
    <to sec="1036991429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.838376,2.78842,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="145.3.19.80"/>
      <from sec="1036990801" usec="0"/>
      <to sec="1036991449" usec="0"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15633,2.77483,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_230{
style=filled;
color=gray75;
2124[label="193.110.139.155;d;2pkt 2fpkt", shape=diamond, color=yellow];
2125[label="133.213.122.0;s;2pkt 2fpkt", shape=diamond, color=yellow];
3510[label="193.110.139.155;d;2pkt 2fpkt", shape=hexagon, color=black];
stat230[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.213.122.0:1199, 193.110.139.155:554}[50%]&lt;BR/&gt;{133.213.122.0:6970, 193.110.139.155:24536}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24536: (25%)&lt;BR/&gt; 6970: (25%)&lt;BR/&gt; 1199: (25%)&lt;BR/&gt; 554: (25%)&gt;];
}
2124--2125[label="1;2pkt 2fpkt"];
2124--3510[label="1;2pkt 2fpkt"];
2125--3510[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="193.110.139.155" dst_port="24536" src_ip="133.213.122.0" src_port="6970"/>
      <filter dst_ip="193.110.139.155" dst_port="554" src_ip="133.213.122.0" src_port="1199"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32241,2.66004,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_231{
style=filled;
color=gray75;
364[label="9.138.195.60s;1pkt 1fpkt", shape=rectangle, color=red];
419[label="199.10.24.103s;1pkt 1fpkt", shape=rectangle, color=red];
427[label="199.20.198.107s;1pkt 1fpkt", shape=rectangle, color=red];
531[label="200.10.167.194s;1pkt 1fpkt", shape=rectangle, color=red];
904[label="133.213.154.120;d;65pkt 65fpkt", shape=diamond, color=yellow];
934[label="85.89.139.87;s;1pkt 1fpkt", shape=diamond, color=yellow];
1030[label="9.69.71.60;s;1pkt 1fpkt", shape=diamond, color=yellow];
1652[label="9.68.34.220;s;1pkt 1fpkt", shape=diamond, color=yellow];
1929[label="165.168.63.194;s;2pkt 2fpkt", shape=diamond, color=yellow];
2127[label="200.145.34.107;s;1pkt 1fpkt", shape=diamond, color=yellow];
2204[label="9.69.176.182;s;1pkt 1fpkt", shape=diamond, color=yellow];
2354[label="8.66.135.10;s;1pkt 1fpkt", shape=diamond, color=yellow];
2433[label="198.156.220.117;s;1pkt 1fpkt", shape=diamond, color=yellow];
2477[label="48.36.234.35;s;1pkt 1fpkt", shape=diamond, color=yellow];
2632[label="200.72.235.23;s;1pkt 1fpkt", shape=diamond, color=yellow];
2935[label="9.69.71.60;s;1pkt 1fpkt", shape=hexagon, color=black];
3270[label="165.168.63.194;s;1pkt 1fpkt", shape=hexagon, color=black];
3319[label="9.69.176.182;s;1pkt 1fpkt", shape=hexagon, color=black];
3395[label="9.68.34.220;s;1pkt 1fpkt", shape=hexagon, color=black];
3476[label="133.213.154.120;d;65pkt 65fpkt", shape=hexagon, color=black];
3847[label="8.66.135.10;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3923[label="73.8.87.16;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4607[label="85.89.139.87;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4741[label="165.163.24.103;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5005[label="171.85.154.134;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5455[label="215.227.130.185;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5523[label="165.168.63.194;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5757[label="9.68.34.220;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6145[label="73.8.87.16;1pkt 1fpkt", shape=invtriangle, color=brown];
6275[label="48.36.234.35;1pkt 1fpkt", shape=invtriangle, color=brown];
6623[label="85.89.139.87;1pkt 1fpkt", shape=invtriangle, color=brown];
6812[label="198.156.220.117;1pkt 1fpkt", shape=invtriangle, color=brown];
7280[label="165.168.63.194;1pkt 1fpkt", shape=invtriangle, color=brown];
8287[label="165.168.63.194;1pkt 1fpkt", shape=invhouse, color=bisque];
8371[label="9.68.34.220;1pkt 1fpkt", shape=invhouse, color=bisque];
stat231[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:4662, 133.213.154.120:*}[46.1538%]&lt;BR/&gt;{*:*, 133.213.154.120:4662}[41.5385%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (44.5455%)&lt;BR/&gt; 61079: (1.81818%)&lt;BR/&gt; 4661: (1.81818%)&lt;BR/&gt; 2258: (1.81818%)&lt;BR/&gt; 1246: (1.81818%)&gt;];
}
364--904[label="1;1pkt 1fpkt"];
364--1030[label="1;1pkt 1fpkt"];
364--2935[label="1;1pkt 1fpkt"];
364--3476[label="1;1pkt 1fpkt"];
419--904[label="1;1pkt 1fpkt"];
419--3476[label="1;1pkt 1fpkt"];
427--904[label="1;1pkt 1fpkt"];
427--2127[label="1;1pkt 1fpkt"];
427--3476[label="1;1pkt 1fpkt"];
531--904[label="1;1pkt 1fpkt"];
531--1929[label="1;1pkt 1fpkt"];
531--3270[label="1;1pkt 1fpkt"];
531--3476[label="1;1pkt 1fpkt"];
531--5523[label="1;1pkt 1fpkt"];
904--934[label="1;1pkt 1fpkt"];
904--1030[label="1;1pkt 1fpkt"];
904--1652[label="1;1pkt 1fpkt"];
904--1929[label="1;2pkt 2fpkt"];
904--2127[label="1;1pkt 1fpkt"];
904--2204[label="1;1pkt 1fpkt"];
904--2354[label="1;1pkt 1fpkt"];
904--2433[label="1;1pkt 1fpkt"];
904--2477[label="1;1pkt 1fpkt"];
904--2632[label="1;1pkt 1fpkt"];
904--2935[label="1;1pkt 1fpkt"];
904--3270[label="1;1pkt 1fpkt"];
904--3319[label="1;1pkt 1fpkt"];
904--3395[label="1;1pkt 1fpkt"];
904--3476[label="1;65pkt 65fpkt"];
904--3847[label="1;1pkt 1fpkt"];
904--3923[label="1;1pkt 1fpkt"];
904--4607[label="1;1pkt 1fpkt"];
904--4741[label="1;1pkt 1fpkt"];
904--5005[label="1;1pkt 1fpkt"];
904--5455[label="1;1pkt 1fpkt"];
904--5523[label="1;2pkt 2fpkt"];
904--5757[label="1;1pkt 1fpkt"];
904--6145[label="1;1pkt 1fpkt"];
904--6275[label="1;1pkt 1fpkt"];
904--6623[label="1;1pkt 1fpkt"];
904--6812[label="1;1pkt 1fpkt"];
904--7280[label="1;1pkt 1fpkt"];
904--8287[label="1;1pkt 1fpkt"];
904--8371[label="1;1pkt 1fpkt"];
934--3476[label="1;1pkt 1fpkt"];
934--4607[label="1;1pkt 1fpkt"];
934--6623[label="1;1pkt 1fpkt"];
1030--2935[label="1;1pkt 1fpkt"];
1030--3476[label="1;1pkt 1fpkt"];
1652--3395[label="1;1pkt 1fpkt"];
1652--3476[label="1;1pkt 1fpkt"];
1652--5757[label="1;1pkt 1fpkt"];
1652--8371[label="1;1pkt 1fpkt"];
1929--3270[label="1;1pkt 1fpkt"];
1929--3476[label="1;2pkt 2fpkt"];
1929--5523[label="1;2pkt 2fpkt"];
1929--7280[label="1;1pkt 1fpkt"];
1929--8287[label="1;1pkt 1fpkt"];
2127--3476[label="1;1pkt 1fpkt"];
2204--3319[label="1;1pkt 1fpkt"];
2204--3476[label="1;1pkt 1fpkt"];
2354--3476[label="1;1pkt 1fpkt"];
2354--3847[label="1;1pkt 1fpkt"];
2433--3476[label="1;1pkt 1fpkt"];
2433--6812[label="1;1pkt 1fpkt"];
2477--3476[label="1;1pkt 1fpkt"];
2477--6275[label="1;1pkt 1fpkt"];
2632--3476[label="1;1pkt 1fpkt"];
2935--3476[label="1;1pkt 1fpkt"];
3270--3476[label="1;1pkt 1fpkt"];
3270--5523[label="1;1pkt 1fpkt"];
3319--3476[label="1;1pkt 1fpkt"];
3395--3476[label="1;1pkt 1fpkt"];
3395--5757[label="1;1pkt 1fpkt"];
3395--8371[label="1;1pkt 1fpkt"];
3476--3847[label="1;1pkt 1fpkt"];
3476--3923[label="1;1pkt 1fpkt"];
3476--4607[label="1;1pkt 1fpkt"];
3476--4741[label="1;1pkt 1fpkt"];
3476--5005[label="1;1pkt 1fpkt"];
3476--5455[label="1;1pkt 1fpkt"];
3476--5523[label="1;2pkt 2fpkt"];
3476--5757[label="1;1pkt 1fpkt"];
3476--6145[label="1;1pkt 1fpkt"];
3476--6275[label="1;1pkt 1fpkt"];
3476--6623[label="1;1pkt 1fpkt"];
3476--6812[label="1;1pkt 1fpkt"];
3476--7280[label="1;1pkt 1fpkt"];
3476--8287[label="1;1pkt 1fpkt"];
3476--8371[label="1;1pkt 1fpkt"];
3923--6145[label="1;1pkt 1fpkt"];
4607--6623[label="1;1pkt 1fpkt"];
5523--7280[label="1;1pkt 1fpkt"];
5523--8287[label="1;1pkt 1fpkt"];
5757--8371[label="1;1pkt 1fpkt"];
7280--8287[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.213.154.120" src_port="4662"/>
      <filter dst_ip="133.213.154.120" dst_port="4662"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.838376,2.78842,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_232{
style=filled;
color=gray75;
2141[label="145.208.65.89;s;364pkt 364fpkt", shape=diamond, color=yellow];
stat232[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.65.89:53, *:*}[99.4505%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (58.7912%)&lt;BR/&gt; 32768: (1.92308%)&lt;BR/&gt; 32769: (1.51099%)&lt;BR/&gt; 1024: (1.37363%)&lt;BR/&gt; 1025: (0.824176%)&gt;];
}
</description>
    <slice>
      <filter src_ip="145.208.65.89" src_port="53"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15633,2.77483,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_233{
style=filled;
color=gray75;
2160[label="162.68.65.154;d;132pkt 132fpkt", shape=diamond, color=yellow];
2161[label="149.30.31.50;s;152pkt 152fpkt", shape=diamond, color=yellow];
3426[label="149.30.31.50;s;132pkt 132fpkt", shape=hexagon, color=black];
stat233[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.30.31.50:*, 162.68.65.154:81}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 81: (50%)&lt;BR/&gt; 54994: (0.360577%)&lt;BR/&gt; 54880: (0.360577%)&lt;BR/&gt; 54879: (0.360577%)&lt;BR/&gt; 54878: (0.360577%)&gt;];
}
2160--2161[label="1;132pkt 132fpkt"];
2160--3426[label="1;132pkt 132fpkt"];
2161--3426[label="1;132pkt 132fpkt"];
</description>
    <slice>
      <filter dst_ip="162.68.65.154" dst_port="81" src_ip="149.30.31.50"/>
    </slice>
    <from sec="1036990802" usec="0"/>
    <to sec="1036991446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.838376,2.78842,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_235{
style=filled;
color=gray75;
2196[label="145.208.130.221;d;2pkt 2fpkt", shape=diamond, color=yellow];
2198[label="199.57.13.110;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat235[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.57.13.110:6699, 145.208.130.221:1305}[50%]&lt;BR/&gt;{76.161.136.203:1863, 145.208.130.221:1029}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (33.3333%)&lt;BR/&gt; 1305: (33.3333%)&lt;BR/&gt; 1863: (16.6667%)&lt;BR/&gt; 1029: (16.6667%)&gt;];
}
2196--2198[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.130.221" dst_port="1029" src_ip="76.161.136.203" src_port="1863"/>
      <filter dst_ip="145.208.130.221" dst_port="1305" src_ip="199.57.13.110" src_port="6699"/>
    </slice>
    <from sec="1036990809" usec="0"/>
    <to sec="1036991449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823917,2.71604,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_236{
style=filled;
color=gray75;
2085[label="208.157.172.35;s;5pkt 5fpkt", shape=diamond, color=yellow];
2245[label="145.208.130.200;d;5pkt 5fpkt", shape=diamond, color=yellow];
4103[label="208.157.172.35;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6273[label="208.157.172.35;4pkt 4fpkt", shape=invtriangle, color=brown];
stat236[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.157.172.35:80, 145.208.130.200:49271}[20%]&lt;BR/&gt;{208.157.172.35:80, 145.208.130.200:49272}[20%]&lt;BR/&gt;{208.157.172.35:80, 145.208.130.200:49273}[20%]&lt;BR/&gt;{208.157.172.35:80, 145.208.130.200:49274}[20%]&lt;BR/&gt;{208.157.172.35:80, 145.208.130.200:49275}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49275: (10.5263%)&lt;BR/&gt; 49274: (10.5263%)&lt;BR/&gt; 49273: (10.5263%)&lt;BR/&gt; 49272: (10.5263%)&gt;];
}
2085--2245[label="1;5pkt 5fpkt"];
2085--4103[label="1;5pkt 5fpkt"];
2085--6273[label="1;4pkt 4fpkt"];
2245--4103[label="1;5pkt 5fpkt"];
2245--6273[label="1;4pkt 4fpkt"];
4103--6273[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.130.200" dst_port="49275" src_ip="208.157.172.35" src_port="80"/>
      <filter dst_ip="145.208.130.200" dst_port="49274" src_ip="208.157.172.35" src_port="80"/>
      <filter dst_ip="145.208.130.200" dst_port="49273" src_ip="208.157.172.35" src_port="80"/>
      <filter dst_ip="145.208.130.200" dst_port="49272" src_ip="208.157.172.35" src_port="80"/>
      <filter dst_ip="145.208.130.200" dst_port="49271" src_ip="208.157.172.35" src_port="80"/>
    </slice>
    <from sec="1036991000" usec="0"/>
    <to sec="1036991258" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05572,2.67421,999,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_237{
style=filled;
color=gray75;
156[label="145.208.130.221s;1pkt 1fpkt", shape=rectangle, color=red];
2197[label="145.208.130.221;s;2pkt 2fpkt", shape=diamond, color=yellow];
2303[label="34.137.34.244;d;1pkt 1fpkt", shape=diamond, color=yellow];
5768[label="145.208.130.221;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7435[label="145.208.130.221;1pkt 1fpkt", shape=invtriangle, color=brown];
8377[label="145.208.130.221;1pkt 1fpkt", shape=invhouse, color=bisque];
stat237[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.130.221:1029, 76.161.136.203:1863}[50%]&lt;BR/&gt;{145.208.130.221:6699, 34.137.34.244:1159}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (28.5714%)&lt;BR/&gt; 1029: (28.5714%)&lt;BR/&gt; 6699: (21.4286%)&lt;BR/&gt; 1159: (21.4286%)&gt;];
}
156--2197[label="1;1pkt 1fpkt"];
156--2303[label="1;1pkt 1fpkt"];
2197--2303[label="1;1pkt 1fpkt"];
2197--3721[label="0.5;1pkt 1fpkt"];
2197--5768[label="1;1pkt 1fpkt"];
2197--7435[label="1;1pkt 1fpkt"];
2197--8377[label="1;1pkt 1fpkt"];
5768--7435[label="1;1pkt 1fpkt"];
5768--8377[label="1;1pkt 1fpkt"];
7435--8377[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="34.137.34.244" dst_port="1159" src_ip="145.208.130.221" src_port="6699"/>
      <filter dst_ip="76.161.136.203" dst_port="1863" src_ip="145.208.130.221" src_port="1029"/>
    </slice>
    <from sec="1036990809" usec="0"/>
    <to sec="1036991489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.838376,2.78842,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="215.156.93.20"/>
      <from sec="1036990801" usec="0"/>
      <to sec="1036991448" usec="0"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.838376,2.78842,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="215.156.92.92"/>
      <from sec="1036990802" usec="0"/>
      <to sec="1036991449" usec="0"/>
    </slice>
    <from sec="1036990802" usec="0"/>
    <to sec="1036991449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.838376,2.78842,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="168.100.158.100"/>
      <from sec="1036990802" usec="0"/>
      <to sec="1036991359" usec="0"/>
    </slice>
    <from sec="1036990802" usec="0"/>
    <to sec="1036991359" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.838376,2.78842,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="168.100.0.220"/>
      <from sec="1036990806" usec="0"/>
      <to sec="1036991445" usec="0"/>
    </slice>
    <from sec="1036990806" usec="0"/>
    <to sec="1036991445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24844,2.7534,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_243{
style=filled;
color=gray75;
334[label="199.14.136.32s;1pkt 1fpkt", shape=rectangle, color=red];
2226[label="192.10.112.32;s;1pkt 1fpkt", shape=diamond, color=yellow];
2423[label="214.121.169.80;d;2pkt 2fpkt", shape=diamond, color=yellow];
3446[label="192.10.112.32;s;1pkt 1fpkt", shape=hexagon, color=black];
stat243[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.10.112.32:6699, 214.121.169.80:2520}[50%]&lt;BR/&gt;{201.50.181.151:6699, 214.121.169.80:1612}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 2520: (40%)&lt;BR/&gt; 1612: (10%)&gt;];
}
334--2226[label="1;1pkt 1fpkt"];
334--2423[label="1;1pkt 1fpkt"];
334--3446[label="1;1pkt 1fpkt"];
2226--2423[label="1;1pkt 1fpkt"];
2226--3446[label="1;1pkt 1fpkt"];
2423--3446[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.121.169.80" dst_port="1612" src_ip="201.50.181.151" src_port="6699"/>
      <filter dst_ip="214.121.169.80" dst_port="2520" src_ip="192.10.112.32" src_port="6699"/>
    </slice>
    <from sec="1036990810" usec="0"/>
    <to sec="1036991447" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14589,2.70209,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_244{
style=filled;
color=gray75;
2508[label="217.19.233.73;d;1pkt 1fpkt", shape=diamond, color=yellow];
2509[label="148.242.148.233;s;1pkt 1fpkt", shape=diamond, color=yellow];
3589[label="217.19.233.73;d;1pkt 1fpkt", shape=hexagon, color=black];
5874[label="148.242.148.233;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7510[label="148.242.148.233;3pkt 3fpkt", shape=invtriangle, color=brown];
stat244[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.242.148.233:36854, 217.19.233.73:25}[33.3333%]&lt;BR/&gt;{148.242.148.233:25, 78.31.228.230:37509}[33.3333%]&lt;BR/&gt;{148.242.148.233:36829, 78.31.228.230:113}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (37.5%)&lt;BR/&gt; 36854: (31.25%)&lt;BR/&gt; 36829: (12.5%)&lt;BR/&gt; 113: (12.5%)&lt;BR/&gt; 37509: (6.25%)&gt;];
}
2508--2509[label="1;1pkt 1fpkt"];
2508--3589[label="1;1pkt 1fpkt"];
2508--5874[label="1;1pkt 1fpkt"];
2508--7510[label="1;1pkt 1fpkt"];
2509--3589[label="1;1pkt 1fpkt"];
2509--5874[label="1;1pkt 1fpkt"];
2509--7510[label="1;1pkt 1fpkt"];
3589--5874[label="1;1pkt 1fpkt"];
3589--7510[label="1;1pkt 1fpkt"];
5874--7510[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="78.31.228.230" dst_port="113" src_ip="148.242.148.233" src_port="36829"/>
      <filter dst_ip="78.31.228.230" dst_port="37509" src_ip="148.242.148.233" src_port="25"/>
      <filter dst_ip="217.19.233.73" dst_port="25" src_ip="148.242.148.233" src_port="36854"/>
    </slice>
    <from sec="1036990828" usec="0"/>
    <to sec="1036991421" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823917,2.71604,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_245{
style=filled;
color=gray75;
2506[label="133.213.65.22;d;23pkt 23fpkt", shape=diamond, color=yellow];
2525[label="160.79.131.53;s;21pkt 21fpkt", shape=diamond, color=yellow];
4283[label="160.79.131.53;20pkt 20fpkt", shape=pentagon, color=darkviolet];
6407[label="160.79.131.53;20pkt 20fpkt", shape=invtriangle, color=brown];
stat245[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.79.131.53:80, 133.213.65.22:*}[91.3043%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50815: (2.38095%)&lt;BR/&gt; 50814: (2.38095%)&lt;BR/&gt; 50813: (2.38095%)&lt;BR/&gt; 50811: (2.38095%)&gt;];
}
2506--2525[label="1;21pkt 21fpkt"];
2506--4283[label="1;20pkt 20fpkt"];
2506--6407[label="1;20pkt 20fpkt"];
2525--4283[label="1;20pkt 20fpkt"];
2525--6407[label="1;20pkt 20fpkt"];
4283--6407[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="133.213.65.22" src_ip="160.79.131.53" src_port="80"/>
    </slice>
    <from sec="1036991211" usec="0"/>
    <to sec="1036991444" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15633,2.77483,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_246{
style=filled;
color=gray75;
1691[label="214.233.154.191;s;2pkt 2fpkt", shape=diamond, color=yellow];
2553[label="214.121.188.96;d;1pkt 1fpkt", shape=diamond, color=yellow];
2565[label="214.121.188.14;d;2pkt 2fpkt", shape=diamond, color=yellow];
2961[label="214.233.154.191;s;2pkt 2fpkt", shape=hexagon, color=black];
stat246[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.246.137.37:8000, 214.121.188.14:4000}[33.3333%]&lt;BR/&gt;{214.233.154.191:9013, 214.121.188.96:1057}[33.3333%]&lt;BR/&gt;{214.233.154.191:9013, 214.121.188.14:1099}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9013: (42.8571%)&lt;BR/&gt; 1099: (21.4286%)&lt;BR/&gt; 1057: (21.4286%)&lt;BR/&gt; 8000: (7.14286%)&lt;BR/&gt; 4000: (7.14286%)&gt;];
}
1691--2553[label="1;1pkt 1fpkt"];
1691--2565[label="0.5;1pkt 1fpkt"];
1691--2961[label="1;2pkt 2fpkt"];
2553--2961[label="1;1pkt 1fpkt"];
2565--2961[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.121.188.14" dst_port="1099" src_ip="214.233.154.191" src_port="9013"/>
      <filter dst_ip="214.121.188.96" dst_port="1057" src_ip="214.233.154.191" src_port="9013"/>
      <filter dst_ip="214.121.188.14" dst_port="4000" src_ip="9.246.137.37" src_port="8000"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.838376,2.78842,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="168.100.169.92"/>
      <from sec="1036990801" usec="0"/>
      <to sec="1036991448" usec="0"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.838376,2.78842,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_248{
style=filled;
color=gray75;
1897[label="77.228.141.114;s;4pkt 4fpkt", shape=diamond, color=yellow];
2593[label="168.100.163.140;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat248[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.228.141.114:6666, 168.100.165.16:1143}[25%]&lt;BR/&gt;{77.228.141.114:6667, 168.100.163.140:1228}[25%]&lt;BR/&gt;{77.228.141.114:6661, 168.100.181.196:3199}[25%]&lt;BR/&gt;{77.228.141.114:6665, 168.100.160.220:64631}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (20%)&lt;BR/&gt; 1228: (20%)&lt;BR/&gt; 64631: (10%)&lt;BR/&gt; 6666: (10%)&lt;BR/&gt; 6665: (10%)&gt;];
}
1897--2593[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.100.160.220" dst_port="64631" src_ip="77.228.141.114" src_port="6665"/>
      <filter dst_ip="168.100.181.196" dst_port="3199" src_ip="77.228.141.114" src_port="6661"/>
      <filter dst_ip="168.100.163.140" dst_port="1228" src_ip="77.228.141.114" src_port="6667"/>
      <filter dst_ip="168.100.165.16" dst_port="1143" src_ip="77.228.141.114" src_port="6666"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23582,2.68221,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_249{
style=filled;
color=gray75;
2473[label="148.242.165.13;d;29pkt 29fpkt", shape=diamond, color=yellow];
2641[label="77.252.16.189;s;28pkt 28fpkt", shape=diamond, color=yellow];
3572[label="77.252.16.189;s;28pkt 28fpkt", shape=hexagon, color=black];
4763[label="216.121.75.105;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6736[label="216.121.75.105;8pkt 8fpkt", shape=invtriangle, color=brown];
7988[label="216.121.75.105;8pkt 8fpkt", shape=invhouse, color=bisque];
stat249[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.252.16.189:80, 148.242.165.13:*}[63.6364%]&lt;BR/&gt;{216.121.75.105:80, 148.242.165.13:*}[20.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1181: (1.83486%)&lt;BR/&gt; 1180: (1.83486%)&lt;BR/&gt; 1162: (1.83486%)&lt;BR/&gt; 1152: (1.83486%)&gt;];
}
2473--2641[label="0.571429;16pkt 16fpkt"];
2473--3572[label="0.571429;16pkt 16fpkt"];
2473--4763[label="0.625;5pkt 5fpkt"];
2473--6736[label="0.625;5pkt 5fpkt"];
2473--7988[label="0.625;5pkt 5fpkt"];
2641--3572[label="1;28pkt 28fpkt"];
4763--6736[label="1;8pkt 8fpkt"];
4763--7988[label="1;8pkt 8fpkt"];
6736--7988[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="148.242.165.13" src_ip="77.252.16.189" src_port="80"/>
      <filter dst_ip="148.242.165.13" src_ip="216.121.75.105" src_port="80"/>
    </slice>
    <from sec="1036991032" usec="0"/>
    <to sec="1036991458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23582,2.68221,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_250{
style=filled;
color=gray75;
2004[label="145.197.241.174;d;36pkt 36fpkt", shape=diamond, color=yellow];
2647[label="85.155.2.15;s;2pkt 2fpkt", shape=diamond, color=yellow];
3445[label="145.197.241.174;d;34pkt 34fpkt", shape=hexagon, color=black];
3908[label="85.155.2.15;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5300[label="85.8.151.167;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7115[label="85.8.151.167;1pkt 1fpkt", shape=invtriangle, color=brown];
8200[label="85.8.151.167;2pkt 2fpkt", shape=invhouse, color=bisque];
stat250[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6257, 145.197.241.174:6257}[75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (72.7273%)&lt;BR/&gt; 6699: (11.6883%)&lt;BR/&gt; 1087: (3.24675%)&lt;BR/&gt; 1091: (2.5974%)&lt;BR/&gt; 7940: (1.2987%)&gt;];
}
2004--2647[label="1;2pkt 2fpkt"];
2004--3445[label="1;34pkt 34fpkt"];
2004--3908[label="1;1pkt 1fpkt"];
2004--5300[label="1;1pkt 1fpkt"];
2004--7115[label="1;1pkt 1fpkt"];
2004--8200[label="1;2pkt 2fpkt"];
2647--3445[label="1;2pkt 2fpkt"];
2647--3908[label="1;1pkt 1fpkt"];
3445--3908[label="1;1pkt 1fpkt"];
3445--5300[label="1;1pkt 1fpkt"];
3445--7115[label="1;1pkt 1fpkt"];
3445--8200[label="1;2pkt 2fpkt"];
5300--7115[label="1;1pkt 1fpkt"];
5300--8200[label="1;1pkt 1fpkt"];
7115--8200[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.197.241.174" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1036990859" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823917,2.71604,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_251{
style=filled;
color=gray75;
2651[label="78.164.124.171;d;2pkt 2fpkt", shape=diamond, color=yellow];
2652[label="133.213.0.58;s;4pkt 4fpkt", shape=diamond, color=yellow];
4332[label="133.213.0.58;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6440[label="133.213.0.58;4pkt 4fpkt", shape=invtriangle, color=brown];
stat251[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.213.0.58:7743, 9.171.72.46:55076}[20%]&lt;BR/&gt;{133.213.0.58:7743, 77.224.118.153:2439}[20%]&lt;BR/&gt;{133.213.0.58:7743, 77.224.118.153:2440}[20%]&lt;BR/&gt;{133.213.0.58:3152, 78.164.124.171:7743}[20%]&lt;BR/&gt;{133.213.0.58:7743, 78.164.124.171:4219}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7743: (50%)&lt;BR/&gt; 3152: (13.3333%)&lt;BR/&gt; 4219: (10%)&lt;BR/&gt; 2440: (10%)&lt;BR/&gt; 2439: (10%)&gt;];
}
2651--2652[label="1;2pkt 2fpkt"];
2651--4332[label="1;2pkt 2fpkt"];
2651--6440[label="0.5;1pkt 1fpkt"];
2652--4332[label="1;4pkt 4fpkt"];
2652--6440[label="0.75;3pkt 3fpkt"];
4332--6440[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="78.164.124.171" dst_port="4219" src_ip="133.213.0.58" src_port="7743"/>
      <filter dst_ip="78.164.124.171" dst_port="7743" src_ip="133.213.0.58" src_port="3152"/>
      <filter dst_ip="77.224.118.153" dst_port="2440" src_ip="133.213.0.58" src_port="7743"/>
      <filter dst_ip="77.224.118.153" dst_port="2439" src_ip="133.213.0.58" src_port="7743"/>
      <filter dst_ip="9.171.72.46" dst_port="55076" src_ip="133.213.0.58" src_port="7743"/>
    </slice>
    <from sec="1036990912" usec="0"/>
    <to sec="1036991372" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23582,2.68221,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_252{
style=filled;
color=gray75;
1390[label="214.121.178.169;s;162pkt 162fpkt", shape=diamond, color=yellow];
1391[label="76.40.126.25;d;1pkt 1fpkt", shape=diamond, color=yellow];
2673[label="174.9.82.214;d;1pkt 1fpkt", shape=diamond, color=yellow];
3230[label="214.121.178.169;s;123pkt 123fpkt", shape=hexagon, color=black];
5318[label="214.121.178.169;172pkt 172fpkt", shape=pentagon, color=darkviolet];
7131[label="214.121.178.169;173pkt 173fpkt", shape=invtriangle, color=brown];
8208[label="214.121.178.169;172pkt 172fpkt", shape=invhouse, color=bisque];
stat252[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.121.178.169:*, *:8888}[57.2254%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (28.6692%)&lt;BR/&gt; 3456: (6.09453%)&lt;BR/&gt; 8899: (3.23383%)&lt;BR/&gt; 7777: (3.17164%)&lt;BR/&gt; 6699: (1.30597%)&gt;];
}
1390--1391[label="1;1pkt 1fpkt"];
1390--2673[label="1;1pkt 1fpkt"];
1390--3230[label="1;123pkt 123fpkt"];
1390--5318[label="0.993827;161pkt 161fpkt"];
1390--7131[label="1;162pkt 162fpkt"];
1390--8208[label="0.993827;161pkt 161fpkt"];
1391--3230[label="1;1pkt 1fpkt"];
1391--5318[label="1;1pkt 1fpkt"];
1391--7131[label="1;1pkt 1fpkt"];
1391--8208[label="1;1pkt 1fpkt"];
2673--3230[label="1;1pkt 1fpkt"];
2673--5318[label="1;1pkt 1fpkt"];
2673--7131[label="1;1pkt 1fpkt"];
2673--8208[label="1;1pkt 1fpkt"];
3230--5318[label="0.99187;122pkt 122fpkt"];
3230--7131[label="1;123pkt 123fpkt"];
3230--8208[label="0.99187;122pkt 122fpkt"];
5318--7131[label="1;172pkt 172fpkt"];
5318--8208[label="1;172pkt 172fpkt"];
7131--8208[label="1;172pkt 172fpkt"];
</description>
    <slice>
      <filter dst_port="8888" src_ip="214.121.178.169"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.795292,2.74539,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_253{
style=filled;
color=gray75;
2699[label="9.46.197.86;s;3pkt 3fpkt", shape=diamond, color=yellow];
2700[label="148.242.130.242;d;3pkt 3fpkt", shape=diamond, color=yellow];
4603[label="9.46.197.86;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat253[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.46.197.86:80, 148.242.130.242:2910}[33.3333%]&lt;BR/&gt;{9.46.197.86:80, 148.242.130.242:2911}[33.3333%]&lt;BR/&gt;{9.46.197.86:80, 148.242.130.242:2912}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2912: (18.75%)&lt;BR/&gt; 2911: (18.75%)&lt;BR/&gt; 2910: (12.5%)&gt;];
}
2699--2700[label="1;3pkt 3fpkt"];
2699--4603[label="1;2pkt 2fpkt"];
2700--4603[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="148.242.130.242" dst_port="2912" src_ip="9.46.197.86" src_port="80"/>
      <filter dst_ip="148.242.130.242" dst_port="2911" src_ip="9.46.197.86" src_port="80"/>
      <filter dst_ip="148.242.130.242" dst_port="2910" src_ip="9.46.197.86" src_port="80"/>
    </slice>
    <from sec="1036991371" usec="0"/>
    <to sec="1036991503" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23582,2.68221,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_256{
style=filled;
color=gray75;
1182[label="78.70.167.238;d;1pkt 1fpkt", shape=diamond, color=yellow];
1183[label="145.208.132.89;s;4pkt 4fpkt", shape=diamond, color=yellow];
2790[label="78.70.167.238;d;1pkt 1fpkt", shape=hexagon, color=black];
3278[label="145.208.132.89;s;4pkt 4fpkt", shape=hexagon, color=black];
4626[label="145.208.132.89;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6640[label="145.208.132.89;1pkt 1fpkt", shape=invtriangle, color=brown];
7933[label="145.208.132.89;1pkt 1fpkt", shape=invhouse, color=bisque];
stat256[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.132.89:1033, 76.161.137.41:1863}[25%]&lt;BR/&gt;{145.208.132.89:1096, 85.9.39.86:6699}[25%]&lt;BR/&gt;{145.208.132.89:6699, 76.120.29.228:1796}[25%]&lt;BR/&gt;{145.208.132.89:6699, 78.70.167.238:1658}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (42.3077%)&lt;BR/&gt; 1658: (26.9231%)&lt;BR/&gt; 1863: (7.69231%)&lt;BR/&gt; 1796: (7.69231%)&lt;BR/&gt; 1096: (7.69231%)&gt;];
}
1182--1183[label="1;1pkt 1fpkt"];
1182--2790[label="1;1pkt 1fpkt"];
1182--3278[label="1;1pkt 1fpkt"];
1182--4626[label="1;1pkt 1fpkt"];
1182--6640[label="1;1pkt 1fpkt"];
1182--7933[label="1;1pkt 1fpkt"];
1183--2790[label="1;1pkt 1fpkt"];
1183--3278[label="1;4pkt 4fpkt"];
1183--4626[label="1;1pkt 1fpkt"];
1183--6640[label="1;1pkt 1fpkt"];
1183--7933[label="1;1pkt 1fpkt"];
2790--3278[label="1;1pkt 1fpkt"];
2790--4626[label="1;1pkt 1fpkt"];
2790--6640[label="1;1pkt 1fpkt"];
2790--7933[label="1;1pkt 1fpkt"];
3278--4626[label="1;1pkt 1fpkt"];
3278--6640[label="1;1pkt 1fpkt"];
3278--7933[label="1;1pkt 1fpkt"];
4626--6640[label="1;1pkt 1fpkt"];
4626--7933[label="1;1pkt 1fpkt"];
6640--7933[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="78.70.167.238" dst_port="1658" src_ip="145.208.132.89" src_port="6699"/>
      <filter dst_ip="76.120.29.228" dst_port="1796" src_ip="145.208.132.89" src_port="6699"/>
      <filter dst_ip="85.9.39.86" dst_port="6699" src_ip="145.208.132.89" src_port="1096"/>
      <filter dst_ip="76.161.137.41" dst_port="1863" src_ip="145.208.132.89" src_port="1033"/>
    </slice>
    <from sec="1036990802" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21693,2.71193,999,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_257{
style=filled;
color=gray75;
948[label="215.156.90.46;d;32pkt 32fpkt", shape=diamond, color=yellow];
1212[label="208.84.109.60;s;20pkt 20fpkt", shape=diamond, color=yellow];
1435[label="215.118.125.152;s;1pkt 1fpkt", shape=diamond, color=yellow];
2797[label="208.84.109.60;s;20pkt 20fpkt", shape=hexagon, color=black];
2829[label="215.156.90.46;d;32pkt 32fpkt", shape=hexagon, color=black];
4354[label="208.84.109.60;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5168[label="215.118.125.152;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5320[label="215.24.8.170;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8144[label="215.118.125.152;1pkt 1fpkt", shape=invhouse, color=bisque];
stat257[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.84.109.60:*, 215.156.90.46:*}[62.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (5.50459%)&lt;BR/&gt; 0: (5.50459%)&lt;BR/&gt; 21: (2.75229%)&lt;BR/&gt; 53000: (2.29358%)&lt;BR/&gt; 39458: (2.29358%)&gt;];
}
948--1212[label="1;20pkt 20fpkt"];
948--1435[label="1;1pkt 1fpkt"];
948--2797[label="1;20pkt 20fpkt"];
948--2829[label="1;32pkt 32fpkt"];
948--4354[label="1;1pkt 1fpkt"];
948--5168[label="1;1pkt 1fpkt"];
948--5320[label="1;1pkt 1fpkt"];
948--8144[label="1;1pkt 1fpkt"];
1212--2797[label="1;20pkt 20fpkt"];
1212--2829[label="1;20pkt 20fpkt"];
1212--4354[label="1;1pkt 1fpkt"];
1435--2829[label="1;1pkt 1fpkt"];
1435--5168[label="1;1pkt 1fpkt"];
1435--8144[label="1;1pkt 1fpkt"];
2797--2829[label="1;20pkt 20fpkt"];
2797--4354[label="1;1pkt 1fpkt"];
2829--4354[label="1;1pkt 1fpkt"];
2829--5168[label="1;1pkt 1fpkt"];
2829--5320[label="1;1pkt 1fpkt"];
2829--8144[label="1;1pkt 1fpkt"];
5168--8144[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.156.90.46" src_ip="208.84.109.60"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15633,2.77483,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_259{
style=filled;
color=gray75;
947[label="218.131.160.85;d;1pkt 1fpkt", shape=diamond, color=yellow];
949[label="215.156.90.46;s;56pkt 56fpkt", shape=diamond, color=yellow];
1136[label="215.118.125.152;d;1pkt 1fpkt", shape=diamond, color=yellow];
1211[label="208.84.109.60;d;20pkt 20fpkt", shape=diamond, color=yellow];
2482[label="198.130.27.162;d;6pkt 6fpkt", shape=diamond, color=yellow];
2796[label="208.84.109.60;d;20pkt 20fpkt", shape=hexagon, color=black];
2828[label="218.131.160.85;d;1pkt 1fpkt", shape=hexagon, color=black];
2918[label="215.156.90.46;s;43pkt 43fpkt", shape=hexagon, color=black];
stat259[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.156.90.46:80, *:*}[41.0714%]&lt;BR/&gt;{215.156.90.46:*, 208.84.109.60:*}[35.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (13.8514%)&lt;BR/&gt; 0: (4.05405%)&lt;BR/&gt; 21: (3.71622%)&lt;BR/&gt; 20: (3.04054%)&lt;BR/&gt; 53018: (1.35135%)&gt;];
}
947--949[label="1;1pkt 1fpkt"];
947--2828[label="1;1pkt 1fpkt"];
947--2918[label="1;1pkt 1fpkt"];
949--1136[label="1;1pkt 1fpkt"];
949--1211[label="1;20pkt 20fpkt"];
949--2482[label="1;6pkt 6fpkt"];
949--2796[label="1;20pkt 20fpkt"];
949--2828[label="1;1pkt 1fpkt"];
949--2918[label="1;43pkt 43fpkt"];
1136--2918[label="1;1pkt 1fpkt"];
1211--2796[label="1;20pkt 20fpkt"];
1211--2918[label="1;20pkt 20fpkt"];
2482--2918[label="0.333333;2pkt 2fpkt"];
2796--2918[label="1;20pkt 20fpkt"];
2828--2918[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.84.109.60" src_ip="215.156.90.46"/>
      <filter src_ip="215.156.90.46" src_port="80"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15633,2.77483,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_260{
style=filled;
color=gray75;
872[label="145.208.135.213;s;10pkt 10fpkt", shape=diamond, color=yellow];
873[label="197.24.45.112;d;1pkt 1fpkt", shape=diamond, color=yellow];
992[label="85.20.201.136;d;1pkt 1fpkt", shape=diamond, color=yellow];
1854[label="218.137.158.157;d;1pkt 1fpkt", shape=diamond, color=yellow];
2833[label="85.20.201.136;d;1pkt 1fpkt", shape=hexagon, color=black];
3048[label="218.137.158.157;d;1pkt 1fpkt", shape=hexagon, color=black];
3054[label="145.208.135.213;s;10pkt 10fpkt", shape=hexagon, color=black];
3055[label="197.24.45.112;d;1pkt 1fpkt", shape=hexagon, color=black];
stat260[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.135.213:*, *:6699}[50%]&lt;BR/&gt;{145.208.135.213:6699, *:*}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (46.1538%)&lt;BR/&gt; 44082: (7.69231%)&lt;BR/&gt; 14945: (7.69231%)&lt;BR/&gt; 3453: (7.69231%)&lt;BR/&gt; 2678: (3.84615%)&gt;];
}
872--873[label="1;1pkt 1fpkt"];
872--992[label="1;1pkt 1fpkt"];
872--1012[label="1;1pkt 1fpkt"];
872--1854[label="1;1pkt 1fpkt"];
872--1914[label="1;1pkt 1fpkt"];
872--2833[label="1;1pkt 1fpkt"];
872--3048[label="1;1pkt 1fpkt"];
872--3054[label="1;10pkt 10fpkt"];
872--3055[label="1;1pkt 1fpkt"];
872--3259[label="1;1pkt 1fpkt"];
873--3054[label="1;1pkt 1fpkt"];
873--3055[label="1;1pkt 1fpkt"];
992--2833[label="1;1pkt 1fpkt"];
992--3054[label="1;1pkt 1fpkt"];
1854--3048[label="1;1pkt 1fpkt"];
1854--3054[label="1;1pkt 1fpkt"];
2833--3054[label="1;1pkt 1fpkt"];
3048--3054[label="1;1pkt 1fpkt"];
3054--3055[label="1;1pkt 1fpkt"];
3054--3259[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="145.208.135.213" src_port="6699"/>
      <filter dst_port="6699" src_ip="145.208.135.213"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14589,2.70209,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_261{
style=filled;
color=gray75;
1389[label="214.121.178.169;d;55pkt 55fpkt", shape=diamond, color=yellow];
1392[label="76.40.126.25;s;1pkt 1fpkt", shape=diamond, color=yellow];
2846[label="214.121.178.169;d;50pkt 50fpkt", shape=hexagon, color=black];
4366[label="199.72.166.61;215pkt 215fpkt", shape=pentagon, color=darkviolet];
6461[label="199.72.166.61;216pkt 216fpkt", shape=invtriangle, color=brown];
stat261[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.72.166.61:1028, *:137}[80%]&lt;BR/&gt;{*:*, 214.121.178.169:*}[20.3704%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (40.3166%)&lt;BR/&gt; 137: (40.3166%)&lt;BR/&gt; 8888: (5.02793%)&lt;BR/&gt; 3456: (1.76909%)&lt;BR/&gt; 4567: (0.744879%)&gt;];
}
1389--1392[label="1;1pkt 1fpkt"];
1389--2846[label="1;50pkt 50fpkt"];
1389--4366[label="0.0181818;1pkt 1fpkt"];
1389--6461[label="0.0181818;1pkt 1fpkt"];
1392--2846[label="1;1pkt 1fpkt"];
2846--4366[label="0.02;1pkt 1fpkt"];
2846--6461[label="0.02;1pkt 1fpkt"];
4366--6461[label="1;215pkt 215fpkt"];
</description>
    <slice>
      <filter dst_ip="214.121.178.169"/>
      <filter dst_port="137" src_ip="199.72.166.61" src_port="1028"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32241,2.66004,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_262{
style=filled;
color=gray75;
222[label="133.213.0.229d;1pkt 1fpkt", shape=rectangle, color=red];
519[label="48.87.236.185s;1pkt 1fpkt", shape=rectangle, color=red];
562[label="199.10.72.218s;2pkt 2fpkt", shape=rectangle, color=red];
563[label="9.68.172.218s;2pkt 2fpkt", shape=rectangle, color=red];
1008[label="133.213.0.229;d;213pkt 213fpkt", shape=diamond, color=yellow];
1095[label="73.115.192.185;s;1pkt 1fpkt", shape=diamond, color=yellow];
1336[label="73.41.168.218;s;1pkt 1fpkt", shape=diamond, color=yellow];
1567[label="76.114.91.195;d;12pkt 12fpkt", shape=diamond, color=yellow];
1570[label="148.242.132.218;s;12pkt 12fpkt", shape=diamond, color=yellow];
2488[label="200.145.67.16;s;2pkt 2fpkt", shape=diamond, color=yellow];
2771[label="73.115.192.185;s;1pkt 1fpkt", shape=hexagon, color=black];
2876[label="148.242.132.218;s;12pkt 12fpkt", shape=hexagon, color=black];
3143[label="76.114.91.195;d;12pkt 12fpkt", shape=hexagon, color=black];
3397[label="133.213.0.229;d;182pkt 182fpkt", shape=hexagon, color=black];
3462[label="200.145.67.16;s;2pkt 2fpkt", shape=hexagon, color=black];
3920[label="200.145.67.16;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4595[label="48.180.141.85;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5457[label="73.115.192.185;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5740[label="148.242.132.218;12pkt 12fpkt", shape=pentagon, color=darkviolet];
7232[label="73.115.192.185;1pkt 1fpkt", shape=invtriangle, color=brown];
7417[label="148.242.132.218;11pkt 11fpkt", shape=invtriangle, color=brown];
8366[label="148.242.132.218;12pkt 12fpkt", shape=invhouse, color=bisque];
stat262[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:8888, 133.213.0.229:*}[55.5556%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (23.0847%)&lt;BR/&gt; 6257: (9.27419%)&lt;BR/&gt; 80: (7.66129%)&lt;BR/&gt; 6699: (2.01613%)&lt;BR/&gt; 8899: (1.91532%)&gt;];
}
222--519[label="1;1pkt 1fpkt"];
222--1008[label="1;1pkt 1fpkt"];
222--1095[label="1;1pkt 1fpkt"];
222--2771[label="1;1pkt 1fpkt"];
222--3397[label="1;1pkt 1fpkt"];
222--5457[label="1;1pkt 1fpkt"];
222--7232[label="1;1pkt 1fpkt"];
519--1008[label="1;1pkt 1fpkt"];
519--1095[label="1;1pkt 1fpkt"];
519--2771[label="1;1pkt 1fpkt"];
519--3397[label="1;1pkt 1fpkt"];
519--5457[label="1;1pkt 1fpkt"];
519--7232[label="1;1pkt 1fpkt"];
562--563[label="1;2pkt 2fpkt"];
562--1008[label="0.5;1pkt 1fpkt"];
562--1336[label="1;1pkt 1fpkt"];
562--1567[label="0.5;1pkt 1fpkt"];
562--1570[label="0.5;1pkt 1fpkt"];
562--2876[label="0.5;1pkt 1fpkt"];
562--3143[label="0.5;1pkt 1fpkt"];
562--3397[label="0.5;1pkt 1fpkt"];
562--5740[label="0.5;1pkt 1fpkt"];
562--7417[label="0.5;1pkt 1fpkt"];
562--8366[label="0.5;1pkt 1fpkt"];
563--1008[label="0.5;1pkt 1fpkt"];
563--1336[label="1;1pkt 1fpkt"];
563--1567[label="0.5;1pkt 1fpkt"];
563--1570[label="0.5;1pkt 1fpkt"];
563--2876[label="0.5;1pkt 1fpkt"];
563--3143[label="0.5;1pkt 1fpkt"];
563--3397[label="0.5;1pkt 1fpkt"];
563--5740[label="0.5;1pkt 1fpkt"];
563--7417[label="0.5;1pkt 1fpkt"];
563--8366[label="0.5;1pkt 1fpkt"];
1008--1095[label="1;1pkt 1fpkt"];
1008--1336[label="1;1pkt 1fpkt"];
1008--2488[label="1;2pkt 2fpkt"];
1008--2771[label="1;1pkt 1fpkt"];
1008--3397[label="1;182pkt 182fpkt"];
1008--3462[label="1;2pkt 2fpkt"];
1008--3714[label="0.0187793;4pkt 4fpkt"];
1008--3726[label="0.0187793;4pkt 4fpkt"];
1008--3731[label="0.0187793;4pkt 4fpkt"];
1008--3920[label="1;1pkt 1fpkt"];
1008--4595[label="1;2pkt 2fpkt"];
1008--5457[label="1;1pkt 1fpkt"];
1008--7232[label="1;1pkt 1fpkt"];
1095--2771[label="1;1pkt 1fpkt"];
1095--3397[label="1;1pkt 1fpkt"];
1095--5457[label="1;1pkt 1fpkt"];
1095--7232[label="1;1pkt 1fpkt"];
1336--3397[label="1;1pkt 1fpkt"];
1567--1570[label="1;12pkt 12fpkt"];
1567--2876[label="1;12pkt 12fpkt"];
1567--3143[label="1;12pkt 12fpkt"];
1567--5740[label="1;12pkt 12fpkt"];
1567--7417[label="1;11pkt 11fpkt"];
1567--8366[label="1;12pkt 12fpkt"];
1570--2876[label="1;12pkt 12fpkt"];
1570--3143[label="1;12pkt 12fpkt"];
1570--5740[label="1;12pkt 12fpkt"];
1570--7417[label="1;11pkt 11fpkt"];
1570--8366[label="1;12pkt 12fpkt"];
2488--3397[label="1;2pkt 2fpkt"];
2488--3462[label="1;2pkt 2fpkt"];
2488--3920[label="1;1pkt 1fpkt"];
2771--3397[label="1;1pkt 1fpkt"];
2771--5457[label="1;1pkt 1fpkt"];
2771--7232[label="1;1pkt 1fpkt"];
2876--3143[label="1;12pkt 12fpkt"];
2876--5740[label="1;12pkt 12fpkt"];
2876--7417[label="1;11pkt 11fpkt"];
2876--8366[label="1;12pkt 12fpkt"];
3143--5740[label="1;12pkt 12fpkt"];
3143--7417[label="1;11pkt 11fpkt"];
3143--8366[label="1;12pkt 12fpkt"];
3397--3462[label="1;2pkt 2fpkt"];
3397--3714[label="0.021978;4pkt 4fpkt"];
3397--3726[label="0.021978;4pkt 4fpkt"];
3397--3731[label="0.021978;4pkt 4fpkt"];
3397--3920[label="1;1pkt 1fpkt"];
3397--5457[label="1;1pkt 1fpkt"];
3397--7232[label="1;1pkt 1fpkt"];
3462--3920[label="1;1pkt 1fpkt"];
5457--7232[label="1;1pkt 1fpkt"];
5740--7417[label="1;11pkt 11fpkt"];
5740--8366[label="1;12pkt 12fpkt"];
7417--8366[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="133.213.0.229" src_port="8888"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05572,2.67421,503,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_264{
style=filled;
color=gray75;
124[label="199.195.135.172s;1pkt 1fpkt", shape=rectangle, color=red];
1231[label="148.242.103.165;d;10pkt 10fpkt", shape=diamond, color=yellow];
1232[label="199.195.135.172;s;2pkt 2fpkt", shape=diamond, color=yellow];
5342[label="199.195.135.172;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7151[label="199.195.135.172;1pkt 1fpkt", shape=invtriangle, color=brown];
8219[label="199.195.135.172;1pkt 1fpkt", shape=invhouse, color=bisque];
stat264[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.194.136.130:80, 148.242.103.165:*}[30%]&lt;BR/&gt;{*:1863, 148.242.103.165:*}[30%]&lt;BR/&gt;{199.195.135.172:80, 148.242.103.165:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.1765%)&lt;BR/&gt; 1752: (17.6471%)&lt;BR/&gt; 1863: (8.82353%)&lt;BR/&gt; 1750: (8.82353%)&lt;BR/&gt; 1241: (2.94118%)&gt;];
}
124--1231[label="1;1pkt 1fpkt"];
124--1232[label="1;1pkt 1fpkt"];
124--5342[label="1;1pkt 1fpkt"];
124--7151[label="1;1pkt 1fpkt"];
124--8219[label="1;1pkt 1fpkt"];
1231--1232[label="1;2pkt 2fpkt"];
1231--1485[label="0.3;3pkt 3fpkt"];
1231--3779[label="0.142857;1pkt 1fpkt"];
1231--5342[label="1;2pkt 2fpkt"];
1231--7151[label="1;1pkt 1fpkt"];
1231--8219[label="1;1pkt 1fpkt"];
1232--5342[label="1;2pkt 2fpkt"];
1232--7151[label="1;1pkt 1fpkt"];
1232--8219[label="1;1pkt 1fpkt"];
5342--7151[label="1;1pkt 1fpkt"];
5342--8219[label="1;1pkt 1fpkt"];
7151--8219[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.242.103.165" src_port="1863"/>
      <filter dst_ip="148.242.103.165" src_ip="209.194.136.130" src_port="80"/>
      <filter dst_ip="148.242.103.165" src_ip="199.195.135.172" src_port="80"/>
    </slice>
    <from sec="1036990827" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23582,2.68221,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_265{
style=filled;
color=gray75;
845[label="215.156.92.53;s;19456pkt 19456fpkt", shape=diamond, color=yellow];
1479[label="78.64.100.116;d;2pkt 2fpkt", shape=diamond, color=yellow];
2131[label="212.22.221.224;d;1pkt 1fpkt", shape=diamond, color=yellow];
2188[label="201.40.206.29;d;10pkt 10fpkt", shape=diamond, color=yellow];
2341[label="9.77.80.192;d;581pkt 581fpkt", shape=diamond, color=yellow];
2366[label="9.77.80.206;d;593pkt 593fpkt", shape=diamond, color=yellow];
2369[label="9.77.80.216;d;575pkt 575fpkt", shape=diamond, color=yellow];
2390[label="9.77.80.193;d;622pkt 622fpkt", shape=diamond, color=yellow];
2402[label="201.80.231.112;d;1pkt 1fpkt", shape=diamond, color=yellow];
2427[label="201.154.36.105;d;6pkt 6fpkt", shape=diamond, color=yellow];
2538[label="9.77.80.205;d;561pkt 561fpkt", shape=diamond, color=yellow];
2541[label="9.77.80.204;d;575pkt 575fpkt", shape=diamond, color=yellow];
2548[label="9.77.80.211;d;578pkt 578fpkt", shape=diamond, color=yellow];
2560[label="9.77.80.200;d;565pkt 565fpkt", shape=diamond, color=yellow];
2570[label="9.77.80.201;d;585pkt 585fpkt", shape=diamond, color=yellow];
2588[label="215.211.62.83;d;1pkt 1fpkt", shape=diamond, color=yellow];
2596[label="201.23.215.131;d;465pkt 465fpkt", shape=diamond, color=yellow];
3420[label="9.77.80.216;d;510pkt 510fpkt", shape=hexagon, color=black];
3427[label="9.77.80.193;d;531pkt 531fpkt", shape=hexagon, color=black];
3516[label="9.77.80.200;d;565pkt 565fpkt", shape=hexagon, color=black];
3522[label="9.77.80.201;d;585pkt 585fpkt", shape=hexagon, color=black];
4281[label="215.156.92.53;21089pkt 21089fpkt", shape=pentagon, color=darkviolet];
6406[label="215.156.92.53;21090pkt 21090fpkt", shape=invtriangle, color=brown];
7804[label="215.156.92.53;21090pkt 21090fpkt", shape=invhouse, color=bisque];
stat265[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.156.92.53:53, *:*}[99.8104%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (55.3587%)&lt;BR/&gt; 1024: (1.16012%)&lt;BR/&gt; 32768: (0.53124%)&lt;BR/&gt; 32769: (0.28741%)&lt;BR/&gt; 1025: (0.232797%)&gt;];
}
845--1479[label="1;2pkt 2fpkt"];
845--2131[label="1;1pkt 1fpkt"];
845--2188[label="0.1;1pkt 1fpkt"];
845--2210[label="0.571429;36pkt 36fpkt"];
845--2341[label="1;581pkt 581fpkt"];
845--2366[label="1;593pkt 593fpkt"];
845--2369[label="0.998261;574pkt 574fpkt"];
845--2390[label="1;622pkt 622fpkt"];
845--2402[label="1;1pkt 1fpkt"];
845--2427[label="1;6pkt 6fpkt"];
845--2537[label="1;1pkt 1fpkt"];
845--2538[label="1;561pkt 561fpkt"];
845--2541[label="1;575pkt 575fpkt"];
845--2548[label="1;578pkt 578fpkt"];
845--2560[label="1;565pkt 565fpkt"];
845--2570[label="1;585pkt 585fpkt"];
845--2588[label="1;1pkt 1fpkt"];
845--2592[label="1;1pkt 1fpkt"];
845--2596[label="1;465pkt 465fpkt"];
845--2630[label="0.0769231;1pkt 1fpkt"];
845--3302[label="0.111111;1pkt 1fpkt"];
845--3420[label="0.998039;509pkt 509fpkt"];
845--3427[label="1;531pkt 531fpkt"];
845--3516[label="1;565pkt 565fpkt"];
845--3522[label="1;585pkt 585fpkt"];
845--4281[label="0.999949;19455pkt 19455fpkt"];
845--6406[label="1;19456pkt 19456fpkt"];
845--7804[label="1;19456pkt 19456fpkt"];
1479--4281[label="1;2pkt 2fpkt"];
1479--6406[label="1;2pkt 2fpkt"];
1479--7804[label="1;2pkt 2fpkt"];
2131--4281[label="1;1pkt 1fpkt"];
2131--6406[label="1;1pkt 1fpkt"];
2131--7804[label="1;1pkt 1fpkt"];
2188--2577[label="0.1;1pkt 1fpkt"];
2188--3170[label="0.1;1pkt 1fpkt"];
2188--3302[label="1;9pkt 9fpkt"];
2188--4281[label="0.1;1pkt 1fpkt"];
2188--4782[label="0.1;1pkt 1fpkt"];
2188--5303[label="0.1;1pkt 1fpkt"];
2188--6406[label="0.1;1pkt 1fpkt"];
2188--6751[label="0.1;1pkt 1fpkt"];
2188--7118[label="0.1;1pkt 1fpkt"];
2188--7804[label="0.1;1pkt 1fpkt"];
2341--4281[label="1;581pkt 581fpkt"];
2341--6406[label="1;581pkt 581fpkt"];
2341--7804[label="1;581pkt 581fpkt"];
2366--4281[label="1;593pkt 593fpkt"];
2366--6406[label="1;593pkt 593fpkt"];
2366--7804[label="1;593pkt 593fpkt"];
2369--3420[label="1;510pkt 510fpkt"];
2369--4281[label="0.998261;574pkt 574fpkt"];
2369--6406[label="0.998261;574pkt 574fpkt"];
2369--7804[label="0.998261;574pkt 574fpkt"];
2390--3427[label="1;531pkt 531fpkt"];
2390--4281[label="1;622pkt 622fpkt"];
2390--6406[label="1;622pkt 622fpkt"];
2390--7804[label="1;622pkt 622fpkt"];
2402--4281[label="1;1pkt 1fpkt"];
2402--6406[label="1;1pkt 1fpkt"];
2402--7804[label="1;1pkt 1fpkt"];
2427--4281[label="1;6pkt 6fpkt"];
2427--6406[label="1;6pkt 6fpkt"];
2427--7804[label="1;6pkt 6fpkt"];
2538--4281[label="1;561pkt 561fpkt"];
2538--6406[label="1;561pkt 561fpkt"];
2538--7804[label="1;561pkt 561fpkt"];
2541--4281[label="1;575pkt 575fpkt"];
2541--6406[label="1;575pkt 575fpkt"];
2541--7804[label="1;575pkt 575fpkt"];
2548--4281[label="1;578pkt 578fpkt"];
2548--6406[label="1;578pkt 578fpkt"];
2548--7804[label="1;578pkt 578fpkt"];
2560--3516[label="1;565pkt 565fpkt"];
2560--4281[label="1;565pkt 565fpkt"];
2560--6406[label="1;565pkt 565fpkt"];
2560--7804[label="1;565pkt 565fpkt"];
2570--3522[label="1;585pkt 585fpkt"];
2570--4281[label="1;585pkt 585fpkt"];
2570--6406[label="1;585pkt 585fpkt"];
2570--7804[label="1;585pkt 585fpkt"];
2588--4281[label="1;1pkt 1fpkt"];
2588--6406[label="1;1pkt 1fpkt"];
2588--7804[label="1;1pkt 1fpkt"];
2596--4281[label="1;465pkt 465fpkt"];
2596--6406[label="1;465pkt 465fpkt"];
2596--7804[label="1;465pkt 465fpkt"];
3420--4281[label="0.998039;509pkt 509fpkt"];
3420--6406[label="0.998039;509pkt 509fpkt"];
3420--7804[label="0.998039;509pkt 509fpkt"];
3427--4281[label="1;531pkt 531fpkt"];
3427--6406[label="1;531pkt 531fpkt"];
3427--7804[label="1;531pkt 531fpkt"];
3516--4281[label="1;565pkt 565fpkt"];
3516--6406[label="1;565pkt 565fpkt"];
3516--7804[label="1;565pkt 565fpkt"];
3522--4281[label="1;585pkt 585fpkt"];
3522--6406[label="1;585pkt 585fpkt"];
3522--7804[label="1;585pkt 585fpkt"];
4281--6406[label="1;21089pkt 21089fpkt"];
4281--7804[label="1;21089pkt 21089fpkt"];
6406--7804[label="1;21090pkt 21090fpkt"];
</description>
    <slice>
      <filter src_ip="215.156.92.53" src_port="53"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14589,2.70209,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_266{
style=filled;
color=gray75;
955[label="148.242.165.110;d;47pkt 47fpkt", shape=diamond, color=yellow];
957[label="78.193.93.93;s;16pkt 16fpkt", shape=diamond, color=yellow];
2750[label="78.193.93.93;s;16pkt 16fpkt", shape=hexagon, color=black];
2922[label="148.242.165.110;d;17pkt 17fpkt", shape=hexagon, color=black];
4658[label="78.193.93.93;19pkt 19fpkt", shape=pentagon, color=darkviolet];
6664[label="78.193.93.93;19pkt 19fpkt", shape=invtriangle, color=brown];
stat266[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.193.93.93:80, 148.242.165.110:*}[38%]&lt;BR/&gt;{209.137.184.139:80, 148.242.165.110:*}[26%]&lt;BR/&gt;{209.137.176.12:80, 148.242.165.110:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2234: (2.23881%)&lt;BR/&gt; 2233: (2.23881%)&lt;BR/&gt; 2224: (2.23881%)&lt;BR/&gt; 2219: (2.23881%)&gt;];
}
955--957[label="1;16pkt 16fpkt"];
955--2750[label="1;16pkt 16fpkt"];
955--2922[label="1;17pkt 17fpkt"];
955--4155[label="0.1875;6pkt 6fpkt"];
955--4658[label="0.842105;16pkt 16fpkt"];
955--6312[label="0.181818;6pkt 6fpkt"];
955--6664[label="0.842105;16pkt 16fpkt"];
957--2750[label="1;16pkt 16fpkt"];
957--2922[label="0.4375;7pkt 7fpkt"];
957--4658[label="1;16pkt 16fpkt"];
957--6664[label="1;16pkt 16fpkt"];
2750--2922[label="0.4375;7pkt 7fpkt"];
2750--4658[label="1;16pkt 16fpkt"];
2750--6664[label="1;16pkt 16fpkt"];
2922--4658[label="0.411765;7pkt 7fpkt"];
2922--6664[label="0.411765;7pkt 7fpkt"];
4658--6664[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="148.242.165.110" src_ip="78.193.93.93" src_port="80"/>
      <filter dst_ip="148.242.165.110" src_ip="209.137.184.139" src_port="80"/>
      <filter dst_ip="148.242.165.110" src_ip="209.137.176.12" src_port="80"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12548,2.73159,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_268{
style=filled;
color=gray75;
1661[label="215.156.91.81;s;268pkt 268fpkt", shape=diamond, color=yellow];
2938[label="215.156.91.81;s;160pkt 160fpkt", shape=hexagon, color=black];
4551[label="215.156.91.81;300pkt 300fpkt", shape=pentagon, color=darkviolet];
stat268[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.156.91.81:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1661--2938[label="1;160pkt 160fpkt"];
1661--4551[label="1;268pkt 268fpkt"];
2938--4551[label="1;160pkt 160fpkt"];
</description>
    <slice>
      <filter src_ip="215.156.91.81"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32241,2.66004,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_269{
style=filled;
color=gray75;
50[label="148.242.214.45s;3pkt 3fpkt", shape=rectangle, color=red];
807[label="200.38.17.86;d;1pkt 1fpkt", shape=diamond, color=yellow];
945[label="216.13.41.97;d;1pkt 1fpkt", shape=diamond, color=yellow];
953[label="218.17.91.152;d;4pkt 4fpkt", shape=diamond, color=yellow];
958[label="200.38.149.87;d;1pkt 1fpkt", shape=diamond, color=yellow];
1005[label="48.41.157.104;d;1pkt 1fpkt", shape=diamond, color=yellow];
1067[label="85.88.125.177;d;3pkt 3fpkt", shape=diamond, color=yellow];
1070[label="200.41.121.231;d;3pkt 3fpkt", shape=diamond, color=yellow];
1073[label="215.121.112.27;d;2pkt 2fpkt", shape=diamond, color=yellow];
1249[label="148.242.214.45;s;19pkt 19fpkt", shape=diamond, color=yellow];
2751[label="200.38.149.87;d;1pkt 1fpkt", shape=hexagon, color=black];
2812[label="148.242.214.45;s;19pkt 19fpkt", shape=hexagon, color=black];
2813[label="200.38.17.86;d;1pkt 1fpkt", shape=hexagon, color=black];
2831[label="218.17.91.152;d;3pkt 3fpkt", shape=hexagon, color=black];
2941[label="200.41.121.231;d;3pkt 3fpkt", shape=hexagon, color=black];
3088[label="215.121.112.27;d;2pkt 2fpkt", shape=hexagon, color=black];
3188[label="216.13.41.97;d;1pkt 1fpkt", shape=hexagon, color=black];
4213[label="148.242.214.45;19pkt 19fpkt", shape=pentagon, color=darkviolet];
6351[label="148.242.214.45;20pkt 20fpkt", shape=invtriangle, color=brown];
7770[label="148.242.214.45;19pkt 19fpkt", shape=invhouse, color=bisque];
stat269[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.242.214.45:2002, *:*}[30%]&lt;BR/&gt;{148.242.214.45:*, 218.17.91.152:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2002: (13.0952%)&lt;BR/&gt; 7770: (5.55556%)&lt;BR/&gt; 49668: (3.1746%)&lt;BR/&gt; 49667: (3.1746%)&lt;BR/&gt; 3747: (3.1746%)&gt;];
}
50--1005[label="1;1pkt 1fpkt"];
50--1070[label="0.666667;2pkt 2fpkt"];
50--1249[label="1;3pkt 3fpkt"];
50--2812[label="1;3pkt 3fpkt"];
50--2941[label="0.666667;2pkt 2fpkt"];
50--4213[label="1;3pkt 3fpkt"];
50--6351[label="1;3pkt 3fpkt"];
50--7770[label="1;3pkt 3fpkt"];
807--1249[label="1;1pkt 1fpkt"];
807--2812[label="1;1pkt 1fpkt"];
807--2813[label="1;1pkt 1fpkt"];
807--4213[label="1;1pkt 1fpkt"];
807--6351[label="1;1pkt 1fpkt"];
807--7770[label="1;1pkt 1fpkt"];
945--1249[label="1;1pkt 1fpkt"];
945--2812[label="1;1pkt 1fpkt"];
945--3188[label="1;1pkt 1fpkt"];
945--4213[label="1;1pkt 1fpkt"];
945--6351[label="1;1pkt 1fpkt"];
945--7770[label="1;1pkt 1fpkt"];
953--1249[label="1;4pkt 4fpkt"];
953--2812[label="1;4pkt 4fpkt"];
953--2831[label="1;3pkt 3fpkt"];
953--4213[label="1;4pkt 4fpkt"];
953--6351[label="1;4pkt 4fpkt"];
953--7770[label="1;4pkt 4fpkt"];
958--1249[label="1;1pkt 1fpkt"];
958--2751[label="1;1pkt 1fpkt"];
958--2812[label="1;1pkt 1fpkt"];
958--4213[label="1;1pkt 1fpkt"];
958--6351[label="1;1pkt 1fpkt"];
958--7770[label="1;1pkt 1fpkt"];
1005--1249[label="1;1pkt 1fpkt"];
1005--2812[label="1;1pkt 1fpkt"];
1005--4213[label="1;1pkt 1fpkt"];
1005--6351[label="1;1pkt 1fpkt"];
1005--7770[label="1;1pkt 1fpkt"];
1067--1249[label="1;3pkt 3fpkt"];
1067--2812[label="1;3pkt 3fpkt"];
1067--4213[label="1;3pkt 3fpkt"];
1067--6351[label="1;3pkt 3fpkt"];
1067--7770[label="1;3pkt 3fpkt"];
1070--1249[label="1;3pkt 3fpkt"];
1070--2812[label="1;3pkt 3fpkt"];
1070--2941[label="1;3pkt 3fpkt"];
1070--4213[label="1;3pkt 3fpkt"];
1070--6351[label="1;3pkt 3fpkt"];
1070--7770[label="1;3pkt 3fpkt"];
1073--1249[label="1;2pkt 2fpkt"];
1073--2812[label="1;2pkt 2fpkt"];
1073--3088[label="1;2pkt 2fpkt"];
1073--4213[label="1;2pkt 2fpkt"];
1073--6351[label="1;2pkt 2fpkt"];
1073--7770[label="1;2pkt 2fpkt"];
1249--2751[label="1;1pkt 1fpkt"];
1249--2812[label="1;19pkt 19fpkt"];
1249--2813[label="1;1pkt 1fpkt"];
1249--2831[label="1;3pkt 3fpkt"];
1249--2941[label="1;3pkt 3fpkt"];
1249--3088[label="1;2pkt 2fpkt"];
1249--3188[label="1;1pkt 1fpkt"];
1249--4213[label="0.947368;18pkt 18fpkt"];
1249--6351[label="1;19pkt 19fpkt"];
1249--7770[label="0.947368;18pkt 18fpkt"];
2751--2812[label="1;1pkt 1fpkt"];
2751--4213[label="1;1pkt 1fpkt"];
2751--6351[label="1;1pkt 1fpkt"];
2751--7770[label="1;1pkt 1fpkt"];
2812--2813[label="1;1pkt 1fpkt"];
2812--2831[label="1;3pkt 3fpkt"];
2812--2941[label="1;3pkt 3fpkt"];
2812--3088[label="1;2pkt 2fpkt"];
2812--3188[label="1;1pkt 1fpkt"];
2812--4213[label="0.947368;18pkt 18fpkt"];
2812--6351[label="1;19pkt 19fpkt"];
2812--7770[label="0.947368;18pkt 18fpkt"];
2813--4213[label="1;1pkt 1fpkt"];
2813--6351[label="1;1pkt 1fpkt"];
2813--7770[label="1;1pkt 1fpkt"];
2831--4213[label="1;3pkt 3fpkt"];
2831--6351[label="1;3pkt 3fpkt"];
2831--7770[label="1;3pkt 3fpkt"];
2941--4213[label="1;3pkt 3fpkt"];
2941--6351[label="1;3pkt 3fpkt"];
2941--7770[label="1;3pkt 3fpkt"];
3088--4213[label="1;2pkt 2fpkt"];
3088--6351[label="1;2pkt 2fpkt"];
3088--7770[label="1;2pkt 2fpkt"];
3188--4213[label="1;1pkt 1fpkt"];
3188--6351[label="1;1pkt 1fpkt"];
3188--7770[label="1;1pkt 1fpkt"];
4213--6351[label="1;19pkt 19fpkt"];
4213--7770[label="1;19pkt 19fpkt"];
6351--7770[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="218.17.91.152" src_ip="148.242.214.45"/>
      <filter src_ip="148.242.214.45" src_port="2002"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23582,2.68221,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_270{
style=filled;
color=gray75;
1075[label="162.131.195.111;d;1pkt 1fpkt", shape=diamond, color=yellow];
1076[label="198.9.249.48;s;1pkt 1fpkt", shape=diamond, color=yellow];
2946[label="198.9.249.48;s;1pkt 1fpkt", shape=hexagon, color=black];
4233[label="198.9.249.48;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6365[label="198.9.249.48;2pkt 2fpkt", shape=invtriangle, color=brown];
7777[label="198.9.249.48;1pkt 1fpkt", shape=invhouse, color=bisque];
stat270[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.9.249.48:3392, 162.131.195.111:5190}[50%]&lt;BR/&gt;{198.9.249.48:3470, 162.131.195.111:5190}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5190: (50%)&lt;BR/&gt; 3470: (42.8571%)&lt;BR/&gt; 3392: (7.14286%)&gt;];
}
1075--1076[label="1;1pkt 1fpkt"];
1075--2946[label="1;1pkt 1fpkt"];
1075--4233[label="1;1pkt 1fpkt"];
1075--6365[label="1;1pkt 1fpkt"];
1075--7777[label="1;1pkt 1fpkt"];
1076--2946[label="1;1pkt 1fpkt"];
1076--4233[label="1;1pkt 1fpkt"];
1076--6365[label="1;1pkt 1fpkt"];
1076--7777[label="1;1pkt 1fpkt"];
2946--4233[label="1;1pkt 1fpkt"];
2946--6365[label="1;1pkt 1fpkt"];
2946--7777[label="1;1pkt 1fpkt"];
4233--6365[label="1;1pkt 1fpkt"];
4233--7777[label="1;1pkt 1fpkt"];
6365--7777[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.131.195.111" dst_port="5190" src_ip="198.9.249.48" src_port="3470"/>
      <filter dst_ip="162.131.195.111" dst_port="5190" src_ip="198.9.249.48" src_port="3392"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12548,2.73159,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_271{
style=filled;
color=gray75;
1701[label="145.208.145.202;d;1pkt 1fpkt", shape=diamond, color=yellow];
1702[label="198.2.99.215;s;1pkt 1fpkt", shape=diamond, color=yellow];
2969[label="198.2.99.215;s;1pkt 1fpkt", shape=hexagon, color=black];
5704[label="198.2.99.215;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat271[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.2.99.215:1453, 145.208.145.202:5963}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5963: (50%)&lt;BR/&gt; 1453: (50%)&gt;];
}
1701--1702[label="1;1pkt 1fpkt"];
1701--2969[label="1;1pkt 1fpkt"];
1701--5704[label="1;1pkt 1fpkt"];
1702--2969[label="1;1pkt 1fpkt"];
1702--5704[label="1;1pkt 1fpkt"];
2969--5704[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.145.202" dst_port="5963" src_ip="198.2.99.215" src_port="1453"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23582,2.68221,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_272{
style=filled;
color=gray75;
1703[label="73.8.15.141;d;2pkt 2fpkt", shape=diamond, color=yellow];
1704[label="168.100.158.43;s;3pkt 3fpkt", shape=diamond, color=yellow];
2970[label="73.8.15.141;d;2pkt 2fpkt", shape=hexagon, color=black];
3101[label="168.100.158.43;s;3pkt 3fpkt", shape=hexagon, color=black];
4193[label="168.100.158.43;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6340[label="168.100.158.43;2pkt 2fpkt", shape=invtriangle, color=brown];
7765[label="168.100.158.43;2pkt 2fpkt", shape=invhouse, color=bisque];
stat272[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.100.158.43:1240, 201.78.26.76:25}[33.3333%]&lt;BR/&gt;{168.100.158.43:1141, 73.8.15.141:20}[33.3333%]&lt;BR/&gt;{168.100.158.43:1142, 73.8.15.141:20}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (34.375%)&lt;BR/&gt; 1141: (21.875%)&lt;BR/&gt; 1240: (15.625%)&lt;BR/&gt; 25: (15.625%)&lt;BR/&gt; 1142: (12.5%)&gt;];
}
1703--1704[label="1;2pkt 2fpkt"];
1703--2970[label="1;2pkt 2fpkt"];
1703--3101[label="1;2pkt 2fpkt"];
1703--4193[label="0.5;1pkt 1fpkt"];
1703--6340[label="0.5;1pkt 1fpkt"];
1703--7765[label="0.5;1pkt 1fpkt"];
1704--2970[label="1;2pkt 2fpkt"];
1704--3101[label="1;3pkt 3fpkt"];
1704--4193[label="1;2pkt 2fpkt"];
1704--6340[label="1;2pkt 2fpkt"];
1704--7765[label="1;2pkt 2fpkt"];
2970--3101[label="1;2pkt 2fpkt"];
2970--4193[label="0.5;1pkt 1fpkt"];
2970--6340[label="0.5;1pkt 1fpkt"];
2970--7765[label="0.5;1pkt 1fpkt"];
3101--4193[label="1;2pkt 2fpkt"];
3101--6340[label="1;2pkt 2fpkt"];
3101--7765[label="1;2pkt 2fpkt"];
4193--6340[label="1;2pkt 2fpkt"];
4193--7765[label="1;2pkt 2fpkt"];
6340--7765[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="73.8.15.141" dst_port="20" src_ip="168.100.158.43" src_port="1142"/>
      <filter dst_ip="73.8.15.141" dst_port="20" src_ip="168.100.158.43" src_port="1141"/>
      <filter dst_ip="201.78.26.76" dst_port="25" src_ip="168.100.158.43" src_port="1240"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23582,2.68221,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_275{
style=filled;
color=gray75;
1578[label="145.208.128.5;d;162pkt 162fpkt", shape=diamond, color=yellow];
1609[label="76.240.198.179;s;154pkt 154fpkt", shape=diamond, color=yellow];
2879[label="145.208.128.5;d;157pkt 157fpkt", shape=hexagon, color=black];
3033[label="76.240.198.179;s;154pkt 154fpkt", shape=hexagon, color=black];
5411[label="76.240.198.179;153pkt 153fpkt", shape=pentagon, color=darkviolet];
7202[label="76.240.198.179;154pkt 154fpkt", shape=invtriangle, color=brown];
8246[label="76.240.198.179;154pkt 154fpkt", shape=invhouse, color=bisque];
stat275[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.240.198.179:80, 145.208.128.5:*}[95.0617%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9081%)&lt;BR/&gt; 4680: (0.321691%)&lt;BR/&gt; 4679: (0.321691%)&lt;BR/&gt; 4678: (0.321691%)&lt;BR/&gt; 4677: (0.321691%)&gt;];
}
1578--1609[label="1;154pkt 154fpkt"];
1578--2574[label="0.00775194;1pkt 1fpkt"];
1578--2879[label="1;157pkt 157fpkt"];
1578--3033[label="1;154pkt 154fpkt"];
1578--5410[label="0.00729927;1pkt 1fpkt"];
1578--5411[label="1;153pkt 153fpkt"];
1578--7201[label="0.00729927;1pkt 1fpkt"];
1578--7202[label="1;154pkt 154fpkt"];
1578--8245[label="0.00729927;1pkt 1fpkt"];
1578--8246[label="1;154pkt 154fpkt"];
1609--2879[label="1;154pkt 154fpkt"];
1609--3033[label="1;154pkt 154fpkt"];
1609--5411[label="1;153pkt 153fpkt"];
1609--7202[label="1;154pkt 154fpkt"];
1609--8246[label="1;154pkt 154fpkt"];
2879--3033[label="1;154pkt 154fpkt"];
2879--5410[label="0.00729927;1pkt 1fpkt"];
2879--5411[label="1;153pkt 153fpkt"];
2879--7201[label="0.00729927;1pkt 1fpkt"];
2879--7202[label="1;154pkt 154fpkt"];
2879--8245[label="0.00729927;1pkt 1fpkt"];
2879--8246[label="1;154pkt 154fpkt"];
3033--5411[label="1;153pkt 153fpkt"];
3033--7202[label="1;154pkt 154fpkt"];
3033--8246[label="1;154pkt 154fpkt"];
5411--7202[label="1;153pkt 153fpkt"];
5411--8246[label="1;153pkt 153fpkt"];
7202--8246[label="1;154pkt 154fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.128.5" src_ip="76.240.198.179" src_port="80"/>
    </slice>
    <from sec="1036990833" usec="0"/>
    <to sec="1036991346" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21992,2.70982,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_276{
style=filled;
color=gray75;
155[label="76.104.178.219s;1pkt 1fpkt", shape=rectangle, color=red];
639[label="9.187.10.11d;1pkt 1fpkt", shape=rectangle, color=red];
1849[label="203.122.251.63;s;1pkt 1fpkt", shape=diamond, color=yellow];
2324[label="145.208.130.11;d;9pkt 9fpkt", shape=diamond, color=yellow];
2377[label="76.104.178.219;s;1pkt 1fpkt", shape=diamond, color=yellow];
3045[label="203.122.251.63;s;1pkt 1fpkt", shape=hexagon, color=black];
4390[label="203.122.251.63;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat276[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 145.208.130.11:6699}[66.6667%]&lt;BR/&gt;{*:6699, 145.208.130.11:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (46.6667%)&lt;BR/&gt; 2651: (13.3333%)&lt;BR/&gt; 1111: (13.3333%)&lt;BR/&gt; 23634: (3.33333%)&lt;BR/&gt; 3526: (3.33333%)&gt;];
}
155--639[label="1;1pkt 1fpkt"];
155--2324[label="1;1pkt 1fpkt"];
155--2377[label="1;1pkt 1fpkt"];
639--2324[label="1;1pkt 1fpkt"];
639--2377[label="1;1pkt 1fpkt"];
1849--2324[label="1;1pkt 1fpkt"];
1849--3045[label="1;1pkt 1fpkt"];
1849--4390[label="1;1pkt 1fpkt"];
2324--2377[label="1;1pkt 1fpkt"];
2324--3045[label="1;1pkt 1fpkt"];
2324--4390[label="1;1pkt 1fpkt"];
3045--4390[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.130.11" src_port="6699"/>
      <filter dst_ip="145.208.130.11" dst_port="6699"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23877,2.68008,503,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_277{
style=filled;
color=gray75;
389[label="198.160.161.74s;2pkt 2fpkt", shape=rectangle, color=red];
1080[label="145.208.65.88;s;904pkt 904fpkt", shape=diamond, color=yellow];
1675[label="215.165.94.252;d;12pkt 12fpkt", shape=diamond, color=yellow];
1978[label="215.177.117.93;d;26pkt 26fpkt", shape=diamond, color=yellow];
2637[label="214.8.97.17;d;11pkt 11fpkt", shape=diamond, color=yellow];
3224[label="145.208.65.88;s;620pkt 620fpkt", shape=hexagon, color=black];
3565[label="214.8.97.17;d;11pkt 11fpkt", shape=hexagon, color=black];
4614[label="145.208.65.88;1046pkt 1046fpkt", shape=pentagon, color=darkviolet];
6628[label="145.208.65.88;1047pkt 1047fpkt", shape=invtriangle, color=brown];
stat277[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.65.88:80, *:*}[99.2366%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6331%)&lt;BR/&gt; 0: (0.706714%)&lt;BR/&gt; 1025: (0.231041%)&lt;BR/&gt; 3812: (0.135906%)&lt;BR/&gt; 1366: (0.135906%)&gt;];
}
389--671[label="0.5;1pkt 1fpkt"];
389--672[label="0.5;1pkt 1fpkt"];
389--689[label="0.5;1pkt 1fpkt"];
389--690[label="0.5;1pkt 1fpkt"];
389--696[label="0.5;1pkt 1fpkt"];
389--754[label="0.5;1pkt 1fpkt"];
389--977[label="0.5;1pkt 1fpkt"];
389--1080[label="0.5;1pkt 1fpkt"];
389--1324[label="1;1pkt 1fpkt"];
389--1675[label="0.5;1pkt 1fpkt"];
389--3072[label="0.5;1pkt 1fpkt"];
389--3224[label="0.5;1pkt 1fpkt"];
389--4601[label="0.5;1pkt 1fpkt"];
389--4614[label="0.5;1pkt 1fpkt"];
389--6619[label="0.5;1pkt 1fpkt"];
389--6628[label="0.5;1pkt 1fpkt"];
1080--1675[label="1;12pkt 12fpkt"];
1080--1978[label="1;26pkt 26fpkt"];
1080--2637[label="1;11pkt 11fpkt"];
1080--3224[label="1;620pkt 620fpkt"];
1080--3565[label="1;11pkt 11fpkt"];
1080--4614[label="0.998894;903pkt 903fpkt"];
1080--6628[label="1;904pkt 904fpkt"];
1675--3224[label="1;12pkt 12fpkt"];
1675--4614[label="1;12pkt 12fpkt"];
1675--6628[label="1;12pkt 12fpkt"];
1978--3224[label="0.769231;20pkt 20fpkt"];
1978--4614[label="1;26pkt 26fpkt"];
1978--6628[label="1;26pkt 26fpkt"];
2637--3224[label="0.727273;8pkt 8fpkt"];
2637--3565[label="1;11pkt 11fpkt"];
2637--4614[label="1;11pkt 11fpkt"];
2637--6628[label="1;11pkt 11fpkt"];
3224--3565[label="0.727273;8pkt 8fpkt"];
3224--4614[label="0.998387;619pkt 619fpkt"];
3224--6628[label="1;620pkt 620fpkt"];
3565--4614[label="1;11pkt 11fpkt"];
3565--6628[label="1;11pkt 11fpkt"];
4614--6628[label="1;1046pkt 1046fpkt"];
</description>
    <slice>
      <filter src_ip="145.208.65.88" src_port="80"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14589,2.70209,020,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_278{
style=filled;
color=gray75;
1650[label="145.208.86.100;s;118pkt 118fpkt", shape=diamond, color=yellow];
3073[label="145.208.86.100;s;107pkt 107fpkt", shape=hexagon, color=black];
4718[label="145.208.86.100;121pkt 121fpkt", shape=pentagon, color=darkviolet];
6705[label="145.208.86.100;122pkt 122fpkt", shape=invtriangle, color=brown];
stat278[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.86.100:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1650--3073[label="1;107pkt 107fpkt"];
1650--4718[label="0.991525;117pkt 117fpkt"];
1650--6705[label="1;118pkt 118fpkt"];
3073--4718[label="0.990654;106pkt 106fpkt"];
3073--6705[label="1;107pkt 107fpkt"];
4718--6705[label="1;121pkt 121fpkt"];
</description>
    <slice>
      <filter src_ip="145.208.86.100"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15633,2.77483,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_279{
style=filled;
color=gray75;
1656[label="172.107.82.226;s;250pkt 250fpkt", shape=diamond, color=yellow];
3077[label="172.107.82.226;s;161pkt 161fpkt", shape=hexagon, color=black];
stat279[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.107.82.226:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1656--3077[label="1;161pkt 161fpkt"];
</description>
    <slice>
      <filter src_ip="172.107.82.226"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12548,2.73159,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_280{
style=filled;
color=gray75;
1053[label="215.156.89.55;d;5pkt 5fpkt", shape=diamond, color=yellow];
1069[label="203.137.226.77;s;1pkt 1fpkt", shape=diamond, color=yellow];
3086[label="203.137.226.77;s;1pkt 1fpkt", shape=hexagon, color=black];
3215[label="215.156.89.55;d;4pkt 4fpkt", shape=hexagon, color=black];
4520[label="203.137.226.77;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat280[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.190.40.5:43150, 215.156.89.55:80}[20%]&lt;BR/&gt;{9.190.40.8:41740, 215.156.89.55:80}[20%]&lt;BR/&gt;{203.137.226.77:57552, 215.156.89.55:1755}[20%]&lt;BR/&gt;{76.123.238.117:49123, 215.156.89.55:80}[20%]&lt;BR/&gt;{210.227.45.162:43366, 215.156.89.55:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (29.1667%)&lt;BR/&gt; 57552: (20.8333%)&lt;BR/&gt; 1755: (20.8333%)&lt;BR/&gt; 43366: (8.33333%)&lt;BR/&gt; 43150: (8.33333%)&gt;];
}
1053--1056[label="1;1pkt 1fpkt"];
1053--1069[label="1;1pkt 1fpkt"];
1053--3086[label="1;1pkt 1fpkt"];
1053--3215[label="1;4pkt 4fpkt"];
1053--4520[label="1;1pkt 1fpkt"];
1069--3086[label="1;1pkt 1fpkt"];
1069--3215[label="1;1pkt 1fpkt"];
1069--4520[label="1;1pkt 1fpkt"];
3086--3215[label="1;1pkt 1fpkt"];
3086--4520[label="1;1pkt 1fpkt"];
3215--4520[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.156.89.55" dst_port="80" src_ip="210.227.45.162" src_port="43366"/>
      <filter dst_ip="215.156.89.55" dst_port="80" src_ip="76.123.238.117" src_port="49123"/>
      <filter dst_ip="215.156.89.55" dst_port="1755" src_ip="203.137.226.77" src_port="57552"/>
      <filter dst_ip="215.156.89.55" dst_port="80" src_ip="9.190.40.8" src_port="41740"/>
      <filter dst_ip="215.156.89.55" dst_port="80" src_ip="9.190.40.5" src_port="43150"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15633,2.77483,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_281{
style=filled;
color=gray75;
1083[label="201.61.15.17;s;1pkt 1fpkt", shape=diamond, color=yellow];
1385[label="148.242.64.211;d;1pkt 1fpkt", shape=diamond, color=yellow];
3089[label="148.242.64.211;d;1pkt 1fpkt", shape=hexagon, color=black];
stat281[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.61.15.17:20970, 148.242.64.211:49162}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49162: (50%)&lt;BR/&gt; 20970: (50%)&gt;];
}
1083--1385[label="1;1pkt 1fpkt"];
1083--3089[label="1;1pkt 1fpkt"];
1385--3089[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.242.64.211" dst_port="49162" src_ip="201.61.15.17" src_port="20970"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15633,2.77483,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_282{
style=filled;
color=gray75;
976[label="175.177.153.86;d;15pkt 15fpkt", shape=diamond, color=yellow];
1486[label="73.45.29.247;s;1pkt 1fpkt", shape=diamond, color=yellow];
1694[label="85.8.133.220;s;1pkt 1fpkt", shape=diamond, color=yellow];
2753[label="175.177.153.86;d;6pkt 6fpkt", shape=hexagon, color=black];
2984[label="73.45.29.247;s;1pkt 1fpkt", shape=hexagon, color=black];
3099[label="85.8.133.220;s;1pkt 1fpkt", shape=hexagon, color=black];
stat282[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6257, 175.177.153.86:6257}[53.3333%]&lt;BR/&gt;{*:*, 175.177.153.86:6699}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (44%)&lt;BR/&gt; 6699: (24%)&lt;BR/&gt; 1480: (8%)&lt;BR/&gt; 1475: (8%)&lt;BR/&gt; 1231: (4%)&gt;];
}
976--1174[label="0.0666667;1pkt 1fpkt"];
976--1486[label="1;1pkt 1fpkt"];
976--1694[label="1;1pkt 1fpkt"];
976--2753[label="1;6pkt 6fpkt"];
976--2785[label="0.0666667;1pkt 1fpkt"];
976--2984[label="1;1pkt 1fpkt"];
976--3099[label="1;1pkt 1fpkt"];
976--3613[label="0.0666667;1pkt 1fpkt"];
976--3714[label="0.2;3pkt 3fpkt"];
976--3726[label="0.2;3pkt 3fpkt"];
976--3731[label="0.2;3pkt 3fpkt"];
1486--2753[label="1;1pkt 1fpkt"];
1486--2984[label="1;1pkt 1fpkt"];
1694--2753[label="1;1pkt 1fpkt"];
1694--3099[label="1;1pkt 1fpkt"];
2753--2984[label="1;1pkt 1fpkt"];
2753--3099[label="1;1pkt 1fpkt"];
2753--3714[label="0.5;3pkt 3fpkt"];
2753--3726[label="0.5;3pkt 3fpkt"];
2753--3731[label="0.5;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="175.177.153.86" dst_port="6699"/>
      <filter dst_ip="175.177.153.86" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14589,2.70209,002,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_283{
style=filled;
color=gray75;
1146[label="193.110.139.155;s;2pkt 2fpkt", shape=diamond, color=yellow];
1147[label="133.213.122.0;d;3pkt 3fpkt", shape=diamond, color=yellow];
3103[label="193.110.139.155;s;2pkt 2fpkt", shape=hexagon, color=black];
5123[label="202.7.74.147;165pkt 165fpkt", shape=pentagon, color=darkviolet];
7000[label="202.7.74.147;164pkt 164fpkt", shape=invtriangle, color=brown];
stat283[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.7.74.147:1028, *:137}[98.8024%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (49.1071%)&lt;BR/&gt; 137: (49.1071%)&lt;BR/&gt; 24536: (0.446429%)&lt;BR/&gt; 6970: (0.446429%)&lt;BR/&gt; 1199: (0.446429%)&gt;];
}
1146--1147[label="1;2pkt 2fpkt"];
1146--3103[label="1;2pkt 2fpkt"];
1147--3103[label="1;2pkt 2fpkt"];
1147--5123[label="0.333333;1pkt 1fpkt"];
1147--7000[label="0.333333;1pkt 1fpkt"];
5123--7000[label="1;164pkt 164fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.7.74.147" src_port="1028"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23582,2.68221,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_284{
style=filled;
color=gray75;
1923[label="214.14.48.199;d;3pkt 3fpkt", shape=diamond, color=yellow];
1924[label="175.177.171.211;s;4pkt 4fpkt", shape=diamond, color=yellow];
3105[label="175.177.171.211;s;4pkt 4fpkt", shape=hexagon, color=black];
5666[label="175.177.171.211;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7373[label="175.177.171.211;4pkt 4fpkt", shape=invtriangle, color=brown];
8340[label="175.177.171.211;3pkt 3fpkt", shape=invhouse, color=bisque];
stat284[shape=component, label=&lt;Rules:&lt;BR/&gt;{175.177.171.211:1039, 201.78.22.167:119}[25%]&lt;BR/&gt;{175.177.171.211:0, 214.14.48.199:0}[25%]&lt;BR/&gt;{175.177.171.211:1828, 214.14.48.199:1755}[25%]&lt;BR/&gt;{175.177.171.211:1830, 214.14.48.199:1755}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (28.5714%)&lt;BR/&gt; 0: (28.5714%)&lt;BR/&gt; 1830: (14.2857%)&lt;BR/&gt; 1828: (14.2857%)&lt;BR/&gt; 1039: (7.14286%)&gt;];
}
1923--1924[label="1;3pkt 3fpkt"];
1923--3105[label="1;3pkt 3fpkt"];
1923--5666[label="1;3pkt 3fpkt"];
1923--7373[label="1;3pkt 3fpkt"];
1923--8340[label="1;3pkt 3fpkt"];
1924--3105[label="1;4pkt 4fpkt"];
1924--5666[label="1;3pkt 3fpkt"];
1924--7373[label="1;4pkt 4fpkt"];
1924--8340[label="1;3pkt 3fpkt"];
3105--5666[label="1;3pkt 3fpkt"];
3105--7373[label="1;4pkt 4fpkt"];
3105--8340[label="1;3pkt 3fpkt"];
5666--7373[label="1;3pkt 3fpkt"];
5666--8340[label="1;3pkt 3fpkt"];
7373--8340[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="214.14.48.199" dst_port="1755" src_ip="175.177.171.211" src_port="1830"/>
      <filter dst_ip="214.14.48.199" dst_port="1755" src_ip="175.177.171.211" src_port="1828"/>
      <filter dst_ip="214.14.48.199" src_ip="175.177.171.211"/>
      <filter dst_ip="201.78.22.167" dst_port="119" src_ip="175.177.171.211" src_port="1039"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.94296,2.93178,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_285{
style=filled;
color=gray75;
2056[label="199.222.212.135;s;242pkt 242fpkt", shape=diamond, color=yellow];
2269[label="133.213.79.22;d;241pkt 241fpkt", shape=diamond, color=yellow];
3160[label="199.222.212.135;s;182pkt 182fpkt", shape=hexagon, color=black];
3667[label="199.222.212.135;s;105pkt 105fpkt", shape=polygon, color=gold];
stat285[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.222.212.135:80, 133.213.79.22:*}[99.5868%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1348: (0.454545%)&lt;BR/&gt; 1386: (0.25974%)&lt;BR/&gt; 1385: (0.25974%)&lt;BR/&gt; 1384: (0.25974%)&gt;];
}
2056--2269[label="1;241pkt 241fpkt"];
2056--3160[label="1;182pkt 182fpkt"];
2056--3667[label="1;105pkt 105fpkt"];
2269--3160[label="0.994505;181pkt 181fpkt"];
2269--3667[label="0.990476;104pkt 104fpkt"];
3160--3667[label="1;105pkt 105fpkt"];
</description>
    <slice>
      <filter dst_ip="133.213.79.22" src_ip="199.222.212.135" src_port="80"/>
    </slice>
    <from sec="1036991055" usec="0"/>
    <to sec="1036991434" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32241,2.66004,503,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_286{
style=filled;
color=gray75;
21[label="133.213.79.22s;180pkt 180fpkt", shape=rectangle, color=red];
2055[label="199.222.212.135;d;182pkt 182fpkt", shape=diamond, color=yellow];
2071[label="133.213.79.22;s;247pkt 247fpkt", shape=diamond, color=yellow];
3164[label="133.213.79.22;s;110pkt 110fpkt", shape=hexagon, color=black];
3355[label="199.222.212.135;d;105pkt 105fpkt", shape=hexagon, color=black];
3977[label="133.213.79.22;246pkt 246fpkt", shape=pentagon, color=darkviolet];
6182[label="133.213.79.22;247pkt 247fpkt", shape=invtriangle, color=brown];
7693[label="133.213.79.22;247pkt 247fpkt", shape=invhouse, color=bisque];
stat286[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.213.79.22:*, 199.222.212.135:80}[97.1774%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8402%)&lt;BR/&gt; 1348: (0.319693%)&lt;BR/&gt; 1386: (0.255754%)&lt;BR/&gt; 1385: (0.255754%)&lt;BR/&gt; 1384: (0.255754%)&gt;];
}
21--93[label="0.0333333;6pkt 6fpkt"];
21--204[label="0.0388889;7pkt 7fpkt"];
21--689[label="0.0333333;6pkt 6fpkt"];
21--692[label="0.0777778;14pkt 14fpkt"];
21--696[label="0.0166667;3pkt 3fpkt"];
21--717[label="0.0388889;7pkt 7fpkt"];
21--754[label="0.0333333;6pkt 6fpkt"];
21--757[label="0.0777778;14pkt 14fpkt"];
21--774[label="0.0388889;7pkt 7fpkt"];
21--2055[label="0.888889;160pkt 160fpkt"];
21--2071[label="1;180pkt 180fpkt"];
21--3164[label="0.754545;83pkt 83fpkt"];
21--3355[label="0.790476;83pkt 83fpkt"];
21--3977[label="1;180pkt 180fpkt"];
21--6182[label="1;180pkt 180fpkt"];
21--7693[label="1;180pkt 180fpkt"];
2055--2071[label="0.994505;181pkt 181fpkt"];
2055--3164[label="0.945455;104pkt 104fpkt"];
2055--3355[label="1;105pkt 105fpkt"];
2055--3977[label="0.989011;180pkt 180fpkt"];
2055--6182[label="0.994505;181pkt 181fpkt"];
2055--7693[label="0.994505;181pkt 181fpkt"];
2071--3164[label="1;110pkt 110fpkt"];
2071--3355[label="0.990476;104pkt 104fpkt"];
2071--3977[label="1;246pkt 246fpkt"];
2071--6182[label="1;247pkt 247fpkt"];
2071--7693[label="1;247pkt 247fpkt"];
3164--3355[label="0.990476;104pkt 104fpkt"];
3164--3977[label="0.990909;109pkt 109fpkt"];
3164--6182[label="1;110pkt 110fpkt"];
3164--7693[label="1;110pkt 110fpkt"];
3355--3977[label="0.980952;103pkt 103fpkt"];
3355--6182[label="0.990476;104pkt 104fpkt"];
3355--7693[label="0.990476;104pkt 104fpkt"];
3977--6182[label="1;246pkt 246fpkt"];
3977--7693[label="1;246pkt 246fpkt"];
6182--7693[label="1;247pkt 247fpkt"];
</description>
    <slice>
      <filter dst_ip="199.222.212.135" dst_port="80" src_ip="133.213.79.22"/>
    </slice>
    <from sec="1036991055" usec="0"/>
    <to sec="1036991435" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24844,2.7534,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_287{
style=filled;
color=gray75;
186[label="175.177.55.26d;1pkt 1fpkt", shape=rectangle, color=red];
971[label="175.177.55.26;d;5pkt 5fpkt", shape=diamond, color=yellow];
973[label="8.183.13.152;s;1pkt 1fpkt", shape=diamond, color=yellow];
2142[label="48.64.3.72;s;1pkt 1fpkt", shape=diamond, color=yellow];
2178[label="73.33.78.106;s;1pkt 1fpkt", shape=diamond, color=yellow];
2305[label="202.74.29.214;s;1pkt 1fpkt", shape=diamond, color=yellow];
3197[label="175.177.55.26;d;5pkt 5fpkt", shape=hexagon, color=black];
3269[label="48.64.3.72;s;1pkt 1fpkt", shape=hexagon, color=black];
stat287[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.116.86.58:6699, 175.177.55.26:1149}[20%]&lt;BR/&gt;{48.64.3.72:6699, 175.177.55.26:1044}[20%]&lt;BR/&gt;{73.33.78.106:6699, 175.177.55.26:1163}[20%]&lt;BR/&gt;{8.183.13.152:6699, 175.177.55.26:1126}[20%]&lt;BR/&gt;{202.74.29.214:6699, 175.177.55.26:1166}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1166: (12.5%)&lt;BR/&gt; 1044: (12.5%)&lt;BR/&gt; 1163: (9.375%)&lt;BR/&gt; 1126: (9.375%)&gt;];
}
186--971[label="1;1pkt 1fpkt"];
186--2305[label="1;1pkt 1fpkt"];
186--3197[label="1;1pkt 1fpkt"];
971--973[label="1;1pkt 1fpkt"];
971--2142[label="1;1pkt 1fpkt"];
971--2178[label="1;1pkt 1fpkt"];
971--2305[label="1;1pkt 1fpkt"];
971--3197[label="1;5pkt 5fpkt"];
971--3269[label="1;1pkt 1fpkt"];
973--3197[label="1;1pkt 1fpkt"];
2142--3197[label="1;1pkt 1fpkt"];
2142--3269[label="1;1pkt 1fpkt"];
2178--3197[label="1;1pkt 1fpkt"];
2305--3197[label="1;1pkt 1fpkt"];
3197--3269[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.177.55.26" dst_port="1166" src_ip="202.74.29.214" src_port="6699"/>
      <filter dst_ip="175.177.55.26" dst_port="1126" src_ip="8.183.13.152" src_port="6699"/>
      <filter dst_ip="175.177.55.26" dst_port="1163" src_ip="73.33.78.106" src_port="6699"/>
      <filter dst_ip="175.177.55.26" dst_port="1044" src_ip="48.64.3.72" src_port="6699"/>
      <filter dst_ip="175.177.55.26" dst_port="1149" src_ip="200.116.86.58" src_port="6699"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32241,2.66004,053,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_288{
style=filled;
color=gray75;
270[label="201.59.55.13d;144pkt 144fpkt", shape=rectangle, color=red];
1805[label="148.242.165.200;s;233pkt 233fpkt", shape=diamond, color=yellow];
3010[label="209.137.185.58;d;51pkt 51fpkt", shape=hexagon, color=black];
3026[label="148.242.165.200;s;231pkt 231fpkt", shape=hexagon, color=black];
5571[label="148.242.165.200;232pkt 232fpkt", shape=pentagon, color=darkviolet];
7313[label="148.242.165.200;233pkt 233fpkt", shape=invtriangle, color=brown];
8304[label="148.242.165.200;233pkt 233fpkt", shape=invhouse, color=bisque];
stat288[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.242.165.200:*, 201.59.55.13:80}[80.8511%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1307: (0.294768%)&lt;BR/&gt; 1306: (0.294768%)&lt;BR/&gt; 1294: (0.257922%)&lt;BR/&gt; 1293: (0.257922%)&gt;];
}
270--1172[label="1;144pkt 144fpkt"];
270--1805[label="1;144pkt 144fpkt"];
270--3026[label="0.986111;142pkt 142fpkt"];
270--5571[label="1;144pkt 144fpkt"];
270--7313[label="1;144pkt 144fpkt"];
270--8304[label="1;144pkt 144fpkt"];
1805--3010[label="0.0392157;2pkt 2fpkt"];
1805--3026[label="1;231pkt 231fpkt"];
1805--5571[label="1;232pkt 232fpkt"];
1805--7313[label="1;233pkt 233fpkt"];
1805--8304[label="1;233pkt 233fpkt"];
3010--3026[label="0.0392157;2pkt 2fpkt"];
3010--3307[label="0.0196078;1pkt 1fpkt"];
3010--3441[label="0.0196078;1pkt 1fpkt"];
3010--3800[label="0.111111;2pkt 2fpkt"];
3010--3810[label="0.0196078;1pkt 1fpkt"];
3010--3851[label="0.166667;4pkt 4fpkt"];
3010--3899[label="0.0625;1pkt 1fpkt"];
3010--4145[label="0.2;2pkt 2fpkt"];
3010--5368[label="0.0196078;1pkt 1fpkt"];
3010--5465[label="0.490196;25pkt 25fpkt"];
3010--5571[label="0.0196078;1pkt 1fpkt"];
3010--5920[label="0.0196078;1pkt 1fpkt"];
3010--6079[label="0.0196078;1pkt 1fpkt"];
3010--6105[label="0.16;4pkt 4fpkt"];
3010--7238[label="0.490196;25pkt 25fpkt"];
3010--7313[label="0.0392157;2pkt 2fpkt"];
3010--7541[label="0.0196078;1pkt 1fpkt"];
3010--8265[label="0.490196;25pkt 25fpkt"];
3010--8304[label="0.0392157;2pkt 2fpkt"];
3010--8443[label="0.0196078;1pkt 1fpkt"];
3026--5571[label="0.995671;230pkt 230fpkt"];
3026--7313[label="1;231pkt 231fpkt"];
3026--8304[label="1;231pkt 231fpkt"];
5571--7313[label="1;232pkt 232fpkt"];
5571--8304[label="1;232pkt 232fpkt"];
7313--8304[label="1;233pkt 233fpkt"];
</description>
    <slice>
      <filter dst_ip="201.59.55.13" dst_port="80" src_ip="148.242.165.200"/>
    </slice>
    <from sec="1036990809" usec="0"/>
    <to sec="1036991225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23582,2.68221,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_289{
style=filled;
color=gray75;
1949[label="214.14.10.25;d;6pkt 6fpkt", shape=diamond, color=yellow];
2099[label="168.100.164.151;s;5pkt 5fpkt", shape=diamond, color=yellow];
3125[label="214.14.10.25;d;6pkt 6fpkt", shape=hexagon, color=black];
3211[label="168.100.164.151;s;5pkt 5fpkt", shape=hexagon, color=black];
5159[label="168.100.164.151;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7018[label="168.100.164.151;6pkt 6fpkt", shape=invtriangle, color=brown];
8140[label="168.100.164.151;5pkt 5fpkt", shape=invhouse, color=bisque];
stat289[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.100.164.151:25, 214.14.10.25:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (47.3684%)&lt;BR/&gt; 57765: (9.21053%)&lt;BR/&gt; 57286: (9.21053%)&lt;BR/&gt; 56954: (9.21053%)&lt;BR/&gt; 56483: (9.21053%)&gt;];
}
1949--2099[label="0.8;4pkt 4fpkt"];
1949--3125[label="1;6pkt 6fpkt"];
1949--3209[label="0.166667;1pkt 1fpkt"];
1949--3211[label="0.8;4pkt 4fpkt"];
1949--3943[label="0.166667;1pkt 1fpkt"];
1949--5159[label="0.8;4pkt 4fpkt"];
1949--7018[label="0.666667;4pkt 4fpkt"];
1949--8140[label="0.8;4pkt 4fpkt"];
2099--3125[label="0.8;4pkt 4fpkt"];
2099--3211[label="1;5pkt 5fpkt"];
2099--5159[label="0.8;4pkt 4fpkt"];
2099--7018[label="1;5pkt 5fpkt"];
2099--8140[label="0.8;4pkt 4fpkt"];
3125--3209[label="0.166667;1pkt 1fpkt"];
3125--3211[label="0.8;4pkt 4fpkt"];
3125--3943[label="0.166667;1pkt 1fpkt"];
3125--5159[label="0.8;4pkt 4fpkt"];
3125--7018[label="0.666667;4pkt 4fpkt"];
3125--8140[label="0.8;4pkt 4fpkt"];
3211--5159[label="0.8;4pkt 4fpkt"];
3211--7018[label="1;5pkt 5fpkt"];
3211--8140[label="0.8;4pkt 4fpkt"];
5159--7018[label="1;5pkt 5fpkt"];
5159--8140[label="1;5pkt 5fpkt"];
7018--8140[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="214.14.10.25" src_ip="168.100.164.151" src_port="25"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32241,2.66004,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_290{
style=filled;
color=gray75;
429[label="145.208.213.109s;1pkt 1fpkt", shape=rectangle, color=red];
1045[label="192.5.116.161;d;2pkt 2fpkt", shape=diamond, color=yellow];
1046[label="145.208.213.109;s;6pkt 6fpkt", shape=diamond, color=yellow];
2763[label="192.5.116.161;d;2pkt 2fpkt", shape=hexagon, color=black];
3214[label="145.208.213.109;s;6pkt 6fpkt", shape=hexagon, color=black];
4798[label="145.208.213.109;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6765[label="145.208.213.109;6pkt 6fpkt", shape=invtriangle, color=brown];
8006[label="145.208.213.109;6pkt 6fpkt", shape=invhouse, color=bisque];
stat290[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.213.109:17010, 84.77.117.47:*}[66.6667%]&lt;BR/&gt;{145.208.213.109:17009, 192.5.116.161:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 17010: (28.5714%)&lt;BR/&gt; 17009: (21.4286%)&lt;BR/&gt; 4625: (11.4286%)&lt;BR/&gt; 4606: (10%)&lt;BR/&gt; 4499: (7.14286%)&gt;];
}
429--1045[label="1;1pkt 1fpkt"];
429--1046[label="1;1pkt 1fpkt"];
429--2763[label="1;1pkt 1fpkt"];
429--3214[label="1;1pkt 1fpkt"];
429--4798[label="1;1pkt 1fpkt"];
429--6765[label="1;1pkt 1fpkt"];
429--8006[label="1;1pkt 1fpkt"];
1045--1046[label="1;2pkt 2fpkt"];
1045--2763[label="1;2pkt 2fpkt"];
1045--3214[label="1;2pkt 2fpkt"];
1045--4798[label="1;2pkt 2fpkt"];
1045--6765[label="1;2pkt 2fpkt"];
1045--8006[label="1;2pkt 2fpkt"];
1046--2763[label="1;2pkt 2fpkt"];
1046--3214[label="1;6pkt 6fpkt"];
1046--4798[label="1;6pkt 6fpkt"];
1046--6765[label="1;6pkt 6fpkt"];
1046--8006[label="1;6pkt 6fpkt"];
2763--3214[label="1;2pkt 2fpkt"];
2763--4798[label="1;2pkt 2fpkt"];
2763--6765[label="1;2pkt 2fpkt"];
2763--8006[label="1;2pkt 2fpkt"];
3214--4798[label="1;6pkt 6fpkt"];
3214--6765[label="1;6pkt 6fpkt"];
3214--8006[label="1;6pkt 6fpkt"];
4798--6765[label="1;6pkt 6fpkt"];
4798--8006[label="1;6pkt 6fpkt"];
6765--8006[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="84.77.117.47" src_ip="145.208.213.109" src_port="17010"/>
      <filter dst_ip="192.5.116.161" src_ip="145.208.213.109" src_port="17009"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32241,2.66004,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_292{
style=filled;
color=gray75;
610[label="78.113.46.31s;1pkt 1fpkt", shape=rectangle, color=red];
822[label="145.208.87.104;d;46pkt 46fpkt", shape=diamond, color=yellow];
824[label="203.79.168.46;s;1pkt 1fpkt", shape=diamond, color=yellow];
1335[label="85.8.150.31;s;1pkt 1fpkt", shape=diamond, color=yellow];
1382[label="78.178.30.171;s;2pkt 2fpkt", shape=diamond, color=yellow];
3075[label="85.8.150.31;s;1pkt 1fpkt", shape=hexagon, color=black];
3223[label="78.178.30.171;s;2pkt 2fpkt", shape=hexagon, color=black];
3380[label="203.79.168.46;s;1pkt 1fpkt", shape=hexagon, color=black];
4060[label="85.8.150.31;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4386[label="76.161.136.63;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6243[label="85.8.150.31;1pkt 1fpkt", shape=invtriangle, color=brown];
6355[label="203.79.168.46;1pkt 1fpkt", shape=invtriangle, color=brown];
7772[label="203.79.168.46;1pkt 1fpkt", shape=invhouse, color=bisque];
stat292[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6257, 145.208.87.104:6257}[69.0909%]&lt;BR/&gt;{*:1863, *:*}[21.8182%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (58.6957%)&lt;BR/&gt; 6699: (10.1449%)&lt;BR/&gt; 1863: (9.42029%)&lt;BR/&gt; 1473: (4.34783%)&lt;BR/&gt; 1471: (3.62319%)&gt;];
}
610--822[label="1;1pkt 1fpkt"];
610--1335[label="1;1pkt 1fpkt"];
610--3075[label="1;1pkt 1fpkt"];
610--4060[label="1;1pkt 1fpkt"];
610--6243[label="1;1pkt 1fpkt"];
822--824[label="1;1pkt 1fpkt"];
822--1335[label="1;1pkt 1fpkt"];
822--1382[label="1;2pkt 2fpkt"];
822--3075[label="1;1pkt 1fpkt"];
822--3223[label="1;2pkt 2fpkt"];
822--3380[label="1;1pkt 1fpkt"];
822--3714[label="0.0434783;2pkt 2fpkt"];
822--3726[label="0.0434783;2pkt 2fpkt"];
822--3731[label="0.0434783;2pkt 2fpkt"];
822--4060[label="1;1pkt 1fpkt"];
822--4386[label="0.1;1pkt 1fpkt"];
822--6243[label="1;1pkt 1fpkt"];
822--6355[label="1;1pkt 1fpkt"];
822--7772[label="1;1pkt 1fpkt"];
824--3380[label="1;1pkt 1fpkt"];
824--6355[label="1;1pkt 1fpkt"];
824--7772[label="1;1pkt 1fpkt"];
1335--3075[label="1;1pkt 1fpkt"];
1335--4060[label="1;1pkt 1fpkt"];
1335--6243[label="1;1pkt 1fpkt"];
1382--3223[label="1;2pkt 2fpkt"];
3075--4060[label="1;1pkt 1fpkt"];
3075--6243[label="1;1pkt 1fpkt"];
3380--6355[label="1;1pkt 1fpkt"];
3380--7772[label="1;1pkt 1fpkt"];
4060--6243[label="1;1pkt 1fpkt"];
6355--7772[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_port="1863"/>
      <filter dst_ip="145.208.87.104" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15633,2.77483,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_293{
style=filled;
color=gray75;
2108[label="168.100.173.231;d;23pkt 23fpkt", shape=diamond, color=yellow];
2411[label="193.187.137.221;s;18pkt 18fpkt", shape=diamond, color=yellow];
3225[label="168.100.173.231;d;22pkt 22fpkt", shape=hexagon, color=black];
3430[label="193.187.137.221;s;17pkt 17fpkt", shape=hexagon, color=black];
stat293[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.187.137.221:*, 168.100.173.231:21}[56.5217%]&lt;BR/&gt;{193.187.137.221:*, 168.100.173.231:20}[21.7391%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (31.25%)&lt;BR/&gt; 20: (12.5%)&lt;BR/&gt; 5190: (3.75%)&lt;BR/&gt; 5088: (2.5%)&lt;BR/&gt; 5086: (2.5%)&gt;];
}
2108--2411[label="1;18pkt 18fpkt"];
2108--3225[label="1;22pkt 22fpkt"];
2108--3430[label="1;17pkt 17fpkt"];
2411--3225[label="0.944444;17pkt 17fpkt"];
2411--3430[label="1;17pkt 17fpkt"];
3225--3430[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="168.100.173.231" dst_port="21" src_ip="193.187.137.221"/>
      <filter dst_ip="168.100.173.231" dst_port="20" src_ip="193.187.137.221"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12548,2.73159,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_294{
style=filled;
color=gray75;
1450[label="215.160.153.183;d;32pkt 32fpkt", shape=diamond, color=yellow];
1451[label="145.146.164.238;s;32pkt 32fpkt", shape=diamond, color=yellow];
3256[label="215.160.153.183;d;28pkt 28fpkt", shape=hexagon, color=black];
3257[label="145.146.164.238;s;32pkt 32fpkt", shape=hexagon, color=black];
5912[label="145.146.164.238;33pkt 33fpkt", shape=pentagon, color=darkviolet];
stat294[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.146.164.238:80, 215.160.153.183:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 29659: (1.59236%)&lt;BR/&gt; 29658: (1.59236%)&lt;BR/&gt; 29657: (1.59236%)&lt;BR/&gt; 29607: (1.59236%)&gt;];
}
1450--1451[label="1;32pkt 32fpkt"];
1450--3256[label="1;28pkt 28fpkt"];
1450--3257[label="1;32pkt 32fpkt"];
1450--5912[label="1;32pkt 32fpkt"];
1451--3256[label="1;28pkt 28fpkt"];
1451--3257[label="1;32pkt 32fpkt"];
1451--5912[label="1;32pkt 32fpkt"];
3256--3257[label="1;28pkt 28fpkt"];
3256--5912[label="1;28pkt 28fpkt"];
3257--5912[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="215.160.153.183" src_ip="145.146.164.238" src_port="80"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12548,2.73159,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_295{
style=filled;
color=gray75;
1447[label="133.213.156.114;s;3pkt 3fpkt", shape=diamond, color=yellow];
1700[label="73.108.110.52;d;1pkt 1fpkt", shape=diamond, color=yellow];
2148[label="78.18.109.203;d;1pkt 1fpkt", shape=diamond, color=yellow];
3274[label="78.18.109.203;d;1pkt 1fpkt", shape=hexagon, color=black];
3507[label="133.213.156.114;s;3pkt 3fpkt", shape=hexagon, color=black];
4842[label="133.213.156.114;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat295[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.213.156.114:6699, 73.108.110.52:13162}[33.3333%]&lt;BR/&gt;{133.213.156.114:1033, 76.161.137.62:1863}[33.3333%]&lt;BR/&gt;{133.213.156.114:6699, 78.18.109.203:3974}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (37.5%)&lt;BR/&gt; 3974: (20.8333%)&lt;BR/&gt; 13162: (16.6667%)&lt;BR/&gt; 1863: (12.5%)&lt;BR/&gt; 1033: (12.5%)&gt;];
}
1447--1700[label="1;1pkt 1fpkt"];
1447--2148[label="1;1pkt 1fpkt"];
1447--3274[label="1;1pkt 1fpkt"];
1447--3507[label="1;3pkt 3fpkt"];
1447--4842[label="1;3pkt 3fpkt"];
1700--3507[label="1;1pkt 1fpkt"];
1700--4842[label="1;1pkt 1fpkt"];
2148--3274[label="1;1pkt 1fpkt"];
2148--3507[label="1;1pkt 1fpkt"];
2148--4842[label="1;1pkt 1fpkt"];
3274--3507[label="1;1pkt 1fpkt"];
3274--4842[label="1;1pkt 1fpkt"];
3507--4842[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="78.18.109.203" dst_port="3974" src_ip="133.213.156.114" src_port="6699"/>
      <filter dst_ip="76.161.137.62" dst_port="1863" src_ip="133.213.156.114" src_port="1033"/>
      <filter dst_ip="73.108.110.52" dst_port="13162" src_ip="133.213.156.114" src_port="6699"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23582,2.68221,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_296{
style=filled;
color=gray75;
863[label="9.177.46.181;s;1pkt 1fpkt", shape=diamond, color=yellow];
1262[label="145.208.37.247;d;7pkt 7fpkt", shape=diamond, color=yellow];
1763[label="9.177.46.190;s;8pkt 8fpkt", shape=diamond, color=yellow];
1970[label="145.208.209.194;d;23pkt 23fpkt", shape=diamond, color=yellow];
2667[label="9.177.46.184;s;1pkt 1fpkt", shape=diamond, color=yellow];
2904[label="9.177.46.181;s;1pkt 1fpkt", shape=hexagon, color=black];
3298[label="9.177.46.190;s;8pkt 8fpkt", shape=hexagon, color=black];
5424[label="9.177.46.181;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7212[label="9.177.46.181;2pkt 2fpkt", shape=invtriangle, color=brown];
8252[label="9.177.46.181;1pkt 1fpkt", shape=invhouse, color=bisque];
stat296[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.177.46.136:6900, 145.208.209.194:*}[32.2581%]&lt;BR/&gt;{9.177.46.190:5001, 145.208.209.194:*}[22.5806%]&lt;BR/&gt;{*:*, 145.208.37.247:*}[22.5806%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (31.1321%)&lt;BR/&gt; 6900: (9.43396%)&lt;BR/&gt; 6001: (5.66038%)&lt;BR/&gt; 2062: (5.66038%)&lt;BR/&gt; 3166: (2.83019%)&gt;];
}
863--1262[label="1;1pkt 1fpkt"];
863--2904[label="1;1pkt 1fpkt"];
863--5424[label="1;1pkt 1fpkt"];
863--7212[label="1;1pkt 1fpkt"];
863--8252[label="1;1pkt 1fpkt"];
1262--1763[label="0.142857;1pkt 1fpkt"];
1262--2667[label="1;1pkt 1fpkt"];
1262--2904[label="1;1pkt 1fpkt"];
1262--3298[label="0.142857;1pkt 1fpkt"];
1262--5424[label="1;1pkt 1fpkt"];
1262--7212[label="0.5;1pkt 1fpkt"];
1262--8252[label="1;1pkt 1fpkt"];
1763--1970[label="0.875;7pkt 7fpkt"];
1763--3298[label="1;8pkt 8fpkt"];
1970--3298[label="0.875;7pkt 7fpkt"];
2904--5424[label="1;1pkt 1fpkt"];
2904--7212[label="1;1pkt 1fpkt"];
2904--8252[label="1;1pkt 1fpkt"];
5424--7212[label="1;1pkt 1fpkt"];
5424--8252[label="1;1pkt 1fpkt"];
7212--8252[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.37.247"/>
      <filter dst_ip="145.208.209.194" src_ip="9.177.46.136" src_port="6900"/>
      <filter dst_ip="145.208.209.194" src_ip="9.177.46.190" src_port="5001"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23582,2.68221,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_297{
style=filled;
color=gray75;
987[label="175.177.35.122;s;260pkt 260fpkt", shape=diamond, color=yellow];
988[label="9.205.234.200;d;2pkt 2fpkt", shape=diamond, color=yellow];
1819[label="48.174.171.229;d;1pkt 1fpkt", shape=diamond, color=yellow];
2381[label="215.139.169.71;d;1pkt 1fpkt", shape=diamond, color=yellow];
2387[label="8.125.105.142;d;1pkt 1fpkt", shape=diamond, color=yellow];
3339[label="48.174.171.229;d;1pkt 1fpkt", shape=hexagon, color=black];
3425[label="8.125.105.142;d;1pkt 1fpkt", shape=hexagon, color=black];
4902[label="175.177.35.122;271pkt 271fpkt", shape=pentagon, color=darkviolet];
6838[label="175.177.35.122;271pkt 271fpkt", shape=invtriangle, color=brown];
8051[label="175.177.35.122;270pkt 270fpkt", shape=invhouse, color=bisque];
stat297[shape=component, label=&lt;Rules:&lt;BR/&gt;{175.177.35.122:3034, *:4665}[58.6716%]&lt;BR/&gt;{175.177.35.122:*, *:4662}[23.9852%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3034: (36.5616%)&lt;BR/&gt; 4665: (29.3327%)&lt;BR/&gt; 4662: (12.0019%)&lt;BR/&gt; 2004: (1.11214%)&lt;BR/&gt; 4670: (0.741427%)&gt;];
}
987--988[label="1;2pkt 2fpkt"];
987--1819[label="1;1pkt 1fpkt"];
987--2381[label="1;1pkt 1fpkt"];
987--2387[label="1;1pkt 1fpkt"];
987--3339[label="1;1pkt 1fpkt"];
987--3425[label="1;1pkt 1fpkt"];
987--4902[label="1;260pkt 260fpkt"];
987--6838[label="1;260pkt 260fpkt"];
987--8051[label="0.996154;259pkt 259fpkt"];
988--4902[label="1;2pkt 2fpkt"];
988--6838[label="1;2pkt 2fpkt"];
988--8051[label="1;2pkt 2fpkt"];
1819--3339[label="1;1pkt 1fpkt"];
1819--4902[label="1;1pkt 1fpkt"];
1819--6838[label="1;1pkt 1fpkt"];
1819--8051[label="1;1pkt 1fpkt"];
2381--4902[label="1;1pkt 1fpkt"];
2381--6838[label="1;1pkt 1fpkt"];
2381--8051[label="1;1pkt 1fpkt"];
2387--3425[label="1;1pkt 1fpkt"];
2387--4902[label="1;1pkt 1fpkt"];
2387--6838[label="1;1pkt 1fpkt"];
2387--8051[label="1;1pkt 1fpkt"];
3339--4902[label="1;1pkt 1fpkt"];
3339--6838[label="1;1pkt 1fpkt"];
3339--8051[label="1;1pkt 1fpkt"];
3425--4902[label="1;1pkt 1fpkt"];
3425--6838[label="1;1pkt 1fpkt"];
3425--8051[label="1;1pkt 1fpkt"];
4902--6838[label="1;271pkt 271fpkt"];
4902--8051[label="1;270pkt 270fpkt"];
6838--8051[label="1;270pkt 270fpkt"];
</description>
    <slice>
      <filter dst_port="4662" src_ip="175.177.35.122"/>
      <filter dst_port="4665" src_ip="175.177.35.122" src_port="3034"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12548,2.73159,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_298{
style=filled;
color=gray75;
2233[label="133.213.199.27;s;3pkt 3fpkt", shape=diamond, color=yellow];
2249[label="198.85.90.206;d;1pkt 1fpkt", shape=diamond, color=yellow];
3350[label="198.85.90.206;d;1pkt 1fpkt", shape=hexagon, color=black];
4031[label="133.213.199.27;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat298[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.213.199.27:7743, 198.85.90.206:4922}[33.3333%]&lt;BR/&gt;{133.213.199.27:1650, 34.1.136.239:80}[33.3333%]&lt;BR/&gt;{133.213.199.27:1860, 34.1.136.239:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7743: (28.5714%)&lt;BR/&gt; 4922: (28.5714%)&lt;BR/&gt; 80: (21.4286%)&lt;BR/&gt; 1860: (14.2857%)&lt;BR/&gt; 1650: (7.14286%)&gt;];
}
2233--2249[label="1;1pkt 1fpkt"];
2233--3350[label="1;1pkt 1fpkt"];
2233--4031[label="1;2pkt 2fpkt"];
2249--3350[label="1;1pkt 1fpkt"];
2249--4031[label="1;1pkt 1fpkt"];
3350--4031[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="34.1.136.239" dst_port="80" src_ip="133.213.199.27" src_port="1860"/>
      <filter dst_ip="34.1.136.239" dst_port="80" src_ip="133.213.199.27" src_port="1650"/>
      <filter dst_ip="198.85.90.206" dst_port="4922" src_ip="133.213.199.27" src_port="7743"/>
    </slice>
    <from sec="1036990934" usec="0"/>
    <to sec="1036991449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14589,2.70209,020,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_300{
style=filled;
color=gray75;
2225[label="168.100.160.202;s;11pkt 11fpkt", shape=diamond, color=yellow];
2270[label="214.54.41.35;d;1pkt 1fpkt", shape=diamond, color=yellow];
3362[label="214.54.41.35;d;1pkt 1fpkt", shape=hexagon, color=black];
5587[label="168.100.160.202;14pkt 14fpkt", shape=pentagon, color=darkviolet];
7323[label="168.100.160.202;14pkt 14fpkt", shape=invtriangle, color=brown];
stat300[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.100.160.202:0, *:0}[92.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (92.6829%)&lt;BR/&gt; 5190: (3.65854%)&lt;BR/&gt; 1621: (3.65854%)&gt;];
}
2225--2270[label="1;1pkt 1fpkt"];
2225--3362[label="1;1pkt 1fpkt"];
2225--5587[label="1;11pkt 11fpkt"];
2225--7323[label="1;11pkt 11fpkt"];
2270--3362[label="1;1pkt 1fpkt"];
2270--5587[label="1;1pkt 1fpkt"];
2270--7323[label="1;1pkt 1fpkt"];
3362--5587[label="1;1pkt 1fpkt"];
3362--7323[label="1;1pkt 1fpkt"];
5587--7323[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter src_ip="168.100.160.202"/>
    </slice>
    <from sec="1036990871" usec="0"/>
    <to sec="1036991517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23582,2.68221,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_301{
style=filled;
color=gray75;
946[label="216.13.41.97;s;1pkt 1fpkt", shape=diamond, color=yellow];
1068[label="85.88.125.177;s;3pkt 3fpkt", shape=diamond, color=yellow];
1248[label="148.242.214.45;d;11pkt 11fpkt", shape=diamond, color=yellow];
1250[label="200.38.17.86;s;1pkt 1fpkt", shape=diamond, color=yellow];
1311[label="218.17.91.152;s;4pkt 4fpkt", shape=diamond, color=yellow];
1316[label="200.38.149.87;s;1pkt 1fpkt", shape=diamond, color=yellow];
3166[label="200.38.17.86;s;1pkt 1fpkt", shape=hexagon, color=black];
3193[label="200.38.149.87;s;1pkt 1fpkt", shape=hexagon, color=black];
3387[label="216.13.41.97;s;1pkt 1fpkt", shape=hexagon, color=black];
4691[label="216.13.41.97;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5166[label="218.17.91.152;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5388[label="85.88.125.177;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6624[label="200.38.149.87;1pkt 1fpkt", shape=invtriangle, color=brown];
6687[label="216.13.41.97;1pkt 1fpkt", shape=invtriangle, color=brown];
7022[label="218.17.91.152;4pkt 4fpkt", shape=invtriangle, color=brown];
8142[label="218.17.91.152;5pkt 5fpkt", shape=invhouse, color=bisque];
stat301[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.17.91.152:*, 148.242.214.45:*}[41.6667%]&lt;BR/&gt;{*:*, 148.242.214.45:2002}[25%]&lt;BR/&gt;{85.88.125.177:*, 148.242.214.45:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2002: (10.4651%)&lt;BR/&gt; 4600: (5.81395%)&lt;BR/&gt; 4599: (5.81395%)&lt;BR/&gt; 4492: (5.81395%)&lt;BR/&gt; 3748: (5.81395%)&gt;];
}
946--1248[label="1;1pkt 1fpkt"];
946--3387[label="1;1pkt 1fpkt"];
946--4691[label="1;1pkt 1fpkt"];
946--6687[label="1;1pkt 1fpkt"];
1068--1248[label="1;3pkt 3fpkt"];
1068--5388[label="1;2pkt 2fpkt"];
1248--1250[label="1;1pkt 1fpkt"];
1248--1311[label="1;4pkt 4fpkt"];
1248--1316[label="1;1pkt 1fpkt"];
1248--3166[label="1;1pkt 1fpkt"];
1248--3193[label="1;1pkt 1fpkt"];
1248--3387[label="1;1pkt 1fpkt"];
1248--4691[label="1;1pkt 1fpkt"];
1248--5166[label="0.8;4pkt 4fpkt"];
1248--5388[label="1;2pkt 2fpkt"];
1248--6624[label="1;1pkt 1fpkt"];
1248--6687[label="1;1pkt 1fpkt"];
1248--7022[label="0.75;3pkt 3fpkt"];
1248--8142[label="0.8;4pkt 4fpkt"];
1250--3166[label="1;1pkt 1fpkt"];
1311--5166[label="1;4pkt 4fpkt"];
1311--7022[label="0.75;3pkt 3fpkt"];
1311--8142[label="1;4pkt 4fpkt"];
1316--3193[label="1;1pkt 1fpkt"];
1316--6624[label="1;1pkt 1fpkt"];
3193--6624[label="1;1pkt 1fpkt"];
3387--4691[label="1;1pkt 1fpkt"];
3387--6687[label="1;1pkt 1fpkt"];
4691--6687[label="1;1pkt 1fpkt"];
5166--7022[label="1;4pkt 4fpkt"];
5166--8142[label="1;5pkt 5fpkt"];
7022--8142[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="148.242.214.45" src_ip="218.17.91.152"/>
      <filter dst_ip="148.242.214.45" src_ip="85.88.125.177"/>
      <filter dst_ip="148.242.214.45" dst_port="2002"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24844,2.7534,501,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_302{
style=filled;
color=gray75;
547[label="9.67.135.205s;1pkt 1fpkt", shape=rectangle, color=red];
2135[label="133.213.39.205;s;22pkt 22fpkt", shape=diamond, color=yellow];
2356[label="9.171.68.240;d;1pkt 1fpkt", shape=diamond, color=yellow];
3414[label="9.171.68.240;d;1pkt 1fpkt", shape=hexagon, color=black];
stat302[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.213.39.205:21, *:*}[45.4545%]&lt;BR/&gt;{133.213.39.205:*, 211.62.48.118:*}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (24%)&lt;BR/&gt; 21: (22%)&lt;BR/&gt; 3613: (4%)&lt;BR/&gt; 56286: (2%)&lt;BR/&gt; 56283: (2%)&gt;];
}
547--2135[label="1;1pkt 1fpkt"];
2135--2356[label="1;1pkt 1fpkt"];
2135--3414[label="1;1pkt 1fpkt"];
2356--3414[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.62.48.118" src_ip="133.213.39.205"/>
      <filter src_ip="133.213.39.205" src_port="21"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32241,2.66004,503,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_303{
style=filled;
color=gray75;
158[label="214.131.82.227s;1pkt 1fpkt", shape=rectangle, color=red];
457[label="197.34.29.131s;1pkt 1fpkt", shape=rectangle, color=red];
458[label="198.163.77.131s;1pkt 1fpkt", shape=rectangle, color=red];
648[label="149.46.173.90d;12pkt 12fpkt", shape=rectangle, color=red];
1160[label="214.113.41.147;s;11pkt 11fpkt", shape=diamond, color=yellow];
1494[label="214.131.82.227;s;197pkt 197fpkt", shape=diamond, color=yellow];
1532[label="149.46.173.90;d;224pkt 224fpkt", shape=diamond, color=yellow];
2449[label="214.113.41.131;s;52pkt 52fpkt", shape=diamond, color=yellow];
3007[label="149.46.173.90;d;89pkt 89fpkt", shape=hexagon, color=black];
3444[label="214.113.41.131;s;52pkt 52fpkt", shape=hexagon, color=black];
4968[label="214.113.41.131;60pkt 60fpkt", shape=pentagon, color=darkviolet];
5120[label="214.113.41.147;22pkt 22fpkt", shape=pentagon, color=darkviolet];
5809[label="214.131.82.227;198pkt 198fpkt", shape=pentagon, color=darkviolet];
6890[label="214.113.41.131;60pkt 60fpkt", shape=invtriangle, color=brown];
7465[label="214.131.82.227;198pkt 198fpkt", shape=invtriangle, color=brown];
8072[label="214.113.41.131;61pkt 61fpkt", shape=invhouse, color=bisque];
8397[label="214.131.82.227;197pkt 197fpkt", shape=invhouse, color=bisque];
stat303[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.131.82.227:*, 149.46.173.90:80}[21.8274%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9652%)&lt;BR/&gt; 15401: (0.243733%)&lt;BR/&gt; 15043: (0.243733%)&lt;BR/&gt; 14960: (0.243733%)&lt;BR/&gt; 14873: (0.243733%)&gt;];
}
158--671[label="1;1pkt 1fpkt"];
158--672[label="1;1pkt 1fpkt"];
158--715[label="1;1pkt 1fpkt"];
158--772[label="1;1pkt 1fpkt"];
158--1494[label="1;1pkt 1fpkt"];
158--5809[label="1;1pkt 1fpkt"];
158--7465[label="1;1pkt 1fpkt"];
158--8397[label="1;1pkt 1fpkt"];
457--689[label="1;1pkt 1fpkt"];
457--696[label="1;1pkt 1fpkt"];
457--754[label="1;1pkt 1fpkt"];
457--1532[label="1;1pkt 1fpkt"];
457--2449[label="1;1pkt 1fpkt"];
457--3444[label="1;1pkt 1fpkt"];
457--4968[label="1;1pkt 1fpkt"];
457--6890[label="1;1pkt 1fpkt"];
457--8072[label="1;1pkt 1fpkt"];
458--760[label="1;1pkt 1fpkt"];
458--2449[label="1;1pkt 1fpkt"];
458--3444[label="1;1pkt 1fpkt"];
458--4968[label="1;1pkt 1fpkt"];
458--6890[label="1;1pkt 1fpkt"];
458--8072[label="1;1pkt 1fpkt"];
648--1494[label="1;12pkt 12fpkt"];
648--1532[label="1;12pkt 12fpkt"];
648--5809[label="1;12pkt 12fpkt"];
648--7465[label="1;12pkt 12fpkt"];
648--8397[label="1;12pkt 12fpkt"];
1160--1532[label="0.909091;10pkt 10fpkt"];
1160--3007[label="0.909091;10pkt 10fpkt"];
1160--5120[label="1;11pkt 11fpkt"];
1494--1532[label="0.406091;80pkt 80fpkt"];
1494--3007[label="0.280899;25pkt 25fpkt"];
1494--5809[label="1;197pkt 197fpkt"];
1494--7465[label="1;197pkt 197fpkt"];
1494--8397[label="0.994924;196pkt 196fpkt"];
1532--2449[label="0.384615;20pkt 20fpkt"];
1532--2491[label="0.257143;9pkt 9fpkt"];
1532--2654[label="0.684211;13pkt 13fpkt"];
1532--2809[label="0.147321;33pkt 33fpkt"];
1532--3007[label="1;89pkt 89fpkt"];
1532--3444[label="0.384615;20pkt 20fpkt"];
1532--3777[label="0.590909;13pkt 13fpkt"];
1532--4063[label="0.21875;49pkt 49fpkt"];
1532--4178[label="0.538462;7pkt 7fpkt"];
1532--4192[label="0.333333;2pkt 2fpkt"];
1532--4415[label="0.0848214;19pkt 19fpkt"];
1532--4667[label="0.846154;11pkt 11fpkt"];
1532--4968[label="0.333333;20pkt 20fpkt"];
1532--5120[label="0.5;11pkt 11fpkt"];
1532--5809[label="0.40404;80pkt 80fpkt"];
1532--6053[label="0.590909;13pkt 13fpkt"];
1532--6245[label="0.21875;49pkt 49fpkt"];
1532--6330[label="0.538462;7pkt 7fpkt"];
1532--6496[label="0.0848214;19pkt 19fpkt"];
1532--6670[label="0.833333;10pkt 10fpkt"];
1532--6890[label="0.333333;20pkt 20fpkt"];
1532--7465[label="0.40404;80pkt 80fpkt"];
1532--7759[label="0.571429;8pkt 8fpkt"];
1532--8072[label="0.327869;20pkt 20fpkt"];
1532--8397[label="0.406091;80pkt 80fpkt"];
2449--3007[label="0.173077;9pkt 9fpkt"];
2449--3444[label="1;52pkt 52fpkt"];
2449--4968[label="0.980769;51pkt 51fpkt"];
2449--6890[label="0.980769;51pkt 51fpkt"];
2449--8072[label="1;52pkt 52fpkt"];
3007--3444[label="0.173077;9pkt 9fpkt"];
3007--4063[label="0.258427;23pkt 23fpkt"];
3007--4415[label="0.179775;16pkt 16fpkt"];
3007--4667[label="0.384615;5pkt 5fpkt"];
3007--4968[label="0.15;9pkt 9fpkt"];
3007--5120[label="0.454545;10pkt 10fpkt"];
3007--5809[label="0.280899;25pkt 25fpkt"];
3007--6245[label="0.258427;23pkt 23fpkt"];
3007--6496[label="0.179775;16pkt 16fpkt"];
3007--6670[label="0.333333;4pkt 4fpkt"];
3007--6890[label="0.15;9pkt 9fpkt"];
3007--7465[label="0.280899;25pkt 25fpkt"];
3007--8072[label="0.147541;9pkt 9fpkt"];
3007--8397[label="0.280899;25pkt 25fpkt"];
3444--4968[label="0.980769;51pkt 51fpkt"];
3444--6890[label="0.980769;51pkt 51fpkt"];
3444--8072[label="1;52pkt 52fpkt"];
4968--6890[label="1;60pkt 60fpkt"];
4968--8072[label="1;60pkt 60fpkt"];
5809--7465[label="1;198pkt 198fpkt"];
5809--8397[label="1;197pkt 197fpkt"];
6890--8072[label="1;60pkt 60fpkt"];
7465--8397[label="1;197pkt 197fpkt"];
</description>
    <slice>
      <filter dst_ip="149.46.173.90" dst_port="80" src_ip="214.131.82.227"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23582,2.68221,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_304{
style=filled;
color=gray75;
1842[label="192.13.41.86;d;22pkt 22fpkt", shape=diamond, color=yellow];
2036[label="148.242.42.85;s;22pkt 22fpkt", shape=diamond, color=yellow];
3450[label="192.13.41.86;d;22pkt 22fpkt", shape=hexagon, color=black];
4592[label="148.242.42.85;22pkt 22fpkt", shape=pentagon, color=darkviolet];
6612[label="148.242.42.85;22pkt 22fpkt", shape=invtriangle, color=brown];
7922[label="148.242.42.85;22pkt 22fpkt", shape=invhouse, color=bisque];
stat304[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.242.42.85:*, 192.13.41.86:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3150: (2.27273%)&lt;BR/&gt; 3149: (2.27273%)&lt;BR/&gt; 3148: (2.27273%)&lt;BR/&gt; 3147: (2.27273%)&gt;];
}
1842--2036[label="1;22pkt 22fpkt"];
1842--3450[label="1;22pkt 22fpkt"];
1842--4592[label="1;22pkt 22fpkt"];
1842--6612[label="1;22pkt 22fpkt"];
1842--7922[label="1;22pkt 22fpkt"];
2036--3450[label="1;22pkt 22fpkt"];
2036--4592[label="1;22pkt 22fpkt"];
2036--6612[label="1;22pkt 22fpkt"];
2036--7922[label="1;22pkt 22fpkt"];
3450--4592[label="1;22pkt 22fpkt"];
3450--6612[label="1;22pkt 22fpkt"];
3450--7922[label="1;22pkt 22fpkt"];
4592--6612[label="1;22pkt 22fpkt"];
4592--7922[label="1;22pkt 22fpkt"];
6612--7922[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="192.13.41.86" dst_port="80" src_ip="148.242.42.85"/>
    </slice>
    <from sec="1036990988" usec="0"/>
    <to sec="1036991421" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32241,2.66004,503,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_305{
style=filled;
color=gray75;
57[label="202.176.81.55s;2pkt 2fpkt", shape=rectangle, color=red];
1054[label="215.156.89.55;s;577pkt 577fpkt", shape=diamond, color=yellow];
1055[label="210.227.45.162;d;1pkt 1fpkt", shape=diamond, color=yellow];
1059[label="158.122.90.53;d;569pkt 569fpkt", shape=diamond, color=yellow];
1774[label="214.121.162.62;d;45pkt 45fpkt", shape=diamond, color=yellow];
1823[label="200.192.7.110;s;1pkt 1fpkt", shape=diamond, color=yellow];
2298[label="202.176.81.55;s;1pkt 1fpkt", shape=diamond, color=yellow];
2764[label="158.122.90.53;d;519pkt 519fpkt", shape=hexagon, color=black];
3435[label="214.121.162.62;d;36pkt 36fpkt", shape=hexagon, color=black];
3463[label="202.176.81.55;s;1pkt 1fpkt", shape=hexagon, color=black];
4302[label="215.156.89.55;580pkt 580fpkt", shape=pentagon, color=darkviolet];
6418[label="215.156.89.55;579pkt 579fpkt", shape=invtriangle, color=brown];
7811[label="215.156.89.55;580pkt 580fpkt", shape=invhouse, color=bisque];
stat305[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, *:*}[22.24%]&lt;BR/&gt;{215.156.89.55:*, 158.122.90.53:80}[21.12%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (20.5529%)&lt;BR/&gt; 6699: (9.81094%)&lt;BR/&gt; 53: (2.72128%)&lt;BR/&gt; 25: (2.04812%)&lt;BR/&gt; 137: (1.28903%)&gt;];
}
57--1054[label="0.5;1pkt 1fpkt"];
57--1055[label="1;1pkt 1fpkt"];
57--1774[label="0.5;1pkt 1fpkt"];
57--2298[label="1;1pkt 1fpkt"];
57--3435[label="0.5;1pkt 1fpkt"];
57--3463[label="1;1pkt 1fpkt"];
57--4302[label="0.5;1pkt 1fpkt"];
57--6418[label="0.5;1pkt 1fpkt"];
57--7811[label="0.5;1pkt 1fpkt"];
1054--1055[label="1;1pkt 1fpkt"];
1054--1059[label="1;569pkt 569fpkt"];
1054--2764[label="1;519pkt 519fpkt"];
1054--3713[label="0.0121317;7pkt 7fpkt"];
1054--3714[label="0.0017331;1pkt 1fpkt"];
1054--3718[label="0.0017331;1pkt 1fpkt"];
1054--3719[label="0.0017331;1pkt 1fpkt"];
1054--3725[label="0.0121317;7pkt 7fpkt"];
1054--3726[label="0.0017331;1pkt 1fpkt"];
1054--3730[label="0.0121317;7pkt 7fpkt"];
1054--3731[label="0.0017331;1pkt 1fpkt"];
1054--4302[label="1;577pkt 577fpkt"];
1054--6418[label="0.998267;576pkt 576fpkt"];
1054--7811[label="1;577pkt 577fpkt"];
1055--4302[label="1;1pkt 1fpkt"];
1055--6418[label="1;1pkt 1fpkt"];
1055--7811[label="1;1pkt 1fpkt"];
1059--2764[label="1;519pkt 519fpkt"];
1059--3713[label="0.0123023;7pkt 7fpkt"];
1059--3714[label="0.00175747;1pkt 1fpkt"];
1059--3718[label="0.00175747;1pkt 1fpkt"];
1059--3719[label="0.00175747;1pkt 1fpkt"];
1059--3725[label="0.0123023;7pkt 7fpkt"];
1059--3726[label="0.00175747;1pkt 1fpkt"];
1059--3730[label="0.0123023;7pkt 7fpkt"];
1059--3731[label="0.00175747;1pkt 1fpkt"];
1059--4302[label="1;569pkt 569fpkt"];
1059--6418[label="1;569pkt 569fpkt"];
1059--7811[label="1;569pkt 569fpkt"];
1774--1823[label="1;1pkt 1fpkt"];
1774--2298[label="1;1pkt 1fpkt"];
1774--3435[label="1;36pkt 36fpkt"];
1774--3463[label="1;1pkt 1fpkt"];
1774--4734[label="0.0222222;1pkt 1fpkt"];
1823--3435[label="1;1pkt 1fpkt"];
2298--3435[label="1;1pkt 1fpkt"];
2298--3463[label="1;1pkt 1fpkt"];
2764--3713[label="0.0134875;7pkt 7fpkt"];
2764--3714[label="0.00192678;1pkt 1fpkt"];
2764--3718[label="0.00192678;1pkt 1fpkt"];
2764--3719[label="0.00192678;1pkt 1fpkt"];
2764--3725[label="0.0134875;7pkt 7fpkt"];
2764--3726[label="0.00192678;1pkt 1fpkt"];
2764--3730[label="0.0134875;7pkt 7fpkt"];
2764--3731[label="0.00192678;1pkt 1fpkt"];
2764--4302[label="1;519pkt 519fpkt"];
2764--6418[label="1;519pkt 519fpkt"];
2764--7811[label="1;519pkt 519fpkt"];
3435--3463[label="1;1pkt 1fpkt"];
3435--4734[label="0.0277778;1pkt 1fpkt"];
4302--6418[label="1;579pkt 579fpkt"];
4302--7811[label="1;580pkt 580fpkt"];
6418--7811[label="1;579pkt 579fpkt"];
</description>
    <slice>
      <filter src_port="80"/>
      <filter dst_ip="158.122.90.53" dst_port="80" src_ip="215.156.89.55"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.94296,2.93178,502,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_306{
style=filled;
color=gray75;
2580[label="148.242.107.55;d;2pkt 2fpkt", shape=diamond, color=yellow];
2581[label="203.80.203.254;s;1pkt 1fpkt", shape=diamond, color=yellow];
3532[label="203.80.203.254;s;1pkt 1fpkt", shape=hexagon, color=black];
3693[label="203.80.203.254;s;1pkt 1fpkt", shape=polygon, color=gold];
stat306[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.50.149.196:80, 148.242.107.55:54631}[50%]&lt;BR/&gt;{203.80.203.254:37567, 148.242.107.55:22}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37567: (40%)&lt;BR/&gt; 22: (40%)&lt;BR/&gt; 54631: (10%)&lt;BR/&gt; 80: (10%)&gt;];
}
2580--2581[label="1;1pkt 1fpkt"];
2580--3532[label="1;1pkt 1fpkt"];
2580--3693[label="1;1pkt 1fpkt"];
2581--3532[label="1;1pkt 1fpkt"];
2581--3693[label="1;1pkt 1fpkt"];
3532--3693[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.242.107.55" dst_port="22" src_ip="203.80.203.254" src_port="37567"/>
      <filter dst_ip="148.242.107.55" dst_port="54631" src_ip="9.50.149.196" src_port="80"/>
    </slice>
    <from sec="1036990802" usec="0"/>
    <to sec="1036991430" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.94296,2.93178,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_307{
style=filled;
color=gray75;
2063[label="8.133.70.105;d;50pkt 50fpkt", shape=diamond, color=yellow];
2066[label="215.156.88.82;s;50pkt 50fpkt", shape=diamond, color=yellow];
3162[label="8.133.70.105;d;28pkt 28fpkt", shape=hexagon, color=black];
3576[label="215.156.88.82;s;50pkt 50fpkt", shape=hexagon, color=black];
3705[label="215.156.88.82;s;50pkt 50fpkt", shape=polygon, color=gold];
stat307[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.156.88.82:*, 8.133.70.105:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61650: (1.09649%)&lt;BR/&gt; 61574: (1.09649%)&lt;BR/&gt; 61535: (1.09649%)&lt;BR/&gt; 61491: (1.09649%)&lt;BR/&gt; 61455: (1.09649%)&gt;];
}
2063--2066[label="1;50pkt 50fpkt"];
2063--3162[label="1;28pkt 28fpkt"];
2063--3576[label="1;50pkt 50fpkt"];
2063--3705[label="1;50pkt 50fpkt"];
2066--3162[label="1;28pkt 28fpkt"];
2066--3576[label="1;50pkt 50fpkt"];
2066--3705[label="1;50pkt 50fpkt"];
3162--3576[label="1;28pkt 28fpkt"];
3162--3705[label="1;28pkt 28fpkt"];
3576--3705[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter dst_ip="8.133.70.105" src_ip="215.156.88.82"/>
    </slice>
    <from sec="1036991069" usec="0"/>
    <to sec="1036991449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14589,2.70209,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_308{
style=filled;
color=gray75;
2231[label="133.213.193.250;s;5pkt 5fpkt", shape=diamond, color=yellow];
2497[label="152.194.211.0;d;1pkt 1fpkt", shape=diamond, color=yellow];
3448[label="133.213.193.250;s;5pkt 5fpkt", shape=hexagon, color=black];
3584[label="152.194.211.0;d;1pkt 1fpkt", shape=hexagon, color=black];
5997[label="133.213.193.250;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7601[label="133.213.193.250;6pkt 6fpkt", shape=invtriangle, color=brown];
stat308[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.213.193.250:7743, 152.194.211.0:*}[33.3333%]&lt;BR/&gt;{133.213.193.250:*, 9.171.65.40:7743}[33.3333%]&lt;BR/&gt;{133.213.193.250:7743, 9.171.65.40:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7743: (50%)&lt;BR/&gt; 2032: (13.0435%)&lt;BR/&gt; 4275: (8.69565%)&lt;BR/&gt; 4229: (8.69565%)&lt;BR/&gt; 2531: (8.69565%)&gt;];
}
2231--2497[label="1;1pkt 1fpkt"];
2231--3448[label="1;5pkt 5fpkt"];
2231--3584[label="1;1pkt 1fpkt"];
2231--5997[label="0.8;4pkt 4fpkt"];
2231--7601[label="1;5pkt 5fpkt"];
2497--3448[label="1;1pkt 1fpkt"];
2497--3584[label="1;1pkt 1fpkt"];
2497--5997[label="1;1pkt 1fpkt"];
2497--7601[label="1;1pkt 1fpkt"];
3448--3584[label="1;1pkt 1fpkt"];
3448--5997[label="0.8;4pkt 4fpkt"];
3448--7601[label="1;5pkt 5fpkt"];
3584--5997[label="1;1pkt 1fpkt"];
3584--7601[label="1;1pkt 1fpkt"];
5997--7601[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="9.171.65.40" src_ip="133.213.193.250" src_port="7743"/>
      <filter dst_ip="9.171.65.40" dst_port="7743" src_ip="133.213.193.250"/>
      <filter dst_ip="152.194.211.0" src_ip="133.213.193.250" src_port="7743"/>
    </slice>
    <from sec="1036990920" usec="0"/>
    <to sec="1036991470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14589,2.70209,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_309{
style=filled;
color=gray75;
2253[label="214.121.78.84;s;3pkt 3fpkt", shape=diamond, color=yellow];
2502[label="76.172.182.155;d;1pkt 1fpkt", shape=diamond, color=yellow];
3588[label="76.172.182.155;d;1pkt 1fpkt", shape=hexagon, color=black];
4581[label="214.121.78.84;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6605[label="214.121.78.84;3pkt 3fpkt", shape=invtriangle, color=brown];
stat309[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.121.78.84:1141, 76.172.182.155:1755}[33.3333%]&lt;BR/&gt;{214.121.78.84:1137, 76.172.182.56:554}[33.3333%]&lt;BR/&gt;{214.121.78.84:1139, 76.172.182.56:554}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 554: (27.2727%)&lt;BR/&gt; 1755: (22.7273%)&lt;BR/&gt; 1141: (22.7273%)&lt;BR/&gt; 1139: (13.6364%)&lt;BR/&gt; 1137: (13.6364%)&gt;];
}
2253--2502[label="1;1pkt 1fpkt"];
2253--3588[label="1;1pkt 1fpkt"];
2253--4581[label="1;3pkt 3fpkt"];
2253--6605[label="1;3pkt 3fpkt"];
2502--3588[label="1;1pkt 1fpkt"];
2502--4581[label="1;1pkt 1fpkt"];
2502--6605[label="1;1pkt 1fpkt"];
3588--4581[label="1;1pkt 1fpkt"];
3588--6605[label="1;1pkt 1fpkt"];
4581--6605[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="76.172.182.56" dst_port="554" src_ip="214.121.78.84" src_port="1139"/>
      <filter dst_ip="76.172.182.56" dst_port="554" src_ip="214.121.78.84" src_port="1137"/>
      <filter dst_ip="76.172.182.155" dst_port="1755" src_ip="214.121.78.84" src_port="1141"/>
    </slice>
    <from sec="1036991034" usec="0"/>
    <to sec="1036991449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15633,2.77483,501,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_310{
style=filled;
color=gray75;
2517[label="145.3.20.170;d;7pkt 7fpkt", shape=diamond, color=yellow];
2518[label="214.122.102.146;s;7pkt 7fpkt", shape=diamond, color=yellow];
3593[label="214.122.102.146;s;7pkt 7fpkt", shape=hexagon, color=black];
stat310[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.122.102.146:*, 145.3.20.170:21}[28.5714%]&lt;BR/&gt;{214.122.102.146:*, 145.3.20.170:9982}[28.5714%]&lt;BR/&gt;{214.122.102.146:*, 145.3.20.170:11771}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11771: (14.2857%)&lt;BR/&gt; 9982: (14.2857%)&lt;BR/&gt; 21: (14.2857%)&lt;BR/&gt; 59231: (7.14286%)&lt;BR/&gt; 4719: (7.14286%)&gt;];
}
2517--2518[label="1;7pkt 7fpkt"];
2517--3593[label="1;7pkt 7fpkt"];
2518--3593[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="145.3.20.170" dst_port="11771" src_ip="214.122.102.146"/>
      <filter dst_ip="145.3.20.170" dst_port="9982" src_ip="214.122.102.146"/>
      <filter dst_ip="145.3.20.170" dst_port="21" src_ip="214.122.102.146"/>
    </slice>
    <from sec="1036991259" usec="0"/>
    <to sec="1036991449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.94296,2.93178,020,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_312{
style=filled;
color=gray75;
1355[label="215.156.91.80;s;264pkt 264fpkt", shape=diamond, color=yellow];
3080[label="215.156.91.80;s;193pkt 193fpkt", shape=hexagon, color=black];
3641[label="215.156.91.80;s;144pkt 144fpkt", shape=polygon, color=gold];
stat312[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.156.91.80:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1355--3080[label="1;193pkt 193fpkt"];
1355--3641[label="1;144pkt 144fpkt"];
3080--3641[label="1;144pkt 144fpkt"];
</description>
    <slice>
      <filter src_ip="215.156.91.80"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.92477,2.89089,020,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_313{
style=filled;
color=gray75;
1565[label="214.119.129.209;s;25pkt 25fpkt", shape=diamond, color=yellow];
2316[label="9.46.141.55;d;2pkt 2fpkt", shape=diamond, color=yellow];
3320[label="214.119.129.209;s;23pkt 23fpkt", shape=hexagon, color=black];
3378[label="9.46.141.55;d;2pkt 2fpkt", shape=hexagon, color=black];
3664[label="214.119.129.209;s;23pkt 23fpkt", shape=polygon, color=gold];
3671[label="9.46.141.55;d;2pkt 2fpkt", shape=polygon, color=gold];
4207[label="215.156.93.45;13pkt 13fpkt", shape=pentagon, color=darkviolet];
5639[label="214.119.129.209;28pkt 28fpkt", shape=pentagon, color=darkviolet];
stat313[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.119.129.209:0, *:0}[69.0476%]&lt;BR/&gt;{215.156.93.45:0, *:0}[30.9524%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1565--2316[label="0.5;1pkt 1fpkt"];
1565--3320[label="1;23pkt 23fpkt"];
1565--3378[label="0.5;1pkt 1fpkt"];
1565--3664[label="1;23pkt 23fpkt"];
1565--3671[label="0.5;1pkt 1fpkt"];
1565--5639[label="0.96;24pkt 24fpkt"];
2316--3320[label="0.5;1pkt 1fpkt"];
2316--3378[label="1;2pkt 2fpkt"];
2316--3664[label="0.5;1pkt 1fpkt"];
2316--3671[label="1;2pkt 2fpkt"];
2316--4207[label="0.5;1pkt 1fpkt"];
2316--5639[label="0.5;1pkt 1fpkt"];
3320--3378[label="0.5;1pkt 1fpkt"];
3320--3664[label="1;23pkt 23fpkt"];
3320--3671[label="0.5;1pkt 1fpkt"];
3320--5639[label="0.956522;22pkt 22fpkt"];
3378--3664[label="0.5;1pkt 1fpkt"];
3378--3671[label="1;2pkt 2fpkt"];
3378--4207[label="0.5;1pkt 1fpkt"];
3378--5639[label="0.5;1pkt 1fpkt"];
3664--3671[label="0.5;1pkt 1fpkt"];
3664--5639[label="0.956522;22pkt 22fpkt"];
3671--4207[label="0.5;1pkt 1fpkt"];
3671--5639[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="214.119.129.209"/>
      <filter src_ip="215.156.93.45"/>
    </slice>
    <from sec="1036990821" usec="0"/>
    <to sec="1036991506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.92477,2.89089,999,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_316{
style=filled;
color=gray75;
1932[label="219.208.24.0;s;216pkt 216fpkt", shape=diamond, color=yellow];
3421[label="219.208.24.0;s;191pkt 191fpkt", shape=hexagon, color=black];
3677[label="219.208.24.0;s;191pkt 191fpkt", shape=polygon, color=gold];
3736[label="219.208.24.0;231pkt 231fpkt", shape=pentagon, color=darkviolet];
stat316[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.208.24.0:53, *:*}[99.5671%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50.1206%)&lt;BR/&gt; 1181: (0.482509%)&lt;BR/&gt; 1091: (0.482509%)&lt;BR/&gt; 1087: (0.482509%)&lt;BR/&gt; 1085: (0.482509%)&gt;];
}
1932--3421[label="1;191pkt 191fpkt"];
1932--3677[label="1;191pkt 191fpkt"];
1932--3736[label="1;216pkt 216fpkt"];
3421--3677[label="1;191pkt 191fpkt"];
3421--3736[label="1;191pkt 191fpkt"];
3677--3736[label="1;191pkt 191fpkt"];
</description>
    <slice>
      <filter src_ip="219.208.24.0" src_port="53"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.94296,2.93178,020,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_317{
style=filled;
color=gray75;
1940[label="211.23.160.20;d;434pkt 434fpkt", shape=diamond, color=yellow];
3424[label="211.23.160.20;d;374pkt 374fpkt", shape=hexagon, color=black];
3678[label="211.23.160.20;d;374pkt 374fpkt", shape=polygon, color=gold];
stat317[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 211.23.160.20:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1940--3424[label="1;374pkt 374fpkt"];
1940--3678[label="1;374pkt 374fpkt"];
3424--3678[label="1;374pkt 374fpkt"];
</description>
    <slice>
      <filter dst_ip="211.23.160.20"/>
    </slice>
    <from sec="1036990802" usec="0"/>
    <to sec="1036991449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.94296,2.93178,020,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_318{
style=filled;
color=gray75;
2130[label="175.194.40.220;s;319pkt 319fpkt", shape=diamond, color=yellow];
3262[label="175.194.40.220;s;319pkt 319fpkt", shape=hexagon, color=black];
3689[label="175.194.40.220;s;319pkt 319fpkt", shape=polygon, color=gold];
stat318[shape=component, label=&lt;Rules:&lt;BR/&gt;{175.194.40.220:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2130--3262[label="1;319pkt 319fpkt"];
2130--3689[label="1;319pkt 319fpkt"];
3262--3689[label="1;319pkt 319fpkt"];
</description>
    <slice>
      <filter src_ip="175.194.40.220"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.213.122.0"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.641407,2.74633,503,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_323{
style=filled;
color=gray75;
1[label="214.225.131.0s;2pkt 2fpkt", shape=rectangle, color=red];
3742[label="214.225.131.0;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat323[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.225.131.0:80, 145.208.132.179:3058}[25%]&lt;BR/&gt;{214.225.131.0:80, 145.208.132.179:3064}[25%]&lt;BR/&gt;{214.225.131.0:80, 145.208.135.230:1451}[25%]&lt;BR/&gt;{214.225.131.0:80, 145.208.135.230:1452}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1452: (16.6667%)&lt;BR/&gt; 1451: (16.6667%)&lt;BR/&gt; 3064: (8.33333%)&lt;BR/&gt; 3058: (8.33333%)&gt;];
}
1--3742[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.135.230" dst_port="1452" src_ip="214.225.131.0" src_port="80"/>
      <filter dst_ip="145.208.135.230" dst_port="1451" src_ip="214.225.131.0" src_port="80"/>
      <filter dst_ip="145.208.132.179" dst_port="3064" src_ip="214.225.131.0" src_port="80"/>
      <filter dst_ip="145.208.132.179" dst_port="3058" src_ip="214.225.131.0" src_port="80"/>
    </slice>
    <from sec="1036990810" usec="0"/>
    <to sec="1036990873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.61.15.1"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="175.177.201.1"/>
    </slice>
    <from sec="1036991110" usec="0"/>
    <to sec="1036991137" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676574,2.717,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_327{
style=filled;
color=gray75;
295[label="209.1.229.3s;32pkt 32fpkt", shape=rectangle, color=red];
3785[label="209.1.229.3;200pkt 200fpkt", shape=pentagon, color=darkviolet];
6060[label="209.1.229.3;200pkt 200fpkt", shape=invtriangle, color=brown];
stat327[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.1.229.3:1025, *:137}[70%]&lt;BR/&gt;{209.1.229.3:1143, *:137}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1025: (36.1111%)&lt;BR/&gt; 1143: (13.8889%)&gt;];
}
295--3785[label="1;32pkt 32fpkt"];
295--6060[label="1;32pkt 32fpkt"];
3785--6060[label="1;200pkt 200fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="209.1.229.3" src_port="1025"/>
      <filter dst_port="137" src_ip="209.1.229.3" src_port="1143"/>
    </slice>
    <from sec="1036991341" usec="0"/>
    <to sec="1036991441" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05572,2.67421,999,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_328{
style=filled;
color=gray75;
296[label="175.45.168.4s;1pkt 1fpkt", shape=rectangle, color=red];
920[label="214.121.163.36;d;3pkt 3fpkt", shape=diamond, color=yellow];
1396[label="136.20.28.4;s;1pkt 1fpkt", shape=diamond, color=yellow];
1628[label="203.110.33.255;s;1pkt 1fpkt", shape=diamond, color=yellow];
3786[label="136.20.28.4;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6061[label="136.20.28.4;1pkt 1fpkt", shape=invtriangle, color=brown];
7642[label="136.20.28.4;1pkt 1fpkt", shape=invhouse, color=bisque];
stat328[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.20.28.4:5001, 214.121.163.36:1431}[33.3333%]&lt;BR/&gt;{196.34.158.201:6699, 214.121.163.36:1415}[33.3333%]&lt;BR/&gt;{203.110.33.255:6699, 214.121.163.36:1435}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (33.3333%)&lt;BR/&gt; 1431: (33.3333%)&lt;BR/&gt; 6699: (16.6667%)&lt;BR/&gt; 1435: (11.1111%)&lt;BR/&gt; 1415: (5.55556%)&gt;];
}
296--920[label="1;1pkt 1fpkt"];
296--1396[label="1;1pkt 1fpkt"];
296--3786[label="1;1pkt 1fpkt"];
296--6061[label="1;1pkt 1fpkt"];
296--7642[label="1;1pkt 1fpkt"];
920--1396[label="1;1pkt 1fpkt"];
920--1628[label="1;1pkt 1fpkt"];
920--3786[label="1;1pkt 1fpkt"];
920--6061[label="1;1pkt 1fpkt"];
920--7642[label="1;1pkt 1fpkt"];
1396--3786[label="1;1pkt 1fpkt"];
1396--6061[label="1;1pkt 1fpkt"];
1396--7642[label="1;1pkt 1fpkt"];
3786--6061[label="1;1pkt 1fpkt"];
3786--7642[label="1;1pkt 1fpkt"];
6061--7642[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.121.163.36" dst_port="1435" src_ip="203.110.33.255" src_port="6699"/>
      <filter dst_ip="214.121.163.36" dst_port="1415" src_ip="196.34.158.201" src_port="6699"/>
      <filter dst_ip="214.121.163.36" dst_port="1431" src_ip="136.20.28.4" src_port="5001"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_329{
style=filled;
color=gray75;
297[label="199.160.233.4s;129pkt 129fpkt", shape=rectangle, color=red];
3793[label="199.160.233.4;128pkt 128fpkt", shape=pentagon, color=darkviolet];
6066[label="199.160.233.4;128pkt 128fpkt", shape=invtriangle, color=brown];
7646[label="199.160.233.4;128pkt 128fpkt", shape=invhouse, color=bisque];
stat329[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.160.233.4:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
297--3793[label="1;128pkt 128fpkt"];
297--6066[label="1;128pkt 128fpkt"];
297--7646[label="1;128pkt 128fpkt"];
3793--6066[label="1;128pkt 128fpkt"];
3793--7646[label="1;128pkt 128fpkt"];
6066--7646[label="1;128pkt 128fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.160.233.4" src_port="1025"/>
    </slice>
    <from sec="1036991343" usec="0"/>
    <to sec="1036991365" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.242.16.5"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676574,2.717,503,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_331{
style=filled;
color=gray75;
254[label="148.242.154.132s;26pkt 26fpkt", shape=rectangle, color=red];
3798[label="145.208.128.5;20pkt 20fpkt", shape=pentagon, color=darkviolet];
4980[label="148.242.154.132;72pkt 72fpkt", shape=pentagon, color=darkviolet];
6070[label="145.208.128.5;19pkt 19fpkt", shape=invtriangle, color=brown];
6898[label="148.242.154.132;72pkt 72fpkt", shape=invtriangle, color=brown];
stat331[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.242.154.132:*, 209.2.177.216:80}[47.8261%]&lt;BR/&gt;{145.208.128.5:*, *:80}[20.6522%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5215%)&lt;BR/&gt; 2178: (1.19617%)&lt;BR/&gt; 2208: (0.956938%)&lt;BR/&gt; 2205: (0.956938%)&lt;BR/&gt; 2202: (0.956938%)&gt;];
}
254--3798[label="0.1;2pkt 2fpkt"];
254--4980[label="0.923077;24pkt 24fpkt"];
254--6070[label="0.105263;2pkt 2fpkt"];
254--6898[label="0.923077;24pkt 24fpkt"];
3798--6070[label="1;19pkt 19fpkt"];
4980--6898[label="1;72pkt 72fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="145.208.128.5"/>
      <filter dst_ip="209.2.177.216" dst_port="80" src_ip="148.242.154.132"/>
    </slice>
    <from sec="1036990833" usec="0"/>
    <to sec="1036991472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945007,2.69627,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_332{
style=filled;
color=gray75;
2123[label="219.208.24.6;s;238pkt 238fpkt", shape=diamond, color=yellow];
3805[label="219.208.24.6;254pkt 254fpkt", shape=pentagon, color=darkviolet];
6075[label="219.208.24.6;255pkt 255fpkt", shape=invtriangle, color=brown];
7648[label="219.208.24.6;255pkt 255fpkt", shape=invhouse, color=bisque];
stat332[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.208.24.6:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 1081: (0.798403%)&lt;BR/&gt; 1076: (0.598802%)&lt;BR/&gt; 1540: (0.399202%)&lt;BR/&gt; 1530: (0.399202%)&gt;];
}
2123--3805[label="0.995798;237pkt 237fpkt"];
2123--6075[label="1;238pkt 238fpkt"];
2123--7648[label="1;238pkt 238fpkt"];
3805--6075[label="1;254pkt 254fpkt"];
3805--7648[label="1;254pkt 254fpkt"];
6075--7648[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter src_ip="219.208.24.6" src_port="53"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.641407,2.74633,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_333{
style=filled;
color=gray75;
302[label="199.8.102.6s;39pkt 39fpkt", shape=rectangle, color=red];
3807[label="199.8.102.6;125pkt 125fpkt", shape=pentagon, color=darkviolet];
stat333[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.8.102.6:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
302--3807[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.8.102.6" src_port="1027"/>
    </slice>
    <from sec="1036991237" usec="0"/>
    <to sec="1036991256" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.216.218.6"/>
    </slice>
    <from sec="1036991284" usec="0"/>
    <to sec="1036991309" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.132.1.7"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.61.15.7"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676574,2.717,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_337{
style=filled;
color=gray75;
9[label="199.49.116.7s;73pkt 73fpkt", shape=rectangle, color=red];
3815[label="199.49.116.7;101pkt 101fpkt", shape=pentagon, color=darkviolet];
6080[label="199.49.116.7;101pkt 101fpkt", shape=invtriangle, color=brown];
stat337[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.49.116.7:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
9--3815[label="0.986301;72pkt 72fpkt"];
9--6080[label="0.986301;72pkt 72fpkt"];
3815--6080[label="1;101pkt 101fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.49.116.7" src_port="1025"/>
    </slice>
    <from sec="1036991225" usec="0"/>
    <to sec="1036991242" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.57.186.7"/>
    </slice>
    <from sec="1036990802" usec="0"/>
    <to sec="1036991130" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.97.160.10"/>
    </slice>
    <from sec="1036991214" usec="0"/>
    <to sec="1036991233" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.100.160.10"/>
    </slice>
    <from sec="1036990807" usec="0"/>
    <to sec="1036991516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_341{
style=filled;
color=gray75;
310[label="9.187.10.11s;43pkt 43fpkt", shape=rectangle, color=red];
3853[label="9.187.10.11;165pkt 165fpkt", shape=pentagon, color=darkviolet];
6106[label="9.187.10.11;165pkt 165fpkt", shape=invtriangle, color=brown];
7661[label="9.187.10.11;165pkt 165fpkt", shape=invhouse, color=bisque];
stat341[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.187.10.11:64701, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64701: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
310--3853[label="1;43pkt 43fpkt"];
310--6106[label="1;43pkt 43fpkt"];
310--7661[label="1;43pkt 43fpkt"];
3853--6106[label="1;165pkt 165fpkt"];
3853--7661[label="1;165pkt 165fpkt"];
6106--7661[label="1;165pkt 165fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.187.10.11" src_port="64701"/>
    </slice>
    <from sec="1036990862" usec="0"/>
    <to sec="1036990889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.208.189.12"/>
    </slice>
    <from sec="1036990905" usec="0"/>
    <to sec="1036991506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.213.215.14"/>
    </slice>
    <from sec="1036991280" usec="0"/>
    <to sec="1036991312" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,503,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_344{
style=filled;
color=gray75;
18[label="199.202.127.16s;2pkt 2fpkt", shape=rectangle, color=red];
3925[label="199.202.127.16;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6146[label="199.202.127.16;3pkt 3fpkt", shape=invtriangle, color=brown];
7678[label="199.202.127.16;4pkt 4fpkt", shape=invhouse, color=bisque];
stat344[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.202.127.16:80, 175.177.235.93:1169}[25%]&lt;BR/&gt;{199.202.127.16:80, 175.177.235.93:1170}[25%]&lt;BR/&gt;{199.202.127.16:80, 148.242.130.184:2031}[25%]&lt;BR/&gt;{199.202.127.16:80, 148.242.130.184:2032}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2032: (16.6667%)&lt;BR/&gt; 2031: (16.6667%)&lt;BR/&gt; 1170: (12.5%)&lt;BR/&gt; 1169: (4.16667%)&gt;];
}
18--3925[label="1;2pkt 2fpkt"];
18--6146[label="1;2pkt 2fpkt"];
18--7678[label="1;2pkt 2fpkt"];
3925--6146[label="1;3pkt 3fpkt"];
3925--7678[label="1;3pkt 3fpkt"];
6146--7678[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="148.242.130.184" dst_port="2032" src_ip="199.202.127.16" src_port="80"/>
      <filter dst_ip="148.242.130.184" dst_port="2031" src_ip="199.202.127.16" src_port="80"/>
      <filter dst_ip="175.177.235.93" dst_port="1170" src_ip="199.202.127.16" src_port="80"/>
      <filter dst_ip="175.177.235.93" dst_port="1169" src_ip="199.202.127.16" src_port="80"/>
    </slice>
    <from sec="1036991208" usec="0"/>
    <to sec="1036991399" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.61.15.17"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.203.66.17"/>
    </slice>
    <from sec="1036991092" usec="0"/>
    <to sec="1036991118" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.130.135.18"/>
    </slice>
    <from sec="1036991351" usec="0"/>
    <to sec="1036991446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,503,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_348{
style=filled;
color=gray75;
232[label="214.51.172.18s;1pkt 1fpkt", shape=rectangle, color=red];
3947[label="214.51.172.18;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6161[label="214.51.172.18;2pkt 2fpkt", shape=invtriangle, color=brown];
7682[label="214.51.172.18;2pkt 2fpkt", shape=invhouse, color=bisque];
stat348[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.51.172.18:61122, 133.213.129.165:80}[50%]&lt;BR/&gt;{214.51.172.18:61123, 133.213.129.165:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61123: (28.5714%)&lt;BR/&gt; 61122: (21.4286%)&gt;];
}
232--3947[label="1;1pkt 1fpkt"];
232--6161[label="1;1pkt 1fpkt"];
232--7682[label="1;1pkt 1fpkt"];
3947--6161[label="1;2pkt 2fpkt"];
3947--7682[label="1;2pkt 2fpkt"];
6161--7682[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="133.213.129.165" dst_port="80" src_ip="214.51.172.18" src_port="61123"/>
      <filter dst_ip="133.213.129.165" dst_port="80" src_ip="214.51.172.18" src_port="61122"/>
    </slice>
    <from sec="1036991323" usec="0"/>
    <to sec="1036991338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676574,2.717,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_349{
style=filled;
color=gray75;
609[label="199.240.192.18s;46pkt 46fpkt", shape=rectangle, color=red];
3948[label="199.240.192.18;166pkt 166fpkt", shape=pentagon, color=darkviolet];
6162[label="199.240.192.18;167pkt 167fpkt", shape=invtriangle, color=brown];
stat349[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.240.192.18:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
609--3948[label="0.978261;45pkt 45fpkt"];
609--6162[label="1;46pkt 46fpkt"];
3948--6162[label="1;166pkt 166fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.240.192.18" src_port="1031"/>
    </slice>
    <from sec="1036990970" usec="0"/>
    <to sec="1036990996" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="114.194.96.19"/>
    </slice>
    <from sec="1036991271" usec="0"/>
    <to sec="1036991292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.232.87.21"/>
    </slice>
    <from sec="1036990804" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.169.90.21"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.232.168.21"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_354{
style=filled;
color=gray75;
3978[label="9.209.147.22;202pkt 202fpkt", shape=pentagon, color=darkviolet];
stat354[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.209.147.22:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
</description>
    <slice>
      <filter dst_port="137" src_ip="9.209.147.22" src_port="1028"/>
    </slice>
    <from sec="1036990946" usec="0"/>
    <to sec="1036990982" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.156.93.23"/>
    </slice>
    <from sec="1036990803" usec="0"/>
    <to sec="1036991515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.172.204.23"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.72.235.23"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_358{
style=filled;
color=gray75;
321[label="48.85.173.24s;256pkt 256fpkt", shape=rectangle, color=red];
3999[label="48.85.173.24;255pkt 255fpkt", shape=pentagon, color=darkviolet];
6196[label="48.85.173.24;255pkt 255fpkt", shape=invtriangle, color=brown];
7702[label="48.85.173.24;254pkt 254fpkt", shape=invhouse, color=bisque];
stat358[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.85.173.24:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
321--3999[label="1;255pkt 255fpkt"];
321--6196[label="1;255pkt 255fpkt"];
321--7702[label="1;254pkt 254fpkt"];
3999--6196[label="1;255pkt 255fpkt"];
3999--7702[label="1;254pkt 254fpkt"];
6196--7702[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="48.85.173.24" src_port="1025"/>
    </slice>
    <from sec="1036991127" usec="0"/>
    <to sec="1036991145" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.40.126.25"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.107.201.25"/>
    </slice>
    <from sec="1036990803" usec="0"/>
    <to sec="1036991502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.641407,2.74633,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_361{
style=filled;
color=gray75;
322[label="199.238.48.26s;181pkt 181fpkt", shape=rectangle, color=red];
4014[label="199.238.48.26;211pkt 211fpkt", shape=pentagon, color=darkviolet];
stat361[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.238.48.26:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
322--4014[label="0.994475;180pkt 180fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.238.48.26" src_port="1028"/>
    </slice>
    <from sec="1036990940" usec="0"/>
    <to sec="1036990973" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23582,2.68221,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_362{
style=filled;
color=gray75;
1732[label="214.121.190.169;d;132pkt 132fpkt", shape=diamond, color=yellow];
3115[label="214.121.190.169;d;132pkt 132fpkt", shape=hexagon, color=black];
3769[label="217.8.46.2;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4022[label="193.121.249.26;85pkt 85fpkt", shape=pentagon, color=darkviolet];
4688[label="202.132.2.97;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6684[label="202.132.2.97;1pkt 1fpkt", shape=invtriangle, color=brown];
7958[label="202.132.2.97;1pkt 1fpkt", shape=invhouse, color=bisque];
stat362[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.121.249.26:80, 214.121.190.169:*}[57.971%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.648%)&lt;BR/&gt; 8080: (2.09497%)&lt;BR/&gt; 6699: (0.977654%)&lt;BR/&gt; 2419: (0.698324%)&lt;BR/&gt; 2418: (0.418994%)&gt;];
}
1732--3115[label="1;132pkt 132fpkt"];
1732--3769[label="1;6pkt 6fpkt"];
1732--4022[label="0.929412;79pkt 79fpkt"];
1732--4688[label="1;1pkt 1fpkt"];
1732--6684[label="1;1pkt 1fpkt"];
1732--7958[label="1;1pkt 1fpkt"];
3115--3769[label="1;6pkt 6fpkt"];
3115--4022[label="0.929412;79pkt 79fpkt"];
3115--4688[label="1;1pkt 1fpkt"];
3115--6684[label="1;1pkt 1fpkt"];
3115--7958[label="1;1pkt 1fpkt"];
4688--6684[label="1;1pkt 1fpkt"];
4688--7958[label="1;1pkt 1fpkt"];
6684--7958[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.121.190.169" src_ip="193.121.249.26" src_port="80"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991514" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.173.72.27"/>
    </slice>
    <from sec="1036990909" usec="0"/>
    <to sec="1036990930" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.242.86.27"/>
    </slice>
    <from sec="1036990861" usec="0"/>
    <to sec="1036991499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.30.173.28"/>
    </slice>
    <from sec="1036990836" usec="0"/>
    <to sec="1036991114" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.51.57.29"/>
    </slice>
    <from sec="1036991134" usec="0"/>
    <to sec="1036991158" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.130.138.29"/>
    </slice>
    <from sec="1036990836" usec="0"/>
    <to sec="1036990909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_368{
style=filled;
color=gray75;
328[label="199.75.30.30s;170pkt 170fpkt", shape=rectangle, color=red];
4052[label="199.75.30.30;209pkt 209fpkt", shape=pentagon, color=darkviolet];
6236[label="199.75.30.30;209pkt 209fpkt", shape=invtriangle, color=brown];
7714[label="199.75.30.30;209pkt 209fpkt", shape=invhouse, color=bisque];
stat368[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.75.30.30:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
328--4052[label="0.994118;169pkt 169fpkt"];
328--6236[label="0.994118;169pkt 169fpkt"];
328--7714[label="0.994118;169pkt 169fpkt"];
4052--6236[label="1;209pkt 209fpkt"];
4052--7714[label="1;209pkt 209fpkt"];
6236--7714[label="1;209pkt 209fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.75.30.30" src_port="1029"/>
    </slice>
    <from sec="1036991318" usec="0"/>
    <to sec="1036991351" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_369{
style=filled;
color=gray75;
330[label="215.211.181.30s;52pkt 52fpkt", shape=rectangle, color=red];
4056[label="215.211.181.30;125pkt 125fpkt", shape=pentagon, color=darkviolet];
6239[label="215.211.181.30;125pkt 125fpkt", shape=invtriangle, color=brown];
7716[label="215.211.181.30;125pkt 125fpkt", shape=invhouse, color=bisque];
stat369[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.211.181.30:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
330--4056[label="1;52pkt 52fpkt"];
330--6239[label="1;52pkt 52fpkt"];
330--7716[label="1;52pkt 52fpkt"];
4056--6239[label="1;125pkt 125fpkt"];
4056--7716[label="1;125pkt 125fpkt"];
6239--7716[label="1;125pkt 125fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.211.181.30" src_port="1029"/>
    </slice>
    <from sec="1036991302" usec="0"/>
    <to sec="1036991322" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.10.112.32"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.119.135.32"/>
    </slice>
    <from sec="1036990802" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.225.140.32"/>
    </slice>
    <from sec="1036991202" usec="0"/>
    <to sec="1036991331" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.100.160.34"/>
    </slice>
    <from sec="1036990804" usec="0"/>
    <to sec="1036991516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_374{
style=filled;
color=gray75;
4086[label="219.66.162.34;281pkt 281fpkt", shape=pentagon, color=darkviolet];
stat374[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.66.162.34:53, *:*}[99.6441%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (57.6512%)&lt;BR/&gt; 32768: (1.77936%)&lt;BR/&gt; 1024: (1.42349%)&lt;BR/&gt; 32769: (0.711744%)&lt;BR/&gt; 50: (0.711744%)&gt;];
}
</description>
    <slice>
      <filter src_ip="219.66.162.34" src_port="53"/>
    </slice>
    <from sec="1036990802" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.54.41.35"/>
    </slice>
    <from sec="1036991085" usec="0"/>
    <to sec="1036991517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.109.140.35"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.27.224.35"/>
    </slice>
    <from sec="1036990806" usec="0"/>
    <to sec="1036991516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.36.234.35"/>
    </slice>
    <from sec="1036991056" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.100.133.36"/>
    </slice>
    <from sec="1036991130" usec="0"/>
    <to sec="1036991270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.99.171.36"/>
    </slice>
    <from sec="1036990802" usec="0"/>
    <to sec="1036991490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.137.26.37"/>
    </slice>
    <from sec="1036990836" usec="0"/>
    <to sec="1036991466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.226.68.37"/>
    </slice>
    <from sec="1036991129" usec="0"/>
    <to sec="1036991145" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676574,2.717,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_383{
style=filled;
color=gray75;
338[label="216.70.123.37s;78pkt 78fpkt", shape=rectangle, color=red];
4123[label="216.70.123.37;225pkt 225fpkt", shape=pentagon, color=darkviolet];
6289[label="216.70.123.37;226pkt 226fpkt", shape=invtriangle, color=brown];
stat383[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.70.123.37:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
338--4123[label="0.987179;77pkt 77fpkt"];
338--6289[label="1;78pkt 78fpkt"];
4123--6289[label="1;225pkt 225fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="216.70.123.37" src_port="1028"/>
    </slice>
    <from sec="1036991151" usec="0"/>
    <to sec="1036991186" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.119.179.37"/>
    </slice>
    <from sec="1036991432" usec="0"/>
    <to sec="1036991453" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.119.181.38"/>
    </slice>
    <from sec="1036990832" usec="0"/>
    <to sec="1036991504" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.176.168.40"/>
    </slice>
    <from sec="1036990864" usec="0"/>
    <to sec="1036991437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.158.176.40"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.82794,2.78247,002,1 1 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_389{
style=filled;
color=gray75;
45[label="212.126.9.41s;255pkt 255fpkt", shape=rectangle, color=red];
678[label="212.126.9.41s;237pkt 237fpkt", shape=ellipse, color=green];
4163[label="212.126.9.41;254pkt 254fpkt", shape=pentagon, color=darkviolet];
6319[label="212.126.9.41;255pkt 255fpkt", shape=invtriangle, color=brown];
7752[label="212.126.9.41;255pkt 255fpkt", shape=invhouse, color=bisque];
stat389[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.126.9.41:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
45--678[label="1;237pkt 237fpkt"];
45--4163[label="1;254pkt 254fpkt"];
45--6319[label="1;255pkt 255fpkt"];
45--7752[label="1;255pkt 255fpkt"];
678--4163[label="0.995781;236pkt 236fpkt"];
678--6319[label="1;237pkt 237fpkt"];
678--7752[label="1;237pkt 237fpkt"];
4163--6319[label="1;254pkt 254fpkt"];
4163--7752[label="1;254pkt 254fpkt"];
6319--7752[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="212.126.9.41" src_port="1026"/>
    </slice>
    <from sec="1036991074" usec="0"/>
    <to sec="1036991088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.64.187.41"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="175.177.201.41"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.209.249.41"/>
    </slice>
    <from sec="1036990803" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12548,2.73159,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_393{
style=filled;
color=gray75;
1696[label="219.208.24.42;s;189pkt 189fpkt", shape=diamond, color=yellow];
2964[label="219.208.24.42;s;107pkt 107fpkt", shape=hexagon, color=black];
4172[label="219.208.24.42;231pkt 231fpkt", shape=pentagon, color=darkviolet];
stat393[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.208.24.42:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 1083: (1.13852%)&lt;BR/&gt; 1084: (0.759013%)&lt;BR/&gt; 1510: (0.56926%)&lt;BR/&gt; 1461: (0.474383%)&gt;];
}
1696--2964[label="1;107pkt 107fpkt"];
1696--4172[label="0.994709;188pkt 188fpkt"];
2964--4172[label="0.990654;106pkt 106fpkt"];
</description>
    <slice>
      <filter src_ip="219.208.24.42" src_port="53"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.3.231.42"/>
    </slice>
    <from sec="1036990991" usec="0"/>
    <to sec="1036991401" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.21.159.43"/>
    </slice>
    <from sec="1036991125" usec="0"/>
    <to sec="1036991206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.44.192.43"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.172.145.45"/>
    </slice>
    <from sec="1036990917" usec="0"/>
    <to sec="1036991336" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.79.168.46"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.161.136.47"/>
    </slice>
    <from sec="1036990975" usec="0"/>
    <to sec="1036991512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.88.93.48"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.85.36.49"/>
    </slice>
    <from sec="1036991152" usec="0"/>
    <to sec="1036991235" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.136.62.49"/>
    </slice>
    <from sec="1036991118" usec="0"/>
    <to sec="1036991150" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21992,2.70982,002,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_403{
style=filled;
color=gray75;
614[label="199.162.76.49s;619pkt 619fpkt", shape=rectangle, color=red];
1853[label="199.162.76.49;s;630pkt 630fpkt", shape=diamond, color=yellow];
3047[label="199.162.76.49;s;630pkt 630fpkt", shape=hexagon, color=black];
4239[label="199.162.76.49;630pkt 630fpkt", shape=pentagon, color=darkviolet];
stat403[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.162.76.49:*, *:137}[98.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (49.4619%)&lt;BR/&gt; 139: (0.538063%)&lt;BR/&gt; 65534: (0.079713%)&lt;BR/&gt; 65509: (0.079713%)&lt;BR/&gt; 65484: (0.079713%)&gt;];
}
614--671[label="0.0113086;7pkt 7fpkt"];
614--672[label="0.0969305;60pkt 60fpkt"];
614--715[label="0.127625;79pkt 79fpkt"];
614--772[label="0.127625;79pkt 79fpkt"];
614--1853[label="1;619pkt 619fpkt"];
614--3047[label="1;619pkt 619fpkt"];
614--4239[label="1;619pkt 619fpkt"];
1853--3047[label="1;630pkt 630fpkt"];
1853--4239[label="1;630pkt 630fpkt"];
3047--4239[label="1;630pkt 630fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.162.76.49"/>
    </slice>
    <from sec="1036991012" usec="0"/>
    <to sec="1036991112" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.102.1.50"/>
    </slice>
    <from sec="1036990803" usec="0"/>
    <to sec="1036991512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.40.212.50"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.85.36.52"/>
    </slice>
    <from sec="1036991313" usec="0"/>
    <to sec="1036991351" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.96.106.52"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.202.126.52"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676574,2.717,503,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_409{
style=filled;
color=gray75;
659[label="214.232.151.52s;1pkt 1fpkt", shape=rectangle, color=red];
4273[label="214.232.151.52;15pkt 15fpkt", shape=pentagon, color=darkviolet];
6400[label="214.232.151.52;15pkt 15fpkt", shape=invtriangle, color=brown];
stat409[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.232.151.52:80, 175.177.61.206:*}[80%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.5484%)&lt;BR/&gt; 110: (6.45161%)&lt;BR/&gt; 1157: (4.83871%)&lt;BR/&gt; 2677: (3.22581%)&lt;BR/&gt; 1184: (3.22581%)&gt;];
}
659--4273[label="1;1pkt 1fpkt"];
659--6400[label="1;1pkt 1fpkt"];
4273--6400[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="175.177.61.206" src_ip="214.232.151.52" src_port="80"/>
    </slice>
    <from sec="1036990852" usec="0"/>
    <to sec="1036991458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.186.44.54"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.156.92.54"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.238.198.54"/>
    </slice>
    <from sec="1036991405" usec="0"/>
    <to sec="1036991433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.46.141.55"/>
    </slice>
    <from sec="1036991241" usec="0"/>
    <to sec="1036991281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.189.150.55"/>
    </slice>
    <from sec="1036990816" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23582,2.68221,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_415{
style=filled;
color=gray75;
2470[label="148.242.136.212;d;22pkt 22fpkt", shape=diamond, color=yellow];
3454[label="148.242.136.212;d;22pkt 22fpkt", shape=hexagon, color=black];
4312[label="9.68.182.55;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6427[label="9.68.182.55;7pkt 7fpkt", shape=invtriangle, color=brown];
7816[label="9.68.182.55;8pkt 8fpkt", shape=invhouse, color=bisque];
stat415[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.68.182.55:80, 148.242.136.212:*}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1970: (3.78788%)&lt;BR/&gt; 1969: (3.78788%)&lt;BR/&gt; 1968: (3.78788%)&lt;BR/&gt; 1967: (3.78788%)&gt;];
}
2470--3454[label="1;22pkt 22fpkt"];
2470--4312[label="1;7pkt 7fpkt"];
2470--6427[label="1;7pkt 7fpkt"];
2470--7816[label="1;8pkt 8fpkt"];
3454--4312[label="1;7pkt 7fpkt"];
3454--6427[label="1;7pkt 7fpkt"];
3454--7816[label="1;8pkt 8fpkt"];
4312--6427[label="1;7pkt 7fpkt"];
4312--7816[label="1;7pkt 7fpkt"];
6427--7816[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="148.242.136.212" src_ip="9.68.182.55" src_port="80"/>
    </slice>
    <from sec="1036991026" usec="0"/>
    <to sec="1036991325" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_416{
style=filled;
color=gray75;
360[label="199.18.150.56s;139pkt 139fpkt", shape=rectangle, color=red];
4318[label="199.18.150.56;179pkt 179fpkt", shape=pentagon, color=darkviolet];
6431[label="199.18.150.56;178pkt 178fpkt", shape=invtriangle, color=brown];
7817[label="199.18.150.56;178pkt 178fpkt", shape=invhouse, color=bisque];
stat416[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.18.150.56:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
360--4318[label="1;139pkt 139fpkt"];
360--6431[label="0.992806;138pkt 138fpkt"];
360--7817[label="0.992806;138pkt 138fpkt"];
4318--6431[label="1;178pkt 178fpkt"];
4318--7817[label="1;178pkt 178fpkt"];
6431--7817[label="1;178pkt 178fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.18.150.56" src_port="1027"/>
    </slice>
    <from sec="1036991399" usec="0"/>
    <to sec="1036991429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.31.224.56"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.116.86.58"/>
    </slice>
    <from sec="1036990804" usec="0"/>
    <to sec="1036991308" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.218.105.59"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.242.193.59"/>
    </slice>
    <from sec="1036990843" usec="0"/>
    <to sec="1036991510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="131.64.90.62"/>
    </slice>
    <from sec="1036991076" usec="0"/>
    <to sec="1036991089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.161.136.62"/>
    </slice>
    <from sec="1036990827" usec="0"/>
    <to sec="1036991402" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.183.216.62"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.66.250.62"/>
    </slice>
    <from sec="1036990804" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.2.6.63"/>
    </slice>
    <from sec="1036990804" usec="0"/>
    <to sec="1036991517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.179.37.64"/>
    </slice>
    <from sec="1036991282" usec="0"/>
    <to sec="1036991517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_428{
style=filled;
color=gray75;
371[label="202.3.242.64s;105pkt 105fpkt", shape=rectangle, color=red];
4402[label="202.3.242.64;180pkt 180fpkt", shape=pentagon, color=darkviolet];
6486[label="202.3.242.64;180pkt 180fpkt", shape=invtriangle, color=brown];
7843[label="202.3.242.64;181pkt 181fpkt", shape=invhouse, color=bisque];
stat428[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.3.242.64:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
371--4402[label="0.990476;104pkt 104fpkt"];
371--6486[label="0.990476;104pkt 104fpkt"];
371--7843[label="1;105pkt 105fpkt"];
4402--6486[label="1;180pkt 180fpkt"];
4402--7843[label="1;180pkt 180fpkt"];
6486--7843[label="1;180pkt 180fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.3.242.64" src_port="1025"/>
    </slice>
    <from sec="1036991432" usec="0"/>
    <to sec="1036991463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23582,2.68221,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_429{
style=filled;
color=gray75;
1213[label="148.242.5.216;d;281pkt 281fpkt", shape=diamond, color=yellow];
1551[label="214.121.188.210;d;138pkt 138fpkt", shape=diamond, color=yellow];
1554[label="214.229.160.220;s;26pkt 26fpkt", shape=diamond, color=yellow];
1605[label="199.98.10.211;s;111pkt 111fpkt", shape=diamond, color=yellow];
1811[label="145.3.106.46;d;69pkt 69fpkt", shape=diamond, color=yellow];
2798[label="148.242.5.216;d;35pkt 35fpkt", shape=hexagon, color=black];
2887[label="199.98.10.211;s;107pkt 107fpkt", shape=hexagon, color=black];
3138[label="214.229.160.220;s;26pkt 26fpkt", shape=hexagon, color=black];
3437[label="214.121.188.210;d;137pkt 137fpkt", shape=hexagon, color=black];
4091[label="214.236.210.34;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4311[label="9.200.162.55;18pkt 18fpkt", shape=pentagon, color=darkviolet];
4326[label="9.226.119.57;41pkt 41fpkt", shape=pentagon, color=darkviolet];
4410[label="198.124.185.65;25pkt 25fpkt", shape=pentagon, color=darkviolet];
4471[label="198.142.3.72;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4888[label="202.4.129.120;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5657[label="199.98.10.211;110pkt 110fpkt", shape=pentagon, color=darkviolet];
6264[label="214.236.210.34;1pkt 1fpkt", shape=invtriangle, color=brown];
6426[label="9.200.162.55;18pkt 18fpkt", shape=invtriangle, color=brown];
6436[label="9.226.119.57;40pkt 40fpkt", shape=invtriangle, color=brown];
6533[label="198.142.3.72;10pkt 10fpkt", shape=invtriangle, color=brown];
6825[label="202.4.129.120;3pkt 3fpkt", shape=invtriangle, color=brown];
7815[label="9.200.162.55;14pkt 14fpkt", shape=invhouse, color=bisque];
7870[label="198.142.3.72;9pkt 9fpkt", shape=invhouse, color=bisque];
8043[label="202.4.129.120;3pkt 3fpkt", shape=invhouse, color=bisque];
stat429[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 148.242.5.216:*}[56.6462%]&lt;BR/&gt;{*:80, 214.121.188.210:*}[25.3579%]&lt;BR/&gt;{199.98.10.211:80, *:*}[22.6994%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.3706%)&lt;BR/&gt; 78: (0.930421%)&lt;BR/&gt; 554: (0.809061%)&lt;BR/&gt; 1050: (0.242718%)&lt;BR/&gt; 14194: (0.202265%)&gt;];
}
1213--1605[label="0.801802;89pkt 89fpkt"];
1213--1745[label="0.00355872;1pkt 1fpkt"];
1213--2798[label="1;35pkt 35fpkt"];
1213--2887[label="0.794393;85pkt 85fpkt"];
1213--4311[label="1;18pkt 18fpkt"];
1213--4326[label="1;41pkt 41fpkt"];
1213--4410[label="1;25pkt 25fpkt"];
1213--4471[label="0.5;5pkt 5fpkt"];
1213--5657[label="0.8;88pkt 88fpkt"];
1213--5994[label="0.00355872;1pkt 1fpkt"];
1213--6426[label="1;18pkt 18fpkt"];
1213--6436[label="1;40pkt 40fpkt"];
1213--6533[label="0.5;5pkt 5fpkt"];
1213--7598[label="0.00355872;1pkt 1fpkt"];
1213--7815[label="1;14pkt 14fpkt"];
1213--7870[label="0.444444;4pkt 4fpkt"];
1551--1554[label="1;26pkt 26fpkt"];
1551--3138[label="1;26pkt 26fpkt"];
1551--3437[label="1;137pkt 137fpkt"];
1551--4471[label="0.4;4pkt 4fpkt"];
1551--4888[label="1;3pkt 3fpkt"];
1551--6533[label="0.4;4pkt 4fpkt"];
1551--6825[label="1;3pkt 3fpkt"];
1551--7870[label="0.444444;4pkt 4fpkt"];
1551--8043[label="1;3pkt 3fpkt"];
1554--3138[label="1;26pkt 26fpkt"];
1554--3437[label="1;26pkt 26fpkt"];
1605--1811[label="0.318841;22pkt 22fpkt"];
1605--2887[label="1;107pkt 107fpkt"];
1605--5657[label="1;110pkt 110fpkt"];
1811--2887[label="0.318841;22pkt 22fpkt"];
1811--4091[label="1;1pkt 1fpkt"];
1811--5657[label="0.318841;22pkt 22fpkt"];
1811--6264[label="1;1pkt 1fpkt"];
2798--4311[label="0.111111;2pkt 2fpkt"];
2798--4471[label="0.5;5pkt 5fpkt"];
2798--6426[label="0.111111;2pkt 2fpkt"];
2798--6533[label="0.5;5pkt 5fpkt"];
2798--7815[label="0.142857;2pkt 2fpkt"];
2798--7870[label="0.444444;4pkt 4fpkt"];
2887--5657[label="0.990654;106pkt 106fpkt"];
3138--3437[label="1;26pkt 26fpkt"];
3437--4471[label="0.4;4pkt 4fpkt"];
3437--4888[label="1;3pkt 3fpkt"];
3437--6533[label="0.4;4pkt 4fpkt"];
3437--6825[label="1;3pkt 3fpkt"];
3437--7870[label="0.444444;4pkt 4fpkt"];
3437--8043[label="1;3pkt 3fpkt"];
4091--6264[label="1;1pkt 1fpkt"];
4311--6426[label="1;18pkt 18fpkt"];
4311--7815[label="1;14pkt 14fpkt"];
4326--6436[label="1;40pkt 40fpkt"];
4471--6533[label="1;10pkt 10fpkt"];
4471--7870[label="1;9pkt 9fpkt"];
4888--6825[label="1;3pkt 3fpkt"];
4888--8043[label="1;3pkt 3fpkt"];
6426--7815[label="1;14pkt 14fpkt"];
6533--7870[label="1;9pkt 9fpkt"];
6825--8043[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="199.98.10.211" src_port="80"/>
      <filter dst_ip="148.242.5.216" src_port="80"/>
      <filter dst_ip="214.121.188.210" src_port="80"/>
    </slice>
    <from sec="1036990808" usec="0"/>
    <to sec="1036991491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.122.98.66"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.100.186.67"/>
    </slice>
    <from sec="1036991336" usec="0"/>
    <to sec="1036991516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.161.136.68"/>
    </slice>
    <from sec="1036990810" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.100.161.68"/>
    </slice>
    <from sec="1036990851" usec="0"/>
    <to sec="1036991517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.25.42.69"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.242.135.69"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="165.163.171.69"/>
    </slice>
    <from sec="1036990811" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23582,2.68221,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_437{
style=filled;
color=gray75;
2371[label="9.35.178.70;s;4pkt 4fpkt", shape=diamond, color=yellow];
3519[label="9.35.178.70;s;4pkt 4fpkt", shape=hexagon, color=black];
4459[label="9.35.178.70;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6525[label="9.35.178.70;1pkt 1fpkt", shape=invtriangle, color=brown];
7862[label="9.35.178.70;1pkt 1fpkt", shape=invhouse, color=bisque];
stat437[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.35.178.70:6667, 168.100.160.77:4094}[25%]&lt;BR/&gt;{9.35.178.70:6667, 168.100.158.109:2982}[25%]&lt;BR/&gt;{9.35.178.70:6667, 168.100.181.120:1215}[25%]&lt;BR/&gt;{9.35.178.70:6667, 168.100.178.175:1147}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (50%)&lt;BR/&gt; 4094: (22.7273%)&lt;BR/&gt; 2982: (9.09091%)&lt;BR/&gt; 1215: (9.09091%)&lt;BR/&gt; 1147: (9.09091%)&gt;];
}
2371--3519[label="1;4pkt 4fpkt"];
2371--4459[label="1;1pkt 1fpkt"];
2371--6525[label="1;1pkt 1fpkt"];
2371--7862[label="1;1pkt 1fpkt"];
3519--4459[label="1;1pkt 1fpkt"];
3519--6525[label="1;1pkt 1fpkt"];
3519--7862[label="1;1pkt 1fpkt"];
4459--6525[label="1;1pkt 1fpkt"];
4459--7862[label="1;1pkt 1fpkt"];
6525--7862[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.100.178.175" dst_port="1147" src_ip="9.35.178.70" src_port="6667"/>
      <filter dst_ip="168.100.181.120" dst_port="1215" src_ip="9.35.178.70" src_port="6667"/>
      <filter dst_ip="168.100.158.109" dst_port="2982" src_ip="9.35.178.70" src_port="6667"/>
      <filter dst_ip="168.100.160.77" dst_port="4094" src_ip="9.35.178.70" src_port="6667"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.126.1.71"/>
    </slice>
    <from sec="1036991474" usec="0"/>
    <to sec="1036991513" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.139.29.71"/>
    </slice>
    <from sec="1036990809" usec="0"/>
    <to sec="1036991203" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.96.99.72"/>
    </slice>
    <from sec="1036990808" usec="0"/>
    <to sec="1036991513" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.247.168.74"/>
    </slice>
    <from sec="1036991464" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.641407,2.74633,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_442{
style=filled;
color=gray75;
391[label="200.112.42.75s;177pkt 177fpkt", shape=rectangle, color=red];
4508[label="200.112.42.75;207pkt 207fpkt", shape=pentagon, color=darkviolet];
stat442[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.112.42.75:32769, *:137}[75.5474%]&lt;BR/&gt;{199.247.66.75:1029, *:137}[24.4526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 32769: (41.276%)&lt;BR/&gt; 1029: (8.72396%)&gt;];
}
391--4508[label="0.621469;110pkt 110fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.112.42.75" src_port="32769"/>
      <filter dst_port="137" src_ip="199.247.66.75" src_port="1029"/>
    </slice>
    <from sec="1036991113" usec="0"/>
    <to sec="1036991146" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.641407,2.74633,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_443{
style=filled;
color=gray75;
392[label="199.63.219.75s;43pkt 43fpkt", shape=rectangle, color=red];
4512[label="199.63.219.75;256pkt 256fpkt", shape=pentagon, color=darkviolet];
stat443[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.63.219.75:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
392--4512[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.63.219.75" src_port="1028"/>
    </slice>
    <from sec="1036991286" usec="0"/>
    <to sec="1036991334" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.213.168.76"/>
    </slice>
    <from sec="1036990802" usec="0"/>
    <to sec="1036991514" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.109.85.78"/>
    </slice>
    <from sec="1036990903" usec="0"/>
    <to sec="1036991081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.249.106.78"/>
    </slice>
    <from sec="1036990824" usec="0"/>
    <to sec="1036991499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.208.208.80"/>
    </slice>
    <from sec="1036990806" usec="0"/>
    <to sec="1036991515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_448{
style=filled;
color=gray75;
397[label="9.211.34.81s;142pkt 142fpkt", shape=rectangle, color=red];
4548[label="9.211.34.81;227pkt 227fpkt", shape=pentagon, color=darkviolet];
6586[label="9.211.34.81;227pkt 227fpkt", shape=invtriangle, color=brown];
7905[label="9.211.34.81;213pkt 213fpkt", shape=invhouse, color=bisque];
stat448[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.211.34.81:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
397--4548[label="1;142pkt 142fpkt"];
397--6586[label="1;142pkt 142fpkt"];
397--7905[label="0.992958;141pkt 141fpkt"];
4548--6586[label="1;227pkt 227fpkt"];
4548--7905[label="1;213pkt 213fpkt"];
6586--7905[label="1;213pkt 213fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.211.34.81" src_port="1027"/>
    </slice>
    <from sec="1036991156" usec="0"/>
    <to sec="1036991191" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.213.36.82"/>
    </slice>
    <from sec="1036990820" usec="0"/>
    <to sec="1036991517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.20.48.82"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14589,2.70209,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_451{
style=filled;
color=gray75;
2481[label="133.213.105.198;d;84pkt 84fpkt", shape=diamond, color=yellow];
3460[label="133.213.105.198;d;80pkt 80fpkt", shape=hexagon, color=black];
4562[label="199.15.85.82;23pkt 23fpkt", shape=pentagon, color=darkviolet];
5755[label="9.67.13.220;30pkt 30fpkt", shape=pentagon, color=darkviolet];
6593[label="199.15.85.82;22pkt 22fpkt", shape=invtriangle, color=brown];
stat451[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.67.13.220:80, 133.213.105.198:*}[36.9048%]&lt;BR/&gt;{199.15.85.82:80, 133.213.105.198:*}[27.381%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1232: (0.83682%)&lt;BR/&gt; 1228: (0.83682%)&lt;BR/&gt; 1223: (0.83682%)&lt;BR/&gt; 1222: (0.83682%)&gt;];
}
2481--3460[label="1;80pkt 80fpkt"];
2481--4562[label="1;23pkt 23fpkt"];
2481--5755[label="1;30pkt 30fpkt"];
2481--6593[label="1;22pkt 22fpkt"];
3460--4562[label="1;23pkt 23fpkt"];
3460--5755[label="1;30pkt 30fpkt"];
3460--6593[label="1;22pkt 22fpkt"];
4562--6593[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="133.213.105.198" src_ip="9.67.13.220" src_port="80"/>
      <filter dst_ip="133.213.105.198" src_ip="199.15.85.82" src_port="80"/>
    </slice>
    <from sec="1036991093" usec="0"/>
    <to sec="1036991421" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.25.112.82"/>
    </slice>
    <from sec="1036990820" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.172.134.82"/>
    </slice>
    <from sec="1036990803" usec="0"/>
    <to sec="1036991472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="152.145.163.83"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.219.22.84"/>
    </slice>
    <from sec="1036990864" usec="0"/>
    <to sec="1036991514" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.194.134.84"/>
    </slice>
    <from sec="1036990811" usec="0"/>
    <to sec="1036991510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.9.39.86"/>
    </slice>
    <from sec="1036990811" usec="0"/>
    <to sec="1036991512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_458{
style=filled;
color=gray75;
402[label="48.209.59.86s;106pkt 106fpkt", shape=rectangle, color=red];
4600[label="48.209.59.86;106pkt 106fpkt", shape=pentagon, color=darkviolet];
6618[label="48.209.59.86;105pkt 105fpkt", shape=invtriangle, color=brown];
7925[label="48.209.59.86;106pkt 106fpkt", shape=invhouse, color=bisque];
stat458[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.209.59.86:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
402--4600[label="1;106pkt 106fpkt"];
402--6618[label="1;105pkt 105fpkt"];
402--7925[label="1;106pkt 106fpkt"];
4600--6618[label="1;105pkt 105fpkt"];
4600--7925[label="1;106pkt 106fpkt"];
6618--7925[label="1;105pkt 105fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="48.209.59.86" src_port="1028"/>
    </slice>
    <from sec="1036991312" usec="0"/>
    <to sec="1036991329" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.38.149.87"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676574,2.717,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_460{
style=filled;
color=gray75;
404[label="215.227.194.87s;42pkt 42fpkt", shape=rectangle, color=red];
4610[label="215.227.194.87;130pkt 130fpkt", shape=pentagon, color=darkviolet];
6626[label="215.227.194.87;130pkt 130fpkt", shape=invtriangle, color=brown];
stat460[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.227.194.87:1037, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1037: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
404--4610[label="1;42pkt 42fpkt"];
404--6626[label="1;42pkt 42fpkt"];
4610--6626[label="1;130pkt 130fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.227.194.87" src_port="1037"/>
    </slice>
    <from sec="1036991495" usec="0"/>
    <to sec="1036991516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="165.181.63.88"/>
    </slice>
    <from sec="1036990806" usec="0"/>
    <to sec="1036991517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.79.136.89"/>
    </slice>
    <from sec="1036991214" usec="0"/>
    <to sec="1036991232" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.100.161.89"/>
    </slice>
    <from sec="1036990805" usec="0"/>
    <to sec="1036991514" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.169.236.89"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.641407,2.74633,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_465{
style=filled;
color=gray75;
407[label="200.171.163.90s;72pkt 72fpkt", shape=rectangle, color=red];
4636[label="200.171.163.90;104pkt 104fpkt", shape=pentagon, color=darkviolet];
stat465[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.171.163.90:61828, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61828: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
407--4636[label="0.986111;71pkt 71fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.171.163.90" src_port="61828"/>
    </slice>
    <from sec="1036990973" usec="0"/>
    <to sec="1036990989" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.64.214.90"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.45.142.91"/>
    </slice>
    <from sec="1036990837" usec="0"/>
    <to sec="1036990843" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.194.170.91"/>
    </slice>
    <from sec="1036990806" usec="0"/>
    <to sec="1036991516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.121.73.93"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991342" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.192.255.93"/>
    </slice>
    <from sec="1036990814" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.641407,2.74633,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_471{
style=filled;
color=gray75;
409[label="9.65.90.94s;52pkt 52fpkt", shape=rectangle, color=red];
4665[label="9.65.90.94;133pkt 133fpkt", shape=pentagon, color=darkviolet];
stat471[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.65.90.94:1196, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1196: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
409--4665[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.65.90.94" src_port="1196"/>
    </slice>
    <from sec="1036991141" usec="0"/>
    <to sec="1036991162" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.165.96.94"/>
    </slice>
    <from sec="1036991073" usec="0"/>
    <to sec="1036991386" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.116.7.96"/>
    </slice>
    <from sec="1036991381" usec="0"/>
    <to sec="1036991440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.168.163.96"/>
    </slice>
    <from sec="1036991466" usec="0"/>
    <to sec="1036991499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_475{
style=filled;
color=gray75;
412[label="199.162.18.97s;47pkt 47fpkt", shape=rectangle, color=red];
4689[label="199.162.18.97;186pkt 186fpkt", shape=pentagon, color=darkviolet];
6685[label="199.162.18.97;186pkt 186fpkt", shape=invtriangle, color=brown];
7959[label="199.162.18.97;185pkt 185fpkt", shape=invhouse, color=bisque];
stat475[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.162.18.97:61525, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61525: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
412--4689[label="1;47pkt 47fpkt"];
412--6685[label="1;47pkt 47fpkt"];
412--7959[label="0.978723;46pkt 46fpkt"];
4689--6685[label="1;186pkt 186fpkt"];
4689--7959[label="1;185pkt 185fpkt"];
6685--7959[label="1;185pkt 185fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.162.18.97" src_port="61525"/>
    </slice>
    <from sec="1036991149" usec="0"/>
    <to sec="1036991178" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23582,2.68221,504,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_476{
style=filled;
color=gray75;
1593[label="145.3.125.97;s;152pkt 152fpkt", shape=diamond, color=yellow];
2005[label="150.194.72.148;d;152pkt 152fpkt", shape=diamond, color=yellow];
3025[label="145.3.125.97;s;152pkt 152fpkt", shape=hexagon, color=black];
4693[label="145.3.125.97;154pkt 154fpkt", shape=pentagon, color=darkviolet];
6689[label="145.3.125.97;154pkt 154fpkt", shape=invtriangle, color=brown];
7960[label="145.3.125.97;154pkt 154fpkt", shape=invhouse, color=bisque];
stat476[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.3.125.97:*, 150.194.72.148:443}[95.4839%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (47.8758%)&lt;BR/&gt; 80: (2.12418%)&lt;BR/&gt; 1445: (0.326797%)&lt;BR/&gt; 1444: (0.326797%)&lt;BR/&gt; 1443: (0.326797%)&gt;];
}
1593--2005[label="1;152pkt 152fpkt"];
1593--3025[label="1;152pkt 152fpkt"];
1593--4693[label="0.993421;151pkt 151fpkt"];
1593--6689[label="0.993421;151pkt 151fpkt"];
1593--7960[label="0.993421;151pkt 151fpkt"];
2005--3025[label="1;152pkt 152fpkt"];
2005--4693[label="0.993421;151pkt 151fpkt"];
2005--6689[label="0.993421;151pkt 151fpkt"];
2005--7960[label="0.993421;151pkt 151fpkt"];
3025--4693[label="0.993421;151pkt 151fpkt"];
3025--6689[label="0.993421;151pkt 151fpkt"];
3025--7960[label="0.993421;151pkt 151fpkt"];
4693--6689[label="1;154pkt 154fpkt"];
4693--7960[label="1;154pkt 154fpkt"];
6689--7960[label="1;154pkt 154fpkt"];
</description>
    <slice>
      <filter dst_ip="150.194.72.148" dst_port="443" src_ip="145.3.125.97"/>
    </slice>
    <from sec="1036990861" usec="0"/>
    <to sec="1036991499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.1.226.98"/>
    </slice>
    <from sec="1036991135" usec="0"/>
    <to sec="1036991160" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.143.34.99"/>
    </slice>
    <from sec="1036990957" usec="0"/>
    <to sec="1036990982" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.65.116.99"/>
    </slice>
    <from sec="1036991315" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.161.166.99"/>
    </slice>
    <from sec="1036990846" usec="0"/>
    <to sec="1036990889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,503,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_481{
style=filled;
color=gray75;
660[label="145.208.134.100s;8pkt 8fpkt", shape=rectangle, color=red];
4721[label="145.208.134.100;35pkt 35fpkt", shape=pentagon, color=darkviolet];
6708[label="145.208.134.100;35pkt 35fpkt", shape=invtriangle, color=brown];
7972[label="145.208.134.100;34pkt 34fpkt", shape=invhouse, color=bisque];
stat481[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.134.100:*, 217.19.95.28:80}[77.1429%]&lt;BR/&gt;{145.208.134.100:*, 216.21.217.80:80}[22.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1193: (1.78571%)&lt;BR/&gt; 1192: (1.78571%)&lt;BR/&gt; 1190: (1.78571%)&lt;BR/&gt; 1189: (1.78571%)&gt;];
}
660--4721[label="1;8pkt 8fpkt"];
660--6708[label="1;8pkt 8fpkt"];
660--7972[label="1;8pkt 8fpkt"];
4721--6708[label="1;35pkt 35fpkt"];
4721--7972[label="1;34pkt 34fpkt"];
6708--7972[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="217.19.95.28" dst_port="80" src_ip="145.208.134.100"/>
      <filter dst_ip="216.21.217.80" dst_port="80" src_ip="145.208.134.100"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036990885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.57.198.100"/>
    </slice>
    <from sec="1036990813" usec="0"/>
    <to sec="1036991494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,503,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_483{
style=filled;
color=gray75;
250[label="148.242.165.101s;15pkt 15fpkt", shape=rectangle, color=red];
4731[label="148.242.165.101;47pkt 47fpkt", shape=pentagon, color=darkviolet];
6716[label="148.242.165.101;48pkt 48fpkt", shape=invtriangle, color=brown];
7976[label="148.242.165.101;47pkt 47fpkt", shape=invhouse, color=bisque];
stat483[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.242.165.101:*, 149.77.7.103:80}[33.3333%]&lt;BR/&gt;{148.242.165.101:*, 78.123.35.35:80}[29.1667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.0446%)&lt;BR/&gt; 1945: (1.27389%)&lt;BR/&gt; 1944: (1.27389%)&lt;BR/&gt; 1943: (1.27389%)&lt;BR/&gt; 1942: (1.27389%)&gt;];
}
250--2467[label="1;15pkt 15fpkt"];
250--4731[label="0.933333;14pkt 14fpkt"];
250--6716[label="1;15pkt 15fpkt"];
250--7976[label="0.933333;14pkt 14fpkt"];
4731--6716[label="1;47pkt 47fpkt"];
4731--7976[label="1;47pkt 47fpkt"];
6716--7976[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_ip="149.77.7.103" dst_port="80" src_ip="148.242.165.101"/>
      <filter dst_ip="78.123.35.35" dst_port="80" src_ip="148.242.165.101"/>
    </slice>
    <from sec="1036990945" usec="0"/>
    <to sec="1036991409" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.197.150.102"/>
    </slice>
    <from sec="1036991218" usec="0"/>
    <to sec="1036991267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.181.18.103"/>
    </slice>
    <from sec="1036990999" usec="0"/>
    <to sec="1036991278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_486{
style=filled;
color=gray75;
420[label="48.77.98.103s;42pkt 42fpkt", shape=rectangle, color=red];
4743[label="48.77.98.103;115pkt 115fpkt", shape=pentagon, color=darkviolet];
6722[label="48.77.98.103;114pkt 114fpkt", shape=invtriangle, color=brown];
7980[label="48.77.98.103;115pkt 115fpkt", shape=invhouse, color=bisque];
stat486[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.77.98.103:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
420--4743[label="1;42pkt 42fpkt"];
420--6722[label="1;42pkt 42fpkt"];
420--7980[label="1;42pkt 42fpkt"];
4743--6722[label="1;114pkt 114fpkt"];
4743--7980[label="1;115pkt 115fpkt"];
6722--7980[label="1;114pkt 114fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="48.77.98.103" src_port="1026"/>
    </slice>
    <from sec="1036990949" usec="0"/>
    <to sec="1036990969" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676574,2.717,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_487{
style=filled;
color=gray75;
422[label="76.212.158.104s;30pkt 30fpkt", shape=rectangle, color=red];
4755[label="76.212.158.104;119pkt 119fpkt", shape=pentagon, color=darkviolet];
6730[label="76.212.158.104;119pkt 119fpkt", shape=invtriangle, color=brown];
stat487[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.212.158.104:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
422--4755[label="1;30pkt 30fpkt"];
422--6730[label="1;30pkt 30fpkt"];
4755--6730[label="1;119pkt 119fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="76.212.158.104" src_port="1025"/>
    </slice>
    <from sec="1036990973" usec="0"/>
    <to sec="1036990995" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.213.164.104"/>
    </slice>
    <from sec="1036990811" usec="0"/>
    <to sec="1036991515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.181.0.106"/>
    </slice>
    <from sec="1036991147" usec="0"/>
    <to sec="1036991478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.33.78.106"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.100.0.107"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.100.160.108"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676574,2.717,503,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_494{
style=filled;
color=gray75;
251[label="148.242.144.109s;2pkt 2fpkt", shape=rectangle, color=red];
4795[label="148.242.144.109;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6762[label="148.242.144.109;2pkt 2fpkt", shape=invtriangle, color=brown];
stat494[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.242.144.109:2817, 216.74.112.131:80}[33.3333%]&lt;BR/&gt;{148.242.144.109:2818, 216.74.112.131:80}[33.3333%]&lt;BR/&gt;{148.242.144.109:2819, 216.74.112.131:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2818: (25%)&lt;BR/&gt; 2819: (16.6667%)&lt;BR/&gt; 2817: (8.33333%)&gt;];
}
251--4795[label="0.5;1pkt 1fpkt"];
251--6762[label="0.5;1pkt 1fpkt"];
4795--6762[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="216.74.112.131" dst_port="80" src_ip="148.242.144.109" src_port="2819"/>
      <filter dst_ip="216.74.112.131" dst_port="80" src_ip="148.242.144.109" src_port="2818"/>
      <filter dst_ip="216.74.112.131" dst_port="80" src_ip="148.242.144.109" src_port="2817"/>
    </slice>
    <from sec="1036990822" usec="0"/>
    <to sec="1036990852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.101.12.110"/>
    </slice>
    <from sec="1036990837" usec="0"/>
    <to sec="1036991517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.213.113.110"/>
    </slice>
    <from sec="1036991102" usec="0"/>
    <to sec="1036991125" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676574,2.717,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_498{
style=filled;
color=gray75;
432[label="199.63.158.110s;119pkt 119fpkt", shape=rectangle, color=red];
4803[label="199.63.158.110;233pkt 233fpkt", shape=pentagon, color=darkviolet];
6768[label="199.63.158.110;234pkt 234fpkt", shape=invtriangle, color=brown];
stat498[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.63.158.110:1043, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1043: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
432--4803[label="0.991597;118pkt 118fpkt"];
432--6768[label="1;119pkt 119fpkt"];
4803--6768[label="1;233pkt 233fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.63.158.110" src_port="1043"/>
    </slice>
    <from sec="1036990882" usec="0"/>
    <to sec="1036990918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.16.70.111"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.208.133.111"/>
    </slice>
    <from sec="1036990817" usec="0"/>
    <to sec="1036991517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.174.214.111"/>
    </slice>
    <from sec="1036991267" usec="0"/>
    <to sec="1036991283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32241,2.66004,503,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_502{
style=filled;
color=gray75;
29[label="148.242.197.29s;2pkt 2fpkt", shape=rectangle, color=red];
34[label="208.109.140.35s;2pkt 2fpkt", shape=rectangle, color=red];
35[label="9.254.214.35s;3pkt 3fpkt", shape=rectangle, color=red];
49[label="76.172.145.45s;1pkt 1fpkt", shape=rectangle, color=red];
187[label="148.242.163.28d;1pkt 1fpkt", shape=rectangle, color=red];
197[label="148.242.92.64d;2pkt 2fpkt", shape=rectangle, color=red];
1041[label="78.138.205.59;d;1pkt 1fpkt", shape=diamond, color=yellow];
1227[label="148.242.163.28;d;20pkt 20fpkt", shape=diamond, color=yellow];
1246[label="9.254.214.35;s;9pkt 9fpkt", shape=diamond, color=yellow];
1254[label="214.142.98.76;d;644pkt 644fpkt", shape=diamond, color=yellow];
1256[label="208.109.82.223;s;1pkt 1fpkt", shape=diamond, color=yellow];
1365[label="148.242.192.35;s;1pkt 1fpkt", shape=diamond, color=yellow];
1388[label="208.109.140.35;s;1pkt 1fpkt", shape=diamond, color=yellow];
1557[label="133.213.1.4;d;5pkt 5fpkt", shape=diamond, color=yellow];
1622[label="210.131.13.89;s;2pkt 2fpkt", shape=diamond, color=yellow];
1706[label="9.51.89.184;s;1pkt 1fpkt", shape=diamond, color=yellow];
1826[label="201.75.67.213;s;357pkt 357fpkt", shape=diamond, color=yellow];
1838[label="175.177.196.147;d;7pkt 7fpkt", shape=diamond, color=yellow];
2023[label="76.172.145.45;s;1pkt 1fpkt", shape=diamond, color=yellow];
2248[label="148.242.197.29;s;12pkt 12fpkt", shape=diamond, color=yellow];
2263[label="201.75.67.212;s;6pkt 6fpkt", shape=diamond, color=yellow];
2498[label="148.242.92.64;d;93pkt 93fpkt", shape=diamond, color=yellow];
2528[label="133.213.96.18;d;41pkt 41fpkt", shape=diamond, color=yellow];
2606[label="209.194.162.52;s;77pkt 77fpkt", shape=diamond, color=yellow];
2807[label="9.254.214.35;s;9pkt 9fpkt", shape=hexagon, color=black];
2973[label="9.51.89.184;s;1pkt 1fpkt", shape=hexagon, color=black];
3040[label="175.177.196.147;d;7pkt 7fpkt", shape=hexagon, color=black];
3229[label="208.109.140.35;s;1pkt 1fpkt", shape=hexagon, color=black];
3341[label="76.172.145.45;s;1pkt 1fpkt", shape=hexagon, color=black];
3471[label="208.109.82.223;s;1pkt 1fpkt", shape=hexagon, color=black];
3801[label="208.109.173.5;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3914[label="76.161.136.15;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4075[label="9.177.40.33;19pkt 19fpkt", shape=pentagon, color=darkviolet];
4210[label="76.161.136.45;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4336[label="76.161.137.58;11pkt 11fpkt", shape=pentagon, color=darkviolet];
4602[label="209.2.164.86;31pkt 31fpkt", shape=pentagon, color=darkviolet];
4619[label="210.131.13.89;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5212[label="210.169.59.157;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5220[label="201.78.20.158;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5276[label="197.186.183.163;25pkt 25fpkt", shape=pentagon, color=darkviolet];
5671[label="201.75.67.212;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5784[label="201.78.105.224;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5863[label="76.161.136.232;13pkt 13fpkt", shape=pentagon, color=darkviolet];
5981[label="201.78.105.248;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6271[label="208.109.140.35;1pkt 1fpkt", shape=invtriangle, color=brown];
6349[label="76.161.136.45;3pkt 3fpkt", shape=invtriangle, color=brown];
6442[label="76.161.137.58;10pkt 10fpkt", shape=invtriangle, color=brown];
6620[label="209.2.164.86;31pkt 31fpkt", shape=invtriangle, color=brown];
6633[label="210.131.13.89;2pkt 2fpkt", shape=invtriangle, color=brown];
7055[label="210.169.59.157;2pkt 2fpkt", shape=invtriangle, color=brown];
7097[label="197.186.183.163;25pkt 25fpkt", shape=invtriangle, color=brown];
7229[label="9.51.89.184;1pkt 1fpkt", shape=invtriangle, color=brown];
7378[label="201.75.67.212;6pkt 6fpkt", shape=invtriangle, color=brown];
7445[label="201.78.105.224;3pkt 3fpkt", shape=invtriangle, color=brown];
7589[label="201.78.105.248;6pkt 6fpkt", shape=invtriangle, color=brown];
7769[label="76.161.136.45;3pkt 3fpkt", shape=invhouse, color=bisque];
8188[label="197.186.183.163;25pkt 25fpkt", shape=invhouse, color=bisque];
8343[label="201.75.67.212;6pkt 6fpkt", shape=invhouse, color=bisque];
8383[label="201.78.105.224;2pkt 2fpkt", shape=invhouse, color=bisque];
stat502[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.75.67.213:80, *:*}[32.6624%]&lt;BR/&gt;{*:80, 214.142.98.76:*}[28.9113%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (34.1736%)&lt;BR/&gt; 53: (6.3178%)&lt;BR/&gt; 1863: (5.32865%)&lt;BR/&gt; 5190: (1.46777%)&lt;BR/&gt; 123: (0.765795%)&gt;];
}
29--197[label="0.5;1pkt 1fpkt"];
29--2248[label="1;2pkt 2fpkt"];
34--1041[label="1;1pkt 1fpkt"];
34--1254[label="0.5;1pkt 1fpkt"];
34--1365[label="1;1pkt 1fpkt"];
34--1388[label="1;1pkt 1fpkt"];
34--3229[label="1;1pkt 1fpkt"];
34--6271[label="1;1pkt 1fpkt"];
35--187[label="1;1pkt 1fpkt"];
35--1227[label="0.666667;2pkt 2fpkt"];
35--1246[label="0.666667;2pkt 2fpkt"];
35--2807[label="0.666667;2pkt 2fpkt"];
49--1254[label="1;1pkt 1fpkt"];
49--2023[label="1;1pkt 1fpkt"];
49--3341[label="1;1pkt 1fpkt"];
197--2248[label="0.5;1pkt 1fpkt"];
197--2263[label="0.5;1pkt 1fpkt"];
197--2498[label="0.5;1pkt 1fpkt"];
197--5671[label="0.5;1pkt 1fpkt"];
197--7378[label="0.5;1pkt 1fpkt"];
197--8343[label="0.5;1pkt 1fpkt"];
1041--1365[label="1;1pkt 1fpkt"];
1227--1246[label="1;9pkt 9fpkt"];
1227--2606[label="0.1;2pkt 2fpkt"];
1227--2807[label="1;9pkt 9fpkt"];
1227--5087[label="0.1;2pkt 2fpkt"];
1227--6974[label="0.1;2pkt 2fpkt"];
1246--2807[label="1;9pkt 9fpkt"];
1254--1256[label="1;1pkt 1fpkt"];
1254--1388[label="1;1pkt 1fpkt"];
1254--1706[label="1;1pkt 1fpkt"];
1254--1826[label="0.257703;92pkt 92fpkt"];
1254--1834[label="0.00776398;5pkt 5fpkt"];
1254--2023[label="1;1pkt 1fpkt"];
1254--2024[label="0.0352941;3pkt 3fpkt"];
1254--2093[label="0.0487805;6pkt 6fpkt"];
1254--2095[label="0.00719424;1pkt 1fpkt"];
1254--2165[label="0.0164835;3pkt 3fpkt"];
1254--2181[label="0.0192308;1pkt 1fpkt"];
1254--2201[label="0.37931;22pkt 22fpkt"];
1254--2606[label="0.0779221;6pkt 6fpkt"];
1254--2615[label="0.0294118;2pkt 2fpkt"];
1254--2619[label="0.162162;6pkt 6fpkt"];
1254--2973[label="1;1pkt 1fpkt"];
1254--3063[label="0.00465839;3pkt 3fpkt"];
1254--3178[label="0.0347826;4pkt 4fpkt"];
1254--3229[label="1;1pkt 1fpkt"];
1254--3251[label="0.00843882;2pkt 2fpkt"];
1254--3284[label="0.0175439;3pkt 3fpkt"];
1254--3312[label="0.37931;22pkt 22fpkt"];
1254--3341[label="1;1pkt 1fpkt"];
1254--3342[label="0.0461538;3pkt 3fpkt"];
1254--3471[label="1;1pkt 1fpkt"];
1254--3549[label="0.0294118;2pkt 2fpkt"];
1254--3654[label="0.0449438;4pkt 4fpkt"];
1254--3697[label="0.37931;22pkt 22fpkt"];
1254--3801[label="0.5;1pkt 1fpkt"];
1254--3834[label="0.027027;1pkt 1fpkt"];
1254--3914[label="0.166667;1pkt 1fpkt"];
1254--3962[label="0.171429;6pkt 6fpkt"];
1254--3964[label="0.025;1pkt 1fpkt"];
1254--3972[label="0.139535;6pkt 6fpkt"];
1254--3990[label="0.00735294;1pkt 1fpkt"];
1254--4015[label="0.0309278;3pkt 3fpkt"];
1254--4061[label="0.5;1pkt 1fpkt"];
1254--4075[label="0.947368;18pkt 18fpkt"];
1254--4155[label="0.28125;9pkt 9fpkt"];
1254--4210[label="0.5;2pkt 2fpkt"];
1254--4232[label="0.0689655;2pkt 2fpkt"];
1254--4336[label="0.0909091;1pkt 1fpkt"];
1254--4369[label="0.37931;22pkt 22fpkt"];
1254--4400[label="0.0769231;2pkt 2fpkt"];
1254--4468[label="0.027027;1pkt 1fpkt"];
1254--4602[label="0.0322581;1pkt 1fpkt"];
1254--4737[label="0.048;6pkt 6fpkt"];
1254--4819[label="0.037037;2pkt 2fpkt"];
1254--4989[label="0.0363636;2pkt 2fpkt"];
1254--5044[label="0.025;1pkt 1fpkt"];
1254--5054[label="0.0266667;2pkt 2fpkt"];
1254--5070[label="0.0294118;1pkt 1fpkt"];
1254--5144[label="0.0120482;1pkt 1fpkt"];
1254--5181[label="0.105263;4pkt 4fpkt"];
1254--5204[label="0.012987;1pkt 1fpkt"];
1254--5212[label="1;1pkt 1fpkt"];
1254--5220[label="0.333333;1pkt 1fpkt"];
1254--5221[label="0.010101;1pkt 1fpkt"];
1254--5276[label="1;25pkt 25fpkt"];
1254--5405[label="0.0266667;2pkt 2fpkt"];
1254--5408[label="0.0416667;1pkt 1fpkt"];
1254--5466[label="0.0285714;1pkt 1fpkt"];
1254--5499[label="0.0238095;1pkt 1fpkt"];
1254--5609[label="0.0169492;1pkt 1fpkt"];
1254--5734[label="0.8;4pkt 4fpkt"];
1254--5756[label="0.0172414;1pkt 1fpkt"];
1254--5765[label="0.02;1pkt 1fpkt"];
1254--5784[label="0.333333;1pkt 1fpkt"];
1254--5844[label="0.03125;1pkt 1fpkt"];
1254--5857[label="0.0416667;2pkt 2fpkt"];
1254--5863[label="0.0769231;1pkt 1fpkt"];
1254--5924[label="0.205882;14pkt 14fpkt"];
1254--5974[label="0.125;3pkt 3fpkt"];
1254--5978[label="0.00621118;4pkt 4fpkt"];
1254--5981[label="0.166667;1pkt 1fpkt"];
1254--5990[label="0.0882353;3pkt 3fpkt"];
1254--6094[label="0.027027;1pkt 1fpkt"];
1254--6172[label="0.171429;6pkt 6fpkt"];
1254--6174[label="0.025;1pkt 1fpkt"];
1254--6209[label="0.03125;3pkt 3fpkt"];
1254--6271[label="1;1pkt 1fpkt"];
1254--6312[label="0.272727;9pkt 9fpkt"];
1254--6349[label="0.333333;1pkt 1fpkt"];
1254--6442[label="0.1;1pkt 1fpkt"];
1254--6464[label="0.37931;22pkt 22fpkt"];
1254--6530[label="0.027027;1pkt 1fpkt"];
1254--6620[label="0.0322581;1pkt 1fpkt"];
1254--6720[label="0.047619;6pkt 6fpkt"];
1254--6779[label="0.0377358;2pkt 2fpkt"];
1254--6943[label="0.025641;1pkt 1fpkt"];
1254--6951[label="0.0135135;1pkt 1fpkt"];
1254--7010[label="0.0120482;1pkt 1fpkt"];
1254--7035[label="0.108108;4pkt 4fpkt"];
1254--7055[label="1;2pkt 2fpkt"];
1254--7062[label="0.010101;1pkt 1fpkt"];
1254--7097[label="1;25pkt 25fpkt"];
1254--7196[label="0.0266667;2pkt 2fpkt"];
1254--7199[label="0.0416667;1pkt 1fpkt"];
1254--7229[label="1;1pkt 1fpkt"];
1254--7239[label="0.0285714;1pkt 1fpkt"];
1254--7338[label="0.0166667;1pkt 1fpkt"];
1254--7412[label="0.8;4pkt 4fpkt"];
1254--7445[label="0.333333;1pkt 1fpkt"];
1254--7489[label="0.03125;1pkt 1fpkt"];
1254--7545[label="0.202899;14pkt 14fpkt"];
1254--7583[label="0.125;3pkt 3fpkt"];
1254--7586[label="0.00621118;4pkt 4fpkt"];
1254--7589[label="0.166667;1pkt 1fpkt"];
1254--7595[label="0.0882353;3pkt 3fpkt"];
1254--7769[label="0.333333;1pkt 1fpkt"];
1254--7832[label="0.372881;22pkt 22fpkt"];
1254--7867[label="0.027027;1pkt 1fpkt"];
1254--7979[label="0.047619;6pkt 6fpkt"];
1254--8100[label="0.0135135;1pkt 1fpkt"];
1254--8135[label="0.0121951;1pkt 1fpkt"];
1254--8167[label="0.010101;1pkt 1fpkt"];
1254--8188[label="1;25pkt 25fpkt"];
1254--8242[label="0.027027;2pkt 2fpkt"];
1254--8412[label="0.030303;1pkt 1fpkt"];
1254--8460[label="0.12;3pkt 3fpkt"];
1256--3471[label="1;1pkt 1fpkt"];
1388--3229[label="1;1pkt 1fpkt"];
1388--6271[label="1;1pkt 1fpkt"];
1557--1622[label="1;2pkt 2fpkt"];
1557--1905[label="0.2;1pkt 1fpkt"];
1557--2183[label="0.2;1pkt 1fpkt"];
1557--3431[label="0.2;1pkt 1fpkt"];
1557--4424[label="0.2;1pkt 1fpkt"];
1557--4619[label="1;2pkt 2fpkt"];
1557--6633[label="1;2pkt 2fpkt"];
1622--4619[label="1;2pkt 2fpkt"];
1622--6633[label="1;2pkt 2fpkt"];
1706--2973[label="1;1pkt 1fpkt"];
1706--7229[label="1;1pkt 1fpkt"];
1826--1838[label="1;7pkt 7fpkt"];
1826--2498[label="0.978495;91pkt 91fpkt"];
1826--2528[label="0.97561;40pkt 40fpkt"];
1826--2802[label="0.969231;63pkt 63fpkt"];
1826--3040[label="1;7pkt 7fpkt"];
1826--3059[label="0.0252101;9pkt 9fpkt"];
1826--3553[label="0.0869565;6pkt 6fpkt"];
1838--3040[label="1;7pkt 7fpkt"];
2023--3341[label="1;1pkt 1fpkt"];
2263--2498[label="0.333333;2pkt 2fpkt"];
2263--2528[label="0.166667;1pkt 1fpkt"];
2263--3059[label="0.166667;1pkt 1fpkt"];
2263--3553[label="0.166667;1pkt 1fpkt"];
2263--5671[label="1;5pkt 5fpkt"];
2263--7378[label="1;6pkt 6fpkt"];
2263--8343[label="1;6pkt 6fpkt"];
2498--5671[label="0.2;1pkt 1fpkt"];
2498--7378[label="0.333333;2pkt 2fpkt"];
2498--8343[label="0.333333;2pkt 2fpkt"];
2528--5671[label="0.2;1pkt 1fpkt"];
2528--7378[label="0.166667;1pkt 1fpkt"];
2528--8343[label="0.166667;1pkt 1fpkt"];
2606--2756[label="0.012987;1pkt 1fpkt"];
2606--2843[label="0.0519481;4pkt 4fpkt"];
2606--3191[label="0.0243902;1pkt 1fpkt"];
2606--3213[label="0.012987;1pkt 1fpkt"];
2606--3276[label="0.012987;1pkt 1fpkt"];
2606--3388[label="0.0649351;5pkt 5fpkt"];
2606--3485[label="0.025974;2pkt 2fpkt"];
2606--3642[label="0.0519481;4pkt 4fpkt"];
2973--7229[label="1;1pkt 1fpkt"];
3229--6271[label="1;1pkt 1fpkt"];
4210--6349[label="1;3pkt 3fpkt"];
4210--7769[label="1;3pkt 3fpkt"];
4336--6442[label="1;10pkt 10fpkt"];
4602--6620[label="1;31pkt 31fpkt"];
4619--6633[label="1;2pkt 2fpkt"];
5212--7055[label="1;1pkt 1fpkt"];
5276--7097[label="1;25pkt 25fpkt"];
5276--8188[label="1;25pkt 25fpkt"];
5671--7378[label="1;5pkt 5fpkt"];
5671--8343[label="1;5pkt 5fpkt"];
5784--7445[label="1;3pkt 3fpkt"];
5784--8383[label="1;2pkt 2fpkt"];
5981--7589[label="1;6pkt 6fpkt"];
6349--7769[label="1;3pkt 3fpkt"];
7097--8188[label="1;25pkt 25fpkt"];
7378--8343[label="1;6pkt 6fpkt"];
7445--8383[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="201.75.67.213" src_port="80"/>
      <filter dst_ip="214.142.98.76" src_port="80"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.242.205.112"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23582,2.68221,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_504{
style=filled;
color=gray75;
2027[label="148.242.1.113;s;4pkt 4fpkt", shape=diamond, color=yellow];
3343[label="148.242.1.113;s;4pkt 4fpkt", shape=hexagon, color=black];
4829[label="148.242.1.113;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6785[label="148.242.1.113;5pkt 5fpkt", shape=invtriangle, color=brown];
8016[label="148.242.1.113;5pkt 5fpkt", shape=invhouse, color=bisque];
stat504[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.242.1.113:0, 215.211.141.4:0}[20%]&lt;BR/&gt;{148.242.1.113:0, 202.104.68.6:0}[20%]&lt;BR/&gt;{148.242.1.113:0, 200.147.40.89:0}[20%]&lt;BR/&gt;{148.242.1.113:0, 218.233.1.155:0}[20%]&lt;BR/&gt;{148.242.1.113:0, 9.70.205.220:0}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2027--3343[label="1;4pkt 4fpkt"];
2027--4829[label="0.75;3pkt 3fpkt"];
2027--6785[label="1;4pkt 4fpkt"];
2027--8016[label="1;4pkt 4fpkt"];
3343--4829[label="0.75;3pkt 3fpkt"];
3343--6785[label="1;4pkt 4fpkt"];
3343--8016[label="1;4pkt 4fpkt"];
4829--6785[label="1;4pkt 4fpkt"];
4829--8016[label="1;4pkt 4fpkt"];
6785--8016[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="9.70.205.220" src_ip="148.242.1.113"/>
      <filter dst_ip="218.233.1.155" src_ip="148.242.1.113"/>
      <filter dst_ip="200.147.40.89" src_ip="148.242.1.113"/>
      <filter dst_ip="202.104.68.6" src_ip="148.242.1.113"/>
      <filter dst_ip="215.211.141.4" src_ip="148.242.1.113"/>
    </slice>
    <from sec="1036990932" usec="0"/>
    <to sec="1036991490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.120.128.114"/>
    </slice>
    <from sec="1036991063" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.132.84.116"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.169.165.117"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.156.220.117"/>
    </slice>
    <from sec="1036990821" usec="0"/>
    <to sec="1036991410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="165.150.197.120"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823917,2.71604,011,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_510{
style=filled;
color=gray75;
1263[label="76.161.190.122;s;4pkt 4fpkt", shape=diamond, color=yellow];
1264[label="145.208.132.61;d;11pkt 11fpkt", shape=diamond, color=yellow];
4908[label="76.161.190.122;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6844[label="76.161.190.122;4pkt 4fpkt", shape=invtriangle, color=brown];
stat510[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.161.186.185:25, 145.208.132.61:*}[45.4545%]&lt;BR/&gt;{76.161.190.122:25, 145.208.132.61:*}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (45.4545%)&lt;BR/&gt; 1036: (11.3636%)&lt;BR/&gt; 1035: (11.3636%)&lt;BR/&gt; 1034: (11.3636%)&lt;BR/&gt; 1038: (9.09091%)&gt;];
}
1263--1264[label="1;4pkt 4fpkt"];
1263--4908[label="1;3pkt 3fpkt"];
1263--6844[label="1;4pkt 4fpkt"];
1264--1851[label="1;1pkt 1fpkt"];
1264--3046[label="1;1pkt 1fpkt"];
1264--4908[label="1;3pkt 3fpkt"];
1264--6844[label="1;4pkt 4fpkt"];
4908--6844[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.132.61" src_ip="76.161.186.185" src_port="25"/>
      <filter dst_ip="145.208.132.61" src_ip="76.161.190.122" src_port="25"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.15.77.123"/>
    </slice>
    <from sec="1036991241" usec="0"/>
    <to sec="1036991279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.137.181.123"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.174.119.124"/>
    </slice>
    <from sec="1036990888" usec="0"/>
    <to sec="1036991041" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.16.164.125"/>
    </slice>
    <from sec="1036991419" usec="0"/>
    <to sec="1036991460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.121.168.128"/>
    </slice>
    <from sec="1036990812" usec="0"/>
    <to sec="1036991513" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.133.144.129"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.5.95.130"/>
    </slice>
    <from sec="1036990888" usec="0"/>
    <to sec="1036990904" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.44.70.131"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.232.85.131"/>
    </slice>
    <from sec="1036990909" usec="0"/>
    <to sec="1036991067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.16.223.131"/>
    </slice>
    <from sec="1036990944" usec="0"/>
    <to sec="1036990962" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.72.12.134"/>
    </slice>
    <from sec="1036990805" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676574,2.717,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_522{
style=filled;
color=gray75;
461[label="9.229.8.135s;46pkt 46fpkt", shape=rectangle, color=red];
5011[label="9.229.8.135;206pkt 206fpkt", shape=pentagon, color=darkviolet];
6916[label="9.229.8.135;207pkt 207fpkt", shape=invtriangle, color=brown];
stat522[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.229.8.135:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
461--5011[label="0.978261;45pkt 45fpkt"];
461--6916[label="1;46pkt 46fpkt"];
5011--6916[label="1;206pkt 206fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.229.8.135" src_port="1030"/>
    </slice>
    <from sec="1036991339" usec="0"/>
    <to sec="1036991372" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.166.20.137"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991368" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.38.129.137"/>
    </slice>
    <from sec="1036991259" usec="0"/>
    <to sec="1036991279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.52.156.137"/>
    </slice>
    <from sec="1036990848" usec="0"/>
    <to sec="1036991512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.10.201.137"/>
    </slice>
    <from sec="1036990892" usec="0"/>
    <to sec="1036991094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.23.34.138"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.100.189.138"/>
    </slice>
    <from sec="1036990832" usec="0"/>
    <to sec="1036991515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.77.210.139"/>
    </slice>
    <from sec="1036991075" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_530{
style=filled;
color=gray75;
466[label="215.237.68.140s;354pkt 354fpkt", shape=rectangle, color=red];
5061[label="215.237.68.140;200pkt 200fpkt", shape=pentagon, color=darkviolet];
5067[label="9.188.192.140;162pkt 162fpkt", shape=pentagon, color=darkviolet];
6957[label="215.237.68.140;200pkt 200fpkt", shape=invtriangle, color=brown];
6960[label="9.188.192.140;162pkt 162fpkt", shape=invtriangle, color=brown];
8104[label="215.237.68.140;199pkt 199fpkt", shape=invhouse, color=bisque];
stat530[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.237.68.140:1032, *:137}[55.2486%]&lt;BR/&gt;{9.188.192.140:1032, *:137}[44.7514%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1032: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
466--5061[label="0.96;192pkt 192fpkt"];
466--5067[label="1;162pkt 162fpkt"];
466--6957[label="0.96;192pkt 192fpkt"];
466--6960[label="1;162pkt 162fpkt"];
466--8104[label="0.959799;191pkt 191fpkt"];
5061--6957[label="1;200pkt 200fpkt"];
5061--8104[label="1;199pkt 199fpkt"];
5067--6960[label="1;162pkt 162fpkt"];
6957--8104[label="1;199pkt 199fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.237.68.140" src_port="1032"/>
      <filter dst_port="137" src_ip="9.188.192.140" src_port="1032"/>
    </slice>
    <from sec="1036991090" usec="0"/>
    <to sec="1036991122" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.100.163.140"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.82794,2.78247,002,1 1 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_533{
style=filled;
color=gray75;
469[label="202.104.74.142s;253pkt 253fpkt", shape=rectangle, color=red];
729[label="202.104.74.142s;193pkt 193fpkt", shape=ellipse, color=green];
5079[label="202.104.74.142;252pkt 252fpkt", shape=pentagon, color=darkviolet];
6969[label="202.104.74.142;253pkt 253fpkt", shape=invtriangle, color=brown];
8111[label="202.104.74.142;253pkt 253fpkt", shape=invhouse, color=bisque];
stat533[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.104.74.142:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
469--729[label="1;193pkt 193fpkt"];
469--5079[label="1;252pkt 252fpkt"];
469--6969[label="1;253pkt 253fpkt"];
469--8111[label="1;253pkt 253fpkt"];
729--5079[label="0.994819;192pkt 192fpkt"];
729--6969[label="1;193pkt 193fpkt"];
729--8111[label="1;193pkt 193fpkt"];
5079--6969[label="1;252pkt 252fpkt"];
5079--8111[label="1;252pkt 252fpkt"];
6969--8111[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.104.74.142" src_port="1025"/>
    </slice>
    <from sec="1036991302" usec="0"/>
    <to sec="1036991317" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.242.76.144"/>
    </slice>
    <from sec="1036990921" usec="0"/>
    <to sec="1036991452" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_535{
style=filled;
color=gray75;
5095[label="214.119.135.144;242pkt 242fpkt", shape=pentagon, color=darkviolet];
stat535[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.119.135.144:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (55.7851%)&lt;BR/&gt; 33701: (1.23967%)&lt;BR/&gt; 32769: (0.826446%)&lt;BR/&gt; 1053: (0.826446%)&lt;BR/&gt; 1024: (0.826446%)&gt;];
}
</description>
    <slice>
      <filter src_ip="214.119.135.144" src_port="53"/>
    </slice>
    <from sec="1036990806" usec="0"/>
    <to sec="1036991515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.242.204.144"/>
    </slice>
    <from sec="1036990832" usec="0"/>
    <to sec="1036991343" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.186.139.145"/>
    </slice>
    <from sec="1036990825" usec="0"/>
    <to sec="1036991503" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.641407,2.74633,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_538{
style=filled;
color=gray75;
473[label="199.69.194.145s;145pkt 145fpkt", shape=rectangle, color=red];
5106[label="199.69.194.145;178pkt 178fpkt", shape=pentagon, color=darkviolet];
stat538[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.69.194.145:1069, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1069: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
473--5106[label="0.993103;144pkt 144fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.69.194.145" src_port="1069"/>
    </slice>
    <from sec="1036991347" usec="0"/>
    <to sec="1036991375" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.234.224.146"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.46.28.147"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.242.132.147"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.0.131.148"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036990844" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="223.144.163.148"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.23.99.150"/>
    </slice>
    <from sec="1036991105" usec="0"/>
    <to sec="1036991128" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676574,2.717,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_545{
style=filled;
color=gray75;
482[label="202.96.51.151s;36pkt 36fpkt", shape=rectangle, color=red];
5156[label="202.96.51.151;227pkt 227fpkt", shape=pentagon, color=darkviolet];
7017[label="202.96.51.151;227pkt 227fpkt", shape=invtriangle, color=brown];
stat545[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.96.51.151:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
482--5156[label="1;36pkt 36fpkt"];
482--7017[label="1;36pkt 36fpkt"];
5156--7017[label="1;227pkt 227fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.96.51.151" src_port="1026"/>
    </slice>
    <from sec="1036991372" usec="0"/>
    <to sec="1036991408" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.51.90.151"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.183.13.152"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.242.42.152"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="140.100.140.152"/>
    </slice>
    <from sec="1036991064" usec="0"/>
    <to sec="1036991092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.24.152.152"/>
    </slice>
    <from sec="1036990912" usec="0"/>
    <to sec="1036990923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.133.131.153"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.100.164.153"/>
    </slice>
    <from sec="1036991133" usec="0"/>
    <to sec="1036991424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.234.80.154"/>
    </slice>
    <from sec="1036991196" usec="0"/>
    <to sec="1036991244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.641407,2.74633,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_555{
style=filled;
color=gray75;
487[label="48.181.156.154s;45pkt 45fpkt", shape=rectangle, color=red];
5195[label="48.181.156.154;185pkt 185fpkt", shape=pentagon, color=darkviolet];
stat555[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.181.156.154:1036, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1036: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
487--5195[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="48.181.156.154" src_port="1036"/>
    </slice>
    <from sec="1036990970" usec="0"/>
    <to sec="1036991002" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.156.93.161"/>
    </slice>
    <from sec="1036990826" usec="0"/>
    <to sec="1036991476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.175.154.161"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.100.163.161"/>
    </slice>
    <from sec="1036990802" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.162.211.161"/>
    </slice>
    <from sec="1036991371" usec="0"/>
    <to sec="1036991422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945007,2.69627,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_560{
style=filled;
color=gray75;
2688[label="149.178.119.79;d;2pkt 2fpkt", shape=diamond, color=yellow];
2689[label="145.219.140.162;s;2pkt 2fpkt", shape=diamond, color=yellow];
5257[label="145.219.140.162;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7088[label="145.219.140.162;2pkt 2fpkt", shape=invtriangle, color=brown];
8184[label="145.219.140.162;3pkt 3fpkt", shape=invhouse, color=bisque];
stat560[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.219.140.162:80, 215.45.98.205:12436}[33.3333%]&lt;BR/&gt;{145.219.140.162:80, 149.178.119.79:3819}[33.3333%]&lt;BR/&gt;{145.219.140.162:80, 149.178.119.79:3820}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3820: (22.7273%)&lt;BR/&gt; 3819: (22.7273%)&lt;BR/&gt; 12436: (4.54545%)&gt;];
}
2688--2689[label="1;2pkt 2fpkt"];
2688--5257[label="1;2pkt 2fpkt"];
2688--7088[label="1;2pkt 2fpkt"];
2688--8184[label="1;2pkt 2fpkt"];
2689--5257[label="1;2pkt 2fpkt"];
2689--7088[label="1;2pkt 2fpkt"];
2689--8184[label="1;2pkt 2fpkt"];
5257--7088[label="1;2pkt 2fpkt"];
5257--8184[label="1;2pkt 2fpkt"];
7088--8184[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.178.119.79" dst_port="3820" src_ip="145.219.140.162" src_port="80"/>
      <filter dst_ip="149.178.119.79" dst_port="3819" src_ip="145.219.140.162" src_port="80"/>
      <filter dst_ip="215.45.98.205" dst_port="12436" src_ip="145.219.140.162" src_port="80"/>
    </slice>
    <from sec="1036991360" usec="0"/>
    <to sec="1036991486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.100.163.162"/>
    </slice>
    <from sec="1036990806" usec="0"/>
    <to sec="1036991506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.213.2.163"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.177.46.163"/>
    </slice>
    <from sec="1036990981" usec="0"/>
    <to sec="1036991122" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.57.130.166"/>
    </slice>
    <from sec="1036990805" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.208.190.166"/>
    </slice>
    <from sec="1036990811" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.76838,2.80163,002,1 1 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_566{
style=filled;
color=gray75;
505[label="202.173.179.168s;254pkt 254fpkt", shape=rectangle, color=red];
732[label="202.173.179.168s;169pkt 169fpkt", shape=ellipse, color=green];
5308[label="202.173.179.168;253pkt 253fpkt", shape=pentagon, color=darkviolet];
7123[label="202.173.179.168;254pkt 254fpkt", shape=invtriangle, color=brown];
stat566[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.173.179.168:64439, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64439: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
505--732[label="1;169pkt 169fpkt"];
505--5308[label="1;253pkt 253fpkt"];
505--7123[label="1;254pkt 254fpkt"];
732--5308[label="0.994083;168pkt 168fpkt"];
732--7123[label="1;169pkt 169fpkt"];
5308--7123[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.173.179.168" src_port="64439"/>
    </slice>
    <from sec="1036991170" usec="0"/>
    <to sec="1036991186" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12548,2.73159,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_567{
style=filled;
color=gray75;
906[label="214.121.176.87;d;2pkt 2fpkt", shape=diamond, color=yellow];
907[label="9.177.46.169;s;3pkt 3fpkt", shape=diamond, color=yellow];
1061[label="214.121.169.110;d;2pkt 2fpkt", shape=diamond, color=yellow];
1325[label="214.121.165.89;d;4pkt 4fpkt", shape=diamond, color=yellow];
3060[label="9.177.46.169;s;3pkt 3fpkt", shape=hexagon, color=black];
3180[label="214.121.176.87;d;1pkt 1fpkt", shape=hexagon, color=black];
3390[label="214.121.165.89;d;4pkt 4fpkt", shape=hexagon, color=black];
5311[label="9.177.46.169;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat567[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:1863, 214.121.165.89:*}[37.5%]&lt;BR/&gt;{9.177.46.169:5001, *:*}[37.5%]&lt;BR/&gt;{*:*, 214.121.176.87:*}[25%]&lt;BR/&gt;{*:*, 214.121.169.110:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (30.9524%)&lt;BR/&gt; 1863: (16.6667%)&lt;BR/&gt; 1939: (11.9048%)&lt;BR/&gt; 65106: (9.52381%)&lt;BR/&gt; 1457: (9.52381%)&gt;];
}
906--907[label="0.5;1pkt 1fpkt"];
906--3060[label="0.5;1pkt 1fpkt"];
906--3180[label="1;1pkt 1fpkt"];
906--5311[label="0.5;1pkt 1fpkt"];
906--5849[label="0.5;1pkt 1fpkt"];
906--7493[label="0.5;1pkt 1fpkt"];
906--8414[label="0.5;1pkt 1fpkt"];
907--1061[label="0.5;1pkt 1fpkt"];
907--1325[label="0.333333;1pkt 1fpkt"];
907--3060[label="1;3pkt 3fpkt"];
907--3180[label="1;1pkt 1fpkt"];
907--3390[label="0.333333;1pkt 1fpkt"];
907--5311[label="1;2pkt 2fpkt"];
1061--3060[label="0.5;1pkt 1fpkt"];
1061--5311[label="0.5;1pkt 1fpkt"];
1325--3060[label="0.333333;1pkt 1fpkt"];
1325--3390[label="1;4pkt 4fpkt"];
3060--3180[label="1;1pkt 1fpkt"];
3060--3390[label="0.333333;1pkt 1fpkt"];
3060--5311[label="1;2pkt 2fpkt"];
3180--5311[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.121.169.110"/>
      <filter dst_ip="214.121.176.87"/>
      <filter src_ip="9.177.46.169" src_port="5001"/>
      <filter dst_ip="214.121.165.89" src_port="1863"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_568{
style=filled;
color=gray75;
506[label="8.4.93.169s;77pkt 77fpkt", shape=rectangle, color=red];
5312[label="8.4.93.169;117pkt 117fpkt", shape=pentagon, color=darkviolet];
7126[label="8.4.93.169;117pkt 117fpkt", shape=invtriangle, color=brown];
8205[label="8.4.93.169;118pkt 118fpkt", shape=invhouse, color=bisque];
stat568[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.4.93.169:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
506--5312[label="0.987013;76pkt 76fpkt"];
506--7126[label="0.987013;76pkt 76fpkt"];
506--8205[label="1;77pkt 77fpkt"];
5312--7126[label="1;117pkt 117fpkt"];
5312--8205[label="1;117pkt 117fpkt"];
7126--8205[label="1;117pkt 117fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="8.4.93.169" src_port="1026"/>
    </slice>
    <from sec="1036990900" usec="0"/>
    <to sec="1036990919" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.9.38.170"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.21.78.171"/>
    </slice>
    <from sec="1036991217" usec="0"/>
    <to sec="1036991243" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.177.46.172"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036990981" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.177.40.173"/>
    </slice>
    <from sec="1036991430" usec="0"/>
    <to sec="1036991433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.795292,2.74539,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_573{
style=filled;
color=gray75;
2576[label="215.156.93.173;s;57pkt 57fpkt", shape=diamond, color=yellow];
5351[label="215.156.93.173;56pkt 56fpkt", shape=pentagon, color=darkviolet];
stat573[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.156.93.173:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2576--5351[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter src_ip="215.156.93.173"/>
    </slice>
    <from sec="1036990802" usec="0"/>
    <to sec="1036991517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.216.145.173"/>
    </slice>
    <from sec="1036990906" usec="0"/>
    <to sec="1036990930" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14589,2.70209,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_575{
style=filled;
color=gray75;
1972[label="148.242.165.22;d;15pkt 15fpkt", shape=diamond, color=yellow];
1973[label="198.21.131.174;s;16pkt 16fpkt", shape=diamond, color=yellow];
3301[label="198.21.131.174;s;11pkt 11fpkt", shape=hexagon, color=black];
5360[label="198.21.131.174;18pkt 18fpkt", shape=pentagon, color=darkviolet];
7164[label="198.21.131.174;19pkt 19fpkt", shape=invtriangle, color=brown];
stat575[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.21.131.174:80, 148.242.165.22:*}[90.4762%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1345: (3.16456%)&lt;BR/&gt; 1344: (3.16456%)&lt;BR/&gt; 1343: (3.16456%)&lt;BR/&gt; 1329: (3.16456%)&gt;];
}
1972--1973[label="0.866667;13pkt 13fpkt"];
1972--3301[label="1;11pkt 11fpkt"];
1972--5360[label="0.8;12pkt 12fpkt"];
1972--7164[label="0.866667;13pkt 13fpkt"];
1973--3301[label="1;11pkt 11fpkt"];
1973--5360[label="0.9375;15pkt 15fpkt"];
1973--7164[label="1;16pkt 16fpkt"];
3301--5360[label="0.909091;10pkt 10fpkt"];
3301--7164[label="1;11pkt 11fpkt"];
5360--7164[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="148.242.165.22" src_ip="198.21.131.174" src_port="80"/>
    </slice>
    <from sec="1036990806" usec="0"/>
    <to sec="1036991504" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.78.104.175"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.231.121.176"/>
    </slice>
    <from sec="1036991166" usec="0"/>
    <to sec="1036991174" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945007,2.69627,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_578{
style=filled;
color=gray75;
1730[label="214.121.190.176;s;435pkt 435fpkt", shape=diamond, color=yellow];
5380[label="214.121.190.176;472pkt 472fpkt", shape=pentagon, color=darkviolet];
7176[label="214.121.190.176;473pkt 473fpkt", shape=invtriangle, color=brown];
8232[label="214.121.190.176;473pkt 473fpkt", shape=invhouse, color=bisque];
stat578[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.121.190.176:*, *:8888}[51.6878%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (25.9849%)&lt;BR/&gt; 3456: (4.56017%)&lt;BR/&gt; 7777: (4.10146%)&lt;BR/&gt; 6677: (2.48246%)&lt;BR/&gt; 6666: (2.48246%)&gt;];
}
1730--5380[label="0.995402;433pkt 433fpkt"];
1730--7176[label="0.997701;434pkt 434fpkt"];
1730--8232[label="0.997701;434pkt 434fpkt"];
5380--7176[label="1;472pkt 472fpkt"];
5380--8232[label="1;472pkt 472fpkt"];
7176--8232[label="1;473pkt 473fpkt"];
</description>
    <slice>
      <filter dst_port="8888" src_ip="214.121.190.176"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.124.2.177"/>
    </slice>
    <from sec="1036991206" usec="0"/>
    <to sec="1036991239" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.161.146.177"/>
    </slice>
    <from sec="1036991310" usec="0"/>
    <to sec="1036991339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.100.163.177"/>
    </slice>
    <from sec="1036990804" usec="0"/>
    <to sec="1036991408" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_582{
style=filled;
color=gray75;
511[label="202.162.8.178s;173pkt 173fpkt", shape=rectangle, color=red];
5394[label="202.162.8.178;239pkt 239fpkt", shape=pentagon, color=darkviolet];
7186[label="202.162.8.178;239pkt 239fpkt", shape=invtriangle, color=brown];
8235[label="202.162.8.178;240pkt 240fpkt", shape=invhouse, color=bisque];
stat582[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.162.8.178:64963, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64963: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
511--5394[label="0.99422;172pkt 172fpkt"];
511--7186[label="0.99422;172pkt 172fpkt"];
511--8235[label="1;173pkt 173fpkt"];
5394--7186[label="1;239pkt 239fpkt"];
5394--8235[label="1;239pkt 239fpkt"];
7186--8235[label="1;239pkt 239fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.162.8.178" src_port="64963"/>
    </slice>
    <from sec="1036991095" usec="0"/>
    <to sec="1036991132" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_583{
style=filled;
color=gray75;
515[label="209.243.149.178s;46pkt 46fpkt", shape=rectangle, color=red];
5400[label="209.243.149.178;252pkt 252fpkt", shape=pentagon, color=darkviolet];
7191[label="209.243.149.178;253pkt 253fpkt", shape=invtriangle, color=brown];
8239[label="209.243.149.178;253pkt 253fpkt", shape=invhouse, color=bisque];
stat583[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.243.149.178:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
515--5400[label="1;46pkt 46fpkt"];
515--7191[label="1;46pkt 46fpkt"];
515--8239[label="1;46pkt 46fpkt"];
5400--7191[label="1;252pkt 252fpkt"];
5400--8239[label="1;252pkt 252fpkt"];
7191--8239[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="209.243.149.178" src_port="1028"/>
    </slice>
    <from sec="1036991297" usec="0"/>
    <to sec="1036991336" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.67.139.179"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676574,2.717,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_585{
style=filled;
color=gray75;
516[label="199.20.220.179s;168pkt 168fpkt", shape=rectangle, color=red];
5412[label="199.20.220.179;197pkt 197fpkt", shape=pentagon, color=darkviolet];
7203[label="199.20.220.179;197pkt 197fpkt", shape=invtriangle, color=brown];
stat585[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.20.220.179:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
516--5412[label="0.994048;167pkt 167fpkt"];
516--7203[label="0.994048;167pkt 167fpkt"];
5412--7203[label="1;197pkt 197fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.20.220.179" src_port="1026"/>
    </slice>
    <from sec="1036991150" usec="0"/>
    <to sec="1036991181" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.156.89.181"/>
    </slice>
    <from sec="1036990803" usec="0"/>
    <to sec="1036991447" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.226.165.181"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.1.205.181"/>
    </slice>
    <from sec="1036991060" usec="0"/>
    <to sec="1036991110" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.69.176.182"/>
    </slice>
    <from sec="1036990820" usec="0"/>
    <to sec="1036991506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.181.2.184"/>
    </slice>
    <from sec="1036990828" usec="0"/>
    <to sec="1036991516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.245.19.184"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.51.89.184"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.155.22.185"/>
    </slice>
    <from sec="1036990809" usec="0"/>
    <to sec="1036991516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.177.46.185"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.208.129.186"/>
    </slice>
    <from sec="1036990860" usec="0"/>
    <to sec="1036991457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676574,2.717,503,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_596{
style=filled;
color=gray75;
520[label="199.18.49.187s;1pkt 1fpkt", shape=rectangle, color=red];
5470[label="214.121.73.187;28pkt 28fpkt", shape=pentagon, color=darkviolet];
7243[label="214.121.73.187;29pkt 29fpkt", shape=invtriangle, color=brown];
stat596[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.121.73.187:80, 78.193.15.150:*}[68.9655%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.5517%)&lt;BR/&gt; 8080: (3.44828%)&lt;BR/&gt; 4317: (2.58621%)&lt;BR/&gt; 57361: (1.72414%)&lt;BR/&gt; 57352: (1.72414%)&gt;];
}
520--5470[label="1;1pkt 1fpkt"];
520--7243[label="1;1pkt 1fpkt"];
5470--7243[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="78.193.15.150" src_ip="214.121.73.187" src_port="80"/>
    </slice>
    <from sec="1036990804" usec="0"/>
    <to sec="1036991514" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.178.86.187"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.135.126.187"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036990818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.183.40.188"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.162.148.188"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_601{
style=filled;
color=gray75;
523[label="9.83.37.189s;133pkt 133fpkt", shape=rectangle, color=red];
5482[label="9.83.37.189;161pkt 161fpkt", shape=pentagon, color=darkviolet];
7255[label="9.83.37.189;161pkt 161fpkt", shape=invtriangle, color=brown];
8273[label="9.83.37.189;160pkt 160fpkt", shape=invhouse, color=bisque];
stat601[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.83.37.189:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
523--5482[label="1;133pkt 133fpkt"];
523--7255[label="1;133pkt 133fpkt"];
523--8273[label="0.992481;132pkt 132fpkt"];
5482--7255[label="1;161pkt 161fpkt"];
5482--8273[label="1;160pkt 160fpkt"];
7255--8273[label="1;160pkt 160fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.83.37.189" src_port="1028"/>
    </slice>
    <from sec="1036991092" usec="0"/>
    <to sec="1036991117" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.175.90.189"/>
    </slice>
    <from sec="1036990805" usec="0"/>
    <to sec="1036991505" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.102.150.190"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.174.162.190"/>
    </slice>
    <from sec="1036991407" usec="0"/>
    <to sec="1036991446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.212.146.192"/>
    </slice>
    <from sec="1036991466" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12548,2.73159,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_606{
style=filled;
color=gray75;
2301[label="148.242.136.42;d;7pkt 7fpkt", shape=diamond, color=yellow];
2302[label="198.21.133.195;s;7pkt 7fpkt", shape=diamond, color=yellow];
3374[label="148.242.136.42;d;7pkt 7fpkt", shape=hexagon, color=black];
3375[label="198.21.133.195;s;7pkt 7fpkt", shape=hexagon, color=black];
5532[label="198.21.133.195;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat606[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.21.133.195:80, 148.242.136.42:*}[75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.0588%)&lt;BR/&gt; 2190: (7.35294%)&lt;BR/&gt; 2189: (7.35294%)&lt;BR/&gt; 2188: (7.35294%)&lt;BR/&gt; 2187: (7.35294%)&gt;];
}
2301--2302[label="0.857143;6pkt 6fpkt"];
2301--3374[label="1;7pkt 7fpkt"];
2301--3375[label="0.857143;6pkt 6fpkt"];
2301--5532[label="1;6pkt 6fpkt"];
2302--3374[label="0.857143;6pkt 6fpkt"];
2302--3375[label="1;7pkt 7fpkt"];
2302--5532[label="1;6pkt 6fpkt"];
3374--3375[label="0.857143;6pkt 6fpkt"];
3374--5532[label="1;6pkt 6fpkt"];
3375--5532[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="148.242.136.42" src_ip="198.21.133.195" src_port="80"/>
    </slice>
    <from sec="1036991176" usec="0"/>
    <to sec="1036991222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.213.105.196"/>
    </slice>
    <from sec="1036990811" usec="0"/>
    <to sec="1036991494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.80.56.197"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676574,2.717,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_609{
style=filled;
color=gray75;
533[label="157.134.131.197s;109pkt 109fpkt", shape=rectangle, color=red];
5542[label="157.134.131.197;191pkt 191fpkt", shape=pentagon, color=darkviolet];
7293[label="157.134.131.197;191pkt 191fpkt", shape=invtriangle, color=brown];
stat609[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.134.131.197:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
533--5542[label="1;109pkt 109fpkt"];
533--7293[label="1;109pkt 109fpkt"];
5542--7293[label="1;191pkt 191fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="157.134.131.197" src_port="1026"/>
    </slice>
    <from sec="1036991150" usec="0"/>
    <to sec="1036991181" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="165.189.227.197"/>
    </slice>
    <from sec="1036990808" usec="0"/>
    <to sec="1036991505" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_611{
style=filled;
color=gray75;
536[label="200.252.71.198s;46pkt 46fpkt", shape=rectangle, color=red];
5549[label="200.252.71.198;213pkt 213fpkt", shape=pentagon, color=darkviolet];
7299[label="200.252.71.198;214pkt 214fpkt", shape=invtriangle, color=brown];
8295[label="200.252.71.198;213pkt 213fpkt", shape=invhouse, color=bisque];
stat611[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.252.71.198:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
536--5549[label="1;46pkt 46fpkt"];
536--7299[label="1;46pkt 46fpkt"];
536--8295[label="1;46pkt 46fpkt"];
5549--7299[label="1;213pkt 213fpkt"];
5549--8295[label="1;213pkt 213fpkt"];
7299--8295[label="1;213pkt 213fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.252.71.198" src_port="1025"/>
    </slice>
    <from sec="1036991237" usec="0"/>
    <to sec="1036991271" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676574,2.717,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_612{
style=filled;
color=gray75;
537[label="9.24.79.198s;80pkt 80fpkt", shape=rectangle, color=red];
5550[label="9.24.79.198;177pkt 177fpkt", shape=pentagon, color=darkviolet];
7300[label="9.24.79.198;177pkt 177fpkt", shape=invtriangle, color=brown];
stat612[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.24.79.198:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
537--5550[label="1;80pkt 80fpkt"];
537--7300[label="1;80pkt 80fpkt"];
5550--7300[label="1;177pkt 177fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.24.79.198" src_port="1025"/>
    </slice>
    <from sec="1036990975" usec="0"/>
    <to sec="1036991002" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.213.105.198"/>
    </slice>
    <from sec="1036991099" usec="0"/>
    <to sec="1036991331" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.228.140.198"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_615{
style=filled;
color=gray75;
538[label="202.146.186.198s;53pkt 53fpkt", shape=rectangle, color=red];
5555[label="202.146.186.198;153pkt 153fpkt", shape=pentagon, color=darkviolet];
7302[label="202.146.186.198;153pkt 153fpkt", shape=invtriangle, color=brown];
8296[label="202.146.186.198;153pkt 153fpkt", shape=invhouse, color=bisque];
stat615[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.146.186.198:1032, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1032: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
538--5555[label="1;53pkt 53fpkt"];
538--7302[label="1;53pkt 53fpkt"];
538--8296[label="1;53pkt 53fpkt"];
5555--7302[label="1;153pkt 153fpkt"];
5555--8296[label="1;153pkt 153fpkt"];
7302--8296[label="1;153pkt 153fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.146.186.198" src_port="1032"/>
    </slice>
    <from sec="1036990921" usec="0"/>
    <to sec="1036990949" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.3.177.199"/>
    </slice>
    <from sec="1036991259" usec="0"/>
    <to sec="1036991280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.242.64.200"/>
    </slice>
    <from sec="1036990844" usec="0"/>
    <to sec="1036991512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.641407,2.74633,503,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_618{
style=filled;
color=gray75;
539[label="9.213.73.200s;1pkt 1fpkt", shape=rectangle, color=red];
5564[label="215.156.89.200;26pkt 26fpkt", shape=pentagon, color=darkviolet];
stat618[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.156.89.200:80, 9.77.80.212:*}[57.6923%]&lt;BR/&gt;{215.156.89.200:1025, *:53}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.4815%)&lt;BR/&gt; 53: (18.5185%)&lt;BR/&gt; 1025: (11.1111%)&lt;BR/&gt; 2497: (3.7037%)&lt;BR/&gt; 51676: (1.85185%)&gt;];
}
539--5564[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="9.77.80.212" src_ip="215.156.89.200" src_port="80"/>
      <filter dst_port="53" src_ip="215.156.89.200" src_port="1025"/>
    </slice>
    <from sec="1036990987" usec="0"/>
    <to sec="1036991515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_619{
style=filled;
color=gray75;
540[label="9.197.128.200s;112pkt 112fpkt", shape=rectangle, color=red];
5565[label="9.197.128.200;254pkt 254fpkt", shape=pentagon, color=darkviolet];
7309[label="9.197.128.200;254pkt 254fpkt", shape=invtriangle, color=brown];
8302[label="9.197.128.200;254pkt 254fpkt", shape=invhouse, color=bisque];
stat619[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.197.128.200:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
540--5565[label="1;112pkt 112fpkt"];
540--7309[label="1;112pkt 112fpkt"];
540--8302[label="1;112pkt 112fpkt"];
5565--7309[label="1;254pkt 254fpkt"];
5565--8302[label="1;254pkt 254fpkt"];
7309--8302[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.197.128.200" src_port="1027"/>
    </slice>
    <from sec="1036991418" usec="0"/>
    <to sec="1036991458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="135.111.130.200"/>
    </slice>
    <from sec="1036990886" usec="0"/>
    <to sec="1036991100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.66.131.200"/>
    </slice>
    <from sec="1036991061" usec="0"/>
    <to sec="1036991075" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.77.80.204"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.19.193.204"/>
    </slice>
    <from sec="1036990802" usec="0"/>
    <to sec="1036990858" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.3.24.206"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036990913" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_625{
style=filled;
color=gray75;
628[label="216.101.30.206s;80pkt 80fpkt", shape=rectangle, color=red];
5611[label="216.101.30.206;143pkt 143fpkt", shape=pentagon, color=darkviolet];
7339[label="216.101.30.206;144pkt 144fpkt", shape=invtriangle, color=brown];
8316[label="216.101.30.206;143pkt 143fpkt", shape=invhouse, color=bisque];
stat625[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.101.30.206:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 65064: (0.392157%)&lt;BR/&gt; 64334: (0.392157%)&lt;BR/&gt; 61176: (0.392157%)&lt;BR/&gt; 60364: (0.392157%)&gt;];
}
628--5611[label="0.9875;79pkt 79fpkt"];
628--7339[label="1;80pkt 80fpkt"];
628--8316[label="0.9875;79pkt 79fpkt"];
5611--7339[label="1;143pkt 143fpkt"];
5611--8316[label="1;143pkt 143fpkt"];
7339--8316[label="1;143pkt 143fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="216.101.30.206"/>
    </slice>
    <from sec="1036990981" usec="0"/>
    <to sec="1036991005" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.147.48.206"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036990875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.169.233.206"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.121.78.207"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="175.177.197.207"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.213.3.208"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_631{
style=filled;
color=gray75;
550[label="200.124.4.208s;117pkt 117fpkt", shape=rectangle, color=red];
5628[label="200.124.4.208;187pkt 187fpkt", shape=pentagon, color=darkviolet];
7351[label="200.124.4.208;188pkt 188fpkt", shape=invtriangle, color=brown];
8325[label="200.124.4.208;187pkt 187fpkt", shape=invhouse, color=bisque];
stat631[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.124.4.208:1024, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1024: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
550--5628[label="0.991453;116pkt 116fpkt"];
550--7351[label="1;117pkt 117fpkt"];
550--8325[label="0.991453;116pkt 116fpkt"];
5628--7351[label="1;187pkt 187fpkt"];
5628--8325[label="1;187pkt 187fpkt"];
7351--8325[label="1;187pkt 187fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.124.4.208" src_port="1024"/>
    </slice>
    <from sec="1036991415" usec="0"/>
    <to sec="1036991444" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.100.131.208"/>
    </slice>
    <from sec="1036990805" usec="0"/>
    <to sec="1036991495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.64.10.209"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.177.46.209"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.242.130.209"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.177.46.210"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036990865" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.242.130.210"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_638{
style=filled;
color=gray75;
555[label="199.49.25.212s;118pkt 118fpkt", shape=rectangle, color=red];
5669[label="199.49.25.212;189pkt 189fpkt", shape=pentagon, color=darkviolet];
7376[label="199.49.25.212;188pkt 188fpkt", shape=invtriangle, color=brown];
8342[label="199.49.25.212;189pkt 189fpkt", shape=invhouse, color=bisque];
stat638[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.49.25.212:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
555--5669[label="1;118pkt 118fpkt"];
555--7376[label="1;118pkt 118fpkt"];
555--8342[label="1;118pkt 118fpkt"];
5669--7376[label="1;188pkt 188fpkt"];
5669--8342[label="1;189pkt 189fpkt"];
7376--8342[label="1;188pkt 188fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.49.25.212" src_port="1026"/>
    </slice>
    <from sec="1036991295" usec="0"/>
    <to sec="1036991326" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.64.4.213"/>
    </slice>
    <from sec="1036990825" usec="0"/>
    <to sec="1036991112" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.242.139.213"/>
    </slice>
    <from sec="1036991163" usec="0"/>
    <to sec="1036991208" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.25.220.213"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.67.221.213"/>
    </slice>
    <from sec="1036991215" usec="0"/>
    <to sec="1036991240" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.177.46.214"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.189.197.214"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991360" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.153.210.214"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036990978" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.20.246.214"/>
    </slice>
    <from sec="1036990802" usec="0"/>
    <to sec="1036991512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.244.11.215"/>
    </slice>
    <from sec="1036990810" usec="0"/>
    <to sec="1036991515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.82794,2.78247,010,1 1 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_648{
style=filled;
color=gray75;
630[label="85.22.134.215s;107pkt 107fpkt", shape=rectangle, color=red];
740[label="85.22.134.215s;107pkt 107fpkt", shape=ellipse, color=green];
5706[label="85.22.134.215;106pkt 106fpkt", shape=pentagon, color=darkviolet];
7397[label="85.22.134.215;106pkt 106fpkt", shape=invtriangle, color=brown];
8354[label="85.22.134.215;106pkt 106fpkt", shape=invhouse, color=bisque];
stat648[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.22.134.215:*, *:22}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 6928: (0.469925%)&lt;BR/&gt; 6927: (0.469925%)&lt;BR/&gt; 6926: (0.469925%)&lt;BR/&gt; 6925: (0.469925%)&gt;];
}
630--740[label="1;107pkt 107fpkt"];
630--5706[label="1;106pkt 106fpkt"];
630--7397[label="1;106pkt 106fpkt"];
630--8354[label="1;106pkt 106fpkt"];
740--5706[label="1;106pkt 106fpkt"];
740--7397[label="1;106pkt 106fpkt"];
740--8354[label="1;106pkt 106fpkt"];
5706--7397[label="1;106pkt 106fpkt"];
5706--8354[label="1;106pkt 106fpkt"];
7397--8354[label="1;106pkt 106fpkt"];
</description>
    <slice>
      <filter dst_port="22" src_ip="85.22.134.215"/>
    </slice>
    <from sec="1036990819" usec="0"/>
    <to sec="1036990824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="175.177.216.215"/>
    </slice>
    <from sec="1036990869" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.9.99.216"/>
    </slice>
    <from sec="1036991470" usec="0"/>
    <to sec="1036991492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_651{
style=filled;
color=gray75;
561[label="73.137.65.218s;43pkt 43fpkt", shape=rectangle, color=red];
5737[label="73.137.65.218;188pkt 188fpkt", shape=pentagon, color=darkviolet];
7415[label="73.137.65.218;189pkt 189fpkt", shape=invtriangle, color=brown];
8365[label="73.137.65.218;188pkt 188fpkt", shape=invhouse, color=bisque];
stat651[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.137.65.218:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
561--5737[label="1;43pkt 43fpkt"];
561--7415[label="1;43pkt 43fpkt"];
561--8365[label="1;43pkt 43fpkt"];
5737--7415[label="1;188pkt 188fpkt"];
5737--8365[label="1;188pkt 188fpkt"];
7415--8365[label="1;188pkt 188fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="73.137.65.218" src_port="1025"/>
    </slice>
    <from sec="1036990951" usec="0"/>
    <to sec="1036990980" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.41.168.218"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.2.75.219"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.208.128.219"/>
    </slice>
    <from sec="1036991244" usec="0"/>
    <to sec="1036991513" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.104.178.219"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.100.160.220"/>
    </slice>
    <from sec="1036990806" usec="0"/>
    <to sec="1036991516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.67.40.221"/>
    </slice>
    <from sec="1036990804" usec="0"/>
    <to sec="1036991517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="175.177.209.221"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.109.82.223"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.121.189.223"/>
    </slice>
    <from sec="1036991213" usec="0"/>
    <to sec="1036991243" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.98.217.224"/>
    </slice>
    <from sec="1036991018" usec="0"/>
    <to sec="1036991133" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.209.254.224"/>
    </slice>
    <from sec="1036990808" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.80.3.225"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_664{
style=filled;
color=gray75;
571[label="198.239.113.225s;93pkt 93fpkt", shape=rectangle, color=red];
5793[label="198.239.113.225;214pkt 214fpkt", shape=pentagon, color=darkviolet];
7453[label="198.239.113.225;214pkt 214fpkt", shape=invtriangle, color=brown];
8388[label="198.239.113.225;214pkt 214fpkt", shape=invhouse, color=bisque];
stat664[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.239.113.225:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
571--5793[label="1;93pkt 93fpkt"];
571--7453[label="1;93pkt 93fpkt"];
571--8388[label="1;93pkt 93fpkt"];
5793--7453[label="1;214pkt 214fpkt"];
5793--8388[label="1;214pkt 214fpkt"];
7453--8388[label="1;214pkt 214fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="198.239.113.225" src_port="1028"/>
    </slice>
    <from sec="1036991131" usec="0"/>
    <to sec="1036991164" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.84.153.225"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.169.203.225"/>
    </slice>
    <from sec="1036990805" usec="0"/>
    <to sec="1036991515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.177.46.226"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.2.47.226"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991009" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.166.38.227"/>
    </slice>
    <from sec="1036990802" usec="0"/>
    <to sec="1036991516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823917,2.71604,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_670{
style=filled;
color=gray75;
1963[label="140.6.186.227;s;611pkt 611fpkt", shape=diamond, color=yellow];
5814[label="140.6.186.227;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7467[label="140.6.186.227;2pkt 2fpkt", shape=invtriangle, color=brown];
stat670[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.6.186.227:2599, *:*}[63.2353%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2599: (31.626%)&lt;BR/&gt; 1214: (0.97561%)&lt;BR/&gt; 3976: (0.325203%)&lt;BR/&gt; 3878: (0.325203%)&lt;BR/&gt; 3692: (0.325203%)&gt;];
}
1963--5814[label="0.5;1pkt 1fpkt"];
1963--7467[label="0.5;1pkt 1fpkt"];
5814--7467[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="140.6.186.227" src_port="2599"/>
    </slice>
    <from sec="1036990804" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.169.14.228"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.120.25.228"/>
    </slice>
    <from sec="1036991244" usec="0"/>
    <to sec="1036991284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.120.29.228"/>
    </slice>
    <from sec="1036990804" usec="0"/>
    <to sec="1036991515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.9.64.228"/>
    </slice>
    <from sec="1036990851" usec="0"/>
    <to sec="1036991456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.12.87.228"/>
    </slice>
    <from sec="1036990832" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.119.170.228"/>
    </slice>
    <from sec="1036990856" usec="0"/>
    <to sec="1036991482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.20.210.228"/>
    </slice>
    <from sec="1036990868" usec="0"/>
    <to sec="1036990909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.181.29.229"/>
    </slice>
    <from sec="1036991413" usec="0"/>
    <to sec="1036991480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.174.171.229"/>
    </slice>
    <from sec="1036990899" usec="0"/>
    <to sec="1036991516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.12.87.231"/>
    </slice>
    <from sec="1036990831" usec="0"/>
    <to sec="1036991517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.165.207.231"/>
    </slice>
    <from sec="1036990850" usec="0"/>
    <to sec="1036991509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.172.132.232"/>
    </slice>
    <from sec="1036990804" usec="0"/>
    <to sec="1036991466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="175.177.2.233"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.177.46.233"/>
    </slice>
    <from sec="1036990867" usec="0"/>
    <to sec="1036991469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676574,2.717,503,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_685{
style=filled;
color=gray75;
229[label="148.242.170.233s;3pkt 3fpkt", shape=rectangle, color=red];
5877[label="148.242.170.233;22pkt 22fpkt", shape=pentagon, color=darkviolet];
7512[label="148.242.170.233;22pkt 22fpkt", shape=invtriangle, color=brown];
stat685[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.242.170.233:80, 9.142.141.110:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1091: (3.19149%)&lt;BR/&gt; 1089: (3.19149%)&lt;BR/&gt; 1086: (3.19149%)&lt;BR/&gt; 1120: (2.12766%)&gt;];
}
229--5877[label="1;3pkt 3fpkt"];
229--7512[label="1;3pkt 3fpkt"];
5877--7512[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="9.142.141.110" src_ip="148.242.170.233" src_port="80"/>
    </slice>
    <from sec="1036990829" usec="0"/>
    <to sec="1036991349" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.138.89.234"/>
    </slice>
    <from sec="1036991088" usec="0"/>
    <to sec="1036991127" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_687{
style=filled;
color=gray75;
579[label="9.222.204.234s;135pkt 135fpkt", shape=rectangle, color=red];
5884[label="9.222.204.234;143pkt 143fpkt", shape=pentagon, color=darkviolet];
7517[label="9.222.204.234;142pkt 142fpkt", shape=invtriangle, color=brown];
8429[label="9.222.204.234;142pkt 142fpkt", shape=invhouse, color=bisque];
stat687[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.222.204.234:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
579--5884[label="1;135pkt 135fpkt"];
579--7517[label="0.992593;134pkt 134fpkt"];
579--8429[label="0.992593;134pkt 134fpkt"];
5884--7517[label="1;142pkt 142fpkt"];
5884--8429[label="1;142pkt 142fpkt"];
7517--8429[label="1;142pkt 142fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.222.204.234" src_port="1029"/>
    </slice>
    <from sec="1036990864" usec="0"/>
    <to sec="1036990888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.2.1.235"/>
    </slice>
    <from sec="1036991088" usec="0"/>
    <to sec="1036991125" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="165.128.189.236"/>
    </slice>
    <from sec="1036990804" usec="0"/>
    <to sec="1036991512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.82.250.236"/>
    </slice>
    <from sec="1036990803" usec="0"/>
    <to sec="1036991500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676574,2.717,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_691{
style=filled;
color=gray75;
582[label="199.10.16.237s;41pkt 41fpkt", shape=rectangle, color=red];
5898[label="199.10.16.237;187pkt 187fpkt", shape=pentagon, color=darkviolet];
7526[label="199.10.16.237;188pkt 188fpkt", shape=invtriangle, color=brown];
stat691[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.10.16.237:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
582--5898[label="1;41pkt 41fpkt"];
582--7526[label="1;41pkt 41fpkt"];
5898--7526[label="1;187pkt 187fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.10.16.237" src_port="1025"/>
    </slice>
    <from sec="1036990888" usec="0"/>
    <to sec="1036990921" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.177.46.237"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="79.81.103.238"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.115.101.239"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.76838,2.80163,002,1 1 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_695{
style=filled;
color=gray75;
587[label="205.198.119.240s;109pkt 109fpkt", shape=rectangle, color=red];
737[label="205.198.119.240s;62pkt 62fpkt", shape=ellipse, color=green];
5927[label="205.198.119.240;103pkt 103fpkt", shape=pentagon, color=darkviolet];
7548[label="205.198.119.240;104pkt 104fpkt", shape=invtriangle, color=brown];
stat695[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.198.119.240:61228, *:137}[85.2459%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 61228: (45.2381%)&lt;BR/&gt; 61205: (4.7619%)&gt;];
}
587--737[label="1;62pkt 62fpkt"];
587--5927[label="0.873786;90pkt 90fpkt"];
587--7548[label="0.875;91pkt 91fpkt"];
737--5927[label="0.709677;44pkt 44fpkt"];
737--7548[label="0.709677;44pkt 44fpkt"];
5927--7548[label="1;103pkt 103fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="205.198.119.240" src_port="61228"/>
    </slice>
    <from sec="1036991125" usec="0"/>
    <to sec="1036991143" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.641407,2.74633,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_696{
style=filled;
color=gray75;
590[label="9.237.196.241s;46pkt 46fpkt", shape=rectangle, color=red];
5939[label="9.237.196.241;161pkt 161fpkt", shape=pentagon, color=darkviolet];
stat696[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.237.196.241:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
590--5939[label="1;46pkt 46fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.237.196.241" src_port="1031"/>
    </slice>
    <from sec="1036991202" usec="0"/>
    <to sec="1036991240" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.41.197.241"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_698{
style=filled;
color=gray75;
591[label="9.66.24.242s;43pkt 43fpkt", shape=rectangle, color=red];
5942[label="9.66.24.242;176pkt 176fpkt", shape=pentagon, color=darkviolet];
7558[label="9.66.24.242;176pkt 176fpkt", shape=invtriangle, color=brown];
8450[label="9.66.24.242;175pkt 175fpkt", shape=invhouse, color=bisque];
stat698[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.66.24.242:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
591--5942[label="1;43pkt 43fpkt"];
591--7558[label="1;43pkt 43fpkt"];
591--8450[label="1;43pkt 43fpkt"];
5942--7558[label="1;176pkt 176fpkt"];
5942--8450[label="1;175pkt 175fpkt"];
7558--8450[label="1;175pkt 175fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.66.24.242" src_port="1025"/>
    </slice>
    <from sec="1036991020" usec="0"/>
    <to sec="1036991049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.213.231.242"/>
    </slice>
    <from sec="1036990803" usec="0"/>
    <to sec="1036991107" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676574,2.717,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_700{
style=filled;
color=gray75;
592[label="9.242.29.243s;46pkt 46fpkt", shape=rectangle, color=red];
5949[label="9.242.29.243;156pkt 156fpkt", shape=pentagon, color=darkviolet];
7564[label="9.242.29.243;156pkt 156fpkt", shape=invtriangle, color=brown];
stat700[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.242.29.243:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
592--5949[label="1;46pkt 46fpkt"];
592--7564[label="1;46pkt 46fpkt"];
5949--7564[label="1;156pkt 156fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.242.29.243" src_port="1027"/>
    </slice>
    <from sec="1036990918" usec="0"/>
    <to sec="1036990942" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.169.165.243"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23582,2.68221,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_702{
style=filled;
color=gray75;
1894[label="214.121.188.162;d;37pkt 37fpkt", shape=diamond, color=yellow];
3498[label="214.121.188.162;d;37pkt 37fpkt", shape=hexagon, color=black];
5959[label="9.247.42.244;13pkt 13fpkt", shape=pentagon, color=darkviolet];
7573[label="9.247.42.244;13pkt 13fpkt", shape=invtriangle, color=brown];
8456[label="9.247.42.244;13pkt 13fpkt", shape=invhouse, color=bisque];
stat702[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.247.42.241:80, 214.121.188.162:*}[35.8974%]&lt;BR/&gt;{9.247.42.244:80, 214.121.188.162:*}[35.8974%]&lt;BR/&gt;{214.232.91.106:8002, 214.121.188.162:*}[20.5128%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.9204%)&lt;BR/&gt; 8002: (7.07965%)&lt;BR/&gt; 1796: (2.21239%)&lt;BR/&gt; 1795: (2.21239%)&lt;BR/&gt; 1794: (2.21239%)&gt;];
}
1894--3498[label="1;37pkt 37fpkt"];
1894--5959[label="0.846154;11pkt 11fpkt"];
1894--7573[label="0.846154;11pkt 11fpkt"];
1894--8456[label="0.846154;11pkt 11fpkt"];
3498--5959[label="0.846154;11pkt 11fpkt"];
3498--7573[label="0.846154;11pkt 11fpkt"];
3498--8456[label="0.846154;11pkt 11fpkt"];
5959--7573[label="1;13pkt 13fpkt"];
5959--8456[label="1;13pkt 13fpkt"];
7573--8456[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="214.121.188.162" src_ip="9.247.42.244" src_port="80"/>
      <filter dst_ip="214.121.188.162" src_ip="9.247.42.241" src_port="80"/>
      <filter dst_ip="214.121.188.162" src_ip="214.232.91.106" src_port="8002"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.246.0.247"/>
    </slice>
    <from sec="1036990914" usec="0"/>
    <to sec="1036990944" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.45.29.247"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.208.209.247"/>
    </slice>
    <from sec="1036990803" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.195.128.248"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="175.177.213.248"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.121.184.250"/>
    </slice>
    <from sec="1036990813" usec="0"/>
    <to sec="1036991517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.235.92.252"/>
    </slice>
    <from sec="1036991237" usec="0"/>
    <to sec="1036991264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.165.149.253"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.80.203.254"/>
    </slice>
    <from sec="1036990863" usec="0"/>
    <to sec="1036991493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.110.33.255"/>
    </slice>
    <from sec="1036990964" usec="0"/>
    <to sec="1036991194" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.435781,2.76781,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.29.78.255"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.924114,2.72373,999,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_714{
style=filled;
color=gray75;
255[label="48.72.30.146s;1pkt 1fpkt", shape=rectangle, color=red];
1807[label="145.208.133.182;d;763pkt 763fpkt", shape=diamond, color=yellow];
2026[label="48.237.48.148;s;2pkt 2fpkt", shape=diamond, color=yellow];
2049[label="48.72.30.146;s;3pkt 3fpkt", shape=diamond, color=yellow];
4954[label="48.51.109.129;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4984[label="85.8.216.132;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5135[label="48.237.48.148;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6025[label="192.138.245.255;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat714[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6257, 145.208.133.182:6257}[91.6449%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (93.299%)&lt;BR/&gt; 80: (1.15979%)&lt;BR/&gt; 6699: (0.966495%)&lt;BR/&gt; 16257: (0.708763%)&lt;BR/&gt; 6256: (0.193299%)&gt;];
}
255--864[label="1;1pkt 1fpkt"];
255--2049[label="1;1pkt 1fpkt"];
1807--2026[label="1;2pkt 2fpkt"];
1807--2049[label="0.333333;1pkt 1fpkt"];
1807--2059[label="1;2pkt 2fpkt"];
1807--2134[label="0.5;1pkt 1fpkt"];
1807--2977[label="0.0402685;12pkt 12fpkt"];
1807--3357[label="1;2pkt 2fpkt"];
1807--3413[label="0.5;1pkt 1fpkt"];
1807--4021[label="0.333333;1pkt 1fpkt"];
1807--4954[label="1;2pkt 2fpkt"];
1807--4984[label="1;1pkt 1fpkt"];
1807--5135[label="1;2pkt 2fpkt"];
1807--5994[label="0.00524934;2pkt 2fpkt"];
1807--6025[label="0.5;1pkt 1fpkt"];
1807--6214[label="0.333333;1pkt 1fpkt"];
1807--7598[label="0.00526316;2pkt 2fpkt"];
1807--7706[label="0.25;1pkt 1fpkt"];
2026--5135[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.133.182" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1036990869" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_715{
style=filled;
color=gray75;
3735[label="199.181.24.0;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6027[label="199.181.24.0;2pkt 2fpkt", shape=invtriangle, color=brown];
7624[label="199.181.24.0;2pkt 2fpkt", shape=invhouse, color=bisque];
stat715[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.181.24.0:80, 148.242.193.49:51845}[50%]&lt;BR/&gt;{199.181.24.0:80, 148.242.193.49:54716}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54716: (25%)&lt;BR/&gt; 51845: (25%)&gt;];
}
3735--6027[label="1;2pkt 2fpkt"];
3735--7624[label="1;2pkt 2fpkt"];
6027--7624[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="148.242.193.49" dst_port="54716" src_ip="199.181.24.0" src_port="80"/>
      <filter dst_ip="148.242.193.49" dst_port="51845" src_ip="199.181.24.0" src_port="80"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="133.213.122.0"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_717{
style=filled;
color=gray75;
3745[label="168.100.170.0;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6031[label="168.100.170.0;8pkt 8fpkt", shape=invtriangle, color=brown];
7626[label="168.100.170.0;8pkt 8fpkt", shape=invhouse, color=bisque];
stat717[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.100.170.0:80, 214.206.203.138:*}[33.3333%]&lt;BR/&gt;{168.100.170.0:80, 197.90.13.245:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62515: (6%)&lt;BR/&gt; 62512: (6%)&lt;BR/&gt; 62511: (6%)&lt;BR/&gt; 23550: (6%)&gt;];
}
3745--6031[label="1;8pkt 8fpkt"];
3745--7626[label="1;8pkt 8fpkt"];
6031--7626[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="214.206.203.138" src_ip="168.100.170.0" src_port="80"/>
      <filter dst_ip="197.90.13.245" src_ip="168.100.170.0" src_port="80"/>
    </slice>
    <from sec="1036990942" usec="0"/>
    <to sec="1036991442" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,503,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_718{
style=filled;
color=gray75;
290[label="214.119.189.0s;1pkt 1fpkt", shape=rectangle, color=red];
3747[label="214.119.189.0;38pkt 38fpkt", shape=pentagon, color=darkviolet];
6032[label="214.119.189.0;37pkt 37fpkt", shape=invtriangle, color=brown];
7627[label="214.119.189.0;37pkt 37fpkt", shape=invhouse, color=bisque];
stat718[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.119.189.0:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1098: (1.76991%)&lt;BR/&gt; 61713: (1.32743%)&lt;BR/&gt; 61712: (1.32743%)&lt;BR/&gt; 61711: (1.32743%)&gt;];
}
290--3747[label="1;1pkt 1fpkt"];
290--6032[label="1;1pkt 1fpkt"];
290--7627[label="1;1pkt 1fpkt"];
3747--6032[label="1;37pkt 37fpkt"];
3747--7627[label="1;37pkt 37fpkt"];
6032--7627[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter src_ip="214.119.189.0" src_port="80"/>
    </slice>
    <from sec="1036990809" usec="0"/>
    <to sec="1036991503" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.61.15.1"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_720{
style=filled;
color=gray75;
3752[label="79.8.62.1;208pkt 208fpkt", shape=pentagon, color=darkviolet];
6036[label="79.8.62.1;208pkt 208fpkt", shape=invtriangle, color=brown];
7629[label="79.8.62.1;207pkt 207fpkt", shape=invhouse, color=bisque];
stat720[shape=component, label=&lt;Rules:&lt;BR/&gt;{79.8.62.1:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3752--6036[label="1;208pkt 208fpkt"];
3752--7629[label="1;207pkt 207fpkt"];
6036--7629[label="1;207pkt 207fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="79.8.62.1" src_port="1028"/>
    </slice>
    <from sec="1036991225" usec="0"/>
    <to sec="1036991260" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_721{
style=filled;
color=gray75;
3753[label="201.60.73.1;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6037[label="201.60.73.1;1pkt 1fpkt", shape=invtriangle, color=brown];
7630[label="201.60.73.1;1pkt 1fpkt", shape=invhouse, color=bisque];
stat721[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.60.73.1:80, 214.121.163.66:1576}[50%]&lt;BR/&gt;{201.60.73.1:80, 214.121.163.66:1577}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1577: (37.5%)&lt;BR/&gt; 1576: (12.5%)&gt;];
}
3753--6037[label="1;1pkt 1fpkt"];
3753--7630[label="1;1pkt 1fpkt"];
6037--7630[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.121.163.66" dst_port="1577" src_ip="201.60.73.1" src_port="80"/>
      <filter dst_ip="214.121.163.66" dst_port="1576" src_ip="201.60.73.1" src_port="80"/>
    </slice>
    <from sec="1036991031" usec="0"/>
    <to sec="1036991075" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_722{
style=filled;
color=gray75;
3758[label="76.161.136.1;11pkt 11fpkt", shape=pentagon, color=darkviolet];
6040[label="76.161.136.1;11pkt 11fpkt", shape=invtriangle, color=brown];
7632[label="76.161.136.1;11pkt 11fpkt", shape=invhouse, color=bisque];
stat722[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.161.136.1:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4557: (4.54545%)&lt;BR/&gt; 3807: (4.54545%)&lt;BR/&gt; 3241: (4.54545%)&lt;BR/&gt; 3167: (4.54545%)&gt;];
}
3758--6040[label="1;11pkt 11fpkt"];
3758--7632[label="1;11pkt 11fpkt"];
6040--7632[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter src_ip="76.161.136.1" src_port="1863"/>
    </slice>
    <from sec="1036990850" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_723{
style=filled;
color=gray75;
3759[label="48.82.137.1;211pkt 211fpkt", shape=pentagon, color=darkviolet];
6041[label="48.82.137.1;211pkt 211fpkt", shape=invtriangle, color=brown];
stat723[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.82.137.1:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3759--6041[label="1;211pkt 211fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="48.82.137.1" src_port="1031"/>
    </slice>
    <from sec="1036991248" usec="0"/>
    <to sec="1036991280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_724{
style=filled;
color=gray75;
3775[label="201.64.11.3;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6051[label="201.64.11.3;3pkt 3fpkt", shape=invtriangle, color=brown];
stat724[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.64.11.3:80, 145.3.24.206:2619}[33.3333%]&lt;BR/&gt;{201.64.11.3:80, 145.3.24.206:2620}[33.3333%]&lt;BR/&gt;{201.64.11.3:80, 145.3.24.206:2621}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2621: (16.6667%)&lt;BR/&gt; 2620: (16.6667%)&lt;BR/&gt; 2619: (16.6667%)&gt;];
}
3775--6051[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="145.3.24.206" dst_port="2621" src_ip="201.64.11.3" src_port="80"/>
      <filter dst_ip="145.3.24.206" dst_port="2620" src_ip="201.64.11.3" src_port="80"/>
      <filter dst_ip="145.3.24.206" dst_port="2619" src_ip="201.64.11.3" src_port="80"/>
    </slice>
    <from sec="1036990819" usec="0"/>
    <to sec="1036990828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_725{
style=filled;
color=gray75;
3788[label="215.131.85.4;142pkt 142fpkt", shape=pentagon, color=darkviolet];
6063[label="215.131.85.4;143pkt 143fpkt", shape=invtriangle, color=brown];
7644[label="215.131.85.4;143pkt 143fpkt", shape=invhouse, color=bisque];
stat725[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.131.85.4:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3788--6063[label="1;142pkt 142fpkt"];
3788--7644[label="1;142pkt 142fpkt"];
6063--7644[label="1;143pkt 143fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.131.85.4" src_port="1028"/>
    </slice>
    <from sec="1036991245" usec="0"/>
    <to sec="1036991277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_726{
style=filled;
color=gray75;
3804[label="201.61.15.6;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6074[label="201.61.15.6;2pkt 2fpkt", shape=invtriangle, color=brown];
stat726[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.61.15.6:20800, 215.172.36.78:1105}[50%]&lt;BR/&gt;{201.61.15.6:20800, 215.172.36.78:1143}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20800: (50%)&lt;BR/&gt; 1143: (33.3333%)&lt;BR/&gt; 1105: (16.6667%)&gt;];
}
3804--6074[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.172.36.78" dst_port="1143" src_ip="201.61.15.6" src_port="20800"/>
      <filter dst_ip="215.172.36.78" dst_port="1105" src_ip="201.61.15.6" src_port="20800"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_727{
style=filled;
color=gray75;
3819[label="199.168.163.7;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6083[label="199.168.163.7;2pkt 2fpkt", shape=invtriangle, color=brown];
stat727[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.168.163.7:80, 148.242.132.169:2017}[50%]&lt;BR/&gt;{199.168.163.7:80, 148.242.132.169:2018}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2018: (25%)&lt;BR/&gt; 2017: (25%)&gt;];
}
3819--6083[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="148.242.132.169" dst_port="2018" src_ip="199.168.163.7" src_port="80"/>
      <filter dst_ip="148.242.132.169" dst_port="2017" src_ip="199.168.163.7" src_port="80"/>
    </slice>
    <from sec="1036990857" usec="0"/>
    <to sec="1036990864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_728{
style=filled;
color=gray75;
3822[label="9.152.200.7;117pkt 117fpkt", shape=pentagon, color=darkviolet];
6085[label="9.152.200.7;116pkt 116fpkt", shape=invtriangle, color=brown];
7653[label="9.152.200.7;117pkt 117fpkt", shape=invhouse, color=bisque];
stat728[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.152.200.7:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 26639: (0.428571%)&lt;BR/&gt; 26634: (0.428571%)&lt;BR/&gt; 26629: (0.428571%)&lt;BR/&gt; 26624: (0.428571%)&gt;];
}
3822--6085[label="1;116pkt 116fpkt"];
3822--7653[label="1;117pkt 117fpkt"];
6085--7653[label="1;116pkt 116fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.152.200.7"/>
    </slice>
    <from sec="1036990904" usec="0"/>
    <to sec="1036990923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_729{
style=filled;
color=gray75;
3824[label="199.181.29.8;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6087[label="199.181.29.8;3pkt 3fpkt", shape=invtriangle, color=brown];
7655[label="199.181.29.8;3pkt 3fpkt", shape=invhouse, color=bisque];
stat729[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.181.29.8:80, 148.242.42.132:1294}[33.3333%]&lt;BR/&gt;{199.181.29.8:80, 148.242.42.132:1295}[33.3333%]&lt;BR/&gt;{199.181.29.8:80, 148.242.42.132:1296}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1296: (16.6667%)&lt;BR/&gt; 1295: (16.6667%)&lt;BR/&gt; 1294: (16.6667%)&gt;];
}
3824--6087[label="1;3pkt 3fpkt"];
3824--7655[label="1;3pkt 3fpkt"];
6087--7655[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="148.242.42.132" dst_port="1296" src_ip="199.181.29.8" src_port="80"/>
      <filter dst_ip="148.242.42.132" dst_port="1295" src_ip="199.181.29.8" src_port="80"/>
      <filter dst_ip="148.242.42.132" dst_port="1294" src_ip="199.181.29.8" src_port="80"/>
    </slice>
    <from sec="1036991393" usec="0"/>
    <to sec="1036991410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_730{
style=filled;
color=gray75;
3839[label="210.169.160.9;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6097[label="210.169.160.9;1pkt 1fpkt", shape=invtriangle, color=brown];
stat730[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.169.160.9:80, 214.119.134.171:1129}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1129: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3839--6097[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.119.134.171" dst_port="1129" src_ip="210.169.160.9" src_port="80"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_731{
style=filled;
color=gray75;
3845[label="133.213.114.10;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6101[label="133.213.114.10;6pkt 6fpkt", shape=invtriangle, color=brown];
stat731[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.213.114.10:8740, *:8738}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8740: (50%)&lt;BR/&gt; 8738: (50%)&gt;];
}
3845--6101[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="8738" src_ip="133.213.114.10" src_port="8740"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_732{
style=filled;
color=gray75;
3846[label="201.242.119.10;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6102[label="201.242.119.10;1pkt 1fpkt", shape=invtriangle, color=brown];
stat732[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.242.119.10:6667, 168.100.189.138:1051}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (50%)&lt;BR/&gt; 1051: (50%)&gt;];
}
3846--6102[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.100.189.138" dst_port="1051" src_ip="201.242.119.10" src_port="6667"/>
    </slice>
    <from sec="1036990831" usec="0"/>
    <to sec="1036991515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="168.100.160.10"/>
    </slice>
    <from sec="1036990807" usec="0"/>
    <to sec="1036991516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_734{
style=filled;
color=gray75;
3862[label="9.214.202.11;224pkt 224fpkt", shape=pentagon, color=darkviolet];
6111[label="9.214.202.11;224pkt 224fpkt", shape=invtriangle, color=brown];
stat734[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.214.202.11:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3862--6111[label="1;224pkt 224fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.214.202.11" src_port="1028"/>
    </slice>
    <from sec="1036990906" usec="0"/>
    <to sec="1036990942" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_735{
style=filled;
color=gray75;
3877[label="199.57.1.13;132pkt 132fpkt", shape=pentagon, color=darkviolet];
6118[label="199.57.1.13;132pkt 132fpkt", shape=invtriangle, color=brown];
stat735[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.57.1.13:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3877--6118[label="1;132pkt 132fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.57.1.13" src_port="1025"/>
    </slice>
    <from sec="1036991437" usec="0"/>
    <to sec="1036991461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_736{
style=filled;
color=gray75;
3882[label="201.95.36.13;20pkt 20fpkt", shape=pentagon, color=darkviolet];
6122[label="201.95.36.13;20pkt 20fpkt", shape=invtriangle, color=brown];
7667[label="201.95.36.13;20pkt 20fpkt", shape=invhouse, color=bisque];
stat736[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.95.36.13:80, 148.242.18.5:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1234: (2.5%)&lt;BR/&gt; 1233: (2.5%)&lt;BR/&gt; 1232: (2.5%)&lt;BR/&gt; 1231: (2.5%)&gt;];
}
3882--6122[label="1;20pkt 20fpkt"];
3882--7667[label="1;20pkt 20fpkt"];
6122--7667[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="148.242.18.5" src_ip="201.95.36.13" src_port="80"/>
    </slice>
    <from sec="1036991085" usec="0"/>
    <to sec="1036991097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_737{
style=filled;
color=gray75;
3895[label="8.136.171.13;156pkt 156fpkt", shape=pentagon, color=darkviolet];
6130[label="8.136.171.13;157pkt 157fpkt", shape=invtriangle, color=brown];
7671[label="8.136.171.13;157pkt 157fpkt", shape=invhouse, color=bisque];
stat737[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.136.171.13:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3895--6130[label="1;156pkt 156fpkt"];
3895--7671[label="1;156pkt 156fpkt"];
6130--7671[label="1;157pkt 157fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="8.136.171.13" src_port="1025"/>
    </slice>
    <from sec="1036991302" usec="0"/>
    <to sec="1036991326" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_738{
style=filled;
color=gray75;
3911[label="215.156.89.15;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6140[label="215.156.89.15;7pkt 7fpkt", shape=invtriangle, color=brown];
7674[label="215.156.89.15;7pkt 7fpkt", shape=invhouse, color=bisque];
stat738[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.156.89.15:993, 158.112.141.210:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 993: (50%)&lt;BR/&gt; 65214: (7.14286%)&lt;BR/&gt; 64990: (7.14286%)&lt;BR/&gt; 64859: (7.14286%)&lt;BR/&gt; 64848: (7.14286%)&gt;];
}
3911--6140[label="1;7pkt 7fpkt"];
3911--7674[label="1;7pkt 7fpkt"];
6140--7674[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="158.112.141.210" src_ip="215.156.89.15" src_port="993"/>
    </slice>
    <from sec="1036990888" usec="0"/>
    <to sec="1036991322" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_739{
style=filled;
color=gray75;
3930[label="198.9.249.16;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6150[label="198.9.249.16;3pkt 3fpkt", shape=invtriangle, color=brown];
stat739[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.9.249.16:1220, 58.152.87.128:110}[33.3333%]&lt;BR/&gt;{198.9.249.16:1219, 58.223.234.96:110}[33.3333%]&lt;BR/&gt;{198.9.249.16:1223, 58.223.234.96:110}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (50%)&lt;BR/&gt; 1223: (16.6667%)&lt;BR/&gt; 1220: (16.6667%)&lt;BR/&gt; 1219: (16.6667%)&gt;];
}
3930--6150[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="58.223.234.96" dst_port="110" src_ip="198.9.249.16" src_port="1223"/>
      <filter dst_ip="58.223.234.96" dst_port="110" src_ip="198.9.249.16" src_port="1219"/>
      <filter dst_ip="58.152.87.128" dst_port="110" src_ip="198.9.249.16" src_port="1220"/>
    </slice>
    <from sec="1036990919" usec="0"/>
    <to sec="1036990964" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_740{
style=filled;
color=gray75;
3933[label="199.181.29.17;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6152[label="199.181.29.17;6pkt 6fpkt", shape=invtriangle, color=brown];
stat740[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.181.29.17:80, 214.121.76.179:*}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.6667%)&lt;BR/&gt; 26379: (8.33333%)&lt;BR/&gt; 3452: (8.33333%)&lt;BR/&gt; 3448: (8.33333%)&lt;BR/&gt; 3447: (8.33333%)&gt;];
}
3933--6152[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="214.121.76.179" src_ip="199.181.29.17" src_port="80"/>
    </slice>
    <from sec="1036990831" usec="0"/>
    <to sec="1036991102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_741{
style=filled;
color=gray75;
3940[label="199.18.36.18;136pkt 136fpkt", shape=pentagon, color=darkviolet];
6156[label="199.18.36.18;136pkt 136fpkt", shape=invtriangle, color=brown];
stat741[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.18.36.18:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 41350: (0.367647%)&lt;BR/&gt; 41341: (0.367647%)&lt;BR/&gt; 41332: (0.367647%)&lt;BR/&gt; 41323: (0.367647%)&gt;];
}
3940--6156[label="1;136pkt 136fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.18.36.18"/>
    </slice>
    <from sec="1036990957" usec="0"/>
    <to sec="1036990980" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_742{
style=filled;
color=gray75;
3968[label="9.227.43.21;186pkt 186fpkt", shape=pentagon, color=darkviolet];
6177[label="9.227.43.21;186pkt 186fpkt", shape=invtriangle, color=brown];
stat742[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.227.43.21:1124, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1124: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3968--6177[label="1;186pkt 186fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.227.43.21" src_port="1124"/>
    </slice>
    <from sec="1036991250" usec="0"/>
    <to sec="1036991281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.232.87.21"/>
    </slice>
    <from sec="1036990804" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.169.90.21"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_745{
style=filled;
color=gray75;
3973[label="148.242.141.21;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6180[label="148.242.141.21;6pkt 6fpkt", shape=invtriangle, color=brown];
7691[label="148.242.141.21;7pkt 7fpkt", shape=invhouse, color=bisque];
stat745[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.242.141.21:80, 152.116.92.189:*}[28.5714%]&lt;BR/&gt;{148.242.141.21:*, *:25}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (26.3158%)&lt;BR/&gt; 25: (23.6842%)&lt;BR/&gt; 64092: (7.89474%)&lt;BR/&gt; 34773: (7.89474%)&lt;BR/&gt; 34772: (7.89474%)&gt;];
}
3973--6180[label="1;6pkt 6fpkt"];
3973--7691[label="1;6pkt 6fpkt"];
6180--7691[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="148.242.141.21"/>
      <filter dst_ip="152.116.92.189" src_ip="148.242.141.21" src_port="80"/>
    </slice>
    <from sec="1036990929" usec="0"/>
    <to sec="1036991514" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_746{
style=filled;
color=gray75;
3980[label="214.238.197.22;217pkt 217fpkt", shape=pentagon, color=darkviolet];
6183[label="214.238.197.22;217pkt 217fpkt", shape=invtriangle, color=brown];
stat746[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.238.197.22:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3980--6183[label="1;217pkt 217fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.238.197.22" src_port="1027"/>
    </slice>
    <from sec="1036991348" usec="0"/>
    <to sec="1036991382" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_747{
style=filled;
color=gray75;
3983[label="48.237.32.23;104pkt 104fpkt", shape=pentagon, color=darkviolet];
6185[label="48.237.32.23;105pkt 105fpkt", shape=invtriangle, color=brown];
stat747[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.237.32.23:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3983--6185[label="1;104pkt 104fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="48.237.32.23" src_port="1028"/>
    </slice>
    <from sec="1036991252" usec="0"/>
    <to sec="1036991268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.172.204.23"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.227.9.24"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_750{
style=filled;
color=gray75;
3995[label="199.13.101.24;187pkt 187fpkt", shape=pentagon, color=darkviolet];
6191[label="199.13.101.24;188pkt 188fpkt", shape=invtriangle, color=brown];
7698[label="199.13.101.24;188pkt 188fpkt", shape=invhouse, color=bisque];
stat750[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.13.101.24:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3995--6191[label="1;187pkt 187fpkt"];
3995--7698[label="1;187pkt 187fpkt"];
6191--7698[label="1;188pkt 188fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.13.101.24" src_port="1028"/>
    </slice>
    <from sec="1036991269" usec="0"/>
    <to sec="1036991302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_751{
style=filled;
color=gray75;
3997[label="168.100.158.24;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6194[label="168.100.158.24;1pkt 1fpkt", shape=invtriangle, color=brown];
7700[label="168.100.158.24;1pkt 1fpkt", shape=invhouse, color=bisque];
stat751[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.100.158.24:2155, 214.9.165.35:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2155: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
3997--6194[label="1;1pkt 1fpkt"];
3997--7700[label="1;1pkt 1fpkt"];
6194--7700[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.9.165.35" dst_port="25" src_ip="168.100.158.24" src_port="2155"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_752{
style=filled;
color=gray75;
4001[label="198.9.249.24;11pkt 11fpkt", shape=pentagon, color=darkviolet];
6198[label="198.9.249.24;12pkt 12fpkt", shape=invtriangle, color=brown];
stat752[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.9.249.24:*, *:6346}[58.3333%]&lt;BR/&gt;{198.9.249.24:*, *:6347}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (28.2609%)&lt;BR/&gt; 6347: (13.0435%)&lt;BR/&gt; 17288: (8.69565%)&lt;BR/&gt; 49228: (4.34783%)&lt;BR/&gt; 49217: (4.34783%)&gt;];
}
4001--6198[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_port="6346" src_ip="198.9.249.24"/>
      <filter dst_port="6347" src_ip="198.9.249.24"/>
    </slice>
    <from sec="1036991181" usec="0"/>
    <to sec="1036991514" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="76.40.126.25"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_754{
style=filled;
color=gray75;
4012[label="148.242.42.26;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6207[label="148.242.42.26;2pkt 2fpkt", shape=invtriangle, color=brown];
stat754[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.242.42.26:1353, 210.166.75.134:80}[50%]&lt;BR/&gt;{148.242.42.26:1354, 210.166.75.134:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1354: (25%)&lt;BR/&gt; 1353: (25%)&gt;];
}
4012--6207[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="210.166.75.134" dst_port="80" src_ip="148.242.42.26" src_port="1354"/>
      <filter dst_ip="210.166.75.134" dst_port="80" src_ip="148.242.42.26" src_port="1353"/>
    </slice>
    <from sec="1036991258" usec="0"/>
    <to sec="1036991294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_755{
style=filled;
color=gray75;
4013[label="9.76.48.26;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6208[label="9.76.48.26;1pkt 1fpkt", shape=invtriangle, color=brown];
stat755[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.76.48.26:53, 214.121.181.113:1740}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1740: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
4013--6208[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.121.181.113" dst_port="1740" src_ip="9.76.48.26" src_port="53"/>
    </slice>
    <from sec="1036990802" usec="0"/>
    <to sec="1036991516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_756{
style=filled;
color=gray75;
4023[label="48.64.10.27;176pkt 176fpkt", shape=pentagon, color=darkviolet];
6215[label="48.64.10.27;176pkt 176fpkt", shape=invtriangle, color=brown];
stat756[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.64.10.27:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4023--6215[label="1;176pkt 176fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="48.64.10.27" src_port="1025"/>
    </slice>
    <from sec="1036990906" usec="0"/>
    <to sec="1036990934" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_757{
style=filled;
color=gray75;
4035[label="79.66.112.28;117pkt 117fpkt", shape=pentagon, color=darkviolet];
6223[label="79.66.112.28;117pkt 117fpkt", shape=invtriangle, color=brown];
7710[label="79.66.112.28;116pkt 116fpkt", shape=invhouse, color=bisque];
stat757[shape=component, label=&lt;Rules:&lt;BR/&gt;{79.66.112.28:1035, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1035: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4035--6223[label="1;117pkt 117fpkt"];
4035--7710[label="1;116pkt 116fpkt"];
6223--7710[label="1;116pkt 116fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="79.66.112.28" src_port="1035"/>
    </slice>
    <from sec="1036990935" usec="0"/>
    <to sec="1036990954" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="149.30.173.28"/>
    </slice>
    <from sec="1036990836" usec="0"/>
    <to sec="1036991114" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_759{
style=filled;
color=gray75;
4040[label="21.244.196.28;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6228[label="21.244.196.28;14pkt 14fpkt", shape=invtriangle, color=brown];
stat759[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.244.196.28:*, 148.242.140.14:110}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (50%)&lt;BR/&gt; 49277: (3.7037%)&lt;BR/&gt; 49276: (3.7037%)&lt;BR/&gt; 49257: (3.7037%)&lt;BR/&gt; 49256: (3.7037%)&gt;];
}
4040--6228[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="148.242.140.14" dst_port="110" src_ip="21.244.196.28"/>
    </slice>
    <from sec="1036990853" usec="0"/>
    <to sec="1036991509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_760{
style=filled;
color=gray75;
4043[label="9.231.126.29;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6229[label="9.231.126.29;2pkt 2fpkt", shape=invtriangle, color=brown];
7711[label="9.231.126.29;1pkt 1fpkt", shape=invhouse, color=bisque];
stat760[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.231.126.29:80, 175.177.194.175:1850}[50%]&lt;BR/&gt;{9.231.126.29:80, 175.177.194.175:1851}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1851: (30%)&lt;BR/&gt; 1850: (20%)&gt;];
}
4043--6229[label="1;2pkt 2fpkt"];
4043--7711[label="1;1pkt 1fpkt"];
6229--7711[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.177.194.175" dst_port="1851" src_ip="9.231.126.29" src_port="80"/>
      <filter dst_ip="175.177.194.175" dst_port="1850" src_ip="9.231.126.29" src_port="80"/>
    </slice>
    <from sec="1036991376" usec="0"/>
    <to sec="1036991418" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_761{
style=filled;
color=gray75;
4049[label="168.100.181.29;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6233[label="168.100.181.29;1pkt 1fpkt", shape=invtriangle, color=brown];
7713[label="168.100.181.29;1pkt 1fpkt", shape=invhouse, color=bisque];
stat761[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.100.181.29:1034, 201.78.26.69:5050}[50%]&lt;BR/&gt;{168.100.181.29:1055, 193.25.60.215:6667}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (37.5%)&lt;BR/&gt; 1034: (37.5%)&lt;BR/&gt; 6667: (12.5%)&lt;BR/&gt; 1055: (12.5%)&gt;];
}
4049--6233[label="1;1pkt 1fpkt"];
4049--7713[label="1;1pkt 1fpkt"];
6233--7713[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.25.60.215" dst_port="6667" src_ip="168.100.181.29" src_port="1055"/>
      <filter dst_ip="201.78.26.69" dst_port="5050" src_ip="168.100.181.29" src_port="1034"/>
    </slice>
    <from sec="1036990808" usec="0"/>
    <to sec="1036991514" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_762{
style=filled;
color=gray75;
4051[label="148.242.197.29;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6235[label="148.242.197.29;1pkt 1fpkt", shape=invtriangle, color=brown];
stat762[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.242.197.29:33030, 209.23.34.138:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33030: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
4051--6235[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.23.34.138" dst_port="25" src_ip="148.242.197.29" src_port="33030"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676574,2.717,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_763{
style=filled;
color=gray75;
329[label="9.240.151.30s;126pkt 126fpkt", shape=rectangle, color=red];
4054[label="9.240.151.30;238pkt 238fpkt", shape=pentagon, color=darkviolet];
6238[label="9.240.151.30;237pkt 237fpkt", shape=invtriangle, color=brown];
stat763[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.240.151.30:65219, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65219: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
329--4054[label="1;126pkt 126fpkt"];
329--6238[label="1;126pkt 126fpkt"];
4054--6238[label="1;237pkt 237fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.240.151.30" src_port="65219"/>
    </slice>
    <from sec="1036991426" usec="0"/>
    <to sec="1036991462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_764{
style=filled;
color=gray75;
331[label="214.149.7.31s;90pkt 90fpkt", shape=rectangle, color=red];
4057[label="214.149.7.31;110pkt 110fpkt", shape=pentagon, color=darkviolet];
6240[label="214.149.7.31;109pkt 109fpkt", shape=invtriangle, color=brown];
7717[label="214.149.7.31;109pkt 109fpkt", shape=invhouse, color=bisque];
stat764[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.149.7.31:1045, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1045: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
331--4057[label="1;90pkt 90fpkt"];
331--6240[label="0.988889;89pkt 89fpkt"];
331--7717[label="0.988889;89pkt 89fpkt"];
4057--6240[label="1;109pkt 109fpkt"];
4057--7717[label="1;109pkt 109fpkt"];
6240--7717[label="1;109pkt 109fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.149.7.31" src_port="1045"/>
    </slice>
    <from sec="1036990925" usec="0"/>
    <to sec="1036990945" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_765{
style=filled;
color=gray75;
4058[label="78.113.46.31;255pkt 255fpkt", shape=pentagon, color=darkviolet];
6241[label="78.113.46.31;254pkt 254fpkt", shape=invtriangle, color=brown];
7718[label="78.113.46.31;255pkt 255fpkt", shape=invhouse, color=bisque];
stat765[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.113.46.31:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 2044: (0.196335%)&lt;BR/&gt; 2042: (0.196335%)&lt;BR/&gt; 2037: (0.196335%)&lt;BR/&gt; 2035: (0.196335%)&gt;];
}
4058--6241[label="1;254pkt 254fpkt"];
4058--7718[label="1;255pkt 255fpkt"];
6241--7718[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="78.113.46.31"/>
    </slice>
    <from sec="1036991279" usec="0"/>
    <to sec="1036991320" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,501,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_766{
style=filled;
color=gray75;
4059[label="193.188.70.31;32pkt 32fpkt", shape=pentagon, color=darkviolet];
6242[label="193.188.70.31;33pkt 33fpkt", shape=invtriangle, color=brown];
stat766[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.188.70.31:*, 148.242.28.145:21}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (50%)&lt;BR/&gt; 2544: (1.53846%)&lt;BR/&gt; 2543: (1.53846%)&lt;BR/&gt; 2542: (1.53846%)&lt;BR/&gt; 2541: (1.53846%)&gt;];
}
4059--6242[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="148.242.28.145" dst_port="21" src_ip="193.188.70.31"/>
    </slice>
    <from sec="1036990817" usec="0"/>
    <to sec="1036991512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.10.112.32"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_768{
style=filled;
color=gray75;
4067[label="211.10.126.32;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6249[label="211.10.126.32;2pkt 2fpkt", shape=invtriangle, color=brown];
7722[label="211.10.126.32;1pkt 1fpkt", shape=invhouse, color=bisque];
stat768[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.10.126.32:6699, 145.208.130.69:3258}[50%]&lt;BR/&gt;{211.10.126.32:6699, 145.208.130.69:3398}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3398: (37.5%)&lt;BR/&gt; 3258: (12.5%)&gt;];
}
4067--6249[label="1;1pkt 1fpkt"];
4067--7722[label="1;1pkt 1fpkt"];
6249--7722[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.130.69" dst_port="3398" src_ip="211.10.126.32" src_port="6699"/>
      <filter dst_ip="145.208.130.69" dst_port="3258" src_ip="211.10.126.32" src_port="6699"/>
    </slice>
    <from sec="1036990873" usec="0"/>
    <to sec="1036991517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="148.225.140.32"/>
    </slice>
    <from sec="1036991202" usec="0"/>
    <to sec="1036991331" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_770{
style=filled;
color=gray75;
4078[label="78.82.133.33;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6255[label="78.82.133.33;2pkt 2fpkt", shape=invtriangle, color=brown];
stat770[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.82.133.33:80, 214.119.134.145:26379}[50%]&lt;BR/&gt;{78.82.133.33:80, 214.119.134.145:27345}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 27345: (25%)&lt;BR/&gt; 26379: (25%)&gt;];
}
4078--6255[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="214.119.134.145" dst_port="27345" src_ip="78.82.133.33" src_port="80"/>
      <filter dst_ip="214.119.134.145" dst_port="26379" src_ip="78.82.133.33" src_port="80"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_771{
style=filled;
color=gray75;
4093[label="76.104.244.34;252pkt 252fpkt", shape=pentagon, color=darkviolet];
6266[label="76.104.244.34;252pkt 252fpkt", shape=invtriangle, color=brown];
7731[label="76.104.244.34;253pkt 253fpkt", shape=invhouse, color=bisque];
stat771[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.104.244.34:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4093--6266[label="1;252pkt 252fpkt"];
4093--7731[label="1;252pkt 252fpkt"];
6266--7731[label="1;252pkt 252fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="76.104.244.34" src_port="1031"/>
    </slice>
    <from sec="1036990904" usec="0"/>
    <to sec="1036990946" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_772{
style=filled;
color=gray75;
4104[label="175.177.194.35;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6274[label="175.177.194.35;6pkt 6fpkt", shape=invtriangle, color=brown];
stat772[shape=component, label=&lt;Rules:&lt;BR/&gt;{175.177.194.35:80, 199.220.161.3:*}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 31209: (8.33333%)&lt;BR/&gt; 4314: (8.33333%)&lt;BR/&gt; 4313: (8.33333%)&lt;BR/&gt; 4312: (8.33333%)&gt;];
}
4104--6274[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="199.220.161.3" src_ip="175.177.194.35" src_port="80"/>
    </slice>
    <from sec="1036990972" usec="0"/>
    <to sec="1036991464" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="168.100.133.36"/>
    </slice>
    <from sec="1036991130" usec="0"/>
    <to sec="1036991270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_774{
style=filled;
color=gray75;
4110[label="148.242.133.36;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6279[label="148.242.133.36;9pkt 9fpkt", shape=invtriangle, color=brown];
stat774[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.242.133.36:80, 198.85.88.132:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1195: (5.88235%)&lt;BR/&gt; 1194: (5.88235%)&lt;BR/&gt; 1171: (5.88235%)&lt;BR/&gt; 1170: (5.88235%)&gt;];
}
4110--6279[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="198.85.88.132" src_ip="148.242.133.36" src_port="80"/>
    </slice>
    <from sec="1036990851" usec="0"/>
    <to sec="1036991179" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_775{
style=filled;
color=gray75;
4114[label="168.100.165.36;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6281[label="168.100.165.36;2pkt 2fpkt", shape=invtriangle, color=brown];
7739[label="168.100.165.36;2pkt 2fpkt", shape=invhouse, color=bisque];
stat775[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.100.165.36:113, 201.245.44.249:4560}[33.3333%]&lt;BR/&gt;{168.100.165.36:2160, 201.245.44.249:23}[33.3333%]&lt;BR/&gt;{168.100.165.36:2174, 201.245.44.249:23}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23: (28.5714%)&lt;BR/&gt; 4560: (21.4286%)&lt;BR/&gt; 2174: (21.4286%)&lt;BR/&gt; 113: (21.4286%)&lt;BR/&gt; 2160: (7.14286%)&gt;];
}
4114--6281[label="1;2pkt 2fpkt"];
4114--7739[label="1;2pkt 2fpkt"];
6281--7739[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="201.245.44.249" dst_port="23" src_ip="168.100.165.36" src_port="2174"/>
      <filter dst_ip="201.245.44.249" dst_port="23" src_ip="168.100.165.36" src_port="2160"/>
      <filter dst_ip="201.245.44.249" dst_port="4560" src_ip="168.100.165.36" src_port="113"/>
    </slice>
    <from sec="1036990802" usec="0"/>
    <to sec="1036991509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_776{
style=filled;
color=gray75;
4117[label="214.119.181.36;33pkt 33fpkt", shape=pentagon, color=darkviolet];
6283[label="214.119.181.36;33pkt 33fpkt", shape=invtriangle, color=brown];
stat776[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.119.181.36:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4117--6283[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter src_ip="214.119.181.36"/>
    </slice>
    <from sec="1036990856" usec="0"/>
    <to sec="1036991432" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_777{
style=filled;
color=gray75;
4118[label="76.104.214.36;205pkt 205fpkt", shape=pentagon, color=darkviolet];
6284[label="76.104.214.36;205pkt 205fpkt", shape=invtriangle, color=brown];
stat777[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.104.214.36:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4118--6284[label="1;205pkt 205fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="76.104.214.36" src_port="1026"/>
    </slice>
    <from sec="1036990944" usec="0"/>
    <to sec="1036990976" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14589,2.70209,504,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_778{
style=filled;
color=gray75;
801[label="78.89.238.36;s;326pkt 326fpkt", shape=diamond, color=yellow];
802[label="145.208.145.243;d;328pkt 328fpkt", shape=diamond, color=yellow];
2811[label="145.208.145.243;d;328pkt 328fpkt", shape=hexagon, color=black];
4119[label="78.89.238.36;326pkt 326fpkt", shape=pentagon, color=darkviolet];
4355[label="76.161.136.60;11pkt 11fpkt", shape=pentagon, color=darkviolet];
4408[label="76.161.136.65;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6285[label="78.89.238.36;325pkt 325fpkt", shape=invtriangle, color=brown];
6454[label="76.161.136.60;11pkt 11fpkt", shape=invtriangle, color=brown];
stat778[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.89.238.36:443, 145.208.145.243:*}[93.314%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (48.8533%)&lt;BR/&gt; 1863: (1.02595%)&lt;BR/&gt; 65095: (0.150875%)&lt;BR/&gt; 65094: (0.150875%)&lt;BR/&gt; 65092: (0.150875%)&gt;];
}
801--802[label="0.984663;321pkt 321fpkt"];
801--2811[label="0.984663;321pkt 321fpkt"];
801--4119[label="1;326pkt 326fpkt"];
801--6285[label="1;325pkt 325fpkt"];
802--2811[label="1;328pkt 328fpkt"];
802--4119[label="0.984663;321pkt 321fpkt"];
802--4355[label="0.0909091;1pkt 1fpkt"];
802--4408[label="0.5;1pkt 1fpkt"];
802--6285[label="0.987692;321pkt 321fpkt"];
802--6454[label="0.0909091;1pkt 1fpkt"];
2811--4119[label="0.984663;321pkt 321fpkt"];
2811--4355[label="0.0909091;1pkt 1fpkt"];
2811--4408[label="0.5;1pkt 1fpkt"];
2811--6285[label="0.987692;321pkt 321fpkt"];
2811--6454[label="0.0909091;1pkt 1fpkt"];
4119--6285[label="1;325pkt 325fpkt"];
4355--6454[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.145.243" src_ip="78.89.238.36" src_port="443"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.137.26.37"/>
    </slice>
    <from sec="1036990836" usec="0"/>
    <to sec="1036991466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.226.68.37"/>
    </slice>
    <from sec="1036991129" usec="0"/>
    <to sec="1036991145" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_781{
style=filled;
color=gray75;
4125[label="76.161.136.37;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6291[label="76.161.136.37;4pkt 4fpkt", shape=invtriangle, color=brown];
stat781[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.161.136.37:1863, 145.208.189.12:3439}[25%]&lt;BR/&gt;{76.161.136.37:1863, 145.208.135.26:1056}[25%]&lt;BR/&gt;{76.161.136.37:1863, 148.242.76.128:64877}[25%]&lt;BR/&gt;{76.161.136.37:1863, 145.208.132.148:4136}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4136: (14.2857%)&lt;BR/&gt; 3439: (14.2857%)&lt;BR/&gt; 1056: (14.2857%)&lt;BR/&gt; 64877: (7.14286%)&gt;];
}
4125--6291[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.132.148" dst_port="4136" src_ip="76.161.136.37" src_port="1863"/>
      <filter dst_ip="148.242.76.128" dst_port="64877" src_ip="76.161.136.37" src_port="1863"/>
      <filter dst_ip="145.208.135.26" dst_port="1056" src_ip="76.161.136.37" src_port="1863"/>
      <filter dst_ip="145.208.189.12" dst_port="3439" src_ip="76.161.136.37" src_port="1863"/>
    </slice>
    <from sec="1036990821" usec="0"/>
    <to sec="1036991452" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.169.144.37"/>
    </slice>
    <from sec="1036990832" usec="0"/>
    <to sec="1036990923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_783{
style=filled;
color=gray75;
4150[label="202.29.101.39;123pkt 123fpkt", shape=pentagon, color=darkviolet];
6308[label="202.29.101.39;122pkt 122fpkt", shape=invtriangle, color=brown];
stat783[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.29.101.39:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4150--6308[label="1;122pkt 122fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.29.101.39" src_port="1025"/>
    </slice>
    <from sec="1036991217" usec="0"/>
    <to sec="1036991237" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_784{
style=filled;
color=gray75;
4156[label="148.242.22.40;17pkt 17fpkt", shape=pentagon, color=darkviolet];
6313[label="148.242.22.40;16pkt 16fpkt", shape=invtriangle, color=brown];
stat784[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.242.22.40:*, 78.170.202.65:80}[58.8235%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64438: (3.0303%)&lt;BR/&gt; 64421: (3.0303%)&lt;BR/&gt; 64413: (3.0303%)&lt;BR/&gt; 64412: (3.0303%)&gt;];
}
4156--6313[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="78.170.202.65" dst_port="80" src_ip="148.242.22.40"/>
    </slice>
    <from sec="1036990951" usec="0"/>
    <to sec="1036991338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_785{
style=filled;
color=gray75;
4158[label="76.161.136.40;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6314[label="76.161.136.40;4pkt 4fpkt", shape=invtriangle, color=brown];
stat785[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.161.136.40:1863, 214.121.177.26:3121}[25%]&lt;BR/&gt;{76.161.136.40:1863, 145.208.87.36:1207}[25%]&lt;BR/&gt;{76.161.136.40:1863, 145.197.254.40:1474}[25%]&lt;BR/&gt;{76.161.136.40:1863, 145.208.135.85:1428}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3121: (14.2857%)&lt;BR/&gt; 1474: (14.2857%)&lt;BR/&gt; 1207: (14.2857%)&lt;BR/&gt; 1428: (7.14286%)&gt;];
}
4158--6314[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.135.85" dst_port="1428" src_ip="76.161.136.40" src_port="1863"/>
      <filter dst_ip="145.197.254.40" dst_port="1474" src_ip="76.161.136.40" src_port="1863"/>
      <filter dst_ip="145.208.87.36" dst_port="1207" src_ip="76.161.136.40" src_port="1863"/>
      <filter dst_ip="214.121.177.26" dst_port="3121" src_ip="76.161.136.40" src_port="1863"/>
    </slice>
    <from sec="1036990825" usec="0"/>
    <to sec="1036991497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.176.168.40"/>
    </slice>
    <from sec="1036990864" usec="0"/>
    <to sec="1036991437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.158.176.40"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32241,2.66004,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_788{
style=filled;
color=gray75;
225[label="145.3.6.250d;1pkt 1fpkt", shape=rectangle, color=red];
1536[label="145.3.6.250;d;8pkt 8fpkt", shape=diamond, color=yellow];
1608[label="78.81.27.111;s;4pkt 4fpkt", shape=diamond, color=yellow];
2505[label="157.134.212.40;s;2pkt 2fpkt", shape=diamond, color=yellow];
3031[label="78.81.27.111;s;3pkt 3fpkt", shape=hexagon, color=black];
4161[label="157.134.212.40;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4810[label="78.81.27.111;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6317[label="157.134.212.40;1pkt 1fpkt", shape=invtriangle, color=brown];
6772[label="78.81.27.111;4pkt 4fpkt", shape=invtriangle, color=brown];
8008[label="78.81.27.111;3pkt 3fpkt", shape=invhouse, color=bisque];
stat788[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.81.27.111:1214, 145.3.6.250:*}[44.4444%]&lt;BR/&gt;{157.134.212.40:*, *:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (38.3333%)&lt;BR/&gt; 1832: (10%)&lt;BR/&gt; 1809: (10%)&lt;BR/&gt; 1808: (10%)&lt;BR/&gt; 0: (10%)&gt;];
}
225--1536[label="1;1pkt 1fpkt"];
225--1608[label="1;1pkt 1fpkt"];
225--4810[label="1;1pkt 1fpkt"];
225--6772[label="1;1pkt 1fpkt"];
225--8008[label="1;1pkt 1fpkt"];
1536--1608[label="1;4pkt 4fpkt"];
1536--2505[label="0.5;1pkt 1fpkt"];
1536--3031[label="1;3pkt 3fpkt"];
1536--4810[label="1;3pkt 3fpkt"];
1536--6772[label="1;4pkt 4fpkt"];
1536--8008[label="1;3pkt 3fpkt"];
1608--3031[label="1;3pkt 3fpkt"];
1608--4810[label="1;3pkt 3fpkt"];
1608--6772[label="1;4pkt 4fpkt"];
1608--8008[label="1;3pkt 3fpkt"];
2505--4161[label="1;1pkt 1fpkt"];
2505--6317[label="1;1pkt 1fpkt"];
3031--4810[label="0.666667;2pkt 2fpkt"];
3031--6772[label="1;3pkt 3fpkt"];
3031--8008[label="0.666667;2pkt 2fpkt"];
4161--6317[label="1;1pkt 1fpkt"];
4810--6772[label="1;3pkt 3fpkt"];
4810--8008[label="1;3pkt 3fpkt"];
6772--8008[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="157.134.212.40"/>
      <filter dst_ip="145.3.6.250" src_ip="78.81.27.111" src_port="1214"/>
    </slice>
    <from sec="1036990808" usec="0"/>
    <to sec="1036991410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_789{
style=filled;
color=gray75;
4167[label="148.242.209.41;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6322[label="148.242.209.41;12pkt 12fpkt", shape=invtriangle, color=brown];
7754[label="148.242.209.41;13pkt 13fpkt", shape=invhouse, color=bisque];
stat789[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.242.209.41:*, 129.171.76.196:443}[92.3077%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (48.6486%)&lt;BR/&gt; 49455: (4.05405%)&lt;BR/&gt; 49454: (4.05405%)&lt;BR/&gt; 49453: (4.05405%)&lt;BR/&gt; 49452: (4.05405%)&gt;];
}
4167--6322[label="1;12pkt 12fpkt"];
4167--7754[label="1;12pkt 12fpkt"];
6322--7754[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="129.171.76.196" dst_port="443" src_ip="148.242.209.41"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_790{
style=filled;
color=gray75;
4170[label="219.164.8.42;22pkt 22fpkt", shape=pentagon, color=darkviolet];
6324[label="219.164.8.42;23pkt 23fpkt", shape=invtriangle, color=brown];
stat790[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.164.8.42:6667, *:*}[65.2174%]&lt;BR/&gt;{219.164.8.42:*, 215.244.144.94:*}[34.7826%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (32.2222%)&lt;BR/&gt; 113: (8.88889%)&lt;BR/&gt; 1026: (6.66667%)&lt;BR/&gt; 6668: (4.44444%)&lt;BR/&gt; 56323: (2.22222%)&gt;];
}
4170--6324[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="215.244.144.94" src_ip="219.164.8.42"/>
      <filter src_ip="219.164.8.42" src_port="6667"/>
    </slice>
    <from sec="1036990802" usec="0"/>
    <to sec="1036991516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_791{
style=filled;
color=gray75;
4190[label="209.194.133.43;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6338[label="209.194.133.43;6pkt 6fpkt", shape=invtriangle, color=brown];
stat791[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.194.133.43:80, 145.208.134.104:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3026: (9.09091%)&lt;BR/&gt; 3025: (9.09091%)&lt;BR/&gt; 3024: (9.09091%)&lt;BR/&gt; 3023: (9.09091%)&gt;];
}
4190--6338[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.134.104" src_ip="209.194.133.43" src_port="80"/>
    </slice>
    <from sec="1036991265" usec="0"/>
    <to sec="1036991279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="199.21.159.43"/>
    </slice>
    <from sec="1036991125" usec="0"/>
    <to sec="1036991206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676574,2.717,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_793{
style=filled;
color=gray75;
343[label="9.65.175.43s;151pkt 151fpkt", shape=rectangle, color=red];
4183[label="197.113.19.43;252pkt 252fpkt", shape=pentagon, color=darkviolet];
4195[label="9.65.175.43;194pkt 194fpkt", shape=pentagon, color=darkviolet];
6342[label="9.65.175.43;194pkt 194fpkt", shape=invtriangle, color=brown];
stat793[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.113.19.43:1026, *:137}[56.5022%]&lt;BR/&gt;{9.65.175.43:1028, *:137}[43.4978%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1028: (29.5196%)&lt;BR/&gt; 1026: (20.4804%)&gt;];
}
343--4183[label="0.476821;72pkt 72fpkt"];
343--4195[label="0.523179;79pkt 79fpkt"];
343--6342[label="0.523179;79pkt 79fpkt"];
4195--6342[label="1;194pkt 194fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.113.19.43" src_port="1026"/>
      <filter dst_port="137" src_ip="9.65.175.43" src_port="1028"/>
    </slice>
    <from sec="1036991339" usec="0"/>
    <to sec="1036991383" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="76.172.145.45"/>
    </slice>
    <from sec="1036990917" usec="0"/>
    <to sec="1036991336" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_796{
style=filled;
color=gray75;
4215[label="145.3.106.46;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6352[label="145.3.106.46;2pkt 2fpkt", shape=invtriangle, color=brown];
stat796[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.3.106.46:1284, 201.59.55.13:80}[50%]&lt;BR/&gt;{145.3.106.46:1105, 201.138.55.166:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1284: (33.3333%)&lt;BR/&gt; 1105: (16.6667%)&gt;];
}
4215--6352[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.138.55.166" dst_port="80" src_ip="145.3.106.46" src_port="1105"/>
      <filter dst_ip="201.59.55.13" dst_port="80" src_ip="145.3.106.46" src_port="1284"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_797{
style=filled;
color=gray75;
4221[label="84.77.117.47;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6356[label="84.77.117.47;4pkt 4fpkt", shape=invtriangle, color=brown];
stat797[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.77.117.47:2732, 145.208.213.109:17010}[25%]&lt;BR/&gt;{84.77.117.47:2742, 145.208.213.109:17010}[25%]&lt;BR/&gt;{84.77.117.47:4151, 145.208.213.109:17010}[25%]&lt;BR/&gt;{84.77.117.47:4499, 145.208.213.109:17010}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 17010: (50%)&lt;BR/&gt; 4499: (12.5%)&lt;BR/&gt; 4151: (12.5%)&lt;BR/&gt; 2742: (12.5%)&lt;BR/&gt; 2732: (12.5%)&gt;];
}
4221--6356[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.213.109" dst_port="17010" src_ip="84.77.117.47" src_port="4499"/>
      <filter dst_ip="145.208.213.109" dst_port="17010" src_ip="84.77.117.47" src_port="4151"/>
      <filter dst_ip="145.208.213.109" dst_port="17010" src_ip="84.77.117.47" src_port="2742"/>
      <filter dst_ip="145.208.213.109" dst_port="17010" src_ip="84.77.117.47" src_port="2732"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991514" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_798{
style=filled;
color=gray75;
4224[label="133.213.189.47;24pkt 24fpkt", shape=pentagon, color=darkviolet];
6358[label="133.213.189.47;24pkt 24fpkt", shape=invtriangle, color=brown];
7774[label="133.213.189.47;24pkt 24fpkt", shape=invhouse, color=bisque];
stat798[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.213.189.47:*, 196.85.65.32:80}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49385: (2.08333%)&lt;BR/&gt; 49384: (2.08333%)&lt;BR/&gt; 49383: (2.08333%)&lt;BR/&gt; 49382: (2.08333%)&gt;];
}
4224--6358[label="1;24pkt 24fpkt"];
4224--7774[label="1;24pkt 24fpkt"];
6358--7774[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="196.85.65.32" dst_port="80" src_ip="133.213.189.47"/>
    </slice>
    <from sec="1036991268" usec="0"/>
    <to sec="1036991320" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_799{
style=filled;
color=gray75;
4225[label="145.3.32.48;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6359[label="145.3.32.48;1pkt 1fpkt", shape=invtriangle, color=brown];
stat799[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.3.32.48:2220, 215.54.76.129:1214}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2220: (50%)&lt;BR/&gt; 1214: (50%)&gt;];
}
4225--6359[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.54.76.129" dst_port="1214" src_ip="145.3.32.48" src_port="2220"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_800{
style=filled;
color=gray75;
352[label="202.161.69.48s;41pkt 41fpkt", shape=rectangle, color=red];
4226[label="202.161.69.48;182pkt 182fpkt", shape=pentagon, color=darkviolet];
6360[label="202.161.69.48;182pkt 182fpkt", shape=invtriangle, color=brown];
7775[label="202.161.69.48;182pkt 182fpkt", shape=invhouse, color=bisque];
stat800[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.161.69.48:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
352--4226[label="1;41pkt 41fpkt"];
352--6360[label="1;41pkt 41fpkt"];
352--7775[label="1;41pkt 41fpkt"];
4226--6360[label="1;182pkt 182fpkt"];
4226--7775[label="1;182pkt 182fpkt"];
6360--7775[label="1;182pkt 182fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.161.69.48" src_port="1030"/>
    </slice>
    <from sec="1036990960" usec="0"/>
    <to sec="1036990992" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_801{
style=filled;
color=gray75;
4228[label="77.133.130.48;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6361[label="77.133.130.48;1pkt 1fpkt", shape=invtriangle, color=brown];
stat801[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.133.130.48:25, 168.100.161.84:2998}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2998: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
4228--6361[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.100.161.84" dst_port="2998" src_ip="77.133.130.48" src_port="25"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_802{
style=filled;
color=gray75;
4229[label="76.161.136.48;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6362[label="76.161.136.48;4pkt 4fpkt", shape=invtriangle, color=brown];
stat802[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.161.136.48:1863, 145.208.133.65:1545}[25%]&lt;BR/&gt;{76.161.136.48:1863, 145.208.133.105:1044}[25%]&lt;BR/&gt;{76.161.136.48:1863, 145.208.132.149:3692}[25%]&lt;BR/&gt;{76.161.136.48:1863, 145.208.133.202:1038}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3692: (12.5%)&lt;BR/&gt; 1545: (12.5%)&lt;BR/&gt; 1044: (12.5%)&lt;BR/&gt; 1038: (12.5%)&gt;];
}
4229--6362[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.133.202" dst_port="1038" src_ip="76.161.136.48" src_port="1863"/>
      <filter dst_ip="145.208.132.149" dst_port="3692" src_ip="76.161.136.48" src_port="1863"/>
      <filter dst_ip="145.208.133.105" dst_port="1044" src_ip="76.161.136.48" src_port="1863"/>
      <filter dst_ip="145.208.133.65" dst_port="1545" src_ip="76.161.136.48" src_port="1863"/>
    </slice>
    <from sec="1036990806" usec="0"/>
    <to sec="1036991428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.136.62.49"/>
    </slice>
    <from sec="1036991118" usec="0"/>
    <to sec="1036991150" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_804{
style=filled;
color=gray75;
353[label="193.28.88.49s;45pkt 45fpkt", shape=rectangle, color=red];
4240[label="193.28.88.49;223pkt 223fpkt", shape=pentagon, color=darkviolet];
6371[label="193.28.88.49;223pkt 223fpkt", shape=invtriangle, color=brown];
7783[label="193.28.88.49;222pkt 222fpkt", shape=invhouse, color=bisque];
stat804[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.28.88.49:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
353--4240[label="1;45pkt 45fpkt"];
353--6371[label="1;45pkt 45fpkt"];
353--7783[label="1;45pkt 45fpkt"];
4240--6371[label="1;223pkt 223fpkt"];
4240--7783[label="1;222pkt 222fpkt"];
6371--7783[label="1;222pkt 222fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="193.28.88.49" src_port="1028"/>
    </slice>
    <from sec="1036990940" usec="0"/>
    <to sec="1036990976" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_805{
style=filled;
color=gray75;
4246[label="168.100.159.49;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6377[label="168.100.159.49;2pkt 2fpkt", shape=invtriangle, color=brown];
stat805[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.100.159.49:1200, 76.172.129.52:5190}[50%]&lt;BR/&gt;{168.100.159.49:1202, 76.172.134.93:5190}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5190: (50%)&lt;BR/&gt; 1202: (25%)&lt;BR/&gt; 1200: (25%)&gt;];
}
4246--6377[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="76.172.134.93" dst_port="5190" src_ip="168.100.159.49" src_port="1202"/>
      <filter dst_ip="76.172.129.52" dst_port="5190" src_ip="168.100.159.49" src_port="1200"/>
    </slice>
    <from sec="1036990803" usec="0"/>
    <to sec="1036991516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.102.1.50"/>
    </slice>
    <from sec="1036990803" usec="0"/>
    <to sec="1036991512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_807{
style=filled;
color=gray75;
4252[label="215.156.92.50;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6383[label="215.156.92.50;4pkt 4fpkt", shape=invtriangle, color=brown];
7790[label="215.156.92.50;3pkt 3fpkt", shape=invhouse, color=bisque];
stat807[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.156.92.50:80, 48.19.180.108:64628}[25%]&lt;BR/&gt;{215.156.92.50:80, 48.19.180.108:65442}[25%]&lt;BR/&gt;{215.156.92.50:80, 200.145.89.243:64271}[25%]&lt;BR/&gt;{215.156.92.50:80, 200.145.89.243:64274}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64628: (15%)&lt;BR/&gt; 64274: (15%)&lt;BR/&gt; 64271: (15%)&lt;BR/&gt; 65442: (5%)&gt;];
}
4252--6383[label="1;3pkt 3fpkt"];
4252--7790[label="1;3pkt 3fpkt"];
6383--7790[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="200.145.89.243" dst_port="64274" src_ip="215.156.92.50" src_port="80"/>
      <filter dst_ip="200.145.89.243" dst_port="64271" src_ip="215.156.92.50" src_port="80"/>
      <filter dst_ip="48.19.180.108" dst_port="65442" src_ip="215.156.92.50" src_port="80"/>
      <filter dst_ip="48.19.180.108" dst_port="64628" src_ip="215.156.92.50" src_port="80"/>
    </slice>
    <from sec="1036991002" usec="0"/>
    <to sec="1036991365" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_808{
style=filled;
color=gray75;
4253[label="197.26.105.50;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6384[label="197.26.105.50;1pkt 1fpkt", shape=invtriangle, color=brown];
7791[label="197.26.105.50;1pkt 1fpkt", shape=invhouse, color=bisque];
stat808[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.26.105.50:80, 175.177.241.55:60680}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60680: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4253--6384[label="1;1pkt 1fpkt"];
4253--7791[label="1;1pkt 1fpkt"];
6384--7791[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.177.241.55" dst_port="60680" src_ip="197.26.105.50" src_port="80"/>
    </slice>
    <from sec="1036991072" usec="0"/>
    <to sec="1036991417" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_809{
style=filled;
color=gray75;
4257[label="148.242.146.51;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6386[label="148.242.146.51;2pkt 2fpkt", shape=invtriangle, color=brown];
7792[label="148.242.146.51;2pkt 2fpkt", shape=invhouse, color=bisque];
stat809[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.242.146.51:80, 214.14.20.102:58358}[50%]&lt;BR/&gt;{148.242.146.51:80, 214.14.96.159:46429}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58358: (25%)&lt;BR/&gt; 46429: (25%)&gt;];
}
4257--6386[label="1;2pkt 2fpkt"];
4257--7792[label="1;2pkt 2fpkt"];
6386--7792[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="214.14.96.159" dst_port="46429" src_ip="148.242.146.51" src_port="80"/>
      <filter dst_ip="214.14.20.102" dst_port="58358" src_ip="148.242.146.51" src_port="80"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="162.85.36.52"/>
    </slice>
    <from sec="1036991313" usec="0"/>
    <to sec="1036991351" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_811{
style=filled;
color=gray75;
4263[label="10.151.41.52;237pkt 237fpkt", shape=pentagon, color=darkviolet];
6390[label="10.151.41.52;236pkt 236fpkt", shape=invtriangle, color=brown];
7795[label="10.151.41.52;236pkt 236fpkt", shape=invhouse, color=bisque];
stat811[shape=component, label=&lt;Rules:&lt;BR/&gt;{10.151.41.52:*, 10.0.1.1:192}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 192: (50%)&lt;BR/&gt; 53173: (0.211566%)&lt;BR/&gt; 53172: (0.211566%)&lt;BR/&gt; 53171: (0.211566%)&lt;BR/&gt; 53170: (0.211566%)&gt;];
}
4263--6390[label="1;236pkt 236fpkt"];
4263--7795[label="1;236pkt 236fpkt"];
6390--7795[label="1;236pkt 236fpkt"];
</description>
    <slice>
      <filter dst_ip="10.0.1.1" dst_port="192" src_ip="10.151.41.52"/>
    </slice>
    <from sec="1036990807" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.96.106.52"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="199.202.126.52"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_814{
style=filled;
color=gray75;
4269[label="198.72.132.52;22pkt 22fpkt", shape=pentagon, color=darkviolet];
6396[label="198.72.132.52;22pkt 22fpkt", shape=invtriangle, color=brown];
7798[label="198.72.132.52;22pkt 22fpkt", shape=invhouse, color=bisque];
stat814[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.72.132.52:80, 148.242.164.57:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2404: (2.27273%)&lt;BR/&gt; 2403: (2.27273%)&lt;BR/&gt; 2402: (2.27273%)&lt;BR/&gt; 2401: (2.27273%)&gt;];
}
4269--6396[label="1;22pkt 22fpkt"];
4269--7798[label="1;22pkt 22fpkt"];
6396--7798[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="148.242.164.57" src_ip="198.72.132.52" src_port="80"/>
    </slice>
    <from sec="1036991002" usec="0"/>
    <to sec="1036991005" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_815{
style=filled;
color=gray75;
4270[label="76.161.136.52;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6397[label="76.161.136.52;8pkt 8fpkt", shape=invtriangle, color=brown];
7799[label="76.161.136.52;8pkt 8fpkt", shape=invhouse, color=bisque];
stat815[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.161.136.52:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4748: (6.25%)&lt;BR/&gt; 3131: (6.25%)&lt;BR/&gt; 3050: (6.25%)&lt;BR/&gt; 3022: (6.25%)&gt;];
}
4270--6397[label="1;8pkt 8fpkt"];
4270--7799[label="1;8pkt 8fpkt"];
6397--7799[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter src_ip="76.161.136.52" src_port="1863"/>
    </slice>
    <from sec="1036990804" usec="0"/>
    <to sec="1036991472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_816{
style=filled;
color=gray75;
4294[label="145.208.129.54;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6412[label="145.208.129.54;3pkt 3fpkt", shape=invtriangle, color=brown];
7807[label="145.208.129.54;3pkt 3fpkt", shape=invhouse, color=bisque];
stat816[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.129.54:3354, 76.161.136.39:1863}[33.3333%]&lt;BR/&gt;{145.208.129.54:3116, 76.161.137.68:1863}[33.3333%]&lt;BR/&gt;{145.208.129.54:3353, 76.161.136.71:1863}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3354: (16.6667%)&lt;BR/&gt; 3353: (16.6667%)&lt;BR/&gt; 3116: (16.6667%)&gt;];
}
4294--6412[label="1;3pkt 3fpkt"];
4294--7807[label="1;3pkt 3fpkt"];
6412--7807[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="76.161.136.71" dst_port="1863" src_ip="145.208.129.54" src_port="3353"/>
      <filter dst_ip="76.161.137.68" dst_port="1863" src_ip="145.208.129.54" src_port="3116"/>
      <filter dst_ip="76.161.136.39" dst_port="1863" src_ip="145.208.129.54" src_port="3354"/>
    </slice>
    <from sec="1036990817" usec="0"/>
    <to sec="1036991510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_817{
style=filled;
color=gray75;
4295[label="199.10.133.54;121pkt 121fpkt", shape=pentagon, color=darkviolet];
6413[label="199.10.133.54;121pkt 121fpkt", shape=invtriangle, color=brown];
7808[label="199.10.133.54;121pkt 121fpkt", shape=invhouse, color=bisque];
stat817[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.10.133.54:1033, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1033: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4295--6413[label="1;121pkt 121fpkt"];
4295--7808[label="1;121pkt 121fpkt"];
6413--7808[label="1;121pkt 121fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.10.133.54" src_port="1033"/>
    </slice>
    <from sec="1036991295" usec="0"/>
    <to sec="1036991325" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_818{
style=filled;
color=gray75;
4304[label="202.7.91.55;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6420[label="202.7.91.55;5pkt 5fpkt", shape=invtriangle, color=brown];
stat818[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.7.91.55:1025, 148.242.67.128:137}[20%]&lt;BR/&gt;{202.7.91.55:1025, 148.242.67.130:137}[20%]&lt;BR/&gt;{202.7.91.55:1025, 148.242.67.131:137}[20%]&lt;BR/&gt;{202.7.91.55:1025, 148.242.67.136:137}[20%]&lt;BR/&gt;{202.7.91.55:1025, 148.242.67.137:137}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4304--6420[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="148.242.67.137" dst_port="137" src_ip="202.7.91.55" src_port="1025"/>
      <filter dst_ip="148.242.67.136" dst_port="137" src_ip="202.7.91.55" src_port="1025"/>
      <filter dst_ip="148.242.67.131" dst_port="137" src_ip="202.7.91.55" src_port="1025"/>
      <filter dst_ip="148.242.67.130" dst_port="137" src_ip="202.7.91.55" src_port="1025"/>
      <filter dst_ip="148.242.67.128" dst_port="137" src_ip="202.7.91.55" src_port="1025"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="173.189.150.55"/>
    </slice>
    <from sec="1036990816" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.101.193.56"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="78.31.224.56"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_822{
style=filled;
color=gray75;
361[label="199.239.226.56s;84pkt 84fpkt", shape=rectangle, color=red];
4322[label="199.239.226.56;195pkt 195fpkt", shape=pentagon, color=darkviolet];
6434[label="199.239.226.56;194pkt 194fpkt", shape=invtriangle, color=brown];
7819[label="199.239.226.56;195pkt 195fpkt", shape=invhouse, color=bisque];
stat822[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.239.226.56:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
361--4322[label="1;84pkt 84fpkt"];
361--6434[label="1;84pkt 84fpkt"];
361--7819[label="1;84pkt 84fpkt"];
4322--6434[label="1;194pkt 194fpkt"];
4322--7819[label="1;195pkt 195fpkt"];
6434--7819[label="1;194pkt 194fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.239.226.56" src_port="1026"/>
    </slice>
    <from sec="1036991351" usec="0"/>
    <to sec="1036991382" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945007,2.69627,501,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_823{
style=filled;
color=gray75;
2625[label="215.156.92.58;s;10pkt 10fpkt", shape=diamond, color=yellow];
4334[label="215.156.92.58;11pkt 11fpkt", shape=pentagon, color=darkviolet];
6441[label="215.156.92.58;11pkt 11fpkt", shape=invtriangle, color=brown];
7822[label="215.156.92.58;11pkt 11fpkt", shape=invhouse, color=bisque];
stat823[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.156.92.58:21, 192.21.49.31:*}[63.6364%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (50%)&lt;BR/&gt; 4278: (4.65116%)&lt;BR/&gt; 4045: (4.65116%)&lt;BR/&gt; 2878: (4.65116%)&lt;BR/&gt; 2794: (4.65116%)&gt;];
}
2625--4334[label="1;10pkt 10fpkt"];
2625--6441[label="1;10pkt 10fpkt"];
2625--7822[label="1;10pkt 10fpkt"];
4334--6441[label="1;11pkt 11fpkt"];
4334--7822[label="1;11pkt 11fpkt"];
6441--7822[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="192.21.49.31" src_ip="215.156.92.58" src_port="21"/>
    </slice>
    <from sec="1036990834" usec="0"/>
    <to sec="1036991517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_824{
style=filled;
color=gray75;
4340[label="215.130.226.58;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6445[label="215.130.226.58;1pkt 1fpkt", shape=invtriangle, color=brown];
stat824[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.130.226.58:80, 214.119.132.239:3988}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3988: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4340--6445[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.119.132.239" dst_port="3988" src_ip="215.130.226.58" src_port="80"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_825{
style=filled;
color=gray75;
4343[label="215.156.95.59;21pkt 21fpkt", shape=pentagon, color=darkviolet];
6447[label="215.156.95.59;20pkt 20fpkt", shape=invtriangle, color=brown];
stat825[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.156.95.59:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58841: (2.43902%)&lt;BR/&gt; 57139: (2.43902%)&lt;BR/&gt; 57135: (2.43902%)&lt;BR/&gt; 56217: (2.43902%)&gt;];
}
4343--6447[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter src_ip="215.156.95.59" src_port="80"/>
    </slice>
    <from sec="1036990881" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_826{
style=filled;
color=gray75;
4348[label="217.232.201.59;114pkt 114fpkt", shape=pentagon, color=darkviolet];
6449[label="217.232.201.59;114pkt 114fpkt", shape=invtriangle, color=brown];
7824[label="217.232.201.59;114pkt 114fpkt", shape=invhouse, color=bisque];
stat826[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.232.201.59:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4348--6449[label="1;114pkt 114fpkt"];
4348--7824[label="1;114pkt 114fpkt"];
6449--7824[label="1;114pkt 114fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="217.232.201.59" src_port="1029"/>
    </slice>
    <from sec="1036990906" usec="0"/>
    <to sec="1036990925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_827{
style=filled;
color=gray75;
4351[label="214.24.83.60;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6452[label="214.24.83.60;14pkt 14fpkt", shape=invtriangle, color=brown];
7827[label="214.24.83.60;13pkt 13fpkt", shape=invhouse, color=bisque];
stat827[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.24.83.60:80, 133.213.217.119:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4453: (3.75%)&lt;BR/&gt; 4450: (3.75%)&lt;BR/&gt; 4449: (3.75%)&lt;BR/&gt; 4447: (3.75%)&gt;];
}
4351--6452[label="1;13pkt 13fpkt"];
4351--7827[label="1;13pkt 13fpkt"];
6452--7827[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="133.213.217.119" src_ip="214.24.83.60" src_port="80"/>
    </slice>
    <from sec="1036991002" usec="0"/>
    <to sec="1036991102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_829{
style=filled;
color=gray75;
4361[label="76.161.136.61;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6458[label="76.161.136.61;4pkt 4fpkt", shape=invtriangle, color=brown];
stat829[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.161.136.61:1863, 214.121.177.26:3122}[20%]&lt;BR/&gt;{76.161.136.61:1863, 145.208.189.36:1947}[20%]&lt;BR/&gt;{76.161.136.61:1863, 148.242.132.39:1237}[20%]&lt;BR/&gt;{76.161.136.61:1863, 148.242.132.54:1513}[20%]&lt;BR/&gt;{76.161.136.61:1863, 214.121.176.130:4722}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4722: (11.1111%)&lt;BR/&gt; 3122: (11.1111%)&lt;BR/&gt; 1947: (11.1111%)&lt;BR/&gt; 1513: (11.1111%)&gt;];
}
4361--6458[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="214.121.176.130" dst_port="4722" src_ip="76.161.136.61" src_port="1863"/>
      <filter dst_ip="148.242.132.54" dst_port="1513" src_ip="76.161.136.61" src_port="1863"/>
      <filter dst_ip="148.242.132.39" dst_port="1237" src_ip="76.161.136.61" src_port="1863"/>
      <filter dst_ip="145.208.189.36" dst_port="1947" src_ip="76.161.136.61" src_port="1863"/>
      <filter dst_ip="214.121.177.26" dst_port="3122" src_ip="76.161.136.61" src_port="1863"/>
    </slice>
    <from sec="1036990931" usec="0"/>
    <to sec="1036991517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_830{
style=filled;
color=gray75;
4362[label="9.32.154.61;173pkt 173fpkt", shape=pentagon, color=darkviolet];
6459[label="9.32.154.61;173pkt 173fpkt", shape=invtriangle, color=brown];
7830[label="9.32.154.61;174pkt 174fpkt", shape=invhouse, color=bisque];
stat830[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.32.154.61:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4362--6459[label="1;173pkt 173fpkt"];
4362--7830[label="1;173pkt 173fpkt"];
6459--7830[label="1;173pkt 173fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.32.154.61" src_port="1029"/>
    </slice>
    <from sec="1036991345" usec="0"/>
    <to sec="1036991379" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_831{
style=filled;
color=gray75;
4367[label="202.29.192.61;153pkt 153fpkt", shape=pentagon, color=darkviolet];
6462[label="202.29.192.61;153pkt 153fpkt", shape=invtriangle, color=brown];
stat831[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.29.192.61:1033, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1033: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4367--6462[label="1;153pkt 153fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.29.192.61" src_port="1033"/>
    </slice>
    <from sec="1036991334" usec="0"/>
    <to sec="1036991358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_832{
style=filled;
color=gray75;
4377[label="162.133.203.62;163pkt 163fpkt", shape=pentagon, color=darkviolet];
6470[label="162.133.203.62;162pkt 162fpkt", shape=invtriangle, color=brown];
stat832[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.133.203.62:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4377--6470[label="1;162pkt 162fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="162.133.203.62" src_port="1027"/>
    </slice>
    <from sec="1036991347" usec="0"/>
    <to sec="1036991373" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.183.216.62"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_834{
style=filled;
color=gray75;
4388[label="199.57.196.63;200pkt 200fpkt", shape=pentagon, color=darkviolet];
6476[label="199.57.196.63;199pkt 199fpkt", shape=invtriangle, color=brown];
7839[label="199.57.196.63;200pkt 200fpkt", shape=invhouse, color=bisque];
stat834[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.57.196.63:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4388--6476[label="1;199pkt 199fpkt"];
4388--7839[label="1;200pkt 200fpkt"];
6476--7839[label="1;199pkt 199fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.57.196.63" src_port="1025"/>
    </slice>
    <from sec="1036990879" usec="0"/>
    <to sec="1036990917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_835{
style=filled;
color=gray75;
4393[label="145.208.35.64;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6480[label="145.208.35.64;2pkt 2fpkt", shape=invtriangle, color=brown];
stat835[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.35.64:50472, 76.98.128.129:80}[50%]&lt;BR/&gt;{145.208.35.64:50473, 76.98.128.129:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50473: (25%)&lt;BR/&gt; 50472: (25%)&gt;];
}
4393--6480[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="76.98.128.129" dst_port="80" src_ip="145.208.35.64" src_port="50473"/>
      <filter dst_ip="76.98.128.129" dst_port="80" src_ip="145.208.35.64" src_port="50472"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="78.179.37.64"/>
    </slice>
    <from sec="1036991282" usec="0"/>
    <to sec="1036991517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_837{
style=filled;
color=gray75;
4407[label="145.208.133.65;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6491[label="145.208.133.65;2pkt 2fpkt", shape=invtriangle, color=brown];
stat837[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.133.65:1553, 76.161.136.49:1863}[50%]&lt;BR/&gt;{145.208.133.65:1537, 76.161.136.144:1863}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1553: (25%)&lt;BR/&gt; 1537: (25%)&gt;];
}
4407--6491[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="76.161.136.144" dst_port="1863" src_ip="145.208.133.65" src_port="1537"/>
      <filter dst_ip="76.161.136.49" dst_port="1863" src_ip="145.208.133.65" src_port="1553"/>
    </slice>
    <from sec="1036990811" usec="0"/>
    <to sec="1036991435" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.122.98.66"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_839{
style=filled;
color=gray75;
4416[label="145.208.129.66;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6497[label="145.208.129.66;8pkt 8fpkt", shape=invtriangle, color=brown];
stat839[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.129.66:*, 77.133.138.171:7001}[44.4444%]&lt;BR/&gt;{145.208.129.66:*, 76.161.136.140:1863}[22.2222%]&lt;BR/&gt;{145.208.129.66:*, *:443}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7001: (23.5294%)&lt;BR/&gt; 1863: (14.7059%)&lt;BR/&gt; 443: (11.7647%)&lt;BR/&gt; 1513: (5.88235%)&lt;BR/&gt; 1512: (5.88235%)&gt;];
}
4416--6497[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_port="443" src_ip="145.208.129.66"/>
      <filter dst_ip="77.133.138.171" dst_port="7001" src_ip="145.208.129.66"/>
      <filter dst_ip="76.161.136.140" dst_port="1863" src_ip="145.208.129.66"/>
    </slice>
    <from sec="1036990827" usec="0"/>
    <to sec="1036991410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_840{
style=filled;
color=gray75;
4419[label="76.161.136.67;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6498[label="76.161.136.67;3pkt 3fpkt", shape=invtriangle, color=brown];
7847[label="76.161.136.67;4pkt 4fpkt", shape=invhouse, color=bisque];
stat840[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.161.136.67:1863, 145.208.189.12:3438}[25%]&lt;BR/&gt;{76.161.136.67:1863, 145.208.128.82:1918}[25%]&lt;BR/&gt;{76.161.136.67:1863, 145.208.87.85:1583}[25%]&lt;BR/&gt;{76.161.136.67:1863, 145.208.128.137:1081}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3438: (13.6364%)&lt;BR/&gt; 1918: (13.6364%)&lt;BR/&gt; 1583: (13.6364%)&lt;BR/&gt; 1081: (9.09091%)&gt;];
}
4419--6498[label="1;3pkt 3fpkt"];
4419--7847[label="1;4pkt 4fpkt"];
6498--7847[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.128.137" dst_port="1081" src_ip="76.161.136.67" src_port="1863"/>
      <filter dst_ip="145.208.87.85" dst_port="1583" src_ip="76.161.136.67" src_port="1863"/>
      <filter dst_ip="145.208.128.82" dst_port="1918" src_ip="76.161.136.67" src_port="1863"/>
      <filter dst_ip="145.208.189.12" dst_port="3438" src_ip="76.161.136.67" src_port="1863"/>
    </slice>
    <from sec="1036990877" usec="0"/>
    <to sec="1036991501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_841{
style=filled;
color=gray75;
4423[label="76.240.197.67;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6501[label="76.240.197.67;11pkt 11fpkt", shape=invtriangle, color=brown];
7849[label="76.240.197.67;11pkt 11fpkt", shape=invhouse, color=bisque];
stat841[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.240.197.67:110, 145.208.22.195:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (50%)&lt;BR/&gt; 3368: (4.41176%)&lt;BR/&gt; 3366: (4.41176%)&lt;BR/&gt; 3364: (4.41176%)&lt;BR/&gt; 3362: (4.41176%)&gt;];
}
4423--6501[label="1;11pkt 11fpkt"];
4423--7849[label="1;11pkt 11fpkt"];
6501--7849[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.22.195" src_ip="76.240.197.67" src_port="110"/>
    </slice>
    <from sec="1036990811" usec="0"/>
    <to sec="1036991480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_842{
style=filled;
color=gray75;
4432[label="168.100.169.68;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6506[label="168.100.169.68;9pkt 9fpkt", shape=invtriangle, color=brown];
stat842[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.100.169.68:25, 78.193.163.86:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 48371: (5.26316%)&lt;BR/&gt; 46505: (5.26316%)&lt;BR/&gt; 44023: (5.26316%)&lt;BR/&gt; 40272: (5.26316%)&gt;];
}
4432--6506[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="78.193.163.86" src_ip="168.100.169.68" src_port="25"/>
    </slice>
    <from sec="1036990820" usec="0"/>
    <to sec="1036991513" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="78.25.42.69"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="175.177.69.69"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.985253,2.73798,999,1 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_845{
style=filled;
color=gray75;
377[label="202.168.107.69s;1pkt 1fpkt", shape=rectangle, color=red];
2601[label="165.163.171.69;s;1pkt 1fpkt", shape=diamond, color=yellow];
6518[label="165.163.171.69;1pkt 1fpkt", shape=invtriangle, color=brown];
stat845[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.163.171.69:6699, 133.213.3.208:3662}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3662: (50%)&gt;];
}
377--827[label="1;1pkt 1fpkt"];
377--2601[label="1;1pkt 1fpkt"];
377--6518[label="1;1pkt 1fpkt"];
2601--6518[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.213.3.208" dst_port="3662" src_ip="165.163.171.69" src_port="6699"/>
    </slice>
    <from sec="1036990806" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_846{
style=filled;
color=gray75;
4451[label="199.181.29.70;21pkt 21fpkt", shape=pentagon, color=darkviolet];
6520[label="199.181.29.70;22pkt 22fpkt", shape=invtriangle, color=brown];
stat846[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.181.29.70:110, 145.208.129.54:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (50%)&lt;BR/&gt; 3385: (2.32558%)&lt;BR/&gt; 3383: (2.32558%)&lt;BR/&gt; 3380: (2.32558%)&lt;BR/&gt; 3378: (2.32558%)&gt;];
}
4451--6520[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.129.54" src_ip="199.181.29.70" src_port="110"/>
    </slice>
    <from sec="1036990845" usec="0"/>
    <to sec="1036991481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_847{
style=filled;
color=gray75;
4453[label="9.9.85.70;252pkt 252fpkt", shape=pentagon, color=darkviolet];
6521[label="9.9.85.70;251pkt 251fpkt", shape=invtriangle, color=brown];
7860[label="9.9.85.70;251pkt 251fpkt", shape=invhouse, color=bisque];
stat847[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.9.85.70:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4453--6521[label="1;251pkt 251fpkt"];
4453--7860[label="1;251pkt 251fpkt"];
6521--7860[label="1;251pkt 251fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.9.85.70" src_port="1027"/>
    </slice>
    <from sec="1036991217" usec="0"/>
    <to sec="1036991258" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_848{
style=filled;
color=gray75;
4462[label="85.113.241.70;136pkt 136fpkt", shape=pentagon, color=darkviolet];
6527[label="85.113.241.70;136pkt 136fpkt", shape=invtriangle, color=brown];
7865[label="85.113.241.70;136pkt 136fpkt", shape=invhouse, color=bisque];
stat848[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.113.241.70:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 61996: (0.367647%)&lt;BR/&gt; 61977: (0.367647%)&lt;BR/&gt; 61976: (0.367647%)&lt;BR/&gt; 61963: (0.367647%)&gt;];
}
4462--6527[label="1;136pkt 136fpkt"];
4462--7865[label="1;136pkt 136fpkt"];
6527--7865[label="1;136pkt 136fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="85.113.241.70"/>
    </slice>
    <from sec="1036991151" usec="0"/>
    <to sec="1036991173" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_849{
style=filled;
color=gray75;
4469[label="168.100.161.71;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6531[label="168.100.161.71;9pkt 9fpkt", shape=invtriangle, color=brown];
7868[label="168.100.161.71;10pkt 10fpkt", shape=invhouse, color=bisque];
stat849[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.100.161.71:80, 203.14.19.22:*}[30%]&lt;BR/&gt;{168.100.161.71:80, 214.183.224.169:*}[20%]&lt;BR/&gt;{168.100.161.71:*, 218.99.132.212:25}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (28.5714%)&lt;BR/&gt; 25: (21.4286%)&lt;BR/&gt; 37220: (5.35714%)&lt;BR/&gt; 4999: (5.35714%)&lt;BR/&gt; 4993: (5.35714%)&gt;];
}
4469--6531[label="1;9pkt 9fpkt"];
4469--7868[label="1;9pkt 9fpkt"];
6531--7868[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="203.14.19.22" src_ip="168.100.161.71" src_port="80"/>
      <filter dst_ip="218.99.132.212" dst_port="25" src_ip="168.100.161.71"/>
      <filter dst_ip="214.183.224.169" src_ip="168.100.161.71" src_port="80"/>
    </slice>
    <from sec="1036990805" usec="0"/>
    <to sec="1036991517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_850{
style=filled;
color=gray75;
4484[label="48.24.1.73;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6541[label="48.24.1.73;1pkt 1fpkt", shape=invtriangle, color=brown];
7876[label="48.24.1.73;1pkt 1fpkt", shape=invhouse, color=bisque];
stat850[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.24.1.73:6699, 214.121.184.15:2004}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 2004: (50%)&gt;];
}
4484--6541[label="1;1pkt 1fpkt"];
4484--7876[label="1;1pkt 1fpkt"];
6541--7876[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.121.184.15" dst_port="2004" src_ip="48.24.1.73" src_port="6699"/>
    </slice>
    <from sec="1036990802" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_851{
style=filled;
color=gray75;
4492[label="168.100.186.73;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6548[label="168.100.186.73;2pkt 2fpkt", shape=invtriangle, color=brown];
stat851[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.100.186.73:113, 217.208.208.80:60729}[50%]&lt;BR/&gt;{168.100.186.73:1453, 217.208.208.80:6667}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60729: (25%)&lt;BR/&gt; 6667: (25%)&lt;BR/&gt; 1453: (25%)&lt;BR/&gt; 113: (25%)&gt;];
}
4492--6548[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="217.208.208.80" dst_port="6667" src_ip="168.100.186.73" src_port="1453"/>
      <filter dst_ip="217.208.208.80" dst_port="60729" src_ip="168.100.186.73" src_port="113"/>
    </slice>
    <from sec="1036990807" usec="0"/>
    <to sec="1036991516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_852{
style=filled;
color=gray75;
387[label="192.213.36.74s;101pkt 101fpkt", shape=rectangle, color=red];
4496[label="192.213.36.74;124pkt 124fpkt", shape=pentagon, color=darkviolet];
6551[label="192.213.36.74;123pkt 123fpkt", shape=invtriangle, color=brown];
7881[label="192.213.36.74;124pkt 124fpkt", shape=invhouse, color=bisque];
stat852[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.213.36.74:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
387--4496[label="1;101pkt 101fpkt"];
387--6551[label="0.990099;100pkt 100fpkt"];
387--7881[label="1;101pkt 101fpkt"];
4496--6551[label="1;123pkt 123fpkt"];
4496--7881[label="1;124pkt 124fpkt"];
6551--7881[label="1;123pkt 123fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="192.213.36.74" src_port="1025"/>
    </slice>
    <from sec="1036991409" usec="0"/>
    <to sec="1036991429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.247.168.74"/>
    </slice>
    <from sec="1036991464" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_854{
style=filled;
color=gray75;
4510[label="48.170.144.75;179pkt 179fpkt", shape=pentagon, color=darkviolet];
6560[label="48.170.144.75;179pkt 179fpkt", shape=invtriangle, color=brown];
7888[label="48.170.144.75;178pkt 178fpkt", shape=invhouse, color=bisque];
stat854[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.170.144.75:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4510--6560[label="1;179pkt 179fpkt"];
4510--7888[label="1;178pkt 178fpkt"];
6560--7888[label="1;178pkt 178fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="48.170.144.75" src_port="1031"/>
    </slice>
    <from sec="1036991117" usec="0"/>
    <to sec="1036991145" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="133.213.168.76"/>
    </slice>
    <from sec="1036990802" usec="0"/>
    <to sec="1036991514" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_856{
style=filled;
color=gray75;
4522[label="196.37.76.78;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6568[label="196.37.76.78;2pkt 2fpkt", shape=invtriangle, color=brown];
7895[label="196.37.76.78;2pkt 2fpkt", shape=invhouse, color=bisque];
stat856[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.37.76.78:80, 214.119.134.145:9772}[50%]&lt;BR/&gt;{196.37.76.78:80, 214.119.134.145:48041}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 48041: (25%)&lt;BR/&gt; 9772: (25%)&gt;];
}
4522--6568[label="1;2pkt 2fpkt"];
4522--7895[label="1;2pkt 2fpkt"];
6568--7895[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="214.119.134.145" dst_port="48041" src_ip="196.37.76.78" src_port="80"/>
      <filter dst_ip="214.119.134.145" dst_port="9772" src_ip="196.37.76.78" src_port="80"/>
    </slice>
    <from sec="1036990941" usec="0"/>
    <to sec="1036991489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.249.106.78"/>
    </slice>
    <from sec="1036990824" usec="0"/>
    <to sec="1036991499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823917,2.71604,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_858{
style=filled;
color=gray75;
1759[label="168.100.161.78;s;83pkt 83fpkt", shape=diamond, color=yellow];
4530[label="168.100.161.78;83pkt 83fpkt", shape=pentagon, color=darkviolet];
6574[label="168.100.161.78;84pkt 84fpkt", shape=invtriangle, color=brown];
stat858[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.100.161.78:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1759--4530[label="0.987952;82pkt 82fpkt"];
1759--6574[label="1;83pkt 83fpkt"];
4530--6574[label="1;83pkt 83fpkt"];
</description>
    <slice>
      <filter src_ip="168.100.161.78"/>
    </slice>
    <from sec="1036990804" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_859{
style=filled;
color=gray75;
4544[label="215.2.5.81;171pkt 171fpkt", shape=pentagon, color=darkviolet];
6583[label="215.2.5.81;170pkt 170fpkt", shape=invtriangle, color=brown];
7903[label="215.2.5.81;170pkt 170fpkt", shape=invhouse, color=bisque];
stat859[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.2.5.81:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4544--6583[label="1;170pkt 170fpkt"];
4544--7903[label="1;170pkt 170fpkt"];
6583--7903[label="1;170pkt 170fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.2.5.81" src_port="1029"/>
    </slice>
    <from sec="1036991356" usec="0"/>
    <to sec="1036991383" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_860{
style=filled;
color=gray75;
4553[label="193.98.134.81;236pkt 236fpkt", shape=pentagon, color=darkviolet];
6588[label="193.98.134.81;236pkt 236fpkt", shape=invtriangle, color=brown];
7907[label="193.98.134.81;235pkt 235fpkt", shape=invhouse, color=bisque];
stat860[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.98.134.81:19037, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19037: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4553--6588[label="1;236pkt 236fpkt"];
4553--7907[label="1;235pkt 235fpkt"];
6588--7907[label="1;235pkt 235fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="193.98.134.81" src_port="19037"/>
    </slice>
    <from sec="1036991206" usec="0"/>
    <to sec="1036991242" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_861{
style=filled;
color=gray75;
4555[label="76.240.192.81;53pkt 53fpkt", shape=pentagon, color=darkviolet];
6590[label="76.240.192.81;52pkt 52fpkt", shape=invtriangle, color=brown];
7909[label="76.240.192.81;52pkt 52fpkt", shape=invhouse, color=bisque];
stat861[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.240.192.81:80, 145.208.129.98:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3189: (0.955414%)&lt;BR/&gt; 3188: (0.955414%)&lt;BR/&gt; 3187: (0.955414%)&lt;BR/&gt; 3186: (0.955414%)&gt;];
}
4555--6590[label="1;52pkt 52fpkt"];
4555--7909[label="1;52pkt 52fpkt"];
6590--7909[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.129.98" src_ip="76.240.192.81" src_port="80"/>
    </slice>
    <from sec="1036991320" usec="0"/>
    <to sec="1036991434" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676574,2.717,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_862{
style=filled;
color=gray75;
399[label="76.176.69.82s;36pkt 36fpkt", shape=rectangle, color=red];
4561[label="76.176.69.82;108pkt 108fpkt", shape=pentagon, color=darkviolet];
6592[label="76.176.69.82;109pkt 109fpkt", shape=invtriangle, color=brown];
stat862[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.176.69.82:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
399--4561[label="1;36pkt 36fpkt"];
399--6592[label="1;36pkt 36fpkt"];
4561--6592[label="1;108pkt 108fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="76.176.69.82" src_port="1025"/>
    </slice>
    <from sec="1036991094" usec="0"/>
    <to sec="1036991112" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_863{
style=filled;
color=gray75;
4563[label="215.156.88.82;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6594[label="215.156.88.82;1pkt 1fpkt", shape=invtriangle, color=brown];
7911[label="215.156.88.82;1pkt 1fpkt", shape=invhouse, color=bisque];
stat863[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.156.88.82:1109, 8.133.70.105:63216}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63216: (50%)&lt;BR/&gt; 1109: (50%)&gt;];
}
4563--6594[label="1;1pkt 1fpkt"];
4563--7911[label="1;1pkt 1fpkt"];
6594--7911[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="8.133.70.105" dst_port="63216" src_ip="215.156.88.82" src_port="1109"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_864{
style=filled;
color=gray75;
4568[label="215.208.232.82;123pkt 123fpkt", shape=pentagon, color=darkviolet];
6596[label="215.208.232.82;123pkt 123fpkt", shape=invtriangle, color=brown];
7913[label="215.208.232.82;124pkt 124fpkt", shape=invhouse, color=bisque];
stat864[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.208.232.82:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4568--6596[label="1;123pkt 123fpkt"];
4568--7913[label="1;123pkt 123fpkt"];
6596--7913[label="1;123pkt 123fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.208.232.82" src_port="1025"/>
    </slice>
    <from sec="1036990875" usec="0"/>
    <to sec="1036990896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="152.145.163.83"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.194.134.84"/>
    </slice>
    <from sec="1036990811" usec="0"/>
    <to sec="1036991510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.169.198.84"/>
    </slice>
    <from sec="1036991279" usec="0"/>
    <to sec="1036991327" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_868{
style=filled;
color=gray75;
4593[label="9.71.138.85;254pkt 254fpkt", shape=pentagon, color=darkviolet];
6613[label="9.71.138.85;254pkt 254fpkt", shape=invtriangle, color=brown];
7923[label="9.71.138.85;255pkt 255fpkt", shape=invhouse, color=bisque];
stat868[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.71.138.85:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4593--6613[label="1;254pkt 254fpkt"];
4593--7923[label="1;254pkt 254fpkt"];
6613--7923[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.71.138.85" src_port="1025"/>
    </slice>
    <from sec="1036991248" usec="0"/>
    <to sec="1036991288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_869{
style=filled;
color=gray75;
4594[label="9.249.139.85;174pkt 174fpkt", shape=pentagon, color=darkviolet];
6614[label="9.249.139.85;175pkt 175fpkt", shape=invtriangle, color=brown];
7924[label="9.249.139.85;175pkt 175fpkt", shape=invhouse, color=bisque];
stat869[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.249.139.85:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4594--6614[label="1;174pkt 174fpkt"];
4594--7924[label="1;174pkt 174fpkt"];
6614--7924[label="1;175pkt 175fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.249.139.85" src_port="1027"/>
    </slice>
    <from sec="1036991232" usec="0"/>
    <to sec="1036991259" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_870{
style=filled;
color=gray75;
4609[label="9.14.169.87;230pkt 230fpkt", shape=pentagon, color=darkviolet];
6625[label="9.14.169.87;229pkt 229fpkt", shape=invtriangle, color=brown];
stat870[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.14.169.87:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4609--6625[label="1;229pkt 229fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.14.169.87" src_port="1025"/>
    </slice>
    <from sec="1036991244" usec="0"/>
    <to sec="1036991280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_871{
style=filled;
color=gray75;
4617[label="168.100.158.88;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6631[label="168.100.158.88;1pkt 1fpkt", shape=invtriangle, color=brown];
stat871[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.100.158.88:1512, 130.191.13.25:20}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1512: (50%)&lt;BR/&gt; 20: (50%)&gt;];
}
4617--6631[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.191.13.25" dst_port="20" src_ip="168.100.158.88" src_port="1512"/>
    </slice>
    <from sec="1036990990" usec="0"/>
    <to sec="1036991517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="145.208.138.89"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991406" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_873{
style=filled;
color=gray75;
4633[label="78.95.18.90;196pkt 196fpkt", shape=pentagon, color=darkviolet];
6644[label="78.95.18.90;196pkt 196fpkt", shape=invtriangle, color=brown];
7937[label="78.95.18.90;195pkt 195fpkt", shape=invhouse, color=bisque];
stat873[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.95.18.90:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4633--6644[label="1;196pkt 196fpkt"];
4633--7937[label="1;195pkt 195fpkt"];
6644--7937[label="1;195pkt 195fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="78.95.18.90" src_port="1026"/>
    </slice>
    <from sec="1036991351" usec="0"/>
    <to sec="1036991382" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_874{
style=filled;
color=gray75;
4637[label="199.58.181.90;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6647[label="199.58.181.90;4pkt 4fpkt", shape=invtriangle, color=brown];
stat874[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.58.181.90:1026, 175.177.106.92:137}[25%]&lt;BR/&gt;{199.58.181.90:1026, 175.177.106.93:137}[25%]&lt;BR/&gt;{199.58.181.90:1026, 175.177.106.94:137}[25%]&lt;BR/&gt;{199.58.181.90:1026, 175.177.106.95:137}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4637--6647[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="175.177.106.95" dst_port="137" src_ip="199.58.181.90" src_port="1026"/>
      <filter dst_ip="175.177.106.94" dst_port="137" src_ip="199.58.181.90" src_port="1026"/>
      <filter dst_ip="175.177.106.93" dst_port="137" src_ip="199.58.181.90" src_port="1026"/>
      <filter dst_ip="175.177.106.92" dst_port="137" src_ip="199.58.181.90" src_port="1026"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.64.214.90"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_876{
style=filled;
color=gray75;
4642[label="85.8.128.91;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6651[label="85.8.128.91;1pkt 1fpkt", shape=invtriangle, color=brown];
stat876[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.8.128.91:6699, 145.197.241.18:1034}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1034: (50%)&gt;];
}
4642--6651[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.197.241.18" dst_port="1034" src_ip="85.8.128.91" src_port="6699"/>
    </slice>
    <from sec="1036991043" usec="0"/>
    <to sec="1036991509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.45.142.91"/>
    </slice>
    <from sec="1036990837" usec="0"/>
    <to sec="1036990843" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.121.73.93"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991342" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.199.116.93"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.192.255.93"/>
    </slice>
    <from sec="1036990814" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.165.96.94"/>
    </slice>
    <from sec="1036991073" usec="0"/>
    <to sec="1036991386" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_882{
style=filled;
color=gray75;
4668[label="198.21.139.94;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6671[label="198.21.139.94;3pkt 3fpkt", shape=invtriangle, color=brown];
stat882[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.21.139.94:80, 214.121.76.16:3231}[33.3333%]&lt;BR/&gt;{198.21.139.94:80, 145.208.213.141:1841}[33.3333%]&lt;BR/&gt;{198.21.139.94:80, 145.208.213.141:1842}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3231: (16.6667%)&lt;BR/&gt; 1842: (16.6667%)&lt;BR/&gt; 1841: (16.6667%)&gt;];
}
4668--6671[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.213.141" dst_port="1842" src_ip="198.21.139.94" src_port="80"/>
      <filter dst_ip="145.208.213.141" dst_port="1841" src_ip="198.21.139.94" src_port="80"/>
      <filter dst_ip="214.121.76.16" dst_port="3231" src_ip="198.21.139.94" src_port="80"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_883{
style=filled;
color=gray75;
4677[label="78.31.226.95;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6677[label="78.31.226.95;1pkt 1fpkt", shape=invtriangle, color=brown];
7954[label="78.31.226.95;1pkt 1fpkt", shape=invhouse, color=bisque];
stat883[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.31.226.95:80, 214.119.134.242:37380}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37380: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4677--6677[label="1;1pkt 1fpkt"];
4677--7954[label="1;1pkt 1fpkt"];
6677--7954[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.119.134.242" dst_port="37380" src_ip="78.31.226.95" src_port="80"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_884{
style=filled;
color=gray75;
4679[label="9.177.42.96;15pkt 15fpkt", shape=pentagon, color=darkviolet];
6678[label="9.177.42.96;14pkt 14fpkt", shape=invtriangle, color=brown];
7955[label="9.177.42.96;14pkt 14fpkt", shape=invhouse, color=bisque];
stat884[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.177.42.96:80, 148.242.29.50:*}[93.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3483: (3.48837%)&lt;BR/&gt; 3482: (3.48837%)&lt;BR/&gt; 3481: (3.48837%)&lt;BR/&gt; 3480: (3.48837%)&gt;];
}
4679--6678[label="1;14pkt 14fpkt"];
4679--7955[label="1;14pkt 14fpkt"];
6678--7955[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="148.242.29.50" src_ip="9.177.42.96" src_port="80"/>
    </slice>
    <from sec="1036991011" usec="0"/>
    <to sec="1036991517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_885{
style=filled;
color=gray75;
4685[label="168.100.169.96;20pkt 20fpkt", shape=pentagon, color=darkviolet];
6682[label="168.100.169.96;21pkt 21fpkt", shape=invtriangle, color=brown];
7957[label="168.100.169.96;20pkt 20fpkt", shape=invhouse, color=bisque];
stat885[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.100.169.96:80, 78.193.15.194:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4798: (2.45902%)&lt;BR/&gt; 4769: (2.45902%)&lt;BR/&gt; 4717: (2.45902%)&lt;BR/&gt; 4523: (2.45902%)&gt;];
}
4685--6682[label="1;20pkt 20fpkt"];
4685--7957[label="1;20pkt 20fpkt"];
6682--7957[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="78.193.15.194" src_ip="168.100.169.96" src_port="80"/>
    </slice>
    <from sec="1036990812" usec="0"/>
    <to sec="1036991496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_886{
style=filled;
color=gray75;
4690[label="209.148.26.97;101pkt 101fpkt", shape=pentagon, color=darkviolet];
6686[label="209.148.26.97;101pkt 101fpkt", shape=invtriangle, color=brown];
stat886[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.148.26.97:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4690--6686[label="1;101pkt 101fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="209.148.26.97" src_port="1029"/>
    </slice>
    <from sec="1036991257" usec="0"/>
    <to sec="1036991277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_887{
style=filled;
color=gray75;
4694[label="9.83.132.97;127pkt 127fpkt", shape=pentagon, color=darkviolet];
6690[label="9.83.132.97;128pkt 128fpkt", shape=invtriangle, color=brown];
stat887[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.83.132.97:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4694--6690[label="1;127pkt 127fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.83.132.97" src_port="1026"/>
    </slice>
    <from sec="1036991144" usec="0"/>
    <to sec="1036991165" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.65.116.99"/>
    </slice>
    <from sec="1036991315" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_889{
style=filled;
color=gray75;
4713[label="168.100.0.100;17pkt 17fpkt", shape=pentagon, color=darkviolet];
6701[label="168.100.0.100;16pkt 16fpkt", shape=invtriangle, color=brown];
stat889[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.100.0.100:0, *:0}[94.1176%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (93.9394%)&lt;BR/&gt; 4615: (3.0303%)&lt;BR/&gt; 80: (3.0303%)&gt;];
}
4713--6701[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter src_ip="168.100.0.100"/>
    </slice>
    <from sec="1036990888" usec="0"/>
    <to sec="1036991504" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_890{
style=filled;
color=gray75;
4715[label="199.14.22.100;111pkt 111fpkt", shape=pentagon, color=darkviolet];
6703[label="199.14.22.100;111pkt 111fpkt", shape=invtriangle, color=brown];
7969[label="199.14.22.100;111pkt 111fpkt", shape=invhouse, color=bisque];
stat890[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.14.22.100:1078, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1078: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4715--6703[label="1;111pkt 111fpkt"];
4715--7969[label="1;111pkt 111fpkt"];
6703--7969[label="1;111pkt 111fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.14.22.100" src_port="1078"/>
    </slice>
    <from sec="1036991277" usec="0"/>
    <to sec="1036991296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_891{
style=filled;
color=gray75;
4716[label="202.169.24.100;165pkt 165fpkt", shape=pentagon, color=darkviolet];
6704[label="202.169.24.100;164pkt 164fpkt", shape=invtriangle, color=brown];
7970[label="202.169.24.100;164pkt 164fpkt", shape=invhouse, color=bisque];
stat891[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.169.24.100:21030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4716--6704[label="1;164pkt 164fpkt"];
4716--7970[label="1;164pkt 164fpkt"];
6704--7970[label="1;164pkt 164fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.169.24.100" src_port="21030"/>
    </slice>
    <from sec="1036991256" usec="0"/>
    <to sec="1036991282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_892{
style=filled;
color=gray75;
4722[label="145.208.135.100;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6709[label="145.208.135.100;4pkt 4fpkt", shape=invtriangle, color=brown];
stat892[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.135.100:3135, 76.161.136.9:1863}[20%]&lt;BR/&gt;{145.208.135.100:3020, 76.161.136.10:1863}[20%]&lt;BR/&gt;{145.208.135.100:3119, 76.161.136.12:1863}[20%]&lt;BR/&gt;{145.208.135.100:3131, 76.161.136.71:1863}[20%]&lt;BR/&gt;{145.208.135.100:3008, 76.161.136.152:1863}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3135: (11.1111%)&lt;BR/&gt; 3131: (11.1111%)&lt;BR/&gt; 3119: (11.1111%)&lt;BR/&gt; 3020: (11.1111%)&gt;];
}
4722--6709[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="76.161.136.152" dst_port="1863" src_ip="145.208.135.100" src_port="3008"/>
      <filter dst_ip="76.161.136.71" dst_port="1863" src_ip="145.208.135.100" src_port="3131"/>
      <filter dst_ip="76.161.136.12" dst_port="1863" src_ip="145.208.135.100" src_port="3119"/>
      <filter dst_ip="76.161.136.10" dst_port="1863" src_ip="145.208.135.100" src_port="3020"/>
      <filter dst_ip="76.161.136.9" dst_port="1863" src_ip="145.208.135.100" src_port="3135"/>
    </slice>
    <from sec="1036990809" usec="0"/>
    <to sec="1036991472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945007,2.69627,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_893{
style=filled;
color=gray75;
1975[label="214.8.91.97;d;40pkt 40fpkt", shape=diamond, color=yellow];
1976[label="168.100.169.100;s;40pkt 40fpkt", shape=diamond, color=yellow];
4725[label="168.100.169.100;42pkt 42fpkt", shape=pentagon, color=darkviolet];
6711[label="168.100.169.100;42pkt 42fpkt", shape=invtriangle, color=brown];
7974[label="168.100.169.100;41pkt 41fpkt", shape=invhouse, color=bisque];
stat893[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.100.169.100:80, 214.8.91.97:*}[95.2381%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2537: (1.21951%)&lt;BR/&gt; 2531: (1.21951%)&lt;BR/&gt; 2371: (1.21951%)&lt;BR/&gt; 2370: (1.21951%)&gt;];
}
1975--1976[label="1;40pkt 40fpkt"];
1975--4725[label="1;40pkt 40fpkt"];
1975--6711[label="1;40pkt 40fpkt"];
1975--7974[label="1;40pkt 40fpkt"];
1976--4725[label="1;40pkt 40fpkt"];
1976--6711[label="1;40pkt 40fpkt"];
1976--7974[label="1;40pkt 40fpkt"];
4725--6711[label="1;42pkt 42fpkt"];
4725--7974[label="1;41pkt 41fpkt"];
6711--7974[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_ip="214.8.91.97" src_ip="168.100.169.100" src_port="80"/>
    </slice>
    <from sec="1036990807" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_894{
style=filled;
color=gray75;
4728[label="209.194.218.100;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6713[label="209.194.218.100;1pkt 1fpkt", shape=invtriangle, color=brown];
7975[label="209.194.218.100;1pkt 1fpkt", shape=invhouse, color=bisque];
stat894[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.194.218.100:80, 215.172.24.165:56735}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56735: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4728--6713[label="1;1pkt 1fpkt"];
4728--7975[label="1;1pkt 1fpkt"];
6713--7975[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.172.24.165" dst_port="56735" src_ip="209.194.218.100" src_port="80"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_895{
style=filled;
color=gray75;
4729[label="9.80.2.101;147pkt 147fpkt", shape=pentagon, color=darkviolet];
6714[label="9.80.2.101;147pkt 147fpkt", shape=invtriangle, color=brown];
stat895[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.80.2.101:1037, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1037: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4729--6714[label="1;147pkt 147fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.80.2.101" src_port="1037"/>
    </slice>
    <from sec="1036991257" usec="0"/>
    <to sec="1036991280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_896{
style=filled;
color=gray75;
4736[label="199.195.129.102;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6719[label="199.195.129.102;1pkt 1fpkt", shape=invtriangle, color=brown];
stat896[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.195.129.102:80, 148.242.165.44:1095}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1095: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4736--6719[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.242.165.44" dst_port="1095" src_ip="199.195.129.102" src_port="80"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_897{
style=filled;
color=gray75;
4744[label="198.21.130.103;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6723[label="198.21.130.103;2pkt 2fpkt", shape=invtriangle, color=brown];
7981[label="198.21.130.103;1pkt 1fpkt", shape=invhouse, color=bisque];
stat897[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.21.130.103:80, 214.121.191.74:3011}[50%]&lt;BR/&gt;{198.21.130.103:80, 214.121.191.74:3027}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3027: (37.5%)&lt;BR/&gt; 3011: (12.5%)&gt;];
}
4744--6723[label="1;1pkt 1fpkt"];
4744--7981[label="1;1pkt 1fpkt"];
6723--7981[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.121.191.74" dst_port="3027" src_ip="198.21.130.103" src_port="80"/>
      <filter dst_ip="214.121.191.74" dst_port="3011" src_ip="198.21.130.103" src_port="80"/>
    </slice>
    <from sec="1036991296" usec="0"/>
    <to sec="1036991307" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823917,2.71604,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_898{
style=filled;
color=gray75;
2038[label="145.208.247.103;s;152pkt 152fpkt", shape=diamond, color=yellow];
4745[label="145.208.247.103;152pkt 152fpkt", shape=pentagon, color=darkviolet];
6724[label="145.208.247.103;151pkt 151fpkt", shape=invtriangle, color=brown];
stat898[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.247.103:80, 202.22.128.43:*}[50%]&lt;BR/&gt;{145.208.247.103:80, 9.204.87.147:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4947: (0.32967%)&lt;BR/&gt; 4940: (0.32967%)&lt;BR/&gt; 4926: (0.32967%)&lt;BR/&gt; 4845: (0.32967%)&gt;];
}
2038--4745[label="1;152pkt 152fpkt"];
2038--6724[label="1;151pkt 151fpkt"];
4745--6724[label="1;151pkt 151fpkt"];
</description>
    <slice>
      <filter dst_ip="9.204.87.147" src_ip="145.208.247.103" src_port="80"/>
      <filter dst_ip="202.22.128.43" src_ip="145.208.247.103" src_port="80"/>
    </slice>
    <from sec="1036990996" usec="0"/>
    <to sec="1036991147" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_899{
style=filled;
color=gray75;
4761[label="214.113.42.105;22pkt 22fpkt", shape=pentagon, color=darkviolet];
6734[label="214.113.42.105;21pkt 21fpkt", shape=invtriangle, color=brown];
stat899[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.113.42.105:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4761--6734[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter src_ip="214.113.42.105"/>
    </slice>
    <from sec="1036990813" usec="0"/>
    <to sec="1036991504" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="77.168.91.105"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.164.177.105"/>
    </slice>
    <from sec="1036991053" usec="0"/>
    <to sec="1036991067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="73.33.78.106"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_903{
style=filled;
color=gray75;
4784[label="199.20.198.107;145pkt 145fpkt", shape=pentagon, color=darkviolet];
6753[label="199.20.198.107;145pkt 145fpkt", shape=invtriangle, color=brown];
stat903[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.20.198.107:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4784--6753[label="1;145pkt 145fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.20.198.107" src_port="1027"/>
    </slice>
    <from sec="1036991440" usec="0"/>
    <to sec="1036991463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_904{
style=filled;
color=gray75;
4786[label="9.241.215.107;210pkt 210fpkt", shape=pentagon, color=darkviolet];
6754[label="9.241.215.107;210pkt 210fpkt", shape=invtriangle, color=brown];
8000[label="9.241.215.107;210pkt 210fpkt", shape=invhouse, color=bisque];
stat904[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.241.215.107:1050, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1050: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4786--6754[label="1;210pkt 210fpkt"];
4786--8000[label="1;210pkt 210fpkt"];
6754--8000[label="1;210pkt 210fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.241.215.107" src_port="1050"/>
    </slice>
    <from sec="1036991264" usec="0"/>
    <to sec="1036991298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_905{
style=filled;
color=gray75;
4788[label="216.73.80.108;148pkt 148fpkt", shape=pentagon, color=darkviolet];
6756[label="216.73.80.108;147pkt 147fpkt", shape=invtriangle, color=brown];
stat905[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.73.80.108:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4788--6756[label="1;147pkt 147fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="216.73.80.108" src_port="1026"/>
    </slice>
    <from sec="1036991212" usec="0"/>
    <to sec="1036991236" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_906{
style=filled;
color=gray75;
4793[label="175.45.97.109;148pkt 148fpkt", shape=pentagon, color=darkviolet];
6760[label="175.45.97.109;148pkt 148fpkt", shape=invtriangle, color=brown];
8002[label="175.45.97.109;149pkt 149fpkt", shape=invhouse, color=bisque];
stat906[shape=component, label=&lt;Rules:&lt;BR/&gt;{175.45.97.109:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4793--6760[label="1;148pkt 148fpkt"];
4793--8002[label="1;148pkt 148fpkt"];
6760--8002[label="1;148pkt 148fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="175.45.97.109" src_port="1027"/>
    </slice>
    <from sec="1036991205" usec="0"/>
    <to sec="1036991228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.101.12.110"/>
    </slice>
    <from sec="1036990837" usec="0"/>
    <to sec="1036991517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_908{
style=filled;
color=gray75;
4804[label="168.100.158.110;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6769[label="168.100.158.110;1pkt 1fpkt", shape=invtriangle, color=brown];
stat908[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.100.158.110:25, 78.31.228.241:40186}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 40186: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
4804--6769[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="78.31.228.241" dst_port="40186" src_ip="168.100.158.110" src_port="25"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.16.70.111"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_910{
style=filled;
color=gray75;
4818[label="9.74.242.111;141pkt 141fpkt", shape=pentagon, color=darkviolet];
6778[label="9.74.242.111;140pkt 140fpkt", shape=invtriangle, color=brown];
stat910[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.74.242.111:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4818--6778[label="1;140pkt 140fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.74.242.111" src_port="1026"/>
    </slice>
    <from sec="1036990908" usec="0"/>
    <to sec="1036990931" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_911{
style=filled;
color=gray75;
4820[label="197.98.57.112;107pkt 107fpkt", shape=pentagon, color=darkviolet];
6780[label="197.98.57.112;106pkt 106fpkt", shape=invtriangle, color=brown];
8012[label="197.98.57.112;106pkt 106fpkt", shape=invhouse, color=bisque];
stat911[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.98.57.112:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4820--6780[label="1;106pkt 106fpkt"];
4820--8012[label="1;106pkt 106fpkt"];
6780--8012[label="1;106pkt 106fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.98.57.112" src_port="1026"/>
    </slice>
    <from sec="1036991220" usec="0"/>
    <to sec="1036991237" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.90.97.112"/>
    </slice>
    <from sec="1036990945" usec="0"/>
    <to sec="1036991458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_913{
style=filled;
color=gray75;
4835[label="175.177.35.114;114pkt 114fpkt", shape=pentagon, color=darkviolet];
6790[label="175.177.35.114;114pkt 114fpkt", shape=invtriangle, color=brown];
stat913[shape=component, label=&lt;Rules:&lt;BR/&gt;{175.177.35.114:1096, *:4665}[71.9298%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1096: (45.1754%)&lt;BR/&gt; 4665: (35.9649%)&lt;BR/&gt; 4662: (4.38596%)&lt;BR/&gt; 4670: (0.877193%)&lt;BR/&gt; 3943: (0.877193%)&gt;];
}
4835--6790[label="1;114pkt 114fpkt"];
</description>
    <slice>
      <filter dst_port="4665" src_ip="175.177.35.114" src_port="1096"/>
    </slice>
    <from sec="1036990815" usec="0"/>
    <to sec="1036991513" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_914{
style=filled;
color=gray75;
4851[label="214.227.41.116;119pkt 119fpkt", shape=pentagon, color=darkviolet];
6800[label="214.227.41.116;118pkt 118fpkt", shape=invtriangle, color=brown];
8025[label="214.227.41.116;118pkt 118fpkt", shape=invhouse, color=bisque];
stat914[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.227.41.116:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4851--6800[label="1;118pkt 118fpkt"];
4851--8025[label="1;118pkt 118fpkt"];
6800--8025[label="1;118pkt 118fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.227.41.116" src_port="1026"/>
    </slice>
    <from sec="1036991160" usec="0"/>
    <to sec="1036991180" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_915{
style=filled;
color=gray75;
4858[label="214.178.194.116;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6806[label="214.178.194.116;8pkt 8fpkt", shape=invtriangle, color=brown];
8030[label="214.178.194.116;8pkt 8fpkt", shape=invhouse, color=bisque];
stat915[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.178.194.116:80, 148.242.132.198:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2167: (6.52174%)&lt;BR/&gt; 2166: (6.52174%)&lt;BR/&gt; 2165: (6.52174%)&lt;BR/&gt; 2164: (6.52174%)&gt;];
}
4858--6806[label="1;7pkt 7fpkt"];
4858--8030[label="1;7pkt 7fpkt"];
6806--8030[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="148.242.132.198" src_ip="214.178.194.116" src_port="80"/>
    </slice>
    <from sec="1036991381" usec="0"/>
    <to sec="1036991419" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_916{
style=filled;
color=gray75;
4863[label="175.177.72.117;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6808[label="175.177.72.117;9pkt 9fpkt", shape=invtriangle, color=brown];
stat916[shape=component, label=&lt;Rules:&lt;BR/&gt;{175.177.72.117:80, 79.13.97.186:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 11316: (5.88235%)&lt;BR/&gt; 11315: (5.88235%)&lt;BR/&gt; 11314: (5.88235%)&lt;BR/&gt; 11313: (5.88235%)&gt;];
}
4863--6808[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="79.13.97.186" src_ip="175.177.72.117" src_port="80"/>
    </slice>
    <from sec="1036991164" usec="0"/>
    <to sec="1036991260" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.169.165.117"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_918{
style=filled;
color=gray75;
440[label="199.22.209.118s;187pkt 187fpkt", shape=rectangle, color=red];
4875[label="199.22.209.118;200pkt 200fpkt", shape=pentagon, color=darkviolet];
6815[label="199.22.209.118;200pkt 200fpkt", shape=invtriangle, color=brown];
8037[label="199.22.209.118;199pkt 199fpkt", shape=invhouse, color=bisque];
stat918[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.22.209.118:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
440--4875[label="1;187pkt 187fpkt"];
440--6815[label="1;187pkt 187fpkt"];
440--8037[label="0.994652;186pkt 186fpkt"];
4875--6815[label="1;200pkt 200fpkt"];
4875--8037[label="1;199pkt 199fpkt"];
6815--8037[label="1;199pkt 199fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.22.209.118" src_port="1029"/>
    </slice>
    <from sec="1036991328" usec="0"/>
    <to sec="1036991360" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676574,2.717,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_919{
style=filled;
color=gray75;
441[label="9.26.219.118s;46pkt 46fpkt", shape=rectangle, color=red];
4876[label="9.26.219.118;230pkt 230fpkt", shape=pentagon, color=darkviolet];
6816[label="9.26.219.118;230pkt 230fpkt", shape=invtriangle, color=brown];
stat919[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.26.219.118:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
441--4876[label="1;46pkt 46fpkt"];
441--6816[label="1;46pkt 46fpkt"];
4876--6816[label="1;230pkt 230fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.26.219.118" src_port="1025"/>
    </slice>
    <from sec="1036991080" usec="0"/>
    <to sec="1036991116" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_920{
style=filled;
color=gray75;
4879[label="202.1.107.119;102pkt 102fpkt", shape=pentagon, color=darkviolet];
6819[label="202.1.107.119;101pkt 101fpkt", shape=invtriangle, color=brown];
stat920[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.1.107.119:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4879--6819[label="1;101pkt 101fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.1.107.119" src_port="1027"/>
    </slice>
    <from sec="1036991497" usec="0"/>
    <to sec="1036991513" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_921{
style=filled;
color=gray75;
4892[label="48.80.186.120;172pkt 172fpkt", shape=pentagon, color=darkviolet];
6829[label="48.80.186.120;173pkt 173fpkt", shape=invtriangle, color=brown];
8044[label="48.80.186.120;173pkt 173fpkt", shape=invhouse, color=bisque];
stat921[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.80.186.120:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4892--6829[label="1;172pkt 172fpkt"];
4892--8044[label="1;172pkt 172fpkt"];
6829--8044[label="1;173pkt 173fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="48.80.186.120" src_port="1026"/>
    </slice>
    <from sec="1036991155" usec="0"/>
    <to sec="1036991181" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_922{
style=filled;
color=gray75;
4894[label="199.163.47.121;183pkt 183fpkt", shape=pentagon, color=darkviolet];
6831[label="199.163.47.121;184pkt 184fpkt", shape=invtriangle, color=brown];
stat922[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.163.47.121:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4894--6831[label="1;183pkt 183fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.163.47.121" src_port="1025"/>
    </slice>
    <from sec="1036991207" usec="0"/>
    <to sec="1036991236" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_923{
style=filled;
color=gray75;
4899[label="199.61.156.121;201pkt 201fpkt", shape=pentagon, color=darkviolet];
6835[label="199.61.156.121;201pkt 201fpkt", shape=invtriangle, color=brown];
8048[label="199.61.156.121;202pkt 202fpkt", shape=invhouse, color=bisque];
stat923[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.61.156.121:61000, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61000: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4899--6835[label="1;201pkt 201fpkt"];
4899--8048[label="1;201pkt 201fpkt"];
6835--8048[label="1;201pkt 201fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.61.156.121" src_port="61000"/>
    </slice>
    <from sec="1036990876" usec="0"/>
    <to sec="1036990907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676574,2.717,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_924{
style=filled;
color=gray75;
621[label="9.46.101.122s;41pkt 41fpkt", shape=rectangle, color=red];
4905[label="9.46.101.122;253pkt 253fpkt", shape=pentagon, color=darkviolet];
6841[label="9.46.101.122;253pkt 253fpkt", shape=invtriangle, color=brown];
stat924[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.46.101.122:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 64730: (0.274223%)&lt;BR/&gt; 64729: (0.274223%)&lt;BR/&gt; 64728: (0.274223%)&lt;BR/&gt; 64727: (0.274223%)&gt;];
}
621--4905[label="1;41pkt 41fpkt"];
621--6841[label="1;41pkt 41fpkt"];
4905--6841[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.46.101.122"/>
    </slice>
    <from sec="1036991265" usec="0"/>
    <to sec="1036991311" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_925{
style=filled;
color=gray75;
4906[label="145.208.129.122;68pkt 68fpkt", shape=pentagon, color=darkviolet];
6842[label="145.208.129.122;68pkt 68fpkt", shape=invtriangle, color=brown];
8053[label="145.208.129.122;68pkt 68fpkt", shape=invhouse, color=bisque];
stat925[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.129.122:*, 137.6.46.194:80}[61.7647%]&lt;BR/&gt;{145.208.129.122:*, 139.149.202.140:80}[36.7647%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1889: (0.735294%)&lt;BR/&gt; 1888: (0.735294%)&lt;BR/&gt; 1887: (0.735294%)&lt;BR/&gt; 1886: (0.735294%)&gt;];
}
4906--6842[label="1;68pkt 68fpkt"];
4906--8053[label="1;68pkt 68fpkt"];
6842--8053[label="1;68pkt 68fpkt"];
</description>
    <slice>
      <filter dst_ip="137.6.46.194" dst_port="80" src_ip="145.208.129.122"/>
      <filter dst_ip="139.149.202.140" dst_port="80" src_ip="145.208.129.122"/>
    </slice>
    <from sec="1036991217" usec="0"/>
    <to sec="1036991439" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_926{
style=filled;
color=gray75;
4911[label="133.213.42.123;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6847[label="133.213.42.123;8pkt 8fpkt", shape=invtriangle, color=brown];
8055[label="133.213.42.123;8pkt 8fpkt", shape=invhouse, color=bisque];
stat926[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.213.42.123:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4911--6847[label="1;8pkt 8fpkt"];
4911--8055[label="1;8pkt 8fpkt"];
6847--8055[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter src_ip="133.213.42.123"/>
    </slice>
    <from sec="1036990802" usec="0"/>
    <to sec="1036991516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_927{
style=filled;
color=gray75;
4923[label="201.228.1.125;79pkt 79fpkt", shape=pentagon, color=darkviolet];
6855[label="201.228.1.125;78pkt 78fpkt", shape=invtriangle, color=brown];
8058[label="201.228.1.125;78pkt 78fpkt", shape=invhouse, color=bisque];
stat927[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.228.1.125:80, 133.213.83.182:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3454: (0.638298%)&lt;BR/&gt; 3453: (0.638298%)&lt;BR/&gt; 3450: (0.638298%)&lt;BR/&gt; 3446: (0.638298%)&gt;];
}
4923--6855[label="1;78pkt 78fpkt"];
4923--8058[label="1;78pkt 78fpkt"];
6855--8058[label="1;78pkt 78fpkt"];
</description>
    <slice>
      <filter dst_ip="133.213.83.182" src_ip="201.228.1.125" src_port="80"/>
    </slice>
    <from sec="1036990949" usec="0"/>
    <to sec="1036991112" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_928{
style=filled;
color=gray75;
4930[label="9.246.199.125;237pkt 237fpkt", shape=pentagon, color=darkviolet];
6860[label="9.246.199.125;237pkt 237fpkt", shape=invtriangle, color=brown];
8060[label="9.246.199.125;237pkt 237fpkt", shape=invhouse, color=bisque];
stat928[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.246.199.125:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4930--6860[label="1;237pkt 237fpkt"];
4930--8060[label="1;237pkt 237fpkt"];
6860--8060[label="1;237pkt 237fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.246.199.125" src_port="1027"/>
    </slice>
    <from sec="1036990940" usec="0"/>
    <to sec="1036990978" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,011,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_929{
style=filled;
color=gray75;
4936[label="216.44.224.127;116pkt 116fpkt", shape=pentagon, color=darkviolet];
6865[label="216.44.224.127;115pkt 115fpkt", shape=invtriangle, color=brown];
stat929[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.44.224.127:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 935: (0.865801%)&lt;BR/&gt; 763: (0.865801%)&lt;BR/&gt; 686: (0.865801%)&lt;BR/&gt; 557: (0.865801%)&lt;BR/&gt; 193: (0.865801%)&gt;];
}
4936--6865[label="1;115pkt 115fpkt"];
</description>
    <slice>
      <filter src_ip="216.44.224.127"/>
    </slice>
    <from sec="1036990813" usec="0"/>
    <to sec="1036991514" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_930{
style=filled;
color=gray75;
4939[label="78.110.9.128;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6868[label="78.110.9.128;1pkt 1fpkt", shape=invtriangle, color=brown];
stat930[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.110.9.128:80, 214.119.134.145:24785}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24785: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4939--6868[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.119.134.145" dst_port="24785" src_ip="78.110.9.128" src_port="80"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.121.168.128"/>
    </slice>
    <from sec="1036990812" usec="0"/>
    <to sec="1036991513" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="77.133.144.129"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_933{
style=filled;
color=gray75;
4961[label="209.194.136.130;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6884[label="209.194.136.130;2pkt 2fpkt", shape=invtriangle, color=brown];
8067[label="209.194.136.130;2pkt 2fpkt", shape=invhouse, color=bisque];
stat933[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.194.136.130:80, 148.242.152.173:36961}[50%]&lt;BR/&gt;{209.194.136.130:80, 148.242.152.173:36962}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 36962: (25%)&lt;BR/&gt; 36961: (25%)&gt;];
}
4961--6884[label="1;2pkt 2fpkt"];
4961--8067[label="1;2pkt 2fpkt"];
6884--8067[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="148.242.152.173" dst_port="36962" src_ip="209.194.136.130" src_port="80"/>
      <filter dst_ip="148.242.152.173" dst_port="36961" src_ip="209.194.136.130" src_port="80"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_934{
style=filled;
color=gray75;
4964[label="9.189.192.130;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6887[label="9.189.192.130;2pkt 2fpkt", shape=invtriangle, color=brown];
8070[label="9.189.192.130;2pkt 2fpkt", shape=invhouse, color=bisque];
stat934[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.189.192.130:33851, 175.177.250.247:80}[50%]&lt;BR/&gt;{9.189.192.130:33882, 175.177.250.247:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33882: (25%)&lt;BR/&gt; 33851: (25%)&gt;];
}
4964--6887[label="1;2pkt 2fpkt"];
4964--8070[label="1;2pkt 2fpkt"];
6887--8070[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="175.177.250.247" dst_port="80" src_ip="9.189.192.130" src_port="33882"/>
      <filter dst_ip="175.177.250.247" dst_port="80" src_ip="9.189.192.130" src_port="33851"/>
    </slice>
    <from sec="1036991422" usec="0"/>
    <to sec="1036991427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.176.198.130"/>
    </slice>
    <from sec="1036991079" usec="0"/>
    <to sec="1036991407" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_936{
style=filled;
color=gray75;
4975[label="198.33.26.132;16pkt 16fpkt", shape=pentagon, color=darkviolet];
6893[label="198.33.26.132;16pkt 16fpkt", shape=invtriangle, color=brown];
8074[label="198.33.26.132;15pkt 15fpkt", shape=invhouse, color=bisque];
stat936[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.33.26.132:110, 145.208.133.66:*}[75%]&lt;BR/&gt;{198.33.26.132:110, 145.208.130.224:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (50%)&lt;BR/&gt; 3222: (3.19149%)&lt;BR/&gt; 3220: (3.19149%)&lt;BR/&gt; 3218: (3.19149%)&lt;BR/&gt; 1252: (3.19149%)&gt;];
}
4975--6893[label="1;16pkt 16fpkt"];
4975--8074[label="1;15pkt 15fpkt"];
6893--8074[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.133.66" src_ip="198.33.26.132" src_port="110"/>
      <filter dst_ip="145.208.130.224" src_ip="198.33.26.132" src_port="110"/>
    </slice>
    <from sec="1036990813" usec="0"/>
    <to sec="1036991482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.221.226.132"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_938{
style=filled;
color=gray75;
4992[label="215.156.95.133;154pkt 154fpkt", shape=pentagon, color=darkviolet];
6906[label="215.156.95.133;154pkt 154fpkt", shape=invtriangle, color=brown];
stat938[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.156.95.133:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4992--6906[label="1;154pkt 154fpkt"];
</description>
    <slice>
      <filter src_ip="215.156.95.133"/>
    </slice>
    <from sec="1036990803" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.72.12.134"/>
    </slice>
    <from sec="1036990807" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_940{
style=filled;
color=gray75;
5001[label="199.100.16.134;236pkt 236fpkt", shape=pentagon, color=darkviolet];
6912[label="199.100.16.134;235pkt 235fpkt", shape=invtriangle, color=brown];
8081[label="199.100.16.134;236pkt 236fpkt", shape=invhouse, color=bisque];
stat940[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.100.16.134:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5001--6912[label="1;235pkt 235fpkt"];
5001--8081[label="1;236pkt 236fpkt"];
6912--8081[label="1;235pkt 235fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.100.16.134" src_port="1028"/>
    </slice>
    <from sec="1036991402" usec="0"/>
    <to sec="1036991442" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945007,2.69627,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_941{
style=filled;
color=gray75;
2547[label="148.242.203.70;d;5pkt 5fpkt", shape=diamond, color=yellow];
5010[label="165.130.222.134;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6915[label="165.130.222.134;1pkt 1fpkt", shape=invtriangle, color=brown];
8083[label="165.130.222.134;1pkt 1fpkt", shape=invhouse, color=bisque];
stat941[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.49.4.119:123, 148.242.203.70:29005}[20%]&lt;BR/&gt;{76.161.136.133:1863, 148.242.203.70:32144}[20%]&lt;BR/&gt;{165.130.222.134:6699, 148.242.203.70:17557}[20%]&lt;BR/&gt;{76.161.137.200:1863, 148.242.203.70:26985}[20%]&lt;BR/&gt;{218.20.246.214:6699, 148.242.203.70:20645}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (31.25%)&lt;BR/&gt; 17557: (25%)&lt;BR/&gt; 1863: (12.5%)&lt;BR/&gt; 32144: (6.25%)&lt;BR/&gt; 29005: (6.25%)&gt;];
}
2547--5010[label="1;1pkt 1fpkt"];
2547--6915[label="1;1pkt 1fpkt"];
2547--8083[label="1;1pkt 1fpkt"];
5010--6915[label="1;1pkt 1fpkt"];
5010--8083[label="1;1pkt 1fpkt"];
6915--8083[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.242.203.70" dst_port="20645" src_ip="218.20.246.214" src_port="6699"/>
      <filter dst_ip="148.242.203.70" dst_port="26985" src_ip="76.161.137.200" src_port="1863"/>
      <filter dst_ip="148.242.203.70" dst_port="17557" src_ip="165.130.222.134" src_port="6699"/>
      <filter dst_ip="148.242.203.70" dst_port="32144" src_ip="76.161.136.133" src_port="1863"/>
      <filter dst_ip="148.242.203.70" dst_port="29005" src_ip="215.49.4.119" src_port="123"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_942{
style=filled;
color=gray75;
5016[label="76.161.136.135;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6920[label="76.161.136.135;8pkt 8fpkt", shape=invtriangle, color=brown];
stat942[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.161.136.135:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1901: (6.66667%)&lt;BR/&gt; 1264: (6.66667%)&lt;BR/&gt; 1201: (6.66667%)&lt;BR/&gt; 1032: (6.66667%)&gt;];
}
5016--6920[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter src_ip="76.161.136.135" src_port="1863"/>
    </slice>
    <from sec="1036990948" usec="0"/>
    <to sec="1036991416" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_943{
style=filled;
color=gray75;
5017[label="215.208.249.135;112pkt 112fpkt", shape=pentagon, color=darkviolet];
6921[label="215.208.249.135;112pkt 112fpkt", shape=invtriangle, color=brown];
8085[label="215.208.249.135;111pkt 111fpkt", shape=invhouse, color=bisque];
stat943[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.208.249.135:1032, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1032: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5017--6921[label="1;112pkt 112fpkt"];
5017--8085[label="1;111pkt 111fpkt"];
6921--8085[label="1;111pkt 111fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.208.249.135" src_port="1032"/>
    </slice>
    <from sec="1036991441" usec="0"/>
    <to sec="1036991459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_944{
style=filled;
color=gray75;
5018[label="201.78.21.136;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6922[label="201.78.21.136;1pkt 1fpkt", shape=invtriangle, color=brown];
8086[label="201.78.21.136;1pkt 1fpkt", shape=invhouse, color=bisque];
stat944[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.78.21.136:80, 214.119.134.242:37378}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37378: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5018--6922[label="1;1pkt 1fpkt"];
5018--8086[label="1;1pkt 1fpkt"];
6922--8086[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.119.134.242" dst_port="37378" src_ip="201.78.21.136" src_port="80"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_945{
style=filled;
color=gray75;
5028[label="148.242.163.136;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6932[label="148.242.163.136;8pkt 8fpkt", shape=invtriangle, color=brown];
8089[label="148.242.163.136;8pkt 8fpkt", shape=invhouse, color=bisque];
stat945[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.242.163.136:*, 209.226.167.221:80}[50%]&lt;BR/&gt;{148.242.163.136:*, 140.100.102.139:80}[25%]&lt;BR/&gt;{148.242.163.136:*, 209.2.186.152:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1616: (6.25%)&lt;BR/&gt; 1615: (6.25%)&lt;BR/&gt; 1614: (6.25%)&lt;BR/&gt; 1613: (6.25%)&gt;];
}
5028--6932[label="1;8pkt 8fpkt"];
5028--8089[label="1;8pkt 8fpkt"];
6932--8089[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="209.226.167.221" dst_port="80" src_ip="148.242.163.136"/>
      <filter dst_ip="209.2.186.152" dst_port="80" src_ip="148.242.163.136"/>
      <filter dst_ip="140.100.102.139" dst_port="80" src_ip="148.242.163.136"/>
    </slice>
    <from sec="1036991210" usec="0"/>
    <to sec="1036991276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.20.201.136"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.52.156.137"/>
    </slice>
    <from sec="1036990848" usec="0"/>
    <to sec="1036991512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.10.201.137"/>
    </slice>
    <from sec="1036990892" usec="0"/>
    <to sec="1036991094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="162.148.48.138"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="168.100.189.138"/>
    </slice>
    <from sec="1036990832" usec="0"/>
    <to sec="1036991515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_951{
style=filled;
color=gray75;
5047[label="172.107.224.138;59pkt 59fpkt", shape=pentagon, color=darkviolet];
6946[label="172.107.224.138;58pkt 58fpkt", shape=invtriangle, color=brown];
8096[label="172.107.224.138;59pkt 59fpkt", shape=invhouse, color=bisque];
stat951[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.107.224.138:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5047--6946[label="1;58pkt 58fpkt"];
5047--8096[label="1;59pkt 59fpkt"];
6946--8096[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter src_ip="172.107.224.138"/>
    </slice>
    <from sec="1036990802" usec="0"/>
    <to sec="1036991511" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.77.210.139"/>
    </slice>
    <from sec="1036991075" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_953{
style=filled;
color=gray75;
5059[label="148.242.38.140;94pkt 94fpkt", shape=pentagon, color=darkviolet];
6955[label="148.242.38.140;94pkt 94fpkt", shape=invtriangle, color=brown];
8102[label="148.242.38.140;94pkt 94fpkt", shape=invhouse, color=bisque];
stat953[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.242.38.140:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5059--6955[label="1;94pkt 94fpkt"];
5059--8102[label="1;94pkt 94fpkt"];
6955--8102[label="1;94pkt 94fpkt"];
</description>
    <slice>
      <filter src_ip="148.242.38.140"/>
    </slice>
    <from sec="1036990802" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_954{
style=filled;
color=gray75;
467[label="9.232.76.140s;44pkt 44fpkt", shape=rectangle, color=red];
5062[label="9.232.76.140;143pkt 143fpkt", shape=pentagon, color=darkviolet];
6958[label="9.232.76.140;143pkt 143fpkt", shape=invtriangle, color=brown];
8105[label="9.232.76.140;143pkt 143fpkt", shape=invhouse, color=bisque];
stat954[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.232.76.140:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
467--5062[label="1;44pkt 44fpkt"];
467--6958[label="1;44pkt 44fpkt"];
467--8105[label="1;44pkt 44fpkt"];
5062--6958[label="1;143pkt 143fpkt"];
5062--8105[label="1;143pkt 143fpkt"];
6958--8105[label="1;143pkt 143fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.232.76.140" src_port="1030"/>
    </slice>
    <from sec="1036991296" usec="0"/>
    <to sec="1036991319" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_955{
style=filled;
color=gray75;
5068[label="21.233.202.140;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6961[label="21.233.202.140;1pkt 1fpkt", shape=invtriangle, color=brown];
stat955[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.233.202.140:2743, 214.121.189.43:53}[50%]&lt;BR/&gt;{21.233.202.140:30001, 214.121.189.43:1380}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2743: (33.3333%)&lt;BR/&gt; 53: (33.3333%)&lt;BR/&gt; 30001: (16.6667%)&lt;BR/&gt; 1380: (16.6667%)&gt;];
}
5068--6961[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.121.189.43" dst_port="1380" src_ip="21.233.202.140" src_port="30001"/>
      <filter dst_ip="214.121.189.43" dst_port="53" src_ip="21.233.202.140" src_port="2743"/>
    </slice>
    <from sec="1036991377" usec="0"/>
    <to sec="1036991428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.171.58.141"/>
    </slice>
    <from sec="1036990803" usec="0"/>
    <to sec="1036991493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_957{
style=filled;
color=gray75;
5078[label="9.46.59.142;136pkt 136fpkt", shape=pentagon, color=darkviolet];
6968[label="9.46.59.142;135pkt 135fpkt", shape=invtriangle, color=brown];
stat957[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.46.59.142:1036, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1036: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5078--6968[label="1;135pkt 135fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.46.59.142" src_port="1036"/>
    </slice>
    <from sec="1036990885" usec="0"/>
    <to sec="1036990906" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_958{
style=filled;
color=gray75;
5080[label="198.21.144.142;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6970[label="198.21.144.142;3pkt 3fpkt", shape=invtriangle, color=brown];
stat958[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.21.144.142:80, 214.121.76.16:3226}[33.3333%]&lt;BR/&gt;{198.21.144.142:80, 214.121.76.16:3230}[33.3333%]&lt;BR/&gt;{198.21.144.142:80, 214.121.76.16:3239}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3239: (16.6667%)&lt;BR/&gt; 3230: (16.6667%)&lt;BR/&gt; 3226: (16.6667%)&gt;];
}
5080--6970[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="214.121.76.16" dst_port="3239" src_ip="198.21.144.142" src_port="80"/>
      <filter dst_ip="214.121.76.16" dst_port="3230" src_ip="198.21.144.142" src_port="80"/>
      <filter dst_ip="214.121.76.16" dst_port="3226" src_ip="198.21.144.142" src_port="80"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_959{
style=filled;
color=gray75;
5084[label="8.54.242.142;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6971[label="8.54.242.142;3pkt 3fpkt", shape=invtriangle, color=brown];
stat959[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.54.242.142:80, 148.242.164.116:2157}[33.3333%]&lt;BR/&gt;{8.54.242.142:80, 148.242.164.116:2161}[33.3333%]&lt;BR/&gt;{8.54.242.142:80, 148.242.164.116:2162}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2162: (20%)&lt;BR/&gt; 2161: (20%)&lt;BR/&gt; 2157: (10%)&gt;];
}
5084--6971[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="148.242.164.116" dst_port="2162" src_ip="8.54.242.142" src_port="80"/>
      <filter dst_ip="148.242.164.116" dst_port="2161" src_ip="8.54.242.142" src_port="80"/>
      <filter dst_ip="148.242.164.116" dst_port="2157" src_ip="8.54.242.142" src_port="80"/>
    </slice>
    <from sec="1036991210" usec="0"/>
    <to sec="1036991219" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_960{
style=filled;
color=gray75;
5085[label="148.242.10.143;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6972[label="148.242.10.143;1pkt 1fpkt", shape=invtriangle, color=brown];
8112[label="148.242.10.143;1pkt 1fpkt", shape=invhouse, color=bisque];
stat960[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.242.10.143:25, 193.60.4.1:2521}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2521: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
5085--6972[label="1;1pkt 1fpkt"];
5085--8112[label="1;1pkt 1fpkt"];
6972--8112[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.60.4.1" dst_port="2521" src_ip="148.242.10.143" src_port="25"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.176.198.143"/>
    </slice>
    <from sec="1036991081" usec="0"/>
    <to sec="1036991445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823917,2.71604,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_962{
style=filled;
color=gray75;
2408[label="145.208.128.3;d;71pkt 71fpkt", shape=diamond, color=yellow];
2684[label="214.157.69.144;s;47pkt 47fpkt", shape=diamond, color=yellow];
5093[label="214.157.69.144;49pkt 49fpkt", shape=pentagon, color=darkviolet];
5533[label="214.236.146.195;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6979[label="214.157.69.144;50pkt 50fpkt", shape=invtriangle, color=brown];
stat962[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.157.69.144:80, 145.208.128.3:*}[56%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.9725%)&lt;BR/&gt; 7777: (5.04587%)&lt;BR/&gt; 8000: (1.83486%)&lt;BR/&gt; 4001: (0.917431%)&lt;BR/&gt; 4000: (0.917431%)&gt;];
}
2408--2684[label="0.978723;46pkt 46fpkt"];
2408--2952[label="0.028169;2pkt 2fpkt"];
2408--5093[label="0.918367;45pkt 45fpkt"];
2408--5533[label="1;1pkt 1fpkt"];
2408--6979[label="0.92;46pkt 46fpkt"];
2684--5093[label="0.978723;46pkt 46fpkt"];
2684--6979[label="1;47pkt 47fpkt"];
5093--6979[label="1;49pkt 49fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.128.3" src_ip="214.157.69.144" src_port="80"/>
    </slice>
    <from sec="1036990805" usec="0"/>
    <to sec="1036991517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_963{
style=filled;
color=gray75;
5096[label="168.100.163.144;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6980[label="168.100.163.144;1pkt 1fpkt", shape=invtriangle, color=brown];
stat963[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.100.163.144:80, 8.226.61.179:4153}[50%]&lt;BR/&gt;{168.100.163.144:1220, 200.166.38.229:6667}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4153: (33.3333%)&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 6667: (16.6667%)&lt;BR/&gt; 1220: (16.6667%)&gt;];
}
5096--6980[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.166.38.229" dst_port="6667" src_ip="168.100.163.144" src_port="1220"/>
      <filter dst_ip="8.226.61.179" dst_port="4153" src_ip="168.100.163.144" src_port="80"/>
    </slice>
    <from sec="1036990819" usec="0"/>
    <to sec="1036991516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.186.139.145"/>
    </slice>
    <from sec="1036990825" usec="0"/>
    <to sec="1036991503" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.233.174.145"/>
    </slice>
    <from sec="1036991134" usec="0"/>
    <to sec="1036991154" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823917,2.71604,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_966{
style=filled;
color=gray75;
2579[label="133.213.132.58;d;3pkt 3fpkt", shape=diamond, color=yellow];
5107[label="199.98.29.146;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6988[label="199.98.29.146;1pkt 1fpkt", shape=invtriangle, color=brown];
stat966[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.161.136.231:1863, 133.213.132.58:3792}[33.3333%]&lt;BR/&gt;{199.98.29.146:2002, 133.213.132.58:3807}[33.3333%]&lt;BR/&gt;{199.98.29.146:3400, 133.213.132.58:3805}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3805: (30%)&lt;BR/&gt; 3400: (30%)&lt;BR/&gt; 3807: (10%)&lt;BR/&gt; 3792: (10%)&lt;BR/&gt; 2002: (10%)&gt;];
}
2579--5107[label="1;1pkt 1fpkt"];
2579--6988[label="1;1pkt 1fpkt"];
5107--6988[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.213.132.58" dst_port="3805" src_ip="199.98.29.146" src_port="3400"/>
      <filter dst_ip="133.213.132.58" dst_port="3807" src_ip="199.98.29.146" src_port="2002"/>
      <filter dst_ip="133.213.132.58" dst_port="3792" src_ip="76.161.136.231" src_port="1863"/>
    </slice>
    <from sec="1036990802" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_967{
style=filled;
color=gray75;
5110[label="202.44.99.146;168pkt 168fpkt", shape=pentagon, color=darkviolet];
6991[label="202.44.99.146;168pkt 168fpkt", shape=invtriangle, color=brown];
8121[label="202.44.99.146;169pkt 169fpkt", shape=invhouse, color=bisque];
stat967[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.44.99.146:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5110--6991[label="1;168pkt 168fpkt"];
5110--8121[label="1;168pkt 168fpkt"];
6991--8121[label="1;168pkt 168fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.44.99.146" src_port="1026"/>
    </slice>
    <from sec="1036991311" usec="0"/>
    <to sec="1036991341" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_968{
style=filled;
color=gray75;
474[label="199.83.129.146s;130pkt 130fpkt", shape=rectangle, color=red];
5111[label="199.83.129.146;228pkt 228fpkt", shape=pentagon, color=darkviolet];
6992[label="199.83.129.146;228pkt 228fpkt", shape=invtriangle, color=brown];
8122[label="199.83.129.146;228pkt 228fpkt", shape=invhouse, color=bisque];
stat968[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.83.129.146:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
474--5111[label="1;130pkt 130fpkt"];
474--6992[label="1;130pkt 130fpkt"];
474--8122[label="1;130pkt 130fpkt"];
5111--6992[label="1;228pkt 228fpkt"];
5111--8122[label="1;228pkt 228fpkt"];
6992--8122[label="1;228pkt 228fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.83.129.146" src_port="1026"/>
    </slice>
    <from sec="1036991321" usec="0"/>
    <to sec="1036991358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="73.46.28.147"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_970{
style=filled;
color=gray75;
5119[label="78.65.28.147;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6997[label="78.65.28.147;5pkt 5fpkt", shape=invtriangle, color=brown];
8126[label="78.65.28.147;5pkt 5fpkt", shape=invhouse, color=bisque];
stat970[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.65.28.147:80, 168.100.160.173:1147}[20%]&lt;BR/&gt;{78.65.28.147:80, 168.100.160.173:1154}[20%]&lt;BR/&gt;{78.65.28.147:80, 214.119.132.239:5888}[20%]&lt;BR/&gt;{78.65.28.147:80, 214.119.132.239:5891}[20%]&lt;BR/&gt;{78.65.28.147:80, 214.119.132.239:5899}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 5899: (10%)&lt;BR/&gt; 5891: (10%)&lt;BR/&gt; 5888: (10%)&lt;BR/&gt; 1154: (10%)&gt;];
}
5119--6997[label="1;5pkt 5fpkt"];
5119--8126[label="1;5pkt 5fpkt"];
6997--8126[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="214.119.132.239" dst_port="5899" src_ip="78.65.28.147" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="5891" src_ip="78.65.28.147" src_port="80"/>
      <filter dst_ip="214.119.132.239" dst_port="5888" src_ip="78.65.28.147" src_port="80"/>
      <filter dst_ip="168.100.160.173" dst_port="1154" src_ip="78.65.28.147" src_port="80"/>
      <filter dst_ip="168.100.160.173" dst_port="1147" src_ip="78.65.28.147" src_port="80"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,002,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="148.242.132.147"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_972{
style=filled;
color=gray75;
479[label="202.174.112.148s;85pkt 85fpkt", shape=rectangle, color=red];
5138[label="202.174.112.148;189pkt 189fpkt", shape=pentagon, color=darkviolet];
7008[label="202.174.112.148;190pkt 190fpkt", shape=invtriangle, color=brown];
8134[label="202.174.112.148;190pkt 190fpkt", shape=invhouse, color=bisque];
stat972[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.174.112.148:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
479--5138[label="1;85pkt 85fpkt"];
479--7008[label="1;85pkt 85fpkt"];
479--8134[label="1;85pkt 85fpkt"];
5138--7008[label="1;189pkt 189fpkt"];
5138--8134[label="1;189pkt 189fpkt"];
7008--8134[label="1;190pkt 190fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.174.112.148" src_port="1025"/>
    </slice>
    <from sec="1036990878" usec="0"/>
    <to sec="1036990909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_973{
style=filled;
color=gray75;
5143[label="203.105.52.149;10pkt 10fpkt", shape=pentagon, color=darkviolet];
7009[label="203.105.52.149;11pkt 11fpkt", shape=invtriangle, color=brown];
stat973[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.105.52.149:*, 172.107.17.47:110}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (50%)&lt;BR/&gt; 46351: (4.7619%)&lt;BR/&gt; 46095: (4.7619%)&lt;BR/&gt; 45839: (4.7619%)&lt;BR/&gt; 45583: (4.7619%)&gt;];
}
5143--7009[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="172.107.17.47" dst_port="110" src_ip="203.105.52.149"/>
    </slice>
    <from sec="1036990812" usec="0"/>
    <to sec="1036991478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_974{
style=filled;
color=gray75;
5146[label="145.208.132.149;10pkt 10fpkt", shape=pentagon, color=darkviolet];
7011[label="145.208.132.149;10pkt 10fpkt", shape=invtriangle, color=brown];
stat974[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.132.149:*, *:1863}[50%]&lt;BR/&gt;{145.208.132.149:*, 208.140.43.156:25}[30%]&lt;BR/&gt;{145.208.132.149:*, 49.94.27.139:25}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (25%)&lt;BR/&gt; 25: (25%)&lt;BR/&gt; 3707: (5%)&lt;BR/&gt; 3706: (5%)&lt;BR/&gt; 3705: (5%)&gt;];
}
5146--7011[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_port="1863" src_ip="145.208.132.149"/>
      <filter dst_ip="208.140.43.156" dst_port="25" src_ip="145.208.132.149"/>
      <filter dst_ip="49.94.27.139" dst_port="25" src_ip="145.208.132.149"/>
    </slice>
    <from sec="1036990834" usec="0"/>
    <to sec="1036991512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.89.249.151"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.183.13.152"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_977{
style=filled;
color=gray75;
5167[label="9.70.117.152;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7023[label="9.70.117.152;4pkt 4fpkt", shape=invtriangle, color=brown];
8143[label="9.70.117.152;4pkt 4fpkt", shape=invhouse, color=bisque];
stat977[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.70.117.152:1028, 175.177.245.178:137}[25%]&lt;BR/&gt;{9.70.117.152:1028, 175.177.245.179:137}[25%]&lt;BR/&gt;{9.70.117.152:1028, 175.177.245.180:137}[25%]&lt;BR/&gt;{9.70.117.152:1028, 175.177.245.181:137}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5167--7023[label="1;4pkt 4fpkt"];
5167--8143[label="1;4pkt 4fpkt"];
7023--8143[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="175.177.245.181" dst_port="137" src_ip="9.70.117.152" src_port="1028"/>
      <filter dst_ip="175.177.245.180" dst_port="137" src_ip="9.70.117.152" src_port="1028"/>
      <filter dst_ip="175.177.245.179" dst_port="137" src_ip="9.70.117.152" src_port="1028"/>
      <filter dst_ip="175.177.245.178" dst_port="137" src_ip="9.70.117.152" src_port="1028"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.118.125.152"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.24.152.152"/>
    </slice>
    <from sec="1036990912" usec="0"/>
    <to sec="1036990923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676574,2.717,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_980{
style=filled;
color=gray75;
625[label="9.32.192.152s;53pkt 53fpkt", shape=rectangle, color=red];
5175[label="9.32.192.152;104pkt 104fpkt", shape=pentagon, color=darkviolet];
7030[label="9.32.192.152;104pkt 104fpkt", shape=invtriangle, color=brown];
stat980[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.32.192.152:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 55853: (0.574713%)&lt;BR/&gt; 55851: (0.574713%)&lt;BR/&gt; 55848: (0.574713%)&lt;BR/&gt; 55845: (0.574713%)&gt;];
}
625--5175[label="0.981132;52pkt 52fpkt"];
625--7030[label="0.981132;52pkt 52fpkt"];
5175--7030[label="1;104pkt 104fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.32.192.152"/>
    </slice>
    <from sec="1036991311" usec="0"/>
    <to sec="1036991327" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_981{
style=filled;
color=gray75;
5178[label="215.50.7.153;134pkt 134fpkt", shape=pentagon, color=darkviolet];
7032[label="215.50.7.153;135pkt 135fpkt", shape=invtriangle, color=brown];
8149[label="215.50.7.153;134pkt 134fpkt", shape=invhouse, color=bisque];
stat981[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.50.7.153:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5178--7032[label="1;134pkt 134fpkt"];
5178--8149[label="1;134pkt 134fpkt"];
7032--8149[label="1;134pkt 134fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.50.7.153" src_port="1027"/>
    </slice>
    <from sec="1036991138" usec="0"/>
    <to sec="1036991181" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,002,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="148.242.42.153"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_983{
style=filled;
color=gray75;
5188[label="214.18.163.153;158pkt 158fpkt", shape=pentagon, color=darkviolet];
7039[label="214.18.163.153;158pkt 158fpkt", shape=invtriangle, color=brown];
stat983[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.18.163.153:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5188--7039[label="1;158pkt 158fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.18.163.153" src_port="1026"/>
    </slice>
    <from sec="1036991347" usec="0"/>
    <to sec="1036991380" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_984{
style=filled;
color=gray75;
5192[label="76.240.33.154;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7041[label="76.240.33.154;2pkt 2fpkt", shape=invtriangle, color=brown];
8154[label="76.240.33.154;2pkt 2fpkt", shape=invhouse, color=bisque];
stat984[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.240.33.154:80, 133.146.209.186:13018}[50%]&lt;BR/&gt;{76.240.33.154:80, 133.146.209.186:13054}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 13054: (25%)&lt;BR/&gt; 13018: (25%)&gt;];
}
5192--7041[label="1;2pkt 2fpkt"];
5192--8154[label="1;2pkt 2fpkt"];
7041--8154[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="133.146.209.186" dst_port="13054" src_ip="76.240.33.154" src_port="80"/>
      <filter dst_ip="133.146.209.186" dst_port="13018" src_ip="76.240.33.154" src_port="80"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_985{
style=filled;
color=gray75;
5198[label="145.208.20.155;17pkt 17fpkt", shape=pentagon, color=darkviolet];
7045[label="145.208.20.155;17pkt 17fpkt", shape=invtriangle, color=brown];
8157[label="145.208.20.155;18pkt 18fpkt", shape=invhouse, color=bisque];
stat985[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.20.155:80, 78.193.15.139:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4794: (2.88462%)&lt;BR/&gt; 4786: (2.88462%)&lt;BR/&gt; 4635: (2.88462%)&lt;BR/&gt; 4048: (2.88462%)&gt;];
}
5198--7045[label="1;17pkt 17fpkt"];
5198--8157[label="1;17pkt 17fpkt"];
7045--8157[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="78.193.15.139" src_ip="145.208.20.155" src_port="80"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991390" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="157.35.167.155"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_987{
style=filled;
color=gray75;
5202[label="9.247.194.155;254pkt 254fpkt", shape=pentagon, color=darkviolet];
7048[label="9.247.194.155;253pkt 253fpkt", shape=invtriangle, color=brown];
8160[label="9.247.194.155;254pkt 254fpkt", shape=invhouse, color=bisque];
stat987[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.247.194.155:64499, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64499: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5202--7048[label="1;253pkt 253fpkt"];
5202--8160[label="1;254pkt 254fpkt"];
7048--8160[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.247.194.155" src_port="64499"/>
    </slice>
    <from sec="1036991275" usec="0"/>
    <to sec="1036991292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_988{
style=filled;
color=gray75;
5206[label="76.161.136.156;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7050[label="76.161.136.156;6pkt 6fpkt", shape=invtriangle, color=brown];
stat988[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.161.136.156:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3226: (8.33333%)&lt;BR/&gt; 3183: (8.33333%)&lt;BR/&gt; 1606: (8.33333%)&lt;BR/&gt; 1234: (8.33333%)&gt;];
}
5206--7050[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="76.161.136.156" src_port="1863"/>
    </slice>
    <from sec="1036990812" usec="0"/>
    <to sec="1036991505" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_989{
style=filled;
color=gray75;
5211[label="198.75.254.156;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7054[label="198.75.254.156;3pkt 3fpkt", shape=invtriangle, color=brown];
8162[label="198.75.254.156;2pkt 2fpkt", shape=invhouse, color=bisque];
stat989[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.75.254.156:80, 148.242.130.253:2321}[33.3333%]&lt;BR/&gt;{198.75.254.156:80, 148.242.130.253:2322}[33.3333%]&lt;BR/&gt;{198.75.254.156:80, 148.242.130.253:2323}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2323: (21.4286%)&lt;BR/&gt; 2322: (21.4286%)&lt;BR/&gt; 2321: (7.14286%)&gt;];
}
5211--7054[label="1;2pkt 2fpkt"];
5211--8162[label="1;2pkt 2fpkt"];
7054--8162[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="148.242.130.253" dst_port="2323" src_ip="198.75.254.156" src_port="80"/>
      <filter dst_ip="148.242.130.253" dst_port="2322" src_ip="198.75.254.156" src_port="80"/>
      <filter dst_ip="148.242.130.253" dst_port="2321" src_ip="198.75.254.156" src_port="80"/>
    </slice>
    <from sec="1036991323" usec="0"/>
    <to sec="1036991364" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_990{
style=filled;
color=gray75;
5216[label="148.242.177.157;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7058[label="148.242.177.157;2pkt 2fpkt", shape=invtriangle, color=brown];
stat990[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.242.177.157:1765, 78.139.21.153:80}[33.3333%]&lt;BR/&gt;{148.242.177.157:1820, 209.137.179.211:80}[33.3333%]&lt;BR/&gt;{148.242.177.157:1819, 197.242.101.224:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1820: (20%)&lt;BR/&gt; 1819: (20%)&lt;BR/&gt; 1765: (10%)&gt;];
}
5216--7058[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="197.242.101.224" dst_port="80" src_ip="148.242.177.157" src_port="1819"/>
      <filter dst_ip="209.137.179.211" dst_port="80" src_ip="148.242.177.157" src_port="1820"/>
      <filter dst_ip="78.139.21.153" dst_port="80" src_ip="148.242.177.157" src_port="1765"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_991{
style=filled;
color=gray75;
494[label="199.239.128.158s;80pkt 80fpkt", shape=rectangle, color=red];
5222[label="199.239.128.158;153pkt 153fpkt", shape=pentagon, color=darkviolet];
7063[label="199.239.128.158;152pkt 152fpkt", shape=invtriangle, color=brown];
8168[label="199.239.128.158;153pkt 153fpkt", shape=invhouse, color=bisque];
stat991[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.239.128.158:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
494--5222[label="1;80pkt 80fpkt"];
494--7063[label="0.9875;79pkt 79fpkt"];
494--8168[label="1;80pkt 80fpkt"];
5222--7063[label="1;152pkt 152fpkt"];
5222--8168[label="1;153pkt 153fpkt"];
7063--8168[label="1;152pkt 152fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.239.128.158" src_port="1028"/>
    </slice>
    <from sec="1036990953" usec="0"/>
    <to sec="1036990977" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_992{
style=filled;
color=gray75;
5225[label="215.208.225.158;101pkt 101fpkt", shape=pentagon, color=darkviolet];
7066[label="215.208.225.158;101pkt 101fpkt", shape=invtriangle, color=brown];
8169[label="215.208.225.158;100pkt 100fpkt", shape=invhouse, color=bisque];
stat992[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.208.225.158:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5225--7066[label="1;101pkt 101fpkt"];
5225--8169[label="1;100pkt 100fpkt"];
7066--8169[label="1;100pkt 100fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.208.225.158" src_port="1026"/>
    </slice>
    <from sec="1036991414" usec="0"/>
    <to sec="1036991431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_993{
style=filled;
color=gray75;
5228[label="215.118.125.159;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7068[label="215.118.125.159;1pkt 1fpkt", shape=invtriangle, color=brown];
8171[label="215.118.125.159;1pkt 1fpkt", shape=invhouse, color=bisque];
stat993[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.118.125.159:20, 168.100.158.17:1725}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1725: (50%)&lt;BR/&gt; 20: (50%)&gt;];
}
5228--7068[label="1;1pkt 1fpkt"];
5228--8171[label="1;1pkt 1fpkt"];
7068--8171[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.100.158.17" dst_port="1725" src_ip="215.118.125.159" src_port="20"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_994{
style=filled;
color=gray75;
5234[label="145.219.140.160;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7071[label="145.219.140.160;5pkt 5fpkt", shape=invtriangle, color=brown];
8174[label="145.219.140.160;4pkt 4fpkt", shape=invhouse, color=bisque];
stat994[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.219.140.160:8900, 223.144.145.103:48031}[20%]&lt;BR/&gt;{145.219.140.160:8900, 223.144.145.103:48032}[20%]&lt;BR/&gt;{145.219.140.160:80, 157.102.224.198:1335}[20%]&lt;BR/&gt;{145.219.140.160:80, 157.102.224.198:1336}[20%]&lt;BR/&gt;{145.219.140.160:80, 157.102.224.198:1337}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (32.1429%)&lt;BR/&gt; 8900: (17.8571%)&lt;BR/&gt; 48032: (10.7143%)&lt;BR/&gt; 1337: (10.7143%)&lt;BR/&gt; 1336: (10.7143%)&gt;];
}
5234--7071[label="1;5pkt 5fpkt"];
5234--8174[label="1;4pkt 4fpkt"];
7071--8174[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="157.102.224.198" dst_port="1337" src_ip="145.219.140.160" src_port="80"/>
      <filter dst_ip="157.102.224.198" dst_port="1336" src_ip="145.219.140.160" src_port="80"/>
      <filter dst_ip="157.102.224.198" dst_port="1335" src_ip="145.219.140.160" src_port="80"/>
      <filter dst_ip="223.144.145.103" dst_port="48032" src_ip="145.219.140.160" src_port="8900"/>
      <filter dst_ip="223.144.145.103" dst_port="48031" src_ip="145.219.140.160" src_port="8900"/>
    </slice>
    <from sec="1036990804" usec="0"/>
    <to sec="1036990941" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_995{
style=filled;
color=gray75;
5235[label="145.208.169.160;265pkt 265fpkt", shape=pentagon, color=darkviolet];
7072[label="145.208.169.160;266pkt 266fpkt", shape=invtriangle, color=brown];
8175[label="145.208.169.160;265pkt 265fpkt", shape=invhouse, color=bisque];
stat995[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.169.160:51073, 216.204.230.92:*}[28.1955%]&lt;BR/&gt;{145.208.169.160:51584, 212.3.129.249:*}[25.5639%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51073: (14.1332%)&lt;BR/&gt; 51584: (12.8141%)&lt;BR/&gt; 50986: (9.04523%)&lt;BR/&gt; 51087: (6.97236%)&lt;BR/&gt; 51583: (4.0201%)&gt;];
}
5235--7072[label="1;265pkt 265fpkt"];
5235--8175[label="1;265pkt 265fpkt"];
7072--8175[label="1;265pkt 265fpkt"];
</description>
    <slice>
      <filter dst_ip="216.204.230.92" src_ip="145.208.169.160" src_port="51073"/>
      <filter dst_ip="212.3.129.249" src_ip="145.208.169.160" src_port="51584"/>
    </slice>
    <from sec="1036990882" usec="0"/>
    <to sec="1036991516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_996{
style=filled;
color=gray75;
498[label="198.167.196.160s;182pkt 182fpkt", shape=rectangle, color=red];
5236[label="198.167.196.160;244pkt 244fpkt", shape=pentagon, color=darkviolet];
7073[label="198.167.196.160;244pkt 244fpkt", shape=invtriangle, color=brown];
8176[label="198.167.196.160;244pkt 244fpkt", shape=invhouse, color=bisque];
stat996[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.167.196.160:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
498--5236[label="1;182pkt 182fpkt"];
498--7073[label="1;182pkt 182fpkt"];
498--8176[label="1;182pkt 182fpkt"];
5236--7073[label="1;244pkt 244fpkt"];
5236--8176[label="1;244pkt 244fpkt"];
7073--8176[label="1;244pkt 244fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="198.167.196.160" src_port="1029"/>
    </slice>
    <from sec="1036991128" usec="0"/>
    <to sec="1036991166" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_997{
style=filled;
color=gray75;
5239[label="215.156.90.161;17pkt 17fpkt", shape=pentagon, color=darkviolet];
7076[label="215.156.90.161;17pkt 17fpkt", shape=invtriangle, color=brown];
8177[label="215.156.90.161;17pkt 17fpkt", shape=invhouse, color=bisque];
stat997[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.156.90.161:80, 73.107.9.13:*}[94.1176%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3144: (2.94118%)&lt;BR/&gt; 1850: (2.94118%)&lt;BR/&gt; 1848: (2.94118%)&lt;BR/&gt; 1847: (2.94118%)&gt;];
}
5239--7076[label="1;17pkt 17fpkt"];
5239--8177[label="1;17pkt 17fpkt"];
7076--8177[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="73.107.9.13" src_ip="215.156.90.161" src_port="80"/>
    </slice>
    <from sec="1036991082" usec="0"/>
    <to sec="1036991333" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_998{
style=filled;
color=gray75;
5243[label="145.208.133.161;13pkt 13fpkt", shape=pentagon, color=darkviolet];
7078[label="145.208.133.161;13pkt 13fpkt", shape=invtriangle, color=brown];
8179[label="145.208.133.161;13pkt 13fpkt", shape=invhouse, color=bisque];
stat998[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.133.161:*, *:5190}[46.1538%]&lt;BR/&gt;{145.208.133.161:*, 210.169.136.170:80}[23.0769%]&lt;BR/&gt;{145.208.133.161:*, *:1863}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5190: (23.0769%)&lt;BR/&gt; 80: (15.3846%)&lt;BR/&gt; 1863: (11.5385%)&lt;BR/&gt; 1380: (3.84615%)&lt;BR/&gt; 1366: (3.84615%)&gt;];
}
5243--7078[label="1;13pkt 13fpkt"];
5243--8179[label="1;13pkt 13fpkt"];
7078--8179[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_port="5190" src_ip="145.208.133.161"/>
      <filter dst_port="1863" src_ip="145.208.133.161"/>
      <filter dst_ip="210.169.136.170" dst_port="80" src_ip="145.208.133.161"/>
    </slice>
    <from sec="1036990802" usec="0"/>
    <to sec="1036991508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_999{
style=filled;
color=gray75;
5250[label="223.187.22.162;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7082[label="223.187.22.162;6pkt 6fpkt", shape=invtriangle, color=brown];
8181[label="223.187.22.162;6pkt 6fpkt", shape=invhouse, color=bisque];
stat999[shape=component, label=&lt;Rules:&lt;BR/&gt;{223.187.22.162:80, 133.213.79.88:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1281: (8.33333%)&lt;BR/&gt; 1280: (8.33333%)&lt;BR/&gt; 1279: (8.33333%)&lt;BR/&gt; 1278: (8.33333%)&gt;];
}
5250--7082[label="1;6pkt 6fpkt"];
5250--8181[label="1;6pkt 6fpkt"];
7082--8181[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="133.213.79.88" src_ip="223.187.22.162" src_port="80"/>
    </slice>
    <from sec="1036991468" usec="0"/>
    <to sec="1036991481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1000{
style=filled;
color=gray75;
5252[label="133.213.39.162;27pkt 27fpkt", shape=pentagon, color=darkviolet];
7084[label="133.213.39.162;28pkt 28fpkt", shape=invtriangle, color=brown];
stat1000[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.213.39.162:0, *:0}[53.5714%]&lt;BR/&gt;{133.213.39.162:25, *:*}[46.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (52.7273%)&lt;BR/&gt; 25: (23.6364%)&lt;BR/&gt; 60892: (1.81818%)&lt;BR/&gt; 58886: (1.81818%)&lt;BR/&gt; 57441: (1.81818%)&gt;];
}
5252--7084[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter src_ip="133.213.39.162" src_port="25"/>
      <filter src_ip="133.213.39.162"/>
    </slice>
    <from sec="1036990812" usec="0"/>
    <to sec="1036991490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.195.68.163"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1002{
style=filled;
color=gray75;
5269[label="145.208.132.163;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7093[label="145.208.132.163;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1002[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.132.163:1116, 76.161.136.55:1863}[25%]&lt;BR/&gt;{145.208.132.163:1119, 76.161.136.62:1863}[25%]&lt;BR/&gt;{145.208.132.163:1115, 76.161.136.65:1863}[25%]&lt;BR/&gt;{145.208.132.163:1039, 76.161.136.129:1863}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1119: (14.2857%)&lt;BR/&gt; 1116: (14.2857%)&lt;BR/&gt; 1039: (14.2857%)&lt;BR/&gt; 1115: (7.14286%)&gt;];
}
5269--7093[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="76.161.136.129" dst_port="1863" src_ip="145.208.132.163" src_port="1039"/>
      <filter dst_ip="76.161.136.65" dst_port="1863" src_ip="145.208.132.163" src_port="1115"/>
      <filter dst_ip="76.161.136.62" dst_port="1863" src_ip="145.208.132.163" src_port="1119"/>
      <filter dst_ip="76.161.136.55" dst_port="1863" src_ip="145.208.132.163" src_port="1116"/>
    </slice>
    <from sec="1036990814" usec="0"/>
    <to sec="1036991489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1003{
style=filled;
color=gray75;
5278[label="199.123.170.164;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7099[label="199.123.170.164;3pkt 3fpkt", shape=invtriangle, color=brown];
8189[label="199.123.170.164;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1003[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.123.170.164:80, 214.121.76.179:3957}[33.3333%]&lt;BR/&gt;{199.123.170.164:80, 214.121.76.179:3958}[33.3333%]&lt;BR/&gt;{199.123.170.164:80, 214.121.76.179:3959}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3959: (16.6667%)&lt;BR/&gt; 3958: (16.6667%)&lt;BR/&gt; 3957: (16.6667%)&gt;];
}
5278--7099[label="1;3pkt 3fpkt"];
5278--8189[label="1;3pkt 3fpkt"];
7099--8189[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="214.121.76.179" dst_port="3959" src_ip="199.123.170.164" src_port="80"/>
      <filter dst_ip="214.121.76.179" dst_port="3958" src_ip="199.123.170.164" src_port="80"/>
      <filter dst_ip="214.121.76.179" dst_port="3957" src_ip="199.123.170.164" src_port="80"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="76.57.130.166"/>
    </slice>
    <from sec="1036990805" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.10.170.167"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1006{
style=filled;
color=gray75;
5304[label="148.242.130.168;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7119[label="148.242.130.168;1pkt 1fpkt", shape=invtriangle, color=brown];
8202[label="148.242.130.168;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1006[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.242.130.168:2996, 76.161.167.35:80}[50%]&lt;BR/&gt;{148.242.130.168:2841, 76.161.170.146:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2996: (37.5%)&lt;BR/&gt; 2841: (12.5%)&gt;];
}
5304--7119[label="1;1pkt 1fpkt"];
5304--8202[label="1;1pkt 1fpkt"];
7119--8202[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="76.161.170.146" dst_port="80" src_ip="148.242.130.168" src_port="2841"/>
      <filter dst_ip="76.161.167.35" dst_port="80" src_ip="148.242.130.168" src_port="2996"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1007{
style=filled;
color=gray75;
5307[label="199.123.170.168;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7122[label="199.123.170.168;4pkt 4fpkt", shape=invtriangle, color=brown];
8203[label="199.123.170.168;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1007[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.123.170.168:49890, 172.107.201.25:25}[25%]&lt;BR/&gt;{199.123.170.168:53737, 214.121.180.183:25}[25%]&lt;BR/&gt;{199.123.170.168:2390, 215.156.92.53:53}[25%]&lt;BR/&gt;{199.123.170.168:64449, 215.156.92.53:53}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (25%)&lt;BR/&gt; 25: (25%)&lt;BR/&gt; 64449: (12.5%)&lt;BR/&gt; 53737: (12.5%)&lt;BR/&gt; 49890: (12.5%)&gt;];
}
5307--7122[label="1;4pkt 4fpkt"];
5307--8203[label="1;4pkt 4fpkt"];
7122--8203[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="215.156.92.53" dst_port="53" src_ip="199.123.170.168" src_port="64449"/>
      <filter dst_ip="215.156.92.53" dst_port="53" src_ip="199.123.170.168" src_port="2390"/>
      <filter dst_ip="214.121.180.183" dst_port="25" src_ip="199.123.170.168" src_port="53737"/>
      <filter dst_ip="172.107.201.25" dst_port="25" src_ip="199.123.170.168" src_port="49890"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1008{
style=filled;
color=gray75;
5323[label="9.66.75.170;171pkt 171fpkt", shape=pentagon, color=darkviolet];
7135[label="9.66.75.170;171pkt 171fpkt", shape=invtriangle, color=brown];
stat1008[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.66.75.170:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5323--7135[label="1;171pkt 171fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.66.75.170" src_port="1027"/>
    </slice>
    <from sec="1036991203" usec="0"/>
    <to sec="1036991231" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1009{
style=filled;
color=gray75;
5324[label="9.212.127.170;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7136[label="9.212.127.170;1pkt 1fpkt", shape=invtriangle, color=brown];
8211[label="9.212.127.170;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1009[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.212.127.170:1755, 214.121.188.100:4073}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4073: (50%)&lt;BR/&gt; 1755: (50%)&gt;];
}
5324--7136[label="1;1pkt 1fpkt"];
5324--8211[label="1;1pkt 1fpkt"];
7136--8211[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.121.188.100" dst_port="4073" src_ip="9.212.127.170" src_port="1755"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1010{
style=filled;
color=gray75;
5327[label="145.208.173.170;71pkt 71fpkt", shape=pentagon, color=darkviolet];
7139[label="145.208.173.170;71pkt 71fpkt", shape=invtriangle, color=brown];
8213[label="145.208.173.170;70pkt 70fpkt", shape=invhouse, color=bisque];
stat1010[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.173.170:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5327--7139[label="1;71pkt 71fpkt"];
5327--8213[label="1;70pkt 70fpkt"];
7139--8213[label="1;70pkt 70fpkt"];
</description>
    <slice>
      <filter src_ip="145.208.173.170"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1011{
style=filled;
color=gray75;
5329[label="175.177.210.170;23pkt 23fpkt", shape=pentagon, color=darkviolet];
7141[label="175.177.210.170;22pkt 22fpkt", shape=invtriangle, color=brown];
8215[label="175.177.210.170;23pkt 23fpkt", shape=invhouse, color=bisque];
stat1011[shape=component, label=&lt;Rules:&lt;BR/&gt;{175.177.210.170:*, 199.55.161.72:80}[56.5217%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.7941%)&lt;BR/&gt; 8000: (2.20588%)&lt;BR/&gt; 4604: (2.20588%)&lt;BR/&gt; 4603: (2.20588%)&lt;BR/&gt; 4602: (2.20588%)&gt;];
}
5329--7141[label="1;22pkt 22fpkt"];
5329--8215[label="1;23pkt 23fpkt"];
7141--8215[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="199.55.161.72" dst_port="80" src_ip="175.177.210.170"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991051" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1012{
style=filled;
color=gray75;
5330[label="133.213.0.171;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7142[label="133.213.0.171;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1012[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.213.0.171:3534, 9.164.90.173:7743}[50%]&lt;BR/&gt;{133.213.0.171:7743, 9.164.90.173:4505}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7743: (50%)&lt;BR/&gt; 4505: (25%)&lt;BR/&gt; 3534: (25%)&gt;];
}
5330--7142[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="9.164.90.173" dst_port="4505" src_ip="133.213.0.171" src_port="7743"/>
      <filter dst_ip="9.164.90.173" dst_port="7743" src_ip="133.213.0.171" src_port="3534"/>
    </slice>
    <from sec="1036991336" usec="0"/>
    <to sec="1036991396" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1013{
style=filled;
color=gray75;
509[label="9.81.145.171s;73pkt 73fpkt", shape=rectangle, color=red];
5336[label="9.81.145.171;225pkt 225fpkt", shape=pentagon, color=darkviolet];
7147[label="9.81.145.171;224pkt 224fpkt", shape=invtriangle, color=brown];
8217[label="9.81.145.171;224pkt 224fpkt", shape=invhouse, color=bisque];
stat1013[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.81.145.171:1037, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1037: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
509--672[label="0.643836;47pkt 47fpkt"];
509--5336[label="1;73pkt 73fpkt"];
509--7147[label="0.986301;72pkt 72fpkt"];
509--8217[label="0.986301;72pkt 72fpkt"];
5336--7147[label="1;224pkt 224fpkt"];
5336--8217[label="1;224pkt 224fpkt"];
7147--8217[label="1;224pkt 224fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.81.145.171" src_port="1037"/>
    </slice>
    <from sec="1036991010" usec="0"/>
    <to sec="1036991047" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.177.46.172"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036990981" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.195.29.173"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.177.40.173"/>
    </slice>
    <from sec="1036991430" usec="0"/>
    <to sec="1036991433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1017{
style=filled;
color=gray75;
5348[label="209.20.51.173;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7156[label="209.20.51.173;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1017[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.20.51.173:80, 214.119.132.239:5836}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5836: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5348--7156[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.119.132.239" dst_port="5836" src_ip="209.20.51.173" src_port="80"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1018{
style=filled;
color=gray75;
5361[label="214.0.162.174;161pkt 161fpkt", shape=pentagon, color=darkviolet];
7165[label="214.0.162.174;161pkt 161fpkt", shape=invtriangle, color=brown];
8226[label="214.0.162.174;161pkt 161fpkt", shape=invhouse, color=bisque];
stat1018[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.0.162.174:1033, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1033: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5361--7165[label="1;161pkt 161fpkt"];
5361--8226[label="1;161pkt 161fpkt"];
7165--8226[label="1;161pkt 161fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.0.162.174" src_port="1033"/>
    </slice>
    <from sec="1036990878" usec="0"/>
    <to sec="1036990910" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1019{
style=filled;
color=gray75;
5362[label="198.53.171.174;122pkt 122fpkt", shape=pentagon, color=darkviolet];
7166[label="198.53.171.174;121pkt 121fpkt", shape=invtriangle, color=brown];
stat1019[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.53.171.174:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5362--7166[label="1;121pkt 121fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="198.53.171.174" src_port="1029"/>
    </slice>
    <from sec="1036991290" usec="0"/>
    <to sec="1036991310" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1020{
style=filled;
color=gray75;
5370[label="214.152.174.175;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7171[label="214.152.174.175;1pkt 1fpkt", shape=invtriangle, color=brown];
8229[label="214.152.174.175;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1020[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.152.174.175:80, 148.242.132.172:4024}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4024: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5370--7171[label="1;1pkt 1fpkt"];
5370--8229[label="1;1pkt 1fpkt"];
7171--8229[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.242.132.172" dst_port="4024" src_ip="214.152.174.175" src_port="80"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1021{
style=filled;
color=gray75;
5385[label="9.70.89.177;197pkt 197fpkt", shape=pentagon, color=darkviolet];
7180[label="9.70.89.177;198pkt 198fpkt", shape=invtriangle, color=brown];
8233[label="9.70.89.177;198pkt 198fpkt", shape=invhouse, color=bisque];
stat1021[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.70.89.177:61060, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61060: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5385--7180[label="1;197pkt 197fpkt"];
5385--8233[label="1;197pkt 197fpkt"];
7180--8233[label="1;198pkt 198fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.70.89.177" src_port="61060"/>
    </slice>
    <from sec="1036991099" usec="0"/>
    <to sec="1036991130" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1022{
style=filled;
color=gray75;
5395[label="201.78.23.178;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7187[label="201.78.23.178;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1022[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.78.23.178:25, 168.100.156.199:1551}[50%]&lt;BR/&gt;{201.78.23.178:80, 214.119.134.201:1572}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1572: (25%)&lt;BR/&gt; 1551: (25%)&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 25: (25%)&gt;];
}
5395--7187[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="214.119.134.201" dst_port="1572" src_ip="201.78.23.178" src_port="80"/>
      <filter dst_ip="168.100.156.199" dst_port="1551" src_ip="201.78.23.178" src_port="25"/>
    </slice>
    <from sec="1036990828" usec="0"/>
    <to sec="1036991508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,503,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1023{
style=filled;
color=gray75;
180[label="76.161.138.1d;3pkt 3fpkt", shape=rectangle, color=red];
5398[label="148.242.132.178;9pkt 9fpkt", shape=pentagon, color=darkviolet];
7189[label="148.242.132.178;9pkt 9fpkt", shape=invtriangle, color=brown];
8237[label="148.242.132.178;10pkt 10fpkt", shape=invhouse, color=bisque];
stat1023[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.242.132.178:*, 201.59.38.240:80}[70%]&lt;BR/&gt;{148.242.132.178:*, 223.120.26.8:80}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3160: (6.45161%)&lt;BR/&gt; 3157: (6.45161%)&lt;BR/&gt; 3155: (6.45161%)&lt;BR/&gt; 3211: (4.83871%)&gt;];
}
180--671[label="0.333333;1pkt 1fpkt"];
180--674[label="0.333333;1pkt 1fpkt"];
180--743[label="0.333333;1pkt 1fpkt"];
180--5398[label="1;3pkt 3fpkt"];
180--7189[label="1;3pkt 3fpkt"];
180--8237[label="1;3pkt 3fpkt"];
5398--7189[label="1;9pkt 9fpkt"];
5398--8237[label="1;9pkt 9fpkt"];
7189--8237[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="201.59.38.240" dst_port="80" src_ip="148.242.132.178"/>
      <filter dst_ip="223.120.26.8" dst_port="80" src_ip="148.242.132.178"/>
    </slice>
    <from sec="1036990905" usec="0"/>
    <to sec="1036991492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.236.73.181"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.226.165.181"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1026{
style=filled;
color=gray75;
5436[label="199.10.85.182;188pkt 188fpkt", shape=pentagon, color=darkviolet];
7221[label="199.10.85.182;188pkt 188fpkt", shape=invtriangle, color=brown];
8257[label="199.10.85.182;187pkt 187fpkt", shape=invhouse, color=bisque];
stat1026[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.10.85.182:1039, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1039: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5436--7221[label="1;188pkt 188fpkt"];
5436--8257[label="1;187pkt 187fpkt"];
7221--8257[label="1;187pkt 187fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.10.85.182" src_port="1039"/>
    </slice>
    <from sec="1036991218" usec="0"/>
    <to sec="1036991251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1027{
style=filled;
color=gray75;
5437[label="214.225.88.182;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7222[label="214.225.88.182;7pkt 7fpkt", shape=invtriangle, color=brown];
stat1027[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.225.88.182:80, 148.242.182.37:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1948: (7.14286%)&lt;BR/&gt; 1945: (7.14286%)&lt;BR/&gt; 1944: (7.14286%)&lt;BR/&gt; 1941: (7.14286%)&gt;];
}
5437--7222[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="148.242.182.37" src_ip="214.225.88.182" src_port="80"/>
    </slice>
    <from sec="1036990817" usec="0"/>
    <to sec="1036990916" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1028{
style=filled;
color=gray75;
5439[label="214.48.159.182;107pkt 107fpkt", shape=pentagon, color=darkviolet];
7223[label="214.48.159.182;107pkt 107fpkt", shape=invtriangle, color=brown];
stat1028[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.48.159.182:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5439--7223[label="1;107pkt 107fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.48.159.182" src_port="1026"/>
    </slice>
    <from sec="1036991211" usec="0"/>
    <to sec="1036991237" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.69.176.182"/>
    </slice>
    <from sec="1036990820" usec="0"/>
    <to sec="1036991506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1030{
style=filled;
color=gray75;
5441[label="145.3.10.183;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7225[label="145.3.10.183;2pkt 2fpkt", shape=invtriangle, color=brown];
8258[label="145.3.10.183;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1030[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.3.10.183:1736, 78.28.169.14:80}[50%]&lt;BR/&gt;{145.3.10.183:1737, 210.146.147.134:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1737: (25%)&lt;BR/&gt; 1736: (25%)&gt;];
}
5441--7225[label="1;2pkt 2fpkt"];
5441--8258[label="1;2pkt 2fpkt"];
7225--8258[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="210.146.147.134" dst_port="80" src_ip="145.3.10.183" src_port="1737"/>
      <filter dst_ip="78.28.169.14" dst_port="80" src_ip="145.3.10.183" src_port="1736"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="199.245.19.184"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.155.22.185"/>
    </slice>
    <from sec="1036990809" usec="0"/>
    <to sec="1036991516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1033{
style=filled;
color=gray75;
5460[label="145.32.0.186;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7234[label="145.32.0.186;1pkt 1fpkt", shape=invtriangle, color=brown];
8261[label="145.32.0.186;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1033[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.32.0.186:80, 201.141.153.1:1266}[50%]&lt;BR/&gt;{145.32.0.186:80, 201.141.153.1:1267}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1267: (37.5%)&lt;BR/&gt; 1266: (12.5%)&gt;];
}
5460--7234[label="1;1pkt 1fpkt"];
5460--8261[label="1;1pkt 1fpkt"];
7234--8261[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.141.153.1" dst_port="1267" src_ip="145.32.0.186" src_port="80"/>
      <filter dst_ip="201.141.153.1" dst_port="1266" src_ip="145.32.0.186" src_port="80"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1034{
style=filled;
color=gray75;
5468[label="199.18.49.187;150pkt 150fpkt", shape=pentagon, color=darkviolet];
7241[label="199.18.49.187;150pkt 150fpkt", shape=invtriangle, color=brown];
8267[label="199.18.49.187;150pkt 150fpkt", shape=invhouse, color=bisque];
stat1034[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.18.49.187:64542, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64542: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5468--7241[label="1;150pkt 150fpkt"];
5468--8267[label="1;150pkt 150fpkt"];
7241--8267[label="1;150pkt 150fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.18.49.187" src_port="64542"/>
    </slice>
    <from sec="1036991289" usec="0"/>
    <to sec="1036991312" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.178.86.187"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.135.126.187"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036990818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1037{
style=filled;
color=gray75;
5474[label="215.208.242.187;179pkt 179fpkt", shape=pentagon, color=darkviolet];
7246[label="215.208.242.187;180pkt 180fpkt", shape=invtriangle, color=brown];
stat1037[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.208.242.187:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5474--7246[label="1;179pkt 179fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.208.242.187" src_port="1028"/>
    </slice>
    <from sec="1036991274" usec="0"/>
    <to sec="1036991307" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.183.40.188"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.162.148.188"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1040{
style=filled;
color=gray75;
5481[label="148.242.168.188;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7253[label="148.242.168.188;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1040[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.242.168.188:0, 220.121.100.132:0}[50%]&lt;BR/&gt;{148.242.168.188:0, 132.23.140.197:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5481--7253[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="132.23.140.197" src_ip="148.242.168.188"/>
      <filter dst_ip="220.121.100.132" src_ip="148.242.168.188"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="76.175.90.189"/>
    </slice>
    <from sec="1036990805" usec="0"/>
    <to sec="1036991505" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1042{
style=filled;
color=gray75;
5496[label="9.250.60.191;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7262[label="9.250.60.191;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1042[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.250.60.191:1098, 214.119.189.0:80}[50%]&lt;BR/&gt;{9.250.60.191:1099, 214.119.189.0:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1099: (33.3333%)&lt;BR/&gt; 1098: (16.6667%)&gt;];
}
5496--7262[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.119.189.0" dst_port="80" src_ip="9.250.60.191" src_port="1099"/>
      <filter dst_ip="214.119.189.0" dst_port="80" src_ip="9.250.60.191" src_port="1098"/>
    </slice>
    <from sec="1036990811" usec="0"/>
    <to sec="1036990854" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1043{
style=filled;
color=gray75;
5501[label="215.156.95.192;85pkt 85fpkt", shape=pentagon, color=darkviolet];
7264[label="215.156.95.192;86pkt 86fpkt", shape=invtriangle, color=brown];
8275[label="215.156.95.192;85pkt 85fpkt", shape=invhouse, color=bisque];
stat1043[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.156.95.192:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5501--7264[label="1;85pkt 85fpkt"];
5501--8275[label="1;85pkt 85fpkt"];
7264--8275[label="1;85pkt 85fpkt"];
</description>
    <slice>
      <filter src_ip="215.156.95.192"/>
    </slice>
    <from sec="1036990804" usec="0"/>
    <to sec="1036991517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1044{
style=filled;
color=gray75;
5507[label="199.239.208.192;202pkt 202fpkt", shape=pentagon, color=darkviolet];
7267[label="199.239.208.192;203pkt 203fpkt", shape=invtriangle, color=brown];
stat1044[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.239.208.192:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5507--7267[label="1;202pkt 202fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.239.208.192" src_port="1028"/>
    </slice>
    <from sec="1036991309" usec="0"/>
    <to sec="1036991343" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1045{
style=filled;
color=gray75;
5515[label="215.156.88.193;24pkt 24fpkt", shape=pentagon, color=darkviolet];
7274[label="215.156.88.193;24pkt 24fpkt", shape=invtriangle, color=brown];
8283[label="215.156.88.193;24pkt 24fpkt", shape=invhouse, color=bisque];
stat1045[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.156.88.193:*, *:80}[37.5%]&lt;BR/&gt;{215.156.88.193:80, 214.228.56.230:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.75%)&lt;BR/&gt; 8080: (6.25%)&lt;BR/&gt; 23437: (2.08333%)&lt;BR/&gt; 23172: (2.08333%)&lt;BR/&gt; 23111: (2.08333%)&gt;];
}
5515--7274[label="1;24pkt 24fpkt"];
5515--8283[label="1;24pkt 24fpkt"];
7274--8283[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="215.156.88.193"/>
      <filter dst_ip="214.228.56.230" src_ip="215.156.88.193" src_port="80"/>
    </slice>
    <from sec="1036990914" usec="0"/>
    <to sec="1036991497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.66.52.194"/>
    </slice>
    <from sec="1036990862" usec="0"/>
    <to sec="1036991347" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1047{
style=filled;
color=gray75;
5527[label="200.10.167.194;174pkt 174fpkt", shape=pentagon, color=darkviolet];
7283[label="200.10.167.194;174pkt 174fpkt", shape=invtriangle, color=brown];
stat1047[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.10.167.194:25709, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25709: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5527--7283[label="1;174pkt 174fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.10.167.194" src_port="25709"/>
    </slice>
    <from sec="1036990917" usec="0"/>
    <to sec="1036990944" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1048{
style=filled;
color=gray75;
5535[label="199.59.46.196;120pkt 120fpkt", shape=pentagon, color=darkviolet];
7287[label="199.59.46.196;120pkt 120fpkt", shape=invtriangle, color=brown];
stat1048[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.59.46.196:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5535--7287[label="1;120pkt 120fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.59.46.196" src_port="1027"/>
    </slice>
    <from sec="1036991236" usec="0"/>
    <to sec="1036991256" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1049{
style=filled;
color=gray75;
5537[label="168.100.156.196;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7288[label="168.100.156.196;5pkt 5fpkt", shape=invtriangle, color=brown];
8290[label="168.100.156.196;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1049[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.100.156.196:20, 214.164.118.106:2161}[20%]&lt;BR/&gt;{168.100.156.196:25, 197.162.85.172:2121}[20%]&lt;BR/&gt;{168.100.156.196:25, 78.31.228.236:9827}[20%]&lt;BR/&gt;{168.100.156.196:25, 78.31.228.243:43248}[20%]&lt;BR/&gt;{168.100.156.196:25, 78.31.228.245:29542}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (42.8571%)&lt;BR/&gt; 43248: (10.7143%)&lt;BR/&gt; 29542: (10.7143%)&lt;BR/&gt; 9827: (10.7143%)&lt;BR/&gt; 2121: (10.7143%)&gt;];
}
5537--7288[label="1;4pkt 4fpkt"];
5537--8290[label="1;4pkt 4fpkt"];
7288--8290[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="78.31.228.245" dst_port="29542" src_ip="168.100.156.196" src_port="25"/>
      <filter dst_ip="78.31.228.243" dst_port="43248" src_ip="168.100.156.196" src_port="25"/>
      <filter dst_ip="78.31.228.236" dst_port="9827" src_ip="168.100.156.196" src_port="25"/>
      <filter dst_ip="197.162.85.172" dst_port="2121" src_ip="168.100.156.196" src_port="25"/>
      <filter dst_ip="214.164.118.106" dst_port="2161" src_ip="168.100.156.196" src_port="20"/>
    </slice>
    <from sec="1036990852" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14589,2.70209,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1050{
style=filled;
color=gray75;
1024[label="168.100.184.97;s;107pkt 107fpkt", shape=diamond, color=yellow];
1349[label="215.64.124.71;d;4pkt 4fpkt", shape=diamond, color=yellow];
2104[label="77.228.141.114;d;4pkt 4fpkt", shape=diamond, color=yellow];
2351[label="77.228.140.224;d;13pkt 13fpkt", shape=diamond, color=yellow];
2545[label="77.228.140.227;d;9pkt 9fpkt", shape=diamond, color=yellow];
2558[label="168.100.181.196;s;13pkt 13fpkt", shape=diamond, color=yellow];
2573[label="76.161.136.50;d;10pkt 10fpkt", shape=diamond, color=yellow];
2594[label="168.100.163.140;s;1pkt 1fpkt", shape=diamond, color=yellow];
3513[label="168.100.181.196;s;13pkt 13fpkt", shape=hexagon, color=black];
3906[label="145.208.209.14;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3928[label="168.100.165.16;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4698[label="168.100.184.97;106pkt 106fpkt", shape=pentagon, color=darkviolet];
5538[label="168.100.181.196;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6137[label="145.208.209.14;2pkt 2fpkt", shape=invtriangle, color=brown];
6148[label="168.100.165.16;1pkt 1fpkt", shape=invtriangle, color=brown];
7289[label="168.100.181.196;12pkt 12fpkt", shape=invtriangle, color=brown];
stat1050[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.100.184.97:*, *:*}[73.2877%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (8.09061%)&lt;BR/&gt; 20: (7.28155%)&lt;BR/&gt; 5190: (5.17799%)&lt;BR/&gt; 6667: (4.53074%)&lt;BR/&gt; 1863: (4.36893%)&gt;];
}
1024--1349[label="1;4pkt 4fpkt"];
1024--2351[label="0.153846;2pkt 2fpkt"];
1024--2545[label="0.111111;1pkt 1fpkt"];
1024--2573[label="0.1;1pkt 1fpkt"];
1024--3410[label="0.153846;2pkt 2fpkt"];
1024--4698[label="1;106pkt 106fpkt"];
1349--4698[label="1;4pkt 4fpkt"];
2104--2558[label="0.25;1pkt 1fpkt"];
2104--2594[label="1;1pkt 1fpkt"];
2104--3513[label="0.25;1pkt 1fpkt"];
2104--3928[label="1;1pkt 1fpkt"];
2104--5538[label="0.25;1pkt 1fpkt"];
2104--6148[label="1;1pkt 1fpkt"];
2104--7289[label="0.25;1pkt 1fpkt"];
2351--2425[label="0.0769231;1pkt 1fpkt"];
2351--2534[label="0.0769231;1pkt 1fpkt"];
2351--2558[label="0.230769;3pkt 3fpkt"];
2351--3410[label="1;13pkt 13fpkt"];
2351--3513[label="0.230769;3pkt 3fpkt"];
2351--4314[label="0.0769231;1pkt 1fpkt"];
2351--4698[label="0.153846;2pkt 2fpkt"];
2351--5538[label="0.25;3pkt 3fpkt"];
2351--7289[label="0.25;3pkt 3fpkt"];
2545--2558[label="0.333333;3pkt 3fpkt"];
2545--3209[label="0.111111;1pkt 1fpkt"];
2545--3513[label="0.333333;3pkt 3fpkt"];
2545--3943[label="0.111111;1pkt 1fpkt"];
2545--4698[label="0.111111;1pkt 1fpkt"];
2545--5538[label="0.333333;3pkt 3fpkt"];
2545--7289[label="0.333333;3pkt 3fpkt"];
2558--3410[label="0.230769;3pkt 3fpkt"];
2558--3513[label="1;13pkt 13fpkt"];
2558--5538[label="1;12pkt 12fpkt"];
2558--7289[label="1;12pkt 12fpkt"];
2573--4698[label="0.1;1pkt 1fpkt"];
2573--6137[label="0.5;1pkt 1fpkt"];
3513--5538[label="1;12pkt 12fpkt"];
3513--7289[label="1;12pkt 12fpkt"];
3906--6137[label="1;1pkt 1fpkt"];
3928--6148[label="1;1pkt 1fpkt"];
5538--7289[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter src_ip="168.100.184.97"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.80.56.197"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1052{
style=filled;
color=gray75;
5546[label="202.164.180.197;179pkt 179fpkt", shape=pentagon, color=darkviolet];
7296[label="202.164.180.197;179pkt 179fpkt", shape=invtriangle, color=brown];
stat1052[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.164.180.197:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5546--7296[label="1;179pkt 179fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.164.180.197" src_port="1026"/>
    </slice>
    <from sec="1036991409" usec="0"/>
    <to sec="1036991437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="165.189.227.197"/>
    </slice>
    <from sec="1036990808" usec="0"/>
    <to sec="1036991505" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.169.234.199"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="135.111.130.200"/>
    </slice>
    <from sec="1036990886" usec="0"/>
    <to sec="1036991100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1056{
style=filled;
color=gray75;
542[label="215.244.228.201s;114pkt 114fpkt", shape=rectangle, color=red];
5583[label="215.244.228.201;199pkt 199fpkt", shape=pentagon, color=darkviolet];
7320[label="215.244.228.201;198pkt 198fpkt", shape=invtriangle, color=brown];
8308[label="215.244.228.201;198pkt 198fpkt", shape=invhouse, color=bisque];
stat1056[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.244.228.201:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
542--5583[label="1;114pkt 114fpkt"];
542--7320[label="0.991228;113pkt 113fpkt"];
542--8308[label="0.991228;113pkt 113fpkt"];
5583--7320[label="1;198pkt 198fpkt"];
5583--8308[label="1;198pkt 198fpkt"];
7320--8308[label="1;198pkt 198fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.244.228.201" src_port="1025"/>
    </slice>
    <from sec="1036991114" usec="0"/>
    <to sec="1036991145" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1057{
style=filled;
color=gray75;
5584[label="199.57.16.202;103pkt 103fpkt", shape=pentagon, color=darkviolet];
7321[label="199.57.16.202;104pkt 104fpkt", shape=invtriangle, color=brown];
8309[label="199.57.16.202;103pkt 103fpkt", shape=invhouse, color=bisque];
stat1057[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.57.16.202:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5584--7321[label="1;103pkt 103fpkt"];
5584--8309[label="1;103pkt 103fpkt"];
7321--8309[label="1;103pkt 103fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.57.16.202" src_port="1026"/>
    </slice>
    <from sec="1036991220" usec="0"/>
    <to sec="1036991237" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1058{
style=filled;
color=gray75;
5586[label="145.208.128.202;14pkt 14fpkt", shape=pentagon, color=darkviolet];
7322[label="145.208.128.202;13pkt 13fpkt", shape=invtriangle, color=brown];
stat1058[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.128.202:*, 49.94.27.139:25}[42.8571%]&lt;BR/&gt;{145.208.128.202:*, 208.140.43.146:25}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (46.2963%)&lt;BR/&gt; 1863: (3.7037%)&lt;BR/&gt; 1321: (3.7037%)&lt;BR/&gt; 1318: (3.7037%)&lt;BR/&gt; 1316: (3.7037%)&gt;];
}
5586--7322[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="208.140.43.146" dst_port="25" src_ip="145.208.128.202"/>
      <filter dst_ip="49.94.27.139" dst_port="25" src_ip="145.208.128.202"/>
    </slice>
    <from sec="1036990819" usec="0"/>
    <to sec="1036991399" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1059{
style=filled;
color=gray75;
5589[label="9.67.230.202;189pkt 189fpkt", shape=pentagon, color=darkviolet];
7325[label="9.67.230.202;189pkt 189fpkt", shape=invtriangle, color=brown];
stat1059[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.67.230.202:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5589--7325[label="1;189pkt 189fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.67.230.202" src_port="1028"/>
    </slice>
    <from sec="1036991224" usec="0"/>
    <to sec="1036991255" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1060{
style=filled;
color=gray75;
5593[label="170.40.64.204;207pkt 207fpkt", shape=pentagon, color=darkviolet];
7328[label="170.40.64.204;207pkt 207fpkt", shape=invtriangle, color=brown];
stat1060[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.40.64.204:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5593--7328[label="1;207pkt 207fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="170.40.64.204" src_port="1025"/>
    </slice>
    <from sec="1036991224" usec="0"/>
    <to sec="1036991259" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1061{
style=filled;
color=gray75;
5599[label="9.234.16.205;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7331[label="9.234.16.205;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1061[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.234.16.205:45, 175.194.232.48:3072}[50%]&lt;BR/&gt;{9.234.16.205:45, 214.142.99.113:1024}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 45: (50%)&lt;BR/&gt; 3072: (25%)&lt;BR/&gt; 1024: (25%)&gt;];
}
5599--7331[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="214.142.99.113" dst_port="1024" src_ip="9.234.16.205" src_port="45"/>
      <filter dst_ip="175.194.232.48" dst_port="3072" src_ip="9.234.16.205" src_port="45"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1062{
style=filled;
color=gray75;
5604[label="219.66.131.205;31pkt 31fpkt", shape=pentagon, color=darkviolet];
7335[label="219.66.131.205;31pkt 31fpkt", shape=invtriangle, color=brown];
stat1062[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.66.131.205:80, 199.119.194.241:*}[51.6129%]&lt;BR/&gt;{219.66.131.205:80, 9.200.79.0:*}[48.3871%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3582: (3.22581%)&lt;BR/&gt; 4130: (1.6129%)&lt;BR/&gt; 3965: (1.6129%)&lt;BR/&gt; 3947: (1.6129%)&gt;];
}
5604--7335[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="199.119.194.241" src_ip="219.66.131.205" src_port="80"/>
      <filter dst_ip="9.200.79.0" src_ip="219.66.131.205" src_port="80"/>
    </slice>
    <from sec="1036991112" usec="0"/>
    <to sec="1036991253" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1063{
style=filled;
color=gray75;
5606[label="9.67.135.205;233pkt 233fpkt", shape=pentagon, color=darkviolet];
7336[label="9.67.135.205;234pkt 234fpkt", shape=invtriangle, color=brown];
8314[label="9.67.135.205;233pkt 233fpkt", shape=invhouse, color=bisque];
stat1063[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.67.135.205:1172, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1172: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5606--7336[label="1;233pkt 233fpkt"];
5606--8314[label="1;233pkt 233fpkt"];
7336--8314[label="1;233pkt 233fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.67.135.205" src_port="1172"/>
    </slice>
    <from sec="1036991412" usec="0"/>
    <to sec="1036991448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1064{
style=filled;
color=gray75;
5614[label="198.114.132.206;156pkt 156fpkt", shape=pentagon, color=darkviolet];
7341[label="198.114.132.206;156pkt 156fpkt", shape=invtriangle, color=brown];
8318[label="198.114.132.206;156pkt 156fpkt", shape=invhouse, color=bisque];
stat1064[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.114.132.206:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5614--7341[label="1;156pkt 156fpkt"];
5614--8318[label="1;156pkt 156fpkt"];
7341--8318[label="1;156pkt 156fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="198.114.132.206" src_port="1025"/>
    </slice>
    <from sec="1036991087" usec="0"/>
    <to sec="1036991111" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1065{
style=filled;
color=gray75;
5615[label="214.119.132.206;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7342[label="214.119.132.206;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1065[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.119.132.206:44213, 150.175.22.228:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 44213: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5615--7342[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="150.175.22.228" dst_port="80" src_ip="214.119.132.206" src_port="44213"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1066{
style=filled;
color=gray75;
5621[label="9.83.136.207;174pkt 174fpkt", shape=pentagon, color=darkviolet];
7345[label="9.83.136.207;175pkt 175fpkt", shape=invtriangle, color=brown];
8321[label="9.83.136.207;174pkt 174fpkt", shape=invhouse, color=bisque];
stat1066[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.83.136.207:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5621--7345[label="1;174pkt 174fpkt"];
5621--8321[label="1;174pkt 174fpkt"];
7345--8321[label="1;174pkt 174fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.83.136.207" src_port="1030"/>
    </slice>
    <from sec="1036991237" usec="0"/>
    <to sec="1036991265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="175.177.197.207"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1068{
style=filled;
color=gray75;
5626[label="168.100.1.208;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7349[label="168.100.1.208;2pkt 2fpkt", shape=invtriangle, color=brown];
8324[label="168.100.1.208;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1068[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.100.1.208:0, 10.10.10.115:0}[50%]&lt;BR/&gt;{168.100.1.208:1027, 201.80.225.177:25}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (50%)&lt;BR/&gt; 1027: (25%)&lt;BR/&gt; 25: (25%)&gt;];
}
5626--7349[label="1;2pkt 2fpkt"];
5626--8324[label="1;2pkt 2fpkt"];
7349--8324[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="201.80.225.177" dst_port="25" src_ip="168.100.1.208" src_port="1027"/>
      <filter dst_ip="10.10.10.115" src_ip="168.100.1.208"/>
    </slice>
    <from sec="1036990815" usec="0"/>
    <to sec="1036991516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,002,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="148.242.130.208"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.177.46.210"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036990865" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="148.242.64.211"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.76.86.211"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991378" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1073{
style=filled;
color=gray75;
5670[label="200.232.40.212;10pkt 10fpkt", shape=pentagon, color=darkviolet];
7377[label="200.232.40.212;11pkt 11fpkt", shape=invtriangle, color=brown];
stat1073[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.232.40.212:80, 148.242.132.12:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2927: (4.7619%)&lt;BR/&gt; 2916: (4.7619%)&lt;BR/&gt; 2875: (4.7619%)&lt;BR/&gt; 2871: (4.7619%)&gt;];
}
5670--7377[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="148.242.132.12" src_ip="200.232.40.212" src_port="80"/>
    </slice>
    <from sec="1036990807" usec="0"/>
    <to sec="1036991505" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1074{
style=filled;
color=gray75;
5674[label="77.133.129.212;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7379[label="77.133.129.212;1pkt 1fpkt", shape=invtriangle, color=brown];
8345[label="77.133.129.212;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1074[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.133.129.212:25, 145.208.169.39:33464}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33464: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
5674--7379[label="1;1pkt 1fpkt"];
5674--8345[label="1;1pkt 1fpkt"];
7379--8345[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.169.39" dst_port="33464" src_ip="77.133.129.212" src_port="25"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1075{
style=filled;
color=gray75;
5676[label="84.121.156.212;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7381[label="84.121.156.212;7pkt 7fpkt", shape=invtriangle, color=brown];
8347[label="84.121.156.212;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1075[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.121.156.212:20, 215.172.16.92:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (50%)&lt;BR/&gt; 1811: (7.14286%)&lt;BR/&gt; 1810: (7.14286%)&lt;BR/&gt; 1809: (7.14286%)&lt;BR/&gt; 1808: (7.14286%)&gt;];
}
5676--7381[label="1;7pkt 7fpkt"];
5676--8347[label="1;7pkt 7fpkt"];
7381--8347[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="215.172.16.92" src_ip="84.121.156.212" src_port="20"/>
    </slice>
    <from sec="1036991011" usec="0"/>
    <to sec="1036991499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1076{
style=filled;
color=gray75;
5678[label="199.60.176.212;253pkt 253fpkt", shape=pentagon, color=darkviolet];
7383[label="199.60.176.212;254pkt 254fpkt", shape=invtriangle, color=brown];
8348[label="199.60.176.212;254pkt 254fpkt", shape=invhouse, color=bisque];
stat1076[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.60.176.212:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5678--7383[label="1;253pkt 253fpkt"];
5678--8348[label="1;253pkt 253fpkt"];
7383--8348[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.60.176.212" src_port="1026"/>
    </slice>
    <from sec="1036991246" usec="0"/>
    <to sec="1036991286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.64.4.213"/>
    </slice>
    <from sec="1036990825" usec="0"/>
    <to sec="1036991112" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,502,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="148.242.139.213"/>
    </slice>
    <from sec="1036991163" usec="0"/>
    <to sec="1036991208" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.189.197.214"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991360" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.153.210.214"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036990978" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1081{
style=filled;
color=gray75;
5703[label="192.120.83.215;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7394[label="192.120.83.215;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1081[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.120.83.215:1367, 145.208.128.219:80}[20%]&lt;BR/&gt;{192.120.83.215:37786, 145.208.128.219:80}[20%]&lt;BR/&gt;{192.120.83.215:40187, 145.208.128.219:25}[20%]&lt;BR/&gt;{192.120.83.215:80, 145.208.128.219:3958}[20%]&lt;BR/&gt;{192.120.83.215:80, 145.208.128.219:51732}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40%)&lt;BR/&gt; 51732: (10%)&lt;BR/&gt; 40187: (10%)&lt;BR/&gt; 37786: (10%)&lt;BR/&gt; 3958: (10%)&gt;];
}
5703--7394[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.128.219" dst_port="51732" src_ip="192.120.83.215" src_port="80"/>
      <filter dst_ip="145.208.128.219" dst_port="3958" src_ip="192.120.83.215" src_port="80"/>
      <filter dst_ip="145.208.128.219" dst_port="25" src_ip="192.120.83.215" src_port="40187"/>
      <filter dst_ip="145.208.128.219" dst_port="80" src_ip="192.120.83.215" src_port="37786"/>
      <filter dst_ip="145.208.128.219" dst_port="80" src_ip="192.120.83.215" src_port="1367"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.2.99.215"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.9.99.216"/>
    </slice>
    <from sec="1036991470" usec="0"/>
    <to sec="1036991491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1084{
style=filled;
color=gray75;
5716[label="145.208.129.216;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7401[label="145.208.129.216;1pkt 1fpkt", shape=invtriangle, color=brown];
8357[label="145.208.129.216;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1084[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.129.216:1401, 76.174.4.103:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1401: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5716--7401[label="1;1pkt 1fpkt"];
5716--8357[label="1;1pkt 1fpkt"];
7401--8357[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="76.174.4.103" dst_port="80" src_ip="145.208.129.216" src_port="1401"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,002,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="148.242.130.216"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1086{
style=filled;
color=gray75;
5718[label="209.2.177.216;44pkt 44fpkt", shape=pentagon, color=darkviolet];
7403[label="209.2.177.216;43pkt 43fpkt", shape=invtriangle, color=brown];
8358[label="209.2.177.216;43pkt 43fpkt", shape=invhouse, color=bisque];
stat1086[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.2.177.216:80, 148.242.154.132:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2207: (1.15385%)&lt;BR/&gt; 2202: (1.15385%)&lt;BR/&gt; 2191: (1.15385%)&lt;BR/&gt; 2190: (1.15385%)&gt;];
}
5718--7403[label="1;43pkt 43fpkt"];
5718--8358[label="1;43pkt 43fpkt"];
7403--8358[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_ip="148.242.154.132" src_ip="209.2.177.216" src_port="80"/>
    </slice>
    <from sec="1036991262" usec="0"/>
    <to sec="1036991467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1087{
style=filled;
color=gray75;
5729[label="9.14.183.217;132pkt 132fpkt", shape=pentagon, color=darkviolet];
7408[label="9.14.183.217;131pkt 131fpkt", shape=invtriangle, color=brown];
stat1087[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.14.183.217:1032, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1032: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5729--7408[label="1;131pkt 131fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.14.183.217" src_port="1032"/>
    </slice>
    <from sec="1036990957" usec="0"/>
    <to sec="1036990979" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1088{
style=filled;
color=gray75;
5735[label="214.145.31.218;40pkt 40fpkt", shape=pentagon, color=darkviolet];
7413[label="214.145.31.218;40pkt 40fpkt", shape=invtriangle, color=brown];
8364[label="214.145.31.218;39pkt 39fpkt", shape=invhouse, color=bisque];
stat1088[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.145.31.218:*, 218.114.18.22:113}[50%]&lt;BR/&gt;{214.145.31.218:25, 218.114.18.22:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (25.2101%)&lt;BR/&gt; 25: (24.7899%)&lt;BR/&gt; 58724: (1.2605%)&lt;BR/&gt; 58716: (1.2605%)&lt;BR/&gt; 58710: (1.2605%)&gt;];
}
5735--7413[label="1;40pkt 40fpkt"];
5735--8364[label="1;39pkt 39fpkt"];
7413--8364[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="218.114.18.22" src_ip="214.145.31.218" src_port="25"/>
      <filter dst_ip="218.114.18.22" dst_port="113" src_ip="214.145.31.218"/>
    </slice>
    <from sec="1036990985" usec="0"/>
    <to sec="1036991326" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="73.41.168.218"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1090{
style=filled;
color=gray75;
5744[label="77.162.213.218;12pkt 12fpkt", shape=pentagon, color=darkviolet];
7421[label="77.162.213.218;12pkt 12fpkt", shape=invtriangle, color=brown];
stat1090[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.162.213.218:80, 133.213.164.117:*}[50%]&lt;BR/&gt;{77.162.213.218:80, 133.213.162.96:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 32903: (4.16667%)&lt;BR/&gt; 3223: (4.16667%)&lt;BR/&gt; 3220: (4.16667%)&lt;BR/&gt; 3219: (4.16667%)&gt;];
}
5744--7421[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="133.213.164.117" src_ip="77.162.213.218" src_port="80"/>
      <filter dst_ip="133.213.162.96" src_ip="77.162.213.218" src_port="80"/>
    </slice>
    <from sec="1036991128" usec="0"/>
    <to sec="1036991513" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.2.75.219"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1093{
style=filled;
color=gray75;
5749[label="73.136.82.219;156pkt 156fpkt", shape=pentagon, color=darkviolet];
7426[label="73.136.82.219;157pkt 157fpkt", shape=invtriangle, color=brown];
stat1093[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.136.82.219:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5749--7426[label="1;156pkt 156fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="73.136.82.219" src_port="1026"/>
    </slice>
    <from sec="1036991411" usec="0"/>
    <to sec="1036991440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.68.34.220"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1095{
style=filled;
color=gray75;
5758[label="175.194.40.220;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7429[label="175.194.40.220;1pkt 1fpkt", shape=invtriangle, color=brown];
8372[label="175.194.40.220;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1095[shape=component, label=&lt;Rules:&lt;BR/&gt;{175.194.40.220:0, 148.33.148.125:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5758--7429[label="1;1pkt 1fpkt"];
5758--8372[label="1;1pkt 1fpkt"];
7429--8372[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.33.148.125" src_ip="175.194.40.220"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="168.100.160.220"/>
    </slice>
    <from sec="1036990806" usec="0"/>
    <to sec="1036991516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="175.177.209.221"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.109.82.223"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,502,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.98.217.224"/>
    </slice>
    <from sec="1036991018" usec="0"/>
    <to sec="1036991133" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.209.254.224"/>
    </slice>
    <from sec="1036990808" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="73.80.3.225"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1102{
style=filled;
color=gray75;
5790[label="214.8.30.225;119pkt 119fpkt", shape=pentagon, color=darkviolet];
7450[label="214.8.30.225;119pkt 119fpkt", shape=invtriangle, color=brown];
8386[label="214.8.30.225;119pkt 119fpkt", shape=invhouse, color=bisque];
stat1102[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.8.30.225:32214, *:137}[63.0252%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 32214: (31.5126%)&lt;BR/&gt; 32280: (2.52101%)&lt;BR/&gt; 32279: (0.840336%)&lt;BR/&gt; 32278: (0.840336%)&gt;];
}
5790--7450[label="1;119pkt 119fpkt"];
5790--8386[label="1;119pkt 119fpkt"];
7450--8386[label="1;119pkt 119fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.8.30.225" src_port="32214"/>
    </slice>
    <from sec="1036991250" usec="0"/>
    <to sec="1036991270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676574,2.717,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1103{
style=filled;
color=gray75;
570[label="198.66.101.225s;51pkt 51fpkt", shape=rectangle, color=red];
5792[label="198.66.101.225;154pkt 154fpkt", shape=pentagon, color=darkviolet];
7452[label="198.66.101.225;153pkt 153fpkt", shape=invtriangle, color=brown];
stat1103[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.66.101.225:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
570--5792[label="1;51pkt 51fpkt"];
570--7452[label="1;51pkt 51fpkt"];
5792--7452[label="1;153pkt 153fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="198.66.101.225" src_port="1030"/>
    </slice>
    <from sec="1036991424" usec="0"/>
    <to sec="1036991448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1104{
style=filled;
color=gray75;
5794[label="175.177.124.225;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7454[label="175.177.124.225;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1104[shape=component, label=&lt;Rules:&lt;BR/&gt;{175.177.124.225:4988, 199.249.169.203:2519}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4988: (50%)&lt;BR/&gt; 2519: (50%)&gt;];
}
5794--7454[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.249.169.203" dst_port="2519" src_ip="175.177.124.225" src_port="4988"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.72.12.226"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.177.46.226"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1107{
style=filled;
color=gray75;
5802[label="172.107.82.226;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7459[label="172.107.82.226;1pkt 1fpkt", shape=invtriangle, color=brown];
8392[label="172.107.82.226;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1107[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.107.82.226:0, 212.159.134.8:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5802--7459[label="1;1pkt 1fpkt"];
5802--8392[label="1;1pkt 1fpkt"];
7459--8392[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.159.134.8" src_ip="172.107.82.226"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945007,2.69627,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1108{
style=filled;
color=gray75;
2338[label="77.228.140.227;s;8pkt 8fpkt", shape=diamond, color=yellow];
5812[label="77.228.140.227;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7466[label="77.228.140.227;4pkt 4fpkt", shape=invtriangle, color=brown];
8398[label="77.228.140.227;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1108[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.228.140.227:*, 168.100.181.196:3689}[25%]&lt;BR/&gt;{77.228.140.227:6661, *:*}[25%]&lt;BR/&gt;{77.228.140.227:6665, *:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6665: (13.8889%)&lt;BR/&gt; 6661: (13.8889%)&lt;BR/&gt; 6664: (11.1111%)&lt;BR/&gt; 1894: (11.1111%)&lt;BR/&gt; 1268: (11.1111%)&gt;];
}
2338--3078[label="0.125;1pkt 1fpkt"];
2338--5812[label="1;3pkt 3fpkt"];
2338--7466[label="1;4pkt 4fpkt"];
2338--8398[label="1;3pkt 3fpkt"];
5812--7466[label="1;3pkt 3fpkt"];
5812--8398[label="1;3pkt 3fpkt"];
7466--8398[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="77.228.140.227" src_port="6665"/>
      <filter src_ip="77.228.140.227" src_port="6661"/>
      <filter dst_ip="168.100.181.196" dst_port="3689" src_ip="77.228.140.227"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.169.14.228"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="76.120.29.228"/>
    </slice>
    <from sec="1036990804" usec="0"/>
    <to sec="1036991515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676574,2.717,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1111{
style=filled;
color=gray75;
631[label="215.235.64.228s;46pkt 46fpkt", shape=rectangle, color=red];
5821[label="215.235.64.228;214pkt 214fpkt", shape=pentagon, color=darkviolet];
7472[label="215.235.64.228;215pkt 215fpkt", shape=invtriangle, color=brown];
stat1111[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.235.64.228:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 36397: (0.315789%)&lt;BR/&gt; 36377: (0.315789%)&lt;BR/&gt; 36354: (0.315789%)&lt;BR/&gt; 36343: (0.315789%)&gt;];
}
631--5821[label="1;46pkt 46fpkt"];
631--7472[label="1;46pkt 46fpkt"];
5821--7472[label="1;214pkt 214fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.235.64.228"/>
    </slice>
    <from sec="1036991394" usec="0"/>
    <to sec="1036991428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.12.87.228"/>
    </slice>
    <from sec="1036990832" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1113{
style=filled;
color=gray75;
5836[label="197.242.101.229;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7481[label="197.242.101.229;2pkt 2fpkt", shape=invtriangle, color=brown];
8406[label="197.242.101.229;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1113[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.242.101.229:80, 215.172.24.165:56737}[33.3333%]&lt;BR/&gt;{197.242.101.229:80, 133.213.85.150:1257}[33.3333%]&lt;BR/&gt;{197.242.101.229:80, 133.213.85.150:1260}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56737: (21.4286%)&lt;BR/&gt; 1260: (21.4286%)&lt;BR/&gt; 1257: (7.14286%)&gt;];
}
5836--7481[label="1;2pkt 2fpkt"];
5836--8406[label="1;2pkt 2fpkt"];
7481--8406[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="133.213.85.150" dst_port="1260" src_ip="197.242.101.229" src_port="80"/>
      <filter dst_ip="133.213.85.150" dst_port="1257" src_ip="197.242.101.229" src_port="80"/>
      <filter dst_ip="215.172.24.165" dst_port="56737" src_ip="197.242.101.229" src_port="80"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.174.171.229"/>
    </slice>
    <from sec="1036990899" usec="0"/>
    <to sec="1036991516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1115{
style=filled;
color=gray75;
5850[label="202.163.46.231;160pkt 160fpkt", shape=pentagon, color=darkviolet];
7494[label="202.163.46.231;160pkt 160fpkt", shape=invtriangle, color=brown];
stat1115[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.163.46.231:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5850--7494[label="1;160pkt 160fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.163.46.231" src_port="1027"/>
    </slice>
    <from sec="1036991267" usec="0"/>
    <to sec="1036991293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.177.46.232"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1117{
style=filled;
color=gray75;
5864[label="198.234.170.232;228pkt 228fpkt", shape=pentagon, color=darkviolet];
7501[label="198.234.170.232;228pkt 228fpkt", shape=invtriangle, color=brown];
8419[label="198.234.170.232;228pkt 228fpkt", shape=invhouse, color=bisque];
stat1117[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.234.170.232:1038, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1038: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5864--7501[label="1;228pkt 228fpkt"];
5864--8419[label="1;228pkt 228fpkt"];
7501--8419[label="1;228pkt 228fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="198.234.170.232" src_port="1038"/>
    </slice>
    <from sec="1036991413" usec="0"/>
    <to sec="1036991449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="175.177.2.233"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1119{
style=filled;
color=gray75;
5869[label="76.106.44.233;122pkt 122fpkt", shape=pentagon, color=darkviolet];
7505[label="76.106.44.233;123pkt 123fpkt", shape=invtriangle, color=brown];
8422[label="76.106.44.233;122pkt 122fpkt", shape=invhouse, color=bisque];
stat1119[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.106.44.233:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5869--7505[label="1;122pkt 122fpkt"];
5869--8422[label="1;122pkt 122fpkt"];
7505--8422[label="1;122pkt 122fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="76.106.44.233" src_port="1027"/>
    </slice>
    <from sec="1036991153" usec="0"/>
    <to sec="1036991172" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.177.46.233"/>
    </slice>
    <from sec="1036990867" usec="0"/>
    <to sec="1036991469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.102.150.233"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1122{
style=filled;
color=gray75;
5880[label="215.233.13.234;171pkt 171fpkt", shape=pentagon, color=darkviolet];
7514[label="215.233.13.234;170pkt 170fpkt", shape=invtriangle, color=brown];
8426[label="215.233.13.234;170pkt 170fpkt", shape=invhouse, color=bisque];
stat1122[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.233.13.234:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5880--7514[label="1;170pkt 170fpkt"];
5880--8426[label="1;170pkt 170fpkt"];
7514--8426[label="1;170pkt 170fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.233.13.234" src_port="1026"/>
    </slice>
    <from sec="1036991308" usec="0"/>
    <to sec="1036991337" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1123{
style=filled;
color=gray75;
5883[label="198.21.131.234;49pkt 49fpkt", shape=pentagon, color=darkviolet];
7516[label="198.21.131.234;49pkt 49fpkt", shape=invtriangle, color=brown];
8428[label="198.21.131.234;48pkt 48fpkt", shape=invhouse, color=bisque];
stat1123[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.21.131.234:80, 145.208.169.141:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53973: (1.0274%)&lt;BR/&gt; 53871: (1.0274%)&lt;BR/&gt; 53862: (1.0274%)&lt;BR/&gt; 53349: (1.0274%)&gt;];
}
5883--7516[label="1;49pkt 49fpkt"];
5883--8428[label="1;48pkt 48fpkt"];
7516--8428[label="1;48pkt 48fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.169.141" src_ip="198.21.131.234" src_port="80"/>
    </slice>
    <from sec="1036991461" usec="0"/>
    <to sec="1036991516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1124{
style=filled;
color=gray75;
5886[label="215.130.245.234;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7518[label="215.130.245.234;1pkt 1fpkt", shape=invtriangle, color=brown];
8430[label="215.130.245.234;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1124[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.130.245.234:80, 214.119.132.239:3960}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3960: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5886--7518[label="1;1pkt 1fpkt"];
5886--8430[label="1;1pkt 1fpkt"];
7518--8430[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.119.132.239" dst_port="3960" src_ip="215.130.245.234" src_port="80"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676574,2.717,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1125{
style=filled;
color=gray75;
580[label="76.176.4.235s;117pkt 117fpkt", shape=rectangle, color=red];
5888[label="76.176.4.235;195pkt 195fpkt", shape=pentagon, color=darkviolet];
7519[label="76.176.4.235;195pkt 195fpkt", shape=invtriangle, color=brown];
stat1125[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.176.4.235:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
580--5888[label="1;117pkt 117fpkt"];
580--7519[label="1;117pkt 117fpkt"];
5888--7519[label="1;195pkt 195fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="76.176.4.235" src_port="1028"/>
    </slice>
    <from sec="1036991419" usec="0"/>
    <to sec="1036991449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1126{
style=filled;
color=gray75;
5891[label="198.189.131.236;168pkt 168fpkt", shape=pentagon, color=darkviolet];
7522[label="198.189.131.236;167pkt 167fpkt", shape=invtriangle, color=brown];
8432[label="198.189.131.236;159pkt 159fpkt", shape=invhouse, color=bisque];
stat1126[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.189.131.236:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5891--7522[label="1;167pkt 167fpkt"];
5891--8432[label="1;159pkt 159fpkt"];
7522--8432[label="0.993711;158pkt 158fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="198.189.131.236" src_port="1025"/>
    </slice>
    <from sec="1036991339" usec="0"/>
    <to sec="1036991365" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823917,2.71604,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1127{
style=filled;
color=gray75;
2416[label="145.208.87.220;d;12pkt 12fpkt", shape=diamond, color=yellow];
5892[label="21.233.133.236;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7523[label="21.233.133.236;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1127[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 145.208.87.220:7743}[50%]&lt;BR/&gt;{*:7743, 145.208.87.220:*}[41.6667%]&lt;BR/&gt;{198.75.248.39:*, 145.208.87.220:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7743: (46.4286%)&lt;BR/&gt; 1889: (10.7143%)&lt;BR/&gt; 13856: (3.57143%)&lt;BR/&gt; 13822: (3.57143%)&lt;BR/&gt; 3451: (3.57143%)&gt;];
}
2416--5892[label="1;1pkt 1fpkt"];
2416--7523[label="1;1pkt 1fpkt"];
5892--7523[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.87.220" src_ip="198.75.248.39"/>
      <filter dst_ip="145.208.87.220" src_port="7743"/>
      <filter dst_ip="145.208.87.220" dst_port="7743"/>
    </slice>
    <from sec="1036990807" usec="0"/>
    <to sec="1036991375" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.169.149.236"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1129{
style=filled;
color=gray75;
5895[label="78.115.209.236;106pkt 106fpkt", shape=pentagon, color=darkviolet];
7525[label="78.115.209.236;106pkt 106fpkt", shape=invtriangle, color=brown];
stat1129[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.115.209.236:1033, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1033: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5895--7525[label="1;106pkt 106fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="78.115.209.236" src_port="1033"/>
    </slice>
    <from sec="1036991415" usec="0"/>
    <to sec="1036991432" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1130{
style=filled;
color=gray75;
5899[label="214.124.42.237;26pkt 26fpkt", shape=pentagon, color=darkviolet];
7527[label="214.124.42.237;26pkt 26fpkt", shape=invtriangle, color=brown];
8434[label="214.124.42.237;25pkt 25fpkt", shape=invhouse, color=bisque];
stat1130[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.124.42.237:*, 218.212.137.101:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1160: (1.94805%)&lt;BR/&gt; 1159: (1.94805%)&lt;BR/&gt; 1158: (1.94805%)&lt;BR/&gt; 1157: (1.94805%)&gt;];
}
5899--7527[label="1;26pkt 26fpkt"];
5899--8434[label="1;25pkt 25fpkt"];
7527--8434[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="218.212.137.101" dst_port="80" src_ip="214.124.42.237"/>
    </slice>
    <from sec="1036990802" usec="0"/>
    <to sec="1036990894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1131{
style=filled;
color=gray75;
5905[label="145.208.187.237;44pkt 44fpkt", shape=pentagon, color=darkviolet];
7529[label="145.208.187.237;44pkt 44fpkt", shape=invtriangle, color=brown];
8436[label="145.208.187.237;45pkt 45fpkt", shape=invhouse, color=bisque];
stat1131[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.187.237:139, 192.168.0.1:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 3950: (1.12782%)&lt;BR/&gt; 3947: (1.12782%)&lt;BR/&gt; 3944: (1.12782%)&lt;BR/&gt; 3941: (1.12782%)&gt;];
}
5905--7529[label="1;44pkt 44fpkt"];
5905--8436[label="1;44pkt 44fpkt"];
7529--8436[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.0.1" src_ip="145.208.187.237" src_port="139"/>
    </slice>
    <from sec="1036990804" usec="0"/>
    <to sec="1036991516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="79.81.103.238"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1133{
style=filled;
color=gray75;
5913[label="145.208.187.238;42pkt 42fpkt", shape=pentagon, color=darkviolet];
7534[label="145.208.187.238;41pkt 41fpkt", shape=invtriangle, color=brown];
stat1133[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.187.238:*, 196.163.133.127:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1433: (1.20482%)&lt;BR/&gt; 1432: (1.20482%)&lt;BR/&gt; 1431: (1.20482%)&lt;BR/&gt; 1430: (1.20482%)&gt;];
}
5913--7534[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_ip="196.163.133.127" dst_port="80" src_ip="145.208.187.238"/>
    </slice>
    <from sec="1036990930" usec="0"/>
    <to sec="1036990956" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1134{
style=filled;
color=gray75;
5921[label="9.140.137.239;159pkt 159fpkt", shape=pentagon, color=darkviolet];
7542[label="9.140.137.239;158pkt 158fpkt", shape=invtriangle, color=brown];
8444[label="9.140.137.239;159pkt 159fpkt", shape=invhouse, color=bisque];
stat1134[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.140.137.239:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5921--7542[label="1;158pkt 158fpkt"];
5921--8444[label="1;159pkt 159fpkt"];
7542--8444[label="1;158pkt 158fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.140.137.239" src_port="1025"/>
    </slice>
    <from sec="1036991239" usec="0"/>
    <to sec="1036991268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1135{
style=filled;
color=gray75;
5926[label="9.46.58.240;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7547[label="9.46.58.240;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1135[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.46.58.240:6667, 145.197.133.142:2956}[33.3333%]&lt;BR/&gt;{9.46.58.240:6667, 168.100.163.161:1080}[33.3333%]&lt;BR/&gt;{9.46.58.240:6667, 168.100.163.162:1305}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (50%)&lt;BR/&gt; 2956: (20%)&lt;BR/&gt; 1305: (20%)&lt;BR/&gt; 1080: (10%)&gt;];
}
5926--7547[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="168.100.163.162" dst_port="1305" src_ip="9.46.58.240" src_port="6667"/>
      <filter dst_ip="168.100.163.161" dst_port="1080" src_ip="9.46.58.240" src_port="6667"/>
      <filter dst_ip="145.197.133.142" dst_port="2956" src_ip="9.46.58.240" src_port="6667"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991513" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1136{
style=filled;
color=gray75;
5929[label="215.249.138.240;112pkt 112fpkt", shape=pentagon, color=darkviolet];
7550[label="215.249.138.240;112pkt 112fpkt", shape=invtriangle, color=brown];
8446[label="215.249.138.240;112pkt 112fpkt", shape=invhouse, color=bisque];
stat1136[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.249.138.240:1044, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1044: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5929--7550[label="1;112pkt 112fpkt"];
5929--8446[label="1;112pkt 112fpkt"];
7550--8446[label="1;112pkt 112fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.249.138.240" src_port="1044"/>
    </slice>
    <from sec="1036991422" usec="0"/>
    <to sec="1036991439" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.194.182.241"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1138{
style=filled;
color=gray75;
5943[label="133.213.40.242;53pkt 53fpkt", shape=pentagon, color=darkviolet];
7559[label="133.213.40.242;54pkt 54fpkt", shape=invtriangle, color=brown];
8451[label="133.213.40.242;53pkt 53fpkt", shape=invhouse, color=bisque];
stat1138[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.213.40.242:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5943--7559[label="1;53pkt 53fpkt"];
5943--8451[label="1;53pkt 53fpkt"];
7559--8451[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter src_ip="133.213.40.242"/>
    </slice>
    <from sec="1036990802" usec="0"/>
    <to sec="1036991516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1139{
style=filled;
color=gray75;
5944[label="197.201.46.242;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7560[label="197.201.46.242;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1139[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.201.46.242:80, 145.208.35.50:3126}[33.3333%]&lt;BR/&gt;{197.201.46.242:80, 145.208.35.50:3127}[33.3333%]&lt;BR/&gt;{197.201.46.242:80, 145.208.35.50:3128}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3128: (20%)&lt;BR/&gt; 3127: (20%)&lt;BR/&gt; 3126: (10%)&gt;];
}
5944--7560[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.35.50" dst_port="3128" src_ip="197.201.46.242" src_port="80"/>
      <filter dst_ip="145.208.35.50" dst_port="3127" src_ip="197.201.46.242" src_port="80"/>
      <filter dst_ip="145.208.35.50" dst_port="3126" src_ip="197.201.46.242" src_port="80"/>
    </slice>
    <from sec="1036990977" usec="0"/>
    <to sec="1036990995" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1140{
style=filled;
color=gray75;
5948[label="202.18.22.243;196pkt 196fpkt", shape=pentagon, color=darkviolet];
7563[label="202.18.22.243;196pkt 196fpkt", shape=invtriangle, color=brown];
stat1140[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.18.22.243:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5948--7563[label="1;196pkt 196fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.18.22.243" src_port="1025"/>
    </slice>
    <from sec="1036991214" usec="0"/>
    <to sec="1036991245" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.486061,2.73871,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1141{
style=filled;
color=gray75;
5953[label="214.122.117.243;15pkt 15fpkt", shape=pentagon, color=darkviolet];
7568[label="214.122.117.243;15pkt 15fpkt", shape=invtriangle, color=brown];
stat1141[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.122.117.243:80, 148.242.132.0:*}[80%]&lt;BR/&gt;{214.122.117.243:80, 148.242.164.49:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4482: (3.33333%)&lt;BR/&gt; 4479: (3.33333%)&lt;BR/&gt; 4477: (3.33333%)&lt;BR/&gt; 4181: (3.33333%)&gt;];
}
5953--7568[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="148.242.132.0" src_ip="214.122.117.243" src_port="80"/>
      <filter dst_ip="148.242.164.49" src_ip="214.122.117.243" src_port="80"/>
    </slice>
    <from sec="1036990819" usec="0"/>
    <to sec="1036991513" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.169.165.243"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1143{
style=filled;
color=gray75;
5972[label="79.100.20.247;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7582[label="79.100.20.247;4pkt 4fpkt", shape=invtriangle, color=brown];
8459[label="79.100.20.247;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1143[shape=component, label=&lt;Rules:&lt;BR/&gt;{79.100.20.247:1026, 145.208.54.111:137}[20%]&lt;BR/&gt;{79.100.20.247:1026, 145.32.146.252:137}[20%]&lt;BR/&gt;{79.100.20.247:1026, 145.32.146.253:137}[20%]&lt;BR/&gt;{79.100.20.247:1026, 145.32.146.254:137}[20%]&lt;BR/&gt;{79.100.20.247:1026, 145.32.146.255:137}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5972--7582[label="1;4pkt 4fpkt"];
5972--8459[label="1;4pkt 4fpkt"];
7582--8459[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="145.32.146.255" dst_port="137" src_ip="79.100.20.247" src_port="1026"/>
      <filter dst_ip="145.32.146.254" dst_port="137" src_ip="79.100.20.247" src_port="1026"/>
      <filter dst_ip="145.32.146.253" dst_port="137" src_ip="79.100.20.247" src_port="1026"/>
      <filter dst_ip="145.32.146.252" dst_port="137" src_ip="79.100.20.247" src_port="1026"/>
      <filter dst_ip="145.208.54.111" dst_port="137" src_ip="79.100.20.247" src_port="1026"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="145.208.209.247"/>
    </slice>
    <from sec="1036990803" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1145{
style=filled;
color=gray75;
5977[label="175.177.250.247;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7585[label="175.177.250.247;1pkt 1fpkt", shape=invtriangle, color=brown];
8462[label="175.177.250.247;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1145[shape=component, label=&lt;Rules:&lt;BR/&gt;{175.177.250.247:80, 9.189.192.130:33851}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33851: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5977--7585[label="1;1pkt 1fpkt"];
5977--8462[label="1;1pkt 1fpkt"];
7585--8462[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="9.189.192.130" dst_port="33851" src_ip="175.177.250.247" src_port="80"/>
    </slice>
    <from sec="1036991422" usec="0"/>
    <to sec="1036991427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="175.177.213.248"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.187.9.249"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1149{
style=filled;
color=gray75;
5987[label="78.66.142.249;14pkt 14fpkt", shape=pentagon, color=darkviolet];
7592[label="78.66.142.249;14pkt 14fpkt", shape=invtriangle, color=brown];
8464[label="78.66.142.249;15pkt 15fpkt", shape=invhouse, color=bisque];
stat1149[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.66.142.249:80, 148.242.2.180:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1425: (3.48837%)&lt;BR/&gt; 1420: (3.48837%)&lt;BR/&gt; 1414: (3.48837%)&lt;BR/&gt; 1410: (3.48837%)&gt;];
}
5987--7592[label="1;14pkt 14fpkt"];
5987--8464[label="1;14pkt 14fpkt"];
7592--8464[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="148.242.2.180" src_ip="78.66.142.249" src_port="80"/>
    </slice>
    <from sec="1036990844" usec="0"/>
    <to sec="1036991277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.121.184.250"/>
    </slice>
    <from sec="1036990813" usec="0"/>
    <to sec="1036991517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1152{
style=filled;
color=gray75;
6007[label="199.15.186.252;223pkt 223fpkt", shape=pentagon, color=darkviolet];
7610[label="199.15.186.252;224pkt 224fpkt", shape=invtriangle, color=brown];
8471[label="199.15.186.252;223pkt 223fpkt", shape=invhouse, color=bisque];
stat1152[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.15.186.252:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
6007--7610[label="1;223pkt 223fpkt"];
6007--8471[label="1;223pkt 223fpkt"];
7610--8471[label="1;223pkt 223fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.15.186.252" src_port="1029"/>
    </slice>
    <from sec="1036990932" usec="0"/>
    <to sec="1036990968" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,502,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.80.203.254"/>
    </slice>
    <from sec="1036990863" usec="0"/>
    <to sec="1036991493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1154{
style=filled;
color=gray75;
6017[label="199.23.213.254;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7617[label="199.23.213.254;1pkt 1fpkt", shape=invtriangle, color=brown];
8475[label="199.23.213.254;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1154[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.23.213.254:2036, 215.172.46.92:4627}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4627: (50%)&lt;BR/&gt; 2036: (50%)&gt;];
}
6017--7617[label="1;1pkt 1fpkt"];
6017--8475[label="1;1pkt 1fpkt"];
7617--8475[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.172.46.92" dst_port="4627" src_ip="199.23.213.254" src_port="2036"/>
    </slice>
    <from sec="1036991003" usec="0"/>
    <to sec="1036991202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.553751,2.78184,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.110.33.255"/>
    </slice>
    <from sec="1036990964" usec="0"/>
    <to sec="1036991194" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1156{
style=filled;
color=gray75;
289[label="162.137.11.0s;109pkt 109fpkt", shape=rectangle, color=red];
3734[label="162.137.11.0;116pkt 116fpkt", shape=pentagon, color=darkviolet];
6026[label="162.137.11.0;116pkt 116fpkt", shape=invtriangle, color=brown];
7623[label="162.137.11.0;115pkt 115fpkt", shape=invhouse, color=bisque];
stat1156[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.137.11.0:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
289--3734[label="1;109pkt 109fpkt"];
289--6026[label="1;109pkt 109fpkt"];
289--7623[label="0.990826;108pkt 108fpkt"];
3734--6026[label="1;116pkt 116fpkt"];
3734--7623[label="1;115pkt 115fpkt"];
6026--7623[label="1;115pkt 115fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="162.137.11.0" src_port="1029"/>
    </slice>
    <from sec="1036990865" usec="0"/>
    <to sec="1036990883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.61.15.1"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.8.150.31"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.10.112.32"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="148.225.140.32"/>
    </slice>
    <from sec="1036991202" usec="0"/>
    <to sec="1036991331" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="48.36.234.35"/>
    </slice>
    <from sec="1036991056" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1162{
style=filled;
color=gray75;
4108[label="215.156.92.36;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6277[label="215.156.92.36;2pkt 2fpkt", shape=invtriangle, color=brown];
7738[label="215.156.92.36;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1162[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.156.92.36:53, 196.94.98.43:1028}[50%]&lt;BR/&gt;{215.156.92.36:65534, 201.218.130.50:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 1028: (37.5%)&lt;BR/&gt; 65534: (12.5%)&gt;];
}
4108--6277[label="1;1pkt 1fpkt"];
4108--7738[label="1;1pkt 1fpkt"];
6277--7738[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.218.130.50" dst_port="53" src_ip="215.156.92.36" src_port="65534"/>
      <filter dst_ip="196.94.98.43" dst_port="1028" src_ip="215.156.92.36" src_port="53"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="211.136.62.49"/>
    </slice>
    <from sec="1036991118" usec="0"/>
    <to sec="1036991150" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.102.1.50"/>
    </slice>
    <from sec="1036990803" usec="0"/>
    <to sec="1036991512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="78.31.224.56"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1166{
style=filled;
color=gray75;
368[label="9.209.178.62s;73pkt 73fpkt", shape=rectangle, color=red];
4376[label="9.209.178.62;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6469[label="9.209.178.62;4pkt 4fpkt", shape=invtriangle, color=brown];
7834[label="9.209.178.62;150pkt 150fpkt", shape=invhouse, color=bisque];
stat1166[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.209.178.62:1033, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1033: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
368--7834[label="1;73pkt 73fpkt"];
4376--6469[label="1;4pkt 4fpkt"];
4376--7834[label="1;5pkt 5fpkt"];
6469--7834[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.209.178.62" src_port="1033"/>
    </slice>
    <from sec="1036991496" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="48.183.216.62"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.122.98.66"/>
    </slice>
    <from sec="1036990807" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="78.25.42.69"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="175.177.69.69"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="165.163.171.69"/>
    </slice>
    <from sec="1036990811" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.819727,2.69723,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1172{
style=filled;
color=gray75;
381[label="199.160.172.72s;46pkt 46fpkt", shape=rectangle, color=red];
4481[label="199.160.172.72;114pkt 114fpkt", shape=pentagon, color=darkviolet];
6539[label="199.160.172.72;115pkt 115fpkt", shape=invtriangle, color=brown];
7875[label="199.160.172.72;114pkt 114fpkt", shape=invhouse, color=bisque];
stat1172[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.160.172.72:1050, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1050: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
381--4481[label="0.978261;45pkt 45fpkt"];
381--6539[label="1;46pkt 46fpkt"];
381--7875[label="0.978261;45pkt 45fpkt"];
4481--6539[label="1;114pkt 114fpkt"];
4481--7875[label="1;114pkt 114fpkt"];
6539--7875[label="1;114pkt 114fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.160.172.72" src_port="1050"/>
    </slice>
    <from sec="1036990965" usec="0"/>
    <to sec="1036990983" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.77.75.73"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.247.168.74"/>
    </slice>
    <from sec="1036991464" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="133.213.168.76"/>
    </slice>
    <from sec="1036990802" usec="0"/>
    <to sec="1036991514" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.249.106.78"/>
    </slice>
    <from sec="1036990824" usec="0"/>
    <to sec="1036991499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="48.25.112.82"/>
    </slice>
    <from sec="1036990820" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945007,2.69627,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1178{
style=filled;
color=gray75;
1743[label="145.3.9.62;d;64pkt 64fpkt", shape=diamond, color=yellow];
2219[label="152.145.163.83;s;1pkt 1fpkt", shape=diamond, color=yellow];
4764[label="202.3.91.105;34pkt 34fpkt", shape=pentagon, color=darkviolet];
6737[label="202.3.91.105;34pkt 34fpkt", shape=invtriangle, color=brown];
7915[label="152.145.163.83;1pkt 1fpkt", shape=invhouse, color=bisque];
7989[label="202.3.91.105;34pkt 34fpkt", shape=invhouse, color=bisque];
stat1178[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.3.91.105:1489, 145.3.9.62:*}[52.3077%]&lt;BR/&gt;{9.208.154.134:*, 145.3.9.62:1071}[21.5385%]&lt;BR/&gt;{9.208.154.134:1214, 145.3.9.62:*}[21.5385%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1489: (40.1786%)&lt;BR/&gt; 1071: (4.7619%)&lt;BR/&gt; 1214: (4.16667%)&lt;BR/&gt; 1869: (1.19048%)&lt;BR/&gt; 1868: (1.19048%)&gt;];
}
1743--2219[label="1;1pkt 1fpkt"];
1743--4764[label="0.970588;33pkt 33fpkt"];
1743--6737[label="0.970588;33pkt 33fpkt"];
1743--7915[label="1;1pkt 1fpkt"];
1743--7989[label="0.970588;33pkt 33fpkt"];
2219--7915[label="1;1pkt 1fpkt"];
4764--6737[label="1;34pkt 34fpkt"];
4764--7989[label="1;34pkt 34fpkt"];
6737--7989[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="145.3.9.62" src_ip="202.3.91.105" src_port="1489"/>
      <filter dst_ip="145.3.9.62" src_ip="9.208.154.134" src_port="1214"/>
      <filter dst_ip="145.3.9.62" dst_port="1071" src_ip="9.208.154.134"/>
    </slice>
    <from sec="1036990802" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.194.134.84"/>
    </slice>
    <from sec="1036990811" usec="0"/>
    <to sec="1036991510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.169.198.84"/>
    </slice>
    <from sec="1036991279" usec="0"/>
    <to sec="1036991327" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="145.208.138.89"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991406" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.169.236.89"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671158,2.7191,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1183{
style=filled;
color=gray75;
4635[label="145.208.132.90;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6646[label="145.208.132.90;3pkt 3fpkt", shape=invtriangle, color=brown];
7938[label="145.208.132.90;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1183[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.132.90:4856, 209.194.220.10:80}[25%]&lt;BR/&gt;{145.208.132.90:4757, 76.161.136.12:1863}[25%]&lt;BR/&gt;{145.208.132.90:4844, 209.194.162.56:80}[25%]&lt;BR/&gt;{145.208.132.90:4532, 76.161.137.99:1863}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (30%)&lt;BR/&gt; 80: (20%)&lt;BR/&gt; 4844: (15%)&lt;BR/&gt; 4757: (15%)&lt;BR/&gt; 4532: (15%)&gt;];
}
4635--6646[label="1;3pkt 3fpkt"];
4635--7938[label="1;3pkt 3fpkt"];
6646--7938[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="76.161.137.99" dst_port="1863" src_ip="145.208.132.90" src_port="4532"/>
      <filter dst_ip="209.194.162.56" dst_port="80" src_ip="145.208.132.90" src_port="4844"/>
      <filter dst_ip="76.161.136.12" dst_port="1863" src_ip="145.208.132.90" src_port="4757"/>
      <filter dst_ip="209.194.220.10" dst_port="80" src_ip="145.208.132.90" src_port="4856"/>
    </slice>
    <from sec="1036990865" usec="0"/>
    <to sec="1036991471" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.64.214.90"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.121.73.93"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991342" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.65.116.99"/>
    </slice>
    <from sec="1036991315" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="76.161.166.99"/>
    </slice>
    <from sec="1036990846" usec="0"/>
    <to sec="1036990889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23582,2.68221,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1188{
style=filled;
color=gray75;
2064[label="8.133.70.105;s;50pkt 50fpkt", shape=diamond, color=yellow];
2065[label="215.156.88.82;d;50pkt 50fpkt", shape=diamond, color=yellow];
3163[label="8.133.70.105;s;19pkt 19fpkt", shape=hexagon, color=black];
3358[label="215.156.88.82;d;28pkt 28fpkt", shape=hexagon, color=black];
4762[label="8.133.70.105;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6735[label="8.133.70.105;2pkt 2fpkt", shape=invtriangle, color=brown];
7987[label="8.133.70.105;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1188[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.133.70.105:*, 215.156.88.82:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1047: (1.65563%)&lt;BR/&gt; 21: (1.65563%)&lt;BR/&gt; 61067: (1.3245%)&lt;BR/&gt; 61003: (1.3245%)&lt;BR/&gt; 60966: (1.3245%)&gt;];
}
2064--2065[label="1;50pkt 50fpkt"];
2064--3163[label="1;19pkt 19fpkt"];
2064--3358[label="1;28pkt 28fpkt"];
2064--6735[label="0.5;1pkt 1fpkt"];
2065--3163[label="1;19pkt 19fpkt"];
2065--3358[label="1;28pkt 28fpkt"];
2065--6735[label="0.5;1pkt 1fpkt"];
3163--3358[label="1;19pkt 19fpkt"];
3163--6735[label="0.5;1pkt 1fpkt"];
3358--6735[label="0.5;1pkt 1fpkt"];
4762--6735[label="1;1pkt 1fpkt"];
4762--7987[label="1;1pkt 1fpkt"];
6735--7987[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.156.88.82" src_ip="8.133.70.105"/>
    </slice>
    <from sec="1036991069" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="77.168.91.105"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="73.33.78.106"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="48.101.12.110"/>
    </slice>
    <from sec="1036990837" usec="0"/>
    <to sec="1036991517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.16.70.111"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.132.84.116"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.169.165.117"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="165.150.197.120"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="77.133.144.129"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.10.201.137"/>
    </slice>
    <from sec="1036990892" usec="0"/>
    <to sec="1036991094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="162.148.48.138"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.171.58.141"/>
    </slice>
    <from sec="1036990803" usec="0"/>
    <to sec="1036991493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.176.198.143"/>
    </slice>
    <from sec="1036991081" usec="0"/>
    <to sec="1036991445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.212.16.144"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.183.13.152"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721692,2.76253,999,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_1204{
style=filled;
color=gray75;
7027[label="140.100.140.152;1pkt 1fpkt", shape=invtriangle, color=brown];
8147[label="140.100.140.152;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1204[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.100.140.152:5190, 148.242.221.121:3064}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5190: (50%)&lt;BR/&gt; 3064: (50%)&gt;];
}
7027--8147[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.242.221.121" dst_port="3064" src_ip="140.100.140.152" src_port="5190"/>
    </slice>
    <from sec="1036991064" usec="0"/>
    <to sec="1036991092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,002,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="148.242.42.153"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="157.35.167.155"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945007,2.69627,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1207{
style=filled;
color=gray75;
2555[label="214.119.154.163;s;280pkt 280fpkt", shape=diamond, color=yellow];
5272[label="214.119.154.163;302pkt 302fpkt", shape=pentagon, color=darkviolet];
7096[label="214.119.154.163;303pkt 303fpkt", shape=invtriangle, color=brown];
8187[label="214.119.154.163;303pkt 303fpkt", shape=invhouse, color=bisque];
stat1207[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.119.154.163:53, *:*}[88.4488%]&lt;BR/&gt;{214.119.154.163:*, *:53}[25.0825%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (56.5236%)&lt;BR/&gt; 0: (5.72391%)&lt;BR/&gt; 58344: (2.86195%)&lt;BR/&gt; 1024: (1.13636%)&lt;BR/&gt; 33701: (0.841751%)&gt;];
}
2555--5272[label="0.996429;279pkt 279fpkt"];
2555--7096[label="1;280pkt 280fpkt"];
2555--8187[label="1;280pkt 280fpkt"];
5272--7096[label="1;302pkt 302fpkt"];
5272--8187[label="1;302pkt 302fpkt"];
7096--8187[label="1;303pkt 303fpkt"];
</description>
    <slice>
      <filter src_ip="214.119.154.163" src_port="53"/>
      <filter dst_port="53" src_ip="214.119.154.163"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.10.170.167"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23582,2.68221,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1209{
style=filled;
color=gray75;
2617[label="133.213.193.229;d;43pkt 43fpkt", shape=diamond, color=yellow];
3551[label="133.213.193.229;d;43pkt 43fpkt", shape=hexagon, color=black];
5417[label="77.136.96.180;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7207[label="77.136.96.180;2pkt 2fpkt", shape=invtriangle, color=brown];
8249[label="77.136.96.180;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1209[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.136.96.180:80, 133.213.193.229:*}[77.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54396: (1.66667%)&lt;BR/&gt; 54168: (1.66667%)&lt;BR/&gt; 54283: (1.11111%)&lt;BR/&gt; 54280: (1.11111%)&gt;];
}
2617--3551[label="1;43pkt 43fpkt"];
2617--7207[label="0.5;1pkt 1fpkt"];
3551--7207[label="0.5;1pkt 1fpkt"];
5417--7207[label="1;1pkt 1fpkt"];
5417--8249[label="1;1pkt 1fpkt"];
7207--8249[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.213.193.229" src_ip="77.136.96.180" src_port="80"/>
    </slice>
    <from sec="1036990816" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.226.165.181"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.178.86.187"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.102.150.190"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.66.52.194"/>
    </slice>
    <from sec="1036990862" usec="0"/>
    <to sec="1036991347" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="165.189.227.197"/>
    </slice>
    <from sec="1036990808" usec="0"/>
    <to sec="1036991505" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.169.234.199"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.187.93.207"/>
    </slice>
    <from sec="1036991154" usec="0"/>
    <to sec="1036991166" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,002,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="148.242.130.210"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="203.76.86.211"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991378" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.177.46.213"/>
    </slice>
    <from sec="1036990862" usec="0"/>
    <to sec="1036991265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="73.41.168.218"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="168.100.160.220"/>
    </slice>
    <from sec="1036990806" usec="0"/>
    <to sec="1036991516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,502,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="203.98.217.224"/>
    </slice>
    <from sec="1036991018" usec="0"/>
    <to sec="1036991133" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.72.12.226"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.20.210.228"/>
    </slice>
    <from sec="1036990873" usec="0"/>
    <to sec="1036990909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.177.46.232"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="175.177.2.233"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.177.46.233"/>
    </slice>
    <from sec="1036990871" usec="0"/>
    <to sec="1036991469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.169.149.236"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="79.81.103.238"/>
    </slice>
    <from sec="1036991518" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.194.182.241"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="73.41.197.241"/>
    </slice>
    <from sec="1036990801" usec="0"/>
    <to sec="1036991519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="145.208.209.247"/>
    </slice>
    <from sec="1036990803" usec="0"/>
    <to sec="1036991518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688832,2.79139,502,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="203.80.203.254"/>
    </slice>
    <from sec="1036990863" usec="0"/>
    <to sec="1036991493" usec="0"/>
  </anomaly>

</admd:annotation>
