<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="0.823349,1.91861,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="169.126.142.116" dst_port="137" proto="tcp" src_ip="96.19.232.20" src_port="1044"/>
      <filter dst_ip="169.126.142.116" dst_port="137" proto="udp" src_ip="96.19.232.20" src_port="1044"/>
      <filter dst_ip="169.126.142.116" dst_port="80" proto="tcp" src_ip="96.19.232.20" src_port="1044"/>
      <filter dst_ip="169.126.142.116" dst_port="80" proto="udp" src_ip="96.19.232.20" src_port="1044"/>
      <filter dst_ip="169.126.142.116" dst_port="137" proto="tcp" src_ip="96.19.232.20" src_port="5001"/>
      <filter dst_ip="169.126.142.116" dst_port="137" proto="udp" src_ip="96.19.232.20" src_port="5001"/>
      <filter dst_ip="169.126.142.116" dst_port="80" proto="tcp" src_ip="96.19.232.20" src_port="5001"/>
      <filter dst_ip="169.126.142.116" dst_port="80" proto="udp" src_ip="96.19.232.20" src_port="5001"/>
      <from sec="1039669534" usec="0"/>
      <to sec="1039669550" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="169.126.142.116" dst_port="137" proto="tcp" src_ip="215.17.120.20" src_port="1044"/>
      <filter dst_ip="169.126.142.116" dst_port="137" proto="udp" src_ip="215.17.120.20" src_port="1044"/>
      <filter dst_ip="169.126.142.116" dst_port="80" proto="tcp" src_ip="215.17.120.20" src_port="1044"/>
      <filter dst_ip="169.126.142.116" dst_port="80" proto="udp" src_ip="215.17.120.20" src_port="1044"/>
      <filter dst_ip="169.126.142.116" dst_port="137" proto="tcp" src_ip="215.17.120.20" src_port="5001"/>
      <filter dst_ip="169.126.142.116" dst_port="137" proto="udp" src_ip="215.17.120.20" src_port="5001"/>
      <filter dst_ip="169.126.142.116" dst_port="80" proto="tcp" src_ip="215.17.120.20" src_port="5001"/>
      <filter dst_ip="169.126.142.116" dst_port="80" proto="udp" src_ip="215.17.120.20" src_port="5001"/>
      <from sec="1039669533" usec="0"/>
      <to sec="1039669549" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="169.126.142.116" dst_port="137" proto="tcp" src_ip="96.66.76.20" src_port="1044"/>
      <filter dst_ip="169.126.142.116" dst_port="137" proto="udp" src_ip="96.66.76.20" src_port="1044"/>
      <filter dst_ip="169.126.142.116" dst_port="80" proto="tcp" src_ip="96.66.76.20" src_port="1044"/>
      <filter dst_ip="169.126.142.116" dst_port="80" proto="udp" src_ip="96.66.76.20" src_port="1044"/>
      <filter dst_ip="169.126.142.116" dst_port="137" proto="tcp" src_ip="96.66.76.20" src_port="5001"/>
      <filter dst_ip="169.126.142.116" dst_port="137" proto="udp" src_ip="96.66.76.20" src_port="5001"/>
      <filter dst_ip="169.126.142.116" dst_port="80" proto="tcp" src_ip="96.66.76.20" src_port="5001"/>
      <filter dst_ip="169.126.142.116" dst_port="80" proto="udp" src_ip="96.66.76.20" src_port="5001"/>
      <from sec="1039669533" usec="0"/>
      <to sec="1039669549" usec="0"/>
    </slice>
    <from sec="1039669533" usec="0"/>
    <to sec="1039669550" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="215.90.87.225" dst_port="3439" proto="tcp" src_ip="128.179.150.163" src_port="6699"/>
      <from sec="1039669900" usec="0"/>
      <to sec="1039669906" usec="0"/>
    </slice>
    <from sec="1039669900" usec="0"/>
    <to sec="1039669906" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="199.108.34.10" dst_port="80" proto="tcp" src_ip="140.3.210.88" src_port="1026"/>
      <filter dst_ip="199.108.34.10" dst_port="80" proto="udp" src_ip="140.3.210.88" src_port="1026"/>
      <filter dst_ip="199.108.34.10" dst_port="137" proto="tcp" src_ip="140.3.210.88" src_port="1026"/>
      <filter dst_ip="199.108.34.10" dst_port="137" proto="udp" src_ip="140.3.210.88" src_port="1026"/>
      <filter dst_ip="199.108.34.26" dst_port="80" proto="tcp" src_ip="140.3.210.88" src_port="1026"/>
      <filter dst_ip="199.108.34.26" dst_port="80" proto="udp" src_ip="140.3.210.88" src_port="1026"/>
      <filter dst_ip="199.108.34.26" dst_port="137" proto="tcp" src_ip="140.3.210.88" src_port="1026"/>
      <filter dst_ip="199.108.34.26" dst_port="137" proto="udp" src_ip="140.3.210.88" src_port="1026"/>
      <filter dst_ip="199.108.34.169" dst_port="80" proto="tcp" src_ip="140.3.210.88" src_port="1026"/>
      <filter dst_ip="199.108.34.169" dst_port="80" proto="udp" src_ip="140.3.210.88" src_port="1026"/>
      <filter dst_ip="199.108.34.169" dst_port="137" proto="tcp" src_ip="140.3.210.88" src_port="1026"/>
      <filter dst_ip="199.108.34.169" dst_port="137" proto="udp" src_ip="140.3.210.88" src_port="1026"/>
      <filter dst_ip="199.108.34.2" dst_port="80" proto="tcp" src_ip="140.3.210.88" src_port="1026"/>
      <filter dst_ip="199.108.34.2" dst_port="80" proto="udp" src_ip="140.3.210.88" src_port="1026"/>
      <filter dst_ip="199.108.34.2" dst_port="137" proto="tcp" src_ip="140.3.210.88" src_port="1026"/>
      <filter dst_ip="199.108.34.2" dst_port="137" proto="udp" src_ip="140.3.210.88" src_port="1026"/>
      <from sec="1039669211" usec="0"/>
      <to sec="1039669215" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="199.108.34.10" dst_port="80" proto="tcp" src_ip="211.179.166.88" src_port="1026"/>
      <filter dst_ip="199.108.34.10" dst_port="80" proto="udp" src_ip="211.179.166.88" src_port="1026"/>
      <filter dst_ip="199.108.34.10" dst_port="137" proto="tcp" src_ip="211.179.166.88" src_port="1026"/>
      <filter dst_ip="199.108.34.10" dst_port="137" proto="udp" src_ip="211.179.166.88" src_port="1026"/>
      <filter dst_ip="199.108.34.26" dst_port="80" proto="tcp" src_ip="211.179.166.88" src_port="1026"/>
      <filter dst_ip="199.108.34.26" dst_port="80" proto="udp" src_ip="211.179.166.88" src_port="1026"/>
      <filter dst_ip="199.108.34.26" dst_port="137" proto="tcp" src_ip="211.179.166.88" src_port="1026"/>
      <filter dst_ip="199.108.34.26" dst_port="137" proto="udp" src_ip="211.179.166.88" src_port="1026"/>
      <filter dst_ip="199.108.34.169" dst_port="80" proto="tcp" src_ip="211.179.166.88" src_port="1026"/>
      <filter dst_ip="199.108.34.169" dst_port="80" proto="udp" src_ip="211.179.166.88" src_port="1026"/>
      <filter dst_ip="199.108.34.169" dst_port="137" proto="tcp" src_ip="211.179.166.88" src_port="1026"/>
      <filter dst_ip="199.108.34.169" dst_port="137" proto="udp" src_ip="211.179.166.88" src_port="1026"/>
      <filter dst_ip="199.108.34.2" dst_port="80" proto="tcp" src_ip="211.179.166.88" src_port="1026"/>
      <filter dst_ip="199.108.34.2" dst_port="80" proto="udp" src_ip="211.179.166.88" src_port="1026"/>
      <filter dst_ip="199.108.34.2" dst_port="137" proto="tcp" src_ip="211.179.166.88" src_port="1026"/>
      <filter dst_ip="199.108.34.2" dst_port="137" proto="udp" src_ip="211.179.166.88" src_port="1026"/>
      <from sec="1039669210" usec="0"/>
      <to sec="1039669215" usec="0"/>
    </slice>
    <from sec="1039669210" usec="0"/>
    <to sec="1039669215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="201.115.101.7" src_port="34598"/>
      <filter dst_port="137" proto="udp" src_ip="201.115.101.7" src_port="34598"/>
      <filter dst_port="137" proto="tcp" src_ip="201.115.101.7" src_port="80"/>
      <filter dst_port="137" proto="udp" src_ip="201.115.101.7" src_port="80"/>
      <from sec="1039669575" usec="0"/>
      <to sec="1039669581" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="211.90.157.7" src_port="34598"/>
      <filter dst_port="137" proto="udp" src_ip="211.90.157.7" src_port="34598"/>
      <filter dst_port="137" proto="tcp" src_ip="211.90.157.7" src_port="80"/>
      <filter dst_port="137" proto="udp" src_ip="211.90.157.7" src_port="80"/>
      <from sec="1039669577" usec="0"/>
      <to sec="1039669579" usec="0"/>
    </slice>
    <from sec="1039669575" usec="0"/>
    <to sec="1039669581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="209.24.51.90" dst_port="137" proto="tcp" src_ip="96.104.228.8" src_port="62460"/>
      <filter dst_ip="209.24.51.90" dst_port="137" proto="udp" src_ip="96.104.228.8" src_port="62460"/>
      <filter dst_ip="209.24.51.90" dst_port="46411" proto="tcp" src_ip="96.104.228.8" src_port="62460"/>
      <filter dst_ip="209.24.51.90" dst_port="46411" proto="udp" src_ip="96.104.228.8" src_port="62460"/>
      <filter dst_ip="209.24.51.90" dst_port="137" proto="tcp" src_ip="96.104.228.8" src_port="23"/>
      <filter dst_ip="209.24.51.90" dst_port="137" proto="udp" src_ip="96.104.228.8" src_port="23"/>
      <filter dst_ip="209.24.51.90" dst_port="46411" proto="tcp" src_ip="96.104.228.8" src_port="23"/>
      <filter dst_ip="209.24.51.90" dst_port="46411" proto="udp" src_ip="96.104.228.8" src_port="23"/>
      <filter dst_ip="209.24.51.90" dst_port="137" proto="tcp" src_ip="96.104.228.8" src_port="80"/>
      <filter dst_ip="209.24.51.90" dst_port="137" proto="udp" src_ip="96.104.228.8" src_port="80"/>
      <filter dst_ip="209.24.51.90" dst_port="46411" proto="tcp" src_ip="96.104.228.8" src_port="80"/>
      <filter dst_ip="209.24.51.90" dst_port="46411" proto="udp" src_ip="96.104.228.8" src_port="80"/>
      <from sec="1039669210" usec="0"/>
      <to sec="1039669220" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="209.24.51.90" dst_port="137" proto="tcp" src_ip="172.93.176.8" src_port="62460"/>
      <filter dst_ip="209.24.51.90" dst_port="137" proto="udp" src_ip="172.93.176.8" src_port="62460"/>
      <filter dst_ip="209.24.51.90" dst_port="46411" proto="tcp" src_ip="172.93.176.8" src_port="62460"/>
      <filter dst_ip="209.24.51.90" dst_port="46411" proto="udp" src_ip="172.93.176.8" src_port="62460"/>
      <filter dst_ip="209.24.51.90" dst_port="137" proto="tcp" src_ip="172.93.176.8" src_port="23"/>
      <filter dst_ip="209.24.51.90" dst_port="137" proto="udp" src_ip="172.93.176.8" src_port="23"/>
      <filter dst_ip="209.24.51.90" dst_port="46411" proto="tcp" src_ip="172.93.176.8" src_port="23"/>
      <filter dst_ip="209.24.51.90" dst_port="46411" proto="udp" src_ip="172.93.176.8" src_port="23"/>
      <filter dst_ip="209.24.51.90" dst_port="137" proto="tcp" src_ip="172.93.176.8" src_port="80"/>
      <filter dst_ip="209.24.51.90" dst_port="137" proto="udp" src_ip="172.93.176.8" src_port="80"/>
      <filter dst_ip="209.24.51.90" dst_port="46411" proto="tcp" src_ip="172.93.176.8" src_port="80"/>
      <filter dst_ip="209.24.51.90" dst_port="46411" proto="udp" src_ip="172.93.176.8" src_port="80"/>
      <from sec="1039669210" usec="0"/>
      <to sec="1039669219" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="209.24.51.90" dst_port="137" proto="tcp" src_ip="38.64.132.8" src_port="62460"/>
      <filter dst_ip="209.24.51.90" dst_port="137" proto="udp" src_ip="38.64.132.8" src_port="62460"/>
      <filter dst_ip="209.24.51.90" dst_port="46411" proto="tcp" src_ip="38.64.132.8" src_port="62460"/>
      <filter dst_ip="209.24.51.90" dst_port="46411" proto="udp" src_ip="38.64.132.8" src_port="62460"/>
      <filter dst_ip="209.24.51.90" dst_port="137" proto="tcp" src_ip="38.64.132.8" src_port="23"/>
      <filter dst_ip="209.24.51.90" dst_port="137" proto="udp" src_ip="38.64.132.8" src_port="23"/>
      <filter dst_ip="209.24.51.90" dst_port="46411" proto="tcp" src_ip="38.64.132.8" src_port="23"/>
      <filter dst_ip="209.24.51.90" dst_port="46411" proto="udp" src_ip="38.64.132.8" src_port="23"/>
      <filter dst_ip="209.24.51.90" dst_port="137" proto="tcp" src_ip="38.64.132.8" src_port="80"/>
      <filter dst_ip="209.24.51.90" dst_port="137" proto="udp" src_ip="38.64.132.8" src_port="80"/>
      <filter dst_ip="209.24.51.90" dst_port="46411" proto="tcp" src_ip="38.64.132.8" src_port="80"/>
      <filter dst_ip="209.24.51.90" dst_port="46411" proto="udp" src_ip="38.64.132.8" src_port="80"/>
      <from sec="1039669214" usec="0"/>
      <to sec="1039669218" usec="0"/>
    </slice>
    <from sec="1039669210" usec="0"/>
    <to sec="1039669220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="215.87.67.219" dst_port="137" proto="tcp" src_ip="196.81.163.11" src_port="1028"/>
      <filter dst_ip="215.87.67.219" dst_port="137" proto="udp" src_ip="196.81.163.11" src_port="1028"/>
      <filter dst_ip="215.87.67.219" dst_port="23812" proto="tcp" src_ip="196.81.163.11" src_port="1028"/>
      <filter dst_ip="215.87.67.219" dst_port="23812" proto="udp" src_ip="196.81.163.11" src_port="1028"/>
      <filter dst_ip="215.87.67.219" dst_port="137" proto="tcp" src_ip="196.81.163.11" src_port="80"/>
      <filter dst_ip="215.87.67.219" dst_port="137" proto="udp" src_ip="196.81.163.11" src_port="80"/>
      <filter dst_ip="215.87.67.219" dst_port="23812" proto="tcp" src_ip="196.81.163.11" src_port="80"/>
      <filter dst_ip="215.87.67.219" dst_port="23812" proto="udp" src_ip="196.81.163.11" src_port="80"/>
      <from sec="1039669895" usec="0"/>
      <to sec="1039669905" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="215.87.67.219" dst_port="137" proto="tcp" src_ip="215.35.155.11" src_port="1028"/>
      <filter dst_ip="215.87.67.219" dst_port="137" proto="udp" src_ip="215.35.155.11" src_port="1028"/>
      <filter dst_ip="215.87.67.219" dst_port="23812" proto="tcp" src_ip="215.35.155.11" src_port="1028"/>
      <filter dst_ip="215.87.67.219" dst_port="23812" proto="udp" src_ip="215.35.155.11" src_port="1028"/>
      <filter dst_ip="215.87.67.219" dst_port="137" proto="tcp" src_ip="215.35.155.11" src_port="80"/>
      <filter dst_ip="215.87.67.219" dst_port="137" proto="udp" src_ip="215.35.155.11" src_port="80"/>
      <filter dst_ip="215.87.67.219" dst_port="23812" proto="tcp" src_ip="215.35.155.11" src_port="80"/>
      <filter dst_ip="215.87.67.219" dst_port="23812" proto="udp" src_ip="215.35.155.11" src_port="80"/>
      <from sec="1039669895" usec="0"/>
      <to sec="1039669899" usec="0"/>
    </slice>
    <from sec="1039669895" usec="0"/>
    <to sec="1039669905" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="196.43.65.15" src_port="1030"/>
      <from sec="1039669479" usec="0"/>
      <to sec="1039669485" usec="0"/>
    </slice>
    <from sec="1039669479" usec="0"/>
    <to sec="1039669485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="38.133.199.16" src_port="1028"/>
      <from sec="1039669359" usec="0"/>
      <to sec="1039669364" usec="0"/>
    </slice>
    <from sec="1039669359" usec="0"/>
    <to sec="1039669364" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="98.173.100.28" src_port="1033"/>
      <from sec="1039669219" usec="0"/>
      <to sec="1039669245" usec="0"/>
    </slice>
    <from sec="1039669219" usec="0"/>
    <to sec="1039669245" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="197.243.161.28" src_port="1025"/>
      <filter dst_port="137" proto="udp" src_ip="197.243.161.28" src_port="1025"/>
      <from sec="1039669384" usec="0"/>
      <to sec="1039669389" usec="0"/>
    </slice>
    <from sec="1039669384" usec="0"/>
    <to sec="1039669390" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="96.104.214.30" src_port="1029"/>
      <filter dst_port="137" proto="udp" src_ip="96.104.214.30" src_port="1029"/>
      <from sec="1039669835" usec="0"/>
      <to sec="1039669840" usec="0"/>
    </slice>
    <from sec="1039669835" usec="0"/>
    <to sec="1039669841" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="215.206.118.193" dst_port="137" proto="tcp" src_ip="196.13.43.31" src_port="1031"/>
      <filter dst_ip="215.206.118.193" dst_port="137" proto="udp" src_ip="196.13.43.31" src_port="1031"/>
      <filter dst_ip="215.206.118.193" dst_port="137" proto="tcp" src_ip="196.13.43.31" src_port="80"/>
      <filter dst_ip="215.206.118.193" dst_port="137" proto="udp" src_ip="196.13.43.31" src_port="80"/>
      <from sec="1039669495" usec="0"/>
      <to sec="1039669518" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="215.206.118.193" dst_port="137" proto="tcp" src_ip="215.154.47.31" src_port="1031"/>
      <filter dst_ip="215.206.118.193" dst_port="137" proto="udp" src_ip="215.154.47.31" src_port="1031"/>
      <filter dst_ip="215.206.118.193" dst_port="137" proto="tcp" src_ip="215.154.47.31" src_port="80"/>
      <filter dst_ip="215.206.118.193" dst_port="137" proto="udp" src_ip="215.154.47.31" src_port="80"/>
      <from sec="1039669495" usec="0"/>
      <to sec="1039669518" usec="0"/>
    </slice>
    <from sec="1039669495" usec="0"/>
    <to sec="1039669518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="202.80.152.39" src_port="1028"/>
      <from sec="1039669670" usec="0"/>
      <to sec="1039669677" usec="0"/>
    </slice>
    <from sec="1039669670" usec="0"/>
    <to sec="1039669677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="200.130.4.42" src_port="1027"/>
      <from sec="1039669840" usec="0"/>
      <to sec="1039669846" usec="0"/>
    </slice>
    <from sec="1039669840" usec="0"/>
    <to sec="1039669846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="196.217.114.43" src_port="1030"/>
      <from sec="1039669757" usec="0"/>
      <to sec="1039669762" usec="0"/>
    </slice>
    <from sec="1039669757" usec="0"/>
    <to sec="1039669762" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="96.5.109.45" src_port="1125"/>
      <from sec="1039669799" usec="0"/>
      <to sec="1039669805" usec="0"/>
    </slice>
    <from sec="1039669799" usec="0"/>
    <to sec="1039669805" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="96.109.64.52" src_port="1031"/>
      <from sec="1039669736" usec="0"/>
      <to sec="1039669756" usec="0"/>
    </slice>
    <from sec="1039669736" usec="0"/>
    <to sec="1039669756" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="211.212.90.53" src_port="1028"/>
      <from sec="1039669639" usec="0"/>
      <to sec="1039669645" usec="0"/>
    </slice>
    <from sec="1039669639" usec="0"/>
    <to sec="1039669645" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="64.168.147.196" dst_port="137" proto="tcp" src_ip="202.65.74.59" src_port="1027"/>
      <filter dst_ip="64.168.147.196" dst_port="137" proto="udp" src_ip="202.65.74.59" src_port="1027"/>
      <filter dst_ip="64.168.147.196" dst_port="36355" proto="tcp" src_ip="202.65.74.59" src_port="1027"/>
      <filter dst_ip="64.168.147.196" dst_port="36355" proto="udp" src_ip="202.65.74.59" src_port="1027"/>
      <filter dst_ip="64.168.147.196" dst_port="137" proto="tcp" src_ip="202.65.74.59" src_port="53"/>
      <filter dst_ip="64.168.147.196" dst_port="137" proto="udp" src_ip="202.65.74.59" src_port="53"/>
      <filter dst_ip="64.168.147.196" dst_port="36355" proto="tcp" src_ip="202.65.74.59" src_port="53"/>
      <filter dst_ip="64.168.147.196" dst_port="36355" proto="udp" src_ip="202.65.74.59" src_port="53"/>
      <from sec="1039669439" usec="0"/>
      <to sec="1039669444" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="64.168.147.196" dst_port="137" proto="tcp" src_ip="138.186.234.68" src_port="1027"/>
      <filter dst_ip="64.168.147.196" dst_port="137" proto="udp" src_ip="138.186.234.68" src_port="1027"/>
      <filter dst_ip="64.168.147.196" dst_port="36355" proto="tcp" src_ip="138.186.234.68" src_port="1027"/>
      <filter dst_ip="64.168.147.196" dst_port="36355" proto="udp" src_ip="138.186.234.68" src_port="1027"/>
      <filter dst_ip="64.168.147.196" dst_port="137" proto="tcp" src_ip="138.186.234.68" src_port="53"/>
      <filter dst_ip="64.168.147.196" dst_port="137" proto="udp" src_ip="138.186.234.68" src_port="53"/>
      <filter dst_ip="64.168.147.196" dst_port="36355" proto="tcp" src_ip="138.186.234.68" src_port="53"/>
      <filter dst_ip="64.168.147.196" dst_port="36355" proto="udp" src_ip="138.186.234.68" src_port="53"/>
      <from sec="1039669440" usec="0"/>
      <to sec="1039669445" usec="0"/>
    </slice>
    <from sec="1039669438" usec="0"/>
    <to sec="1039669445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="140.3.36.165" dst_port="137" proto="tcp" src_ip="192.235.178.60" src_port="1025"/>
      <filter dst_ip="140.3.36.165" dst_port="137" proto="udp" src_ip="192.235.178.60" src_port="1025"/>
      <filter dst_ip="140.3.36.165" dst_port="80" proto="tcp" src_ip="192.235.178.60" src_port="1025"/>
      <filter dst_ip="140.3.36.165" dst_port="80" proto="udp" src_ip="192.235.178.60" src_port="1025"/>
      <filter dst_ip="140.3.36.165" dst_port="137" proto="tcp" src_ip="192.235.178.60" src_port="80"/>
      <filter dst_ip="140.3.36.165" dst_port="137" proto="udp" src_ip="192.235.178.60" src_port="80"/>
      <filter dst_ip="140.3.36.165" dst_port="80" proto="tcp" src_ip="192.235.178.60" src_port="80"/>
      <filter dst_ip="140.3.36.165" dst_port="80" proto="udp" src_ip="192.235.178.60" src_port="80"/>
      <filter dst_ip="211.90.99.98" dst_port="137" proto="tcp" src_ip="192.235.178.60" src_port="1025"/>
      <filter dst_ip="211.90.99.98" dst_port="137" proto="udp" src_ip="192.235.178.60" src_port="1025"/>
      <filter dst_ip="211.90.99.98" dst_port="80" proto="tcp" src_ip="192.235.178.60" src_port="1025"/>
      <filter dst_ip="211.90.99.98" dst_port="80" proto="udp" src_ip="192.235.178.60" src_port="1025"/>
      <filter dst_ip="211.90.99.98" dst_port="137" proto="tcp" src_ip="192.235.178.60" src_port="80"/>
      <filter dst_ip="211.90.99.98" dst_port="137" proto="udp" src_ip="192.235.178.60" src_port="80"/>
      <filter dst_ip="211.90.99.98" dst_port="80" proto="tcp" src_ip="192.235.178.60" src_port="80"/>
      <filter dst_ip="211.90.99.98" dst_port="80" proto="udp" src_ip="192.235.178.60" src_port="80"/>
      <from sec="1039669654" usec="0"/>
      <to sec="1039669682" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="140.3.36.165" dst_port="137" proto="tcp" src_ip="196.9.122.60" src_port="1025"/>
      <filter dst_ip="140.3.36.165" dst_port="137" proto="udp" src_ip="196.9.122.60" src_port="1025"/>
      <filter dst_ip="140.3.36.165" dst_port="80" proto="tcp" src_ip="196.9.122.60" src_port="1025"/>
      <filter dst_ip="140.3.36.165" dst_port="80" proto="udp" src_ip="196.9.122.60" src_port="1025"/>
      <filter dst_ip="140.3.36.165" dst_port="137" proto="tcp" src_ip="196.9.122.60" src_port="80"/>
      <filter dst_ip="140.3.36.165" dst_port="137" proto="udp" src_ip="196.9.122.60" src_port="80"/>
      <filter dst_ip="140.3.36.165" dst_port="80" proto="tcp" src_ip="196.9.122.60" src_port="80"/>
      <filter dst_ip="140.3.36.165" dst_port="80" proto="udp" src_ip="196.9.122.60" src_port="80"/>
      <filter dst_ip="211.90.99.98" dst_port="137" proto="tcp" src_ip="196.9.122.60" src_port="1025"/>
      <filter dst_ip="211.90.99.98" dst_port="137" proto="udp" src_ip="196.9.122.60" src_port="1025"/>
      <filter dst_ip="211.90.99.98" dst_port="80" proto="tcp" src_ip="196.9.122.60" src_port="1025"/>
      <filter dst_ip="211.90.99.98" dst_port="80" proto="udp" src_ip="196.9.122.60" src_port="1025"/>
      <filter dst_ip="211.90.99.98" dst_port="137" proto="tcp" src_ip="196.9.122.60" src_port="80"/>
      <filter dst_ip="211.90.99.98" dst_port="137" proto="udp" src_ip="196.9.122.60" src_port="80"/>
      <filter dst_ip="211.90.99.98" dst_port="80" proto="tcp" src_ip="196.9.122.60" src_port="80"/>
      <filter dst_ip="211.90.99.98" dst_port="80" proto="udp" src_ip="196.9.122.60" src_port="80"/>
      <from sec="1039669655" usec="0"/>
      <to sec="1039669681" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="140.3.36.165" dst_port="137" proto="tcp" src_ip="138.186.218.60" src_port="1025"/>
      <filter dst_ip="140.3.36.165" dst_port="137" proto="udp" src_ip="138.186.218.60" src_port="1025"/>
      <filter dst_ip="140.3.36.165" dst_port="80" proto="tcp" src_ip="138.186.218.60" src_port="1025"/>
      <filter dst_ip="140.3.36.165" dst_port="80" proto="udp" src_ip="138.186.218.60" src_port="1025"/>
      <filter dst_ip="140.3.36.165" dst_port="137" proto="tcp" src_ip="138.186.218.60" src_port="80"/>
      <filter dst_ip="140.3.36.165" dst_port="137" proto="udp" src_ip="138.186.218.60" src_port="80"/>
      <filter dst_ip="140.3.36.165" dst_port="80" proto="tcp" src_ip="138.186.218.60" src_port="80"/>
      <filter dst_ip="140.3.36.165" dst_port="80" proto="udp" src_ip="138.186.218.60" src_port="80"/>
      <filter dst_ip="211.90.99.98" dst_port="137" proto="tcp" src_ip="138.186.218.60" src_port="1025"/>
      <filter dst_ip="211.90.99.98" dst_port="137" proto="udp" src_ip="138.186.218.60" src_port="1025"/>
      <filter dst_ip="211.90.99.98" dst_port="80" proto="tcp" src_ip="138.186.218.60" src_port="1025"/>
      <filter dst_ip="211.90.99.98" dst_port="80" proto="udp" src_ip="138.186.218.60" src_port="1025"/>
      <filter dst_ip="211.90.99.98" dst_port="137" proto="tcp" src_ip="138.186.218.60" src_port="80"/>
      <filter dst_ip="211.90.99.98" dst_port="137" proto="udp" src_ip="138.186.218.60" src_port="80"/>
      <filter dst_ip="211.90.99.98" dst_port="80" proto="tcp" src_ip="138.186.218.60" src_port="80"/>
      <filter dst_ip="211.90.99.98" dst_port="80" proto="udp" src_ip="138.186.218.60" src_port="80"/>
      <from sec="1039669655" usec="0"/>
      <to sec="1039669665" usec="0"/>
    </slice>
    <from sec="1039669654" usec="0"/>
    <to sec="1039669682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="202.74.163.62" src_port="1030"/>
      <from sec="1039669394" usec="0"/>
      <to sec="1039669400" usec="0"/>
    </slice>
    <from sec="1039669394" usec="0"/>
    <to sec="1039669400" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="211.102.28.66" src_port="1028"/>
      <filter dst_port="137" proto="udp" src_ip="211.102.28.66" src_port="1028"/>
      <filter dst_port="80" proto="tcp" src_ip="211.102.28.66" src_port="1028"/>
      <filter dst_port="80" proto="udp" src_ip="211.102.28.66" src_port="1028"/>
      <from sec="1039669920" usec="0"/>
      <to sec="1039669925" usec="0"/>
    </slice>
    <from sec="1039669920" usec="0"/>
    <to sec="1039669925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="198.0.193.68" src_port="33160"/>
      <from sec="1039669579" usec="0"/>
      <to sec="1039669587" usec="0"/>
    </slice>
    <from sec="1039669579" usec="0"/>
    <to sec="1039669587" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="39.33.0.70" src_port="1025"/>
      <from sec="1039669418" usec="0"/>
      <to sec="1039669438" usec="0"/>
    </slice>
    <from sec="1039669418" usec="0"/>
    <to sec="1039669438" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="96.50.84.70" src_port="21051"/>
      <from sec="1039669878" usec="0"/>
      <to sec="1039669884" usec="0"/>
    </slice>
    <from sec="1039669878" usec="0"/>
    <to sec="1039669884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="196.90.99.71" src_port="1028"/>
      <from sec="1039669835" usec="0"/>
      <to sec="1039669841" usec="0"/>
    </slice>
    <from sec="1039669835" usec="0"/>
    <to sec="1039669841" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="169.126.142.97" dst_port="137" proto="tcp" src_ip="212.154.146.71" src_port="23201"/>
      <filter dst_ip="169.126.142.97" dst_port="137" proto="udp" src_ip="212.154.146.71" src_port="23201"/>
      <filter dst_ip="169.126.142.97" dst_port="137" proto="tcp" src_ip="212.154.146.71" src_port="25"/>
      <filter dst_ip="169.126.142.97" dst_port="137" proto="udp" src_ip="212.154.146.71" src_port="25"/>
      <from sec="1039669721" usec="0"/>
      <to sec="1039669726" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="169.126.142.97" dst_port="137" proto="tcp" src_ip="39.111.174.71" src_port="23201"/>
      <filter dst_ip="169.126.142.97" dst_port="137" proto="udp" src_ip="39.111.174.71" src_port="23201"/>
      <filter dst_ip="169.126.142.97" dst_port="137" proto="tcp" src_ip="39.111.174.71" src_port="25"/>
      <filter dst_ip="169.126.142.97" dst_port="137" proto="udp" src_ip="39.111.174.71" src_port="25"/>
      <from sec="1039669721" usec="0"/>
      <to sec="1039669726" usec="0"/>
    </slice>
    <from sec="1039669721" usec="0"/>
    <to sec="1039669726" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="140.3.148.90" dst_port="137" proto="tcp" src_ip="197.94.107.72" src_port="64765"/>
      <filter dst_ip="140.3.148.90" dst_port="137" proto="udp" src_ip="197.94.107.72" src_port="64765"/>
      <filter dst_ip="140.3.148.90" dst_port="137" proto="tcp" src_ip="197.94.107.72" src_port="80"/>
      <filter dst_ip="140.3.148.90" dst_port="137" proto="udp" src_ip="197.94.107.72" src_port="80"/>
      <from sec="1039669920" usec="0"/>
      <to sec="1039669925" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="140.3.148.90" dst_port="137" proto="tcp" src_ip="198.211.199.46" src_port="64765"/>
      <filter dst_ip="140.3.148.90" dst_port="137" proto="udp" src_ip="198.211.199.46" src_port="64765"/>
      <filter dst_ip="140.3.148.90" dst_port="137" proto="tcp" src_ip="198.211.199.46" src_port="80"/>
      <filter dst_ip="140.3.148.90" dst_port="137" proto="udp" src_ip="198.211.199.46" src_port="80"/>
      <from sec="1039669920" usec="0"/>
      <to sec="1039669925" usec="0"/>
    </slice>
    <from sec="1039669920" usec="0"/>
    <to sec="1039669925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="39.114.16.77" src_port="32773"/>
      <from sec="1039669329" usec="0"/>
      <to sec="1039669335" usec="0"/>
    </slice>
    <from sec="1039669329" usec="0"/>
    <to sec="1039669335" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="219.66.118.61" dst_port="137" proto="udp" src_ip="96.168.112.85" src_port="1029"/>
      <filter dst_ip="219.66.118.61" dst_port="137" proto="icmp" src_ip="96.168.112.85" src_port="1029"/>
      <from sec="1039669920" usec="0"/>
      <to sec="1039669926" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="219.66.118.61" dst_port="137" proto="udp" src_ip="140.3.4.85" src_port="1029"/>
      <filter dst_ip="219.66.118.61" dst_port="137" proto="icmp" src_ip="140.3.4.85" src_port="1029"/>
      <from sec="1039669921" usec="0"/>
      <to sec="1039669922" usec="0"/>
    </slice>
    <from sec="1039669920" usec="0"/>
    <to sec="1039669926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="148.110.241.117" dst_port="137" proto="tcp" src_ip="202.109.83.89" src_port="1048"/>
      <filter dst_ip="148.110.241.117" dst_port="137" proto="udp" src_ip="202.109.83.89" src_port="1048"/>
      <filter dst_ip="148.110.241.117" dst_port="3816" proto="tcp" src_ip="202.109.83.89" src_port="1048"/>
      <filter dst_ip="148.110.241.117" dst_port="3816" proto="udp" src_ip="202.109.83.89" src_port="1048"/>
      <filter dst_ip="148.110.241.117" dst_port="137" proto="tcp" src_ip="202.109.83.89" src_port="1863"/>
      <filter dst_ip="148.110.241.117" dst_port="137" proto="udp" src_ip="202.109.83.89" src_port="1863"/>
      <filter dst_ip="148.110.241.117" dst_port="3816" proto="tcp" src_ip="202.109.83.89" src_port="1863"/>
      <filter dst_ip="148.110.241.117" dst_port="3816" proto="udp" src_ip="202.109.83.89" src_port="1863"/>
      <from sec="1039669655" usec="0"/>
      <to sec="1039669660" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="148.110.241.117" dst_port="137" proto="tcp" src_ip="211.90.155.89" src_port="1048"/>
      <filter dst_ip="148.110.241.117" dst_port="137" proto="udp" src_ip="211.90.155.89" src_port="1048"/>
      <filter dst_ip="148.110.241.117" dst_port="3816" proto="tcp" src_ip="211.90.155.89" src_port="1048"/>
      <filter dst_ip="148.110.241.117" dst_port="3816" proto="udp" src_ip="211.90.155.89" src_port="1048"/>
      <filter dst_ip="148.110.241.117" dst_port="137" proto="tcp" src_ip="211.90.155.89" src_port="1863"/>
      <filter dst_ip="148.110.241.117" dst_port="137" proto="udp" src_ip="211.90.155.89" src_port="1863"/>
      <filter dst_ip="148.110.241.117" dst_port="3816" proto="tcp" src_ip="211.90.155.89" src_port="1863"/>
      <filter dst_ip="148.110.241.117" dst_port="3816" proto="udp" src_ip="211.90.155.89" src_port="1863"/>
      <from sec="1039669657" usec="0"/>
      <to sec="1039669659" usec="0"/>
    </slice>
    <from sec="1039669655" usec="0"/>
    <to sec="1039669660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.231.185.25" dst_port="137" proto="tcp" src_ip="96.106.154.94" src_port="1028"/>
      <filter dst_ip="214.231.185.25" dst_port="137" proto="udp" src_ip="96.106.154.94" src_port="1028"/>
      <filter dst_ip="214.231.185.25" dst_port="137" proto="tcp" src_ip="96.106.154.94" src_port="80"/>
      <filter dst_ip="214.231.185.25" dst_port="137" proto="udp" src_ip="96.106.154.94" src_port="80"/>
      <from sec="1039669590" usec="0"/>
      <to sec="1039669596" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="214.231.185.25" dst_port="137" proto="tcp" src_ip="192.69.82.94" src_port="1028"/>
      <filter dst_ip="214.231.185.25" dst_port="137" proto="udp" src_ip="192.69.82.94" src_port="1028"/>
      <filter dst_ip="214.231.185.25" dst_port="137" proto="tcp" src_ip="192.69.82.94" src_port="80"/>
      <filter dst_ip="214.231.185.25" dst_port="137" proto="udp" src_ip="192.69.82.94" src_port="80"/>
      <from sec="1039669591" usec="0"/>
      <to sec="1039669596" usec="0"/>
    </slice>
    <from sec="1039669590" usec="0"/>
    <to sec="1039669596" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="140.3.217.232" dst_port="137" proto="tcp" src_ip="36.239.16.98" src_port="1027"/>
      <filter dst_ip="140.3.217.232" dst_port="137" proto="udp" src_ip="36.239.16.98" src_port="1027"/>
      <filter dst_ip="140.3.217.232" dst_port="80" proto="tcp" src_ip="36.239.16.98" src_port="1027"/>
      <filter dst_ip="140.3.217.232" dst_port="80" proto="udp" src_ip="36.239.16.98" src_port="1027"/>
      <filter dst_ip="140.3.217.232" dst_port="137" proto="tcp" src_ip="36.239.16.98" src_port="1276"/>
      <filter dst_ip="140.3.217.232" dst_port="137" proto="udp" src_ip="36.239.16.98" src_port="1276"/>
      <filter dst_ip="140.3.217.232" dst_port="80" proto="tcp" src_ip="36.239.16.98" src_port="1276"/>
      <filter dst_ip="140.3.217.232" dst_port="80" proto="udp" src_ip="36.239.16.98" src_port="1276"/>
      <from sec="1039669585" usec="0"/>
      <to sec="1039669591" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="140.3.217.232" dst_port="137" proto="tcp" src_ip="203.52.48.98" src_port="1027"/>
      <filter dst_ip="140.3.217.232" dst_port="137" proto="udp" src_ip="203.52.48.98" src_port="1027"/>
      <filter dst_ip="140.3.217.232" dst_port="80" proto="tcp" src_ip="203.52.48.98" src_port="1027"/>
      <filter dst_ip="140.3.217.232" dst_port="80" proto="udp" src_ip="203.52.48.98" src_port="1027"/>
      <filter dst_ip="140.3.217.232" dst_port="137" proto="tcp" src_ip="203.52.48.98" src_port="1276"/>
      <filter dst_ip="140.3.217.232" dst_port="137" proto="udp" src_ip="203.52.48.98" src_port="1276"/>
      <filter dst_ip="140.3.217.232" dst_port="80" proto="tcp" src_ip="203.52.48.98" src_port="1276"/>
      <filter dst_ip="140.3.217.232" dst_port="80" proto="udp" src_ip="203.52.48.98" src_port="1276"/>
      <from sec="1039669586" usec="0"/>
      <to sec="1039669587" usec="0"/>
    </slice>
    <from sec="1039669585" usec="0"/>
    <to sec="1039669591" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="196.39.49.98" src_port="1027"/>
      <from sec="1039669512" usec="0"/>
      <to sec="1039669518" usec="0"/>
    </slice>
    <from sec="1039669512" usec="0"/>
    <to sec="1039669518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="202.71.130.98" src_port="1047"/>
      <from sec="1039669495" usec="0"/>
      <to sec="1039669501" usec="0"/>
    </slice>
    <from sec="1039669495" usec="0"/>
    <to sec="1039669501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="211.45.232.121" dst_port="137" proto="tcp" src_ip="202.155.36.109" src_port="1028"/>
      <filter dst_ip="211.45.232.121" dst_port="137" proto="udp" src_ip="202.155.36.109" src_port="1028"/>
      <filter dst_ip="211.45.232.121" dst_port="80" proto="tcp" src_ip="202.155.36.109" src_port="1028"/>
      <filter dst_ip="211.45.232.121" dst_port="80" proto="udp" src_ip="202.155.36.109" src_port="1028"/>
      <filter dst_ip="211.45.232.121" dst_port="137" proto="tcp" src_ip="202.155.36.109" src_port="2569"/>
      <filter dst_ip="211.45.232.121" dst_port="137" proto="udp" src_ip="202.155.36.109" src_port="2569"/>
      <filter dst_ip="211.45.232.121" dst_port="80" proto="tcp" src_ip="202.155.36.109" src_port="2569"/>
      <filter dst_ip="211.45.232.121" dst_port="80" proto="udp" src_ip="202.155.36.109" src_port="2569"/>
      <from sec="1039669851" usec="0"/>
      <to sec="1039669857" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="211.45.232.121" dst_port="137" proto="tcp" src_ip="172.93.20.109" src_port="1028"/>
      <filter dst_ip="211.45.232.121" dst_port="137" proto="udp" src_ip="172.93.20.109" src_port="1028"/>
      <filter dst_ip="211.45.232.121" dst_port="80" proto="tcp" src_ip="172.93.20.109" src_port="1028"/>
      <filter dst_ip="211.45.232.121" dst_port="80" proto="udp" src_ip="172.93.20.109" src_port="1028"/>
      <filter dst_ip="211.45.232.121" dst_port="137" proto="tcp" src_ip="172.93.20.109" src_port="2569"/>
      <filter dst_ip="211.45.232.121" dst_port="137" proto="udp" src_ip="172.93.20.109" src_port="2569"/>
      <filter dst_ip="211.45.232.121" dst_port="80" proto="tcp" src_ip="172.93.20.109" src_port="2569"/>
      <filter dst_ip="211.45.232.121" dst_port="80" proto="udp" src_ip="172.93.20.109" src_port="2569"/>
      <from sec="1039669855" usec="0"/>
      <to sec="1039669858" usec="0"/>
    </slice>
    <from sec="1039669851" usec="0"/>
    <to sec="1039669858" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="197.163.18.112" src_port="1025"/>
      <from sec="1039669851" usec="0"/>
      <to sec="1039669858" usec="0"/>
    </slice>
    <from sec="1039669851" usec="0"/>
    <to sec="1039669858" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="211.149.186.213" dst_port="80" proto="tcp" src_ip="140.3.229.114" src_port="1029"/>
      <filter dst_ip="211.149.186.213" dst_port="80" proto="udp" src_ip="140.3.229.114" src_port="1029"/>
      <filter dst_ip="211.149.186.213" dst_port="137" proto="tcp" src_ip="140.3.229.114" src_port="1029"/>
      <filter dst_ip="211.149.186.213" dst_port="137" proto="udp" src_ip="140.3.229.114" src_port="1029"/>
      <filter dst_ip="36.161.192.84" dst_port="80" proto="tcp" src_ip="140.3.229.114" src_port="1029"/>
      <filter dst_ip="36.161.192.84" dst_port="80" proto="udp" src_ip="140.3.229.114" src_port="1029"/>
      <filter dst_ip="36.161.192.84" dst_port="137" proto="tcp" src_ip="140.3.229.114" src_port="1029"/>
      <filter dst_ip="36.161.192.84" dst_port="137" proto="udp" src_ip="140.3.229.114" src_port="1029"/>
      <from sec="1039669560" usec="0"/>
      <to sec="1039669565" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="211.149.186.213" dst_port="80" proto="tcp" src_ip="202.49.177.114" src_port="1029"/>
      <filter dst_ip="211.149.186.213" dst_port="80" proto="udp" src_ip="202.49.177.114" src_port="1029"/>
      <filter dst_ip="211.149.186.213" dst_port="137" proto="tcp" src_ip="202.49.177.114" src_port="1029"/>
      <filter dst_ip="211.149.186.213" dst_port="137" proto="udp" src_ip="202.49.177.114" src_port="1029"/>
      <filter dst_ip="36.161.192.84" dst_port="80" proto="tcp" src_ip="202.49.177.114" src_port="1029"/>
      <filter dst_ip="36.161.192.84" dst_port="80" proto="udp" src_ip="202.49.177.114" src_port="1029"/>
      <filter dst_ip="36.161.192.84" dst_port="137" proto="tcp" src_ip="202.49.177.114" src_port="1029"/>
      <filter dst_ip="36.161.192.84" dst_port="137" proto="udp" src_ip="202.49.177.114" src_port="1029"/>
      <from sec="1039669560" usec="0"/>
      <to sec="1039669566" usec="0"/>
    </slice>
    <from sec="1039669560" usec="0"/>
    <to sec="1039669566" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="164.75.143.107" dst_port="137" proto="tcp" src_ip="60.167.89.115" src_port="1065"/>
      <filter dst_ip="164.75.143.107" dst_port="137" proto="udp" src_ip="60.167.89.115" src_port="1065"/>
      <filter dst_ip="164.75.143.107" dst_port="80" proto="tcp" src_ip="60.167.89.115" src_port="1065"/>
      <filter dst_ip="164.75.143.107" dst_port="80" proto="udp" src_ip="60.167.89.115" src_port="1065"/>
      <filter dst_ip="164.75.143.107" dst_port="137" proto="tcp" src_ip="60.167.89.115" src_port="80"/>
      <filter dst_ip="164.75.143.107" dst_port="137" proto="udp" src_ip="60.167.89.115" src_port="80"/>
      <filter dst_ip="164.75.143.107" dst_port="80" proto="tcp" src_ip="60.167.89.115" src_port="80"/>
      <filter dst_ip="164.75.143.107" dst_port="80" proto="udp" src_ip="60.167.89.115" src_port="80"/>
      <from sec="1039669717" usec="0"/>
      <to sec="1039669731" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="164.75.143.107" dst_port="137" proto="tcp" src_ip="140.3.21.115" src_port="1065"/>
      <filter dst_ip="164.75.143.107" dst_port="137" proto="udp" src_ip="140.3.21.115" src_port="1065"/>
      <filter dst_ip="164.75.143.107" dst_port="80" proto="tcp" src_ip="140.3.21.115" src_port="1065"/>
      <filter dst_ip="164.75.143.107" dst_port="80" proto="udp" src_ip="140.3.21.115" src_port="1065"/>
      <filter dst_ip="164.75.143.107" dst_port="137" proto="tcp" src_ip="140.3.21.115" src_port="80"/>
      <filter dst_ip="164.75.143.107" dst_port="137" proto="udp" src_ip="140.3.21.115" src_port="80"/>
      <filter dst_ip="164.75.143.107" dst_port="80" proto="tcp" src_ip="140.3.21.115" src_port="80"/>
      <filter dst_ip="164.75.143.107" dst_port="80" proto="udp" src_ip="140.3.21.115" src_port="80"/>
      <from sec="1039669716" usec="0"/>
      <to sec="1039669731" usec="0"/>
    </slice>
    <from sec="1039669716" usec="0"/>
    <to sec="1039669731" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="215.87.64.183" dst_port="137" proto="tcp" src_ip="37.42.97.117" src_port="1027"/>
      <filter dst_ip="215.87.64.183" dst_port="137" proto="udp" src_ip="37.42.97.117" src_port="1027"/>
      <filter dst_ip="215.87.64.183" dst_port="137" proto="tcp" src_ip="37.42.97.117" src_port="80"/>
      <filter dst_ip="215.87.64.183" dst_port="137" proto="udp" src_ip="37.42.97.117" src_port="80"/>
      <from sec="1039669686" usec="0"/>
      <to sec="1039669692" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="215.87.64.183" dst_port="137" proto="tcp" src_ip="201.37.197.117" src_port="1027"/>
      <filter dst_ip="215.87.64.183" dst_port="137" proto="udp" src_ip="201.37.197.117" src_port="1027"/>
      <filter dst_ip="215.87.64.183" dst_port="137" proto="tcp" src_ip="201.37.197.117" src_port="80"/>
      <filter dst_ip="215.87.64.183" dst_port="137" proto="udp" src_ip="201.37.197.117" src_port="80"/>
      <from sec="1039669686" usec="0"/>
      <to sec="1039669692" usec="0"/>
    </slice>
    <from sec="1039669686" usec="0"/>
    <to sec="1039669692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19604,1.81002,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_40{
style=filled;
color=gray75;
211[label="96.50.20.122s;2pkt 2fpkt", shape=rectangle, color=red];
214[label="96.9.196.122s;1pkt 1fpkt", shape=rectangle, color=red];
482[label="138.186.177.88;d;207pkt 207fpkt", shape=diamond, color=yellow];
609[label="61.201.217.66;s;1pkt 1fpkt", shape=diamond, color=yellow];
839[label="61.48.149.79;s;1pkt 1fpkt", shape=diamond, color=yellow];
866[label="61.48.166.246;s;1pkt 1fpkt", shape=diamond, color=yellow];
884[label="64.188.184.63;s;1pkt 1fpkt", shape=diamond, color=yellow];
889[label="64.33.119.37;s;1pkt 1fpkt", shape=diamond, color=yellow];
1251[label="197.131.86.209;s;1pkt 1fpkt", shape=diamond, color=yellow];
1320[label="64.219.128.122;s;1pkt 1fpkt", shape=diamond, color=yellow];
2512[label="61.48.166.246;s;1pkt 1fpkt", shape=hexagon, color=black];
2515[label="64.188.184.63;s;1pkt 1fpkt", shape=hexagon, color=black];
2517[label="64.33.119.37;s;1pkt 1fpkt", shape=hexagon, color=black];
3879[label="64.188.184.63;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4433[label="64.219.128.122;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5184[label="197.131.86.209;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5464[label="61.48.166.246;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7010[label="61.48.166.246;1pkt 1fpkt", shape=invtriangle, color=brown];
7324[label="64.188.184.63;1pkt 1fpkt", shape=invhouse, color=bisque];
7344[label="61.201.217.66;1pkt 1fpkt", shape=invhouse, color=bisque];
7871[label="197.131.86.209;1pkt 1fpkt", shape=invhouse, color=bisque];
7991[label="61.48.166.246;1pkt 1fpkt", shape=invhouse, color=bisque];
stat40[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6257, 138.186.177.88:6257}[88.9423%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (81.6594%)&lt;BR/&gt; 6699: (7.42358%)&lt;BR/&gt; 2383: (1.31004%)&lt;BR/&gt; 2382: (1.0917%)&lt;BR/&gt; 2213: (1.0917%)&gt;];
}
211--214[label="1;1pkt 1fpkt"];
211--482[label="0.5;1pkt 1fpkt"];
211--1320[label="1;1pkt 1fpkt"];
211--4433[label="1;1pkt 1fpkt"];
214--482[label="1;1pkt 1fpkt"];
214--1320[label="1;1pkt 1fpkt"];
214--4433[label="1;1pkt 1fpkt"];
482--609[label="1;1pkt 1fpkt"];
482--839[label="1;1pkt 1fpkt"];
482--866[label="1;1pkt 1fpkt"];
482--884[label="1;1pkt 1fpkt"];
482--889[label="1;1pkt 1fpkt"];
482--1232[label="0.0097561;2pkt 2fpkt"];
482--1251[label="1;1pkt 1fpkt"];
482--1320[label="1;1pkt 1fpkt"];
482--1827[label="1;1pkt 1fpkt"];
482--2188[label="1;2pkt 2fpkt"];
482--2512[label="1;1pkt 1fpkt"];
482--2515[label="1;1pkt 1fpkt"];
482--2517[label="1;1pkt 1fpkt"];
482--3648[label="0.00966184;2pkt 2fpkt"];
482--3794[label="1;1pkt 1fpkt"];
482--3879[label="1;1pkt 1fpkt"];
482--4433[label="1;1pkt 1fpkt"];
482--5054[label="0.030303;1pkt 1fpkt"];
482--5184[label="1;1pkt 1fpkt"];
482--5464[label="1;1pkt 1fpkt"];
482--5515[label="1;1pkt 1fpkt"];
482--7010[label="1;1pkt 1fpkt"];
482--7324[label="1;1pkt 1fpkt"];
482--7344[label="1;1pkt 1fpkt"];
482--7871[label="1;1pkt 1fpkt"];
482--7991[label="1;1pkt 1fpkt"];
609--7344[label="1;1pkt 1fpkt"];
866--2512[label="1;1pkt 1fpkt"];
866--5464[label="1;1pkt 1fpkt"];
866--7010[label="1;1pkt 1fpkt"];
866--7991[label="1;1pkt 1fpkt"];
884--2515[label="1;1pkt 1fpkt"];
884--3879[label="1;1pkt 1fpkt"];
884--7324[label="1;1pkt 1fpkt"];
889--2517[label="1;1pkt 1fpkt"];
1251--5184[label="1;1pkt 1fpkt"];
1251--7871[label="1;1pkt 1fpkt"];
1320--4433[label="1;1pkt 1fpkt"];
2512--5464[label="1;1pkt 1fpkt"];
2512--7010[label="1;1pkt 1fpkt"];
2512--7991[label="1;1pkt 1fpkt"];
2515--3879[label="1;1pkt 1fpkt"];
2515--7324[label="1;1pkt 1fpkt"];
3879--7324[label="1;1pkt 1fpkt"];
5184--7871[label="1;1pkt 1fpkt"];
5464--7010[label="1;1pkt 1fpkt"];
5464--7991[label="1;1pkt 1fpkt"];
7010--7991[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.177.88" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="38.40.211.126" src_port="1030"/>
      <from sec="1039669444" usec="0"/>
      <to sec="1039669450" usec="0"/>
    </slice>
    <from sec="1039669444" usec="0"/>
    <to sec="1039669450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="192.234.238.126" src_port="1032"/>
      <filter dst_port="137" proto="icmp" src_ip="192.234.238.126" src_port="1032"/>
      <from sec="1039669373" usec="0"/>
      <to sec="1039669385" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="udp" src_ip="215.87.66.126" src_port="1032"/>
      <filter dst_port="137" proto="icmp" src_ip="215.87.66.126" src_port="1032"/>
      <from sec="1039669374" usec="0"/>
      <to sec="1039669385" usec="0"/>
    </slice>
    <from sec="1039669373" usec="0"/>
    <to sec="1039669385" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="99.77.30.175" dst_port="137" proto="tcp" src_ip="143.182.27.132" src_port="1029"/>
      <filter dst_ip="99.77.30.175" dst_port="137" proto="udp" src_ip="143.182.27.132" src_port="1029"/>
      <filter dst_ip="99.77.30.175" dst_port="80" proto="tcp" src_ip="143.182.27.132" src_port="1029"/>
      <filter dst_ip="99.77.30.175" dst_port="80" proto="udp" src_ip="143.182.27.132" src_port="1029"/>
      <from sec="1039669334" usec="0"/>
      <to sec="1039669359" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="99.77.30.175" dst_port="137" proto="tcp" src_ip="138.7.35.132" src_port="1029"/>
      <filter dst_ip="99.77.30.175" dst_port="137" proto="udp" src_ip="138.7.35.132" src_port="1029"/>
      <filter dst_ip="99.77.30.175" dst_port="80" proto="tcp" src_ip="138.7.35.132" src_port="1029"/>
      <filter dst_ip="99.77.30.175" dst_port="80" proto="udp" src_ip="138.7.35.132" src_port="1029"/>
      <from sec="1039669356" usec="0"/>
      <to sec="1039669358" usec="0"/>
    </slice>
    <from sec="1039669334" usec="0"/>
    <to sec="1039669359" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="140.3.249.27" dst_port="137" proto="tcp" src_ip="198.201.27.136" src_port="80"/>
      <filter dst_ip="140.3.249.27" dst_port="137" proto="udp" src_ip="198.201.27.136" src_port="80"/>
      <filter dst_ip="140.3.249.27" dst_port="137" proto="tcp" src_ip="198.201.27.136" src_port="1027"/>
      <filter dst_ip="140.3.249.27" dst_port="137" proto="udp" src_ip="198.201.27.136" src_port="1027"/>
      <from sec="1039669513" usec="0"/>
      <to sec="1039669518" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="140.3.249.27" dst_port="137" proto="tcp" src_ip="199.178.59.136" src_port="80"/>
      <filter dst_ip="140.3.249.27" dst_port="137" proto="udp" src_ip="199.178.59.136" src_port="80"/>
      <filter dst_ip="140.3.249.27" dst_port="137" proto="tcp" src_ip="199.178.59.136" src_port="1027"/>
      <filter dst_ip="140.3.249.27" dst_port="137" proto="udp" src_ip="199.178.59.136" src_port="1027"/>
      <from sec="1039669512" usec="0"/>
      <to sec="1039669518" usec="0"/>
    </slice>
    <from sec="1039669512" usec="0"/>
    <to sec="1039669518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="223.88.204.136" src_port="1029"/>
      <from sec="1039669900" usec="0"/>
      <to sec="1039669916" usec="0"/>
    </slice>
    <from sec="1039669900" usec="0"/>
    <to sec="1039669916" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="64.239.171.138" src_port="1039"/>
      <from sec="1039669889" usec="0"/>
      <to sec="1039669906" usec="0"/>
    </slice>
    <from sec="1039669889" usec="0"/>
    <to sec="1039669906" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="215.87.67.219" dst_port="137" proto="tcp" src_ip="212.193.198.140" src_port="1045"/>
      <filter dst_ip="215.87.67.219" dst_port="137" proto="udp" src_ip="212.193.198.140" src_port="1045"/>
      <filter dst_ip="215.87.67.219" dst_port="137" proto="tcp" src_ip="212.193.198.140" src_port="80"/>
      <filter dst_ip="215.87.67.219" dst_port="137" proto="udp" src_ip="212.193.198.140" src_port="80"/>
      <from sec="1039669686" usec="0"/>
      <to sec="1039669707" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="215.87.67.219" dst_port="137" proto="tcp" src_ip="36.215.62.140" src_port="1045"/>
      <filter dst_ip="215.87.67.219" dst_port="137" proto="udp" src_ip="36.215.62.140" src_port="1045"/>
      <filter dst_ip="215.87.67.219" dst_port="137" proto="tcp" src_ip="36.215.62.140" src_port="80"/>
      <filter dst_ip="215.87.67.219" dst_port="137" proto="udp" src_ip="36.215.62.140" src_port="80"/>
      <from sec="1039669686" usec="0"/>
      <to sec="1039669707" usec="0"/>
    </slice>
    <from sec="1039669686" usec="0"/>
    <to sec="1039669707" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="214.132.54.141" src_port="1033"/>
      <from sec="1039669676" usec="0"/>
      <to sec="1039669682" usec="0"/>
    </slice>
    <from sec="1039669676" usec="0"/>
    <to sec="1039669682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="202.148.1.144" src_port="1029"/>
      <filter dst_port="137" proto="udp" src_ip="202.148.1.144" src_port="1042"/>
      <from sec="1039669373" usec="0"/>
      <to sec="1039669409" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="udp" src_ip="96.213.141.144" src_port="1029"/>
      <filter dst_port="137" proto="udp" src_ip="96.213.141.144" src_port="1042"/>
      <from sec="1039669404" usec="0"/>
      <to sec="1039669408" usec="0"/>
    </slice>
    <from sec="1039669373" usec="0"/>
    <to sec="1039669409" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="220.154.185.144" src_port="1028"/>
      <from sec="1039669813" usec="0"/>
      <to sec="1039669819" usec="0"/>
    </slice>
    <from sec="1039669813" usec="0"/>
    <to sec="1039669819" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="96.213.2.147" src_port="1029"/>
      <from sec="1039669655" usec="0"/>
      <to sec="1039669660" usec="0"/>
    </slice>
    <from sec="1039669655" usec="0"/>
    <to sec="1039669660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="211.242.102.149" src_port="1025"/>
      <filter dst_port="137" proto="icmp" src_ip="211.242.102.149" src_port="1025"/>
      <from sec="1039669804" usec="0"/>
      <to sec="1039669809" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="udp" src_ip="215.87.66.149" src_port="1025"/>
      <filter dst_port="137" proto="icmp" src_ip="215.87.66.149" src_port="1025"/>
      <from sec="1039669804" usec="0"/>
      <to sec="1039669809" usec="0"/>
    </slice>
    <from sec="1039669804" usec="0"/>
    <to sec="1039669809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="96.1.0.156" src_port="1030"/>
      <filter dst_port="137" proto="udp" src_ip="96.1.0.156" src_port="1030"/>
      <filter dst_port="137" proto="tcp" src_ip="96.1.0.156" src_port="80"/>
      <filter dst_port="137" proto="udp" src_ip="96.1.0.156" src_port="80"/>
      <from sec="1039669670" usec="0"/>
      <to sec="1039669682" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="211.45.248.156" src_port="1030"/>
      <filter dst_port="137" proto="udp" src_ip="211.45.248.156" src_port="1030"/>
      <filter dst_port="137" proto="tcp" src_ip="211.45.248.156" src_port="80"/>
      <filter dst_port="137" proto="udp" src_ip="211.45.248.156" src_port="80"/>
      <from sec="1039669671" usec="0"/>
      <to sec="1039669680" usec="0"/>
    </slice>
    <from sec="1039669670" usec="0"/>
    <to sec="1039669682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="138.7.79.130" dst_port="137" proto="tcp" src_ip="36.251.65.160" src_port="1028"/>
      <filter dst_ip="138.7.79.130" dst_port="137" proto="udp" src_ip="36.251.65.160" src_port="1028"/>
      <filter dst_ip="138.7.79.130" dst_port="4274" proto="tcp" src_ip="36.251.65.160" src_port="1028"/>
      <filter dst_ip="138.7.79.130" dst_port="4274" proto="udp" src_ip="36.251.65.160" src_port="1028"/>
      <filter dst_ip="138.7.79.130" dst_port="137" proto="tcp" src_ip="36.251.65.160" src_port="3303"/>
      <filter dst_ip="138.7.79.130" dst_port="137" proto="udp" src_ip="36.251.65.160" src_port="3303"/>
      <filter dst_ip="138.7.79.130" dst_port="4274" proto="tcp" src_ip="36.251.65.160" src_port="3303"/>
      <filter dst_ip="138.7.79.130" dst_port="4274" proto="udp" src_ip="36.251.65.160" src_port="3303"/>
      <from sec="1039669889" usec="0"/>
      <to sec="1039669901" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="138.7.79.130" dst_port="137" proto="tcp" src_ip="60.162.105.160" src_port="1028"/>
      <filter dst_ip="138.7.79.130" dst_port="137" proto="udp" src_ip="60.162.105.160" src_port="1028"/>
      <filter dst_ip="138.7.79.130" dst_port="4274" proto="tcp" src_ip="60.162.105.160" src_port="1028"/>
      <filter dst_ip="138.7.79.130" dst_port="4274" proto="udp" src_ip="60.162.105.160" src_port="1028"/>
      <filter dst_ip="138.7.79.130" dst_port="137" proto="tcp" src_ip="60.162.105.160" src_port="3303"/>
      <filter dst_ip="138.7.79.130" dst_port="137" proto="udp" src_ip="60.162.105.160" src_port="3303"/>
      <filter dst_ip="138.7.79.130" dst_port="4274" proto="tcp" src_ip="60.162.105.160" src_port="3303"/>
      <filter dst_ip="138.7.79.130" dst_port="4274" proto="udp" src_ip="60.162.105.160" src_port="3303"/>
      <from sec="1039669891" usec="0"/>
      <to sec="1039669900" usec="0"/>
    </slice>
    <from sec="1039669889" usec="0"/>
    <to sec="1039669901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="212.172.84.156" dst_port="137" proto="tcp" src_ip="203.16.143.160" src_port="1026"/>
      <filter dst_ip="212.172.84.156" dst_port="137" proto="udp" src_ip="203.16.143.160" src_port="1026"/>
      <filter dst_ip="212.172.84.156" dst_port="53" proto="tcp" src_ip="203.16.143.160" src_port="1026"/>
      <filter dst_ip="212.172.84.156" dst_port="53" proto="udp" src_ip="203.16.143.160" src_port="1026"/>
      <filter dst_ip="212.172.84.156" dst_port="4971" proto="tcp" src_ip="203.16.143.160" src_port="1026"/>
      <filter dst_ip="212.172.84.156" dst_port="4971" proto="udp" src_ip="203.16.143.160" src_port="1026"/>
      <filter dst_ip="212.172.84.156" dst_port="137" proto="tcp" src_ip="203.16.143.160" src_port="65534"/>
      <filter dst_ip="212.172.84.156" dst_port="137" proto="udp" src_ip="203.16.143.160" src_port="65534"/>
      <filter dst_ip="212.172.84.156" dst_port="53" proto="tcp" src_ip="203.16.143.160" src_port="65534"/>
      <filter dst_ip="212.172.84.156" dst_port="53" proto="udp" src_ip="203.16.143.160" src_port="65534"/>
      <filter dst_ip="212.172.84.156" dst_port="4971" proto="tcp" src_ip="203.16.143.160" src_port="65534"/>
      <filter dst_ip="212.172.84.156" dst_port="4971" proto="udp" src_ip="203.16.143.160" src_port="65534"/>
      <filter dst_ip="212.172.84.156" dst_port="137" proto="tcp" src_ip="203.16.143.160" src_port="80"/>
      <filter dst_ip="212.172.84.156" dst_port="137" proto="udp" src_ip="203.16.143.160" src_port="80"/>
      <filter dst_ip="212.172.84.156" dst_port="53" proto="tcp" src_ip="203.16.143.160" src_port="80"/>
      <filter dst_ip="212.172.84.156" dst_port="53" proto="udp" src_ip="203.16.143.160" src_port="80"/>
      <filter dst_ip="212.172.84.156" dst_port="4971" proto="tcp" src_ip="203.16.143.160" src_port="80"/>
      <filter dst_ip="212.172.84.156" dst_port="4971" proto="udp" src_ip="203.16.143.160" src_port="80"/>
      <from sec="1039669845" usec="0"/>
      <to sec="1039669858" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="212.172.84.156" dst_port="137" proto="tcp" src_ip="214.216.51.160" src_port="1026"/>
      <filter dst_ip="212.172.84.156" dst_port="137" proto="udp" src_ip="214.216.51.160" src_port="1026"/>
      <filter dst_ip="212.172.84.156" dst_port="53" proto="tcp" src_ip="214.216.51.160" src_port="1026"/>
      <filter dst_ip="212.172.84.156" dst_port="53" proto="udp" src_ip="214.216.51.160" src_port="1026"/>
      <filter dst_ip="212.172.84.156" dst_port="4971" proto="tcp" src_ip="214.216.51.160" src_port="1026"/>
      <filter dst_ip="212.172.84.156" dst_port="4971" proto="udp" src_ip="214.216.51.160" src_port="1026"/>
      <filter dst_ip="212.172.84.156" dst_port="137" proto="tcp" src_ip="214.216.51.160" src_port="65534"/>
      <filter dst_ip="212.172.84.156" dst_port="137" proto="udp" src_ip="214.216.51.160" src_port="65534"/>
      <filter dst_ip="212.172.84.156" dst_port="53" proto="tcp" src_ip="214.216.51.160" src_port="65534"/>
      <filter dst_ip="212.172.84.156" dst_port="53" proto="udp" src_ip="214.216.51.160" src_port="65534"/>
      <filter dst_ip="212.172.84.156" dst_port="4971" proto="tcp" src_ip="214.216.51.160" src_port="65534"/>
      <filter dst_ip="212.172.84.156" dst_port="4971" proto="udp" src_ip="214.216.51.160" src_port="65534"/>
      <filter dst_ip="212.172.84.156" dst_port="137" proto="tcp" src_ip="214.216.51.160" src_port="80"/>
      <filter dst_ip="212.172.84.156" dst_port="137" proto="udp" src_ip="214.216.51.160" src_port="80"/>
      <filter dst_ip="212.172.84.156" dst_port="53" proto="tcp" src_ip="214.216.51.160" src_port="80"/>
      <filter dst_ip="212.172.84.156" dst_port="53" proto="udp" src_ip="214.216.51.160" src_port="80"/>
      <filter dst_ip="212.172.84.156" dst_port="4971" proto="tcp" src_ip="214.216.51.160" src_port="80"/>
      <filter dst_ip="212.172.84.156" dst_port="4971" proto="udp" src_ip="214.216.51.160" src_port="80"/>
      <from sec="1039669846" usec="0"/>
      <to sec="1039669855" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="212.172.84.156" dst_port="137" proto="tcp" src_ip="138.177.207.160" src_port="1026"/>
      <filter dst_ip="212.172.84.156" dst_port="137" proto="udp" src_ip="138.177.207.160" src_port="1026"/>
      <filter dst_ip="212.172.84.156" dst_port="53" proto="tcp" src_ip="138.177.207.160" src_port="1026"/>
      <filter dst_ip="212.172.84.156" dst_port="53" proto="udp" src_ip="138.177.207.160" src_port="1026"/>
      <filter dst_ip="212.172.84.156" dst_port="4971" proto="tcp" src_ip="138.177.207.160" src_port="1026"/>
      <filter dst_ip="212.172.84.156" dst_port="4971" proto="udp" src_ip="138.177.207.160" src_port="1026"/>
      <filter dst_ip="212.172.84.156" dst_port="137" proto="tcp" src_ip="138.177.207.160" src_port="65534"/>
      <filter dst_ip="212.172.84.156" dst_port="137" proto="udp" src_ip="138.177.207.160" src_port="65534"/>
      <filter dst_ip="212.172.84.156" dst_port="53" proto="tcp" src_ip="138.177.207.160" src_port="65534"/>
      <filter dst_ip="212.172.84.156" dst_port="53" proto="udp" src_ip="138.177.207.160" src_port="65534"/>
      <filter dst_ip="212.172.84.156" dst_port="4971" proto="tcp" src_ip="138.177.207.160" src_port="65534"/>
      <filter dst_ip="212.172.84.156" dst_port="4971" proto="udp" src_ip="138.177.207.160" src_port="65534"/>
      <filter dst_ip="212.172.84.156" dst_port="137" proto="tcp" src_ip="138.177.207.160" src_port="80"/>
      <filter dst_ip="212.172.84.156" dst_port="137" proto="udp" src_ip="138.177.207.160" src_port="80"/>
      <filter dst_ip="212.172.84.156" dst_port="53" proto="tcp" src_ip="138.177.207.160" src_port="80"/>
      <filter dst_ip="212.172.84.156" dst_port="53" proto="udp" src_ip="138.177.207.160" src_port="80"/>
      <filter dst_ip="212.172.84.156" dst_port="4971" proto="tcp" src_ip="138.177.207.160" src_port="80"/>
      <filter dst_ip="212.172.84.156" dst_port="4971" proto="udp" src_ip="138.177.207.160" src_port="80"/>
      <from sec="1039669847" usec="0"/>
      <to sec="1039669850" usec="0"/>
    </slice>
    <from sec="1039669845" usec="0"/>
    <to sec="1039669858" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="211.165.179.172" src_port="65236"/>
      <from sec="1039669889" usec="0"/>
      <to sec="1039669921" usec="0"/>
    </slice>
    <from sec="1039669889" usec="0"/>
    <to sec="1039669921" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="96.213.217.173" src_port="1033"/>
      <from sec="1039669428" usec="0"/>
      <to sec="1039669434" usec="0"/>
    </slice>
    <from sec="1039669428" usec="0"/>
    <to sec="1039669434" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="96.27.38.178" src_port="1026"/>
      <filter dst_port="137" proto="udp" src_ip="96.27.38.178" src_port="1026"/>
      <filter dst_port="80" proto="tcp" src_ip="96.27.38.178" src_port="1026"/>
      <filter dst_port="80" proto="udp" src_ip="96.27.38.178" src_port="1026"/>
      <from sec="1039669260" usec="0"/>
      <to sec="1039669265" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="202.69.210.178" src_port="1026"/>
      <filter dst_port="137" proto="udp" src_ip="202.69.210.178" src_port="1026"/>
      <filter dst_port="80" proto="tcp" src_ip="202.69.210.178" src_port="1026"/>
      <filter dst_port="80" proto="udp" src_ip="202.69.210.178" src_port="1026"/>
      <from sec="1039669260" usec="0"/>
      <to sec="1039669264" usec="0"/>
    </slice>
    <from sec="1039669260" usec="0"/>
    <to sec="1039669265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="96.50.0.179" src_port="1028"/>
      <from sec="1039669533" usec="0"/>
      <to sec="1039669539" usec="0"/>
    </slice>
    <from sec="1039669533" usec="0"/>
    <to sec="1039669539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="167.135.14.255" dst_port="137" proto="tcp" src_ip="140.3.209.180" src_port="80"/>
      <filter dst_ip="167.135.14.255" dst_port="137" proto="udp" src_ip="140.3.209.180" src_port="80"/>
      <filter dst_ip="167.135.14.255" dst_port="137" proto="tcp" src_ip="140.3.209.180" src_port="1029"/>
      <filter dst_ip="167.135.14.255" dst_port="137" proto="udp" src_ip="140.3.209.180" src_port="1029"/>
      <from sec="1039669808" usec="0"/>
      <to sec="1039669809" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="167.135.14.255" dst_port="137" proto="tcp" src_ip="38.237.21.180" src_port="80"/>
      <filter dst_ip="167.135.14.255" dst_port="137" proto="udp" src_ip="38.237.21.180" src_port="80"/>
      <filter dst_ip="167.135.14.255" dst_port="137" proto="tcp" src_ip="38.237.21.180" src_port="1029"/>
      <filter dst_ip="167.135.14.255" dst_port="137" proto="udp" src_ip="38.237.21.180" src_port="1029"/>
      <from sec="1039669804" usec="0"/>
      <to sec="1039669809" usec="0"/>
    </slice>
    <from sec="1039669804" usec="0"/>
    <to sec="1039669809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="96.16.145.184" src_port="1028"/>
      <from sec="1039669299" usec="0"/>
      <to sec="1039669304" usec="0"/>
    </slice>
    <from sec="1039669299" usec="0"/>
    <to sec="1039669304" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="223.109.230.184" src_port="1026"/>
      <from sec="1039669205" usec="0"/>
      <to sec="1039669225" usec="0"/>
    </slice>
    <from sec="1039669205" usec="0"/>
    <to sec="1039669225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="201.100.18.253" dst_port="137" proto="tcp" src_ip="96.43.46.185" src_port="1046"/>
      <filter dst_ip="201.100.18.253" dst_port="137" proto="udp" src_ip="96.43.46.185" src_port="1046"/>
      <filter dst_ip="201.100.18.253" dst_port="80" proto="tcp" src_ip="96.43.46.185" src_port="1046"/>
      <filter dst_ip="201.100.18.253" dst_port="80" proto="udp" src_ip="96.43.46.185" src_port="1046"/>
      <filter dst_ip="201.100.18.253" dst_port="6257" proto="tcp" src_ip="96.43.46.185" src_port="1046"/>
      <filter dst_ip="201.100.18.253" dst_port="6257" proto="udp" src_ip="96.43.46.185" src_port="1046"/>
      <filter dst_ip="201.100.18.253" dst_port="137" proto="tcp" src_ip="96.43.46.185" src_port="6257"/>
      <filter dst_ip="201.100.18.253" dst_port="137" proto="udp" src_ip="96.43.46.185" src_port="6257"/>
      <filter dst_ip="201.100.18.253" dst_port="80" proto="tcp" src_ip="96.43.46.185" src_port="6257"/>
      <filter dst_ip="201.100.18.253" dst_port="80" proto="udp" src_ip="96.43.46.185" src_port="6257"/>
      <filter dst_ip="201.100.18.253" dst_port="6257" proto="tcp" src_ip="96.43.46.185" src_port="6257"/>
      <filter dst_ip="201.100.18.253" dst_port="6257" proto="udp" src_ip="96.43.46.185" src_port="6257"/>
      <from sec="1039669691" usec="0"/>
      <to sec="1039669697" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="201.100.18.253" dst_port="137" proto="tcp" src_ip="140.3.22.185" src_port="1046"/>
      <filter dst_ip="201.100.18.253" dst_port="137" proto="udp" src_ip="140.3.22.185" src_port="1046"/>
      <filter dst_ip="201.100.18.253" dst_port="80" proto="tcp" src_ip="140.3.22.185" src_port="1046"/>
      <filter dst_ip="201.100.18.253" dst_port="80" proto="udp" src_ip="140.3.22.185" src_port="1046"/>
      <filter dst_ip="201.100.18.253" dst_port="6257" proto="tcp" src_ip="140.3.22.185" src_port="1046"/>
      <filter dst_ip="201.100.18.253" dst_port="6257" proto="udp" src_ip="140.3.22.185" src_port="1046"/>
      <filter dst_ip="201.100.18.253" dst_port="137" proto="tcp" src_ip="140.3.22.185" src_port="6257"/>
      <filter dst_ip="201.100.18.253" dst_port="137" proto="udp" src_ip="140.3.22.185" src_port="6257"/>
      <filter dst_ip="201.100.18.253" dst_port="80" proto="tcp" src_ip="140.3.22.185" src_port="6257"/>
      <filter dst_ip="201.100.18.253" dst_port="80" proto="udp" src_ip="140.3.22.185" src_port="6257"/>
      <filter dst_ip="201.100.18.253" dst_port="6257" proto="tcp" src_ip="140.3.22.185" src_port="6257"/>
      <filter dst_ip="201.100.18.253" dst_port="6257" proto="udp" src_ip="140.3.22.185" src_port="6257"/>
      <from sec="1039669693" usec="0"/>
      <to sec="1039669696" usec="0"/>
    </slice>
    <from sec="1039669691" usec="0"/>
    <to sec="1039669697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="96.194.134.186" src_port="1027"/>
      <from sec="1039669495" usec="0"/>
      <to sec="1039669874" usec="0"/>
    </slice>
    <from sec="1039669495" usec="0"/>
    <to sec="1039669874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="140.3.95.121" dst_port="137" proto="tcp" src_ip="39.31.100.190" src_port="1027"/>
      <filter dst_ip="140.3.95.121" dst_port="137" proto="udp" src_ip="39.31.100.190" src_port="1027"/>
      <filter dst_ip="140.3.95.121" dst_port="137" proto="tcp" src_ip="39.31.100.190" src_port="80"/>
      <filter dst_ip="140.3.95.121" dst_port="137" proto="udp" src_ip="39.31.100.190" src_port="80"/>
      <from sec="1039669660" usec="0"/>
      <to sec="1039669687" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="140.3.95.121" dst_port="137" proto="tcp" src_ip="170.73.200.190" src_port="1027"/>
      <filter dst_ip="140.3.95.121" dst_port="137" proto="udp" src_ip="170.73.200.190" src_port="1027"/>
      <filter dst_ip="140.3.95.121" dst_port="137" proto="tcp" src_ip="170.73.200.190" src_port="80"/>
      <filter dst_ip="140.3.95.121" dst_port="137" proto="udp" src_ip="170.73.200.190" src_port="80"/>
      <from sec="1039669672" usec="0"/>
      <to sec="1039669687" usec="0"/>
    </slice>
    <from sec="1039669660" usec="0"/>
    <to sec="1039669687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="96.1.27.192" src_port="1029"/>
      <from sec="1039669691" usec="0"/>
      <to sec="1039669697" usec="0"/>
    </slice>
    <from sec="1039669691" usec="0"/>
    <to sec="1039669697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="196.208.227.196" src_port="1026"/>
      <from sec="1039669343" usec="0"/>
      <to sec="1039669349" usec="0"/>
    </slice>
    <from sec="1039669343" usec="0"/>
    <to sec="1039669349" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="211.124.83.28" dst_port="137" proto="tcp" src_ip="96.146.43.198" src_port="1065"/>
      <filter dst_ip="211.124.83.28" dst_port="137" proto="udp" src_ip="96.146.43.198" src_port="1065"/>
      <filter dst_ip="211.124.83.28" dst_port="80" proto="tcp" src_ip="96.146.43.198" src_port="1065"/>
      <filter dst_ip="211.124.83.28" dst_port="80" proto="udp" src_ip="96.146.43.198" src_port="1065"/>
      <from sec="1039669857" usec="0"/>
      <to sec="1039669873" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="211.124.83.28" dst_port="137" proto="tcp" src_ip="140.3.255.198" src_port="1065"/>
      <filter dst_ip="211.124.83.28" dst_port="137" proto="udp" src_ip="140.3.255.198" src_port="1065"/>
      <filter dst_ip="211.124.83.28" dst_port="80" proto="tcp" src_ip="140.3.255.198" src_port="1065"/>
      <filter dst_ip="211.124.83.28" dst_port="80" proto="udp" src_ip="140.3.255.198" src_port="1065"/>
      <from sec="1039669867" usec="0"/>
      <to sec="1039669873" usec="0"/>
    </slice>
    <from sec="1039669857" usec="0"/>
    <to sec="1039669873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="211.193.199.202" src_port="1027"/>
      <filter dst_port="137" proto="udp" src_ip="211.193.199.202" src_port="1027"/>
      <from sec="1039669701" usec="0"/>
      <to sec="1039669707" usec="0"/>
    </slice>
    <from sec="1039669701" usec="0"/>
    <to sec="1039669707" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="64.199.25.204" src_port="1025"/>
      <from sec="1039669670" usec="0"/>
      <to sec="1039669682" usec="0"/>
    </slice>
    <from sec="1039669670" usec="0"/>
    <to sec="1039669682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="98.139.94.1" dst_port="137" proto="tcp" src_ip="214.132.100.208" src_port="1028"/>
      <filter dst_ip="98.139.94.1" dst_port="137" proto="udp" src_ip="214.132.100.208" src_port="1028"/>
      <filter dst_ip="98.139.94.1" dst_port="3350" proto="tcp" src_ip="214.132.100.208" src_port="1028"/>
      <filter dst_ip="98.139.94.1" dst_port="3350" proto="udp" src_ip="214.132.100.208" src_port="1028"/>
      <filter dst_ip="98.139.94.1" dst_port="137" proto="tcp" src_ip="214.132.100.208" src_port="80"/>
      <filter dst_ip="98.139.94.1" dst_port="137" proto="udp" src_ip="214.132.100.208" src_port="80"/>
      <filter dst_ip="98.139.94.1" dst_port="3350" proto="tcp" src_ip="214.132.100.208" src_port="80"/>
      <filter dst_ip="98.139.94.1" dst_port="3350" proto="udp" src_ip="214.132.100.208" src_port="80"/>
      <filter dst_ip="98.139.94.1" dst_port="137" proto="tcp" src_ip="214.132.100.208" src_port="25"/>
      <filter dst_ip="98.139.94.1" dst_port="137" proto="udp" src_ip="214.132.100.208" src_port="25"/>
      <filter dst_ip="98.139.94.1" dst_port="3350" proto="tcp" src_ip="214.132.100.208" src_port="25"/>
      <filter dst_ip="98.139.94.1" dst_port="3350" proto="udp" src_ip="214.132.100.208" src_port="25"/>
      <from sec="1039669706" usec="0"/>
      <to sec="1039669712" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="98.139.94.1" dst_port="137" proto="tcp" src_ip="156.69.252.208" src_port="1028"/>
      <filter dst_ip="98.139.94.1" dst_port="137" proto="udp" src_ip="156.69.252.208" src_port="1028"/>
      <filter dst_ip="98.139.94.1" dst_port="3350" proto="tcp" src_ip="156.69.252.208" src_port="1028"/>
      <filter dst_ip="98.139.94.1" dst_port="3350" proto="udp" src_ip="156.69.252.208" src_port="1028"/>
      <filter dst_ip="98.139.94.1" dst_port="137" proto="tcp" src_ip="156.69.252.208" src_port="80"/>
      <filter dst_ip="98.139.94.1" dst_port="137" proto="udp" src_ip="156.69.252.208" src_port="80"/>
      <filter dst_ip="98.139.94.1" dst_port="3350" proto="tcp" src_ip="156.69.252.208" src_port="80"/>
      <filter dst_ip="98.139.94.1" dst_port="3350" proto="udp" src_ip="156.69.252.208" src_port="80"/>
      <filter dst_ip="98.139.94.1" dst_port="137" proto="tcp" src_ip="156.69.252.208" src_port="25"/>
      <filter dst_ip="98.139.94.1" dst_port="137" proto="udp" src_ip="156.69.252.208" src_port="25"/>
      <filter dst_ip="98.139.94.1" dst_port="3350" proto="tcp" src_ip="156.69.252.208" src_port="25"/>
      <filter dst_ip="98.139.94.1" dst_port="3350" proto="udp" src_ip="156.69.252.208" src_port="25"/>
      <from sec="1039669709" usec="0"/>
      <to sec="1039669712" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="98.139.94.1" dst_port="137" proto="tcp" src_ip="169.126.164.208" src_port="1028"/>
      <filter dst_ip="98.139.94.1" dst_port="137" proto="udp" src_ip="169.126.164.208" src_port="1028"/>
      <filter dst_ip="98.139.94.1" dst_port="3350" proto="tcp" src_ip="169.126.164.208" src_port="1028"/>
      <filter dst_ip="98.139.94.1" dst_port="3350" proto="udp" src_ip="169.126.164.208" src_port="1028"/>
      <filter dst_ip="98.139.94.1" dst_port="137" proto="tcp" src_ip="169.126.164.208" src_port="80"/>
      <filter dst_ip="98.139.94.1" dst_port="137" proto="udp" src_ip="169.126.164.208" src_port="80"/>
      <filter dst_ip="98.139.94.1" dst_port="3350" proto="tcp" src_ip="169.126.164.208" src_port="80"/>
      <filter dst_ip="98.139.94.1" dst_port="3350" proto="udp" src_ip="169.126.164.208" src_port="80"/>
      <filter dst_ip="98.139.94.1" dst_port="137" proto="tcp" src_ip="169.126.164.208" src_port="25"/>
      <filter dst_ip="98.139.94.1" dst_port="137" proto="udp" src_ip="169.126.164.208" src_port="25"/>
      <filter dst_ip="98.139.94.1" dst_port="3350" proto="tcp" src_ip="169.126.164.208" src_port="25"/>
      <filter dst_ip="98.139.94.1" dst_port="3350" proto="udp" src_ip="169.126.164.208" src_port="25"/>
      <from sec="1039669706" usec="0"/>
      <to sec="1039669711" usec="0"/>
    </slice>
    <from sec="1039669706" usec="0"/>
    <to sec="1039669712" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="215.87.64.183" dst_port="137" proto="tcp" src_ip="61.101.197.212" src_port="1026"/>
      <filter dst_ip="215.87.64.183" dst_port="137" proto="udp" src_ip="61.101.197.212" src_port="1026"/>
      <filter dst_ip="215.87.64.183" dst_port="137" proto="tcp" src_ip="61.101.197.212" src_port="1024"/>
      <filter dst_ip="215.87.64.183" dst_port="137" proto="udp" src_ip="61.101.197.212" src_port="1024"/>
      <filter dst_ip="215.87.64.183" dst_port="137" proto="tcp" src_ip="61.101.197.212" src_port="80"/>
      <filter dst_ip="215.87.64.183" dst_port="137" proto="udp" src_ip="61.101.197.212" src_port="80"/>
      <from sec="1039669628" usec="0"/>
      <to sec="1039669702" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="215.87.64.183" dst_port="137" proto="tcp" src_ip="36.128.213.212" src_port="1026"/>
      <filter dst_ip="215.87.64.183" dst_port="137" proto="udp" src_ip="36.128.213.212" src_port="1026"/>
      <filter dst_ip="215.87.64.183" dst_port="137" proto="tcp" src_ip="36.128.213.212" src_port="1024"/>
      <filter dst_ip="215.87.64.183" dst_port="137" proto="udp" src_ip="36.128.213.212" src_port="1024"/>
      <filter dst_ip="215.87.64.183" dst_port="137" proto="tcp" src_ip="36.128.213.212" src_port="80"/>
      <filter dst_ip="215.87.64.183" dst_port="137" proto="udp" src_ip="36.128.213.212" src_port="80"/>
      <from sec="1039669635" usec="0"/>
      <to sec="1039669678" usec="0"/>
    </slice>
    <from sec="1039669628" usec="0"/>
    <to sec="1039669702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="202.173.76.224" src_port="1028"/>
      <filter dst_port="137" proto="icmp" src_ip="202.173.76.224" src_port="1028"/>
      <from sec="1039669205" usec="0"/>
      <to sec="1039669211" usec="0"/>
    </slice>
    <from sec="1039669205" usec="0"/>
    <to sec="1039669211" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.231.185.25" dst_port="137" proto="tcp" src_ip="204.84.198.232" src_port="1025"/>
      <filter dst_ip="214.231.185.25" dst_port="137" proto="udp" src_ip="204.84.198.232" src_port="1025"/>
      <filter dst_ip="214.231.185.25" dst_port="137" proto="tcp" src_ip="204.84.198.232" src_port="80"/>
      <filter dst_ip="214.231.185.25" dst_port="137" proto="udp" src_ip="204.84.198.232" src_port="80"/>
      <from sec="1039669575" usec="0"/>
      <to sec="1039669601" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="214.231.185.25" dst_port="137" proto="tcp" src_ip="211.45.226.232" src_port="1025"/>
      <filter dst_ip="214.231.185.25" dst_port="137" proto="udp" src_ip="211.45.226.232" src_port="1025"/>
      <filter dst_ip="214.231.185.25" dst_port="137" proto="tcp" src_ip="211.45.226.232" src_port="80"/>
      <filter dst_ip="214.231.185.25" dst_port="137" proto="udp" src_ip="211.45.226.232" src_port="80"/>
      <from sec="1039669597" usec="0"/>
      <to sec="1039669602" usec="0"/>
    </slice>
    <from sec="1039669575" usec="0"/>
    <to sec="1039669602" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="169.126.149.32" dst_port="137" proto="tcp" src_ip="192.210.0.237" src_port="1024"/>
      <filter dst_ip="169.126.149.32" dst_port="137" proto="udp" src_ip="192.210.0.237" src_port="1024"/>
      <filter dst_ip="169.126.149.32" dst_port="137" proto="icmp" src_ip="192.210.0.237" src_port="1024"/>
      <filter dst_ip="169.126.149.32" dst_port="25" proto="tcp" src_ip="192.210.0.237" src_port="1024"/>
      <filter dst_ip="169.126.149.32" dst_port="25" proto="udp" src_ip="192.210.0.237" src_port="1024"/>
      <filter dst_ip="169.126.149.32" dst_port="25" proto="icmp" src_ip="192.210.0.237" src_port="1024"/>
      <filter dst_ip="169.126.149.32" dst_port="137" proto="tcp" src_ip="192.210.0.237" src_port="61841"/>
      <filter dst_ip="169.126.149.32" dst_port="137" proto="udp" src_ip="192.210.0.237" src_port="61841"/>
      <filter dst_ip="169.126.149.32" dst_port="137" proto="icmp" src_ip="192.210.0.237" src_port="61841"/>
      <filter dst_ip="169.126.149.32" dst_port="25" proto="tcp" src_ip="192.210.0.237" src_port="61841"/>
      <filter dst_ip="169.126.149.32" dst_port="25" proto="udp" src_ip="192.210.0.237" src_port="61841"/>
      <filter dst_ip="169.126.149.32" dst_port="25" proto="icmp" src_ip="192.210.0.237" src_port="61841"/>
      <from sec="1039669686" usec="0"/>
      <to sec="1039669692" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="169.126.149.32" dst_port="137" proto="tcp" src_ip="138.165.208.237" src_port="1024"/>
      <filter dst_ip="169.126.149.32" dst_port="137" proto="udp" src_ip="138.165.208.237" src_port="1024"/>
      <filter dst_ip="169.126.149.32" dst_port="137" proto="icmp" src_ip="138.165.208.237" src_port="1024"/>
      <filter dst_ip="169.126.149.32" dst_port="25" proto="tcp" src_ip="138.165.208.237" src_port="1024"/>
      <filter dst_ip="169.126.149.32" dst_port="25" proto="udp" src_ip="138.165.208.237" src_port="1024"/>
      <filter dst_ip="169.126.149.32" dst_port="25" proto="icmp" src_ip="138.165.208.237" src_port="1024"/>
      <filter dst_ip="169.126.149.32" dst_port="137" proto="tcp" src_ip="138.165.208.237" src_port="61841"/>
      <filter dst_ip="169.126.149.32" dst_port="137" proto="udp" src_ip="138.165.208.237" src_port="61841"/>
      <filter dst_ip="169.126.149.32" dst_port="137" proto="icmp" src_ip="138.165.208.237" src_port="61841"/>
      <filter dst_ip="169.126.149.32" dst_port="25" proto="tcp" src_ip="138.165.208.237" src_port="61841"/>
      <filter dst_ip="169.126.149.32" dst_port="25" proto="udp" src_ip="138.165.208.237" src_port="61841"/>
      <filter dst_ip="169.126.149.32" dst_port="25" proto="icmp" src_ip="138.165.208.237" src_port="61841"/>
      <from sec="1039669686" usec="0"/>
      <to sec="1039669692" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="169.126.149.32" dst_port="137" proto="tcp" src_ip="215.21.4.237" src_port="1024"/>
      <filter dst_ip="169.126.149.32" dst_port="137" proto="udp" src_ip="215.21.4.237" src_port="1024"/>
      <filter dst_ip="169.126.149.32" dst_port="137" proto="icmp" src_ip="215.21.4.237" src_port="1024"/>
      <filter dst_ip="169.126.149.32" dst_port="25" proto="tcp" src_ip="215.21.4.237" src_port="1024"/>
      <filter dst_ip="169.126.149.32" dst_port="25" proto="udp" src_ip="215.21.4.237" src_port="1024"/>
      <filter dst_ip="169.126.149.32" dst_port="25" proto="icmp" src_ip="215.21.4.237" src_port="1024"/>
      <filter dst_ip="169.126.149.32" dst_port="137" proto="tcp" src_ip="215.21.4.237" src_port="61841"/>
      <filter dst_ip="169.126.149.32" dst_port="137" proto="udp" src_ip="215.21.4.237" src_port="61841"/>
      <filter dst_ip="169.126.149.32" dst_port="137" proto="icmp" src_ip="215.21.4.237" src_port="61841"/>
      <filter dst_ip="169.126.149.32" dst_port="25" proto="tcp" src_ip="215.21.4.237" src_port="61841"/>
      <filter dst_ip="169.126.149.32" dst_port="25" proto="udp" src_ip="215.21.4.237" src_port="61841"/>
      <filter dst_ip="169.126.149.32" dst_port="25" proto="icmp" src_ip="215.21.4.237" src_port="61841"/>
      <from sec="1039669687" usec="0"/>
      <to sec="1039669691" usec="0"/>
    </slice>
    <from sec="1039669686" usec="0"/>
    <to sec="1039669692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="36.232.19.245" src_port="1030"/>
      <from sec="1039669716" usec="0"/>
      <to sec="1039669752" usec="0"/>
    </slice>
    <from sec="1039669716" usec="0"/>
    <to sec="1039669752" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="96.29.100.6"/>
      <from sec="1039669389" usec="0"/>
      <to sec="1039669395" usec="0"/>
    </slice>
    <from sec="1039669389" usec="0"/>
    <to sec="1039669395" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="98.171.141.60"/>
      <filter dst_port="137" proto="udp" src_ip="98.171.141.60"/>
      <from sec="1039669229" usec="0"/>
      <to sec="1039669256" usec="0"/>
    </slice>
    <from sec="1039669229" usec="0"/>
    <to sec="1039669256" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="38.96.66.123" dst_port="80" proto="tcp" src_ip="169.126.142.113" src_port="1029"/>
      <filter dst_ip="38.96.66.123" dst_port="80" proto="udp" src_ip="169.126.142.113" src_port="1029"/>
      <filter dst_ip="38.96.66.123" dst_port="137" proto="tcp" src_ip="169.126.142.113" src_port="1029"/>
      <filter dst_ip="38.96.66.123" dst_port="137" proto="udp" src_ip="169.126.142.113" src_port="1029"/>
      <from sec="1039669215" usec="0"/>
      <to sec="1039669596" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="38.96.66.123" dst_port="80" proto="tcp" src_ip="197.56.186.113" src_port="1029"/>
      <filter dst_ip="38.96.66.123" dst_port="80" proto="udp" src_ip="197.56.186.113" src_port="1029"/>
      <filter dst_ip="38.96.66.123" dst_port="137" proto="tcp" src_ip="197.56.186.113" src_port="1029"/>
      <filter dst_ip="38.96.66.123" dst_port="137" proto="udp" src_ip="197.56.186.113" src_port="1029"/>
      <from sec="1039669215" usec="0"/>
      <to sec="1039669220" usec="0"/>
    </slice>
    <from sec="1039669215" usec="0"/>
    <to sec="1039669596" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="197.108.96.160"/>
      <from sec="1039669767" usec="0"/>
      <to sec="1039669773" usec="0"/>
    </slice>
    <from sec="1039669767" usec="0"/>
    <to sec="1039669773" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="217.134.108.97" dst_port="80" proto="tcp" src_ip="140.3.244.160" src_port="1027"/>
      <filter dst_ip="217.134.108.97" dst_port="80" proto="udp" src_ip="140.3.244.160" src_port="1027"/>
      <filter dst_ip="217.134.108.97" dst_port="137" proto="tcp" src_ip="140.3.244.160" src_port="1027"/>
      <filter dst_ip="217.134.108.97" dst_port="137" proto="udp" src_ip="140.3.244.160" src_port="1027"/>
      <filter dst_ip="217.134.111.137" dst_port="80" proto="tcp" src_ip="140.3.244.160" src_port="1027"/>
      <filter dst_ip="217.134.111.137" dst_port="80" proto="udp" src_ip="140.3.244.160" src_port="1027"/>
      <filter dst_ip="217.134.111.137" dst_port="137" proto="tcp" src_ip="140.3.244.160" src_port="1027"/>
      <filter dst_ip="217.134.111.137" dst_port="137" proto="udp" src_ip="140.3.244.160" src_port="1027"/>
      <from sec="1039669205" usec="0"/>
      <to sec="1039669211" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="217.134.108.97" dst_port="80" proto="tcp" src_ip="96.159.248.160" src_port="1027"/>
      <filter dst_ip="217.134.108.97" dst_port="80" proto="udp" src_ip="96.159.248.160" src_port="1027"/>
      <filter dst_ip="217.134.108.97" dst_port="137" proto="tcp" src_ip="96.159.248.160" src_port="1027"/>
      <filter dst_ip="217.134.108.97" dst_port="137" proto="udp" src_ip="96.159.248.160" src_port="1027"/>
      <filter dst_ip="217.134.111.137" dst_port="80" proto="tcp" src_ip="96.159.248.160" src_port="1027"/>
      <filter dst_ip="217.134.111.137" dst_port="80" proto="udp" src_ip="96.159.248.160" src_port="1027"/>
      <filter dst_ip="217.134.111.137" dst_port="137" proto="tcp" src_ip="96.159.248.160" src_port="1027"/>
      <filter dst_ip="217.134.111.137" dst_port="137" proto="udp" src_ip="96.159.248.160" src_port="1027"/>
      <from sec="1039669205" usec="0"/>
      <to sec="1039669211" usec="0"/>
    </slice>
    <from sec="1039669205" usec="0"/>
    <to sec="1039669211" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="140.138.106.241"/>
      <from sec="1039669813" usec="0"/>
      <to sec="1039669819" usec="0"/>
    </slice>
    <from sec="1039669813" usec="0"/>
    <to sec="1039669819" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.216.48.172" dst_port="53" proto="udp" src_ip="200.96.107.106" src_port="32768"/>
      <filter dst_ip="214.216.48.172" dst_port="53" proto="udp" src_ip="200.96.107.106" src_port="32768"/>
      <filter dst_ip="214.216.48.172" dst_port="53" proto="udp" src_ip="200.96.107.106" src_port="32768"/>
      <filter dst_ip="214.216.48.172" dst_port="53" proto="udp" src_ip="200.96.107.106" src_port="32768"/>
      <filter dst_ip="214.216.48.172" dst_port="137" proto="udp" src_ip="200.96.107.106" src_port="32768"/>
      <filter dst_ip="214.216.48.172" dst_port="137" proto="udp" src_ip="200.96.107.106" src_port="32768"/>
      <filter dst_ip="214.216.48.172" dst_port="137" proto="udp" src_ip="200.96.107.106" src_port="32768"/>
      <filter dst_ip="214.216.48.172" dst_port="137" proto="udp" src_ip="200.96.107.106" src_port="32768"/>
      <filter dst_ip="214.216.48.172" dst_port="53" proto="udp" src_ip="200.96.107.106" src_port="32770"/>
      <filter dst_ip="214.216.48.172" dst_port="53" proto="udp" src_ip="200.96.107.106" src_port="32770"/>
      <filter dst_ip="214.216.48.172" dst_port="53" proto="udp" src_ip="200.96.107.106" src_port="32770"/>
      <filter dst_ip="214.216.48.172" dst_port="53" proto="udp" src_ip="200.96.107.106" src_port="32770"/>
      <filter dst_ip="214.216.48.172" dst_port="137" proto="udp" src_ip="200.96.107.106" src_port="32770"/>
      <filter dst_ip="214.216.48.172" dst_port="137" proto="udp" src_ip="200.96.107.106" src_port="32770"/>
      <filter dst_ip="214.216.48.172" dst_port="137" proto="udp" src_ip="200.96.107.106" src_port="32770"/>
      <filter dst_ip="214.216.48.172" dst_port="137" proto="udp" src_ip="200.96.107.106" src_port="32770"/>
      <filter dst_ip="214.216.48.172" dst_port="53" proto="udp" src_ip="200.96.107.106" src_port="32782"/>
      <filter dst_ip="214.216.48.172" dst_port="53" proto="udp" src_ip="200.96.107.106" src_port="32782"/>
      <filter dst_ip="214.216.48.172" dst_port="53" proto="udp" src_ip="200.96.107.106" src_port="32782"/>
      <filter dst_ip="214.216.48.172" dst_port="53" proto="udp" src_ip="200.96.107.106" src_port="32782"/>
      <filter dst_ip="214.216.48.172" dst_port="137" proto="udp" src_ip="200.96.107.106" src_port="32782"/>
      <filter dst_ip="214.216.48.172" dst_port="137" proto="udp" src_ip="200.96.107.106" src_port="32782"/>
      <filter dst_ip="214.216.48.172" dst_port="137" proto="udp" src_ip="200.96.107.106" src_port="32782"/>
      <filter dst_ip="214.216.48.172" dst_port="137" proto="udp" src_ip="200.96.107.106" src_port="32782"/>
      <from sec="1039669533" usec="0"/>
      <to sec="1039669541" usec="0"/>
    </slice>
    <from sec="1039669533" usec="0"/>
    <to sec="1039669542" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="61.0.196.246" dst_port="1212" proto="tcp" src_ip="142.5.91.209" src_port="80"/>
      <filter dst_ip="61.0.196.246" dst_port="1212" proto="icmp" src_ip="142.5.91.209" src_port="80"/>
      <filter dst_ip="61.0.196.246" dst_port="1212" proto="tcp" src_ip="142.5.91.209" src_port="80"/>
      <filter dst_ip="61.0.196.246" dst_port="1212" proto="icmp" src_ip="142.5.91.209" src_port="80"/>
      <filter dst_ip="61.0.196.246" dst_port="1212" proto="tcp" src_ip="142.5.91.209" src_port="80"/>
      <filter dst_ip="61.0.196.246" dst_port="1212" proto="icmp" src_ip="142.5.91.209" src_port="80"/>
      <filter dst_ip="61.0.196.246" dst_port="1212" proto="tcp" src_ip="142.5.91.209" src_port="80"/>
      <filter dst_ip="61.0.196.246" dst_port="1212" proto="icmp" src_ip="142.5.91.209" src_port="80"/>
      <from sec="1039669873" usec="0"/>
      <to sec="1039669884" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="140.3.4.246" dst_port="1212" proto="tcp" src_ip="142.5.91.209" src_port="80"/>
      <filter dst_ip="140.3.4.246" dst_port="1212" proto="icmp" src_ip="142.5.91.209" src_port="80"/>
      <filter dst_ip="140.3.4.246" dst_port="1212" proto="tcp" src_ip="142.5.91.209" src_port="80"/>
      <filter dst_ip="140.3.4.246" dst_port="1212" proto="icmp" src_ip="142.5.91.209" src_port="80"/>
      <filter dst_ip="140.3.4.246" dst_port="1212" proto="tcp" src_ip="142.5.91.209" src_port="80"/>
      <filter dst_ip="140.3.4.246" dst_port="1212" proto="icmp" src_ip="142.5.91.209" src_port="80"/>
      <filter dst_ip="140.3.4.246" dst_port="1212" proto="tcp" src_ip="142.5.91.209" src_port="80"/>
      <filter dst_ip="140.3.4.246" dst_port="1212" proto="icmp" src_ip="142.5.91.209" src_port="80"/>
      <from sec="1039669873" usec="0"/>
      <to sec="1039669883" usec="0"/>
    </slice>
    <from sec="1039669873" usec="0"/>
    <to sec="1039669884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="64.125.77.213" proto="icmp"/>
      <filter dst_ip="64.125.77.213" proto="icmp"/>
      <filter dst_ip="64.125.77.213" proto="icmp"/>
      <filter dst_ip="64.125.77.213" proto="icmp"/>
      <from sec="1039669784" usec="0"/>
      <to sec="1039669787" usec="0"/>
    </slice>
    <from sec="1039669782" usec="0"/>
    <to sec="1039669787" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="211.192.27.45" proto="tcp"/>
      <filter dst_ip="211.192.27.45" proto="icmp"/>
      <filter dst_ip="211.192.27.45" proto="tcp"/>
      <filter dst_ip="211.192.27.45" proto="icmp"/>
      <filter dst_ip="211.192.27.45" proto="tcp"/>
      <filter dst_ip="211.192.27.45" proto="icmp"/>
      <filter dst_ip="211.192.27.45" proto="tcp"/>
      <filter dst_ip="211.192.27.45" proto="icmp"/>
      <from sec="1039669234" usec="0"/>
      <to sec="1039669240" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="202.169.15.45" proto="tcp"/>
      <filter dst_ip="202.169.15.45" proto="icmp"/>
      <filter dst_ip="202.169.15.45" proto="tcp"/>
      <filter dst_ip="202.169.15.45" proto="icmp"/>
      <filter dst_ip="202.169.15.45" proto="tcp"/>
      <filter dst_ip="202.169.15.45" proto="icmp"/>
      <filter dst_ip="202.169.15.45" proto="tcp"/>
      <filter dst_ip="202.169.15.45" proto="icmp"/>
      <from sec="1039669234" usec="0"/>
      <to sec="1039669240" usec="0"/>
    </slice>
    <from sec="1039669234" usec="0"/>
    <to sec="1039669240" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="98.1.9.98" proto="icmp"/>
      <filter dst_ip="98.1.9.98" proto="icmp"/>
      <filter dst_ip="98.1.9.98" proto="icmp"/>
      <filter dst_ip="98.1.9.98" proto="icmp"/>
      <from sec="1039669444" usec="0"/>
      <to sec="1039669450" usec="0"/>
    </slice>
    <from sec="1039669444" usec="0"/>
    <to sec="1039669450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="96.12.146.174" proto="tcp"/>
      <filter dst_ip="96.12.146.174" proto="udp"/>
      <filter dst_ip="96.12.146.174" proto="icmp"/>
      <filter dst_ip="96.12.146.174" proto="tcp"/>
      <filter dst_ip="96.12.146.174" proto="udp"/>
      <filter dst_ip="96.12.146.174" proto="icmp"/>
      <filter dst_ip="96.12.146.174" proto="tcp"/>
      <filter dst_ip="96.12.146.174" proto="udp"/>
      <filter dst_ip="96.12.146.174" proto="icmp"/>
      <filter dst_ip="96.12.146.174" proto="tcp"/>
      <filter dst_ip="96.12.146.174" proto="udp"/>
      <filter dst_ip="96.12.146.174" proto="icmp"/>
      <from sec="1039669889" usec="0"/>
      <to sec="1039669895" usec="0"/>
    </slice>
    <from sec="1039669889" usec="0"/>
    <to sec="1039669895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="223.109.230.184" proto="icmp"/>
      <filter dst_ip="223.109.230.184" proto="icmp"/>
      <filter dst_ip="223.109.230.184" proto="icmp"/>
      <filter dst_ip="223.109.230.184" proto="icmp"/>
      <from sec="1039669210" usec="0"/>
      <to sec="1039669220" usec="0"/>
    </slice>
    <from sec="1039669210" usec="0"/>
    <to sec="1039669220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19604,1.81002,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_104{
style=filled;
color=gray75;
261[label="138.186.176.168s;1pkt 1fpkt", shape=rectangle, color=red];
433[label="198.99.13.219;d;1pkt 1fpkt", shape=diamond, color=yellow];
435[label="138.186.176.168;s;224pkt 224fpkt", shape=diamond, color=yellow];
666[label="33.44.136.1;d;1pkt 1fpkt", shape=diamond, color=yellow];
916[label="64.65.58.223;d;1pkt 1fpkt", shape=diamond, color=yellow];
988[label="37.100.208.78;d;3pkt 3fpkt", shape=diamond, color=yellow];
1513[label="61.49.69.23;d;1pkt 1fpkt", shape=diamond, color=yellow];
1972[label="99.240.14.234;d;2pkt 2fpkt", shape=diamond, color=yellow];
2365[label="193.131.54.20;d;1pkt 1fpkt", shape=diamond, color=yellow];
2571[label="138.186.176.168;s;224pkt 224fpkt", shape=hexagon, color=black];
2766[label="61.49.69.23;d;1pkt 1fpkt", shape=hexagon, color=black];
2887[label="64.65.58.223;d;1pkt 1fpkt", shape=hexagon, color=black];
4852[label="138.186.176.168;244pkt 244fpkt", shape=pentagon, color=darkviolet];
6608[label="138.186.176.168;244pkt 244fpkt", shape=invtriangle, color=brown];
7727[label="138.186.176.168;245pkt 245fpkt", shape=invhouse, color=bisque];
stat104[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.176.168:6257, *:6257}[90.2834%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (91.2898%)&lt;BR/&gt; 6699: (2.72194%)&lt;BR/&gt; 80: (0.628141%)&lt;BR/&gt; 1863: (0.41876%)&lt;BR/&gt; 2835: (0.293132%)&gt;];
}
261--433[label="1;1pkt 1fpkt"];
261--435[label="1;1pkt 1fpkt"];
261--2571[label="1;1pkt 1fpkt"];
261--4852[label="1;1pkt 1fpkt"];
261--6608[label="1;1pkt 1fpkt"];
261--7727[label="1;1pkt 1fpkt"];
433--435[label="1;1pkt 1fpkt"];
433--2571[label="1;1pkt 1fpkt"];
433--4852[label="1;1pkt 1fpkt"];
433--6608[label="1;1pkt 1fpkt"];
433--7727[label="1;1pkt 1fpkt"];
435--666[label="1;1pkt 1fpkt"];
435--722[label="0.0133929;3pkt 3fpkt"];
435--916[label="1;1pkt 1fpkt"];
435--988[label="0.333333;1pkt 1fpkt"];
435--1513[label="1;1pkt 1fpkt"];
435--1972[label="1;2pkt 2fpkt"];
435--2365[label="1;1pkt 1fpkt"];
435--2571[label="1;224pkt 224fpkt"];
435--2766[label="1;1pkt 1fpkt"];
435--2887[label="1;1pkt 1fpkt"];
435--4852[label="0.995536;223pkt 223fpkt"];
435--6608[label="0.995536;223pkt 223fpkt"];
435--7727[label="1;224pkt 224fpkt"];
666--2571[label="1;1pkt 1fpkt"];
666--4852[label="1;1pkt 1fpkt"];
666--6608[label="1;1pkt 1fpkt"];
666--7727[label="1;1pkt 1fpkt"];
916--2571[label="1;1pkt 1fpkt"];
916--2887[label="1;1pkt 1fpkt"];
916--4852[label="1;1pkt 1fpkt"];
916--6608[label="1;1pkt 1fpkt"];
916--7727[label="1;1pkt 1fpkt"];
988--2463[label="0.333333;1pkt 1fpkt"];
988--2571[label="0.333333;1pkt 1fpkt"];
988--4226[label="0.666667;2pkt 2fpkt"];
988--4852[label="0.333333;1pkt 1fpkt"];
988--6189[label="0.666667;2pkt 2fpkt"];
988--6608[label="0.333333;1pkt 1fpkt"];
988--7463[label="0.666667;2pkt 2fpkt"];
988--7727[label="0.333333;1pkt 1fpkt"];
1513--2571[label="1;1pkt 1fpkt"];
1513--2766[label="1;1pkt 1fpkt"];
1513--4852[label="1;1pkt 1fpkt"];
1513--6608[label="1;1pkt 1fpkt"];
1513--7727[label="1;1pkt 1fpkt"];
1972--2571[label="1;2pkt 2fpkt"];
1972--4852[label="1;2pkt 2fpkt"];
1972--6608[label="1;2pkt 2fpkt"];
1972--7727[label="1;2pkt 2fpkt"];
2365--2571[label="1;1pkt 1fpkt"];
2365--4852[label="1;1pkt 1fpkt"];
2365--6608[label="1;1pkt 1fpkt"];
2365--7727[label="1;1pkt 1fpkt"];
2571--2766[label="1;1pkt 1fpkt"];
2571--2887[label="1;1pkt 1fpkt"];
2571--4852[label="0.995536;223pkt 223fpkt"];
2571--6608[label="0.995536;223pkt 223fpkt"];
2571--7727[label="1;224pkt 224fpkt"];
2766--4852[label="1;1pkt 1fpkt"];
2766--6608[label="1;1pkt 1fpkt"];
2766--7727[label="1;1pkt 1fpkt"];
2887--4852[label="1;1pkt 1fpkt"];
2887--6608[label="1;1pkt 1fpkt"];
2887--7727[label="1;1pkt 1fpkt"];
4852--6608[label="1;244pkt 244fpkt"];
4852--7727[label="1;244pkt 244fpkt"];
6608--7727[label="1;244pkt 244fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="138.186.176.168" src_port="6257"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887316,1.79576,999,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_105{
style=filled;
color=gray75;
57[label="198.99.13.219s;1pkt 1fpkt", shape=rectangle, color=red];
434[label="198.99.13.219;s;1pkt 1fpkt", shape=diamond, color=yellow];
1213[label="138.186.176.168;d;92pkt 92fpkt", shape=diamond, color=yellow];
1260[label="61.49.69.23;s;1pkt 1fpkt", shape=diamond, color=yellow];
1373[label="64.210.53.211;s;1pkt 1fpkt", shape=diamond, color=yellow];
5202[label="64.210.53.211;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5263[label="198.99.13.219;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6835[label="64.210.53.211;1pkt 1fpkt", shape=invtriangle, color=brown];
stat105[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6257, 138.186.176.168:6257}[85.8696%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (80.8081%)&lt;BR/&gt; 6699: (7.07071%)&lt;BR/&gt; 2750: (2.0202%)&lt;BR/&gt; 2376: (2.0202%)&lt;BR/&gt; 0: (2.0202%)&gt;];
}
57--434[label="1;1pkt 1fpkt"];
57--1213[label="1;1pkt 1fpkt"];
57--5263[label="1;1pkt 1fpkt"];
434--1213[label="1;1pkt 1fpkt"];
434--5263[label="1;1pkt 1fpkt"];
1213--1254[label="1;1pkt 1fpkt"];
1213--1260[label="1;1pkt 1fpkt"];
1213--1373[label="1;1pkt 1fpkt"];
1213--2680[label="0.5;1pkt 1fpkt"];
1213--4040[label="1;1pkt 1fpkt"];
1213--5202[label="1;1pkt 1fpkt"];
1213--5263[label="1;1pkt 1fpkt"];
1213--6071[label="0.5;1pkt 1fpkt"];
1213--6835[label="1;1pkt 1fpkt"];
1373--5202[label="1;1pkt 1fpkt"];
1373--6835[label="1;1pkt 1fpkt"];
5202--6835[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.176.168" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887316,1.79576,999,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_106{
style=filled;
color=gray75;
0[label="138.186.137.1s;1pkt 1fpkt", shape=rectangle, color=red];
441[label="138.186.137.1;s;3pkt 3fpkt", shape=diamond, color=yellow];
442[label="203.42.52.49;d;1pkt 1fpkt", shape=diamond, color=yellow];
3206[label="138.186.137.1;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5538[label="138.186.137.1;2pkt 2fpkt", shape=invtriangle, color=brown];
stat106[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.137.1:7743, 203.42.52.49:9820}[33.3333%]&lt;BR/&gt;{138.186.137.1:4856, 96.84.89.167:24178}[33.3333%]&lt;BR/&gt;{138.186.137.1:7743, 96.84.89.167:4700}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7743: (35%)&lt;BR/&gt; 9820: (20%)&lt;BR/&gt; 24178: (15%)&lt;BR/&gt; 4856: (15%)&lt;BR/&gt; 4700: (15%)&gt;];
}
0--441[label="1;1pkt 1fpkt"];
0--442[label="1;1pkt 1fpkt"];
0--3206[label="1;1pkt 1fpkt"];
441--442[label="1;1pkt 1fpkt"];
441--3206[label="1;3pkt 3fpkt"];
441--5538[label="1;2pkt 2fpkt"];
442--3206[label="1;1pkt 1fpkt"];
3206--5538[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="96.84.89.167" dst_port="4700" src_ip="138.186.137.1" src_port="7743"/>
      <filter dst_ip="96.84.89.167" dst_port="24178" src_ip="138.186.137.1" src_port="4856"/>
      <filter dst_ip="203.42.52.49" dst_port="9820" src_ip="138.186.137.1" src_port="7743"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,002,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_107{
style=filled;
color=gray75;
440[label="138.186.137.1;d;7pkt 7fpkt", shape=diamond, color=yellow];
443[label="203.42.52.49;s;1pkt 1fpkt", shape=diamond, color=yellow];
760[label="203.52.54.95;s;5pkt 5fpkt", shape=diamond, color=yellow];
4592[label="192.133.157.140;231pkt 231fpkt", shape=pentagon, color=darkviolet];
stat107[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.133.157.140:1027, *:137}[97.4684%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (47.541%)&lt;BR/&gt; 137: (47.541%)&lt;BR/&gt; 7743: (2.45902%)&lt;BR/&gt; 9820: (0.409836%)&lt;BR/&gt; 4864: (0.409836%)&gt;];
}
440--443[label="1;1pkt 1fpkt"];
440--760[label="1;5pkt 5fpkt"];
440--4592[label="0.142857;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="192.133.157.140" src_port="1027"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11796,1.82888,503,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_108{
style=filled;
color=gray75;
38[label="199.94.108.158s;1pkt 1fpkt", shape=rectangle, color=red];
450[label="140.3.132.160;d;7pkt 7fpkt", shape=diamond, color=yellow];
452[label="199.94.108.158;s;6pkt 6fpkt", shape=diamond, color=yellow];
2739[label="199.94.108.158;s;5pkt 5fpkt", shape=hexagon, color=black];
4747[label="199.94.108.158;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6540[label="199.94.108.158;6pkt 6fpkt", shape=invtriangle, color=brown];
stat108[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.94.108.158:80, 140.3.132.160:*}[44.4444%]&lt;BR/&gt;{211.90.98.69:80, 140.3.132.160:*}[33.3333%]&lt;BR/&gt;{199.94.108.158:80, 138.186.52.97:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1079: (10%)&lt;BR/&gt; 1077: (8.33333%)&lt;BR/&gt; 1075: (8.33333%)&lt;BR/&gt; 1296: (6.66667%)&gt;];
}
38--450[label="1;1pkt 1fpkt"];
38--452[label="1;1pkt 1fpkt"];
38--2739[label="1;1pkt 1fpkt"];
38--4747[label="1;1pkt 1fpkt"];
38--6540[label="1;1pkt 1fpkt"];
450--452[label="0.666667;4pkt 4fpkt"];
450--2739[label="0.6;3pkt 3fpkt"];
450--4747[label="0.8;4pkt 4fpkt"];
450--6540[label="0.666667;4pkt 4fpkt"];
452--2739[label="1;5pkt 5fpkt"];
452--4747[label="1;5pkt 5fpkt"];
452--6540[label="1;6pkt 6fpkt"];
2739--4747[label="0.8;4pkt 4fpkt"];
2739--6540[label="1;5pkt 5fpkt"];
4747--6540[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.132.160" src_ip="199.94.108.158" src_port="80"/>
      <filter dst_ip="138.186.52.97" src_ip="199.94.108.158" src_port="80"/>
      <filter dst_ip="140.3.132.160" src_ip="211.90.98.69" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.727288,1.86745,999,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_111{
style=filled;
color=gray75;
462[label="141.41.0.30;d;1pkt 1fpkt", shape=diamond, color=yellow];
463[label="138.177.155.147;s;1pkt 1fpkt", shape=diamond, color=yellow];
6480[label="138.177.155.147;1pkt 1fpkt", shape=invtriangle, color=brown];
stat111[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.177.155.147:6699, 141.41.0.30:4338}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 4338: (50%)&gt;];
}
462--463[label="1;1pkt 1fpkt"];
462--6480[label="1;1pkt 1fpkt"];
463--6480[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.41.0.30" dst_port="4338" src_ip="138.177.155.147" src_port="6699"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669353" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.85355,1.83055,503,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_112{
style=filled;
color=gray75;
20[label="38.189.122.79s;1pkt 1fpkt", shape=rectangle, color=red];
465[label="38.189.122.79;s;1pkt 1fpkt", shape=diamond, color=yellow];
4047[label="38.189.122.79;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat112[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.189.122.79:80, 172.93.9.88:49168}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49168: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
20--464[label="1;1pkt 1fpkt"];
20--465[label="1;1pkt 1fpkt"];
20--4047[label="1;1pkt 1fpkt"];
465--4047[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.93.9.88" dst_port="49168" src_ip="38.189.122.79" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09135,1.86305,503,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_113{
style=filled;
color=gray75;
126[label="202.84.130.37s;1pkt 1fpkt", shape=rectangle, color=red];
1646[label="211.45.250.37;s;191pkt 191fpkt", shape=diamond, color=yellow];
2330[label="140.3.244.160;d;60pkt 60fpkt", shape=diamond, color=yellow];
3066[label="140.3.244.160;d;60pkt 60fpkt", shape=hexagon, color=black];
4600[label="38.189.65.141;33pkt 33fpkt", shape=pentagon, color=darkviolet];
stat113[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.45.250.37:80, 148.29.24.129:*}[45.0549%]&lt;BR/&gt;{*:80, 140.3.244.160:*}[30.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1764: (0.434783%)&lt;BR/&gt; 1762: (0.434783%)&lt;BR/&gt; 1755: (0.434783%)&lt;BR/&gt; 1533: (0.434783%)&gt;];
}
126--1646[label="1;1pkt 1fpkt"];
126--3647[label="1;1pkt 1fpkt"];
126--5816[label="1;1pkt 1fpkt"];
1646--2142[label="0.0350877;2pkt 2fpkt"];
1646--2330[label="0.0333333;2pkt 2fpkt"];
1646--2470[label="0.198953;38pkt 38fpkt"];
1646--2871[label="0.0314136;6pkt 6fpkt"];
1646--3066[label="0.0333333;2pkt 2fpkt"];
1646--3647[label="0.989529;189pkt 189fpkt"];
1646--5816[label="0.989529;189pkt 189fpkt"];
2330--3066[label="1;60pkt 60fpkt"];
2330--3647[label="0.0333333;2pkt 2fpkt"];
2330--4038[label="0.3;6pkt 6fpkt"];
2330--4344[label="0.15;9pkt 9fpkt"];
2330--4522[label="0.1;6pkt 6fpkt"];
2330--4600[label="0.272727;9pkt 9fpkt"];
2330--5131[label="0.6;6pkt 6fpkt"];
2330--5816[label="0.0333333;2pkt 2fpkt"];
2330--6069[label="0.285714;6pkt 6fpkt"];
2330--6266[label="0.15;9pkt 9fpkt"];
2330--6389[label="0.1;6pkt 6fpkt"];
2330--6786[label="0.6;6pkt 6fpkt"];
2330--7505[label="0.15;9pkt 9fpkt"];
2330--7588[label="0.1;6pkt 6fpkt"];
2330--7843[label="0.636364;7pkt 7fpkt"];
3066--3647[label="0.0333333;2pkt 2fpkt"];
3066--4038[label="0.3;6pkt 6fpkt"];
3066--4344[label="0.15;9pkt 9fpkt"];
3066--4522[label="0.1;6pkt 6fpkt"];
3066--4600[label="0.272727;9pkt 9fpkt"];
3066--5131[label="0.6;6pkt 6fpkt"];
3066--5816[label="0.0333333;2pkt 2fpkt"];
3066--6069[label="0.285714;6pkt 6fpkt"];
3066--6266[label="0.15;9pkt 9fpkt"];
3066--6389[label="0.1;6pkt 6fpkt"];
3066--6786[label="0.6;6pkt 6fpkt"];
3066--7505[label="0.15;9pkt 9fpkt"];
3066--7588[label="0.1;6pkt 6fpkt"];
3066--7843[label="0.636364;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.244.160" src_port="80"/>
      <filter dst_ip="148.29.24.129" src_ip="211.45.250.37" src_port="80"/>
    </slice>
    <from sec="1039669202" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="148.110.170.94"/>
      <from sec="1039669200" usec="0"/>
      <to sec="1039669351" usec="0"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669351" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_116{
style=filled;
color=gray75;
490[label="64.132.177.105;d;1pkt 1fpkt", shape=diamond, color=yellow];
491[label="138.186.52.55;s;707pkt 707fpkt", shape=diamond, color=yellow];
903[label="193.216.154.213;d;1pkt 1fpkt", shape=diamond, color=yellow];
1001[label="64.90.132.146;d;1pkt 1fpkt", shape=diamond, color=yellow];
1015[label="200.235.167.13;d;1pkt 1fpkt", shape=diamond, color=yellow];
1228[label="64.171.210.10;d;1pkt 1fpkt", shape=diamond, color=yellow];
1547[label="33.25.90.111;d;3pkt 3fpkt", shape=diamond, color=yellow];
1667[label="39.36.13.205;d;2pkt 2fpkt", shape=diamond, color=yellow];
2519[label="193.216.154.213;d;1pkt 1fpkt", shape=hexagon, color=black];
2534[label="200.235.167.13;d;1pkt 1fpkt", shape=hexagon, color=black];
3803[label="138.186.52.55;747pkt 747fpkt", shape=pentagon, color=darkviolet];
5920[label="138.186.52.55;747pkt 747fpkt", shape=invtriangle, color=brown];
7293[label="138.186.52.55;748pkt 748fpkt", shape=invhouse, color=bisque];
stat116[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.52.55:6257, *:6257}[96.1333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (97.0111%)&lt;BR/&gt; 6699: (1.01317%)&lt;BR/&gt; 16257: (0.135089%)&lt;BR/&gt; 6698: (0.135089%)&lt;BR/&gt; 61465: (0.101317%)&gt;];
}
490--491[label="1;1pkt 1fpkt"];
490--3803[label="1;1pkt 1fpkt"];
490--5920[label="1;1pkt 1fpkt"];
490--7293[label="1;1pkt 1fpkt"];
491--903[label="1;1pkt 1fpkt"];
491--1001[label="1;1pkt 1fpkt"];
491--1015[label="1;1pkt 1fpkt"];
491--1228[label="1;1pkt 1fpkt"];
491--1547[label="0.333333;1pkt 1fpkt"];
491--1667[label="1;2pkt 2fpkt"];
491--2519[label="1;1pkt 1fpkt"];
491--2534[label="1;1pkt 1fpkt"];
491--3803[label="0.998586;706pkt 706fpkt"];
491--5920[label="0.998586;706pkt 706fpkt"];
491--7293[label="1;707pkt 707fpkt"];
903--2519[label="1;1pkt 1fpkt"];
903--3803[label="1;1pkt 1fpkt"];
903--5920[label="1;1pkt 1fpkt"];
903--7293[label="1;1pkt 1fpkt"];
1001--3803[label="1;1pkt 1fpkt"];
1001--5920[label="1;1pkt 1fpkt"];
1001--7293[label="1;1pkt 1fpkt"];
1015--2534[label="1;1pkt 1fpkt"];
1015--3803[label="1;1pkt 1fpkt"];
1015--5920[label="1;1pkt 1fpkt"];
1015--7293[label="1;1pkt 1fpkt"];
1228--3803[label="1;1pkt 1fpkt"];
1228--5920[label="1;1pkt 1fpkt"];
1228--7293[label="1;1pkt 1fpkt"];
1547--3345[label="0.666667;2pkt 2fpkt"];
1547--3803[label="0.333333;1pkt 1fpkt"];
1547--5625[label="0.666667;2pkt 2fpkt"];
1547--5920[label="0.333333;1pkt 1fpkt"];
1547--7112[label="0.666667;2pkt 2fpkt"];
1547--7293[label="0.333333;1pkt 1fpkt"];
1667--3803[label="1;2pkt 2fpkt"];
1667--5920[label="1;2pkt 2fpkt"];
1667--7293[label="1;2pkt 2fpkt"];
2519--3803[label="1;1pkt 1fpkt"];
2519--5920[label="1;1pkt 1fpkt"];
2519--7293[label="1;1pkt 1fpkt"];
2534--3803[label="1;1pkt 1fpkt"];
2534--5920[label="1;1pkt 1fpkt"];
2534--7293[label="1;1pkt 1fpkt"];
3803--5920[label="1;747pkt 747fpkt"];
3803--7293[label="1;747pkt 747fpkt"];
5920--7293[label="1;747pkt 747fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="138.186.52.55" src_port="6257"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_117{
style=filled;
color=gray75;
1703[label="38.72.226.226;s;214pkt 214fpkt", shape=diamond, color=yellow];
1911[label="211.45.226.5;s;237pkt 237fpkt", shape=diamond, color=yellow];
stat117[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.45.226.5:80, *:*}[52.5499%]&lt;BR/&gt;{38.72.226.226:80, *:*}[47.4501%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1761: (0.332594%)&lt;BR/&gt; 1151: (0.332594%)&lt;BR/&gt; 1150: (0.332594%)&lt;BR/&gt; 1116: (0.332594%)&gt;];
}
1703--1751[label="0.396552;23pkt 23fpkt"];
1703--1962[label="0.4;24pkt 24fpkt"];
1703--2318[label="0.0319149;3pkt 3fpkt"];
1703--2430[label="0.0412371;4pkt 4fpkt"];
1703--2441[label="0.0714286;4pkt 4fpkt"];
1703--2443[label="0.0666667;4pkt 4fpkt"];
1703--2557[label="0.0754717;4pkt 4fpkt"];
1703--2845[label="0.0677966;4pkt 4fpkt"];
1703--2871[label="0.0046729;1pkt 1fpkt"];
1703--2951[label="0.020202;4pkt 4fpkt"];
1703--2962[label="1;180pkt 180fpkt"];
1703--3114[label="0.0412371;4pkt 4fpkt"];
1703--3118[label="0.0666667;4pkt 4fpkt"];
1911--1993[label="0.532468;41pkt 41fpkt"];
1911--2174[label="0.313953;27pkt 27fpkt"];
1911--2430[label="0.257732;25pkt 25fpkt"];
1911--2875[label="0.00421941;1pkt 1fpkt"];
1911--2945[label="0.545455;42pkt 42fpkt"];
1911--3114[label="0.257732;25pkt 25fpkt"];
1911--3277[label="0.995781;236pkt 236fpkt"];
1911--5581[label="0.995781;236pkt 236fpkt"];
1911--7089[label="0.995781;236pkt 236fpkt"];
</description>
    <slice>
      <filter src_ip="211.45.226.5" src_port="80"/>
      <filter src_ip="38.72.226.226" src_port="80"/>
    </slice>
    <from sec="1039669211" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19604,1.81002,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_118{
style=filled;
color=gray75;
317[label="202.55.125.230s;2pkt 2fpkt", shape=rectangle, color=red];
496[label="148.110.86.86;d;586pkt 586fpkt", shape=diamond, color=yellow];
2280[label="132.20.97.70;s;1pkt 1fpkt", shape=diamond, color=yellow];
2465[label="148.110.86.86;d;586pkt 586fpkt", shape=hexagon, color=black];
3036[label="132.20.97.70;s;1pkt 1fpkt", shape=hexagon, color=black];
3199[label="64.214.253.0;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3249[label="210.17.80.4;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3608[label="64.199.92.34;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4097[label="200.39.33.84;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4179[label="39.31.100.92;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4234[label="92.244.227.96;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4481[label="199.72.191.128;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4730[label="64.171.15.156;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5063[label="222.81.7.195;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5242[label="208.196.60.217;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5256[label="64.162.160.218;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5328[label="198.252.219.228;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5344[label="36.154.69.230;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5520[label="33.67.91.254;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5563[label="210.17.80.4;1pkt 1fpkt", shape=invtriangle, color=brown];
5595[label="201.100.35.7;1pkt 1fpkt", shape=invtriangle, color=brown];
5795[label="64.199.92.34;1pkt 1fpkt", shape=invtriangle, color=brown];
6100[label="200.70.162.83;1pkt 1fpkt", shape=invtriangle, color=brown];
6105[label="200.39.33.84;1pkt 1fpkt", shape=invtriangle, color=brown];
6159[label="39.31.100.92;1pkt 1fpkt", shape=invtriangle, color=brown];
7076[label="210.17.80.4;2pkt 2fpkt", shape=invhouse, color=bisque];
7415[label="200.39.33.84;1pkt 1fpkt", shape=invhouse, color=bisque];
stat118[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 148.110.86.86:6346}[97.4446%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (49.625%)&lt;BR/&gt; 0: (0.5%)&lt;BR/&gt; 2678: (0.291667%)&lt;BR/&gt; 4451: (0.25%)&lt;BR/&gt; 2657: (0.25%)&gt;];
}
317--496[label="0.5;1pkt 1fpkt"];
317--1663[label="0.5;1pkt 1fpkt"];
317--2465[label="0.5;1pkt 1fpkt"];
317--5344[label="1;1pkt 1fpkt"];
496--1032[label="1;1pkt 1fpkt"];
496--1222[label="1;1pkt 1fpkt"];
496--1588[label="1;1pkt 1fpkt"];
496--1846[label="1;1pkt 1fpkt"];
496--2075[label="1;1pkt 1fpkt"];
496--2077[label="1;1pkt 1fpkt"];
496--2250[label="1;1pkt 1fpkt"];
496--2266[label="1;1pkt 1fpkt"];
496--2279[label="1;1pkt 1fpkt"];
496--2280[label="1;1pkt 1fpkt"];
496--2465[label="1;586pkt 586fpkt"];
496--3036[label="1;1pkt 1fpkt"];
496--3181[label="0.00181488;1pkt 1fpkt"];
496--3199[label="1;1pkt 1fpkt"];
496--3249[label="1;2pkt 2fpkt"];
496--3608[label="1;1pkt 1fpkt"];
496--4097[label="1;1pkt 1fpkt"];
496--4179[label="1;1pkt 1fpkt"];
496--4234[label="1;1pkt 1fpkt"];
496--4481[label="1;1pkt 1fpkt"];
496--4730[label="1;1pkt 1fpkt"];
496--5063[label="1;1pkt 1fpkt"];
496--5242[label="1;1pkt 1fpkt"];
496--5256[label="1;1pkt 1fpkt"];
496--5328[label="1;1pkt 1fpkt"];
496--5344[label="1;1pkt 1fpkt"];
496--5520[label="1;1pkt 1fpkt"];
496--5563[label="1;1pkt 1fpkt"];
496--5595[label="1;1pkt 1fpkt"];
496--5795[label="1;1pkt 1fpkt"];
496--6100[label="1;1pkt 1fpkt"];
496--6105[label="1;1pkt 1fpkt"];
496--6159[label="1;1pkt 1fpkt"];
496--7076[label="1;2pkt 2fpkt"];
496--7415[label="1;1pkt 1fpkt"];
2280--2465[label="1;1pkt 1fpkt"];
2280--3036[label="1;1pkt 1fpkt"];
2465--3036[label="1;1pkt 1fpkt"];
2465--3181[label="0.00181488;1pkt 1fpkt"];
2465--3199[label="1;1pkt 1fpkt"];
2465--3249[label="1;2pkt 2fpkt"];
2465--3608[label="1;1pkt 1fpkt"];
2465--4097[label="1;1pkt 1fpkt"];
2465--4179[label="1;1pkt 1fpkt"];
2465--4234[label="1;1pkt 1fpkt"];
2465--4481[label="1;1pkt 1fpkt"];
2465--4730[label="1;1pkt 1fpkt"];
2465--5063[label="1;1pkt 1fpkt"];
2465--5242[label="1;1pkt 1fpkt"];
2465--5256[label="1;1pkt 1fpkt"];
2465--5328[label="1;1pkt 1fpkt"];
2465--5344[label="1;1pkt 1fpkt"];
2465--5520[label="1;1pkt 1fpkt"];
2465--5563[label="1;1pkt 1fpkt"];
2465--5595[label="1;1pkt 1fpkt"];
2465--5795[label="1;1pkt 1fpkt"];
2465--6100[label="1;1pkt 1fpkt"];
2465--6105[label="1;1pkt 1fpkt"];
2465--6159[label="1;1pkt 1fpkt"];
2465--7076[label="1;2pkt 2fpkt"];
2465--7415[label="1;1pkt 1fpkt"];
3249--5563[label="1;1pkt 1fpkt"];
3249--7076[label="1;2pkt 2fpkt"];
3608--5795[label="1;1pkt 1fpkt"];
4097--6105[label="1;1pkt 1fpkt"];
4097--7415[label="1;1pkt 1fpkt"];
4179--6159[label="1;1pkt 1fpkt"];
5563--7076[label="1;1pkt 1fpkt"];
6105--7415[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.86.86" dst_port="6346"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_119{
style=filled;
color=gray75;
521[label="138.186.18.55;d;2pkt 2fpkt", shape=diamond, color=yellow];
522[label="197.151.192.252;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat119[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.90.155.214:1863, 138.186.18.55:3672}[50%]&lt;BR/&gt;{197.151.192.252:8864, 138.186.18.55:8864}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8864: (66.6667%)&lt;BR/&gt; 3672: (16.6667%)&lt;BR/&gt; 1863: (16.6667%)&gt;];
}
521--522[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.18.55" dst_port="8864" src_ip="197.151.192.252" src_port="8864"/>
      <filter dst_ip="138.186.18.55" dst_port="3672" src_ip="211.90.155.214" src_port="1863"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669373" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19604,1.81002,503,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_120{
style=filled;
color=gray75;
40[label="140.3.110.162s;1pkt 1fpkt", shape=rectangle, color=red];
523[label="215.160.138.181;d;440pkt 440fpkt", shape=diamond, color=yellow];
525[label="98.148.86.168;s;12pkt 12fpkt", shape=diamond, color=yellow];
1160[label="38.72.224.162;s;246pkt 246fpkt", shape=diamond, color=yellow];
1524[label="196.35.212.0;s;31pkt 31fpkt", shape=diamond, color=yellow];
1707[label="211.45.236.74;s;191pkt 191fpkt", shape=diamond, color=yellow];
1714[label="211.45.236.72;s;21pkt 21fpkt", shape=diamond, color=yellow];
1756[label="209.1.160.78;s;29pkt 29fpkt", shape=diamond, color=yellow];
1930[label="148.110.93.226;d;136pkt 136fpkt", shape=diamond, color=yellow];
2560[label="38.72.224.162;s;246pkt 246fpkt", shape=hexagon, color=black];
2775[label="140.3.0.205;d;85pkt 85fpkt", shape=hexagon, color=black];
3197[label="196.35.212.0;34pkt 34fpkt", shape=pentagon, color=darkviolet];
3389[label="211.90.157.14;25pkt 25fpkt", shape=pentagon, color=darkviolet];
3429[label="211.90.98.18;34pkt 34fpkt", shape=pentagon, color=darkviolet];
3902[label="198.24.149.65;50pkt 50fpkt", shape=pentagon, color=darkviolet];
3982[label="211.45.236.72;22pkt 22fpkt", shape=pentagon, color=darkviolet];
3988[label="211.45.236.73;17pkt 17fpkt", shape=pentagon, color=darkviolet];
4001[label="211.45.236.74;191pkt 191fpkt", shape=pentagon, color=darkviolet];
4037[label="209.1.160.78;29pkt 29fpkt", shape=pentagon, color=darkviolet];
4117[label="198.24.149.85;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4771[label="202.148.190.160;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4795[label="38.72.224.162;246pkt 246fpkt", shape=pentagon, color=darkviolet];
4848[label="98.148.86.168;15pkt 15fpkt", shape=pentagon, color=darkviolet];
5078[label="202.148.190.196;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5121[label="202.148.190.201;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5179[label="202.148.190.208;14pkt 14fpkt", shape=pentagon, color=darkviolet];
5205[label="202.148.190.211;22pkt 22fpkt", shape=pentagon, color=darkviolet];
5279[label="39.111.147.222;13pkt 13fpkt", shape=pentagon, color=darkviolet];
5533[label="196.35.212.0;34pkt 34fpkt", shape=invtriangle, color=brown];
5652[label="211.90.157.14;25pkt 25fpkt", shape=invtriangle, color=brown];
5678[label="211.90.98.18;33pkt 33fpkt", shape=invtriangle, color=brown];
5981[label="198.24.149.65;50pkt 50fpkt", shape=invtriangle, color=brown];
6035[label="211.45.236.72;22pkt 22fpkt", shape=invtriangle, color=brown];
6039[label="211.45.236.73;16pkt 16fpkt", shape=invtriangle, color=brown];
6048[label="211.45.236.74;191pkt 191fpkt", shape=invtriangle, color=brown];
6068[label="209.1.160.78;28pkt 28fpkt", shape=invtriangle, color=brown];
6569[label="38.72.224.162;246pkt 246fpkt", shape=invtriangle, color=brown];
6604[label="98.148.86.168;15pkt 15fpkt", shape=invtriangle, color=brown];
6747[label="202.148.190.196;18pkt 18fpkt", shape=invtriangle, color=brown];
6819[label="202.148.190.208;14pkt 14fpkt", shape=invtriangle, color=brown];
6885[label="39.111.147.222;13pkt 13fpkt", shape=invtriangle, color=brown];
7060[label="196.35.212.0;34pkt 34fpkt", shape=invhouse, color=bisque];
7140[label="211.90.98.18;34pkt 34fpkt", shape=invhouse, color=bisque];
7368[label="211.45.236.72;21pkt 21fpkt", shape=invhouse, color=bisque];
7380[label="211.45.236.74;190pkt 190fpkt", shape=invhouse, color=bisque];
7705[label="38.72.224.162;245pkt 245fpkt", shape=invhouse, color=bisque];
7818[label="202.148.190.196;18pkt 18fpkt", shape=invhouse, color=bisque];
7868[label="202.148.190.208;14pkt 14fpkt", shape=invhouse, color=bisque];
7917[label="39.111.147.222;13pkt 13fpkt", shape=invhouse, color=bisque];
stat120[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 215.160.138.181:*}[40.6077%]&lt;BR/&gt;{38.72.224.162:80, *:*}[22.6519%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7985%)&lt;BR/&gt; 3237: (0.201497%)&lt;BR/&gt; 1705: (0.172712%)&lt;BR/&gt; 53: (0.158319%)&lt;BR/&gt; 3062: (0.143926%)&gt;];
}
40--523[label="1;1pkt 1fpkt"];
40--525[label="1;1pkt 1fpkt"];
40--4848[label="1;1pkt 1fpkt"];
40--6604[label="1;1pkt 1fpkt"];
523--525[label="0.666667;8pkt 8fpkt"];
523--553[label="0.00694444;1pkt 1fpkt"];
523--689[label="0.00826446;2pkt 2fpkt"];
523--735[label="0.0103093;1pkt 1fpkt"];
523--761[label="0.0487805;6pkt 6fpkt"];
523--892[label="0.0111111;1pkt 1fpkt"];
523--929[label="0.0147059;2pkt 2fpkt"];
523--931[label="0.00970874;1pkt 1fpkt"];
523--952[label="0.03125;4pkt 4fpkt"];
523--966[label="0.0110497;2pkt 2fpkt"];
523--1103[label="0.0206897;3pkt 3fpkt"];
523--1145[label="0.00393701;1pkt 1fpkt"];
523--1160[label="0.0528455;13pkt 13fpkt"];
523--1221[label="0.0595238;5pkt 5fpkt"];
523--1287[label="0.0105263;1pkt 1fpkt"];
523--1350[label="0.0347826;4pkt 4fpkt"];
523--1440[label="1;19pkt 19fpkt"];
523--1499[label="0.0340426;8pkt 8fpkt"];
523--1524[label="0.129032;4pkt 4fpkt"];
523--1549[label="0.0116279;1pkt 1fpkt"];
523--1646[label="0.0052356;1pkt 1fpkt"];
523--1703[label="0.0046729;1pkt 1fpkt"];
523--1707[label="0.680628;130pkt 130fpkt"];
523--1714[label="0.619048;13pkt 13fpkt"];
523--1756[label="1;29pkt 29fpkt"];
523--1820[label="0.0113636;3pkt 3fpkt"];
523--1836[label="0.0204082;2pkt 2fpkt"];
523--1912[label="0.00917431;1pkt 1fpkt"];
523--2100[label="0.015625;1pkt 1fpkt"];
523--2117[label="0.0133333;3pkt 3fpkt"];
523--2141[label="0.057971;4pkt 4fpkt"];
523--2155[label="0.00584795;1pkt 1fpkt"];
523--2161[label="0.00684932;1pkt 1fpkt"];
523--2247[label="0.0151515;2pkt 2fpkt"];
523--2290[label="0.0243902;1pkt 1fpkt"];
523--2298[label="0.0178571;1pkt 1fpkt"];
523--2317[label="0.00833333;1pkt 1fpkt"];
523--2339[label="0.02;1pkt 1fpkt"];
523--2342[label="0.0144928;1pkt 1fpkt"];
523--2560[label="0.0528455;13pkt 13fpkt"];
523--2656[label="0.0153846;1pkt 1fpkt"];
523--2677[label="0.010929;2pkt 2fpkt"];
523--2681[label="0.0140845;1pkt 1fpkt"];
523--2748[label="0.0299401;5pkt 5fpkt"];
523--2750[label="0.00475059;2pkt 2fpkt"];
523--2780[label="0.0150376;2pkt 2fpkt"];
523--2882[label="0.00694444;1pkt 1fpkt"];
523--2892[label="0.018018;2pkt 2fpkt"];
523--2911[label="0.0133929;3pkt 3fpkt"];
523--2962[label="0.00555556;1pkt 1fpkt"];
523--3058[label="0.00833333;1pkt 1fpkt"];
523--3076[label="0.0147059;1pkt 1fpkt"];
523--3197[label="0.147059;5pkt 5fpkt"];
523--3209[label="0.0555556;4pkt 4fpkt"];
523--3212[label="0.01;3pkt 3fpkt"];
523--3226[label="0.04;1pkt 1fpkt"];
523--3295[label="0.0113636;3pkt 3fpkt"];
523--3333[label="0.00454545;2pkt 2fpkt"];
523--3354[label="0.0330579;8pkt 8fpkt"];
523--3389[label="0.04;1pkt 1fpkt"];
523--3429[label="0.323529;11pkt 11fpkt"];
523--3437[label="0.0263158;1pkt 1fpkt"];
523--3520[label="0.0142857;1pkt 1fpkt"];
523--3581[label="0.0217391;1pkt 1fpkt"];
523--3628[label="0.0208333;1pkt 1fpkt"];
523--3639[label="0.0172414;1pkt 1fpkt"];
523--3647[label="0.00413223;1pkt 1fpkt"];
523--3772[label="0.0192308;1pkt 1fpkt"];
523--3832[label="0.0182927;3pkt 3fpkt"];
523--3873[label="0.1;2pkt 2fpkt"];
523--3902[label="0.02;1pkt 1fpkt"];
523--3982[label="0.636364;14pkt 14fpkt"];
523--3988[label="0.764706;13pkt 13fpkt"];
523--4001[label="0.680628;130pkt 130fpkt"];
523--4037[label="1;29pkt 29fpkt"];
523--4230[label="1;18pkt 18fpkt"];
523--4249[label="0.0175439;1pkt 1fpkt"];
523--4357[label="0.0047619;1pkt 1fpkt"];
523--4372[label="0.0833333;1pkt 1fpkt"];
523--4397[label="0.003861;1pkt 1fpkt"];
523--4451[label="0.0131579;1pkt 1fpkt"];
523--4522[label="0.0140845;2pkt 2fpkt"];
523--4531[label="0.0238095;1pkt 1fpkt"];
523--4645[label="0.0526316;1pkt 1fpkt"];
523--4688[label="0.0136054;2pkt 2fpkt"];
523--4699[label="0.02;1pkt 1fpkt"];
523--4713[label="0.0526316;1pkt 1fpkt"];
523--4716[label="0.0215054;2pkt 2fpkt"];
523--4795[label="0.0528455;13pkt 13fpkt"];
523--4839[label="0.012987;2pkt 2fpkt"];
523--4848[label="0.533333;8pkt 8fpkt"];
523--4967[label="0.0105263;1pkt 1fpkt"];
523--5078[label="0.277778;5pkt 5fpkt"];
523--5121[label="0.8;8pkt 8fpkt"];
523--5179[label="0.0714286;1pkt 1fpkt"];
523--5203[label="0.0298507;4pkt 4fpkt"];
523--5205[label="0.136364;3pkt 3fpkt"];
523--5279[label="1;13pkt 13fpkt"];
523--5283[label="0.00623053;2pkt 2fpkt"];
523--5300[label="0.047619;2pkt 2fpkt"];
523--5507[label="0.0322581;1pkt 1fpkt"];
523--5533[label="0.147059;5pkt 5fpkt"];
523--5547[label="0.04;1pkt 1fpkt"];
523--5631[label="0.0330579;8pkt 8fpkt"];
523--5652[label="0.04;1pkt 1fpkt"];
523--5678[label="0.333333;11pkt 11fpkt"];
523--5682[label="0.027027;1pkt 1fpkt"];
523--5777[label="0.0222222;1pkt 1fpkt"];
523--5816[label="0.00413223;1pkt 1fpkt"];
523--5899[label="0.0196078;1pkt 1fpkt"];
523--5962[label="0.105263;2pkt 2fpkt"];
523--5981[label="0.02;1pkt 1fpkt"];
523--6035[label="0.636364;14pkt 14fpkt"];
523--6039[label="0.8125;13pkt 13fpkt"];
523--6048[label="0.680628;130pkt 130fpkt"];
523--6068[label="1;28pkt 28fpkt"];
523--6207[label="0.0175439;1pkt 1fpkt"];
523--6275[label="0.00473934;1pkt 1fpkt"];
523--6286[label="0.0833333;1pkt 1fpkt"];
523--6339[label="0.012987;1pkt 1fpkt"];
523--6389[label="0.013986;2pkt 2fpkt"];
523--6395[label="0.0243902;1pkt 1fpkt"];
523--6471[label="0.0526316;1pkt 1fpkt"];
523--6506[label="0.02;1pkt 1fpkt"];
523--6517[label="0.0526316;1pkt 1fpkt"];
523--6569[label="0.0528455;13pkt 13fpkt"];
523--6597[label="0.012987;2pkt 2fpkt"];
523--6604[label="0.533333;8pkt 8fpkt"];
523--6689[label="0.0104167;1pkt 1fpkt"];
523--6747[label="0.277778;5pkt 5fpkt"];
523--6819[label="0.0714286;1pkt 1fpkt"];
523--6885[label="1;13pkt 13fpkt"];
523--7060[label="0.147059;5pkt 5fpkt"];
523--7065[label="0.0416667;1pkt 1fpkt"];
523--7114[label="0.0330579;8pkt 8fpkt"];
523--7140[label="0.323529;11pkt 11fpkt"];
523--7143[label="0.0263158;1pkt 1fpkt"];
523--7322[label="0.105263;2pkt 2fpkt"];
523--7368[label="0.666667;14pkt 14fpkt"];
523--7380[label="0.684211;130pkt 130fpkt"];
523--7511[label="0.00473934;1pkt 1fpkt"];
523--7548[label="0.012987;1pkt 1fpkt"];
523--7588[label="0.013986;2pkt 2fpkt"];
523--7640[label="0.0526316;1pkt 1fpkt"];
523--7664[label="0.0204082;1pkt 1fpkt"];
523--7705[label="0.0530612;13pkt 13fpkt"];
523--7818[label="0.277778;5pkt 5fpkt"];
523--7868[label="0.0714286;1pkt 1fpkt"];
523--7917[label="1;13pkt 13fpkt"];
525--1073[label="0.0833333;1pkt 1fpkt"];
525--4848[label="1;12pkt 12fpkt"];
525--6604[label="1;12pkt 12fpkt"];
1160--1215[label="0.0203252;5pkt 5fpkt"];
1160--1505[label="0.00406504;1pkt 1fpkt"];
1160--2556[label="0.438596;25pkt 25fpkt"];
1160--2557[label="0.509434;27pkt 27fpkt"];
1160--2560[label="1;246pkt 246fpkt"];
1160--2740[label="0.00406504;1pkt 1fpkt"];
1160--2871[label="0.0203252;5pkt 5fpkt"];
1160--3131[label="0.438596;25pkt 25fpkt"];
1160--3154[label="0.00406504;1pkt 1fpkt"];
1160--4795[label="1;246pkt 246fpkt"];
1160--6569[label="1;246pkt 246fpkt"];
1160--7705[label="1;245pkt 245fpkt"];
1524--2775[label="0.870968;27pkt 27fpkt"];
1524--3157[label="0.870968;27pkt 27fpkt"];
1524--3197[label="0.967742;30pkt 30fpkt"];
1524--5533[label="0.967742;30pkt 30fpkt"];
1524--7060[label="0.967742;30pkt 30fpkt"];
1707--4001[label="1;191pkt 191fpkt"];
1707--6048[label="1;191pkt 191fpkt"];
1707--7380[label="1;190pkt 190fpkt"];
1714--3982[label="1;21pkt 21fpkt"];
1714--6035[label="1;21pkt 21fpkt"];
1714--7368[label="0.952381;20pkt 20fpkt"];
1756--4037[label="1;29pkt 29fpkt"];
1756--6068[label="1;28pkt 28fpkt"];
1930--2183[label="0.342105;26pkt 26fpkt"];
1930--2974[label="0.42623;26pkt 26fpkt"];
1930--3578[label="0.010989;1pkt 1fpkt"];
1930--3868[label="0.397059;54pkt 54fpkt"];
1930--3902[label="0.08;4pkt 4fpkt"];
1930--4117[label="0.928571;13pkt 13fpkt"];
1930--4343[label="0.0344828;2pkt 2fpkt"];
1930--4771[label="0.625;5pkt 5fpkt"];
1930--5179[label="0.928571;13pkt 13fpkt"];
1930--5205[label="0.818182;18pkt 18fpkt"];
1930--5776[label="0.0111111;1pkt 1fpkt"];
1930--5959[label="0.397059;54pkt 54fpkt"];
1930--5981[label="0.08;4pkt 4fpkt"];
1930--6819[label="0.928571;13pkt 13fpkt"];
1930--7319[label="0.397059;54pkt 54fpkt"];
1930--7868[label="0.928571;13pkt 13fpkt"];
2560--2740[label="0.00406504;1pkt 1fpkt"];
2560--2871[label="0.0203252;5pkt 5fpkt"];
2560--3131[label="0.438596;25pkt 25fpkt"];
2560--3154[label="0.00406504;1pkt 1fpkt"];
2560--4795[label="1;246pkt 246fpkt"];
2560--6569[label="1;246pkt 246fpkt"];
2560--7705[label="1;245pkt 245fpkt"];
2775--2911[label="0.0117647;1pkt 1fpkt"];
2775--3058[label="0.0235294;2pkt 2fpkt"];
2775--3157[label="1;68pkt 68fpkt"];
2775--3197[label="0.852941;29pkt 29fpkt"];
2775--3209[label="0.0138889;1pkt 1fpkt"];
2775--3212[label="0.0117647;1pkt 1fpkt"];
2775--3276[label="1;3pkt 3fpkt"];
2775--3772[label="0.0192308;1pkt 1fpkt"];
2775--4162[label="0.2;1pkt 1fpkt"];
2775--5533[label="0.852941;29pkt 29fpkt"];
2775--5580[label="1;3pkt 3fpkt"];
2775--5899[label="0.0196078;1pkt 1fpkt"];
2775--7060[label="0.852941;29pkt 29fpkt"];
2775--7088[label="1;3pkt 3fpkt"];
3197--5533[label="1;34pkt 34fpkt"];
3197--7060[label="1;34pkt 34fpkt"];
3389--5652[label="1;25pkt 25fpkt"];
3429--5678[label="1;33pkt 33fpkt"];
3429--7140[label="1;34pkt 34fpkt"];
3902--5981[label="1;50pkt 50fpkt"];
3982--6035[label="1;22pkt 22fpkt"];
3982--7368[label="1;21pkt 21fpkt"];
3988--6039[label="1;16pkt 16fpkt"];
4001--6048[label="1;191pkt 191fpkt"];
4001--7380[label="1;190pkt 190fpkt"];
4037--6068[label="1;28pkt 28fpkt"];
4795--6569[label="1;246pkt 246fpkt"];
4795--7705[label="1;245pkt 245fpkt"];
4848--6604[label="1;15pkt 15fpkt"];
5078--6747[label="1;18pkt 18fpkt"];
5078--7818[label="1;18pkt 18fpkt"];
5179--6819[label="1;14pkt 14fpkt"];
5179--7868[label="1;14pkt 14fpkt"];
5279--6885[label="1;13pkt 13fpkt"];
5279--7917[label="1;13pkt 13fpkt"];
5533--7060[label="1;34pkt 34fpkt"];
5678--7140[label="1;33pkt 33fpkt"];
6035--7368[label="1;21pkt 21fpkt"];
6048--7380[label="1;190pkt 190fpkt"];
6569--7705[label="1;245pkt 245fpkt"];
6747--7818[label="1;18pkt 18fpkt"];
6819--7868[label="1;14pkt 14fpkt"];
6885--7917[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter src_ip="38.72.224.162" src_port="80"/>
      <filter dst_ip="215.160.138.181" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_121{
style=filled;
color=gray75;
539[label="169.126.137.1;d;29pkt 29fpkt", shape=diamond, color=yellow];
542[label="169.124.226.83;s;63pkt 63fpkt", shape=diamond, color=yellow];
stat121[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.124.226.83:6668, 169.126.137.8:*}[51.5625%]&lt;BR/&gt;{169.124.226.83:6668, 169.126.137.1:*}[43.75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6668: (48.3696%)&lt;BR/&gt; 6667: (1.08696%)&lt;BR/&gt; 1271: (1.08696%)&lt;BR/&gt; 1270: (1.08696%)&lt;BR/&gt; 1269: (1.08696%)&gt;];
}
539--542[label="0.965517;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="169.126.137.8" src_ip="169.124.226.83" src_port="6668"/>
      <filter dst_ip="169.126.137.1" src_ip="169.124.226.83" src_port="6668"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11796,1.82888,999,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_122{
style=filled;
color=gray75;
47[label="64.176.10.194s;1pkt 1fpkt", shape=rectangle, color=red];
574[label="215.90.81.22;d;5pkt 5fpkt", shape=diamond, color=yellow];
576[label="64.176.10.194;s;1pkt 1fpkt", shape=diamond, color=yellow];
1072[label="64.212.111.60;s;1pkt 1fpkt", shape=diamond, color=yellow];
1089[label="214.129.95.81;s;1pkt 1fpkt", shape=diamond, color=yellow];
2474[label="64.176.10.194;s;1pkt 1fpkt", shape=hexagon, color=black];
2546[label="214.129.95.81;s;1pkt 1fpkt", shape=hexagon, color=black];
2698[label="64.212.111.60;s;1pkt 1fpkt", shape=hexagon, color=black];
3861[label="64.212.111.60;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5053[label="64.176.10.194;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6735[label="64.176.10.194;1pkt 1fpkt", shape=invtriangle, color=brown];
stat122[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.90.155.22:1863, 215.90.81.22:1121}[20%]&lt;BR/&gt;{64.212.111.60:1075, 215.90.81.22:6699}[20%]&lt;BR/&gt;{214.129.95.81:11488, 215.90.81.22:6699}[20%]&lt;BR/&gt;{39.28.57.120:6699, 215.90.81.22:1109}[20%]&lt;BR/&gt;{64.176.10.194:29692, 215.90.81.22:6699}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (46.6667%)&lt;BR/&gt; 29692: (20%)&lt;BR/&gt; 1075: (13.3333%)&lt;BR/&gt; 11488: (10%)&lt;BR/&gt; 1863: (3.33333%)&gt;];
}
47--574[label="1;1pkt 1fpkt"];
47--576[label="1;1pkt 1fpkt"];
47--2474[label="1;1pkt 1fpkt"];
47--5053[label="1;1pkt 1fpkt"];
47--6735[label="1;1pkt 1fpkt"];
574--576[label="1;1pkt 1fpkt"];
574--1049[label="1;1pkt 1fpkt"];
574--1072[label="1;1pkt 1fpkt"];
574--1089[label="1;1pkt 1fpkt"];
574--2474[label="1;1pkt 1fpkt"];
574--2546[label="1;1pkt 1fpkt"];
574--2698[label="1;1pkt 1fpkt"];
574--3861[label="1;1pkt 1fpkt"];
574--4412[label="1;1pkt 1fpkt"];
574--5053[label="1;1pkt 1fpkt"];
574--6735[label="1;1pkt 1fpkt"];
576--2474[label="1;1pkt 1fpkt"];
576--5053[label="1;1pkt 1fpkt"];
576--6735[label="1;1pkt 1fpkt"];
1072--2698[label="1;1pkt 1fpkt"];
1072--3861[label="1;1pkt 1fpkt"];
1089--2546[label="1;1pkt 1fpkt"];
2474--5053[label="1;1pkt 1fpkt"];
2474--6735[label="1;1pkt 1fpkt"];
2698--3861[label="1;1pkt 1fpkt"];
5053--6735[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.81.22" dst_port="6699" src_ip="64.176.10.194" src_port="29692"/>
      <filter dst_ip="215.90.81.22" dst_port="1109" src_ip="39.28.57.120" src_port="6699"/>
      <filter dst_ip="215.90.81.22" dst_port="6699" src_ip="214.129.95.81" src_port="11488"/>
      <filter dst_ip="215.90.81.22" dst_port="6699" src_ip="64.212.111.60" src_port="1075"/>
      <filter dst_ip="215.90.81.22" dst_port="1121" src_ip="211.90.155.22" src_port="1863"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669623" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_123{
style=filled;
color=gray75;
582[label="38.74.12.220;d;1pkt 1fpkt", shape=diamond, color=yellow];
583[label="215.87.75.63;s;1pkt 1fpkt", shape=diamond, color=yellow];
2516[label="38.74.12.220;d;1pkt 1fpkt", shape=hexagon, color=black];
stat123[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.87.75.63:1059, 38.74.12.220:1755}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (50%)&lt;BR/&gt; 1059: (50%)&gt;];
}
582--583[label="1;1pkt 1fpkt"];
582--2516[label="1;1pkt 1fpkt"];
583--2516[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="38.74.12.220" dst_port="1755" src_ip="215.87.75.63" src_port="1059"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09135,1.86305,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_124{
style=filled;
color=gray75;
11[label="61.180.164.40s;2pkt 2fpkt", shape=rectangle, color=red];
585[label="140.3.3.22;d;2pkt 2fpkt", shape=diamond, color=yellow];
587[label="61.180.164.40;s;2pkt 2fpkt", shape=diamond, color=yellow];
2475[label="140.3.3.22;d;2pkt 2fpkt", shape=hexagon, color=black];
3676[label="61.180.164.40;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat124[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.180.164.40:2189, 140.3.3.22:21}[25%]&lt;BR/&gt;{61.180.164.40:2215, 140.3.3.22:3153}[25%]&lt;BR/&gt;{61.180.164.40:2216, 140.3.3.22:3154}[25%]&lt;BR/&gt;{61.180.164.40:2217, 140.3.3.22:3157}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3154: (22.7273%)&lt;BR/&gt; 2216: (22.7273%)&lt;BR/&gt; 3153: (18.1818%)&lt;BR/&gt; 2215: (18.1818%)&lt;BR/&gt; 3157: (4.54545%)&gt;];
}
11--585[label="1;2pkt 2fpkt"];
11--587[label="1;2pkt 2fpkt"];
11--2475[label="1;2pkt 2fpkt"];
11--3676[label="0.5;1pkt 1fpkt"];
585--587[label="1;2pkt 2fpkt"];
585--2475[label="1;2pkt 2fpkt"];
585--3676[label="0.5;1pkt 1fpkt"];
587--2475[label="1;2pkt 2fpkt"];
587--3676[label="0.5;1pkt 1fpkt"];
2475--3676[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.3.22" dst_port="3157" src_ip="61.180.164.40" src_port="2217"/>
      <filter dst_ip="140.3.3.22" dst_port="3154" src_ip="61.180.164.40" src_port="2216"/>
      <filter dst_ip="140.3.3.22" dst_port="3153" src_ip="61.180.164.40" src_port="2215"/>
      <filter dst_ip="140.3.3.22" dst_port="21" src_ip="61.180.164.40" src_port="2189"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_126{
style=filled;
color=gray75;
605[label="98.149.184.246;s;1pkt 1fpkt", shape=diamond, color=yellow];
606[label="140.3.36.165;d;93pkt 93fpkt", shape=diamond, color=yellow];
1239[label="138.186.50.131;d;44pkt 44fpkt", shape=diamond, color=yellow];
1641[label="196.9.122.60;s;157pkt 157fpkt", shape=diamond, color=yellow];
2705[label="196.9.122.60;s;157pkt 157fpkt", shape=hexagon, color=black];
3862[label="196.9.122.60;182pkt 182fpkt", shape=pentagon, color=darkviolet];
3964[label="197.231.187.70;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5304[label="211.90.155.225;11pkt 11fpkt", shape=pentagon, color=darkviolet];
5956[label="196.9.122.60;182pkt 182fpkt", shape=invtriangle, color=brown];
6026[label="197.231.187.70;8pkt 8fpkt", shape=invtriangle, color=brown];
7362[label="197.231.187.70;8pkt 8fpkt", shape=invhouse, color=bisque];
stat126[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.9.122.60:80, 140.3.36.165:*}[24.1877%]&lt;BR/&gt;{196.9.122.60:80, 138.186.54.145:*}[23.4657%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.7098%)&lt;BR/&gt; 1863: (0.881316%)&lt;BR/&gt; 110: (0.705053%)&lt;BR/&gt; 25: (0.587544%)&lt;BR/&gt; 1024: (0.470035%)&gt;];
}
605--606[label="1;1pkt 1fpkt"];
606--1641[label="0.602151;56pkt 56fpkt"];
606--2322[label="0.0232558;1pkt 1fpkt"];
606--2705[label="0.602151;56pkt 56fpkt"];
606--3862[label="0.602151;56pkt 56fpkt"];
606--3964[label="0.5;4pkt 4fpkt"];
606--5036[label="0.0212766;1pkt 1fpkt"];
606--5304[label="0.0909091;1pkt 1fpkt"];
606--5956[label="0.602151;56pkt 56fpkt"];
606--6026[label="0.5;4pkt 4fpkt"];
606--6727[label="0.0217391;1pkt 1fpkt"];
606--7362[label="0.5;4pkt 4fpkt"];
1239--5304[label="0.0909091;1pkt 1fpkt"];
1641--2705[label="1;157pkt 157fpkt"];
1641--3862[label="0.993631;156pkt 156fpkt"];
1641--5956[label="0.993631;156pkt 156fpkt"];
2705--3862[label="0.993631;156pkt 156fpkt"];
2705--5956[label="0.993631;156pkt 156fpkt"];
3862--5956[label="1;182pkt 182fpkt"];
3964--6026[label="1;8pkt 8fpkt"];
3964--7362[label="1;8pkt 8fpkt"];
6026--7362[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.36.165" src_ip="196.9.122.60" src_port="80"/>
      <filter dst_ip="138.186.54.145" src_ip="196.9.122.60" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
619[label="138.186.52.161;d;3pkt 3fpkt", shape=diamond, color=yellow];
621[label="60.133.143.235;s;1pkt 1fpkt", shape=diamond, color=yellow];
2481[label="60.133.143.235;s;1pkt 1fpkt", shape=hexagon, color=black];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.160.196.0:6699, 138.186.52.161:1114}[33.3333%]&lt;BR/&gt;{211.90.155.206:1863, 138.186.52.161:1041}[33.3333%]&lt;BR/&gt;{60.133.143.235:3610, 138.186.52.161:6699}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (40%)&lt;BR/&gt; 3610: (30%)&lt;BR/&gt; 1863: (10%)&lt;BR/&gt; 1114: (10%)&lt;BR/&gt; 1041: (10%)&gt;];
}
619--621[label="1;1pkt 1fpkt"];
619--2481[label="1;1pkt 1fpkt"];
621--2481[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.52.161" dst_port="6699" src_ip="60.133.143.235" src_port="3610"/>
      <filter dst_ip="138.186.52.161" dst_port="1041" src_ip="211.90.155.206" src_port="1863"/>
      <filter dst_ip="138.186.52.161" dst_port="1114" src_ip="192.160.196.0" src_port="6699"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_129{
style=filled;
color=gray75;
626[label="210.72.222.73;s;1pkt 1fpkt", shape=diamond, color=yellow];
627[label="221.164.156.5;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat129[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.72.222.73:194, 221.164.156.5:56741}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56741: (50%)&lt;BR/&gt; 194: (50%)&gt;];
}
626--627[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="221.164.156.5" dst_port="56741" src_ip="210.72.222.73" src_port="194"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11796,1.82888,999,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_130{
style=filled;
color=gray75;
82[label="96.66.76.5s;3pkt 3fpkt", shape=rectangle, color=red];
625[label="210.72.222.73;d;1pkt 1fpkt", shape=diamond, color=yellow];
628[label="221.164.156.5;s;28pkt 28fpkt", shape=diamond, color=yellow];
827[label="215.90.74.15;d;4pkt 4fpkt", shape=diamond, color=yellow];
828[label="96.66.76.5;s;3pkt 3fpkt", shape=diamond, color=yellow];
1289[label="215.90.74.35;d;4pkt 4fpkt", shape=diamond, color=yellow];
1986[label="96.66.76.4;s;1pkt 1fpkt", shape=diamond, color=yellow];
2577[label="215.90.74.15;d;3pkt 3fpkt", shape=hexagon, color=black];
2994[label="96.66.76.5;s;3pkt 3fpkt", shape=hexagon, color=black];
3247[label="96.66.76.4;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3265[label="96.66.76.5;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3269[label="221.164.156.5;29pkt 29fpkt", shape=pentagon, color=darkviolet];
5573[label="96.66.76.5;1pkt 1fpkt", shape=invtriangle, color=brown];
5576[label="221.164.156.5;29pkt 29fpkt", shape=invtriangle, color=brown];
stat130[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.164.156.5:6667, *:*}[31.5789%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (14.6018%)&lt;BR/&gt; 5001: (9.73451%)&lt;BR/&gt; 113: (6.19469%)&lt;BR/&gt; 10080: (2.65487%)&lt;BR/&gt; 8080: (2.65487%)&gt;];
}
82--625[label="1;1pkt 1fpkt"];
82--628[label="0.333333;1pkt 1fpkt"];
82--827[label="0.333333;1pkt 1fpkt"];
82--828[label="0.666667;2pkt 2fpkt"];
82--1289[label="0.333333;1pkt 1fpkt"];
82--2577[label="0.333333;1pkt 1fpkt"];
82--2994[label="0.666667;2pkt 2fpkt"];
82--3269[label="0.333333;1pkt 1fpkt"];
82--5576[label="0.333333;1pkt 1fpkt"];
625--628[label="1;1pkt 1fpkt"];
625--3269[label="1;1pkt 1fpkt"];
625--5576[label="1;1pkt 1fpkt"];
628--3269[label="0.964286;27pkt 27fpkt"];
628--5576[label="0.964286;27pkt 27fpkt"];
827--828[label="0.666667;2pkt 2fpkt"];
827--1986[label="1;1pkt 1fpkt"];
827--2577[label="1;3pkt 3fpkt"];
827--2994[label="0.666667;2pkt 2fpkt"];
827--3247[label="0.333333;1pkt 1fpkt"];
827--3265[label="1;1pkt 1fpkt"];
827--5573[label="1;1pkt 1fpkt"];
828--1289[label="0.333333;1pkt 1fpkt"];
828--2577[label="0.333333;1pkt 1fpkt"];
828--2994[label="1;3pkt 3fpkt"];
828--3265[label="1;1pkt 1fpkt"];
828--5573[label="1;1pkt 1fpkt"];
1289--2994[label="0.333333;1pkt 1fpkt"];
1289--3247[label="0.666667;2pkt 2fpkt"];
1986--2577[label="1;1pkt 1fpkt"];
1986--3247[label="1;1pkt 1fpkt"];
2577--2994[label="0.333333;1pkt 1fpkt"];
2577--3247[label="0.333333;1pkt 1fpkt"];
2994--3265[label="1;1pkt 1fpkt"];
2994--5573[label="1;1pkt 1fpkt"];
3265--5573[label="1;1pkt 1fpkt"];
3269--5576[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter src_ip="221.164.156.5" src_port="6667"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_131{
style=filled;
color=gray75;
1755[label="209.1.160.78;d;29pkt 29fpkt", shape=diamond, color=yellow];
stat131[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.160.138.181:*, 209.1.160.78:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 42436: (1.72414%)&lt;BR/&gt; 42435: (1.72414%)&lt;BR/&gt; 42434: (1.72414%)&lt;BR/&gt; 42433: (1.72414%)&gt;];
}
1755--2510[label="1;29pkt 29fpkt"];
1755--2975[label="1;29pkt 29fpkt"];
1755--4962[label="1;29pkt 29fpkt"];
1755--6685[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="209.1.160.78" dst_port="80" src_ip="215.160.138.181"/>
    </slice>
    <from sec="1039669426" usec="0"/>
    <to sec="1039669582" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09135,1.86305,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_132{
style=filled;
color=gray75;
9[label="148.110.23.36s;1pkt 1fpkt", shape=rectangle, color=red];
561[label="148.110.23.36;s;28pkt 28fpkt", shape=diamond, color=yellow];
641[label="38.232.24.73;d;1pkt 1fpkt", shape=diamond, color=yellow];
1623[label="218.10.92.97;d;1pkt 1fpkt", shape=diamond, color=yellow];
2453[label="197.115.98.111;d;1pkt 1fpkt", shape=diamond, color=yellow];
2587[label="148.110.23.36;s;16pkt 16fpkt", shape=hexagon, color=black];
2893[label="38.232.24.73;d;1pkt 1fpkt", shape=hexagon, color=black];
3119[label="197.115.98.111;d;1pkt 1fpkt", shape=hexagon, color=black];
3624[label="148.110.23.36;29pkt 29fpkt", shape=pentagon, color=darkviolet];
stat132[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.110.23.36:2565, *:*}[41.3793%]&lt;BR/&gt;{148.110.23.36:*, 216.197.13.196:80}[24.1379%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2565: (23.4177%)&lt;BR/&gt; 80: (20.2532%)&lt;BR/&gt; 1931: (4.43038%)&lt;BR/&gt; 36090: (3.79747%)&lt;BR/&gt; 3465: (2.53165%)&gt;];
}
9--561[label="1;1pkt 1fpkt"];
9--641[label="1;1pkt 1fpkt"];
9--2587[label="1;1pkt 1fpkt"];
9--2893[label="1;1pkt 1fpkt"];
9--3624[label="1;1pkt 1fpkt"];
561--641[label="1;1pkt 1fpkt"];
561--678[label="0.25;7pkt 7fpkt"];
561--1623[label="1;1pkt 1fpkt"];
561--2453[label="1;1pkt 1fpkt"];
561--2587[label="1;16pkt 16fpkt"];
561--2893[label="1;1pkt 1fpkt"];
561--3119[label="1;1pkt 1fpkt"];
561--3185[label="0.142857;4pkt 4fpkt"];
561--3624[label="1;28pkt 28fpkt"];
641--2587[label="1;1pkt 1fpkt"];
641--2893[label="1;1pkt 1fpkt"];
641--3624[label="1;1pkt 1fpkt"];
1623--2587[label="1;1pkt 1fpkt"];
1623--3624[label="1;1pkt 1fpkt"];
2453--3119[label="1;1pkt 1fpkt"];
2453--3624[label="1;1pkt 1fpkt"];
2587--2893[label="1;1pkt 1fpkt"];
2587--3185[label="0.0625;1pkt 1fpkt"];
2587--3624[label="1;16pkt 16fpkt"];
2893--3624[label="1;1pkt 1fpkt"];
3119--3624[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="148.110.23.36" src_port="2565"/>
      <filter dst_ip="216.197.13.196" dst_port="80" src_ip="148.110.23.36"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.85355,1.83055,999,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_133{
style=filled;
color=gray75;
65[label="208.166.141.248s;1pkt 1fpkt", shape=rectangle, color=red];
650[label="138.186.218.64;d;1pkt 1fpkt", shape=diamond, color=yellow];
934[label="208.166.141.248;s;1pkt 1fpkt", shape=diamond, color=yellow];
5478[label="208.166.141.248;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat133[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.166.141.248:8006, 138.186.218.64:49157}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49157: (50%)&lt;BR/&gt; 8006: (50%)&gt;];
}
65--650[label="1;1pkt 1fpkt"];
65--934[label="1;1pkt 1fpkt"];
65--5478[label="1;1pkt 1fpkt"];
650--934[label="1;1pkt 1fpkt"];
650--5478[label="1;1pkt 1fpkt"];
934--5478[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.218.64" dst_port="49157" src_ip="208.166.141.248" src_port="8006"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14144,1.92665,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_134{
style=filled;
color=gray75;
161[label="138.186.218.64s;1pkt 1fpkt", shape=rectangle, color=red];
651[label="138.186.218.64;s;1pkt 1fpkt", shape=diamond, color=yellow];
652[label="208.166.141.248;d;1pkt 1fpkt", shape=diamond, color=yellow];
2896[label="208.166.141.248;d;1pkt 1fpkt", shape=hexagon, color=black];
stat134[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.218.64:49157, 208.166.141.248:8006}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49157: (50%)&lt;BR/&gt; 8006: (50%)&gt;];
}
161--651[label="1;1pkt 1fpkt"];
161--652[label="1;1pkt 1fpkt"];
161--2896[label="1;1pkt 1fpkt"];
651--652[label="1;1pkt 1fpkt"];
651--2896[label="1;1pkt 1fpkt"];
652--2896[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.166.141.248" dst_port="8006" src_ip="138.186.218.64" src_port="49157"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09135,1.86305,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_135{
style=filled;
color=gray75;
56[label="61.200.42.218s;1pkt 1fpkt", shape=rectangle, color=red];
662[label="61.200.42.218;s;1pkt 1fpkt", shape=diamond, color=yellow];
2770[label="61.200.42.218;s;1pkt 1fpkt", shape=hexagon, color=black];
5251[label="61.200.42.218;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat135[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.200.42.218:6699, 138.186.50.203:1043}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1043: (50%)&gt;];
}
56--526[label="1;1pkt 1fpkt"];
56--662[label="1;1pkt 1fpkt"];
56--2770[label="1;1pkt 1fpkt"];
56--5251[label="1;1pkt 1fpkt"];
662--2770[label="1;1pkt 1fpkt"];
662--5251[label="1;1pkt 1fpkt"];
2770--5251[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.50.203" dst_port="1043" src_ip="61.200.42.218" src_port="6699"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.85355,1.83055,999,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_136{
style=filled;
color=gray75;
18[label="214.216.53.71s;3pkt 3fpkt", shape=rectangle, color=red];
692[label="61.9.127.165;d;87pkt 87fpkt", shape=diamond, color=yellow];
693[label="214.216.53.71;s;94pkt 94fpkt", shape=diamond, color=yellow];
1454[label="36.114.231.250;d;3pkt 3fpkt", shape=diamond, color=yellow];
3967[label="214.216.53.71;136pkt 136fpkt", shape=pentagon, color=darkviolet];
stat136[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.216.53.71:*, 61.9.127.165:*}[73.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (4.17957%)&lt;BR/&gt; 0: (3.09598%)&lt;BR/&gt; 21: (1.23839%)&lt;BR/&gt; 54192: (0.619195%)&lt;BR/&gt; 54157: (0.619195%)&gt;];
}
18--692[label="1;3pkt 3fpkt"];
18--693[label="1;3pkt 3fpkt"];
18--3967[label="1;3pkt 3fpkt"];
692--693[label="0.666667;58pkt 58fpkt"];
692--3967[label="1;87pkt 87fpkt"];
693--1454[label="1;3pkt 3fpkt"];
693--3967[label="1;94pkt 94fpkt"];
1454--3967[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="61.9.127.165" src_ip="214.216.53.71"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19604,1.81002,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_137{
style=filled;
color=gray75;
25[label="138.186.59.96s;2pkt 2fpkt", shape=rectangle, color=red];
655[label="138.186.59.96;s;158pkt 158fpkt", shape=diamond, color=yellow];
704[label="131.220.113.193;d;1pkt 1fpkt", shape=diamond, color=yellow];
960[label="33.14.188.85;d;1pkt 1fpkt", shape=diamond, color=yellow];
986[label="61.5.24.215;d;1pkt 1fpkt", shape=diamond, color=yellow];
1265[label="200.235.29.130;d;1pkt 1fpkt", shape=diamond, color=yellow];
1447[label="64.167.221.155;d;2pkt 2fpkt", shape=diamond, color=yellow];
1816[label="61.200.216.229;d;1pkt 1fpkt", shape=diamond, color=yellow];
1938[label="64.22.6.34;d;2pkt 2fpkt", shape=diamond, color=yellow];
2779[label="33.14.188.85;d;1pkt 1fpkt", shape=hexagon, color=black];
2781[label="64.42.228.221;d;3pkt 3fpkt", shape=hexagon, color=black];
4228[label="138.186.59.96;180pkt 180fpkt", shape=pentagon, color=darkviolet];
6191[label="138.186.59.96;180pkt 180fpkt", shape=invtriangle, color=brown];
7465[label="138.186.59.96;180pkt 180fpkt", shape=invhouse, color=bisque];
stat137[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.59.96:6257, *:6257}[93.9891%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (93.6886%)&lt;BR/&gt; 6699: (2.9453%)&lt;BR/&gt; 1193: (0.490884%)&lt;BR/&gt; 65156: (0.420757%)&lt;BR/&gt; 2297: (0.350631%)&gt;];
}
25--655[label="1;2pkt 2fpkt"];
25--704[label="1;1pkt 1fpkt"];
25--960[label="1;1pkt 1fpkt"];
25--2779[label="1;1pkt 1fpkt"];
25--4228[label="1;2pkt 2fpkt"];
25--6191[label="1;2pkt 2fpkt"];
25--7465[label="1;2pkt 2fpkt"];
655--687[label="0.333333;1pkt 1fpkt"];
655--704[label="1;1pkt 1fpkt"];
655--960[label="1;1pkt 1fpkt"];
655--986[label="1;1pkt 1fpkt"];
655--1265[label="1;1pkt 1fpkt"];
655--1447[label="1;2pkt 2fpkt"];
655--1816[label="1;1pkt 1fpkt"];
655--1938[label="1;2pkt 2fpkt"];
655--2779[label="1;1pkt 1fpkt"];
655--2781[label="0.333333;1pkt 1fpkt"];
655--4228[label="0.993671;157pkt 157fpkt"];
655--6191[label="0.993671;157pkt 157fpkt"];
655--7465[label="0.993671;157pkt 157fpkt"];
704--4228[label="1;1pkt 1fpkt"];
704--6191[label="1;1pkt 1fpkt"];
704--7465[label="1;1pkt 1fpkt"];
960--2779[label="1;1pkt 1fpkt"];
960--4228[label="1;1pkt 1fpkt"];
960--6191[label="1;1pkt 1fpkt"];
960--7465[label="1;1pkt 1fpkt"];
986--4228[label="1;1pkt 1fpkt"];
986--6191[label="1;1pkt 1fpkt"];
986--7465[label="1;1pkt 1fpkt"];
1265--4228[label="1;1pkt 1fpkt"];
1265--6191[label="1;1pkt 1fpkt"];
1265--7465[label="1;1pkt 1fpkt"];
1447--4228[label="1;2pkt 2fpkt"];
1447--6191[label="1;2pkt 2fpkt"];
1447--7465[label="1;2pkt 2fpkt"];
1816--4228[label="1;1pkt 1fpkt"];
1816--6191[label="1;1pkt 1fpkt"];
1816--7465[label="1;1pkt 1fpkt"];
1938--4228[label="1;2pkt 2fpkt"];
1938--6191[label="1;2pkt 2fpkt"];
1938--7465[label="1;2pkt 2fpkt"];
2779--4228[label="1;1pkt 1fpkt"];
2779--6191[label="1;1pkt 1fpkt"];
2779--7465[label="1;1pkt 1fpkt"];
2781--4226[label="0.666667;2pkt 2fpkt"];
2781--4228[label="0.333333;1pkt 1fpkt"];
2781--6189[label="0.666667;2pkt 2fpkt"];
2781--6191[label="0.333333;1pkt 1fpkt"];
2781--7463[label="0.666667;2pkt 2fpkt"];
2781--7465[label="0.333333;1pkt 1fpkt"];
4228--6191[label="1;180pkt 180fpkt"];
4228--7465[label="1;180pkt 180fpkt"];
6191--7465[label="1;180pkt 180fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="138.186.59.96" src_port="6257"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_138{
style=filled;
color=gray75;
705[label="138.49.94.68;s;11pkt 11fpkt", shape=diamond, color=yellow];
706[label="131.151.23.208;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat138[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.49.94.68:*, 221.52.16.107:14500}[81.8182%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 14500: (37.5%)&lt;BR/&gt; 7595: (8.33333%)&lt;BR/&gt; 3140: (8.33333%)&lt;BR/&gt; 7634: (4.16667%)&lt;BR/&gt; 4434: (4.16667%)&gt;];
}
705--706[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="221.52.16.107" dst_port="14500" src_ip="138.49.94.68"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_139{
style=filled;
color=gray75;
709[label="200.224.140.37;d;1pkt 1fpkt", shape=diamond, color=yellow];
710[label="140.3.234.76;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat139[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.234.76:1935, 200.224.140.37:3351}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3351: (50%)&lt;BR/&gt; 1935: (50%)&gt;];
}
709--710[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.224.140.37" dst_port="3351" src_ip="140.3.234.76" src_port="1935"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09135,1.86305,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_140{
style=filled;
color=gray75;
53[label="196.150.6.215s;1pkt 1fpkt", shape=rectangle, color=red];
673[label="148.110.12.64;d;9pkt 9fpkt", shape=diamond, color=yellow];
719[label="197.66.11.111;s;1pkt 1fpkt", shape=diamond, color=yellow];
725[label="196.150.6.215;s;1pkt 1fpkt", shape=diamond, color=yellow];
1116[label="36.208.191.134;s;1pkt 1fpkt", shape=diamond, color=yellow];
1363[label="61.181.155.189;s;1pkt 1fpkt", shape=diamond, color=yellow];
2670[label="148.110.12.64;d;9pkt 9fpkt", shape=hexagon, color=black];
5035[label="61.181.155.189;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5230[label="196.150.6.215;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat140[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6699, 148.110.12.64:*}[77.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (42%)&lt;BR/&gt; 1081: (10%)&lt;BR/&gt; 1068: (8%)&lt;BR/&gt; 0: (8%)&lt;BR/&gt; 1105: (6%)&gt;];
}
53--673[label="1;1pkt 1fpkt"];
53--725[label="1;1pkt 1fpkt"];
53--2670[label="1;1pkt 1fpkt"];
53--5230[label="1;1pkt 1fpkt"];
673--719[label="1;1pkt 1fpkt"];
673--725[label="1;1pkt 1fpkt"];
673--1116[label="1;1pkt 1fpkt"];
673--1363[label="1;1pkt 1fpkt"];
673--2670[label="1;9pkt 9fpkt"];
673--5035[label="1;1pkt 1fpkt"];
673--5230[label="1;1pkt 1fpkt"];
719--2670[label="1;1pkt 1fpkt"];
725--2670[label="1;1pkt 1fpkt"];
725--5230[label="1;1pkt 1fpkt"];
1116--2670[label="1;1pkt 1fpkt"];
1363--2670[label="1;1pkt 1fpkt"];
1363--5035[label="1;1pkt 1fpkt"];
2670--5035[label="1;1pkt 1fpkt"];
2670--5230[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.12.64" src_port="6699"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,002,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.231.137.231"/>
      <from sec="1039669696" usec="0"/>
      <to sec="1039669702" usec="0"/>
    </slice>
    <from sec="1039669696" usec="0"/>
    <to sec="1039669702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,002,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="96.152.153.70"/>
      <from sec="1039669696" usec="0"/>
      <to sec="1039669702" usec="0"/>
    </slice>
    <from sec="1039669696" usec="0"/>
    <to sec="1039669702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.916727,1.89524,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_143{
style=filled;
color=gray75;
277[label="197.94.73.180s;2pkt 2fpkt", shape=rectangle, color=red];
732[label="172.93.74.15;d;1152pkt 1152fpkt", shape=diamond, color=yellow];
733[label="197.177.149.197;s;1151pkt 1151fpkt", shape=diamond, color=yellow];
stat143[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.177.149.197:80, 172.93.74.15:*}[24.8264%]&lt;BR/&gt;{197.177.149.197:*, 172.93.74.15:80}[23.4375%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (24.1215%)&lt;BR/&gt; 6699: (7.37527%)&lt;BR/&gt; 53: (2.90672%)&lt;BR/&gt; 1755: (2.38612%)&lt;BR/&gt; 25: (1.21475%)&gt;];
}
277--732[label="1;2pkt 2fpkt"];
277--733[label="1;2pkt 2fpkt"];
732--733[label="1;1151pkt 1151fpkt"];
732--3179[label="0.00146628;1pkt 1fpkt"];
732--3182[label="0.00173611;2pkt 2fpkt"];
732--3183[label="0.00138504;1pkt 1fpkt"];
732--3184[label="0.000868056;1pkt 1fpkt"];
732--3185[label="0.0251736;29pkt 29fpkt"];
732--3187[label="0.00146628;1pkt 1fpkt"];
733--3179[label="0.00146628;1pkt 1fpkt"];
733--3182[label="0.00173762;2pkt 2fpkt"];
733--3183[label="0.00138504;1pkt 1fpkt"];
733--3184[label="0.00086881;1pkt 1fpkt"];
733--3185[label="0.0251955;29pkt 29fpkt"];
733--3187[label="0.00146628;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.93.74.15" src_ip="197.177.149.197" src_port="80"/>
      <filter dst_ip="172.93.74.15" dst_port="80" src_ip="197.177.149.197"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_144{
style=filled;
color=gray75;
5086[label="196.139.146.197;56pkt 56fpkt", shape=pentagon, color=darkviolet];
stat144[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.139.146.197:443, 215.160.138.180:*}[60.7143%]&lt;BR/&gt;{196.139.146.197:80, 215.160.138.180:*}[39.2857%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (30.3571%)&lt;BR/&gt; 80: (19.6429%)&lt;BR/&gt; 49065: (0.892857%)&lt;BR/&gt; 49042: (0.892857%)&lt;BR/&gt; 49041: (0.892857%)&gt;];
}
5086--6754[label="1;56pkt 56fpkt"];
5086--7822[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_ip="215.160.138.180" src_ip="196.139.146.197" src_port="443"/>
      <filter dst_ip="215.160.138.180" src_ip="196.139.146.197" src_port="80"/>
    </slice>
    <from sec="1039669207" usec="0"/>
    <to sec="1039669299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_145{
style=filled;
color=gray75;
1343[label="196.179.206.198;s;65pkt 65fpkt", shape=diamond, color=yellow];
stat145[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.179.206.198:80, 215.90.155.102:*}[36.9231%]&lt;BR/&gt;{196.179.206.198:80, 215.90.152.114:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49783: (0.769231%)&lt;BR/&gt; 49767: (0.769231%)&lt;BR/&gt; 49763: (0.769231%)&lt;BR/&gt; 49760: (0.769231%)&gt;];
}
1343--2472[label="0.2;13pkt 13fpkt"];
1343--2482[label="0.184615;12pkt 12fpkt"];
1343--2871[label="0.0153846;1pkt 1fpkt"];
1343--5097[label="1;65pkt 65fpkt"];
1343--6761[label="1;65pkt 65fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.155.102" src_ip="196.179.206.198" src_port="80"/>
      <filter dst_ip="215.90.152.114" src_ip="196.179.206.198" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669540" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_147{
style=filled;
color=gray75;
52[label="148.110.54.208s;2pkt 2fpkt", shape=rectangle, color=red];
stat147[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.110.54.208:57942, 38.64.190.42:20}[50%]&lt;BR/&gt;{148.110.54.208:20, 215.3.111.146:1199}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (50%)&lt;BR/&gt; 57942: (25%)&lt;BR/&gt; 1199: (25%)&gt;];
}
52--633[label="0.5;1pkt 1fpkt"];
52--713[label="1;2pkt 2fpkt"];
52--742[label="0.5;1pkt 1fpkt"];
52--2890[label="0.5;1pkt 1fpkt"];
52--5171[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.3.111.146" dst_port="1199" src_ip="148.110.54.208" src_port="20"/>
      <filter dst_ip="38.64.190.42" dst_port="20" src_ip="148.110.54.208" src_port="57942"/>
    </slice>
    <from sec="1039669324" usec="0"/>
    <to sec="1039669335" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905994,1.86884,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_148{
style=filled;
color=gray75;
743[label="138.186.55.66;d;1pkt 1fpkt", shape=diamond, color=yellow];
744[label="203.52.72.171;s;1pkt 1fpkt", shape=diamond, color=yellow];
2924[label="203.52.72.171;s;1pkt 1fpkt", shape=hexagon, color=black];
4874[label="203.52.72.171;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat148[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.52.72.171:7743, 138.186.55.66:3019}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7743: (50%)&lt;BR/&gt; 3019: (50%)&gt;];
}
743--744[label="1;1pkt 1fpkt"];
743--2924[label="1;1pkt 1fpkt"];
743--4874[label="1;1pkt 1fpkt"];
744--2924[label="1;1pkt 1fpkt"];
744--4874[label="1;1pkt 1fpkt"];
2924--4874[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.55.66" dst_port="3019" src_ip="203.52.72.171" src_port="7743"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_149{
style=filled;
color=gray75;
534[label="140.3.255.232;d;2pkt 2fpkt", shape=diamond, color=yellow];
856[label="39.111.168.162;s;1pkt 1fpkt", shape=diamond, color=yellow];
2647[label="140.3.255.232;d;2pkt 2fpkt", shape=hexagon, color=black];
stat149[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.111.168.162:80, 140.3.255.232:3122}[50%]&lt;BR/&gt;{211.90.23.194:80, 140.3.255.232:3124}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3122: (30%)&lt;BR/&gt; 3124: (20%)&gt;];
}
534--747[label="0.5;1pkt 1fpkt"];
534--856[label="1;1pkt 1fpkt"];
534--2647[label="1;2pkt 2fpkt"];
534--4791[label="0.5;1pkt 1fpkt"];
534--5054[label="0.5;1pkt 1fpkt"];
534--6565[label="0.5;1pkt 1fpkt"];
534--7702[label="0.5;1pkt 1fpkt"];
856--2647[label="1;1pkt 1fpkt"];
856--4791[label="1;1pkt 1fpkt"];
856--6565[label="1;1pkt 1fpkt"];
856--7702[label="1;1pkt 1fpkt"];
2647--4791[label="0.5;1pkt 1fpkt"];
2647--5054[label="0.5;1pkt 1fpkt"];
2647--6565[label="0.5;1pkt 1fpkt"];
2647--7702[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.255.232" dst_port="3124" src_ip="211.90.23.194" src_port="80"/>
      <filter dst_ip="140.3.255.232" dst_port="3122" src_ip="39.111.168.162" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669541" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19604,1.81002,503,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_150{
style=filled;
color=gray75;
315[label="140.3.13.230s;2pkt 2fpkt", shape=rectangle, color=red];
510[label="170.73.163.137;d;144pkt 144fpkt", shape=diamond, color=yellow];
749[label="140.3.13.230;s;40pkt 40fpkt", shape=diamond, color=yellow];
849[label="140.3.110.39;s;120pkt 120fpkt", shape=diamond, color=yellow];
2493[label="140.3.13.230;s;39pkt 39fpkt", shape=hexagon, color=black];
3664[label="140.3.110.39;121pkt 121fpkt", shape=pentagon, color=darkviolet];
5342[label="140.3.13.230;39pkt 39fpkt", shape=pentagon, color=darkviolet];
5826[label="140.3.110.39;122pkt 122fpkt", shape=invtriangle, color=brown];
6922[label="140.3.13.230;39pkt 39fpkt", shape=invtriangle, color=brown];
7236[label="140.3.110.39;122pkt 122fpkt", shape=invhouse, color=bisque];
stat150[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.110.39:*, 170.73.163.137:80}[64.4172%]&lt;BR/&gt;{140.3.13.230:*, 170.73.163.137:80}[23.3129%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.9213%)&lt;BR/&gt; 1863: (1.07868%)&lt;BR/&gt; 1376: (0.444162%)&lt;BR/&gt; 1375: (0.380711%)&lt;BR/&gt; 1374: (0.380711%)&gt;];
}
315--510[label="1;2pkt 2fpkt"];
315--749[label="1;2pkt 2fpkt"];
315--2493[label="1;2pkt 2fpkt"];
315--5342[label="1;2pkt 2fpkt"];
315--6922[label="1;2pkt 2fpkt"];
510--749[label="0.95;38pkt 38fpkt"];
510--849[label="0.875;105pkt 105fpkt"];
510--2493[label="0.974359;38pkt 38fpkt"];
510--3664[label="0.867769;105pkt 105fpkt"];
510--5342[label="0.974359;38pkt 38fpkt"];
510--5826[label="0.860656;105pkt 105fpkt"];
510--6922[label="0.974359;38pkt 38fpkt"];
510--7236[label="0.860656;105pkt 105fpkt"];
749--2493[label="1;39pkt 39fpkt"];
749--5342[label="1;39pkt 39fpkt"];
749--6922[label="1;39pkt 39fpkt"];
849--2105[label="0.0178571;1pkt 1fpkt"];
849--3664[label="0.991667;119pkt 119fpkt"];
849--5826[label="1;120pkt 120fpkt"];
849--7236[label="1;120pkt 120fpkt"];
2493--5342[label="0.974359;38pkt 38fpkt"];
2493--6922[label="0.974359;38pkt 38fpkt"];
3664--5826[label="1;121pkt 121fpkt"];
3664--7236[label="1;121pkt 121fpkt"];
5342--6922[label="1;39pkt 39fpkt"];
5826--7236[label="1;122pkt 122fpkt"];
</description>
    <slice>
      <filter dst_ip="170.73.163.137" dst_port="80" src_ip="140.3.110.39"/>
      <filter dst_ip="170.73.163.137" dst_port="80" src_ip="140.3.13.230"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14144,1.92665,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_152{
style=filled;
color=gray75;
14[label="64.147.106.46s;1pkt 1fpkt", shape=rectangle, color=red];
796[label="64.147.106.46;s;1pkt 1fpkt", shape=diamond, color=yellow];
2630[label="64.147.106.46;s;1pkt 1fpkt", shape=hexagon, color=black];
stat152[shape=component, label=&lt;Rules:&lt;BR/&gt;{64.147.106.46:6699, 215.90.87.50:3141}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3141: (50%)&gt;];
}
14--512[label="1;1pkt 1fpkt"];
14--796[label="1;1pkt 1fpkt"];
14--2630[label="1;1pkt 1fpkt"];
796--2630[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.87.50" dst_port="3141" src_ip="64.147.106.46" src_port="6699"/>
    </slice>
    <from sec="1039669231" usec="0"/>
    <to sec="1039669863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00075,1.85039,503,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_153{
style=filled;
color=gray75;
811[label="140.3.212.39;d;1pkt 1fpkt", shape=diamond, color=yellow];
812[label="196.179.213.9;s;1pkt 1fpkt", shape=diamond, color=yellow];
2565[label="196.179.213.9;s;1pkt 1fpkt", shape=hexagon, color=black];
3329[label="196.179.213.9;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7108[label="196.179.213.9;1pkt 1fpkt", shape=invhouse, color=bisque];
stat153[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.179.213.9:80, 140.3.212.39:1925}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1925: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
811--812[label="1;1pkt 1fpkt"];
811--2565[label="1;1pkt 1fpkt"];
811--3329[label="1;1pkt 1fpkt"];
811--7108[label="1;1pkt 1fpkt"];
812--2565[label="1;1pkt 1fpkt"];
812--3329[label="1;1pkt 1fpkt"];
812--7108[label="1;1pkt 1fpkt"];
2565--3329[label="1;1pkt 1fpkt"];
2565--7108[label="1;1pkt 1fpkt"];
3329--7108[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.212.39" dst_port="1925" src_ip="196.179.213.9" src_port="80"/>
    </slice>
    <from sec="1039669279" usec="0"/>
    <to sec="1039669318" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.937874,1.83478,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_154{
style=filled;
color=gray75;
814[label="143.27.29.250;d;2pkt 2fpkt", shape=diamond, color=yellow];
815[label="138.177.139.183;s;2pkt 2fpkt", shape=diamond, color=yellow];
2566[label="138.177.139.183;s;2pkt 2fpkt", shape=hexagon, color=black];
2634[label="143.27.29.250;d;2pkt 2fpkt", shape=hexagon, color=black];
4983[label="138.177.139.183;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6700[label="138.177.139.183;1pkt 1fpkt", shape=invtriangle, color=brown];
stat154[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.177.139.183:1094, 143.27.29.250:21}[50%]&lt;BR/&gt;{138.177.139.183:1095, 143.27.29.250:52231}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52231: (30%)&lt;BR/&gt; 1095: (30%)&lt;BR/&gt; 1094: (20%)&lt;BR/&gt; 21: (20%)&gt;];
}
814--815[label="1;2pkt 2fpkt"];
814--2566[label="1;2pkt 2fpkt"];
814--2634[label="1;2pkt 2fpkt"];
814--4983[label="1;1pkt 1fpkt"];
814--6700[label="1;1pkt 1fpkt"];
815--2566[label="1;2pkt 2fpkt"];
815--2634[label="1;2pkt 2fpkt"];
815--4983[label="1;1pkt 1fpkt"];
815--6700[label="1;1pkt 1fpkt"];
2566--2634[label="1;2pkt 2fpkt"];
2566--4983[label="1;1pkt 1fpkt"];
2566--6700[label="1;1pkt 1fpkt"];
2634--4983[label="1;1pkt 1fpkt"];
2634--6700[label="1;1pkt 1fpkt"];
4983--6700[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.27.29.250" dst_port="52231" src_ip="138.177.139.183" src_port="1095"/>
      <filter dst_ip="143.27.29.250" dst_port="21" src_ip="138.177.139.183" src_port="1094"/>
    </slice>
    <from sec="1039669292" usec="0"/>
    <to sec="1039669321" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_155{
style=filled;
color=gray75;
817[label="38.72.252.248;d;43pkt 43fpkt", shape=diamond, color=yellow];
3702[label="140.3.144.43;26pkt 26fpkt", shape=pentagon, color=darkviolet];
5100[label="140.3.248.198;15pkt 15fpkt", shape=pentagon, color=darkviolet];
5850[label="140.3.144.43;25pkt 25fpkt", shape=invtriangle, color=brown];
6764[label="140.3.248.198;15pkt 15fpkt", shape=invtriangle, color=brown];
7249[label="140.3.144.43;25pkt 25fpkt", shape=invhouse, color=bisque];
7829[label="140.3.248.198;14pkt 14fpkt", shape=invhouse, color=bisque];
stat155[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 38.72.252.248:80}[61.1111%]&lt;BR/&gt;{140.3.144.43:*, *:80}[36.1111%]&lt;BR/&gt;{140.3.248.198:*, *:80}[20.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3865%)&lt;BR/&gt; 1348: (1.22699%)&lt;BR/&gt; 1345: (1.22699%)&lt;BR/&gt; 1339: (1.22699%)&lt;BR/&gt; 1338: (1.22699%)&gt;];
}
817--1033[label="0.0232558;1pkt 1fpkt"];
817--1119[label="0.232558;10pkt 10fpkt"];
817--2091[label="0.0232558;1pkt 1fpkt"];
817--2409[label="0.116279;5pkt 5fpkt"];
817--2574[label="0.0465116;2pkt 2fpkt"];
817--2691[label="0.0232558;1pkt 1fpkt"];
817--2935[label="0.0294118;1pkt 1fpkt"];
817--3141[label="0.0232558;1pkt 1fpkt"];
817--3161[label="0.0294118;1pkt 1fpkt"];
817--3526[label="0.116279;5pkt 5fpkt"];
817--3702[label="0.384615;10pkt 10fpkt"];
817--3941[label="0.0232558;1pkt 1fpkt"];
817--5062[label="0.0789474;3pkt 3fpkt"];
817--5100[label="0.133333;2pkt 2fpkt"];
817--5745[label="0.116279;5pkt 5fpkt"];
817--5850[label="0.36;9pkt 9fpkt"];
817--6764[label="0.133333;2pkt 2fpkt"];
817--7186[label="0.116279;5pkt 5fpkt"];
817--7249[label="0.36;9pkt 9fpkt"];
817--7829[label="0.142857;2pkt 2fpkt"];
3702--5850[label="1;25pkt 25fpkt"];
3702--7249[label="1;25pkt 25fpkt"];
5100--6764[label="1;15pkt 15fpkt"];
5100--7829[label="1;14pkt 14fpkt"];
5850--7249[label="1;25pkt 25fpkt"];
6764--7829[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="140.3.144.43"/>
      <filter dst_port="80" src_ip="140.3.248.198"/>
      <filter dst_ip="38.72.252.248" dst_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669908" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_156{
style=filled;
color=gray75;
457[label="148.110.225.10;d;187pkt 187fpkt", shape=diamond, color=yellow];
823[label="200.65.201.5;s;2pkt 2fpkt", shape=diamond, color=yellow];
1000[label="61.12.112.14;s;1pkt 1fpkt", shape=diamond, color=yellow];
1180[label="92.255.236.20;s;2pkt 2fpkt", shape=diamond, color=yellow];
1556[label="200.141.150.20;s;1pkt 1fpkt", shape=diamond, color=yellow];
2834[label="92.255.236.20;s;2pkt 2fpkt", shape=hexagon, color=black];
2869[label="148.110.225.10;d;186pkt 186fpkt", shape=hexagon, color=black];
3021[label="61.12.112.14;s;1pkt 1fpkt", shape=hexagon, color=black];
stat156[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6257, 148.110.225.10:6257}[93.0481%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (93.1937%)&lt;BR/&gt; 6699: (2.35602%)&lt;BR/&gt; 3776: (0.52356%)&lt;BR/&gt; 3061: (0.52356%)&lt;BR/&gt; 3772: (0.39267%)&gt;];
}
457--823[label="1;2pkt 2fpkt"];
457--1000[label="1;1pkt 1fpkt"];
457--1180[label="1;2pkt 2fpkt"];
457--1556[label="1;1pkt 1fpkt"];
457--2834[label="1;2pkt 2fpkt"];
457--2869[label="1;186pkt 186fpkt"];
457--3021[label="1;1pkt 1fpkt"];
823--2869[label="1;2pkt 2fpkt"];
1000--2869[label="1;1pkt 1fpkt"];
1000--3021[label="1;1pkt 1fpkt"];
1180--2834[label="1;2pkt 2fpkt"];
1180--2869[label="1;2pkt 2fpkt"];
1556--2869[label="1;1pkt 1fpkt"];
2834--2869[label="1;2pkt 2fpkt"];
2869--3021[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.225.10" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_157{
style=filled;
color=gray75;
472[label="210.107.41.108;d;1pkt 1fpkt", shape=diamond, color=yellow];
831[label="138.186.32.150;s;6pkt 6fpkt", shape=diamond, color=yellow];
stat157[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.32.150:0, *:0}[50%]&lt;BR/&gt;{138.186.32.150:*, 208.166.141.132:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (42.8571%)&lt;BR/&gt; 37930: (14.2857%)&lt;BR/&gt; 8000: (14.2857%)&lt;BR/&gt; 80: (14.2857%)&lt;BR/&gt; 4041: (7.14286%)&gt;];
}
472--831[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.166.141.132" dst_port="80" src_ip="138.186.32.150"/>
      <filter src_ip="138.186.32.150"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09135,1.86305,503,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_158{
style=filled;
color=gray75;
122[label="148.110.192.34s;4pkt 4fpkt", shape=rectangle, color=red];
480[label="148.110.192.34;s;16pkt 16fpkt", shape=diamond, color=yellow];
536[label="201.181.98.144;d;1pkt 1fpkt", shape=diamond, color=yellow];
836[label="64.177.230.152;d;1pkt 1fpkt", shape=diamond, color=yellow];
967[label="92.196.149.155;d;1pkt 1fpkt", shape=diamond, color=yellow];
1857[label="138.7.26.50;d;74pkt 74fpkt", shape=diamond, color=yellow];
1978[label="38.25.148.135;d;2pkt 2fpkt", shape=diamond, color=yellow];
2903[label="92.196.149.155;d;1pkt 1fpkt", shape=hexagon, color=black];
3614[label="148.110.192.34;15pkt 15fpkt", shape=pentagon, color=darkviolet];
stat158[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 138.7.26.50:*}[78.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.3043%)&lt;BR/&gt; 6257: (19.1304%)&lt;BR/&gt; 6699: (6.95652%)&lt;BR/&gt; 4149: (2.17391%)&lt;BR/&gt; 2157: (1.73913%)&gt;];
}
122--480[label="0.75;3pkt 3fpkt"];
122--536[label="1;1pkt 1fpkt"];
122--836[label="1;1pkt 1fpkt"];
122--967[label="1;1pkt 1fpkt"];
122--1857[label="0.25;1pkt 1fpkt"];
122--2903[label="1;1pkt 1fpkt"];
122--3614[label="0.75;3pkt 3fpkt"];
480--536[label="1;1pkt 1fpkt"];
480--836[label="1;1pkt 1fpkt"];
480--967[label="1;1pkt 1fpkt"];
480--1978[label="1;2pkt 2fpkt"];
480--2903[label="1;1pkt 1fpkt"];
480--3614[label="1;15pkt 15fpkt"];
536--3614[label="1;1pkt 1fpkt"];
836--3614[label="1;1pkt 1fpkt"];
967--2903[label="1;1pkt 1fpkt"];
967--3614[label="1;1pkt 1fpkt"];
1857--1885[label="0.294118;15pkt 15fpkt"];
1857--2748[label="0.0135135;1pkt 1fpkt"];
1857--3310[label="0.0952381;2pkt 2fpkt"];
1857--3354[label="0.0135135;1pkt 1fpkt"];
1857--3497[label="0.0138889;1pkt 1fpkt"];
1857--3621[label="0.277778;15pkt 15fpkt"];
1857--3629[label="0.0135135;1pkt 1fpkt"];
1857--4128[label="0.027027;2pkt 2fpkt"];
1857--5496[label="0.0322581;1pkt 1fpkt"];
1857--5631[label="0.0135135;1pkt 1fpkt"];
1857--5722[label="0.0138889;1pkt 1fpkt"];
1857--6125[label="0.027027;2pkt 2fpkt"];
1857--7114[label="0.0135135;1pkt 1fpkt"];
1857--7173[label="0.0140845;1pkt 1fpkt"];
1857--7426[label="0.027027;2pkt 2fpkt"];
1978--3614[label="1;2pkt 2fpkt"];
2903--3614[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.7.26.50" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.983876,1.77655,002,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_159{
style=filled;
color=gray75;
23[label="214.193.15.87s;3pkt 3fpkt", shape=rectangle, color=red];
488[label="148.110.13.131;d;4pkt 4fpkt", shape=diamond, color=yellow];
590[label="148.110.13.208;d;20pkt 20fpkt", shape=diamond, color=yellow];
844[label="214.193.15.87;s;3pkt 3fpkt", shape=diamond, color=yellow];
4102[label="201.37.163.84;30pkt 30fpkt", shape=pentagon, color=darkviolet];
4129[label="214.193.15.87;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4851[label="214.97.176.168;177pkt 177fpkt", shape=pentagon, color=darkviolet];
6108[label="201.37.163.84;29pkt 29fpkt", shape=invtriangle, color=brown];
6607[label="214.97.176.168;177pkt 177fpkt", shape=invtriangle, color=brown];
7726[label="214.97.176.168;178pkt 178fpkt", shape=invhouse, color=bisque];
stat159[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.97.176.168:1045, *:137}[78.7611%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1045: (42.8571%)&lt;BR/&gt; 137: (42.8571%)&lt;BR/&gt; 80: (6.90209%)&lt;BR/&gt; 1132: (0.321027%)&lt;BR/&gt; 1110: (0.321027%)&gt;];
}
23--488[label="1;3pkt 3fpkt"];
23--844[label="1;3pkt 3fpkt"];
23--4129[label="1;2pkt 2fpkt"];
488--844[label="1;3pkt 3fpkt"];
488--4129[label="1;2pkt 2fpkt"];
488--4851[label="0.25;1pkt 1fpkt"];
488--6607[label="0.25;1pkt 1fpkt"];
488--7726[label="0.25;1pkt 1fpkt"];
590--591[label="1;2pkt 2fpkt"];
590--1387[label="0.1;2pkt 2fpkt"];
590--1392[label="0.3;6pkt 6fpkt"];
590--2619[label="0.1;2pkt 2fpkt"];
590--2657[label="1;2pkt 2fpkt"];
590--4102[label="0.2;4pkt 4fpkt"];
590--4512[label="0.2;4pkt 4fpkt"];
590--4643[label="1;1pkt 1fpkt"];
590--4851[label="0.05;1pkt 1fpkt"];
590--5118[label="0.3;6pkt 6fpkt"];
590--6108[label="0.2;4pkt 4fpkt"];
590--6382[label="0.2;4pkt 4fpkt"];
590--6470[label="1;2pkt 2fpkt"];
590--6607[label="0.05;1pkt 1fpkt"];
590--6777[label="0.3;6pkt 6fpkt"];
590--7639[label="1;2pkt 2fpkt"];
590--7726[label="0.05;1pkt 1fpkt"];
590--7837[label="0.3;6pkt 6fpkt"];
844--4129[label="1;2pkt 2fpkt"];
4102--6108[label="1;29pkt 29fpkt"];
4851--6607[label="1;177pkt 177fpkt"];
4851--7726[label="1;177pkt 177fpkt"];
6607--7726[label="1;177pkt 177fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.97.176.168" src_port="1045"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.983876,1.77655,503,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_160{
style=filled;
color=gray75;
33[label="64.176.83.131s;1pkt 1fpkt", shape=rectangle, color=red];
506[label="64.176.83.131;s;2pkt 2fpkt", shape=diamond, color=yellow];
846[label="140.3.3.8;d;15pkt 15fpkt", shape=diamond, color=yellow];
4508[label="64.176.83.131;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6378[label="64.176.83.131;1pkt 1fpkt", shape=invtriangle, color=brown];
7579[label="64.176.83.131;2pkt 2fpkt", shape=invhouse, color=bisque];
stat160[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.215.92.29:80, 140.3.3.8:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (22.7273%)&lt;BR/&gt; 6257: (18.1818%)&lt;BR/&gt; 1025: (11.3636%)&lt;BR/&gt; 6699: (9.09091%)&lt;BR/&gt; 1863: (6.81818%)&gt;];
}
33--506[label="1;1pkt 1fpkt"];
33--846[label="1;1pkt 1fpkt"];
33--7579[label="1;1pkt 1fpkt"];
506--825[label="0.5;1pkt 1fpkt"];
506--846[label="0.5;1pkt 1fpkt"];
506--4508[label="1;1pkt 1fpkt"];
506--6378[label="1;1pkt 1fpkt"];
506--7579[label="1;2pkt 2fpkt"];
846--4886[label="0.0666667;1pkt 1fpkt"];
846--6636[label="0.0666667;1pkt 1fpkt"];
846--7579[label="0.5;1pkt 1fpkt"];
4508--6378[label="1;1pkt 1fpkt"];
4508--7579[label="1;1pkt 1fpkt"];
6378--7579[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.3.8" src_ip="196.215.92.29" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887316,1.79576,999,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_162{
style=filled;
color=gray75;
12[label="204.76.19.42s;1pkt 1fpkt", shape=rectangle, color=red];
449[label="148.110.192.55;d;214pkt 214fpkt", shape=diamond, color=yellow];
821[label="33.84.118.99;s;1pkt 1fpkt", shape=diamond, color=yellow];
848[label="204.76.19.42;s;1pkt 1fpkt", shape=diamond, color=yellow];
2248[label="193.88.213.171;s;1pkt 1fpkt", shape=diamond, color=yellow];
3690[label="204.76.19.42;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4295[label="99.158.237.104;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5815[label="217.151.229.37;1pkt 1fpkt", shape=invtriangle, color=brown];
5844[label="204.76.19.42;1pkt 1fpkt", shape=invtriangle, color=brown];
6650[label="64.88.11.175;1pkt 1fpkt", shape=invtriangle, color=brown];
stat162[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6257, 148.110.192.55:6257}[92.9907%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (90.1345%)&lt;BR/&gt; 6699: (4.70852%)&lt;BR/&gt; 1240: (1.12108%)&lt;BR/&gt; 3922: (0.44843%)&lt;BR/&gt; 3451: (0.44843%)&gt;];
}
12--449[label="1;1pkt 1fpkt"];
12--848[label="1;1pkt 1fpkt"];
12--3690[label="1;1pkt 1fpkt"];
12--5844[label="1;1pkt 1fpkt"];
449--821[label="1;1pkt 1fpkt"];
449--848[label="1;1pkt 1fpkt"];
449--2248[label="1;1pkt 1fpkt"];
449--3690[label="1;1pkt 1fpkt"];
449--4295[label="1;1pkt 1fpkt"];
449--5815[label="1;1pkt 1fpkt"];
449--5844[label="1;1pkt 1fpkt"];
449--6650[label="1;1pkt 1fpkt"];
848--3690[label="1;1pkt 1fpkt"];
848--5844[label="1;1pkt 1fpkt"];
3690--5844[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.192.55" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19604,1.81002,020,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_163{
style=filled;
color=gray75;
28[label="138.49.95.106s;1140pkt 1140fpkt", shape=rectangle, color=red];
862[label="138.49.95.106;s;1048pkt 1048fpkt", shape=diamond, color=yellow];
2650[label="138.49.95.106;s;625pkt 625fpkt", shape=hexagon, color=black];
4313[label="138.49.95.106;1169pkt 1169fpkt", shape=pentagon, color=darkviolet];
6250[label="138.49.95.106;1169pkt 1169fpkt", shape=invtriangle, color=brown];
7497[label="138.49.95.106;1169pkt 1169fpkt", shape=invhouse, color=bisque];
stat163[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.49.95.106:0, *:0}[99.8291%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.8418%)&lt;BR/&gt; 65534: (0.0791139%)&lt;BR/&gt; 53: (0.0791139%)&gt;];
}
28--862[label="0.998092;1046pkt 1046fpkt"];
28--2650[label="0.9968;623pkt 623fpkt"];
28--4313[label="0.999123;1139pkt 1139fpkt"];
28--6250[label="0.999123;1139pkt 1139fpkt"];
28--7497[label="0.999123;1139pkt 1139fpkt"];
862--2650[label="1;625pkt 625fpkt"];
862--4313[label="0.999046;1047pkt 1047fpkt"];
862--6250[label="0.999046;1047pkt 1047fpkt"];
862--7497[label="0.999046;1047pkt 1047fpkt"];
2650--4313[label="0.9984;624pkt 624fpkt"];
2650--6250[label="0.9984;624pkt 624fpkt"];
2650--7497[label="0.9984;624pkt 624fpkt"];
4313--6250[label="1;1169pkt 1169fpkt"];
4313--7497[label="1;1169pkt 1169fpkt"];
6250--7497[label="1;1169pkt 1169fpkt"];
</description>
    <slice>
      <filter src_ip="138.49.95.106"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734171,1.81767,999,0 0 0 1 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_164{
style=filled;
color=gray75;
562[label="148.110.216.146;d;1pkt 1fpkt", shape=diamond, color=yellow];
869[label="192.182.238.171;s;1pkt 1fpkt", shape=diamond, color=yellow];
4877[label="192.182.238.171;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7742[label="192.182.238.171;1pkt 1fpkt", shape=invhouse, color=bisque];
stat164[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.182.238.171:554, 148.110.216.146:4873}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4873: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
562--869[label="1;1pkt 1fpkt"];
562--4877[label="1;1pkt 1fpkt"];
562--7742[label="1;1pkt 1fpkt"];
869--4877[label="1;1pkt 1fpkt"];
869--7742[label="1;1pkt 1fpkt"];
4877--7742[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.216.146" dst_port="4873" src_ip="192.182.238.171" src_port="554"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_166{
style=filled;
color=gray75;
476[label="138.186.55.6;s;9pkt 9fpkt", shape=diamond, color=yellow];
718[label="33.9.70.233;d;1pkt 1fpkt", shape=diamond, color=yellow];
832[label="98.131.46.23;d;1pkt 1fpkt", shape=diamond, color=yellow];
886[label="199.131.202.162;d;1pkt 1fpkt", shape=diamond, color=yellow];
1873[label="92.108.202.50;d;1pkt 1fpkt", shape=diamond, color=yellow];
2448[label="39.24.111.64;d;1pkt 1fpkt", shape=diamond, color=yellow];
2578[label="98.131.46.23;d;1pkt 1fpkt", shape=hexagon, color=black];
2938[label="92.108.202.50;d;1pkt 1fpkt", shape=hexagon, color=black];
3286[label="138.186.55.6;14pkt 14fpkt", shape=pentagon, color=darkviolet];
5588[label="138.186.55.6;15pkt 15fpkt", shape=invtriangle, color=brown];
7091[label="138.186.55.6;14pkt 14fpkt", shape=invhouse, color=bisque];
stat166[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.55.6:6699, *:*}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (41.5254%)&lt;BR/&gt; 33517: (5.08475%)&lt;BR/&gt; 10391: (5.08475%)&lt;BR/&gt; 7001: (5.08475%)&lt;BR/&gt; 3622: (4.23729%)&gt;];
}
476--718[label="1;1pkt 1fpkt"];
476--832[label="1;1pkt 1fpkt"];
476--886[label="1;1pkt 1fpkt"];
476--1873[label="1;1pkt 1fpkt"];
476--2578[label="1;1pkt 1fpkt"];
476--2938[label="1;1pkt 1fpkt"];
476--3286[label="1;9pkt 9fpkt"];
476--5588[label="1;9pkt 9fpkt"];
476--7091[label="1;9pkt 9fpkt"];
718--3286[label="1;1pkt 1fpkt"];
718--5588[label="1;1pkt 1fpkt"];
718--7091[label="1;1pkt 1fpkt"];
832--2578[label="1;1pkt 1fpkt"];
832--3286[label="1;1pkt 1fpkt"];
832--5588[label="1;1pkt 1fpkt"];
832--7091[label="1;1pkt 1fpkt"];
886--3286[label="1;1pkt 1fpkt"];
886--5588[label="1;1pkt 1fpkt"];
886--7091[label="1;1pkt 1fpkt"];
1873--2938[label="1;1pkt 1fpkt"];
1873--3286[label="1;1pkt 1fpkt"];
1873--5588[label="1;1pkt 1fpkt"];
1873--7091[label="1;1pkt 1fpkt"];
2448--3286[label="1;1pkt 1fpkt"];
2448--5588[label="1;1pkt 1fpkt"];
2448--7091[label="1;1pkt 1fpkt"];
2578--3286[label="1;1pkt 1fpkt"];
2578--5588[label="1;1pkt 1fpkt"];
2578--7091[label="1;1pkt 1fpkt"];
2938--3286[label="1;1pkt 1fpkt"];
2938--5588[label="1;1pkt 1fpkt"];
2938--7091[label="1;1pkt 1fpkt"];
3286--5588[label="1;14pkt 14fpkt"];
3286--7091[label="1;14pkt 14fpkt"];
5588--7091[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter src_ip="138.186.55.6" src_port="6699"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_167{
style=filled;
color=gray75;
544[label="96.66.76.19;s;3pkt 3fpkt", shape=diamond, color=yellow];
894[label="215.90.90.127;d;2pkt 2fpkt", shape=diamond, color=yellow];
1117[label="138.186.51.0;d;15pkt 15fpkt", shape=diamond, color=yellow];
2759[label="215.90.90.127;d;2pkt 2fpkt", shape=hexagon, color=black];
3445[label="96.66.76.19;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5688[label="96.66.76.19;2pkt 2fpkt", shape=invtriangle, color=brown];
7147[label="96.66.76.19;3pkt 3fpkt", shape=invhouse, color=bisque];
7444[label="196.179.209.91;12pkt 12fpkt", shape=invhouse, color=bisque];
stat167[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.179.209.91:80, 138.186.51.0:*}[68.4211%]&lt;BR/&gt;{*:5001, *:*}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (29.2683%)&lt;BR/&gt; 5001: (17.0732%)&lt;BR/&gt; 4185: (6.09756%)&lt;BR/&gt; 1193: (4.87805%)&lt;BR/&gt; 1042: (4.87805%)&gt;];
}
544--894[label="0.5;1pkt 1fpkt"];
544--1117[label="0.333333;1pkt 1fpkt"];
544--1502[label="1;1pkt 1fpkt"];
544--2759[label="0.5;1pkt 1fpkt"];
544--2997[label="1;1pkt 1fpkt"];
544--3445[label="1;2pkt 2fpkt"];
544--5688[label="1;2pkt 2fpkt"];
544--7147[label="1;3pkt 3fpkt"];
894--2759[label="1;2pkt 2fpkt"];
894--7147[label="0.5;1pkt 1fpkt"];
1117--3445[label="0.5;1pkt 1fpkt"];
1117--3463[label="1;1pkt 1fpkt"];
1117--4175[label="0.916667;11pkt 11fpkt"];
1117--5688[label="0.5;1pkt 1fpkt"];
1117--6155[label="0.916667;11pkt 11fpkt"];
1117--7147[label="0.333333;1pkt 1fpkt"];
1117--7444[label="0.916667;11pkt 11fpkt"];
2759--7147[label="0.5;1pkt 1fpkt"];
3445--5688[label="1;2pkt 2fpkt"];
3445--7147[label="1;2pkt 2fpkt"];
5688--7147[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_port="5001"/>
      <filter dst_ip="138.186.51.0" src_ip="196.179.209.91" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_168{
style=filled;
color=gray75;
592[label="140.3.110.48;d;2pkt 2fpkt", shape=diamond, color=yellow];
897[label="64.210.41.47;s;2pkt 2fpkt", shape=diamond, color=yellow];
3726[label="64.210.41.47;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5867[label="64.210.41.47;1pkt 1fpkt", shape=invtriangle, color=brown];
7259[label="64.210.41.47;2pkt 2fpkt", shape=invhouse, color=bisque];
stat168[shape=component, label=&lt;Rules:&lt;BR/&gt;{64.210.41.47:2204, 140.3.110.48:33332}[50%]&lt;BR/&gt;{64.210.41.47:2205, 140.3.110.48:33332}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33332: (50%)&lt;BR/&gt; 2205: (27.7778%)&lt;BR/&gt; 2204: (22.2222%)&gt;];
}
592--897[label="1;2pkt 2fpkt"];
592--3726[label="1;2pkt 2fpkt"];
592--5867[label="1;1pkt 1fpkt"];
592--7259[label="1;2pkt 2fpkt"];
897--3726[label="1;2pkt 2fpkt"];
897--5867[label="1;1pkt 1fpkt"];
897--7259[label="1;2pkt 2fpkt"];
3726--5867[label="1;1pkt 1fpkt"];
3726--7259[label="1;2pkt 2fpkt"];
5867--7259[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.110.48" dst_port="33332" src_ip="64.210.41.47" src_port="2205"/>
      <filter dst_ip="140.3.110.48" dst_port="33332" src_ip="64.210.41.47" src_port="2204"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_169{
style=filled;
color=gray75;
901[label="138.186.52.93;d;1pkt 1fpkt", shape=diamond, color=yellow];
902[label="38.177.18.26;s;1pkt 1fpkt", shape=diamond, color=yellow];
2760[label="138.186.52.93;d;1pkt 1fpkt", shape=hexagon, color=black];
stat169[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.177.18.26:2008, 138.186.52.93:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 2008: (50%)&gt;];
}
901--902[label="1;1pkt 1fpkt"];
901--2760[label="1;1pkt 1fpkt"];
902--2760[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.52.93" dst_port="6699" src_ip="38.177.18.26" src_port="2008"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01048,1.87705,999,1 0 0 1 0 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_170{
style=filled;
color=gray75;
6[label="38.161.191.25s;1pkt 1fpkt", shape=rectangle, color=red];
512[label="215.90.87.50;d;6pkt 6fpkt", shape=diamond, color=yellow];
919[label="38.161.191.25;s;1pkt 1fpkt", shape=diamond, color=yellow];
2021[label="61.92.48.195;s;1pkt 1fpkt", shape=diamond, color=yellow];
7093[label="211.90.157.6;4pkt 4fpkt", shape=invhouse, color=bisque];
stat170[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6699, 215.90.87.50:*}[55.5556%]&lt;BR/&gt;{211.90.157.6:80, 215.87.67.219:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (30.7692%)&lt;BR/&gt; 80: (19.2308%)&lt;BR/&gt; 3134: (11.5385%)&lt;BR/&gt; 3125: (7.69231%)&lt;BR/&gt; 3024: (7.69231%)&gt;];
}
6--512[label="1;1pkt 1fpkt"];
6--919[label="1;1pkt 1fpkt"];
512--796[label="1;1pkt 1fpkt"];
512--919[label="1;1pkt 1fpkt"];
512--2021[label="1;1pkt 1fpkt"];
512--2630[label="1;1pkt 1fpkt"];
512--3222[label="1;1pkt 1fpkt"];
512--7093[label="0.25;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.87.50" src_port="6699"/>
      <filter dst_ip="215.87.67.219" src_ip="211.90.157.6" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887316,1.79576,503,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_171{
style=filled;
color=gray75;
177[label="202.77.144.84s;1pkt 1fpkt", shape=rectangle, color=red];
926[label="36.161.192.84;s;107pkt 107fpkt", shape=diamond, color=yellow];
1794[label="215.87.64.129;d;184pkt 184fpkt", shape=diamond, color=yellow];
2166[label="140.3.229.114;d;73pkt 73fpkt", shape=diamond, color=yellow];
3748[label="197.151.223.48;132pkt 132fpkt", shape=pentagon, color=darkviolet];
4386[label="36.214.137.116;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6298[label="36.214.137.116;4pkt 4fpkt", shape=invtriangle, color=brown];
stat171[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 215.87.64.129:*}[40%]&lt;BR/&gt;{36.161.192.84:80, *:*}[23.2609%]&lt;BR/&gt;{197.151.223.48:80, 138.186.8.154:*}[21.3043%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.8317%)&lt;BR/&gt; 53: (2.67327%)&lt;BR/&gt; 32904: (2.27723%)&lt;BR/&gt; 0: (1.18812%)&lt;BR/&gt; 3295: (0.29703%)&gt;];
}
177--444[label="1;1pkt 1fpkt"];
177--926[label="1;1pkt 1fpkt"];
926--1215[label="0.121495;13pkt 13fpkt"];
926--1794[label="0.299065;32pkt 32fpkt"];
926--2166[label="0.0547945;4pkt 4fpkt"];
926--2472[label="0.0186916;2pkt 2fpkt"];
926--2522[label="1;71pkt 71fpkt"];
926--2740[label="0.0186916;2pkt 2fpkt"];
926--2871[label="0.121495;13pkt 13fpkt"];
926--3154[label="0.0186916;2pkt 2fpkt"];
1794--2100[label="0.015625;1pkt 1fpkt"];
1794--2522[label="0.267606;19pkt 19fpkt"];
1794--3520[label="0.0142857;1pkt 1fpkt"];
1794--3892[label="0.0434783;1pkt 1fpkt"];
1794--4061[label="0.204082;10pkt 10fpkt"];
1794--4124[label="0.173913;32pkt 32fpkt"];
1794--4152[label="0.133333;6pkt 6fpkt"];
1794--4386[label="0.75;3pkt 3fpkt"];
1794--4797[label="0.0196078;1pkt 1fpkt"];
1794--4825[label="0.0540541;2pkt 2fpkt"];
1794--5972[label="0.0454545;1pkt 1fpkt"];
1794--6087[label="0.204082;10pkt 10fpkt"];
1794--6123[label="0.173913;32pkt 32fpkt"];
1794--6298[label="0.75;3pkt 3fpkt"];
1794--6571[label="0.0196078;1pkt 1fpkt"];
1794--7331[label="0.0454545;1pkt 1fpkt"];
1794--7401[label="0.204082;10pkt 10fpkt"];
1794--7424[label="0.173913;32pkt 32fpkt"];
2166--2522[label="0.056338;4pkt 4fpkt"];
2166--3491[label="0.025641;1pkt 1fpkt"];
2166--3578[label="0.0136986;1pkt 1fpkt"];
2166--3748[label="0.0136986;1pkt 1fpkt"];
2166--3892[label="0.0869565;2pkt 2fpkt"];
2166--4061[label="0.0204082;1pkt 1fpkt"];
2166--4124[label="0.0684932;5pkt 5fpkt"];
2166--4152[label="0.0444444;2pkt 2fpkt"];
2166--4567[label="0.025;1pkt 1fpkt"];
2166--5212[label="0.025641;1pkt 1fpkt"];
2166--5776[label="0.0136986;1pkt 1fpkt"];
2166--5972[label="0.0909091;2pkt 2fpkt"];
2166--6087[label="0.0204082;1pkt 1fpkt"];
2166--6123[label="0.0684932;5pkt 5fpkt"];
2166--7331[label="0.0909091;2pkt 2fpkt"];
2166--7401[label="0.0204082;1pkt 1fpkt"];
2166--7424[label="0.0684932;5pkt 5fpkt"];
4386--6298[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="36.161.192.84" src_port="80"/>
      <filter dst_ip="215.87.64.129" src_port="80"/>
      <filter dst_ip="138.186.8.154" src_ip="197.151.223.48" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905994,1.86884,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_173{
style=filled;
color=gray75;
677[label="192.36.223.125;d;1pkt 1fpkt", shape=diamond, color=yellow];
945[label="172.93.144.32;s;222pkt 222fpkt", shape=diamond, color=yellow];
2039[label="61.4.152.53;d;2pkt 2fpkt", shape=diamond, color=yellow];
2772[label="172.93.144.32;s;200pkt 200fpkt", shape=hexagon, color=black];
3588[label="172.93.144.32;257pkt 257fpkt", shape=pentagon, color=darkviolet];
stat173[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.93.144.32:1988, *:4665}[48.062%]&lt;BR/&gt;{172.93.144.32:*, *:4662}[24.031%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1988: (34.5308%)&lt;BR/&gt; 4665: (26.8328%)&lt;BR/&gt; 4662: (10.4106%)&lt;BR/&gt; 1987: (3.07918%)&lt;BR/&gt; 4246: (2.1261%)&gt;];
}
677--945[label="1;1pkt 1fpkt"];
677--2772[label="1;1pkt 1fpkt"];
677--3588[label="1;1pkt 1fpkt"];
945--2039[label="0.5;1pkt 1fpkt"];
945--2772[label="1;200pkt 200fpkt"];
945--3588[label="0.995495;221pkt 221fpkt"];
2039--2772[label="0.5;1pkt 1fpkt"];
2039--3588[label="1;2pkt 2fpkt"];
2772--3588[label="0.995;199pkt 199fpkt"];
</description>
    <slice>
      <filter dst_port="4662" src_ip="172.93.144.32"/>
      <filter dst_port="4665" src_ip="172.93.144.32" src_port="1988"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19604,1.81002,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_174{
style=filled;
color=gray75;
333[label="64.213.62.243s;1pkt 1fpkt", shape=rectangle, color=red];
526[label="138.186.50.203;d;231pkt 231fpkt", shape=diamond, color=yellow];
529[label="36.90.153.3;s;1pkt 1fpkt", shape=diamond, color=yellow];
946[label="64.213.62.243;s;1pkt 1fpkt", shape=diamond, color=yellow];
1108[label="64.233.55.115;s;1pkt 1fpkt", shape=diamond, color=yellow];
1266[label="138.186.59.96;d;105pkt 105fpkt", shape=diamond, color=yellow];
1305[label="61.200.216.229;s;2pkt 2fpkt", shape=diamond, color=yellow];
2646[label="36.90.153.3;s;1pkt 1fpkt", shape=hexagon, color=black];
2788[label="61.200.216.229;s;2pkt 2fpkt", shape=hexagon, color=black];
3237[label="36.90.153.3;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4058[label="64.160.155.80;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4728[label="64.167.221.155;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5437[label="64.213.62.243;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5456[label="193.248.248.245;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6084[label="64.160.155.80;1pkt 1fpkt", shape=invtriangle, color=brown];
7399[label="64.160.155.80;1pkt 1fpkt", shape=invhouse, color=bisque];
7981[label="64.213.62.243;1pkt 1fpkt", shape=invhouse, color=bisque];
stat174[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6257, 138.186.50.203:6257}[61.9048%]&lt;BR/&gt;{*:6257, 138.186.59.96:6257}[30.0595%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (89.9433%)&lt;BR/&gt; 6699: (4.10765%)&lt;BR/&gt; 1741: (0.708215%)&lt;BR/&gt; 16257: (0.566572%)&lt;BR/&gt; 2604: (0.566572%)&gt;];
}
333--526[label="1;1pkt 1fpkt"];
333--946[label="1;1pkt 1fpkt"];
333--5437[label="1;1pkt 1fpkt"];
333--7981[label="1;1pkt 1fpkt"];
526--529[label="1;1pkt 1fpkt"];
526--662[label="1;1pkt 1fpkt"];
526--946[label="1;1pkt 1fpkt"];
526--1108[label="1;1pkt 1fpkt"];
526--1305[label="0.5;1pkt 1fpkt"];
526--2646[label="1;1pkt 1fpkt"];
526--2770[label="1;1pkt 1fpkt"];
526--2788[label="0.5;1pkt 1fpkt"];
526--3237[label="1;1pkt 1fpkt"];
526--4058[label="1;1pkt 1fpkt"];
526--5251[label="1;1pkt 1fpkt"];
526--5437[label="1;1pkt 1fpkt"];
526--5456[label="1;1pkt 1fpkt"];
526--6084[label="1;1pkt 1fpkt"];
526--7399[label="1;1pkt 1fpkt"];
526--7981[label="1;1pkt 1fpkt"];
529--2646[label="1;1pkt 1fpkt"];
529--3237[label="1;1pkt 1fpkt"];
946--5437[label="1;1pkt 1fpkt"];
946--7981[label="1;1pkt 1fpkt"];
1266--1305[label="0.5;1pkt 1fpkt"];
1266--1448[label="1;2pkt 2fpkt"];
1266--1721[label="1;2pkt 2fpkt"];
1266--2788[label="0.5;1pkt 1fpkt"];
1266--4728[label="1;1pkt 1fpkt"];
1305--2788[label="1;2pkt 2fpkt"];
2646--3237[label="1;1pkt 1fpkt"];
4058--6084[label="1;1pkt 1fpkt"];
4058--7399[label="1;1pkt 1fpkt"];
5437--7981[label="1;1pkt 1fpkt"];
6084--7399[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.50.203" dst_port="6257" src_port="6257"/>
      <filter dst_ip="138.186.59.96" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19604,1.81002,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_175{
style=filled;
color=gray75;
189[label="202.83.224.97s;1pkt 1fpkt", shape=rectangle, color=red];
961[label="215.90.88.145;d;2pkt 2fpkt", shape=diamond, color=yellow];
962[label="96.66.76.97;s;3pkt 3fpkt", shape=diamond, color=yellow];
965[label="215.90.88.154;d;2pkt 2fpkt", shape=diamond, color=yellow];
2062[label="140.3.110.176;d;4pkt 4fpkt", shape=diamond, color=yellow];
2205[label="96.66.76.88;s;2pkt 2fpkt", shape=diamond, color=yellow];
2596[label="96.66.76.97;s;3pkt 3fpkt", shape=hexagon, color=black];
3111[label="96.66.76.88;s;2pkt 2fpkt", shape=hexagon, color=black];
4141[label="96.66.76.88;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4238[label="96.66.76.97;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6199[label="96.66.76.97;3pkt 3fpkt", shape=invtriangle, color=brown];
7472[label="96.66.76.97;3pkt 3fpkt", shape=invhouse, color=bisque];
stat175[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.66.76.97:5001, *:*}[44.4444%]&lt;BR/&gt;{*:1863, 140.3.110.176:*}[33.3333%]&lt;BR/&gt;{*:5001, 215.90.88.145:*}[22.2222%]&lt;BR/&gt;{*:5001, 215.90.88.154:*}[22.2222%]&lt;BR/&gt;{96.66.76.88:5001, *:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (45%)&lt;BR/&gt; 32202: (11.6667%)&lt;BR/&gt; 1141: (10%)&lt;BR/&gt; 1053: (10%)&lt;BR/&gt; 1056: (6.66667%)&gt;];
}
189--962[label="1;1pkt 1fpkt"];
189--2062[label="1;1pkt 1fpkt"];
189--2596[label="1;1pkt 1fpkt"];
189--4238[label="1;1pkt 1fpkt"];
189--6199[label="1;1pkt 1fpkt"];
189--7472[label="1;1pkt 1fpkt"];
961--962[label="0.5;1pkt 1fpkt"];
961--2205[label="0.5;1pkt 1fpkt"];
961--2596[label="0.5;1pkt 1fpkt"];
961--3111[label="0.5;1pkt 1fpkt"];
961--4238[label="0.5;1pkt 1fpkt"];
961--6199[label="0.5;1pkt 1fpkt"];
961--7472[label="0.5;1pkt 1fpkt"];
962--965[label="0.5;1pkt 1fpkt"];
962--2062[label="0.333333;1pkt 1fpkt"];
962--2596[label="1;3pkt 3fpkt"];
962--4238[label="1;3pkt 3fpkt"];
962--6199[label="1;3pkt 3fpkt"];
962--7472[label="1;3pkt 3fpkt"];
965--2205[label="0.5;1pkt 1fpkt"];
965--2596[label="0.5;1pkt 1fpkt"];
965--3111[label="0.5;1pkt 1fpkt"];
965--4141[label="1;1pkt 1fpkt"];
965--4238[label="0.5;1pkt 1fpkt"];
965--6199[label="0.5;1pkt 1fpkt"];
965--7472[label="0.5;1pkt 1fpkt"];
2062--2596[label="0.333333;1pkt 1fpkt"];
2062--4238[label="0.25;1pkt 1fpkt"];
2062--6199[label="0.333333;1pkt 1fpkt"];
2062--7472[label="0.333333;1pkt 1fpkt"];
2205--3111[label="1;2pkt 2fpkt"];
2205--4141[label="1;1pkt 1fpkt"];
2596--4238[label="1;3pkt 3fpkt"];
2596--6199[label="1;3pkt 3fpkt"];
2596--7472[label="1;3pkt 3fpkt"];
3111--4141[label="1;1pkt 1fpkt"];
4238--6199[label="1;3pkt 3fpkt"];
4238--7472[label="1;3pkt 3fpkt"];
6199--7472[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="96.66.76.97" src_port="5001"/>
      <filter src_ip="96.66.76.88" src_port="5001"/>
      <filter dst_ip="140.3.110.176" src_port="1863"/>
      <filter dst_ip="215.90.88.154" src_port="5001"/>
      <filter dst_ip="215.90.88.145" src_port="5001"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14144,1.92665,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_176{
style=filled;
color=gray75;
286[label="60.243.228.186s;1pkt 1fpkt", shape=rectangle, color=red];
969[label="96.66.76.186;s;4pkt 4fpkt", shape=diamond, color=yellow];
1279[label="215.90.90.112;d;12pkt 12fpkt", shape=diamond, color=yellow];
3014[label="215.90.90.112;d;12pkt 12fpkt", shape=hexagon, color=black];
stat176[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.66.76.33:6900, 215.90.90.112:*}[28.5714%]&lt;BR/&gt;{96.66.76.186:5001, *:*}[28.5714%]&lt;BR/&gt;{96.51.18.74:80, 215.90.90.112:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (15.5172%)&lt;BR/&gt; 6900: (13.7931%)&lt;BR/&gt; 80: (10.3448%)&lt;BR/&gt; 3174: (6.89655%)&lt;BR/&gt; 3181: (5.17241%)&gt;];
}
286--969[label="1;1pkt 1fpkt"];
286--1279[label="1;1pkt 1fpkt"];
286--3014[label="1;1pkt 1fpkt"];
969--1279[label="0.5;2pkt 2fpkt"];
969--1386[label="0.5;2pkt 2fpkt"];
969--3014[label="0.5;2pkt 2fpkt"];
1279--3014[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter src_ip="96.66.76.186" src_port="5001"/>
      <filter dst_ip="215.90.90.112" src_ip="96.66.76.33" src_port="6900"/>
      <filter dst_ip="215.90.90.112" src_ip="96.51.18.74" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_177{
style=filled;
color=gray75;
746[label="140.3.59.50;s;786pkt 786fpkt", shape=diamond, color=yellow];
974[label="138.165.208.233;s;619pkt 619fpkt", shape=diamond, color=yellow];
1314[label="140.3.246.208;s;518pkt 518fpkt", shape=diamond, color=yellow];
stat177[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.165.208.233:1289, *:53}[27.1451%]&lt;BR/&gt;{140.3.59.50:53, *:53}[25.325%]&lt;BR/&gt;{140.3.246.208:53949, *:53}[23.817%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (61.3625%)&lt;BR/&gt; 1289: (13.5725%)&lt;BR/&gt; 53949: (11.9085%)&lt;BR/&gt; 0: (3.64015%)&lt;BR/&gt; 33701: (0.26001%)&gt;];
}
746--1883[label="0.0243902;1pkt 1fpkt"];
746--2340[label="0.0769231;1pkt 1fpkt"];
746--2800[label="1;687pkt 687fpkt"];
974--1303[label="0.0285714;1pkt 1fpkt"];
974--1883[label="0.0243902;1pkt 1fpkt"];
974--5373[label="1;619pkt 619fpkt"];
974--6940[label="1;619pkt 619fpkt"];
1314--1883[label="0.0243902;1pkt 1fpkt"];
1314--5181[label="0.998069;517pkt 517fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="140.3.59.50" src_port="53"/>
      <filter dst_port="53" src_ip="138.165.208.233" src_port="1289"/>
      <filter dst_port="53" src_ip="140.3.246.208" src_port="53949"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645838,1.80177,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_178{
style=filled;
color=gray75;
1387[label="38.96.129.200;s;107pkt 107fpkt", shape=diamond, color=yellow];
4024[label="36.192.16.77;28pkt 28fpkt", shape=pentagon, color=darkviolet];
5001[label="36.215.62.185;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6062[label="36.192.16.77;28pkt 28fpkt", shape=invtriangle, color=brown];
stat178[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.96.129.200:80, 215.87.64.183:*}[37.6812%]&lt;BR/&gt;{*:80, 169.126.143.85:*}[31.8841%]&lt;BR/&gt;{36.192.16.77:*, *:*}[20.2899%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.494%)&lt;BR/&gt; 443: (0.903614%)&lt;BR/&gt; 4849: (0.60241%)&lt;BR/&gt; 4833: (0.60241%)&lt;BR/&gt; 4600: (0.60241%)&gt;];
}
1387--1505[label="0.11215;12pkt 12fpkt"];
1387--2145[label="0.0116279;1pkt 1fpkt"];
1387--2482[label="0.0186916;2pkt 2fpkt"];
1387--2619[label="1;107pkt 107fpkt"];
1387--2679[label="0.130841;14pkt 14fpkt"];
1387--2740[label="0.485981;52pkt 52fpkt"];
1387--3075[label="0.0116279;1pkt 1fpkt"];
1387--3154[label="0.485981;52pkt 52fpkt"];
4024--6062[label="1;28pkt 28fpkt"];
4024--7388[label="1;28pkt 28fpkt"];
5001--6707[label="1;3pkt 3fpkt"];
5001--7790[label="1;3pkt 3fpkt"];
6062--7388[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter src_ip="36.192.16.77"/>
      <filter dst_ip="169.126.143.85" src_port="80"/>
      <filter dst_ip="215.87.64.183" src_ip="38.96.129.200" src_port="80"/>
    </slice>
    <from sec="1039669203" usec="0"/>
    <to sec="1039669873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_179{
style=filled;
color=gray75;
994[label="152.31.29.238;d;1pkt 1fpkt", shape=diamond, color=yellow];
996[label="172.93.208.26;s;1pkt 1fpkt", shape=diamond, color=yellow];
2600[label="172.93.208.26;s;1pkt 1fpkt", shape=hexagon, color=black];
2783[label="152.31.29.238;d;1pkt 1fpkt", shape=hexagon, color=black];
stat179[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.93.208.26:3137, 152.31.29.238:6080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6080: (50%)&lt;BR/&gt; 3137: (50%)&gt;];
}
994--996[label="1;1pkt 1fpkt"];
994--2600[label="1;1pkt 1fpkt"];
994--2783[label="1;1pkt 1fpkt"];
996--2600[label="1;1pkt 1fpkt"];
996--2783[label="1;1pkt 1fpkt"];
2600--2783[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="152.31.29.238" dst_port="6080" src_ip="172.93.208.26" src_port="3137"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.995715,1.89932,999,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_180{
style=filled;
color=gray75;
1007[label="215.90.90.103;d;4pkt 4fpkt", shape=diamond, color=yellow];
2532[label="215.90.90.103;d;2pkt 2fpkt", shape=hexagon, color=black];
2787[label="96.66.76.187;s;2pkt 2fpkt", shape=hexagon, color=black];
6717[label="96.66.76.187;2pkt 2fpkt", shape=invtriangle, color=brown];
stat180[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.166.155.19:80, 215.90.90.103:3066}[20%]&lt;BR/&gt;{150.17.233.40:61521, 215.90.90.103:137}[20%]&lt;BR/&gt;{211.90.155.175:1863, 215.90.90.103:3014}[20%]&lt;BR/&gt;{96.66.76.187:5001, 215.90.90.80:3130}[20%]&lt;BR/&gt;{96.66.76.187:5001, 215.90.90.103:3061}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (30%)&lt;BR/&gt; 3061: (20%)&lt;BR/&gt; 3130: (10%)&lt;BR/&gt; 3014: (10%)&lt;BR/&gt; 1863: (10%)&gt;];
}
1007--1008[label="0.5;1pkt 1fpkt"];
1007--2532[label="1;2pkt 2fpkt"];
1007--2787[label="0.5;1pkt 1fpkt"];
1007--6717[label="0.5;1pkt 1fpkt"];
2532--2787[label="0.5;1pkt 1fpkt"];
2532--6717[label="0.5;1pkt 1fpkt"];
2787--5018[label="1;1pkt 1fpkt"];
2787--6717[label="1;2pkt 2fpkt"];
2787--7797[label="1;1pkt 1fpkt"];
6717--7797[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.90.103" dst_port="3061" src_ip="96.66.76.187" src_port="5001"/>
      <filter dst_ip="215.90.90.80" dst_port="3130" src_ip="96.66.76.187" src_port="5001"/>
      <filter dst_ip="215.90.90.103" dst_port="3014" src_ip="211.90.155.175" src_port="1863"/>
      <filter dst_ip="215.90.90.103" dst_port="137" src_ip="150.17.233.40" src_port="61521"/>
      <filter dst_ip="215.90.90.103" dst_port="3066" src_ip="208.166.155.19" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669782" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_181{
style=filled;
color=gray75;
2385[label="140.3.255.198;s;31pkt 31fpkt", shape=diamond, color=yellow];
stat181[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.255.198:*, 193.41.116.100:80}[22.5806%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1954: (1.6129%)&lt;BR/&gt; 1953: (1.6129%)&lt;BR/&gt; 1952: (1.6129%)&lt;BR/&gt; 1951: (1.6129%)&gt;];
}
2385--5101[label="1;31pkt 31fpkt"];
2385--6765[label="0.967742;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="193.41.116.100" dst_port="80" src_ip="140.3.255.198"/>
    </slice>
    <from sec="1039669497" usec="0"/>
    <to sec="1039669837" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_182{
style=filled;
color=gray75;
1023[label="169.126.131.48;s;6pkt 6fpkt", shape=diamond, color=yellow];
stat182[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.126.131.48:80, 203.17.173.134:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2906: (8.33333%)&lt;BR/&gt; 2904: (8.33333%)&lt;BR/&gt; 2902: (8.33333%)&lt;BR/&gt; 2901: (8.33333%)&gt;];
}
1023--2411[label="1;6pkt 6fpkt"];
1023--3745[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="203.17.173.134" src_ip="169.126.131.48" src_port="80"/>
    </slice>
    <from sec="1039669653" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_183{
style=filled;
color=gray75;
738[label="64.84.48.227;d;1pkt 1fpkt", shape=diamond, color=yellow];
1048[label="172.93.20.108;s;1pkt 1fpkt", shape=diamond, color=yellow];
2695[label="64.84.48.227;d;1pkt 1fpkt", shape=hexagon, color=black];
stat183[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.93.20.108:3601, 64.84.48.227:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3601: (50%)&gt;];
}
738--1048[label="1;1pkt 1fpkt"];
738--2695[label="1;1pkt 1fpkt"];
1048--2695[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="64.84.48.227" dst_port="6699" src_ip="172.93.20.108" src_port="3601"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_184{
style=filled;
color=gray75;
1053[label="215.90.72.4;s;2pkt 2fpkt", shape=diamond, color=yellow];
1054[label="96.63.118.26;d;2pkt 2fpkt", shape=diamond, color=yellow];
2537[label="215.90.72.4;s;2pkt 2fpkt", shape=hexagon, color=black];
stat184[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.90.72.4:1212, 96.63.118.26:8080}[50%]&lt;BR/&gt;{215.90.72.4:1213, 96.63.118.26:8080}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 1213: (25%)&lt;BR/&gt; 1212: (25%)&gt;];
}
1053--1054[label="1;2pkt 2fpkt"];
1053--2537[label="1;2pkt 2fpkt"];
1054--2537[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="96.63.118.26" dst_port="8080" src_ip="215.90.72.4" src_port="1213"/>
      <filter dst_ip="96.63.118.26" dst_port="8080" src_ip="215.90.72.4" src_port="1212"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,501,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_185{
style=filled;
color=gray75;
1005[label="148.110.54.208;d;43pkt 43fpkt", shape=diamond, color=yellow];
1060[label="215.3.111.146;s;2pkt 2fpkt", shape=diamond, color=yellow];
4355[label="192.126.233.111;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5207[label="99.211.9.212;11pkt 11fpkt", shape=pentagon, color=darkviolet];
5574[label="192.123.77.5;1pkt 1fpkt", shape=invtriangle, color=brown];
6273[label="192.126.233.111;7pkt 7fpkt", shape=invtriangle, color=brown];
7084[label="192.123.77.5;1pkt 1fpkt", shape=invhouse, color=bisque];
7509[label="192.126.233.111;7pkt 7fpkt", shape=invhouse, color=bisque];
stat185[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 148.110.54.208:21}[36.9565%]&lt;BR/&gt;{99.211.9.212:*, 148.110.54.208:*}[26.087%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (18.9873%)&lt;BR/&gt; 0: (13.9241%)&lt;BR/&gt; 58105: (2.53165%)&lt;BR/&gt; 58104: (2.53165%)&lt;BR/&gt; 57989: (2.53165%)&gt;];
}
1005--1060[label="0.5;1pkt 1fpkt"];
1005--4355[label="1;7pkt 7fpkt"];
1005--5207[label="0.818182;9pkt 9fpkt"];
1005--5574[label="1;1pkt 1fpkt"];
1005--6273[label="1;7pkt 7fpkt"];
1005--7084[label="1;1pkt 1fpkt"];
1005--7509[label="1;7pkt 7fpkt"];
4355--6273[label="1;7pkt 7fpkt"];
4355--7509[label="1;7pkt 7fpkt"];
5574--7084[label="1;1pkt 1fpkt"];
6273--7509[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.54.208" src_ip="99.211.9.212"/>
      <filter dst_ip="148.110.54.208" dst_port="21"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669866" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00075,1.85039,020,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_186{
style=filled;
color=gray75;
713[label="148.110.54.208;s;85pkt 85fpkt", shape=diamond, color=yellow];
742[label="215.3.111.146;d;2pkt 2fpkt", shape=diamond, color=yellow];
864[label="215.87.66.149;s;1158pkt 1158fpkt", shape=diamond, color=yellow];
1067[label="38.106.81.17;d;7pkt 7fpkt", shape=diamond, color=yellow];
2287[label="192.123.77.5;d;4pkt 4fpkt", shape=diamond, color=yellow];
2610[label="38.106.81.17;d;7pkt 7fpkt", shape=hexagon, color=black];
5171[label="148.110.54.208;86pkt 86fpkt", shape=pentagon, color=darkviolet];
7272[label="214.216.55.49;2pkt 2fpkt", shape=invhouse, color=bisque];
stat186[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.87.66.149:0, *:0}[92.7885%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (86.9726%)&lt;BR/&gt; 21: (2.10955%)&lt;BR/&gt; 20: (0.481125%)&lt;BR/&gt; 62498: (0.148038%)&lt;BR/&gt; 61993: (0.148038%)&gt;];
}
713--742[label="1;2pkt 2fpkt"];
713--1067[label="0.857143;6pkt 6fpkt"];
713--2287[label="0.25;1pkt 1fpkt"];
713--2610[label="0.857143;6pkt 6fpkt"];
713--2890[label="0.5;6pkt 6fpkt"];
713--5171[label="1;85pkt 85fpkt"];
742--5171[label="1;2pkt 2fpkt"];
864--1067[label="0.142857;1pkt 1fpkt"];
864--2610[label="0.142857;1pkt 1fpkt"];
1067--2610[label="1;7pkt 7fpkt"];
1067--5171[label="0.857143;6pkt 6fpkt"];
2287--4404[label="0.25;1pkt 1fpkt"];
2287--5171[label="0.25;1pkt 1fpkt"];
2287--6308[label="0.5;2pkt 2fpkt"];
2287--7272[label="0.5;1pkt 1fpkt"];
2287--7529[label="0.5;2pkt 2fpkt"];
2610--5171[label="0.857143;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="215.87.66.149"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645838,1.80177,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_187{
style=filled;
color=gray75;
711[label="138.186.16.128;d;17pkt 17fpkt", shape=diamond, color=yellow];
1077[label="61.94.175.168;s;1pkt 1fpkt", shape=diamond, color=yellow];
1306[label="64.97.219.254;s;1pkt 1fpkt", shape=diamond, color=yellow];
1872[label="162.122.195.248;s;1pkt 1fpkt", shape=diamond, color=yellow];
4850[label="61.94.175.168;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6606[label="61.94.175.168;1pkt 1fpkt", shape=invtriangle, color=brown];
stat187[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6257, 138.186.16.128:6257}[76.4706%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (59.0909%)&lt;BR/&gt; 6699: (15.9091%)&lt;BR/&gt; 3374: (9.09091%)&lt;BR/&gt; 16699: (4.54545%)&lt;BR/&gt; 3824: (4.54545%)&gt;];
}
711--1077[label="1;1pkt 1fpkt"];
711--1306[label="1;1pkt 1fpkt"];
711--1872[label="1;1pkt 1fpkt"];
711--4850[label="1;1pkt 1fpkt"];
711--6606[label="1;1pkt 1fpkt"];
1077--4850[label="1;1pkt 1fpkt"];
1077--6606[label="1;1pkt 1fpkt"];
4850--6606[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.16.128" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14144,1.92665,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_188{
style=filled;
color=gray75;
3[label="140.3.243.12s;4pkt 4fpkt", shape=rectangle, color=red];
92[label="96.26.147.12s;1pkt 1fpkt", shape=rectangle, color=red];
93[label="96.213.163.12s;1pkt 1fpkt", shape=rectangle, color=red];
1083[label="96.40.74.183;d;1pkt 1fpkt", shape=diamond, color=yellow];
1085[label="148.110.147.12;s;62pkt 62fpkt", shape=diamond, color=yellow];
1977[label="96.5.76.251;d;15pkt 15fpkt", shape=diamond, color=yellow];
2006[label="197.53.93.194;d;7pkt 7fpkt", shape=diamond, color=yellow];
2437[label="197.53.91.109;d;2pkt 2fpkt", shape=diamond, color=yellow];
2611[label="96.40.74.183;d;1pkt 1fpkt", shape=hexagon, color=black];
2984[label="197.53.93.194;d;7pkt 7fpkt", shape=hexagon, color=black];
3116[label="197.53.91.109;d;2pkt 2fpkt", shape=hexagon, color=black];
stat188[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.110.147.12:4040, *:*}[40%]&lt;BR/&gt;{148.110.147.12:*, 96.5.76.251:4040}[32.3077%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4040: (53.3981%)&lt;BR/&gt; 4379: (2.91262%)&lt;BR/&gt; 4554: (1.45631%)&lt;BR/&gt; 4552: (1.45631%)&lt;BR/&gt; 4544: (1.45631%)&gt;];
}
3--92[label="1;1pkt 1fpkt"];
3--93[label="1;1pkt 1fpkt"];
3--1083[label="1;1pkt 1fpkt"];
3--1085[label="0.25;1pkt 1fpkt"];
3--1959[label="0.75;3pkt 3fpkt"];
3--2611[label="1;1pkt 1fpkt"];
3--3097[label="0.75;3pkt 3fpkt"];
3--3185[label="0.75;3pkt 3fpkt"];
3--3365[label="0.75;3pkt 3fpkt"];
3--5637[label="0.75;3pkt 3fpkt"];
3--7118[label="0.75;3pkt 3fpkt"];
92--93[label="1;1pkt 1fpkt"];
92--1083[label="1;1pkt 1fpkt"];
92--1085[label="1;1pkt 1fpkt"];
92--2611[label="1;1pkt 1fpkt"];
93--1083[label="1;1pkt 1fpkt"];
93--1085[label="1;1pkt 1fpkt"];
93--2611[label="1;1pkt 1fpkt"];
1083--1085[label="1;1pkt 1fpkt"];
1083--2611[label="1;1pkt 1fpkt"];
1085--1127[label="1;1pkt 1fpkt"];
1085--1977[label="1;15pkt 15fpkt"];
1085--2006[label="1;7pkt 7fpkt"];
1085--2437[label="1;2pkt 2fpkt"];
1085--2552[label="1;1pkt 1fpkt"];
1085--2611[label="1;1pkt 1fpkt"];
1085--2984[label="1;7pkt 7fpkt"];
1085--3116[label="1;2pkt 2fpkt"];
2006--2984[label="1;7pkt 7fpkt"];
2437--3116[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="148.110.147.12" src_port="4040"/>
      <filter dst_ip="96.5.76.251" dst_port="4040" src_ip="148.110.147.12"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_189{
style=filled;
color=gray75;
1109[label="168.72.196.210;d;1pkt 1fpkt", shape=diamond, color=yellow];
1110[label="215.90.64.178;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat189[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.90.64.178:2129, 168.72.196.210:49158}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49158: (50%)&lt;BR/&gt; 2129: (50%)&gt;];
}
1109--1110[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.72.196.210" dst_port="49158" src_ip="215.90.64.178" src_port="2129"/>
    </slice>
    <from sec="1039669202" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="138.186.52.209"/>
      <from sec="1039669202" usec="0"/>
      <to sec="1039669404" usec="0"/>
    </slice>
    <from sec="1039669202" usec="0"/>
    <to sec="1039669404" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="138.186.52.209"/>
      <from sec="1039669202" usec="0"/>
      <to sec="1039669404" usec="0"/>
    </slice>
    <from sec="1039669202" usec="0"/>
    <to sec="1039669404" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_192{
style=filled;
color=gray75;
953[label="148.110.12.64;s;10pkt 10fpkt", shape=diamond, color=yellow];
1097[label="61.181.155.189;d;1pkt 1fpkt", shape=diamond, color=yellow];
1115[label="36.208.191.134;d;1pkt 1fpkt", shape=diamond, color=yellow];
3881[label="148.110.12.64;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat192[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.110.12.64:*, *:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1070: (11.5385%)&lt;BR/&gt; 1068: (7.69231%)&lt;BR/&gt; 1116: (3.84615%)&lt;BR/&gt; 1115: (3.84615%)&gt;];
}
953--1097[label="1;1pkt 1fpkt"];
953--1115[label="1;1pkt 1fpkt"];
953--3881[label="1;1pkt 1fpkt"];
1115--3881[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="6699" src_ip="148.110.12.64"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.937874,1.83478,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_193{
style=filled;
color=gray75;
1069[label="215.90.90.30;d;27pkt 27fpkt", shape=diamond, color=yellow];
1151[label="197.231.171.151;s;49pkt 49fpkt", shape=diamond, color=yellow];
2149[label="140.3.3.41;d;109pkt 109fpkt", shape=diamond, color=yellow];
2801[label="215.90.90.30;d;19pkt 19fpkt", shape=hexagon, color=black];
4684[label="197.231.171.151;59pkt 59fpkt", shape=pentagon, color=darkviolet];
6497[label="197.231.171.151;59pkt 59fpkt", shape=invtriangle, color=brown];
stat193[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.139.146.216:80, 140.3.3.41:*}[54.023%]&lt;BR/&gt;{197.231.171.151:80, *:*}[33.908%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.2733%)&lt;BR/&gt; 1024: (1.39752%)&lt;BR/&gt; 53: (1.39752%)&lt;BR/&gt; 6699: (0.931677%)&lt;BR/&gt; 1079: (0.931677%)&gt;];
}
1069--1131[label="1;1pkt 1fpkt"];
1069--1151[label="0.666667;18pkt 18fpkt"];
1069--1778[label="1;1pkt 1fpkt"];
1069--2801[label="1;19pkt 19fpkt"];
1069--4684[label="0.666667;18pkt 18fpkt"];
1069--6497[label="0.666667;18pkt 18fpkt"];
1151--2149[label="0.0612245;3pkt 3fpkt"];
1151--2649[label="0.22449;11pkt 11fpkt"];
1151--2801[label="0.736842;14pkt 14fpkt"];
1151--4684[label="1;49pkt 49fpkt"];
1151--6497[label="1;49pkt 49fpkt"];
2149--4684[label="0.0508475;3pkt 3fpkt"];
2149--5238[label="0.862385;94pkt 94fpkt"];
2149--5240[label="0.0175439;1pkt 1fpkt"];
2149--5502[label="0.0454545;1pkt 1fpkt"];
2149--6497[label="0.0508475;3pkt 3fpkt"];
2149--6858[label="0.862385;94pkt 94fpkt"];
2149--6859[label="0.0175439;1pkt 1fpkt"];
2149--7038[label="0.0434783;1pkt 1fpkt"];
2149--7896[label="0.862385;94pkt 94fpkt"];
2149--7897[label="0.0175439;1pkt 1fpkt"];
2801--4684[label="0.736842;14pkt 14fpkt"];
2801--6497[label="0.736842;14pkt 14fpkt"];
4684--6497[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter src_ip="197.231.171.151" src_port="80"/>
      <filter dst_ip="140.3.3.41" src_ip="196.139.146.216" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.983876,1.77655,503,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_194{
style=filled;
color=gray75;
19[label="140.3.201.74s;1pkt 1fpkt", shape=rectangle, color=red];
794[label="140.3.201.74;s;52pkt 52fpkt", shape=diamond, color=yellow];
1125[label="216.183.154.9;d;13pkt 13fpkt", shape=diamond, color=yellow];
1772[label="140.3.212.146;s;45pkt 45fpkt", shape=diamond, color=yellow];
3995[label="140.3.201.74;51pkt 51fpkt", shape=pentagon, color=darkviolet];
6044[label="140.3.201.74;52pkt 52fpkt", shape=invtriangle, color=brown];
7376[label="140.3.201.74;51pkt 51fpkt", shape=invhouse, color=bisque];
stat194[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.201.74:*, *:80}[47.2222%]&lt;BR/&gt;{140.3.212.146:*, *:80}[40.7407%]&lt;BR/&gt;{*:*, 38.72.226.226:80}[20.3704%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.0566%)&lt;BR/&gt; 1074: (1.13208%)&lt;BR/&gt; 1102: (0.943396%)&lt;BR/&gt; 1070: (0.943396%)&lt;BR/&gt; 443: (0.943396%)&gt;];
}
19--794[label="1;1pkt 1fpkt"];
19--1125[label="1;1pkt 1fpkt"];
19--2622[label="1;1pkt 1fpkt"];
19--3995[label="1;1pkt 1fpkt"];
19--6044[label="1;1pkt 1fpkt"];
19--7376[label="1;1pkt 1fpkt"];
794--1125[label="0.0769231;1pkt 1fpkt"];
794--1159[label="0.346154;18pkt 18fpkt"];
794--1433[label="0.0192308;1pkt 1fpkt"];
794--1620[label="0.0192308;1pkt 1fpkt"];
794--1639[label="0.0384615;2pkt 2fpkt"];
794--1665[label="0.0769231;4pkt 4fpkt"];
794--2035[label="0.0384615;2pkt 2fpkt"];
794--2065[label="0.0576923;3pkt 3fpkt"];
794--2147[label="0.0576923;3pkt 3fpkt"];
794--2622[label="0.0769231;1pkt 1fpkt"];
794--2830[label="0.346154;18pkt 18fpkt"];
794--3995[label="1;51pkt 51fpkt"];
794--6044[label="1;52pkt 52fpkt"];
794--7376[label="1;51pkt 51fpkt"];
1125--1688[label="0.0769231;1pkt 1fpkt"];
1125--1772[label="0.0769231;1pkt 1fpkt"];
1125--1994[label="0.153846;2pkt 2fpkt"];
1125--2462[label="0.0769231;1pkt 1fpkt"];
1125--2622[label="1;13pkt 13fpkt"];
1125--2717[label="0.0769231;1pkt 1fpkt"];
1125--2860[label="0.153846;2pkt 2fpkt"];
1125--3121[label="0.0769231;1pkt 1fpkt"];
1125--3328[label="0.153846;2pkt 2fpkt"];
1125--3505[label="0.0769231;1pkt 1fpkt"];
1125--3995[label="0.0769231;1pkt 1fpkt"];
1125--4979[label="0.0769231;1pkt 1fpkt"];
1125--5616[label="0.153846;2pkt 2fpkt"];
1125--5729[label="0.0769231;1pkt 1fpkt"];
1125--6044[label="0.0769231;1pkt 1fpkt"];
1125--6696[label="0.0769231;1pkt 1fpkt"];
1125--7376[label="0.0769231;1pkt 1fpkt"];
1125--7782[label="0.0769231;1pkt 1fpkt"];
1772--1798[label="0.0888889;4pkt 4fpkt"];
1772--1913[label="0.0888889;4pkt 4fpkt"];
1772--2065[label="0.0222222;1pkt 1fpkt"];
1772--2105[label="0.0222222;1pkt 1fpkt"];
1772--2147[label="0.0666667;3pkt 3fpkt"];
1772--2622[label="0.0769231;1pkt 1fpkt"];
1772--2876[label="0.111111;5pkt 5fpkt"];
3995--6044[label="1;51pkt 51fpkt"];
3995--7376[label="1;51pkt 51fpkt"];
6044--7376[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="140.3.201.74"/>
      <filter dst_port="80" src_ip="140.3.212.146"/>
      <filter dst_ip="38.72.226.226" dst_port="80"/>
    </slice>
    <from sec="1039669203" usec="0"/>
    <to sec="1039669644" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19604,1.81002,503,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_195{
style=filled;
color=gray75;
45[label="214.216.49.183s;2pkt 2fpkt", shape=rectangle, color=red];
993[label="33.50.81.183;s;1pkt 1fpkt", shape=diamond, color=yellow];
1126[label="214.216.49.183;s;49pkt 49fpkt", shape=diamond, color=yellow];
1201[label="222.186.0.65;d;5pkt 5fpkt", shape=diamond, color=yellow];
2551[label="214.216.49.183;s;18pkt 18fpkt", shape=hexagon, color=black];
4977[label="214.216.49.183;55pkt 55fpkt", shape=pentagon, color=darkviolet];
6695[label="214.216.49.183;54pkt 54fpkt", shape=invtriangle, color=brown];
7781[label="214.216.49.183;55pkt 55fpkt", shape=invhouse, color=bisque];
stat195[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.216.49.183:*, 198.80.114.84:80}[58.9286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5816%)&lt;BR/&gt; 4729: (1.25523%)&lt;BR/&gt; 4724: (1.25523%)&lt;BR/&gt; 4723: (1.25523%)&lt;BR/&gt; 4722: (1.25523%)&gt;];
}
45--498[label="0.5;1pkt 1fpkt"];
45--762[label="0.5;1pkt 1fpkt"];
45--993[label="1;1pkt 1fpkt"];
45--1126[label="0.5;1pkt 1fpkt"];
45--3185[label="0.5;1pkt 1fpkt"];
45--4977[label="0.5;1pkt 1fpkt"];
45--6695[label="0.5;1pkt 1fpkt"];
45--7781[label="0.5;1pkt 1fpkt"];
1126--1201[label="1;5pkt 5fpkt"];
1126--1561[label="0.0204082;1pkt 1fpkt"];
1126--1893[label="0.0408163;2pkt 2fpkt"];
1126--2551[label="1;18pkt 18fpkt"];
1126--2908[label="0.0204082;1pkt 1fpkt"];
1126--3185[label="0.0408163;2pkt 2fpkt"];
1126--4977[label="1;49pkt 49fpkt"];
1126--6695[label="0.979592;48pkt 48fpkt"];
1126--7781[label="1;49pkt 49fpkt"];
1201--2551[label="1;5pkt 5fpkt"];
1201--4977[label="1;5pkt 5fpkt"];
1201--6695[label="1;5pkt 5fpkt"];
1201--7781[label="1;5pkt 5fpkt"];
2551--2908[label="0.0555556;1pkt 1fpkt"];
2551--4977[label="1;18pkt 18fpkt"];
2551--6695[label="0.944444;17pkt 17fpkt"];
2551--7781[label="1;18pkt 18fpkt"];
4977--6695[label="1;54pkt 54fpkt"];
4977--7781[label="1;55pkt 55fpkt"];
6695--7781[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter dst_ip="198.80.114.84" dst_port="80" src_ip="214.216.49.183"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669915" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14144,1.92665,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_196{
style=filled;
color=gray75;
35[label="215.209.133.140s;3pkt 3fpkt", shape=rectangle, color=red];
1912[label="38.72.213.118;s;109pkt 109fpkt", shape=diamond, color=yellow];
1927[label="215.209.133.140;s;16pkt 16fpkt", shape=diamond, color=yellow];
2160[label="211.45.248.156;d;132pkt 132fpkt", shape=diamond, color=yellow];
2860[label="140.3.201.52;s;80pkt 80fpkt", shape=hexagon, color=black];
2884[label="140.3.133.37;d;149pkt 149fpkt", shape=hexagon, color=black];
stat196[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 140.3.133.37:*}[31.0273%]&lt;BR/&gt;{*:*, 211.45.248.156:80}[27.673%]&lt;BR/&gt;{38.72.213.118:80, *:*}[22.8512%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6933%)&lt;BR/&gt; 56151: (0.306748%)&lt;BR/&gt; 1085: (0.306748%)&lt;BR/&gt; 1065: (0.306748%)&lt;BR/&gt; 443: (0.306748%)&gt;];
}
35--1139[label="0.333333;1pkt 1fpkt"];
35--1506[label="0.333333;1pkt 1fpkt"];
35--1912[label="0.333333;1pkt 1fpkt"];
35--1927[label="0.333333;1pkt 1fpkt"];
35--2160[label="0.333333;1pkt 1fpkt"];
35--2401[label="0.333333;1pkt 1fpkt"];
35--2884[label="0.333333;1pkt 1fpkt"];
1912--2096[label="0.0183486;2pkt 2fpkt"];
1912--2200[label="0.0958904;7pkt 7fpkt"];
1912--2215[label="0.0337079;3pkt 3fpkt"];
1912--2318[label="0.0106383;1pkt 1fpkt"];
1912--2430[label="0.0309278;3pkt 3fpkt"];
1912--2470[label="0.00917431;1pkt 1fpkt"];
1912--2472[label="0.0275229;3pkt 3fpkt"];
1912--2505[label="0.00917431;1pkt 1fpkt"];
1912--2740[label="0.0917431;10pkt 10fpkt"];
1912--2871[label="0.00917431;1pkt 1fpkt"];
1912--2875[label="0.0366972;4pkt 4fpkt"];
1912--2884[label="0.0183486;2pkt 2fpkt"];
1912--3041[label="0.0183486;2pkt 2fpkt"];
1912--3114[label="0.0309278;3pkt 3fpkt"];
1912--3154[label="0.0917431;10pkt 10fpkt"];
2160--2214[label="0.0943396;5pkt 5fpkt"];
2160--2401[label="0.293103;17pkt 17fpkt"];
2160--2462[label="0.030303;4pkt 4fpkt"];
2160--2510[label="0.00757576;1pkt 1fpkt"];
2160--2860[label="0.0875;7pkt 7fpkt"];
2160--2977[label="0.0940171;11pkt 11fpkt"];
2160--3010[label="0.0454545;6pkt 6fpkt"];
2160--3030[label="0.0165289;2pkt 2fpkt"];
2160--3121[label="0.030303;4pkt 4fpkt"];
2160--3185[label="0.113636;15pkt 15fpkt"];
2160--3347[label="0.117647;2pkt 2fpkt"];
2160--3505[label="0.0454545;2pkt 2fpkt"];
2160--3974[label="0.0940171;11pkt 11fpkt"];
2160--4192[label="0.125;3pkt 3fpkt"];
2160--4483[label="0.076087;7pkt 7fpkt"];
2160--4485[label="0.0227273;3pkt 3fpkt"];
2160--4491[label="0.181818;2pkt 2fpkt"];
2160--4557[label="0.129032;4pkt 4fpkt"];
2160--4803[label="0.0204082;1pkt 1fpkt"];
2160--4962[label="0.00757576;1pkt 1fpkt"];
2160--4979[label="0.030303;4pkt 4fpkt"];
2160--5080[label="0.266667;4pkt 4fpkt"];
2160--5182[label="0.0530303;7pkt 7fpkt"];
2160--5266[label="0.0378788;5pkt 5fpkt"];
2160--5272[label="0.0816327;4pkt 4fpkt"];
2160--5286[label="0.00757576;1pkt 1fpkt"];
2160--5729[label="0.0454545;2pkt 2fpkt"];
2160--6030[label="0.0948276;11pkt 11fpkt"];
2160--6167[label="0.16;4pkt 4fpkt"];
2160--6366[label="0.181818;2pkt 2fpkt"];
2160--6576[label="0.0208333;1pkt 1fpkt"];
2160--6685[label="0.00757576;1pkt 1fpkt"];
2160--6696[label="0.030303;4pkt 4fpkt"];
2160--6797[label="0.0555556;1pkt 1fpkt"];
2160--6821[label="0.0530303;7pkt 7fpkt"];
2160--6874[label="0.0378788;5pkt 5fpkt"];
2160--6879[label="0.08;4pkt 4fpkt"];
2160--7365[label="0.0948276;11pkt 11fpkt"];
2160--7708[label="0.0208333;1pkt 1fpkt"];
2160--7782[label="0.030303;4pkt 4fpkt"];
2160--7852[label="0.0555556;1pkt 1fpkt"];
2160--7908[label="0.0378788;5pkt 5fpkt"];
2860--3783[label="0.333333;1pkt 1fpkt"];
2884--2911[label="0.033557;5pkt 5fpkt"];
2884--3058[label="0.0166667;2pkt 2fpkt"];
2884--3076[label="0.0147059;1pkt 1fpkt"];
2884--3209[label="0.0277778;2pkt 2fpkt"];
2884--3212[label="0.0469799;7pkt 7fpkt"];
2884--3295[label="0.0402685;6pkt 6fpkt"];
2884--3509[label="0.470588;8pkt 8fpkt"];
2884--3628[label="0.0208333;1pkt 1fpkt"];
2884--3647[label="0.00671141;1pkt 1fpkt"];
2884--3832[label="0.0134228;2pkt 2fpkt"];
2884--3844[label="0.142857;19pkt 19fpkt"];
2884--4236[label="0.00980392;1pkt 1fpkt"];
2884--4357[label="0.0134228;2pkt 2fpkt"];
2884--4376[label="0.152174;7pkt 7fpkt"];
2884--4397[label="0.00671141;1pkt 1fpkt"];
2884--4451[label="0.0131579;1pkt 1fpkt"];
2884--4522[label="0.0211268;3pkt 3fpkt"];
2884--4688[label="0.0272109;4pkt 4fpkt"];
2884--4713[label="0.0526316;1pkt 1fpkt"];
2884--4716[label="0.0322581;3pkt 3fpkt"];
2884--4889[label="0.120805;18pkt 18fpkt"];
2884--5057[label="0.0604027;9pkt 9fpkt"];
2884--5064[label="0.00671141;1pkt 1fpkt"];
2884--5733[label="0.5;8pkt 8fpkt"];
2884--5816[label="0.00671141;1pkt 1fpkt"];
2884--6197[label="0.00970874;1pkt 1fpkt"];
2884--6275[label="0.0134228;2pkt 2fpkt"];
2884--6289[label="0.148936;7pkt 7fpkt"];
2884--6339[label="0.012987;1pkt 1fpkt"];
2884--6389[label="0.020979;3pkt 3fpkt"];
2884--6517[label="0.0526316;1pkt 1fpkt"];
2884--6638[label="0.120805;18pkt 18fpkt"];
2884--6736[label="0.0604027;9pkt 9fpkt"];
2884--6738[label="0.00671141;1pkt 1fpkt"];
2884--7177[label="0.470588;8pkt 8fpkt"];
2884--7470[label="0.00980392;1pkt 1fpkt"];
2884--7511[label="0.0134228;2pkt 2fpkt"];
2884--7520[label="0.152174;7pkt 7fpkt"];
2884--7548[label="0.012987;1pkt 1fpkt"];
2884--7588[label="0.020979;3pkt 3fpkt"];
2884--7748[label="0.120805;18pkt 18fpkt"];
2884--7811[label="0.0604027;9pkt 9fpkt"];
</description>
    <slice>
      <filter src_ip="38.72.213.118" src_port="80"/>
      <filter dst_ip="140.3.133.37" src_port="80"/>
      <filter dst_ip="211.45.248.156" dst_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19604,1.81002,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_197{
style=filled;
color=gray75;
378[label="36.199.54.211d;1pkt 1fpkt", shape=rectangle, color=red];
1134[label="138.186.51.169;s;130pkt 130fpkt", shape=diamond, color=yellow];
1164[label="33.160.194.211;d;2pkt 2fpkt", shape=diamond, color=yellow];
1168[label="33.116.94.239;d;2pkt 2fpkt", shape=diamond, color=yellow];
1690[label="61.200.162.43;d;2pkt 2fpkt", shape=diamond, color=yellow];
1748[label="33.15.65.17;d;2pkt 2fpkt", shape=diamond, color=yellow];
2414[label="37.90.136.55;d;2pkt 2fpkt", shape=diamond, color=yellow];
2719[label="61.200.162.43;d;2pkt 2fpkt", shape=hexagon, color=black];
4856[label="138.186.51.169;130pkt 130fpkt", shape=pentagon, color=darkviolet];
6612[label="138.186.51.169;129pkt 129fpkt", shape=invtriangle, color=brown];
7731[label="138.186.51.169;130pkt 130fpkt", shape=invhouse, color=bisque];
stat197[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.51.169:6257, *:6257}[87.6923%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (87.218%)&lt;BR/&gt; 6699: (4.32331%)&lt;BR/&gt; 0: (1.50376%)&lt;BR/&gt; 80: (0.75188%)&lt;BR/&gt; 1787: (0.56391%)&gt;];
}
378--1134[label="1;1pkt 1fpkt"];
378--1164[label="1;1pkt 1fpkt"];
378--4856[label="1;1pkt 1fpkt"];
378--6612[label="1;1pkt 1fpkt"];
378--7731[label="1;1pkt 1fpkt"];
1134--1164[label="1;2pkt 2fpkt"];
1134--1168[label="1;2pkt 2fpkt"];
1134--1690[label="1;2pkt 2fpkt"];
1134--1748[label="1;2pkt 2fpkt"];
1134--2414[label="1;2pkt 2fpkt"];
1134--2719[label="1;2pkt 2fpkt"];
1134--4856[label="1;130pkt 130fpkt"];
1134--6612[label="1;129pkt 129fpkt"];
1134--7731[label="1;130pkt 130fpkt"];
1164--4856[label="1;2pkt 2fpkt"];
1164--6612[label="1;2pkt 2fpkt"];
1164--7731[label="1;2pkt 2fpkt"];
1168--4856[label="1;2pkt 2fpkt"];
1168--6612[label="1;2pkt 2fpkt"];
1168--7731[label="1;2pkt 2fpkt"];
1690--2719[label="1;2pkt 2fpkt"];
1690--4856[label="1;2pkt 2fpkt"];
1690--6612[label="1;2pkt 2fpkt"];
1690--7731[label="1;2pkt 2fpkt"];
1748--4856[label="1;2pkt 2fpkt"];
1748--6612[label="1;2pkt 2fpkt"];
1748--7731[label="1;2pkt 2fpkt"];
2414--4856[label="1;2pkt 2fpkt"];
2414--6612[label="1;2pkt 2fpkt"];
2414--7731[label="1;2pkt 2fpkt"];
2719--4856[label="1;2pkt 2fpkt"];
2719--6612[label="1;2pkt 2fpkt"];
2719--7731[label="1;2pkt 2fpkt"];
4856--6612[label="1;129pkt 129fpkt"];
4856--7731[label="1;130pkt 130fpkt"];
6612--7731[label="1;129pkt 129fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="138.186.51.169" src_port="6257"/>
    </slice>
    <from sec="1039669206" usec="0"/>
    <to sec="1039669838" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645838,1.80177,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_198{
style=filled;
color=gray75;
799[label="140.3.22.178;s;131pkt 131fpkt", shape=diamond, color=yellow];
1175[label="200.45.5.193;d;100pkt 100fpkt", shape=diamond, color=yellow];
4934[label="140.3.22.178;131pkt 131fpkt", shape=pentagon, color=darkviolet];
6664[label="140.3.22.178;131pkt 131fpkt", shape=invtriangle, color=brown];
stat198[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.22.178:*, 200.45.5.193:80}[76.3359%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6957%)&lt;BR/&gt; 1900: (0.40568%)&lt;BR/&gt; 1883: (0.40568%)&lt;BR/&gt; 1465: (0.40568%)&lt;BR/&gt; 1464: (0.40568%)&gt;];
}
799--1175[label="1;100pkt 100fpkt"];
799--4934[label="1;131pkt 131fpkt"];
799--6664[label="1;131pkt 131fpkt"];
1175--4934[label="1;100pkt 100fpkt"];
1175--6664[label="1;100pkt 100fpkt"];
4934--6664[label="1;131pkt 131fpkt"];
</description>
    <slice>
      <filter dst_ip="200.45.5.193" dst_port="80" src_ip="140.3.22.178"/>
    </slice>
    <from sec="1039669234" usec="0"/>
    <to sec="1039669739" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_199{
style=filled;
color=gray75;
1176[label="200.45.5.193;s;100pkt 100fpkt", shape=diamond, color=yellow];
1177[label="140.3.22.178;d;130pkt 130fpkt", shape=diamond, color=yellow];
stat199[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.45.5.193:80, 140.3.22.178:*}[76.9231%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7826%)&lt;BR/&gt; 1900: (0.434783%)&lt;BR/&gt; 1883: (0.434783%)&lt;BR/&gt; 1465: (0.434783%)&lt;BR/&gt; 1464: (0.434783%)&gt;];
}
1176--1177[label="1;100pkt 100fpkt"];
1177--2780[label="0.00769231;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.22.178" src_ip="200.45.5.193" src_port="80"/>
    </slice>
    <from sec="1039669234" usec="0"/>
    <to sec="1039669828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14144,1.92665,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_200{
style=filled;
color=gray75;
67[label="64.64.74.255s;2pkt 2fpkt", shape=rectangle, color=red];
1187[label="64.64.74.255;s;1pkt 1fpkt", shape=diamond, color=yellow];
1188[label="138.186.59.171;d;2pkt 2fpkt", shape=diamond, color=yellow];
3090[label="64.64.74.255;s;1pkt 1fpkt", shape=hexagon, color=black];
stat200[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.90.155.249:1863, 138.186.59.171:1104}[33.3333%]&lt;BR/&gt;{201.100.18.255:80, 138.186.8.154:39264}[33.3333%]&lt;BR/&gt;{64.64.74.255:6699, 138.186.59.171:1114}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (33.3333%)&lt;BR/&gt; 1114: (33.3333%)&lt;BR/&gt; 39264: (8.33333%)&lt;BR/&gt; 1863: (8.33333%)&lt;BR/&gt; 1104: (8.33333%)&gt;];
}
67--557[label="0.5;1pkt 1fpkt"];
67--1187[label="1;1pkt 1fpkt"];
67--1188[label="0.5;1pkt 1fpkt"];
67--3090[label="1;1pkt 1fpkt"];
1187--1188[label="1;1pkt 1fpkt"];
1187--3090[label="1;1pkt 1fpkt"];
1188--3090[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.59.171" dst_port="1114" src_ip="64.64.74.255" src_port="6699"/>
      <filter dst_ip="138.186.8.154" dst_port="39264" src_ip="201.100.18.255" src_port="80"/>
      <filter dst_ip="138.186.59.171" dst_port="1104" src_ip="211.90.155.249" src_port="1863"/>
    </slice>
    <from sec="1039669268" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905994,1.86884,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_201{
style=filled;
color=gray75;
1190[label="138.186.58.32;d;3pkt 3fpkt", shape=diamond, color=yellow];
1194[label="145.19.180.80;s;1pkt 1fpkt", shape=diamond, color=yellow];
3091[label="138.186.58.32;d;3pkt 3fpkt", shape=hexagon, color=black];
5302[label="61.137.97.225;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat201[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.90.155.28:1863, 138.186.58.32:1136}[33.3333%]&lt;BR/&gt;{145.19.180.80:4130, 138.186.58.32:6699}[33.3333%]&lt;BR/&gt;{61.137.97.225:1975, 138.186.58.32:6699}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (37.5%)&lt;BR/&gt; 4130: (18.75%)&lt;BR/&gt; 1975: (18.75%)&lt;BR/&gt; 1863: (12.5%)&lt;BR/&gt; 1136: (12.5%)&gt;];
}
1190--1194[label="1;1pkt 1fpkt"];
1190--3091[label="1;3pkt 3fpkt"];
1190--5302[label="1;1pkt 1fpkt"];
1194--3091[label="1;1pkt 1fpkt"];
3091--5302[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.58.32" dst_port="6699" src_ip="61.137.97.225" src_port="1975"/>
      <filter dst_ip="138.186.58.32" dst_port="6699" src_ip="145.19.180.80" src_port="4130"/>
      <filter dst_ip="138.186.58.32" dst_port="1136" src_ip="211.90.155.28" src_port="1863"/>
    </slice>
    <from sec="1039669270" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_202{
style=filled;
color=gray75;
572[label="215.90.72.42;d;778pkt 778fpkt", shape=diamond, color=yellow];
1437[label="202.155.216.51;s;11pkt 11fpkt", shape=diamond, color=yellow];
3302[label="202.155.216.7;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3773[label="202.155.216.51;14pkt 14fpkt", shape=pentagon, color=darkviolet];
3954[label="202.155.218.69;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4021[label="202.155.218.76;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4062[label="202.155.218.80;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5900[label="202.155.216.51;15pkt 15fpkt", shape=invtriangle, color=brown];
7281[label="202.155.216.51;15pkt 15fpkt", shape=invhouse, color=bisque];
stat202[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 215.90.72.42:*}[23.1362%]&lt;BR/&gt;{202.155.218.137:*, 215.90.72.42:80}[22.2365%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (24.152%)&lt;BR/&gt; 6699: (5.55556%)&lt;BR/&gt; 5004: (3.97661%)&lt;BR/&gt; 5003: (2.74854%)&lt;BR/&gt; 1755: (1.9883%)&gt;];
}
572--573[label="1;626pkt 626fpkt"];
572--1200[label="1;53pkt 53fpkt"];
572--1437[label="1;11pkt 11fpkt"];
572--2568[label="1;53pkt 53fpkt"];
572--3179[label="0.00146628;1pkt 1fpkt"];
572--3180[label="0.00128535;1pkt 1fpkt"];
572--3181[label="0.00181488;1pkt 1fpkt"];
572--3184[label="0.00128535;1pkt 1fpkt"];
572--3185[label="0.00899743;7pkt 7fpkt"];
572--3187[label="0.00146628;1pkt 1fpkt"];
572--3188[label="0.00128535;1pkt 1fpkt"];
572--3302[label="1;5pkt 5fpkt"];
572--3747[label="1;6pkt 6fpkt"];
572--3773[label="1;14pkt 14fpkt"];
572--3954[label="1;6pkt 6fpkt"];
572--4021[label="1;6pkt 6fpkt"];
572--4062[label="1;5pkt 5fpkt"];
572--4577[label="1;626pkt 626fpkt"];
572--5883[label="1;5pkt 5fpkt"];
572--5900[label="1;15pkt 15fpkt"];
572--6429[label="1;625pkt 625fpkt"];
572--7281[label="1;15pkt 15fpkt"];
572--7611[label="1;626pkt 626fpkt"];
1437--3773[label="0.909091;10pkt 10fpkt"];
1437--5900[label="1;11pkt 11fpkt"];
1437--7281[label="1;11pkt 11fpkt"];
3773--5900[label="1;14pkt 14fpkt"];
3773--7281[label="1;14pkt 14fpkt"];
5900--7281[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.72.42" src_port="80"/>
      <filter dst_ip="215.90.72.42" dst_port="80" src_ip="202.155.218.137"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="140.3.244.89"/>
      <from sec="1039669337" usec="0"/>
      <to sec="1039669501" usec="0"/>
    </slice>
    <from sec="1039669337" usec="0"/>
    <to sec="1039669501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_204{
style=filled;
color=gray75;
1202[label="140.3.244.89;d;73pkt 73fpkt", shape=diamond, color=yellow];
1204[label="166.144.157.102;s;1pkt 1fpkt", shape=diamond, color=yellow];
2569[label="140.3.244.89;d;20pkt 20fpkt", shape=hexagon, color=black];
stat204[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.220.161.117:80, 140.3.244.89:*}[71.2329%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.2766%)&lt;BR/&gt; 110: (2.65957%)&lt;BR/&gt; 1504: (1.59574%)&lt;BR/&gt; 1516: (1.06383%)&lt;BR/&gt; 1514: (1.06383%)&gt;];
}
1202--1204[label="1;1pkt 1fpkt"];
1202--2569[label="1;20pkt 20fpkt"];
1204--2569[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.244.89" src_ip="197.220.161.117" src_port="80"/>
    </slice>
    <from sec="1039669337" usec="0"/>
    <to sec="1039669501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.937874,1.83478,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_205{
style=filled;
color=gray75;
745[label="98.221.96.207;s;2pkt 2fpkt", shape=diamond, color=yellow];
1138[label="38.72.220.109;s;66pkt 66fpkt", shape=diamond, color=yellow];
1185[label="193.66.186.45;s;276pkt 276fpkt", shape=diamond, color=yellow];
1318[label="201.100.18.253;s;185pkt 185fpkt", shape=diamond, color=yellow];
1914[label="39.111.128.126;s;174pkt 174fpkt", shape=diamond, color=yellow];
2037[label="138.186.51.47;d;9pkt 9fpkt", shape=diamond, color=yellow];
2122[label="214.216.50.132;d;70pkt 70fpkt", shape=diamond, color=yellow];
2215[label="140.3.243.165;d;89pkt 89fpkt", shape=diamond, color=yellow];
2443[label="138.186.56.78;d;60pkt 60fpkt", shape=diamond, color=yellow];
2450[label="140.3.201.83;d;55pkt 55fpkt", shape=diamond, color=yellow];
2982[label="211.45.228.7;s;148pkt 148fpkt", shape=hexagon, color=black];
3118[label="138.186.56.78;d;60pkt 60fpkt", shape=hexagon, color=black];
3299[label="221.12.93.7;16pkt 16fpkt", shape=pentagon, color=darkviolet];
3956[label="38.72.224.69;38pkt 38fpkt", shape=pentagon, color=darkviolet];
4410[label="209.208.13.120;20pkt 20fpkt", shape=pentagon, color=darkviolet];
5597[label="221.12.93.7;16pkt 16fpkt", shape=invtriangle, color=brown];
6023[label="38.72.224.69;39pkt 39fpkt", shape=invtriangle, color=brown];
6314[label="209.208.13.120;19pkt 19fpkt", shape=invtriangle, color=brown];
6467[label="211.45.243.145;106pkt 106fpkt", shape=invtriangle, color=brown];
stat205[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.66.186.45:80, 214.231.185.28:*}[21.6471%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6892%)&lt;BR/&gt; 3301: (0.138122%)&lt;BR/&gt; 3297: (0.138122%)&lt;BR/&gt; 1176: (0.138122%)&lt;BR/&gt; 1167: (0.138122%)&gt;];
}
745--2875[label="1;2pkt 2fpkt"];
1138--1146[label="0.136364;9pkt 9fpkt"];
1138--1505[label="0.166667;11pkt 11fpkt"];
1138--2242[label="0.107692;7pkt 7fpkt"];
1138--2450[label="0.145455;8pkt 8fpkt"];
1138--2470[label="0.0454545;3pkt 3fpkt"];
1138--2623[label="1;66pkt 66fpkt"];
1138--2875[label="0.0151515;1pkt 1fpkt"];
1138--4342[label="1;66pkt 66fpkt"];
1185--2631[label="1;276pkt 276fpkt"];
1185--2875[label="1;276pkt 276fpkt"];
1318--1377[label="0.00980392;1pkt 1fpkt"];
1318--1505[label="0.0378378;7pkt 7fpkt"];
1318--1855[label="0.00671141;1pkt 1fpkt"];
1318--1939[label="0.0149254;1pkt 1fpkt"];
1318--2122[label="0.0285714;2pkt 2fpkt"];
1318--2673[label="0.00540541;1pkt 1fpkt"];
1318--2679[label="0.00540541;1pkt 1fpkt"];
1318--2688[label="1;185pkt 185fpkt"];
1318--2740[label="0.00540541;1pkt 1fpkt"];
1318--2875[label="0.027027;5pkt 5fpkt"];
1318--2930[label="0.00769231;1pkt 1fpkt"];
1318--3059[label="0.00540541;1pkt 1fpkt"];
1318--3154[label="0.00540541;1pkt 1fpkt"];
1318--5513[label="1;185pkt 185fpkt"];
1318--7046[label="1;185pkt 185fpkt"];
1318--8013[label="0.994595;184pkt 184fpkt"];
1914--2407[label="0.0185185;1pkt 1fpkt"];
1914--2441[label="0.107143;6pkt 6fpkt"];
1914--2443[label="0.0833333;5pkt 5fpkt"];
1914--2470[label="0.00574713;1pkt 1fpkt"];
1914--2472[label="0.00574713;1pkt 1fpkt"];
1914--2505[label="0.00574713;1pkt 1fpkt"];
1914--2673[label="0.0114943;2pkt 2fpkt"];
1914--2740[label="0.0287356;5pkt 5fpkt"];
1914--2828[label="1;174pkt 174fpkt"];
1914--2871[label="0.00574713;1pkt 1fpkt"];
1914--2875[label="0.0402299;7pkt 7fpkt"];
1914--2884[label="0.0134228;2pkt 2fpkt"];
1914--2940[label="0.0235294;2pkt 2fpkt"];
1914--3118[label="0.0833333;5pkt 5fpkt"];
1914--3154[label="0.0287356;5pkt 5fpkt"];
2037--2627[label="0.222222;2pkt 2fpkt"];
2037--2897[label="1;9pkt 9fpkt"];
2037--3648[label="0.333333;3pkt 3fpkt"];
2037--5064[label="0.222222;2pkt 2fpkt"];
2037--6738[label="0.222222;2pkt 2fpkt"];
2122--2688[label="0.0285714;2pkt 2fpkt"];
2122--5098[label="0.357143;10pkt 10fpkt"];
2122--5513[label="0.0285714;2pkt 2fpkt"];
2122--6762[label="0.357143;10pkt 10fpkt"];
2122--7046[label="0.0285714;2pkt 2fpkt"];
2122--7828[label="0.37037;10pkt 10fpkt"];
2122--8013[label="0.0285714;2pkt 2fpkt"];
2215--2982[label="0.280899;25pkt 25fpkt"];
2215--3012[label="0.146067;13pkt 13fpkt"];
2215--3303[label="0.280899;25pkt 25fpkt"];
2215--3832[label="0.011236;1pkt 1fpkt"];
2215--4424[label="0.0192308;1pkt 1fpkt"];
2215--4522[label="0.224719;20pkt 20fpkt"];
2215--4699[label="0.02;1pkt 1fpkt"];
2215--6323[label="0.0188679;1pkt 1fpkt"];
2215--6389[label="0.224719;20pkt 20fpkt"];
2215--6506[label="0.02;1pkt 1fpkt"];
2215--7539[label="0.0188679;1pkt 1fpkt"];
2215--7588[label="0.224719;20pkt 20fpkt"];
2215--7664[label="0.0204082;1pkt 1fpkt"];
2443--2828[label="0.0833333;5pkt 5fpkt"];
2443--2911[label="0.0166667;1pkt 1fpkt"];
2443--2962[label="0.0666667;4pkt 4fpkt"];
2443--3118[label="1;60pkt 60fpkt"];
2443--3212[label="0.0833333;5pkt 5fpkt"];
2443--4031[label="0.183333;11pkt 11fpkt"];
2443--4596[label="0.483333;29pkt 29fpkt"];
2443--4699[label="0.02;1pkt 1fpkt"];
2443--6438[label="0.483333;29pkt 29fpkt"];
2443--6506[label="0.02;1pkt 1fpkt"];
2443--7617[label="0.483333;29pkt 29fpkt"];
2443--7664[label="0.0204082;1pkt 1fpkt"];
2450--2623[label="0.145455;8pkt 8fpkt"];
2450--3076[label="0.0181818;1pkt 1fpkt"];
2450--3209[label="0.0181818;1pkt 1fpkt"];
2450--3295[label="0.0909091;5pkt 5fpkt"];
2450--3687[label="0.0909091;5pkt 5fpkt"];
2450--4342[label="0.145455;8pkt 8fpkt"];
2450--4397[label="0.0181818;1pkt 1fpkt"];
2450--4451[label="0.0181818;1pkt 1fpkt"];
2450--4688[label="0.0727273;4pkt 4fpkt"];
2450--5841[label="0.0909091;5pkt 5fpkt"];
2450--6339[label="0.0181818;1pkt 1fpkt"];
2450--7548[label="0.0181818;1pkt 1fpkt"];
2982--3098[label="0.220339;26pkt 26fpkt"];
2982--3303[label="0.993243;147pkt 147fpkt"];
3118--3212[label="0.0833333;5pkt 5fpkt"];
3118--4031[label="0.183333;11pkt 11fpkt"];
3118--4596[label="0.483333;29pkt 29fpkt"];
3118--4699[label="0.02;1pkt 1fpkt"];
3118--6438[label="0.483333;29pkt 29fpkt"];
3118--6506[label="0.02;1pkt 1fpkt"];
3118--7617[label="0.483333;29pkt 29fpkt"];
3118--7664[label="0.0204082;1pkt 1fpkt"];
3299--5597[label="1;16pkt 16fpkt"];
3299--7097[label="1;16pkt 16fpkt"];
3956--6023[label="1;38pkt 38fpkt"];
3956--7360[label="1;38pkt 38fpkt"];
4410--6314[label="1;19pkt 19fpkt"];
4410--7534[label="1;20pkt 20fpkt"];
5597--7097[label="1;16pkt 16fpkt"];
6023--7360[label="1;38pkt 38fpkt"];
6314--7534[label="1;19pkt 19fpkt"];
6467--7637[label="1;105pkt 105fpkt"];
</description>
    <slice>
      <filter dst_ip="214.231.185.28" src_ip="193.66.186.45" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669871" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19604,1.81002,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_206{
style=filled;
color=gray75;
367[label="215.150.161.223s;3pkt 3fpkt", shape=rectangle, color=red];
500[label="215.150.161.223;s;12pkt 12fpkt", shape=diamond, color=yellow];
1066[label="138.7.9.225;s;183pkt 183fpkt", shape=diamond, color=yellow];
1223[label="143.19.46.19;d;13pkt 13fpkt", shape=diamond, color=yellow];
1303[label="220.74.159.60;d;35pkt 35fpkt", shape=diamond, color=yellow];
1340[label="143.18.81.143;d;23pkt 23fpkt", shape=diamond, color=yellow];
1550[label="138.165.208.237;s;252pkt 252fpkt", shape=diamond, color=yellow];
1597[label="138.165.208.234;s;329pkt 329fpkt", shape=diamond, color=yellow];
1628[label="215.160.138.178;s;232pkt 232fpkt", shape=diamond, color=yellow];
1889[label="215.87.86.229;s;226pkt 226fpkt", shape=diamond, color=yellow];
2697[label="138.7.9.225;s;143pkt 143fpkt", shape=hexagon, color=black];
2877[label="143.19.46.19;d;11pkt 11fpkt", shape=hexagon, color=black];
2995[label="215.150.161.223;s;12pkt 12fpkt", shape=hexagon, color=black];
3358[label="215.87.74.12;57pkt 57fpkt", shape=pentagon, color=darkviolet];
3576[label="215.154.47.31;73pkt 73fpkt", shape=pentagon, color=darkviolet];
3653[label="215.87.95.38;48pkt 48fpkt", shape=pentagon, color=darkviolet];
3874[label="138.170.229.62;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4080[label="215.87.87.82;55pkt 55fpkt", shape=pentagon, color=darkviolet];
4948[label="221.50.42.180;144pkt 144fpkt", shape=pentagon, color=darkviolet];
5288[label="215.150.161.223;11pkt 11fpkt", shape=pentagon, color=darkviolet];
5333[label="215.87.86.229;358pkt 358fpkt", shape=pentagon, color=darkviolet];
5384[label="138.165.208.234;382pkt 382fpkt", shape=pentagon, color=darkviolet];
5410[label="138.165.208.237;275pkt 275fpkt", shape=pentagon, color=darkviolet];
6674[label="221.50.42.180;145pkt 145fpkt", shape=invtriangle, color=brown];
6889[label="215.150.161.223;12pkt 12fpkt", shape=invtriangle, color=brown];
6915[label="215.87.86.229;358pkt 358fpkt", shape=invtriangle, color=brown];
6950[label="138.165.208.234;382pkt 382fpkt", shape=invtriangle, color=brown];
6966[label="138.165.208.237;275pkt 275fpkt", shape=invtriangle, color=brown];
7769[label="221.50.42.180;145pkt 145fpkt", shape=invhouse, color=bisque];
7920[label="215.150.161.223;11pkt 11fpkt", shape=invhouse, color=bisque];
7934[label="215.87.86.229;358pkt 358fpkt", shape=invhouse, color=bisque];
7957[label="138.165.208.234;382pkt 382fpkt", shape=invhouse, color=bisque];
stat206[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:53}[59.1512%]&lt;BR/&gt;{*:53, *:*}[25.4642%]&lt;BR/&gt;{138.165.208.234:*, *:*}[20.2653%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (42.8845%)&lt;BR/&gt; 0: (18.6454%)&lt;BR/&gt; 1816: (11.6509%)&lt;BR/&gt; 57040: (2.67083%)&lt;BR/&gt; 32775: (2.28785%)&gt;];
}
367--500[label="1;3pkt 3fpkt"];
367--1223[label="0.333333;1pkt 1fpkt"];
367--1303[label="0.333333;1pkt 1fpkt"];
367--1340[label="0.333333;1pkt 1fpkt"];
367--2877[label="0.333333;1pkt 1fpkt"];
367--2995[label="1;3pkt 3fpkt"];
367--5288[label="1;3pkt 3fpkt"];
367--6889[label="1;3pkt 3fpkt"];
367--7920[label="1;3pkt 3fpkt"];
500--1223[label="0.166667;2pkt 2fpkt"];
500--1303[label="0.25;3pkt 3fpkt"];
500--1340[label="0.0833333;1pkt 1fpkt"];
500--2303[label="0.0833333;1pkt 1fpkt"];
500--2877[label="0.181818;2pkt 2fpkt"];
500--2995[label="1;12pkt 12fpkt"];
500--5288[label="1;11pkt 11fpkt"];
500--6889[label="1;12pkt 12fpkt"];
500--7920[label="1;11pkt 11fpkt"];
1066--1303[label="0.0285714;1pkt 1fpkt"];
1066--1391[label="0.00793651;1pkt 1fpkt"];
1066--1883[label="0.0243902;1pkt 1fpkt"];
1066--2303[label="0.0666667;1pkt 1fpkt"];
1066--2697[label="1;143pkt 143fpkt"];
1223--1628[label="0.0769231;1pkt 1fpkt"];
1223--2877[label="1;11pkt 11fpkt"];
1223--2995[label="0.166667;2pkt 2fpkt"];
1223--4885[label="0.153846;2pkt 2fpkt"];
1223--5288[label="0.181818;2pkt 2fpkt"];
1223--5333[label="0.0769231;1pkt 1fpkt"];
1223--6635[label="0.153846;2pkt 2fpkt"];
1223--6889[label="0.166667;2pkt 2fpkt"];
1223--6915[label="0.0769231;1pkt 1fpkt"];
1223--7920[label="0.181818;2pkt 2fpkt"];
1223--7934[label="0.0769231;1pkt 1fpkt"];
1303--1597[label="0.0285714;1pkt 1fpkt"];
1303--1628[label="0.0285714;1pkt 1fpkt"];
1303--2529[label="0.0384615;1pkt 1fpkt"];
1303--2697[label="0.0285714;1pkt 1fpkt"];
1303--2995[label="0.25;3pkt 3fpkt"];
1303--3358[label="0.0285714;1pkt 1fpkt"];
1303--3653[label="0.0285714;1pkt 1fpkt"];
1303--3874[label="0.0625;1pkt 1fpkt"];
1303--4080[label="0.0285714;1pkt 1fpkt"];
1303--4743[label="0.0285714;1pkt 1fpkt"];
1303--4885[label="0.114286;4pkt 4fpkt"];
1303--5288[label="0.272727;3pkt 3fpkt"];
1303--5290[label="0.0285714;1pkt 1fpkt"];
1303--5373[label="0.0285714;1pkt 1fpkt"];
1303--5384[label="0.0285714;1pkt 1fpkt"];
1303--6537[label="0.0285714;1pkt 1fpkt"];
1303--6635[label="0.114286;4pkt 4fpkt"];
1303--6889[label="0.25;3pkt 3fpkt"];
1303--6891[label="0.0285714;1pkt 1fpkt"];
1303--6940[label="0.0285714;1pkt 1fpkt"];
1303--6950[label="0.0285714;1pkt 1fpkt"];
1303--7682[label="0.0285714;1pkt 1fpkt"];
1303--7920[label="0.272727;3pkt 3fpkt"];
1303--7922[label="0.0285714;1pkt 1fpkt"];
1303--7957[label="0.0285714;1pkt 1fpkt"];
1340--1550[label="0.0434783;1pkt 1fpkt"];
1340--1628[label="0.0434783;1pkt 1fpkt"];
1340--2995[label="0.0833333;1pkt 1fpkt"];
1340--3576[label="0.0434783;1pkt 1fpkt"];
1340--4885[label="0.0869565;2pkt 2fpkt"];
1340--4948[label="0.26087;6pkt 6fpkt"];
1340--5288[label="0.0909091;1pkt 1fpkt"];
1340--5410[label="0.0434783;1pkt 1fpkt"];
1340--6635[label="0.0869565;2pkt 2fpkt"];
1340--6674[label="0.26087;6pkt 6fpkt"];
1340--6889[label="0.0833333;1pkt 1fpkt"];
1340--6966[label="0.0434783;1pkt 1fpkt"];
1340--7769[label="0.26087;6pkt 6fpkt"];
1340--7920[label="0.0909091;1pkt 1fpkt"];
1550--1883[label="0.0243902;1pkt 1fpkt"];
1550--5410[label="0.996032;251pkt 251fpkt"];
1550--6966[label="0.996032;251pkt 251fpkt"];
1597--1883[label="0.0243902;1pkt 1fpkt"];
1597--5384[label="1;329pkt 329fpkt"];
1597--6950[label="1;329pkt 329fpkt"];
1597--7957[label="1;329pkt 329fpkt"];
1628--1883[label="0.0243902;1pkt 1fpkt"];
1628--2303[label="0.0666667;1pkt 1fpkt"];
1628--2877[label="0.0909091;1pkt 1fpkt"];
1889--5333[label="0.995575;225pkt 225fpkt"];
1889--6915[label="0.995575;225pkt 225fpkt"];
1889--7934[label="0.995575;225pkt 225fpkt"];
2877--2995[label="0.181818;2pkt 2fpkt"];
2877--4885[label="0.0909091;1pkt 1fpkt"];
2877--5288[label="0.181818;2pkt 2fpkt"];
2877--6635[label="0.0909091;1pkt 1fpkt"];
2877--6889[label="0.181818;2pkt 2fpkt"];
2877--7920[label="0.181818;2pkt 2fpkt"];
2995--5288[label="1;11pkt 11fpkt"];
2995--6889[label="1;12pkt 12fpkt"];
2995--7920[label="1;11pkt 11fpkt"];
4948--6674[label="1;144pkt 144fpkt"];
4948--7769[label="1;144pkt 144fpkt"];
5288--6889[label="1;11pkt 11fpkt"];
5288--7920[label="1;11pkt 11fpkt"];
5333--6915[label="1;358pkt 358fpkt"];
5333--7934[label="1;358pkt 358fpkt"];
5384--6950[label="1;382pkt 382fpkt"];
5384--7957[label="1;382pkt 382fpkt"];
5410--6966[label="1;275pkt 275fpkt"];
6674--7769[label="1;145pkt 145fpkt"];
6889--7920[label="1;11pkt 11fpkt"];
6915--7934[label="1;358pkt 358fpkt"];
6950--7957[label="1;382pkt 382fpkt"];
</description>
    <slice>
      <filter src_ip="138.165.208.234"/>
      <filter src_port="53"/>
      <filter dst_port="53"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17121,1.84455,999,1 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_207{
style=filled;
color=gray75;
89[label="202.58.134.10s;1pkt 1fpkt", shape=rectangle, color=red];
845[label="138.186.52.55;d;331pkt 331fpkt", shape=diamond, color=yellow];
1229[label="64.171.210.10;s;1pkt 1fpkt", shape=diamond, color=yellow];
1903[label="39.36.13.205;s;2pkt 2fpkt", shape=diamond, color=yellow];
2645[label="64.171.210.10;s;1pkt 1fpkt", shape=hexagon, color=black];
5146[label="39.36.13.205;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7942[label="64.172.28.232;1pkt 1fpkt", shape=invhouse, color=bisque];
stat207[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6257, 138.186.52.55:6257}[94.864%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (94.2308%)&lt;BR/&gt; 6699: (1.92308%)&lt;BR/&gt; 1351: (0.591716%)&lt;BR/&gt; 0: (0.591716%)&lt;BR/&gt; 4099: (0.443787%)&gt;];
}
89--845[label="1;1pkt 1fpkt"];
89--1229[label="1;1pkt 1fpkt"];
89--2645[label="1;1pkt 1fpkt"];
845--1229[label="1;1pkt 1fpkt"];
845--1903[label="1;2pkt 2fpkt"];
845--2478[label="1;1pkt 1fpkt"];
845--2645[label="1;1pkt 1fpkt"];
845--5146[label="1;1pkt 1fpkt"];
845--7942[label="1;1pkt 1fpkt"];
1229--2645[label="1;1pkt 1fpkt"];
1903--5146[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.52.55" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.916727,1.89524,999,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_208{
style=filled;
color=gray75;
242[label="192.170.196.146s;1pkt 1fpkt", shape=rectangle, color=red];
868[label="148.110.216.146;s;1pkt 1fpkt", shape=diamond, color=yellow];
1237[label="192.182.238.171;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat208[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.110.216.146:4873, 192.182.238.171:554}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4873: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
242--868[label="1;1pkt 1fpkt"];
242--1237[label="1;1pkt 1fpkt"];
868--1237[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.182.238.171" dst_port="554" src_ip="148.110.216.146" src_port="4873"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.916727,1.89524,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_209{
style=filled;
color=gray75;
305[label="214.168.181.208s;1pkt 1fpkt", shape=rectangle, color=red];
1245[label="37.69.59.146;d;2pkt 2fpkt", shape=diamond, color=yellow];
1795[label="148.110.13.208;s;19pkt 19fpkt", shape=diamond, color=yellow];
stat209[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.110.13.208:*, 38.96.129.201:80}[31.5789%]&lt;BR/&gt;{148.110.13.208:*, 201.37.163.84:80}[21.0526%]&lt;BR/&gt;{148.110.13.208:*, 36.161.195.131:80}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.3636%)&lt;BR/&gt; 20726: (6.81818%)&lt;BR/&gt; 6970: (6.81818%)&lt;BR/&gt; 1245: (4.54545%)&lt;BR/&gt; 554: (4.54545%)&gt;];
}
305--1245[label="1;1pkt 1fpkt"];
305--1795[label="1;1pkt 1fpkt"];
1245--1795[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="38.96.129.201" dst_port="80" src_ip="148.110.13.208"/>
      <filter dst_ip="36.161.195.131" dst_port="80" src_ip="148.110.13.208"/>
      <filter dst_ip="201.37.163.84" dst_port="80" src_ip="148.110.13.208"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19604,1.81002,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_210{
style=filled;
color=gray75;
90[label="148.110.225.10s;2pkt 2fpkt", shape=rectangle, color=red];
458[label="148.110.225.10;s;683pkt 683fpkt", shape=diamond, color=yellow];
999[label="61.12.112.14;d;1pkt 1fpkt", shape=diamond, color=yellow];
1179[label="92.255.236.20;d;2pkt 2fpkt", shape=diamond, color=yellow];
1214[label="200.65.201.5;d;1pkt 1fpkt", shape=diamond, color=yellow];
1246[label="36.44.97.138;d;1pkt 1fpkt", shape=diamond, color=yellow];
1298[label="200.141.150.20;d;1pkt 1fpkt", shape=diamond, color=yellow];
1698[label="60.253.147.19;d;1pkt 1fpkt", shape=diamond, color=yellow];
1833[label="61.104.26.250;d;1pkt 1fpkt", shape=diamond, color=yellow];
2531[label="61.12.112.14;d;1pkt 1fpkt", shape=hexagon, color=black];
3345[label="148.110.225.10;733pkt 733fpkt", shape=pentagon, color=darkviolet];
5625[label="148.110.225.10;733pkt 733fpkt", shape=invtriangle, color=brown];
7112[label="148.110.225.10;734pkt 734fpkt", shape=invhouse, color=bisque];
stat210[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.110.225.10:6257, *:6257}[95.3678%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (96.4582%)&lt;BR/&gt; 6699: (1.0539%)&lt;BR/&gt; 16257: (0.138217%)&lt;BR/&gt; 3883: (0.103663%)&lt;BR/&gt; 3776: (0.103663%)&gt;];
}
90--458[label="1;2pkt 2fpkt"];
90--1246[label="1;1pkt 1fpkt"];
90--1547[label="0.5;1pkt 1fpkt"];
90--3345[label="1;2pkt 2fpkt"];
90--5625[label="1;2pkt 2fpkt"];
90--7112[label="1;2pkt 2fpkt"];
458--999[label="1;1pkt 1fpkt"];
458--1179[label="1;2pkt 2fpkt"];
458--1214[label="1;1pkt 1fpkt"];
458--1246[label="1;1pkt 1fpkt"];
458--1298[label="1;1pkt 1fpkt"];
458--1547[label="0.666667;2pkt 2fpkt"];
458--1698[label="1;1pkt 1fpkt"];
458--1833[label="1;1pkt 1fpkt"];
458--1966[label="0.333333;1pkt 1fpkt"];
458--2531[label="1;1pkt 1fpkt"];
458--3345[label="0.998536;682pkt 682fpkt"];
458--5625[label="0.998536;682pkt 682fpkt"];
458--7112[label="1;683pkt 683fpkt"];
999--2531[label="1;1pkt 1fpkt"];
999--3345[label="1;1pkt 1fpkt"];
999--5625[label="1;1pkt 1fpkt"];
999--7112[label="1;1pkt 1fpkt"];
1179--3345[label="1;2pkt 2fpkt"];
1179--5625[label="1;2pkt 2fpkt"];
1179--7112[label="1;2pkt 2fpkt"];
1214--3345[label="1;1pkt 1fpkt"];
1214--5625[label="1;1pkt 1fpkt"];
1214--7112[label="1;1pkt 1fpkt"];
1246--3345[label="1;1pkt 1fpkt"];
1246--5625[label="1;1pkt 1fpkt"];
1246--7112[label="1;1pkt 1fpkt"];
1298--3345[label="1;1pkt 1fpkt"];
1298--5625[label="1;1pkt 1fpkt"];
1298--7112[label="1;1pkt 1fpkt"];
1698--3345[label="1;1pkt 1fpkt"];
1698--5625[label="1;1pkt 1fpkt"];
1698--7112[label="1;1pkt 1fpkt"];
1833--3345[label="1;1pkt 1fpkt"];
1833--5625[label="1;1pkt 1fpkt"];
1833--7112[label="1;1pkt 1fpkt"];
2531--3345[label="1;1pkt 1fpkt"];
2531--5625[label="1;1pkt 1fpkt"];
2531--7112[label="1;1pkt 1fpkt"];
3345--5625[label="1;733pkt 733fpkt"];
3345--7112[label="1;733pkt 733fpkt"];
5625--7112[label="1;733pkt 733fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="148.110.225.10" src_port="6257"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_211{
style=filled;
color=gray75;
600[label="199.94.177.185;s;252pkt 252fpkt", shape=diamond, color=yellow];
1182[label="138.186.217.64;d;71pkt 71fpkt", shape=diamond, color=yellow];
stat211[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.94.177.185:80, 140.3.208.204:*}[49.8024%]&lt;BR/&gt;{199.94.177.185:80, 138.186.217.64:*}[28.0632%]&lt;BR/&gt;{199.94.177.185:80, 214.216.50.132:*}[21.7391%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8452%)&lt;BR/&gt; 4936: (0.309598%)&lt;BR/&gt; 4935: (0.309598%)&lt;BR/&gt; 4934: (0.309598%)&lt;BR/&gt; 4933: (0.309598%)&gt;];
}
600--1182[label="0.985915;70pkt 70fpkt"];
600--1247[label="0.586047;126pkt 126fpkt"];
600--2122[label="0.785714;55pkt 55fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.208.204" src_ip="199.94.177.185" src_port="80"/>
      <filter dst_ip="138.186.217.64" src_ip="199.94.177.185" src_port="80"/>
      <filter dst_ip="214.216.50.132" src_ip="199.94.177.185" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_212{
style=filled;
color=gray75;
724[label="61.0.89.23;d;1pkt 1fpkt", shape=diamond, color=yellow];
1248[label="212.7.186.94;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat212[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.93.144.46:3786, 61.0.89.23:4662}[50%]&lt;BR/&gt;{172.93.144.46:3683, 212.7.186.94:4662}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 3786: (25%)&lt;BR/&gt; 3683: (25%)&gt;];
}
724--2479[label="1;1pkt 1fpkt"];
1248--2479[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.7.186.94" dst_port="4662" src_ip="172.93.144.46" src_port="3683"/>
      <filter dst_ip="61.0.89.23" dst_port="4662" src_ip="172.93.144.46" src_port="3786"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_213{
style=filled;
color=gray75;
612[label="140.3.114.132;d;123pkt 123fpkt", shape=diamond, color=yellow];
1250[label="38.128.223.149;s;1pkt 1fpkt", shape=diamond, color=yellow];
1459[label="38.128.43.194;s;2pkt 2fpkt", shape=diamond, color=yellow];
2969[label="38.128.43.194;s;2pkt 2fpkt", shape=hexagon, color=black];
4676[label="38.128.223.149;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5056[label="38.128.43.194;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5058[label="38.96.130.194;15pkt 15fpkt", shape=pentagon, color=darkviolet];
5124[label="200.161.27.202;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5225[label="36.240.249.213;16pkt 16fpkt", shape=pentagon, color=darkviolet];
6491[label="38.128.223.149;2pkt 2fpkt", shape=invtriangle, color=brown];
6779[label="200.161.27.202;3pkt 3fpkt", shape=invtriangle, color=brown];
6849[label="36.240.249.213;15pkt 15fpkt", shape=invtriangle, color=brown];
7838[label="200.161.27.202;2pkt 2fpkt", shape=invhouse, color=bisque];
7891[label="36.240.249.213;16pkt 16fpkt", shape=invhouse, color=bisque];
stat213[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 140.3.114.132:*}[92%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.7711%)&lt;BR/&gt; 1755: (3.73134%)&lt;BR/&gt; 4380: (0.995025%)&lt;BR/&gt; 4374: (0.995025%)&lt;BR/&gt; 4344: (0.995025%)&gt;];
}
612--1250[label="1;1pkt 1fpkt"];
612--1387[label="0.0373832;4pkt 4fpkt"];
612--1442[label="0.1;1pkt 1fpkt"];
612--1459[label="1;2pkt 2fpkt"];
612--1663[label="0.0162602;2pkt 2fpkt"];
612--2298[label="0.0892857;5pkt 5fpkt"];
612--2619[label="0.0373832;4pkt 4fpkt"];
612--2969[label="1;2pkt 2fpkt"];
612--3429[label="0.0294118;1pkt 1fpkt"];
612--3639[label="0.0689655;4pkt 4fpkt"];
612--3685[label="0.0714286;1pkt 1fpkt"];
612--4343[label="0.0517241;3pkt 3fpkt"];
612--4676[label="1;1pkt 1fpkt"];
612--5056[label="1;1pkt 1fpkt"];
612--5058[label="1;15pkt 15fpkt"];
612--5114[label="0.030303;1pkt 1fpkt"];
612--5175[label="0.190476;8pkt 8fpkt"];
612--5225[label="1;16pkt 16fpkt"];
612--5445[label="0.285714;4pkt 4fpkt"];
612--5452[label="0.0333333;1pkt 1fpkt"];
612--6491[label="1;2pkt 2fpkt"];
612--6779[label="0.333333;1pkt 1fpkt"];
612--6817[label="0.170732;7pkt 7fpkt"];
612--6849[label="1;15pkt 15fpkt"];
612--6996[label="0.230769;3pkt 3fpkt"];
612--7140[label="0.0294118;1pkt 1fpkt"];
612--7867[label="0.170732;7pkt 7fpkt"];
612--7891[label="1;16pkt 16fpkt"];
612--7987[label="0.230769;3pkt 3fpkt"];
1250--6491[label="1;1pkt 1fpkt"];
1459--2969[label="1;2pkt 2fpkt"];
1459--5056[label="1;1pkt 1fpkt"];
2969--5056[label="1;1pkt 1fpkt"];
4676--6491[label="1;1pkt 1fpkt"];
5124--6779[label="1;2pkt 2fpkt"];
5124--7838[label="1;2pkt 2fpkt"];
5225--6849[label="1;15pkt 15fpkt"];
5225--7891[label="1;16pkt 16fpkt"];
6779--7838[label="1;2pkt 2fpkt"];
6849--7891[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.114.132" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_214{
style=filled;
color=gray75;
620[label="138.186.52.161;s;3pkt 3fpkt", shape=diamond, color=yellow];
1253[label="60.133.143.235;d;1pkt 1fpkt", shape=diamond, color=yellow];
4777[label="138.186.52.161;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat214[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.52.161:1114, 192.160.196.0:6699}[33.3333%]&lt;BR/&gt;{138.186.52.161:1041, 211.90.155.206:1863}[33.3333%]&lt;BR/&gt;{138.186.52.161:6699, 60.133.143.235:3610}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (35.7143%)&lt;BR/&gt; 3610: (21.4286%)&lt;BR/&gt; 1863: (14.2857%)&lt;BR/&gt; 1114: (14.2857%)&lt;BR/&gt; 1041: (14.2857%)&gt;];
}
620--1253[label="1;1pkt 1fpkt"];
620--4777[label="1;3pkt 3fpkt"];
1253--4777[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="60.133.143.235" dst_port="3610" src_ip="138.186.52.161" src_port="6699"/>
      <filter dst_ip="211.90.155.206" dst_port="1863" src_ip="138.186.52.161" src_port="1041"/>
      <filter dst_ip="192.160.196.0" dst_port="6699" src_ip="138.186.52.161" src_port="1114"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.916727,1.89524,999,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_215{
style=filled;
color=gray75;
71[label="199.108.34.223s;1pkt 1fpkt", shape=rectangle, color=red];
311[label="202.40.226.223s;1pkt 1fpkt", shape=rectangle, color=red];
1254[label="64.65.58.223;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat215[shape=component, label=&lt;Rules:&lt;BR/&gt;{64.65.58.223:1275, 138.186.176.168:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1275: (50%)&gt;];
}
71--311[label="1;1pkt 1fpkt"];
71--1213[label="1;1pkt 1fpkt"];
71--1254[label="1;1pkt 1fpkt"];
311--1213[label="1;1pkt 1fpkt"];
311--1254[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.176.168" dst_port="6699" src_ip="64.65.58.223" src_port="1275"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669758" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_216{
style=filled;
color=gray75;
1258[label="61.97.190.136;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat216[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.97.190.136:6699, 172.93.129.123:1673}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1673: (50%)&gt;];
}
1258--7606[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.93.129.123" dst_port="1673" src_ip="61.97.190.136" src_port="6699"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669756" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="174.235.201.187"/>
      <from sec="1039669200" usec="0"/>
      <to sec="1039669848" usec="0"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_218{
style=filled;
color=gray75;
976[label="140.3.228.198;d;2pkt 2fpkt", shape=diamond, color=yellow];
1281[label="193.19.219.205;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat218[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.19.219.205:554, 140.3.228.198:1433}[50%]&lt;BR/&gt;{193.19.219.205:15434, 140.3.228.198:6972}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15434: (25%)&lt;BR/&gt; 6972: (25%)&lt;BR/&gt; 1433: (25%)&lt;BR/&gt; 554: (25%)&gt;];
}
976--1281[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.228.198" dst_port="6972" src_ip="193.19.219.205" src_port="15434"/>
      <filter dst_ip="140.3.228.198" dst_port="1433" src_ip="193.19.219.205" src_port="554"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_219{
style=filled;
color=gray75;
984[label="64.51.67.235;d;759pkt 759fpkt", shape=diamond, color=yellow];
1286[label="169.126.157.142;s;759pkt 759fpkt", shape=diamond, color=yellow];
stat219[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.126.157.142:80, 64.51.67.235:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4236: (0.0658762%)&lt;BR/&gt; 4235: (0.0658762%)&lt;BR/&gt; 4234: (0.0658762%)&lt;BR/&gt; 4233: (0.0658762%)&gt;];
}
984--1286[label="1;759pkt 759fpkt"];
</description>
    <slice>
      <filter dst_ip="64.51.67.235" src_ip="169.126.157.142" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_220{
style=filled;
color=gray75;
1295[label="138.186.51.174;d;2pkt 2fpkt", shape=diamond, color=yellow];
1296[label="96.66.76.13;s;2pkt 2fpkt", shape=diamond, color=yellow];
1644[label="138.186.119.93;d;2pkt 2fpkt", shape=diamond, color=yellow];
2786[label="138.186.51.174;d;2pkt 2fpkt", shape=hexagon, color=black];
stat220[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.66.76.10:5001, 138.186.119.93:4558}[25%]&lt;BR/&gt;{211.90.154.15:1863, 138.186.51.174:3834}[25%]&lt;BR/&gt;{96.66.76.13:5001, 138.186.119.93:4310}[25%]&lt;BR/&gt;{96.66.76.13:5001, 138.186.51.174:3915}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (37.5%)&lt;BR/&gt; 3915: (18.75%)&lt;BR/&gt; 4310: (12.5%)&lt;BR/&gt; 3834: (12.5%)&lt;BR/&gt; 1863: (12.5%)&gt;];
}
1295--1296[label="0.5;1pkt 1fpkt"];
1295--2786[label="1;2pkt 2fpkt"];
1296--1644[label="0.5;1pkt 1fpkt"];
1296--2786[label="0.5;1pkt 1fpkt"];
1644--2530[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.51.174" dst_port="3915" src_ip="96.66.76.13" src_port="5001"/>
      <filter dst_ip="138.186.119.93" dst_port="4310" src_ip="96.66.76.13" src_port="5001"/>
      <filter dst_ip="138.186.51.174" dst_port="3834" src_ip="211.90.154.15" src_port="1863"/>
      <filter dst_ip="138.186.119.93" dst_port="4558" src_ip="96.66.76.10" src_port="5001"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_221{
style=filled;
color=gray75;
975[label="222.147.204.185;d;3pkt 3fpkt", shape=diamond, color=yellow];
1308[label="148.110.17.120;s;8pkt 8fpkt", shape=diamond, color=yellow];
1537[label="148.110.154.123;s;19pkt 19fpkt", shape=diamond, color=yellow];
2678[label="148.110.154.123;s;18pkt 18fpkt", shape=hexagon, color=black];
2789[label="148.110.17.120;s;2pkt 2fpkt", shape=hexagon, color=black];
4411[label="148.110.17.120;11pkt 11fpkt", shape=pentagon, color=darkviolet];
4444[label="148.110.154.123;19pkt 19fpkt", shape=pentagon, color=darkviolet];
6315[label="148.110.17.120;12pkt 12fpkt", shape=invtriangle, color=brown];
7535[label="148.110.17.120;11pkt 11fpkt", shape=invhouse, color=bisque];
stat221[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.110.17.120:*, *:80}[29.0323%]&lt;BR/&gt;{148.110.154.123:*, 38.96.129.201:80}[25.8065%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.835%)&lt;BR/&gt; 1032: (5.33981%)&lt;BR/&gt; 7070: (4.85437%)&lt;BR/&gt; 5050: (3.39806%)&lt;BR/&gt; 1423: (2.91262%)&gt;];
}
975--1308[label="0.333333;1pkt 1fpkt"];
975--1537[label="0.666667;2pkt 2fpkt"];
975--2678[label="0.666667;2pkt 2fpkt"];
975--2789[label="0.5;1pkt 1fpkt"];
975--4411[label="0.333333;1pkt 1fpkt"];
975--4444[label="0.666667;2pkt 2fpkt"];
975--6315[label="0.333333;1pkt 1fpkt"];
975--7535[label="0.333333;1pkt 1fpkt"];
1308--2789[label="1;2pkt 2fpkt"];
1308--4411[label="0.875;7pkt 7fpkt"];
1308--6315[label="1;8pkt 8fpkt"];
1308--7535[label="0.875;7pkt 7fpkt"];
1537--2678[label="1;18pkt 18fpkt"];
1537--4444[label="1;19pkt 19fpkt"];
2678--4444[label="1;18pkt 18fpkt"];
2789--4411[label="1;2pkt 2fpkt"];
2789--6315[label="1;2pkt 2fpkt"];
2789--7535[label="1;2pkt 2fpkt"];
4411--6315[label="1;11pkt 11fpkt"];
4411--7535[label="1;11pkt 11fpkt"];
6315--7535[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="148.110.17.120"/>
      <filter dst_ip="38.96.129.201" dst_port="80" src_ip="148.110.154.123"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="223.196.202.165"/>
      <from sec="1039669200" usec="0"/>
      <to sec="1039669668" usec="0"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.842395,1.84899,999,0 0 0 1 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_225{
style=filled;
color=gray75;
546[label="172.93.129.123;d;2pkt 2fpkt", shape=diamond, color=yellow];
549[label="202.34.210.233;s;1pkt 1fpkt", shape=diamond, color=yellow];
6941[label="202.34.210.233;1pkt 1fpkt", shape=invtriangle, color=brown];
7606[label="61.97.190.136;1pkt 1fpkt", shape=invhouse, color=bisque];
7951[label="202.34.210.233;1pkt 1fpkt", shape=invhouse, color=bisque];
stat225[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.97.190.136:6699, 172.93.129.123:1673}[50%]&lt;BR/&gt;{202.34.210.233:6699, 172.93.129.123:1738}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1738: (33.3333%)&lt;BR/&gt; 1673: (16.6667%)&gt;];
}
546--549[label="1;1pkt 1fpkt"];
546--1258[label="1;1pkt 1fpkt"];
546--6941[label="1;1pkt 1fpkt"];
546--7606[label="1;1pkt 1fpkt"];
546--7951[label="1;1pkt 1fpkt"];
549--6941[label="1;1pkt 1fpkt"];
549--7951[label="1;1pkt 1fpkt"];
6941--7951[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.93.129.123" dst_port="1738" src_ip="202.34.210.233" src_port="6699"/>
      <filter dst_ip="172.93.129.123" dst_port="1673" src_ip="61.97.190.136" src_port="6699"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.916727,1.89524,999,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_226{
style=filled;
color=gray75;
61[label="202.34.210.233s;2pkt 2fpkt", shape=rectangle, color=red];
1328[label="155.21.30.233;s;1pkt 1fpkt", shape=diamond, color=yellow];
1329[label="148.110.12.223;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat226[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.21.30.233:2153, 148.110.12.223:6699}[50%]&lt;BR/&gt;{202.34.210.233:6699, 172.93.129.123:1738}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 2153: (37.5%)&lt;BR/&gt; 1738: (12.5%)&gt;];
}
61--546[label="0.5;1pkt 1fpkt"];
61--549[label="1;1pkt 1fpkt"];
61--1328[label="1;1pkt 1fpkt"];
61--1329[label="1;1pkt 1fpkt"];
61--6941[label="1;1pkt 1fpkt"];
61--7951[label="1;1pkt 1fpkt"];
1328--1329[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.93.129.123" dst_port="1738" src_ip="202.34.210.233" src_port="6699"/>
      <filter dst_ip="148.110.12.223" dst_port="6699" src_ip="155.21.30.233" src_port="2153"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="221.201.19.41"/>
      <from sec="1039669200" usec="0"/>
      <to sec="1039669848" usec="0"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_228{
style=filled;
color=gray75;
1056[label="33.160.149.236;d;1pkt 1fpkt", shape=diamond, color=yellow];
1339[label="215.90.75.93;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat228[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.90.75.93:1906, 33.160.149.236:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1906: (50%)&gt;];
}
1056--1339[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="33.160.149.236" dst_port="6699" src_ip="215.90.75.93" src_port="1906"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_229{
style=filled;
color=gray75;
2368[label="96.66.76.91;s;5pkt 5fpkt", shape=diamond, color=yellow];
stat229[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.66.76.91:5001, 215.90.74.27:1066}[20%]&lt;BR/&gt;{96.66.76.91:5001, 215.90.74.27:1068}[20%]&lt;BR/&gt;{96.66.76.91:0, 215.90.74.49:0}[20%]&lt;BR/&gt;{96.66.76.91:5001, 215.90.74.49:1141}[20%]&lt;BR/&gt;{96.66.76.91:5001, 215.90.74.49:1150}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (40%)&lt;BR/&gt; 0: (20%)&lt;BR/&gt; 1150: (10%)&lt;BR/&gt; 1141: (10%)&lt;BR/&gt; 1068: (10%)&gt;];
}
2368--3054[label="0.4;2pkt 2fpkt"];
2368--4170[label="1;4pkt 4fpkt"];
2368--6151[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.74.49" dst_port="1150" src_ip="96.66.76.91" src_port="5001"/>
      <filter dst_ip="215.90.74.49" dst_port="1141" src_ip="96.66.76.91" src_port="5001"/>
      <filter dst_ip="215.90.74.49" src_ip="96.66.76.91"/>
      <filter dst_ip="215.90.74.27" dst_port="1068" src_ip="96.66.76.91" src_port="5001"/>
      <filter dst_ip="215.90.74.27" dst_port="1066" src_ip="96.66.76.91" src_port="5001"/>
    </slice>
    <from sec="1039669383" usec="0"/>
    <to sec="1039669811" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19604,1.81002,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_230{
style=filled;
color=gray75;
259[label="196.207.217.166s;1pkt 1fpkt", shape=rectangle, color=red];
825[label="148.110.14.245;d;736pkt 736fpkt", shape=diamond, color=yellow];
1348[label="197.92.9.166;s;1pkt 1fpkt", shape=diamond, color=yellow];
1551[label="33.85.177.29;s;1pkt 1fpkt", shape=diamond, color=yellow];
2413[label="61.5.224.179;s;2pkt 2fpkt", shape=diamond, color=yellow];
3023[label="33.85.177.29;s;1pkt 1fpkt", shape=hexagon, color=black];
4917[label="64.211.183.175;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4944[label="61.5.224.179;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6655[label="64.211.183.175;2pkt 2fpkt", shape=invtriangle, color=brown];
6671[label="61.5.224.179;1pkt 1fpkt", shape=invtriangle, color=brown];
7766[label="61.5.224.179;1pkt 1fpkt", shape=invhouse, color=bisque];
stat230[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6257, 148.110.14.245:6257}[93.75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (94.3925%)&lt;BR/&gt; 6699: (1.8024%)&lt;BR/&gt; 16257: (0.46729%)&lt;BR/&gt; 3577: (0.333778%)&lt;BR/&gt; 3063: (0.200267%)&gt;];
}
259--825[label="1;1pkt 1fpkt"];
259--1348[label="1;1pkt 1fpkt"];
825--1348[label="1;1pkt 1fpkt"];
825--1551[label="1;1pkt 1fpkt"];
825--2413[label="1;2pkt 2fpkt"];
825--2428[label="1;2pkt 2fpkt"];
825--3023[label="1;1pkt 1fpkt"];
825--4307[label="1;1pkt 1fpkt"];
825--4508[label="1;1pkt 1fpkt"];
825--4917[label="1;2pkt 2fpkt"];
825--4944[label="1;1pkt 1fpkt"];
825--6378[label="1;1pkt 1fpkt"];
825--6655[label="1;2pkt 2fpkt"];
825--6671[label="1;1pkt 1fpkt"];
825--7579[label="0.5;1pkt 1fpkt"];
825--7766[label="1;1pkt 1fpkt"];
1551--3023[label="1;1pkt 1fpkt"];
2413--4944[label="1;1pkt 1fpkt"];
2413--6671[label="1;1pkt 1fpkt"];
2413--7766[label="1;1pkt 1fpkt"];
4917--6655[label="1;2pkt 2fpkt"];
4944--6671[label="1;1pkt 1fpkt"];
4944--7766[label="1;1pkt 1fpkt"];
6671--7766[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.14.245" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="172.93.12.19"/>
      <from sec="1039669200" usec="0"/>
      <to sec="1039669848" usec="0"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.916727,1.89524,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_232{
style=filled;
color=gray75;
16[label="170.103.142.51s;2pkt 2fpkt", shape=rectangle, color=red];
1372[label="140.3.250.51;s;157pkt 157fpkt", shape=diamond, color=yellow];
stat232[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.250.51:*, 38.208.84.114:80}[25.9494%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3175: (0.628931%)&lt;BR/&gt; 3287: (0.314465%)&lt;BR/&gt; 3284: (0.314465%)&lt;BR/&gt; 3283: (0.314465%)&gt;];
}
16--36[label="0.5;1pkt 1fpkt"];
16--394[label="0.5;1pkt 1fpkt"];
16--422[label="0.5;1pkt 1fpkt"];
16--948[label="0.5;1pkt 1fpkt"];
16--951[label="0.5;1pkt 1fpkt"];
16--1372[label="0.5;1pkt 1fpkt"];
16--3185[label="0.5;1pkt 1fpkt"];
16--3770[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="38.208.84.114" dst_port="80" src_ip="140.3.250.51"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669843" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_233{
style=filled;
color=gray75;
1384[label="221.73.64.166;d;19pkt 19fpkt", shape=diamond, color=yellow];
1385[label="140.3.243.80;s;21pkt 21fpkt", shape=diamond, color=yellow];
4063[label="140.3.243.80;20pkt 20fpkt", shape=pentagon, color=darkviolet];
stat233[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.243.80:*, 221.73.64.166:80}[90.4762%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1794: (2.5%)&lt;BR/&gt; 1793: (2.5%)&lt;BR/&gt; 1792: (2.5%)&lt;BR/&gt; 1789: (2.5%)&gt;];
}
1384--1385[label="1;19pkt 19fpkt"];
1384--4063[label="1;19pkt 19fpkt"];
1385--4063[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="221.73.64.166" dst_port="80" src_ip="140.3.243.80"/>
    </slice>
    <from sec="1039669203" usec="0"/>
    <to sec="1039669411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_234{
style=filled;
color=gray75;
1135[label="215.154.47.28;s;33pkt 33fpkt", shape=diamond, color=yellow];
1397[label="215.146.214.218;d;6pkt 6fpkt", shape=diamond, color=yellow];
2395[label="214.66.3.9;d;7pkt 7fpkt", shape=diamond, color=yellow];
stat234[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.154.47.28:80, 214.66.3.9:*}[21.2121%]&lt;BR/&gt;{215.154.47.28:80, 173.3.188.103:*}[21.2121%]&lt;BR/&gt;{215.154.47.28:80, 215.146.214.218:*}[21.2121%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.913%)&lt;BR/&gt; 56224: (2.17391%)&lt;BR/&gt; 54555: (2.17391%)&lt;BR/&gt; 54520: (2.17391%)&lt;BR/&gt; 54236: (2.17391%)&gt;];
}
1135--1397[label="1;6pkt 6fpkt"];
1135--2184[label="1;2pkt 2fpkt"];
1135--2395[label="1;7pkt 7fpkt"];
1135--3547[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.146.214.218" src_ip="215.154.47.28" src_port="80"/>
      <filter dst_ip="173.3.188.103" src_ip="215.154.47.28" src_port="80"/>
      <filter dst_ip="214.66.3.9" src_ip="215.154.47.28" src_port="80"/>
    </slice>
    <from sec="1039669206" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_235{
style=filled;
color=gray75;
1406[label="140.3.12.94;d;4pkt 4fpkt", shape=diamond, color=yellow];
1407[label="201.164.167.222;s;4pkt 4fpkt", shape=diamond, color=yellow];
stat235[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.164.167.222:53443, 140.3.12.94:1231}[25%]&lt;BR/&gt;{201.164.167.222:63133, 140.3.12.94:1229}[25%]&lt;BR/&gt;{201.164.167.222:21, 140.3.12.94:1228}[25%]&lt;BR/&gt;{201.164.167.222:21, 140.3.12.94:1230}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (25%)&lt;BR/&gt; 63133: (12.5%)&lt;BR/&gt; 53443: (12.5%)&lt;BR/&gt; 1231: (12.5%)&lt;BR/&gt; 1230: (12.5%)&gt;];
}
1406--1407[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.12.94" dst_port="1230" src_ip="201.164.167.222" src_port="21"/>
      <filter dst_ip="140.3.12.94" dst_port="1228" src_ip="201.164.167.222" src_port="21"/>
      <filter dst_ip="140.3.12.94" dst_port="1229" src_ip="201.164.167.222" src_port="63133"/>
      <filter dst_ip="140.3.12.94" dst_port="1231" src_ip="201.164.167.222" src_port="53443"/>
    </slice>
    <from sec="1039669209" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.916727,1.89524,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_236{
style=filled;
color=gray75;
63[label="215.189.120.243s;2pkt 2fpkt", shape=rectangle, color=red];
1322[label="140.3.212.125;d;89pkt 89fpkt", shape=diamond, color=yellow];
1413[label="215.189.120.243;s;89pkt 89fpkt", shape=diamond, color=yellow];
stat236[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.189.120.243:80, 140.3.212.125:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1198: (0.833333%)&lt;BR/&gt; 1197: (0.833333%)&lt;BR/&gt; 1321: (0.555556%)&lt;BR/&gt; 1320: (0.555556%)&gt;];
}
63--1322[label="1;2pkt 2fpkt"];
63--1413[label="1;2pkt 2fpkt"];
1322--1413[label="1;89pkt 89fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.212.125" src_ip="215.189.120.243" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669838" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14144,1.92665,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_237{
style=filled;
color=gray75;
29[label="140.3.201.116s;5pkt 5fpkt", shape=rectangle, color=red];
205[label="202.172.13.116s;2pkt 2fpkt", shape=rectangle, color=red];
206[label="60.85.97.116s;1pkt 1fpkt", shape=rectangle, color=red];
357[label="202.85.97.116s;1pkt 1fpkt", shape=rectangle, color=red];
1236[label="38.131.112.16;d;1pkt 1fpkt", shape=diamond, color=yellow];
1414[label="140.3.201.116;s;74pkt 74fpkt", shape=diamond, color=yellow];
1952[label="39.192.60.178;d;56pkt 56fpkt", shape=diamond, color=yellow];
2029[label="138.186.181.116;s;1pkt 1fpkt", shape=diamond, color=yellow];
2998[label="38.131.112.16;d;1pkt 1fpkt", shape=hexagon, color=black];
stat237[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.201.116:*, 39.192.60.178:80}[73.6842%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.5352%)&lt;BR/&gt; 49780: (2.46479%)&lt;BR/&gt; 2650: (2.46479%)&lt;BR/&gt; 1427: (1.05634%)&lt;BR/&gt; 1425: (1.05634%)&gt;];
}
29--205[label="0.5;1pkt 1fpkt"];
29--206[label="1;1pkt 1fpkt"];
29--357[label="1;1pkt 1fpkt"];
29--1236[label="1;1pkt 1fpkt"];
29--1414[label="0.8;4pkt 4fpkt"];
29--1952[label="0.8;4pkt 4fpkt"];
29--2029[label="1;1pkt 1fpkt"];
29--2998[label="1;1pkt 1fpkt"];
205--206[label="1;1pkt 1fpkt"];
205--357[label="1;1pkt 1fpkt"];
205--453[label="0.5;1pkt 1fpkt"];
205--1236[label="1;1pkt 1fpkt"];
205--1612[label="0.5;1pkt 1fpkt"];
205--2029[label="1;1pkt 1fpkt"];
205--2740[label="0.5;1pkt 1fpkt"];
205--2998[label="1;1pkt 1fpkt"];
205--3154[label="0.5;1pkt 1fpkt"];
206--357[label="1;1pkt 1fpkt"];
206--1236[label="1;1pkt 1fpkt"];
206--2029[label="1;1pkt 1fpkt"];
206--2998[label="1;1pkt 1fpkt"];
357--1236[label="1;1pkt 1fpkt"];
357--2029[label="1;1pkt 1fpkt"];
357--2998[label="1;1pkt 1fpkt"];
1236--2029[label="1;1pkt 1fpkt"];
1236--2998[label="1;1pkt 1fpkt"];
1414--1952[label="1;56pkt 56fpkt"];
2029--2998[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="39.192.60.178" dst_port="80" src_ip="140.3.201.116"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_238{
style=filled;
color=gray75;
784[label="98.238.75.244;d;9pkt 9fpkt", shape=diamond, color=yellow];
1415[label="140.3.6.160;s;9pkt 9fpkt", shape=diamond, color=yellow];
2498[label="98.238.75.244;d;9pkt 9fpkt", shape=hexagon, color=black];
stat238[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.6.160:80, 98.238.75.244:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3475: (5.55556%)&lt;BR/&gt; 3474: (5.55556%)&lt;BR/&gt; 3473: (5.55556%)&lt;BR/&gt; 3472: (5.55556%)&gt;];
}
784--1415[label="1;9pkt 9fpkt"];
784--2498[label="1;9pkt 9fpkt"];
1415--2498[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="98.238.75.244" src_ip="140.3.6.160" src_port="80"/>
    </slice>
    <from sec="1039669216" usec="0"/>
    <to sec="1039669533" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="201.160.124.76"/>
      <from sec="1039669240" usec="0"/>
      <to sec="1039669341" usec="0"/>
    </slice>
    <from sec="1039669240" usec="0"/>
    <to sec="1039669341" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19604,1.81002,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_240{
style=filled;
color=gray75;
149[label="197.1.225.58s;1pkt 1fpkt", shape=rectangle, color=red];
1162[label="39.111.174.71;d;16pkt 16fpkt", shape=diamond, color=yellow];
1455[label="140.3.252.104;s;3pkt 3fpkt", shape=diamond, color=yellow];
2063[label="172.93.217.58;s;54pkt 54fpkt", shape=diamond, color=yellow];
2967[label="140.3.252.104;s;3pkt 3fpkt", shape=hexagon, color=black];
4296[label="140.3.252.104;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6237[label="140.3.252.104;2pkt 2fpkt", shape=invtriangle, color=brown];
7492[label="140.3.252.104;2pkt 2fpkt", shape=invhouse, color=bisque];
stat240[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.93.217.58:*, *:25}[40.8451%]&lt;BR/&gt;{172.93.217.58:25, *:*}[35.2113%]&lt;BR/&gt;{*:*, 39.111.174.71:25}[22.5352%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 4111: (3.01205%)&lt;BR/&gt; 1990: (3.01205%)&lt;BR/&gt; 46804: (1.80723%)&lt;BR/&gt; 37812: (1.20482%)&gt;];
}
149--2063[label="1;1pkt 1fpkt"];
1162--1455[label="0.333333;1pkt 1fpkt"];
1162--2063[label="0.0625;1pkt 1fpkt"];
1162--2967[label="0.333333;1pkt 1fpkt"];
1162--3019[label="0.75;12pkt 12fpkt"];
1162--4240[label="0.75;12pkt 12fpkt"];
1455--2967[label="1;3pkt 3fpkt"];
1455--4296[label="1;2pkt 2fpkt"];
1455--6237[label="1;2pkt 2fpkt"];
1455--7492[label="1;2pkt 2fpkt"];
2063--2065[label="0.0185185;1pkt 1fpkt"];
2967--4296[label="1;2pkt 2fpkt"];
2967--6237[label="1;2pkt 2fpkt"];
2967--7492[label="1;2pkt 2fpkt"];
4296--6237[label="1;2pkt 2fpkt"];
4296--7492[label="1;2pkt 2fpkt"];
6237--7492[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="172.93.217.58" src_port="25"/>
      <filter dst_port="25" src_ip="172.93.217.58"/>
      <filter dst_ip="39.111.174.71" dst_port="25"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_241{
style=filled;
color=gray75;
1461[label="98.154.81.50;d;17pkt 17fpkt", shape=diamond, color=yellow];
1462[label="140.3.55.33;s;74pkt 74fpkt", shape=diamond, color=yellow];
stat241[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.55.33:*, 208.147.23.224:80}[40.5405%]&lt;BR/&gt;{140.3.55.33:*, 98.154.81.50:80}[22.973%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1223: (1.0989%)&lt;BR/&gt; 1219: (1.0989%)&lt;BR/&gt; 1218: (1.0989%)&lt;BR/&gt; 1215: (1.0989%)&gt;];
}
1461--1462[label="1;17pkt 17fpkt"];
1461--3598[label="1;17pkt 17fpkt"];
1462--1658[label="0.027027;2pkt 2fpkt"];
1462--1893[label="0.027027;2pkt 2fpkt"];
1462--2711[label="0.0273973;2pkt 2fpkt"];
1462--3185[label="0.0675676;5pkt 5fpkt"];
1462--3598[label="1;74pkt 74fpkt"];
</description>
    <slice>
      <filter dst_ip="208.147.23.224" dst_port="80" src_ip="140.3.55.33"/>
      <filter dst_ip="98.154.81.50" dst_port="80" src_ip="140.3.55.33"/>
    </slice>
    <from sec="1039669368" usec="0"/>
    <to sec="1039669755" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.983876,1.77655,503,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_242{
style=filled;
color=gray75;
281[label="212.193.40.182s;3pkt 3fpkt", shape=rectangle, color=red];
1040[label="140.3.237.54;s;133pkt 133fpkt", shape=diamond, color=yellow];
1464[label="107.189.86.196;d;156pkt 156fpkt", shape=diamond, color=yellow];
1921[label="222.169.70.94;d;28pkt 28fpkt", shape=diamond, color=yellow];
4763[label="140.3.63.160;54pkt 54fpkt", shape=pentagon, color=darkviolet];
4873[label="140.3.63.171;40pkt 40fpkt", shape=pentagon, color=darkviolet];
4976[label="211.90.152.182;104pkt 104fpkt", shape=pentagon, color=darkviolet];
6547[label="140.3.63.160;55pkt 55fpkt", shape=invtriangle, color=brown];
6624[label="140.3.63.171;39pkt 39fpkt", shape=invtriangle, color=brown];
7690[label="140.3.63.160;54pkt 54fpkt", shape=invhouse, color=bisque];
7739[label="140.3.63.171;39pkt 39fpkt", shape=invhouse, color=bisque];
stat242[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 107.189.86.196:*}[41.9355%]&lt;BR/&gt;{140.3.237.54:80, *:*}[35.7527%]&lt;BR/&gt;{211.90.152.182:*, *:*}[27.957%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.1773%)&lt;BR/&gt; 1863: (4.8227%)&lt;BR/&gt; 63425: (0.283688%)&lt;BR/&gt; 63424: (0.283688%)&lt;BR/&gt; 63415: (0.283688%)&gt;];
}
281--1921[label="0.333333;1pkt 1fpkt"];
281--4976[label="0.666667;2pkt 2fpkt"];
1040--1464[label="0.338346;45pkt 45fpkt"];
1040--1921[label="0.214286;6pkt 6fpkt"];
1464--1765[label="0.947368;18pkt 18fpkt"];
1464--4239[label="0.857143;18pkt 18fpkt"];
1464--4763[label="0.981481;53pkt 53fpkt"];
1464--4873[label="1;40pkt 40fpkt"];
1464--6200[label="0.857143;18pkt 18fpkt"];
1464--6547[label="0.963636;53pkt 53fpkt"];
1464--6624[label="1;39pkt 39fpkt"];
1464--7690[label="0.981481;53pkt 53fpkt"];
1464--7739[label="1;39pkt 39fpkt"];
1921--2812[label="0.0357143;1pkt 1fpkt"];
1921--3436[label="0.125;1pkt 1fpkt"];
1921--3823[label="0.0357143;1pkt 1fpkt"];
1921--5297[label="0.111111;1pkt 1fpkt"];
4763--6547[label="1;54pkt 54fpkt"];
4763--7690[label="1;54pkt 54fpkt"];
4873--6624[label="1;39pkt 39fpkt"];
4873--7739[label="1;39pkt 39fpkt"];
6547--7690[label="1;54pkt 54fpkt"];
6624--7739[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter src_ip="211.90.152.182"/>
      <filter src_ip="140.3.237.54" src_port="80"/>
      <filter dst_ip="107.189.86.196" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="140.3.110.210"/>
      <from sec="1039669400" usec="0"/>
      <to sec="1039669665" usec="0"/>
    </slice>
    <from sec="1039669400" usec="0"/>
    <to sec="1039669665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_244{
style=filled;
color=gray75;
1482[label="140.3.211.108;d;7pkt 7fpkt", shape=diamond, color=yellow];
1483[label="197.231.171.156;s;7pkt 7fpkt", shape=diamond, color=yellow];
2735[label="197.231.171.156;s;7pkt 7fpkt", shape=hexagon, color=black];
4734[label="197.231.171.156;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6529[label="197.231.171.156;9pkt 9fpkt", shape=invtriangle, color=brown];
7677[label="197.231.171.156;8pkt 8fpkt", shape=invhouse, color=bisque];
stat244[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.231.171.156:80, 140.3.211.108:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1290: (6.52174%)&lt;BR/&gt; 1289: (6.52174%)&lt;BR/&gt; 1288: (6.52174%)&lt;BR/&gt; 1287: (6.52174%)&gt;];
}
1482--1483[label="1;7pkt 7fpkt"];
1482--2735[label="1;7pkt 7fpkt"];
1482--4734[label="0.857143;6pkt 6fpkt"];
1482--6529[label="1;7pkt 7fpkt"];
1482--7677[label="0.857143;6pkt 6fpkt"];
1483--2735[label="1;7pkt 7fpkt"];
1483--4734[label="0.857143;6pkt 6fpkt"];
1483--6529[label="1;7pkt 7fpkt"];
1483--7677[label="0.857143;6pkt 6fpkt"];
2735--4734[label="0.857143;6pkt 6fpkt"];
2735--6529[label="1;7pkt 7fpkt"];
2735--7677[label="0.857143;6pkt 6fpkt"];
4734--6529[label="1;8pkt 8fpkt"];
4734--7677[label="1;8pkt 8fpkt"];
6529--7677[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.211.108" src_ip="197.231.171.156" src_port="80"/>
    </slice>
    <from sec="1039669423" usec="0"/>
    <to sec="1039669754" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19604,1.81002,503,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_246{
style=filled;
color=gray75;
54[label="201.161.89.216s;1pkt 1fpkt", shape=rectangle, color=red];
484[label="215.87.64.219;d;305pkt 305fpkt", shape=diamond, color=yellow];
885[label="201.100.9.41;s;116pkt 116fpkt", shape=diamond, color=yellow];
1088[label="140.3.22.90;d;40pkt 40fpkt", shape=diamond, color=yellow];
1262[label="201.37.197.117;s;178pkt 178fpkt", shape=diamond, color=yellow];
1285[label="201.37.197.69;s;206pkt 206fpkt", shape=diamond, color=yellow];
1493[label="201.161.89.216;s;17pkt 17fpkt", shape=diamond, color=yellow];
1511[label="201.37.196.30;s;171pkt 171fpkt", shape=diamond, color=yellow];
1516[label="201.37.196.31;s;175pkt 175fpkt", shape=diamond, color=yellow];
1517[label="36.215.60.39;s;112pkt 112fpkt", shape=diamond, color=yellow];
1586[label="201.37.197.68;s;179pkt 179fpkt", shape=diamond, color=yellow];
1612[label="201.37.197.116;s;168pkt 168fpkt", shape=diamond, color=yellow];
1614[label="201.37.197.70;s;176pkt 176fpkt", shape=diamond, color=yellow];
1879[label="36.215.60.55;s;99pkt 99fpkt", shape=diamond, color=yellow];
2085[label="156.69.252.208;s;108pkt 108fpkt", shape=diamond, color=yellow];
2135[label="36.215.57.31;s;79pkt 79fpkt", shape=diamond, color=yellow];
2545[label="140.3.22.90;d;19pkt 19fpkt", shape=hexagon, color=black];
2874[label="215.87.64.219;d;305pkt 305fpkt", shape=hexagon, color=black];
2936[label="201.37.197.70;s;157pkt 157fpkt", shape=hexagon, color=black];
3244[label="133.33.68.4;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3611[label="198.24.148.34;27pkt 27fpkt", shape=pentagon, color=darkviolet];
4797[label="36.2.59.163;51pkt 51fpkt", shape=pentagon, color=darkviolet];
5021[label="36.189.184.187;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6571[label="36.2.59.163;51pkt 51fpkt", shape=invtriangle, color=brown];
6718[label="36.189.184.187;11pkt 11fpkt", shape=invtriangle, color=brown];
7798[label="36.189.184.187;10pkt 10fpkt", shape=invhouse, color=bisque];
stat246[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 215.87.64.183:*}[64.1769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8382%)&lt;BR/&gt; 0: (0.179791%)&lt;BR/&gt; 57682: (0.0898957%)&lt;BR/&gt; 57676: (0.0898957%)&lt;BR/&gt; 57675: (0.0898957%)&gt;];
}
54--484[label="1;1pkt 1fpkt"];
54--1493[label="1;1pkt 1fpkt"];
54--2874[label="1;1pkt 1fpkt"];
484--885[label="0.405172;47pkt 47fpkt"];
484--1262[label="0.0280899;5pkt 5fpkt"];
484--1285[label="0.0242718;5pkt 5fpkt"];
484--1312[label="0.0251256;5pkt 5fpkt"];
484--1493[label="1;17pkt 17fpkt"];
484--1511[label="0.0233918;4pkt 4fpkt"];
484--1516[label="0.0342857;6pkt 6fpkt"];
484--1517[label="0.0357143;4pkt 4fpkt"];
484--1576[label="0.0425532;4pkt 4fpkt"];
484--1578[label="0.0160428;3pkt 3fpkt"];
484--1586[label="0.027933;5pkt 5fpkt"];
484--1611[label="0.011976;2pkt 2fpkt"];
484--1612[label="0.0297619;5pkt 5fpkt"];
484--1614[label="0.0340909;6pkt 6fpkt"];
484--1824[label="0.0322581;3pkt 3fpkt"];
484--1829[label="0.0344828;2pkt 2fpkt"];
484--1879[label="0.040404;4pkt 4fpkt"];
484--2085[label="0.0277778;3pkt 3fpkt"];
484--2100[label="0.046875;3pkt 3fpkt"];
484--2135[label="0.0253165;2pkt 2fpkt"];
484--2136[label="0.0352941;3pkt 3fpkt"];
484--2261[label="0.0454545;3pkt 3fpkt"];
484--2322[label="0.0232558;1pkt 1fpkt"];
484--2603[label="0.0251256;5pkt 5fpkt"];
484--2874[label="1;305pkt 305fpkt"];
484--2917[label="0.0352941;3pkt 3fpkt"];
484--2921[label="0.0196078;1pkt 1fpkt"];
484--2936[label="0.0318471;5pkt 5fpkt"];
484--3244[label="1;10pkt 10fpkt"];
484--3272[label="0.0322581;2pkt 2fpkt"];
484--3391[label="0.046875;3pkt 3fpkt"];
484--3418[label="0.0327869;2pkt 2fpkt"];
484--3454[label="0.0148515;3pkt 3fpkt"];
484--3497[label="0.0277778;2pkt 2fpkt"];
484--3520[label="0.0428571;3pkt 3fpkt"];
484--3577[label="0.019802;2pkt 2fpkt"];
484--3579[label="0.0298507;6pkt 6fpkt"];
484--3611[label="1;27pkt 27fpkt"];
484--3804[label="0.0392157;4pkt 4fpkt"];
484--3943[label="0.0277778;3pkt 3fpkt"];
484--4128[label="0.025;3pkt 3fpkt"];
484--4249[label="0.0175439;1pkt 1fpkt"];
484--4400[label="0.0225225;5pkt 5fpkt"];
484--4470[label="0.0394737;3pkt 3fpkt"];
484--4543[label="0.0340909;3pkt 3fpkt"];
484--4751[label="0.0405405;3pkt 3fpkt"];
484--4797[label="0.0196078;1pkt 1fpkt"];
484--4919[label="0.244444;11pkt 11fpkt"];
484--5021[label="1;10pkt 10fpkt"];
484--5114[label="0.030303;1pkt 1fpkt"];
484--5388[label="0.040404;4pkt 4fpkt"];
484--5434[label="0.111111;1pkt 1fpkt"];
484--5653[label="0.0461538;3pkt 3fpkt"];
484--5694[label="0.0148515;3pkt 3fpkt"];
484--5722[label="0.0277778;2pkt 2fpkt"];
484--5775[label="0.0196078;2pkt 2fpkt"];
484--6013[label="0.0277778;3pkt 3fpkt"];
484--6125[label="0.0247934;3pkt 3fpkt"];
484--6207[label="0.0175439;1pkt 1fpkt"];
484--6405[label="0.0337079;3pkt 3fpkt"];
484--6542[label="0.0405405;3pkt 3fpkt"];
484--6571[label="0.0196078;1pkt 1fpkt"];
484--6718[label="1;11pkt 11fpkt"];
484--6986[label="0.1;1pkt 1fpkt"];
484--7173[label="0.028169;2pkt 2fpkt"];
484--7353[label="0.0277778;3pkt 3fpkt"];
484--7426[label="0.0247934;3pkt 3fpkt"];
484--7596[label="0.0340909;3pkt 3fpkt"];
484--7686[label="0.0410959;3pkt 3fpkt"];
484--7798[label="1;10pkt 10fpkt"];
484--7980[label="0.111111;1pkt 1fpkt"];
885--1088[label="0.775;31pkt 31fpkt"];
885--1122[label="0.0862069;10pkt 10fpkt"];
885--2545[label="0.894737;17pkt 17fpkt"];
885--2874[label="0.405172;47pkt 47fpkt"];
885--3059[label="0.0862069;10pkt 10fpkt"];
1088--2099[label="0.175;7pkt 7fpkt"];
1088--2545[label="1;19pkt 19fpkt"];
1088--3792[label="0.175;7pkt 7fpkt"];
1262--1505[label="0.0449438;8pkt 8fpkt"];
1262--2679[label="0.0168539;3pkt 3fpkt"];
1262--2740[label="0.893258;159pkt 159fpkt"];
1262--2874[label="0.0280899;5pkt 5fpkt"];
1262--3154[label="0.893258;159pkt 159fpkt"];
1285--1505[label="0.0825243;17pkt 17fpkt"];
1285--2145[label="0.0116279;1pkt 1fpkt"];
1285--2505[label="0.00970874;2pkt 2fpkt"];
1285--2679[label="0.00970874;2pkt 2fpkt"];
1285--2740[label="0.84466;174pkt 174fpkt"];
1285--2874[label="0.0242718;5pkt 5fpkt"];
1285--3075[label="0.0116279;1pkt 1fpkt"];
1285--3154[label="0.84466;174pkt 174fpkt"];
1493--2874[label="1;17pkt 17fpkt"];
1511--2145[label="0.0348837;3pkt 3fpkt"];
1511--2679[label="0.0526316;9pkt 9fpkt"];
1511--2740[label="0.830409;142pkt 142fpkt"];
1511--2874[label="0.0233918;4pkt 4fpkt"];
1511--3075[label="0.0348837;3pkt 3fpkt"];
1511--3154[label="0.830409;142pkt 142fpkt"];
1516--2145[label="0.0116279;1pkt 1fpkt"];
1516--2679[label="0.0342857;6pkt 6fpkt"];
1516--2740[label="0.84;147pkt 147fpkt"];
1516--2874[label="0.0342857;6pkt 6fpkt"];
1516--3075[label="0.0116279;1pkt 1fpkt"];
1516--3154[label="0.84;147pkt 147fpkt"];
1516--3579[label="1;175pkt 175fpkt"];
1517--2145[label="0.0348837;3pkt 3fpkt"];
1517--2679[label="0.0803571;9pkt 9fpkt"];
1517--2740[label="0.642857;72pkt 72fpkt"];
1517--2874[label="0.0357143;4pkt 4fpkt"];
1517--3075[label="0.0348837;3pkt 3fpkt"];
1517--3154[label="0.642857;72pkt 72fpkt"];
1586--2145[label="0.0116279;1pkt 1fpkt"];
1586--2679[label="0.0111732;2pkt 2fpkt"];
1586--2740[label="0.888268;159pkt 159fpkt"];
1586--2874[label="0.027933;5pkt 5fpkt"];
1586--3075[label="0.0116279;1pkt 1fpkt"];
1586--3154[label="0.888268;159pkt 159fpkt"];
1612--2679[label="0.0357143;6pkt 6fpkt"];
1612--2740[label="0.869048;146pkt 146fpkt"];
1612--2874[label="0.0297619;5pkt 5fpkt"];
1612--3154[label="0.869048;146pkt 146fpkt"];
1614--2679[label="0.0113636;2pkt 2fpkt"];
1614--2740[label="0.931818;164pkt 164fpkt"];
1614--2874[label="0.0340909;6pkt 6fpkt"];
1614--2936[label="1;157pkt 157fpkt"];
1614--3154[label="0.931818;164pkt 164fpkt"];
1879--2145[label="0.0348837;3pkt 3fpkt"];
1879--2679[label="0.0909091;9pkt 9fpkt"];
1879--2740[label="0.717172;71pkt 71fpkt"];
1879--2874[label="0.040404;4pkt 4fpkt"];
1879--3075[label="0.0348837;3pkt 3fpkt"];
1879--3154[label="0.717172;71pkt 71fpkt"];
1879--3804[label="1;99pkt 99fpkt"];
2085--2158[label="0.057971;4pkt 4fpkt"];
2085--2679[label="0.0555556;6pkt 6fpkt"];
2085--2871[label="0.157407;17pkt 17fpkt"];
2085--2874[label="0.0277778;3pkt 3fpkt"];
2085--2875[label="0.101852;11pkt 11fpkt"];
2135--2679[label="0.0506329;4pkt 4fpkt"];
2135--2740[label="0.898734;71pkt 71fpkt"];
2135--2874[label="0.0253165;2pkt 2fpkt"];
2135--3154[label="0.898734;71pkt 71fpkt"];
2135--3577[label="0.987342;78pkt 78fpkt"];
2135--5775[label="1;79pkt 79fpkt"];
2874--2917[label="0.0352941;3pkt 3fpkt"];
2874--2921[label="0.0196078;1pkt 1fpkt"];
2874--2936[label="0.0318471;5pkt 5fpkt"];
2874--3244[label="1;10pkt 10fpkt"];
2874--3272[label="0.0322581;2pkt 2fpkt"];
2874--3391[label="0.046875;3pkt 3fpkt"];
2874--3418[label="0.0327869;2pkt 2fpkt"];
2874--3454[label="0.0148515;3pkt 3fpkt"];
2874--3497[label="0.0277778;2pkt 2fpkt"];
2874--3520[label="0.0428571;3pkt 3fpkt"];
2874--3577[label="0.019802;2pkt 2fpkt"];
2874--3579[label="0.0298507;6pkt 6fpkt"];
2874--3611[label="1;27pkt 27fpkt"];
2874--3804[label="0.0392157;4pkt 4fpkt"];
2874--3943[label="0.0277778;3pkt 3fpkt"];
2874--4128[label="0.025;3pkt 3fpkt"];
2874--4249[label="0.0175439;1pkt 1fpkt"];
2874--4400[label="0.0225225;5pkt 5fpkt"];
2874--4470[label="0.0394737;3pkt 3fpkt"];
2874--4543[label="0.0340909;3pkt 3fpkt"];
2874--4751[label="0.0405405;3pkt 3fpkt"];
2874--4797[label="0.0196078;1pkt 1fpkt"];
2874--4919[label="0.244444;11pkt 11fpkt"];
2874--5021[label="1;10pkt 10fpkt"];
2874--5114[label="0.030303;1pkt 1fpkt"];
2874--5388[label="0.040404;4pkt 4fpkt"];
2874--5434[label="0.111111;1pkt 1fpkt"];
2874--5653[label="0.0461538;3pkt 3fpkt"];
2874--5694[label="0.0148515;3pkt 3fpkt"];
2874--5722[label="0.0277778;2pkt 2fpkt"];
2874--5775[label="0.0196078;2pkt 2fpkt"];
2874--6013[label="0.0277778;3pkt 3fpkt"];
2874--6125[label="0.0247934;3pkt 3fpkt"];
2874--6207[label="0.0175439;1pkt 1fpkt"];
2874--6405[label="0.0337079;3pkt 3fpkt"];
2874--6542[label="0.0405405;3pkt 3fpkt"];
2874--6571[label="0.0196078;1pkt 1fpkt"];
2874--6718[label="1;11pkt 11fpkt"];
2874--6986[label="0.1;1pkt 1fpkt"];
2874--7173[label="0.028169;2pkt 2fpkt"];
2874--7353[label="0.0277778;3pkt 3fpkt"];
2874--7426[label="0.0247934;3pkt 3fpkt"];
2874--7596[label="0.0340909;3pkt 3fpkt"];
2874--7686[label="0.0410959;3pkt 3fpkt"];
2874--7798[label="1;10pkt 10fpkt"];
2874--7980[label="0.111111;1pkt 1fpkt"];
2936--3154[label="0.936306;147pkt 147fpkt"];
4797--6571[label="1;51pkt 51fpkt"];
5021--6718[label="1;10pkt 10fpkt"];
5021--7798[label="1;10pkt 10fpkt"];
6718--7798[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="215.87.64.183" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_247{
style=filled;
color=gray75;
1693[label="215.70.95.184;s;114pkt 114fpkt", shape=diamond, color=yellow];
stat247[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.70.95.184:80, 214.216.49.183:*}[31.5789%]&lt;BR/&gt;{215.70.95.184:80, 140.3.212.27:*}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1822: (0.877193%)&lt;BR/&gt; 42978: (0.438596%)&lt;BR/&gt; 42959: (0.438596%)&lt;BR/&gt; 42921: (0.438596%)&gt;];
}
1693--2871[label="0.0877193;10pkt 10fpkt"];
1693--3061[label="0.679245;36pkt 36fpkt"];
1693--4992[label="1;114pkt 114fpkt"];
</description>
    <slice>
      <filter dst_ip="214.216.49.183" src_ip="215.70.95.184" src_port="80"/>
      <filter dst_ip="140.3.212.27" src_ip="215.70.95.184" src_port="80"/>
    </slice>
    <from sec="1039669232" usec="0"/>
    <to sec="1039669833" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_248{
style=filled;
color=gray75;
867[label="38.131.112.16;s;1pkt 1fpkt", shape=diamond, color=yellow];
1504[label="138.186.181.116;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat248[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.131.112.16:2650, 138.186.181.116:49780}[50%]&lt;BR/&gt;{202.80.132.117:1028, 138.186.181.116:137}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49780: (33.3333%)&lt;BR/&gt; 2650: (33.3333%)&lt;BR/&gt; 1028: (16.6667%)&lt;BR/&gt; 137: (16.6667%)&gt;];
}
867--1504[label="1;1pkt 1fpkt"];
1504--3184[label="0.5;1pkt 1fpkt"];
1504--4393[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.181.116" dst_port="137" src_ip="202.80.132.117" src_port="1028"/>
      <filter dst_ip="138.186.181.116" dst_port="49780" src_ip="38.131.112.16" src_port="2650"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="215.90.65.6"/>
      <from sec="1039669200" usec="0"/>
      <to sec="1039669846" usec="0"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_250{
style=filled;
color=gray75;
517[label="215.90.152.114;d;337pkt 337fpkt", shape=diamond, color=yellow];
736[label="215.90.155.102;d;204pkt 204fpkt", shape=diamond, color=yellow];
1173[label="140.3.244.88;d;18pkt 18fpkt", shape=diamond, color=yellow];
1174[label="197.231.171.165;s;20pkt 20fpkt", shape=diamond, color=yellow];
1335[label="196.139.146.216;s;167pkt 167fpkt", shape=diamond, color=yellow];
1408[label="196.179.216.36;s;12pkt 12fpkt", shape=diamond, color=yellow];
1418[label="96.51.19.29;s;178pkt 178fpkt", shape=diamond, color=yellow];
1473[label="215.90.72.92;d;156pkt 156fpkt", shape=diamond, color=yellow];
1484[label="140.3.210.29;d;1pkt 1fpkt", shape=diamond, color=yellow];
1487[label="197.231.161.163;s;7pkt 7fpkt", shape=diamond, color=yellow];
1697[label="140.3.201.5;d;50pkt 50fpkt", shape=diamond, color=yellow];
1900[label="38.72.248.244;s;210pkt 210fpkt", shape=diamond, color=yellow];
2472[label="215.90.152.114;d;337pkt 337fpkt", shape=hexagon, color=black];
2607[label="196.139.146.216;s;52pkt 52fpkt", shape=hexagon, color=black];
2849[label="215.90.72.92;d;148pkt 148fpkt", shape=hexagon, color=black];
2855[label="197.231.161.163;s;7pkt 7fpkt", shape=hexagon, color=black];
2921[label="38.64.179.5;s;51pkt 51fpkt", shape=hexagon, color=black];
3272[label="38.64.179.5;62pkt 62fpkt", shape=pentagon, color=darkviolet];
3284[label="96.51.19.6;28pkt 28fpkt", shape=pentagon, color=darkviolet];
3359[label="198.48.100.12;14pkt 14fpkt", shape=pentagon, color=darkviolet];
3563[label="96.51.19.29;177pkt 177fpkt", shape=pentagon, color=darkviolet];
3632[label="196.179.216.36;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3694[label="196.245.134.42;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3855[label="96.51.6.60;21pkt 21fpkt", shape=pentagon, color=darkviolet];
4071[label="196.245.144.81;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4406[label="215.219.105.119;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4496[label="215.139.53.130;18pkt 18fpkt", shape=pentagon, color=darkviolet];
4507[label="215.139.53.131;18pkt 18fpkt", shape=pentagon, color=darkviolet];
4800[label="197.231.161.163;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4820[label="197.231.171.165;20pkt 20fpkt", shape=pentagon, color=darkviolet];
4837[label="96.51.16.167;25pkt 25fpkt", shape=pentagon, color=darkviolet];
4984[label="197.231.171.183;19pkt 19fpkt", shape=pentagon, color=darkviolet];
5097[label="196.179.206.198;115pkt 115fpkt", shape=pentagon, color=darkviolet];
5213[label="96.24.171.212;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5238[label="196.139.146.216;177pkt 177fpkt", shape=pentagon, color=darkviolet];
5587[label="96.51.19.6;29pkt 29fpkt", shape=invtriangle, color=brown];
5765[label="96.51.19.29;178pkt 178fpkt", shape=invtriangle, color=brown];
5804[label="196.179.216.36;11pkt 11fpkt", shape=invtriangle, color=brown];
5950[label="96.51.6.60;20pkt 20fpkt", shape=invtriangle, color=brown];
6310[label="215.219.105.119;5pkt 5fpkt", shape=invtriangle, color=brown];
6377[label="215.139.53.131;19pkt 19fpkt", shape=invtriangle, color=brown];
6701[label="197.231.171.183;19pkt 19fpkt", shape=invtriangle, color=brown];
6841[label="96.24.171.212;1pkt 1fpkt", shape=invtriangle, color=brown];
6858[label="196.139.146.216;176pkt 176fpkt", shape=invtriangle, color=brown];
7313[label="96.51.6.60;21pkt 21fpkt", shape=invhouse, color=bisque];
7578[label="215.139.53.131;19pkt 19fpkt", shape=invhouse, color=bisque];
7786[label="197.231.171.183;19pkt 19fpkt", shape=invhouse, color=bisque];
7884[label="96.24.171.212;2pkt 2fpkt", shape=invhouse, color=bisque];
7896[label="196.139.146.216;177pkt 177fpkt", shape=invhouse, color=bisque];
stat250[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 215.90.152.114:*}[25.6664%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8224%)&lt;BR/&gt; 1908: (0.207162%)&lt;BR/&gt; 513: (0.177567%)&lt;BR/&gt; 3563: (0.16277%)&lt;BR/&gt; 1892: (0.16277%)&gt;];
}
517--520[label="0.0237389;8pkt 8fpkt"];
517--553[label="0.0208333;3pkt 3fpkt"];
517--658[label="0.00961538;1pkt 1fpkt"];
517--689[label="0.0123967;3pkt 3fpkt"];
517--731[label="0.00884956;1pkt 1fpkt"];
517--735[label="0.0206186;2pkt 2fpkt"];
517--782[label="0.155844;12pkt 12fpkt"];
517--926[label="0.0186916;2pkt 2fpkt"];
517--929[label="0.00735294;1pkt 1fpkt"];
517--931[label="0.0194175;2pkt 2fpkt"];
517--952[label="0.078125;10pkt 10fpkt"];
517--966[label="0.00552486;1pkt 1fpkt"];
517--1095[label="0.00719424;1pkt 1fpkt"];
517--1174[label="0.05;1pkt 1fpkt"];
517--1287[label="0.0210526;2pkt 2fpkt"];
517--1335[label="0.0958084;16pkt 16fpkt"];
517--1343[label="0.2;13pkt 13fpkt"];
517--1408[label="0.166667;2pkt 2fpkt"];
517--1418[label="0.151685;27pkt 27fpkt"];
517--1487[label="1;7pkt 7fpkt"];
517--1539[label="0.0258621;3pkt 3fpkt"];
517--1549[label="0.0116279;1pkt 1fpkt"];
517--1576[label="0.0212766;2pkt 2fpkt"];
517--1656[label="0.0153846;2pkt 2fpkt"];
517--1820[label="0.0151515;4pkt 4fpkt"];
517--1829[label="0.0172414;1pkt 1fpkt"];
517--1900[label="0.0238095;5pkt 5fpkt"];
517--1902[label="0.00671141;1pkt 1fpkt"];
517--1912[label="0.0275229;3pkt 3fpkt"];
517--1914[label="0.00574713;1pkt 1fpkt"];
517--2099[label="0.0147059;1pkt 1fpkt"];
517--2117[label="0.0133333;3pkt 3fpkt"];
517--2155[label="0.00584795;1pkt 1fpkt"];
517--2247[label="0.00757576;1pkt 1fpkt"];
517--2261[label="0.030303;2pkt 2fpkt"];
517--2317[label="0.00833333;1pkt 1fpkt"];
517--2404[label="0.135135;5pkt 5fpkt"];
517--2472[label="1;337pkt 337fpkt"];
517--2484[label="0.010989;1pkt 1fpkt"];
517--2522[label="0.028169;2pkt 2fpkt"];
517--2607[label="0.192308;10pkt 10fpkt"];
517--2677[label="0.010929;2pkt 2fpkt"];
517--2681[label="0.028169;2pkt 2fpkt"];
517--2750[label="0.0237389;8pkt 8fpkt"];
517--2780[label="0.0075188;1pkt 1fpkt"];
517--2821[label="0.00671141;1pkt 1fpkt"];
517--2828[label="0.00574713;1pkt 1fpkt"];
517--2855[label="1;7pkt 7fpkt"];
517--2882[label="0.0208333;3pkt 3fpkt"];
517--2892[label="0.00900901;1pkt 1fpkt"];
517--2911[label="0.0133929;3pkt 3fpkt"];
517--2917[label="0.0117647;1pkt 1fpkt"];
517--2921[label="0.0196078;1pkt 1fpkt"];
517--2934[label="0.00719424;1pkt 1fpkt"];
517--3058[label="0.00833333;1pkt 1fpkt"];
517--3212[label="0.0133333;4pkt 4fpkt"];
517--3272[label="0.016129;1pkt 1fpkt"];
517--3284[label="0.142857;4pkt 4fpkt"];
517--3295[label="0.0113636;3pkt 3fpkt"];
517--3333[label="0.0237389;8pkt 8fpkt"];
517--3359[label="1;14pkt 14fpkt"];
517--3563[label="0.152542;27pkt 27fpkt"];
517--3632[label="0.181818;2pkt 2fpkt"];
517--3748[label="0.0151515;2pkt 2fpkt"];
517--3792[label="0.0123457;1pkt 1fpkt"];
517--3855[label="0.904762;19pkt 19fpkt"];
517--4357[label="0.0047619;1pkt 1fpkt"];
517--4406[label="0.8;4pkt 4fpkt"];
517--4496[label="0.944444;17pkt 17fpkt"];
517--4507[label="1;18pkt 18fpkt"];
517--4522[label="0.00704225;1pkt 1fpkt"];
517--4688[label="0.00680272;1pkt 1fpkt"];
517--4716[label="0.0107527;1pkt 1fpkt"];
517--4751[label="0.027027;2pkt 2fpkt"];
517--4800[label="1;7pkt 7fpkt"];
517--4820[label="0.05;1pkt 1fpkt"];
517--4839[label="0.00649351;1pkt 1fpkt"];
517--4984[label="0.157895;3pkt 3fpkt"];
517--5057[label="0.00552486;1pkt 1fpkt"];
517--5097[label="0.113043;13pkt 13fpkt"];
517--5203[label="0.0746269;10pkt 10fpkt"];
517--5238[label="0.0903955;16pkt 16fpkt"];
517--5283[label="0.00934579;3pkt 3fpkt"];
517--5388[label="0.020202;2pkt 2fpkt"];
517--5587[label="0.137931;4pkt 4fpkt"];
517--5765[label="0.151685;27pkt 27fpkt"];
517--5804[label="0.181818;2pkt 2fpkt"];
517--5950[label="0.95;19pkt 19fpkt"];
517--6275[label="0.00473934;1pkt 1fpkt"];
517--6310[label="0.8;4pkt 4fpkt"];
517--6377[label="1;19pkt 19fpkt"];
517--6389[label="0.00699301;1pkt 1fpkt"];
517--6542[label="0.027027;2pkt 2fpkt"];
517--6597[label="0.00649351;1pkt 1fpkt"];
517--6701[label="0.157895;3pkt 3fpkt"];
517--6736[label="0.00549451;1pkt 1fpkt"];
517--6761[label="0.113043;13pkt 13fpkt"];
517--6858[label="0.0909091;16pkt 16fpkt"];
517--7313[label="0.904762;19pkt 19fpkt"];
517--7511[label="0.00473934;1pkt 1fpkt"];
517--7578[label="1;19pkt 19fpkt"];
517--7588[label="0.00699301;1pkt 1fpkt"];
517--7686[label="0.0273973;2pkt 2fpkt"];
517--7786[label="0.157895;3pkt 3fpkt"];
517--7811[label="0.00552486;1pkt 1fpkt"];
517--7896[label="0.0903955;16pkt 16fpkt"];
736--777[label="0.175;21pkt 21fpkt"];
736--966[label="0.00552486;1pkt 1fpkt"];
736--1095[label="0.00719424;1pkt 1fpkt"];
736--1287[label="0.0105263;1pkt 1fpkt"];
736--1335[label="0.155689;26pkt 26fpkt"];
736--1343[label="0.369231;24pkt 24fpkt"];
736--1499[label="0.0245098;5pkt 5fpkt"];
736--1539[label="0.00862069;1pkt 1fpkt"];
736--1549[label="0.0116279;1pkt 1fpkt"];
736--1820[label="0.0343137;7pkt 7fpkt"];
736--1912[label="0.0183486;2pkt 2fpkt"];
736--1914[label="0.0114943;2pkt 2fpkt"];
736--2117[label="0.0343137;7pkt 7fpkt"];
736--2155[label="0.0175439;3pkt 3fpkt"];
736--2161[label="0.0136986;2pkt 2fpkt"];
736--2247[label="0.0227273;3pkt 3fpkt"];
736--2290[label="0.0243902;1pkt 1fpkt"];
736--2298[label="0.0357143;2pkt 2fpkt"];
736--2317[label="0.0166667;2pkt 2fpkt"];
736--2339[label="0.02;1pkt 1fpkt"];
736--2607[label="0.461538;24pkt 24fpkt"];
736--2750[label="0.0196078;4pkt 4fpkt"];
736--2828[label="0.0114943;2pkt 2fpkt"];
736--2882[label="0.00694444;1pkt 1fpkt"];
736--2911[label="0.0343137;7pkt 7fpkt"];
736--2934[label="0.00719424;1pkt 1fpkt"];
736--3058[label="0.0166667;2pkt 2fpkt"];
736--3212[label="0.0343137;7pkt 7fpkt"];
736--3295[label="0.0343137;7pkt 7fpkt"];
736--3310[label="0.047619;1pkt 1fpkt"];
736--3333[label="0.0196078;4pkt 4fpkt"];
736--3354[label="0.0245098;5pkt 5fpkt"];
736--3429[label="0.0588235;2pkt 2fpkt"];
736--3628[label="0.0208333;1pkt 1fpkt"];
736--3639[label="0.0344828;2pkt 2fpkt"];
736--3844[label="0.157895;21pkt 21fpkt"];
736--4071[label="0.125;1pkt 1fpkt"];
736--4249[label="0.0350877;2pkt 2fpkt"];
736--4357[label="0.0147059;3pkt 3fpkt"];
736--4522[label="0.0211268;3pkt 3fpkt"];
736--4688[label="0.0204082;3pkt 3fpkt"];
736--4716[label="0.0215054;2pkt 2fpkt"];
736--4837[label="0.08;2pkt 2fpkt"];
736--4927[label="1;18pkt 18fpkt"];
736--5097[label="0.208696;24pkt 24fpkt"];
736--5238[label="0.146893;26pkt 26fpkt"];
736--5283[label="0.0147059;3pkt 3fpkt"];
736--5300[label="0.047619;2pkt 2fpkt"];
736--5416[label="0.0263158;1pkt 1fpkt"];
736--5496[label="0.0322581;1pkt 1fpkt"];
736--5507[label="0.0322581;1pkt 1fpkt"];
736--5631[label="0.0245098;5pkt 5fpkt"];
736--5678[label="0.0606061;2pkt 2fpkt"];
736--6207[label="0.0350877;2pkt 2fpkt"];
736--6275[label="0.0147059;3pkt 3fpkt"];
736--6389[label="0.020979;3pkt 3fpkt"];
736--6660[label="1;18pkt 18fpkt"];
736--6761[label="0.208696;24pkt 24fpkt"];
736--6858[label="0.147727;26pkt 26fpkt"];
736--6970[label="0.027027;1pkt 1fpkt"];
736--7114[label="0.0245098;5pkt 5fpkt"];
736--7140[label="0.0588235;2pkt 2fpkt"];
736--7511[label="0.0147059;3pkt 3fpkt"];
736--7588[label="0.020979;3pkt 3fpkt"];
736--7896[label="0.146893;26pkt 26fpkt"];
736--7969[label="0.027027;1pkt 1fpkt"];
1173--1174[label="0.888889;16pkt 16fpkt"];
1173--3694[label="1;2pkt 2fpkt"];
1173--4820[label="0.888889;16pkt 16fpkt"];
1174--2472[label="0.05;1pkt 1fpkt"];
1174--4820[label="1;20pkt 20fpkt"];
1335--2149[label="0.862385;94pkt 94fpkt"];
1335--2472[label="0.0958084;16pkt 16fpkt"];
1335--2482[label="0.0598802;10pkt 10fpkt"];
1335--2607[label="1;52pkt 52fpkt"];
1335--2768[label="0.00598802;1pkt 1fpkt"];
1335--5238[label="1;167pkt 167fpkt"];
1335--6858[label="0.994012;166pkt 166fpkt"];
1335--7896[label="1;167pkt 167fpkt"];
1408--1484[label="1;1pkt 1fpkt"];
1408--2472[label="0.166667;2pkt 2fpkt"];
1408--3632[label="0.909091;10pkt 10fpkt"];
1408--5804[label="0.909091;10pkt 10fpkt"];
1418--1473[label="0.74359;116pkt 116fpkt"];
1418--1697[label="0.6;30pkt 30fpkt"];
1418--2472[label="0.151685;27pkt 27fpkt"];
1418--2849[label="0.743243;110pkt 110fpkt"];
1418--3563[label="0.99435;176pkt 176fpkt"];
1418--5765[label="0.994382;177pkt 177fpkt"];
1473--2849[label="1;148pkt 148fpkt"];
1473--3284[label="0.75;21pkt 21fpkt"];
1473--3563[label="0.737179;115pkt 115fpkt"];
1473--3855[label="0.0952381;2pkt 2fpkt"];
1473--5587[label="0.758621;22pkt 22fpkt"];
1473--5765[label="0.74359;116pkt 116fpkt"];
1473--5950[label="0.05;1pkt 1fpkt"];
1473--7313[label="0.0952381;2pkt 2fpkt"];
1484--3632[label="1;1pkt 1fpkt"];
1484--5804[label="1;1pkt 1fpkt"];
1487--2472[label="1;7pkt 7fpkt"];
1487--2855[label="1;7pkt 7fpkt"];
1487--4800[label="1;7pkt 7fpkt"];
1697--3284[label="0.0714286;2pkt 2fpkt"];
1697--3371[label="0.111111;1pkt 1fpkt"];
1697--3563[label="0.6;30pkt 30fpkt"];
1697--5213[label="1;1pkt 1fpkt"];
1697--5587[label="0.0689655;2pkt 2fpkt"];
1697--5642[label="0.111111;1pkt 1fpkt"];
1697--5765[label="0.6;30pkt 30fpkt"];
1697--6841[label="1;1pkt 1fpkt"];
1697--7121[label="0.1;1pkt 1fpkt"];
1697--7884[label="1;2pkt 2fpkt"];
1900--2096[label="0.0298507;4pkt 4fpkt"];
1900--2200[label="0.0273973;2pkt 2fpkt"];
1900--2215[label="0.0449438;4pkt 4fpkt"];
1900--2430[label="0.0103093;1pkt 1fpkt"];
1900--2472[label="0.0238095;5pkt 5fpkt"];
1900--2505[label="0.0809524;17pkt 17fpkt"];
1900--2775[label="0.188235;16pkt 16fpkt"];
1900--2951[label="0.19697;39pkt 39fpkt"];
1900--3041[label="0.0298507;4pkt 4fpkt"];
1900--3114[label="0.0103093;1pkt 1fpkt"];
1900--3157[label="0.235294;16pkt 16fpkt"];
2472--2484[label="0.010989;1pkt 1fpkt"];
2472--2522[label="0.028169;2pkt 2fpkt"];
2472--2607[label="0.192308;10pkt 10fpkt"];
2472--2677[label="0.010929;2pkt 2fpkt"];
2472--2681[label="0.028169;2pkt 2fpkt"];
2472--2750[label="0.0237389;8pkt 8fpkt"];
2472--2780[label="0.0075188;1pkt 1fpkt"];
2472--2821[label="0.00671141;1pkt 1fpkt"];
2472--2828[label="0.00574713;1pkt 1fpkt"];
2472--2855[label="1;7pkt 7fpkt"];
2472--2882[label="0.0208333;3pkt 3fpkt"];
2472--2892[label="0.00900901;1pkt 1fpkt"];
2472--2911[label="0.0133929;3pkt 3fpkt"];
2472--2917[label="0.0117647;1pkt 1fpkt"];
2472--2921[label="0.0196078;1pkt 1fpkt"];
2472--2934[label="0.00719424;1pkt 1fpkt"];
2472--3058[label="0.00833333;1pkt 1fpkt"];
2472--3212[label="0.0133333;4pkt 4fpkt"];
2472--3272[label="0.016129;1pkt 1fpkt"];
2472--3284[label="0.142857;4pkt 4fpkt"];
2472--3295[label="0.0113636;3pkt 3fpkt"];
2472--3333[label="0.0237389;8pkt 8fpkt"];
2472--3359[label="1;14pkt 14fpkt"];
2472--3563[label="0.152542;27pkt 27fpkt"];
2472--3632[label="0.181818;2pkt 2fpkt"];
2472--3748[label="0.0151515;2pkt 2fpkt"];
2472--3792[label="0.0123457;1pkt 1fpkt"];
2472--3855[label="0.904762;19pkt 19fpkt"];
2472--4357[label="0.0047619;1pkt 1fpkt"];
2472--4406[label="0.8;4pkt 4fpkt"];
2472--4496[label="0.944444;17pkt 17fpkt"];
2472--4507[label="1;18pkt 18fpkt"];
2472--4522[label="0.00704225;1pkt 1fpkt"];
2472--4688[label="0.00680272;1pkt 1fpkt"];
2472--4716[label="0.0107527;1pkt 1fpkt"];
2472--4751[label="0.027027;2pkt 2fpkt"];
2472--4800[label="1;7pkt 7fpkt"];
2472--4820[label="0.05;1pkt 1fpkt"];
2472--4839[label="0.00649351;1pkt 1fpkt"];
2472--4984[label="0.157895;3pkt 3fpkt"];
2472--5057[label="0.00552486;1pkt 1fpkt"];
2472--5097[label="0.113043;13pkt 13fpkt"];
2472--5203[label="0.0746269;10pkt 10fpkt"];
2472--5238[label="0.0903955;16pkt 16fpkt"];
2472--5283[label="0.00934579;3pkt 3fpkt"];
2472--5388[label="0.020202;2pkt 2fpkt"];
2472--5587[label="0.137931;4pkt 4fpkt"];
2472--5765[label="0.151685;27pkt 27fpkt"];
2472--5804[label="0.181818;2pkt 2fpkt"];
2472--5950[label="0.95;19pkt 19fpkt"];
2472--6275[label="0.00473934;1pkt 1fpkt"];
2472--6310[label="0.8;4pkt 4fpkt"];
2472--6377[label="1;19pkt 19fpkt"];
2472--6389[label="0.00699301;1pkt 1fpkt"];
2472--6542[label="0.027027;2pkt 2fpkt"];
2472--6597[label="0.00649351;1pkt 1fpkt"];
2472--6701[label="0.157895;3pkt 3fpkt"];
2472--6736[label="0.00549451;1pkt 1fpkt"];
2472--6761[label="0.113043;13pkt 13fpkt"];
2472--6858[label="0.0909091;16pkt 16fpkt"];
2472--7313[label="0.904762;19pkt 19fpkt"];
2472--7511[label="0.00473934;1pkt 1fpkt"];
2472--7578[label="1;19pkt 19fpkt"];
2472--7588[label="0.00699301;1pkt 1fpkt"];
2472--7686[label="0.0273973;2pkt 2fpkt"];
2472--7786[label="0.157895;3pkt 3fpkt"];
2472--7811[label="0.00552486;1pkt 1fpkt"];
2472--7896[label="0.0903955;16pkt 16fpkt"];
2607--5238[label="1;52pkt 52fpkt"];
2607--6858[label="1;52pkt 52fpkt"];
2607--7896[label="1;52pkt 52fpkt"];
2849--3284[label="0.678571;19pkt 19fpkt"];
2849--3563[label="0.736486;109pkt 109fpkt"];
2849--3855[label="0.0952381;2pkt 2fpkt"];
2849--5587[label="0.689655;20pkt 20fpkt"];
2849--5765[label="0.743243;110pkt 110fpkt"];
2849--5950[label="0.05;1pkt 1fpkt"];
2849--7313[label="0.0952381;2pkt 2fpkt"];
2855--4800[label="1;7pkt 7fpkt"];
2921--3154[label="0.117647;6pkt 6fpkt"];
2921--3272[label="1;51pkt 51fpkt"];
3284--5587[label="1;28pkt 28fpkt"];
3563--5765[label="1;177pkt 177fpkt"];
3632--5804[label="1;11pkt 11fpkt"];
3855--5950[label="1;20pkt 20fpkt"];
3855--7313[label="1;21pkt 21fpkt"];
4406--6310[label="1;5pkt 5fpkt"];
4507--6377[label="1;18pkt 18fpkt"];
4507--7578[label="1;18pkt 18fpkt"];
4984--6701[label="1;19pkt 19fpkt"];
4984--7786[label="1;19pkt 19fpkt"];
5097--6761[label="1;115pkt 115fpkt"];
5213--6841[label="1;1pkt 1fpkt"];
5213--7884[label="1;1pkt 1fpkt"];
5238--6858[label="1;176pkt 176fpkt"];
5238--7896[label="1;177pkt 177fpkt"];
5950--7313[label="1;20pkt 20fpkt"];
6377--7578[label="1;19pkt 19fpkt"];
6701--7786[label="1;19pkt 19fpkt"];
6841--7884[label="1;1pkt 1fpkt"];
6858--7896[label="1;176pkt 176fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.152.114" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669914" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.937874,1.83478,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_251{
style=filled;
color=gray75;
1041[label="169.126.1.19;s;108pkt 108fpkt", shape=diamond, color=yellow];
1856[label="169.126.158.204;s;47pkt 47fpkt", shape=diamond, color=yellow];
1858[label="215.24.24.160;d;2pkt 2fpkt", shape=diamond, color=yellow];
2693[label="169.126.1.19;s;68pkt 68fpkt", shape=hexagon, color=black];
2914[label="169.126.142.121;s;659pkt 659fpkt", shape=hexagon, color=black];
2929[label="201.164.129.5;d;9pkt 9fpkt", shape=hexagon, color=black];
3020[label="201.164.129.0;d;9pkt 9fpkt", shape=hexagon, color=black];
3438[label="169.126.1.19;117pkt 117fpkt", shape=pentagon, color=darkviolet];
5683[label="169.126.1.19;116pkt 116fpkt", shape=invtriangle, color=brown];
stat251[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.126.142.121:2587, *:53}[52.0908%]&lt;BR/&gt;{169.126.142.121:53, *:*}[25.3286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (48.1938%)&lt;BR/&gt; 2587: (19.2952%)&lt;BR/&gt; 1025: (7.22467%)&lt;BR/&gt; 25: (3.21586%)&lt;BR/&gt; 1024: (2.3348%)&gt;];
}
1041--1540[label="0.111111;1pkt 1fpkt"];
1041--1606[label="0.111111;1pkt 1fpkt"];
1041--2693[label="1;68pkt 68fpkt"];
1041--2929[label="0.111111;1pkt 1fpkt"];
1041--3020[label="0.111111;1pkt 1fpkt"];
1041--3179[label="0.0462963;5pkt 5fpkt"];
1041--3182[label="0.0648148;7pkt 7fpkt"];
1041--3187[label="0.0462963;5pkt 5fpkt"];
1041--3438[label="1;108pkt 108fpkt"];
1041--5683[label="0.990741;107pkt 107fpkt"];
1856--1883[label="0.0243902;1pkt 1fpkt"];
1856--2929[label="0.111111;1pkt 1fpkt"];
1856--2931[label="1;47pkt 47fpkt"];
1856--3020[label="0.111111;1pkt 1fpkt"];
1856--5143[label="1;46pkt 46fpkt"];
1858--3931[label="0.5;1pkt 1fpkt"];
1858--6004[label="0.5;1pkt 1fpkt"];
2693--2929[label="0.111111;1pkt 1fpkt"];
2693--3020[label="0.111111;1pkt 1fpkt"];
2693--3179[label="0.0735294;5pkt 5fpkt"];
2693--3182[label="0.0441176;3pkt 3fpkt"];
2693--3187[label="0.0735294;5pkt 5fpkt"];
2693--3438[label="1;68pkt 68fpkt"];
2693--5683[label="1;68pkt 68fpkt"];
2914--2929[label="0.111111;1pkt 1fpkt"];
2914--3020[label="0.111111;1pkt 1fpkt"];
2914--4422[label="0.998483;658pkt 658fpkt"];
2914--6322[label="1;659pkt 659fpkt"];
2929--2931[label="0.111111;1pkt 1fpkt"];
2929--3179[label="0.111111;1pkt 1fpkt"];
2929--3182[label="0.111111;1pkt 1fpkt"];
2929--3187[label="0.111111;1pkt 1fpkt"];
2929--3251[label="0.111111;1pkt 1fpkt"];
2929--3358[label="0.111111;1pkt 1fpkt"];
2929--3438[label="0.111111;1pkt 1fpkt"];
2929--3931[label="0.111111;1pkt 1fpkt"];
2929--4422[label="0.111111;1pkt 1fpkt"];
2929--4885[label="0.222222;2pkt 2fpkt"];
2929--5143[label="0.111111;1pkt 1fpkt"];
2929--5564[label="0.111111;1pkt 1fpkt"];
2929--5683[label="0.111111;1pkt 1fpkt"];
2929--6004[label="0.111111;1pkt 1fpkt"];
2929--6322[label="0.111111;1pkt 1fpkt"];
2929--6635[label="0.222222;2pkt 2fpkt"];
3020--3179[label="0.111111;1pkt 1fpkt"];
3020--3182[label="0.111111;1pkt 1fpkt"];
3020--3187[label="0.111111;1pkt 1fpkt"];
3020--3251[label="0.111111;1pkt 1fpkt"];
3020--3358[label="0.111111;1pkt 1fpkt"];
3020--3438[label="0.111111;1pkt 1fpkt"];
3020--3931[label="0.111111;1pkt 1fpkt"];
3020--4422[label="0.111111;1pkt 1fpkt"];
3020--4885[label="0.222222;2pkt 2fpkt"];
3020--5143[label="0.111111;1pkt 1fpkt"];
3020--5564[label="0.111111;1pkt 1fpkt"];
3020--5683[label="0.111111;1pkt 1fpkt"];
3020--6004[label="0.111111;1pkt 1fpkt"];
3020--6322[label="0.111111;1pkt 1fpkt"];
3020--6635[label="0.222222;2pkt 2fpkt"];
3438--5683[label="1;116pkt 116fpkt"];
</description>
    <slice>
      <filter src_ip="169.126.142.121" src_port="53"/>
      <filter dst_port="53" src_ip="169.126.142.121" src_port="2587"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_252{
style=filled;
color=gray75;
1541[label="215.90.73.59;s;2pkt 2fpkt", shape=diamond, color=yellow];
1542[label="193.19.219.212;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat252[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.90.73.59:1271, 193.19.219.212:554}[50%]&lt;BR/&gt;{215.90.73.59:6970, 193.19.219.212:8786}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8786: (25%)&lt;BR/&gt; 6970: (25%)&lt;BR/&gt; 1271: (25%)&lt;BR/&gt; 554: (25%)&gt;];
}
1541--1542[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="193.19.219.212" dst_port="8786" src_ip="215.90.73.59" src_port="6970"/>
      <filter dst_ip="193.19.219.212" dst_port="554" src_ip="215.90.73.59" src_port="1271"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_253{
style=filled;
color=gray75;
1546[label="138.49.94.169;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat253[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.52.32.130:43465, 138.49.94.169:9243}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43465: (50%)&lt;BR/&gt; 9243: (50%)&gt;];
}
1546--3022[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.49.94.169" dst_port="9243" src_ip="203.52.32.130" src_port="43465"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669843" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_254{
style=filled;
color=gray75;
1552[label="215.90.88.165;s;9pkt 9fpkt", shape=diamond, color=yellow];
1553[label="201.162.55.26;d;7pkt 7fpkt", shape=diamond, color=yellow];
stat254[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.90.88.165:*, 201.162.55.24:80}[22.2222%]&lt;BR/&gt;{215.90.88.165:*, 201.162.55.26:554}[22.2222%]&lt;BR/&gt;{215.90.88.165:6972, 201.162.55.26:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6972: (12.5%)&lt;BR/&gt; 554: (12.5%)&lt;BR/&gt; 0: (12.5%)&lt;BR/&gt; 49268: (6.25%)&lt;BR/&gt; 49266: (6.25%)&gt;];
}
1552--1553[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="201.162.55.26" src_ip="215.90.88.165" src_port="6972"/>
      <filter dst_ip="201.162.55.26" dst_port="554" src_ip="215.90.88.165"/>
      <filter dst_ip="201.162.55.24" dst_port="80" src_ip="215.90.88.165"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19604,1.81002,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_255{
style=filled;
color=gray75;
55[label="148.110.13.218s;2624pkt 2624fpkt", shape=rectangle, color=red];
460[label="148.110.13.218;s;2330pkt 2330fpkt", shape=diamond, color=yellow];
854[label="148.110.22.91;s;394pkt 394fpkt", shape=diamond, color=yellow];
1352[label="196.119.227.47;d;3pkt 3fpkt", shape=diamond, color=yellow];
1353[label="148.110.129.114;s;297pkt 297fpkt", shape=diamond, color=yellow];
1497[label="36.45.119.40;d;1pkt 1fpkt", shape=diamond, color=yellow];
1531[label="64.58.252.55;d;1pkt 1fpkt", shape=diamond, color=yellow];
1548[label="39.88.169.59;d;1pkt 1fpkt", shape=diamond, color=yellow];
1559[label="197.131.86.19;d;2pkt 2fpkt", shape=diamond, color=yellow];
1567[label="154.158.245.46;d;1pkt 1fpkt", shape=diamond, color=yellow];
1569[label="64.38.99.229;d;2pkt 2fpkt", shape=diamond, color=yellow];
1571[label="92.252.114.32;d;1pkt 1fpkt", shape=diamond, color=yellow];
1572[label="64.196.181.65;d;1pkt 1fpkt", shape=diamond, color=yellow];
1587[label="64.17.130.123;d;1pkt 1fpkt", shape=diamond, color=yellow];
1595[label="146.144.120.155;d;2pkt 2fpkt", shape=diamond, color=yellow];
1598[label="39.114.204.50;d;1pkt 1fpkt", shape=diamond, color=yellow];
1607[label="92.255.135.100;d;1pkt 1fpkt", shape=diamond, color=yellow];
1634[label="64.2.33.172;d;1pkt 1fpkt", shape=diamond, color=yellow];
1685[label="215.48.15.137;d;1pkt 1fpkt", shape=diamond, color=yellow];
1789[label="92.255.211.207;d;1pkt 1fpkt", shape=diamond, color=yellow];
1799[label="64.23.2.200;d;1pkt 1fpkt", shape=diamond, color=yellow];
1814[label="92.230.37.198;d;1pkt 1fpkt", shape=diamond, color=yellow];
1815[label="64.141.56.140;d;1pkt 1fpkt", shape=diamond, color=yellow];
1817[label="201.2.207.76;d;1pkt 1fpkt", shape=diamond, color=yellow];
1818[label="64.75.70.6;d;1pkt 1fpkt", shape=diamond, color=yellow];
1854[label="197.131.17.126;d;2pkt 2fpkt", shape=diamond, color=yellow];
1865[label="36.217.25.188;d;1pkt 1fpkt", shape=diamond, color=yellow];
1936[label="146.154.19.56;d;1pkt 1fpkt", shape=diamond, color=yellow];
2022[label="80.144.133.181;d;1pkt 1fpkt", shape=diamond, color=yellow];
2026[label="196.88.50.54;d;3pkt 3fpkt", shape=diamond, color=yellow];
2069[label="214.16.195.155;d;3pkt 3fpkt", shape=diamond, color=yellow];
2088[label="39.112.21.67;d;1pkt 1fpkt", shape=diamond, color=yellow];
2094[label="146.144.97.114;d;1pkt 1fpkt", shape=diamond, color=yellow];
2372[label="215.8.232.14;d;1pkt 1fpkt", shape=diamond, color=yellow];
2376[label="96.6.244.152;d;1pkt 1fpkt", shape=diamond, color=yellow];
2784[label="39.88.169.59;d;1pkt 1fpkt", shape=hexagon, color=black];
2802[label="39.114.204.50;d;1pkt 1fpkt", shape=hexagon, color=black];
2806[label="197.131.17.126;d;1pkt 1fpkt", shape=hexagon, color=black];
2913[label="64.196.181.65;d;1pkt 1fpkt", shape=hexagon, color=black];
3025[label="197.131.86.19;d;2pkt 2fpkt", shape=hexagon, color=black];
3026[label="64.141.56.140;d;1pkt 1fpkt", shape=hexagon, color=black];
3027[label="201.2.207.76;d;1pkt 1fpkt", shape=hexagon, color=black];
5247[label="148.110.13.218;2912pkt 2912fpkt", shape=pentagon, color=darkviolet];
6864[label="148.110.13.218;2911pkt 2911fpkt", shape=invtriangle, color=brown];
7901[label="148.110.13.218;2912pkt 2912fpkt", shape=invhouse, color=bisque];
stat255[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.110.13.218:1396, *:*}[80.7767%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1396: (47.5709%)&lt;BR/&gt; 1214: (2.51923%)&lt;BR/&gt; 1801: (1.37917%)&lt;BR/&gt; 0: (1.15739%)&lt;BR/&gt; 1660: (0.471273%)&gt;];
}
55--460[label="0.915021;2132pkt 2132fpkt"];
55--1352[label="0.333333;1pkt 1fpkt"];
55--1497[label="1;1pkt 1fpkt"];
55--1531[label="1;1pkt 1fpkt"];
55--1548[label="1;1pkt 1fpkt"];
55--1559[label="0.5;1pkt 1fpkt"];
55--1567[label="1;1pkt 1fpkt"];
55--1569[label="0.5;1pkt 1fpkt"];
55--1571[label="1;1pkt 1fpkt"];
55--1572[label="1;1pkt 1fpkt"];
55--1587[label="1;1pkt 1fpkt"];
55--1595[label="0.5;1pkt 1fpkt"];
55--1598[label="1;1pkt 1fpkt"];
55--1607[label="1;1pkt 1fpkt"];
55--1634[label="1;1pkt 1fpkt"];
55--1685[label="1;1pkt 1fpkt"];
55--1789[label="1;1pkt 1fpkt"];
55--1799[label="1;1pkt 1fpkt"];
55--1814[label="1;1pkt 1fpkt"];
55--1815[label="1;1pkt 1fpkt"];
55--1817[label="1;1pkt 1fpkt"];
55--1818[label="1;1pkt 1fpkt"];
55--1854[label="0.5;1pkt 1fpkt"];
55--1865[label="1;1pkt 1fpkt"];
55--1936[label="1;1pkt 1fpkt"];
55--2022[label="1;1pkt 1fpkt"];
55--2026[label="0.333333;1pkt 1fpkt"];
55--2069[label="0.333333;1pkt 1fpkt"];
55--2088[label="1;1pkt 1fpkt"];
55--2094[label="1;1pkt 1fpkt"];
55--2372[label="1;1pkt 1fpkt"];
55--2376[label="1;1pkt 1fpkt"];
55--2784[label="1;1pkt 1fpkt"];
55--2802[label="1;1pkt 1fpkt"];
55--2806[label="1;1pkt 1fpkt"];
55--2913[label="1;1pkt 1fpkt"];
55--3025[label="0.5;1pkt 1fpkt"];
55--3026[label="1;1pkt 1fpkt"];
55--3027[label="1;1pkt 1fpkt"];
55--5247[label="1;2624pkt 2624fpkt"];
55--6864[label="1;2624pkt 2624fpkt"];
55--7901[label="1;2624pkt 2624fpkt"];
460--1352[label="0.333333;1pkt 1fpkt"];
460--1497[label="1;1pkt 1fpkt"];
460--1531[label="1;1pkt 1fpkt"];
460--1548[label="1;1pkt 1fpkt"];
460--1559[label="0.5;1pkt 1fpkt"];
460--1567[label="1;1pkt 1fpkt"];
460--1569[label="0.5;1pkt 1fpkt"];
460--1571[label="1;1pkt 1fpkt"];
460--1572[label="1;1pkt 1fpkt"];
460--1587[label="1;1pkt 1fpkt"];
460--1595[label="0.5;1pkt 1fpkt"];
460--1598[label="1;1pkt 1fpkt"];
460--1607[label="1;1pkt 1fpkt"];
460--1634[label="1;1pkt 1fpkt"];
460--1685[label="1;1pkt 1fpkt"];
460--1789[label="1;1pkt 1fpkt"];
460--1799[label="1;1pkt 1fpkt"];
460--1814[label="1;1pkt 1fpkt"];
460--1815[label="1;1pkt 1fpkt"];
460--1817[label="1;1pkt 1fpkt"];
460--1818[label="1;1pkt 1fpkt"];
460--1854[label="0.5;1pkt 1fpkt"];
460--1865[label="1;1pkt 1fpkt"];
460--1936[label="1;1pkt 1fpkt"];
460--2022[label="1;1pkt 1fpkt"];
460--2026[label="0.333333;1pkt 1fpkt"];
460--2069[label="0.333333;1pkt 1fpkt"];
460--2088[label="1;1pkt 1fpkt"];
460--2094[label="1;1pkt 1fpkt"];
460--2372[label="1;1pkt 1fpkt"];
460--2376[label="1;1pkt 1fpkt"];
460--2784[label="1;1pkt 1fpkt"];
460--2802[label="1;1pkt 1fpkt"];
460--2806[label="1;1pkt 1fpkt"];
460--2913[label="1;1pkt 1fpkt"];
460--3025[label="0.5;1pkt 1fpkt"];
460--3026[label="1;1pkt 1fpkt"];
460--3027[label="1;1pkt 1fpkt"];
460--5247[label="1;2330pkt 2330fpkt"];
460--6864[label="0.999571;2329pkt 2329fpkt"];
460--7901[label="1;2330pkt 2330fpkt"];
854--855[label="1;1pkt 1fpkt"];
854--1352[label="0.333333;1pkt 1fpkt"];
854--1559[label="0.5;1pkt 1fpkt"];
854--1595[label="0.5;1pkt 1fpkt"];
854--2026[label="0.333333;1pkt 1fpkt"];
854--3025[label="0.5;1pkt 1fpkt"];
854--4169[label="1;2pkt 2fpkt"];
1352--1353[label="0.333333;1pkt 1fpkt"];
1352--5247[label="0.333333;1pkt 1fpkt"];
1352--6864[label="0.333333;1pkt 1fpkt"];
1352--7901[label="0.333333;1pkt 1fpkt"];
1353--1569[label="0.5;1pkt 1fpkt"];
1353--2026[label="0.333333;1pkt 1fpkt"];
1353--2069[label="0.333333;1pkt 1fpkt"];
1497--5247[label="1;1pkt 1fpkt"];
1497--6864[label="1;1pkt 1fpkt"];
1497--7901[label="1;1pkt 1fpkt"];
1531--5247[label="1;1pkt 1fpkt"];
1531--6864[label="1;1pkt 1fpkt"];
1531--7901[label="1;1pkt 1fpkt"];
1548--2784[label="1;1pkt 1fpkt"];
1548--5247[label="1;1pkt 1fpkt"];
1548--6864[label="1;1pkt 1fpkt"];
1548--7901[label="1;1pkt 1fpkt"];
1559--3025[label="1;2pkt 2fpkt"];
1559--5247[label="0.5;1pkt 1fpkt"];
1559--6864[label="0.5;1pkt 1fpkt"];
1559--7901[label="0.5;1pkt 1fpkt"];
1567--5247[label="1;1pkt 1fpkt"];
1567--6864[label="1;1pkt 1fpkt"];
1567--7901[label="1;1pkt 1fpkt"];
1569--5247[label="0.5;1pkt 1fpkt"];
1569--6864[label="0.5;1pkt 1fpkt"];
1569--7901[label="0.5;1pkt 1fpkt"];
1571--5247[label="1;1pkt 1fpkt"];
1571--6864[label="1;1pkt 1fpkt"];
1571--7901[label="1;1pkt 1fpkt"];
1572--2913[label="1;1pkt 1fpkt"];
1572--5247[label="1;1pkt 1fpkt"];
1572--6864[label="1;1pkt 1fpkt"];
1572--7901[label="1;1pkt 1fpkt"];
1587--5247[label="1;1pkt 1fpkt"];
1587--6864[label="1;1pkt 1fpkt"];
1587--7901[label="1;1pkt 1fpkt"];
1595--5247[label="0.5;1pkt 1fpkt"];
1595--6864[label="0.5;1pkt 1fpkt"];
1595--7901[label="0.5;1pkt 1fpkt"];
1598--2802[label="1;1pkt 1fpkt"];
1598--5247[label="1;1pkt 1fpkt"];
1598--6864[label="1;1pkt 1fpkt"];
1598--7901[label="1;1pkt 1fpkt"];
1607--5247[label="1;1pkt 1fpkt"];
1607--6864[label="1;1pkt 1fpkt"];
1607--7901[label="1;1pkt 1fpkt"];
1634--5247[label="1;1pkt 1fpkt"];
1634--6864[label="1;1pkt 1fpkt"];
1634--7901[label="1;1pkt 1fpkt"];
1685--5247[label="1;1pkt 1fpkt"];
1685--6864[label="1;1pkt 1fpkt"];
1685--7901[label="1;1pkt 1fpkt"];
1789--5247[label="1;1pkt 1fpkt"];
1789--6864[label="1;1pkt 1fpkt"];
1789--7901[label="1;1pkt 1fpkt"];
1799--5247[label="1;1pkt 1fpkt"];
1799--6864[label="1;1pkt 1fpkt"];
1799--7901[label="1;1pkt 1fpkt"];
1814--5247[label="1;1pkt 1fpkt"];
1814--6864[label="1;1pkt 1fpkt"];
1814--7901[label="1;1pkt 1fpkt"];
1815--3026[label="1;1pkt 1fpkt"];
1815--5247[label="1;1pkt 1fpkt"];
1815--6864[label="1;1pkt 1fpkt"];
1815--7901[label="1;1pkt 1fpkt"];
1817--3027[label="1;1pkt 1fpkt"];
1817--5247[label="1;1pkt 1fpkt"];
1817--6864[label="1;1pkt 1fpkt"];
1817--7901[label="1;1pkt 1fpkt"];
1818--5247[label="1;1pkt 1fpkt"];
1818--6864[label="1;1pkt 1fpkt"];
1818--7901[label="1;1pkt 1fpkt"];
1854--2806[label="1;1pkt 1fpkt"];
1854--5247[label="0.5;1pkt 1fpkt"];
1854--6864[label="0.5;1pkt 1fpkt"];
1854--7901[label="0.5;1pkt 1fpkt"];
1865--5247[label="1;1pkt 1fpkt"];
1865--6864[label="1;1pkt 1fpkt"];
1865--7901[label="1;1pkt 1fpkt"];
1936--5247[label="1;1pkt 1fpkt"];
1936--6864[label="1;1pkt 1fpkt"];
1936--7901[label="1;1pkt 1fpkt"];
2022--5247[label="1;1pkt 1fpkt"];
2022--6864[label="1;1pkt 1fpkt"];
2022--7901[label="1;1pkt 1fpkt"];
2026--5247[label="0.333333;1pkt 1fpkt"];
2026--6864[label="0.333333;1pkt 1fpkt"];
2026--7901[label="0.333333;1pkt 1fpkt"];
2069--3701[label="0.333333;1pkt 1fpkt"];
2069--5247[label="0.333333;1pkt 1fpkt"];
2069--6864[label="0.333333;1pkt 1fpkt"];
2069--7901[label="0.333333;1pkt 1fpkt"];
2088--5247[label="1;1pkt 1fpkt"];
2088--6864[label="1;1pkt 1fpkt"];
2088--7901[label="1;1pkt 1fpkt"];
2094--5247[label="1;1pkt 1fpkt"];
2094--6864[label="1;1pkt 1fpkt"];
2094--7901[label="1;1pkt 1fpkt"];
2372--5247[label="1;1pkt 1fpkt"];
2372--6864[label="1;1pkt 1fpkt"];
2372--7901[label="1;1pkt 1fpkt"];
2376--5247[label="1;1pkt 1fpkt"];
2376--6864[label="1;1pkt 1fpkt"];
2376--7901[label="1;1pkt 1fpkt"];
2784--5247[label="1;1pkt 1fpkt"];
2784--6864[label="1;1pkt 1fpkt"];
2784--7901[label="1;1pkt 1fpkt"];
2802--5247[label="1;1pkt 1fpkt"];
2802--6864[label="1;1pkt 1fpkt"];
2802--7901[label="1;1pkt 1fpkt"];
2806--5247[label="1;1pkt 1fpkt"];
2806--6864[label="1;1pkt 1fpkt"];
2806--7901[label="1;1pkt 1fpkt"];
2913--5247[label="1;1pkt 1fpkt"];
2913--6864[label="1;1pkt 1fpkt"];
2913--7901[label="1;1pkt 1fpkt"];
3025--5247[label="0.5;1pkt 1fpkt"];
3025--6864[label="0.5;1pkt 1fpkt"];
3025--7901[label="0.5;1pkt 1fpkt"];
3026--5247[label="1;1pkt 1fpkt"];
3026--6864[label="1;1pkt 1fpkt"];
3026--7901[label="1;1pkt 1fpkt"];
3027--5247[label="1;1pkt 1fpkt"];
3027--6864[label="1;1pkt 1fpkt"];
3027--7901[label="1;1pkt 1fpkt"];
5247--6864[label="1;2911pkt 2911fpkt"];
5247--7901[label="1;2912pkt 2912fpkt"];
6864--7901[label="1;2911pkt 2911fpkt"];
</description>
    <slice>
      <filter src_ip="148.110.13.218" src_port="1396"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="172.66.9.83"/>
      <from sec="1039669200" usec="0"/>
      <to sec="1039669758" usec="0"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669758" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_257{
style=filled;
color=gray75;
1356[label="36.150.216.72;d;1pkt 1fpkt", shape=diamond, color=yellow];
1520[label="38.178.36.119;d;1pkt 1fpkt", shape=diamond, color=yellow];
1591[label="36.227.199.89;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat257[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.176.219:3025, 36.150.216.72:6699}[33.3333%]&lt;BR/&gt;{138.186.176.219:6699, 36.227.199.89:2675}[33.3333%]&lt;BR/&gt;{138.186.176.219:6699, 38.178.36.119:3506}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3506: (16.6667%)&lt;BR/&gt; 3025: (16.6667%)&lt;BR/&gt; 2675: (16.6667%)&gt;];
}
1356--5269[label="1;1pkt 1fpkt"];
1520--5269[label="1;1pkt 1fpkt"];
1591--5269[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="38.178.36.119" dst_port="3506" src_ip="138.186.176.219" src_port="6699"/>
      <filter dst_ip="36.227.199.89" dst_port="2675" src_ip="138.186.176.219" src_port="6699"/>
      <filter dst_ip="36.150.216.72" dst_port="6699" src_ip="138.186.176.219" src_port="3025"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="215.129.12.154"/>
      <from sec="1039669200" usec="0"/>
      <to sec="1039669846" usec="0"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905994,1.86884,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_259{
style=filled;
color=gray75;
703[label="169.126.142.97;s;719pkt 719fpkt", shape=diamond, color=yellow];
1294[label="215.21.94.36;d;4pkt 4fpkt", shape=diamond, color=yellow];
1354[label="169.126.247.0;s;129pkt 129fpkt", shape=diamond, color=yellow];
3019[label="169.126.142.97;s;719pkt 719fpkt", shape=hexagon, color=black];
4240[label="169.126.142.97;768pkt 768fpkt", shape=pentagon, color=darkviolet];
stat259[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.126.142.97:*, *:25}[71.0468%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (45.8529%)&lt;BR/&gt; 113: (2.65071%)&lt;BR/&gt; 80: (1.43224%)&lt;BR/&gt; 4512: (0.12826%)&lt;BR/&gt; 4506: (0.12826%)&gt;];
}
703--767[label="0.888889;8pkt 8fpkt"];
703--1162[label="0.75;12pkt 12fpkt"];
703--1294[label="1;4pkt 4fpkt"];
703--1619[label="0.333333;2pkt 2fpkt"];
703--2101[label="0.645161;20pkt 20fpkt"];
703--3019[label="1;719pkt 719fpkt"];
703--4240[label="0.998609;718pkt 718fpkt"];
1294--3019[label="1;4pkt 4fpkt"];
1294--4240[label="1;4pkt 4fpkt"];
1354--1619[label="0.166667;1pkt 1fpkt"];
3019--4240[label="0.998609;718pkt 718fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="169.126.142.97"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16691,1.89362,999,1 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_260{
style=filled;
color=gray75;
102[label="202.55.76.22s;2pkt 2fpkt", shape=rectangle, color=red];
104[label="96.57.220.22s;2pkt 2fpkt", shape=rectangle, color=red];
675[label="215.90.75.26;d;11pkt 11fpkt", shape=diamond, color=yellow];
1042[label="162.80.3.76;s;1pkt 1fpkt", shape=diamond, color=yellow];
1527[label="61.201.56.22;s;1pkt 1fpkt", shape=diamond, color=yellow];
1621[label="215.90.90.121;d;5pkt 5fpkt", shape=diamond, color=yellow];
1622[label="96.66.76.22;s;2pkt 2fpkt", shape=diamond, color=yellow];
2485[label="215.90.75.26;d;11pkt 11fpkt", shape=hexagon, color=black];
2694[label="162.80.3.76;s;1pkt 1fpkt", shape=hexagon, color=black];
2777[label="61.201.56.22;s;1pkt 1fpkt", shape=hexagon, color=black];
5919[label="133.227.51.55;1pkt 1fpkt", shape=invtriangle, color=brown];
stat260[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6699, 215.90.75.26:*}[43.75%]&lt;BR/&gt;{*:*, 215.90.90.121:*}[31.25%]&lt;BR/&gt;{*:*, 215.90.75.26:6699}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (38.1579%)&lt;BR/&gt; 5001: (7.89474%)&lt;BR/&gt; 1079: (7.89474%)&lt;BR/&gt; 1526: (5.26316%)&lt;BR/&gt; 1077: (5.26316%)&gt;];
}
102--104[label="1;2pkt 2fpkt"];
102--675[label="0.5;1pkt 1fpkt"];
102--1527[label="1;1pkt 1fpkt"];
102--1621[label="0.5;1pkt 1fpkt"];
102--1622[label="0.5;1pkt 1fpkt"];
102--2485[label="0.5;1pkt 1fpkt"];
102--2777[label="1;1pkt 1fpkt"];
104--675[label="0.5;1pkt 1fpkt"];
104--1527[label="1;1pkt 1fpkt"];
104--1621[label="0.5;1pkt 1fpkt"];
104--1622[label="0.5;1pkt 1fpkt"];
104--2485[label="0.5;1pkt 1fpkt"];
104--2777[label="1;1pkt 1fpkt"];
675--1042[label="1;1pkt 1fpkt"];
675--1527[label="1;1pkt 1fpkt"];
675--2485[label="1;11pkt 11fpkt"];
675--2694[label="1;1pkt 1fpkt"];
675--2777[label="1;1pkt 1fpkt"];
675--5919[label="1;1pkt 1fpkt"];
1042--2485[label="1;1pkt 1fpkt"];
1042--2694[label="1;1pkt 1fpkt"];
1527--2485[label="1;1pkt 1fpkt"];
1527--2777[label="1;1pkt 1fpkt"];
1621--1622[label="1;2pkt 2fpkt"];
2485--2694[label="1;1pkt 1fpkt"];
2485--2777[label="1;1pkt 1fpkt"];
2485--5919[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.90.121"/>
      <filter dst_ip="215.90.75.26" src_port="6699"/>
      <filter dst_ip="215.90.75.26" dst_port="6699"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09135,1.86305,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_261{
style=filled;
color=gray75;
184[label="61.181.116.89s;1pkt 1fpkt", shape=rectangle, color=red];
1631[label="215.90.74.27;d;6pkt 6fpkt", shape=diamond, color=yellow];
1876[label="96.66.76.89;s;5pkt 5fpkt", shape=diamond, color=yellow];
2811[label="96.66.76.89;s;5pkt 5fpkt", shape=hexagon, color=black];
3054[label="215.90.74.27;d;6pkt 6fpkt", shape=hexagon, color=black];
4148[label="96.66.76.89;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat261[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.66.76.89:5001, 215.90.74.27:*}[33.3333%]&lt;BR/&gt;{96.66.76.91:5001, 215.90.74.27:*}[22.2222%]&lt;BR/&gt;{96.66.76.89:5001, 215.90.74.49:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (44.6429%)&lt;BR/&gt; 0: (10.7143%)&lt;BR/&gt; 1067: (8.92857%)&lt;BR/&gt; 1057: (8.92857%)&lt;BR/&gt; 1156: (5.35714%)&gt;];
}
184--1631[label="1;1pkt 1fpkt"];
184--1876[label="1;1pkt 1fpkt"];
184--2811[label="1;1pkt 1fpkt"];
184--3054[label="1;1pkt 1fpkt"];
1631--1876[label="0.4;2pkt 2fpkt"];
1631--2368[label="0.4;2pkt 2fpkt"];
1631--2811[label="0.4;2pkt 2fpkt"];
1631--3054[label="1;6pkt 6fpkt"];
1631--4148[label="0.4;2pkt 2fpkt"];
1631--4170[label="0.25;1pkt 1fpkt"];
1631--6151[label="0.4;2pkt 2fpkt"];
1876--2811[label="1;5pkt 5fpkt"];
1876--3054[label="0.4;2pkt 2fpkt"];
1876--4148[label="0.8;4pkt 4fpkt"];
2811--3054[label="0.4;2pkt 2fpkt"];
2811--4148[label="0.8;4pkt 4fpkt"];
3054--4148[label="0.4;2pkt 2fpkt"];
3054--4170[label="0.25;1pkt 1fpkt"];
3054--6151[label="0.4;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.74.27" src_ip="96.66.76.89" src_port="5001"/>
      <filter dst_ip="215.90.74.49" src_ip="96.66.76.89" src_port="5001"/>
      <filter dst_ip="215.90.74.27" src_ip="96.66.76.91" src_port="5001"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14144,1.92665,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_262{
style=filled;
color=gray75;
301[label="202.92.78.205s;1pkt 1fpkt", shape=rectangle, color=red];
1636[label="140.3.214.203;d;204pkt 204fpkt", shape=diamond, color=yellow];
2704[label="140.3.214.203;d;204pkt 204fpkt", shape=hexagon, color=black];
stat262[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 140.3.214.203:65115}[87.2549%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (46.577%)&lt;BR/&gt; 65115: (46.088%)&lt;BR/&gt; 0: (1.95599%)&lt;BR/&gt; 51: (1.46699%)&lt;BR/&gt; 52: (0.488998%)&gt;];
}
301--1636[label="1;1pkt 1fpkt"];
301--2704[label="1;1pkt 1fpkt"];
1636--2704[label="1;204pkt 204fpkt"];
1636--3323[label="0.0454545;1pkt 1fpkt"];
1636--3491[label="0.025641;1pkt 1fpkt"];
1636--3998[label="0.04;1pkt 1fpkt"];
1636--4105[label="0.0384615;1pkt 1fpkt"];
1636--4204[label="0.037037;1pkt 1fpkt"];
1636--4441[label="0.25;1pkt 1fpkt"];
1636--4567[label="0.025;1pkt 1fpkt"];
1636--4746[label="0.0416667;1pkt 1fpkt"];
1636--4871[label="0.025641;1pkt 1fpkt"];
1636--4886[label="0.0555556;1pkt 1fpkt"];
1636--5092[label="0.0434783;1pkt 1fpkt"];
1636--5212[label="0.025641;1pkt 1fpkt"];
1636--5240[label="0.0175439;1pkt 1fpkt"];
1636--5481[label="0.0606061;2pkt 2fpkt"];
1636--5502[label="0.0454545;1pkt 1fpkt"];
1636--5612[label="0.0454545;1pkt 1fpkt"];
1636--6111[label="0.0384615;1pkt 1fpkt"];
1636--6177[label="0.037037;1pkt 1fpkt"];
1636--6332[label="0.25;1pkt 1fpkt"];
1636--6636[label="0.0526316;1pkt 1fpkt"];
1636--6859[label="0.0175439;1pkt 1fpkt"];
1636--7038[label="0.0434783;1pkt 1fpkt"];
1636--7897[label="0.0175439;1pkt 1fpkt"];
2704--3323[label="0.0454545;1pkt 1fpkt"];
2704--3491[label="0.025641;1pkt 1fpkt"];
2704--3998[label="0.04;1pkt 1fpkt"];
2704--4105[label="0.0384615;1pkt 1fpkt"];
2704--4204[label="0.037037;1pkt 1fpkt"];
2704--4441[label="0.25;1pkt 1fpkt"];
2704--4567[label="0.025;1pkt 1fpkt"];
2704--4746[label="0.0416667;1pkt 1fpkt"];
2704--4871[label="0.025641;1pkt 1fpkt"];
2704--4886[label="0.0555556;1pkt 1fpkt"];
2704--5092[label="0.0434783;1pkt 1fpkt"];
2704--5212[label="0.025641;1pkt 1fpkt"];
2704--5240[label="0.0175439;1pkt 1fpkt"];
2704--5481[label="0.0606061;2pkt 2fpkt"];
2704--5502[label="0.0454545;1pkt 1fpkt"];
2704--5612[label="0.0454545;1pkt 1fpkt"];
2704--6111[label="0.0384615;1pkt 1fpkt"];
2704--6177[label="0.037037;1pkt 1fpkt"];
2704--6332[label="0.25;1pkt 1fpkt"];
2704--6636[label="0.0526316;1pkt 1fpkt"];
2704--6859[label="0.0175439;1pkt 1fpkt"];
2704--7038[label="0.0434783;1pkt 1fpkt"];
2704--7897[label="0.0175439;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.214.203" dst_port="65115" src_port="53"/>
    </slice>
    <from sec="1039669202" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905994,1.86884,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_263{
style=filled;
color=gray75;
448[label="148.110.158.4;s;407pkt 407fpkt", shape=diamond, color=yellow];
676[label="64.134.56.161;d;1pkt 1fpkt", shape=diamond, color=yellow];
1036[label="61.138.160.165;d;1pkt 1fpkt", shape=diamond, color=yellow];
1045[label="149.148.25.45;d;1pkt 1fpkt", shape=diamond, color=yellow];
1302[label="61.140.15.201;d;1pkt 1fpkt", shape=diamond, color=yellow];
1604[label="61.138.87.38;d;1pkt 1fpkt", shape=diamond, color=yellow];
1640[label="61.165.201.21;d;1pkt 1fpkt", shape=diamond, color=yellow];
1647[label="61.139.233.146;d;1pkt 1fpkt", shape=diamond, color=yellow];
2017[label="200.108.2.129;d;1pkt 1fpkt", shape=diamond, color=yellow];
2312[label="61.139.200.233;d;1pkt 1fpkt", shape=diamond, color=yellow];
2535[label="61.138.160.165;d;1pkt 1fpkt", shape=hexagon, color=black];
2606[label="149.148.25.45;d;1pkt 1fpkt", shape=hexagon, color=black];
2815[label="61.139.233.146;d;1pkt 1fpkt", shape=hexagon, color=black];
2867[label="200.108.2.129;d;1pkt 1fpkt", shape=hexagon, color=black];
3253[label="148.110.158.4;510pkt 510fpkt", shape=pentagon, color=darkviolet];
stat263[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.110.158.4:4662, *:*}[97.8431%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (48.6559%)&lt;BR/&gt; 6257: (0.860215%)&lt;BR/&gt; 6699: (0.376344%)&lt;BR/&gt; 3689: (0.322581%)&lt;BR/&gt; 1580: (0.322581%)&gt;];
}
448--676[label="1;1pkt 1fpkt"];
448--1036[label="1;1pkt 1fpkt"];
448--1045[label="1;1pkt 1fpkt"];
448--1302[label="1;1pkt 1fpkt"];
448--1604[label="1;1pkt 1fpkt"];
448--1640[label="1;1pkt 1fpkt"];
448--1647[label="1;1pkt 1fpkt"];
448--2017[label="1;1pkt 1fpkt"];
448--2312[label="1;1pkt 1fpkt"];
448--2535[label="1;1pkt 1fpkt"];
448--2606[label="1;1pkt 1fpkt"];
448--2815[label="1;1pkt 1fpkt"];
448--2867[label="1;1pkt 1fpkt"];
448--3253[label="1;407pkt 407fpkt"];
676--3253[label="1;1pkt 1fpkt"];
1036--2535[label="1;1pkt 1fpkt"];
1036--3253[label="1;1pkt 1fpkt"];
1045--2606[label="1;1pkt 1fpkt"];
1045--3253[label="1;1pkt 1fpkt"];
1302--3253[label="1;1pkt 1fpkt"];
1604--3253[label="1;1pkt 1fpkt"];
1640--3253[label="1;1pkt 1fpkt"];
1647--2815[label="1;1pkt 1fpkt"];
1647--3253[label="1;1pkt 1fpkt"];
2017--2867[label="1;1pkt 1fpkt"];
2017--3253[label="1;1pkt 1fpkt"];
2312--3253[label="1;1pkt 1fpkt"];
2535--3253[label="1;1pkt 1fpkt"];
2606--3253[label="1;1pkt 1fpkt"];
2815--3253[label="1;1pkt 1fpkt"];
2867--3253[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="148.110.158.4" src_port="4662"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="140.3.59.56"/>
      <from sec="1039669205" usec="0"/>
      <to sec="1039669666" usec="0"/>
    </slice>
    <from sec="1039669205" usec="0"/>
    <to sec="1039669666" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_265{
style=filled;
color=gray75;
2426[label="208.153.76.13;s;152pkt 152fpkt", shape=diamond, color=yellow];
3368[label="208.153.76.13;151pkt 151fpkt", shape=pentagon, color=darkviolet];
5640[label="208.153.76.13;152pkt 152fpkt", shape=invtriangle, color=brown];
7119[label="208.153.76.13;151pkt 151fpkt", shape=invhouse, color=bisque];
stat265[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.153.76.13:80, 140.3.249.27:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2872: (0.330033%)&lt;BR/&gt; 2870: (0.330033%)&lt;BR/&gt; 2868: (0.330033%)&lt;BR/&gt; 2866: (0.330033%)&gt;];
}
2426--3368[label="1;151pkt 151fpkt"];
2426--5640[label="1;152pkt 152fpkt"];
2426--7119[label="1;151pkt 151fpkt"];
3368--5640[label="1;151pkt 151fpkt"];
3368--7119[label="1;151pkt 151fpkt"];
5640--7119[label="1;151pkt 151fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.249.27" src_ip="208.153.76.13" src_port="80"/>
    </slice>
    <from sec="1039669683" usec="0"/>
    <to sec="1039669851" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.916727,1.89524,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_266{
style=filled;
color=gray75;
69[label="199.92.233.170s;2pkt 2fpkt", shape=rectangle, color=red];
1706[label="138.186.40.53;d;95pkt 95fpkt", shape=diamond, color=yellow];
stat266[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.92.233.170:80, 138.186.40.53:*}[96.875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.9691%)&lt;BR/&gt; 1863: (1.03093%)&lt;BR/&gt; 1262: (1.03093%)&lt;BR/&gt; 3949: (0.515464%)&lt;BR/&gt; 1288: (0.515464%)&gt;];
}
69--545[label="0.5;1pkt 1fpkt"];
69--682[label="1;2pkt 2fpkt"];
69--1706[label="0.5;1pkt 1fpkt"];
1706--2486[label="0.131868;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.40.53" src_ip="199.92.233.170" src_port="80"/>
    </slice>
    <from sec="1039669261" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_267{
style=filled;
color=gray75;
1189[label="138.186.59.171;s;2pkt 2fpkt", shape=diamond, color=yellow];
1715[label="64.64.74.255;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat267[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.59.171:1104, 211.90.155.249:1863}[50%]&lt;BR/&gt;{138.186.59.171:1114, 64.64.74.255:6699}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (33.3333%)&lt;BR/&gt; 1114: (33.3333%)&lt;BR/&gt; 1863: (16.6667%)&lt;BR/&gt; 1104: (16.6667%)&gt;];
}
1189--1715[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="64.64.74.255" dst_port="6699" src_ip="138.186.59.171" src_port="1114"/>
      <filter dst_ip="211.90.155.249" dst_port="1863" src_ip="138.186.59.171" src_port="1104"/>
    </slice>
    <from sec="1039669268" usec="0"/>
    <to sec="1039669758" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_268{
style=filled;
color=gray75;
1448[label="64.167.221.155;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat268[shape=component, label=&lt;Rules:&lt;BR/&gt;{64.167.221.155:2297, 138.186.59.96:6699}[50%]&lt;BR/&gt;{64.167.221.155:6257, 138.186.59.96:6257}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (50%)&lt;BR/&gt; 6699: (25%)&lt;BR/&gt; 2297: (25%)&gt;];
}
1448--4728[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.59.96" dst_port="6257" src_ip="64.167.221.155" src_port="6257"/>
      <filter dst_ip="138.186.59.96" dst_port="6699" src_ip="64.167.221.155" src_port="2297"/>
    </slice>
    <from sec="1039669303" usec="0"/>
    <to sec="1039669577" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14144,1.92665,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_269{
style=filled;
color=gray75;
83[label="96.107.16.6s;1pkt 1fpkt", shape=rectangle, color=red];
1735[label="38.117.148.187;d;11pkt 11fpkt", shape=diamond, color=yellow];
2844[label="38.117.148.187;d;11pkt 11fpkt", shape=hexagon, color=black];
stat269[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.110.40.6:*, 38.117.148.187:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3586: (6.52174%)&lt;BR/&gt; 3595: (4.34783%)&lt;BR/&gt; 3587: (4.34783%)&lt;BR/&gt; 3585: (4.34783%)&gt;];
}
83--1510[label="1;1pkt 1fpkt"];
83--1735[label="1;1pkt 1fpkt"];
83--2844[label="1;1pkt 1fpkt"];
1735--2844[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="38.117.148.187" dst_port="80" src_ip="148.110.40.6"/>
    </slice>
    <from sec="1039669329" usec="0"/>
    <to sec="1039669616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08265,1.88117,999,0 0 0 1 1 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_270{
style=filled;
color=gray75;
1035[label="215.90.152.101;d;2pkt 2fpkt", shape=diamond, color=yellow];
1737[label="96.66.76.21;s;1pkt 1fpkt", shape=diamond, color=yellow];
2918[label="215.90.152.101;d;2pkt 2fpkt", shape=hexagon, color=black];
5711[label="96.66.76.21;1pkt 1fpkt", shape=invtriangle, color=brown];
7165[label="96.66.76.21;1pkt 1fpkt", shape=invhouse, color=bisque];
stat270[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.66.76.21:5001, 215.90.152.101:1077}[50%]&lt;BR/&gt;{96.66.76.25:5001, 215.90.152.101:1076}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (50%)&lt;BR/&gt; 1077: (35.7143%)&lt;BR/&gt; 1076: (14.2857%)&gt;];
}
1035--1737[label="1;1pkt 1fpkt"];
1035--2918[label="1;2pkt 2fpkt"];
1035--5711[label="1;1pkt 1fpkt"];
1035--7165[label="1;1pkt 1fpkt"];
1737--2918[label="1;1pkt 1fpkt"];
1737--5711[label="1;1pkt 1fpkt"];
1737--7165[label="1;1pkt 1fpkt"];
2918--5711[label="1;1pkt 1fpkt"];
2918--7165[label="1;1pkt 1fpkt"];
5711--7165[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.152.101" dst_port="1076" src_ip="96.66.76.25" src_port="5001"/>
      <filter dst_ip="215.90.152.101" dst_port="1077" src_ip="96.66.76.21" src_port="5001"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_271{
style=filled;
color=gray75;
1744[label="36.42.132.230;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat271[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.42.132.230:80, 148.110.192.11:1775}[50%]&lt;BR/&gt;{36.42.132.230:80, 148.110.192.11:1778}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1778: (25%)&lt;BR/&gt; 1775: (25%)&gt;];
}
1744--5347[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.192.11" dst_port="1778" src_ip="36.42.132.230" src_port="80"/>
      <filter dst_ip="148.110.192.11" dst_port="1775" src_ip="36.42.132.230" src_port="80"/>
    </slice>
    <from sec="1039669374" usec="0"/>
    <to sec="1039669758" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.842395,1.84899,999,0 0 0 1 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_272{
style=filled;
color=gray75;
1096[label="215.90.88.149;d;3pkt 3fpkt", shape=diamond, color=yellow];
1747[label="96.66.76.135;s;1pkt 1fpkt", shape=diamond, color=yellow];
6560[label="96.66.76.162;1pkt 1fpkt", shape=invtriangle, color=brown];
7700[label="96.66.76.162;1pkt 1fpkt", shape=invhouse, color=bisque];
stat272[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.66.76.135:5001, 215.90.88.149:1051}[33.3333%]&lt;BR/&gt;{96.66.76.162:5001, 215.90.88.149:1049}[33.3333%]&lt;BR/&gt;{96.66.76.165:5001, 215.90.88.149:1050}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (50%)&lt;BR/&gt; 1049: (25%)&lt;BR/&gt; 1051: (16.6667%)&lt;BR/&gt; 1050: (8.33333%)&gt;];
}
1096--1747[label="1;1pkt 1fpkt"];
1096--6560[label="1;1pkt 1fpkt"];
1096--7700[label="1;1pkt 1fpkt"];
6560--7700[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.88.149" dst_port="1050" src_ip="96.66.76.165" src_port="5001"/>
      <filter dst_ip="215.90.88.149" dst_port="1049" src_ip="96.66.76.162" src_port="5001"/>
      <filter dst_ip="215.90.88.149" dst_port="1051" src_ip="96.66.76.135" src_port="5001"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_273{
style=filled;
color=gray75;
1468[label="140.3.129.64;s;1pkt 1fpkt", shape=diamond, color=yellow];
1749[label="98.180.181.90;d;1pkt 1fpkt", shape=diamond, color=yellow];
2848[label="98.180.181.90;d;1pkt 1fpkt", shape=hexagon, color=black];
stat273[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.129.64:49271, 98.180.181.90:9000}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49271: (50%)&lt;BR/&gt; 9000: (50%)&gt;];
}
1468--1749[label="1;1pkt 1fpkt"];
1468--2848[label="1;1pkt 1fpkt"];
1749--2848[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="98.180.181.90" dst_port="9000" src_ip="140.3.129.64" src_port="49271"/>
    </slice>
    <from sec="1039669389" usec="0"/>
    <to sec="1039669586" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_274{
style=filled;
color=gray75;
508[label="148.29.24.129;s;2248pkt 2248fpkt", shape=diamond, color=yellow];
684[label="175.123.149.208;d;42pkt 42fpkt", shape=diamond, color=yellow];
804[label="38.125.6.184;d;90pkt 90fpkt", shape=diamond, color=yellow];
1729[label="197.58.72.145;d;70pkt 70fpkt", shape=diamond, color=yellow];
1777[label="197.184.66.40;d;121pkt 121fpkt", shape=diamond, color=yellow];
2007[label="38.66.227.39;d;26pkt 26fpkt", shape=diamond, color=yellow];
2387[label="38.125.6.187;d;12pkt 12fpkt", shape=diamond, color=yellow];
2424[label="98.185.41.165;d;14pkt 14fpkt", shape=diamond, color=yellow];
2985[label="38.66.227.39;d;26pkt 26fpkt", shape=hexagon, color=black];
stat274[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.29.24.129:*, *:80}[79.8577%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.1646%)&lt;BR/&gt; 21: (6.85164%)&lt;BR/&gt; 54542: (0.0566251%)&lt;BR/&gt; 54538: (0.0566251%)&lt;BR/&gt; 54532: (0.0566251%)&gt;];
}
508--519[label="0.0155039;6pkt 6fpkt"];
508--664[label="1;44pkt 44fpkt"];
508--684[label="1;42pkt 42fpkt"];
508--688[label="0.040404;12pkt 12fpkt"];
508--722[label="0.112121;148pkt 148fpkt"];
508--780[label="0.537255;137pkt 137fpkt"];
508--804[label="1;90pkt 90fpkt"];
508--891[label="0.0121951;1pkt 1fpkt"];
508--930[label="0.0480769;5pkt 5fpkt"];
508--1094[label="0.0212766;3pkt 3fpkt"];
508--1120[label="0.590517;137pkt 137fpkt"];
508--1137[label="0.153846;10pkt 10fpkt"];
508--1142[label="0.0172414;1pkt 1fpkt"];
508--1172[label="0.0446429;5pkt 5fpkt"];
508--1184[label="1;88pkt 88fpkt"];
508--1199[label="1;60pkt 60fpkt"];
508--1276[label="0.175;14pkt 14fpkt"];
508--1331[label="0.5;2pkt 2fpkt"];
508--1412[label="0.125;1pkt 1fpkt"];
508--1568[label="0.0253165;6pkt 6fpkt"];
508--1615[label="0.0379747;3pkt 3fpkt"];
508--1620[label="0.0461538;6pkt 6fpkt"];
508--1639[label="0.025;5pkt 5fpkt"];
508--1658[label="0.0384615;4pkt 4fpkt"];
508--1666[label="0.546392;53pkt 53fpkt"];
508--1671[label="0.0806452;5pkt 5fpkt"];
508--1699[label="0.0047619;1pkt 1fpkt"];
508--1729[label="1;70pkt 70fpkt"];
508--1757[label="1;120pkt 120fpkt"];
508--1777[label="0.991736;120pkt 120fpkt"];
508--1791[label="0.28777;40pkt 40fpkt"];
508--1798[label="0.018797;5pkt 5fpkt"];
508--1812[label="0.0113636;1pkt 1fpkt"];
508--1893[label="0.0364964;5pkt 5fpkt"];
508--1894[label="0.047619;1pkt 1fpkt"];
508--1913[label="0.0124224;2pkt 2fpkt"];
508--1918[label="0.012987;2pkt 2fpkt"];
508--1920[label="0.04;1pkt 1fpkt"];
508--2007[label="1;26pkt 26fpkt"];
508--2035[label="0.0168067;2pkt 2fpkt"];
508--2057[label="0.0888889;4pkt 4fpkt"];
508--2065[label="0.011236;1pkt 1fpkt"];
508--2144[label="0.2;2pkt 2fpkt"];
508--2147[label="0.0206186;2pkt 2fpkt"];
508--2160[label="0.0227273;3pkt 3fpkt"];
508--2203[label="0.00584795;1pkt 1fpkt"];
508--2218[label="1;72pkt 72fpkt"];
508--2282[label="0.019802;2pkt 2fpkt"];
508--2285[label="0.0176991;2pkt 2fpkt"];
508--2294[label="0.109375;7pkt 7fpkt"];
508--2297[label="0.157895;9pkt 9fpkt"];
508--2316[label="0.0288462;3pkt 3fpkt"];
508--2323[label="0.0851064;4pkt 4fpkt"];
508--2387[label="1;12pkt 12fpkt"];
508--2424[label="1;14pkt 14fpkt"];
508--2487[label="0.0941176;8pkt 8fpkt"];
508--2554[label="0.0172414;1pkt 1fpkt"];
508--2567[label="1;58pkt 58fpkt"];
508--2589[label="0.0461538;3pkt 3fpkt"];
508--2711[label="0.0273973;2pkt 2fpkt"];
508--2736[label="1;109pkt 109fpkt"];
508--2745[label="0.28;28pkt 28fpkt"];
508--2793[label="0.030303;5pkt 5fpkt"];
508--2958[label="0.00826446;1pkt 1fpkt"];
508--2985[label="1;26pkt 26fpkt"];
508--2988[label="1;72pkt 72fpkt"];
508--3185[label="0.0382562;86pkt 86fpkt"];
508--4485[label="1;2248pkt 2248fpkt"];
684--4485[label="1;42pkt 42fpkt"];
804--4485[label="1;90pkt 90fpkt"];
1729--4485[label="1;70pkt 70fpkt"];
1777--4485[label="0.991736;120pkt 120fpkt"];
2007--2985[label="1;26pkt 26fpkt"];
2007--4485[label="1;26pkt 26fpkt"];
2387--4485[label="1;12pkt 12fpkt"];
2424--4485[label="1;14pkt 14fpkt"];
2985--4485[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="148.29.24.129"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_275{
style=filled;
color=gray75;
1626[label="138.186.55.87;s;2pkt 2fpkt", shape=diamond, color=yellow];
1780[label="96.78.153.33;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat275[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.55.87:6699, 96.78.153.33:3853}[50%]&lt;BR/&gt;{138.186.55.87:1149, 131.221.59.65:6699}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3853: (33.3333%)&lt;BR/&gt; 1149: (16.6667%)&gt;];
}
1626--1780[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.221.59.65" dst_port="6699" src_ip="138.186.55.87" src_port="1149"/>
      <filter dst_ip="96.78.153.33" dst_port="3853" src_ip="138.186.55.87" src_port="6699"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887316,1.79576,503,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_276{
style=filled;
color=gray75;
10[label="149.208.70.37s;2pkt 2fpkt", shape=rectangle, color=red];
466[label="140.3.201.114;d;7pkt 7fpkt", shape=diamond, color=yellow];
1169[label="149.208.70.37;s;4pkt 4fpkt", shape=diamond, color=yellow];
1782[label="200.247.195.60;s;1pkt 1fpkt", shape=diamond, color=yellow];
3647[label="211.45.250.37;242pkt 242fpkt", shape=pentagon, color=darkviolet];
5816[label="211.45.250.37;242pkt 242fpkt", shape=invtriangle, color=brown];
stat276[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.45.250.37:80, 148.29.24.129:*}[55.4217%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 26188: (0.301205%)&lt;BR/&gt; 1742: (0.301205%)&lt;BR/&gt; 56192: (0.200803%)&lt;BR/&gt; 48906: (0.200803%)&gt;];
}
10--466[label="0.5;1pkt 1fpkt"];
10--507[label="0.5;1pkt 1fpkt"];
10--1169[label="0.5;1pkt 1fpkt"];
10--1646[label="0.5;1pkt 1fpkt"];
10--3647[label="0.5;1pkt 1fpkt"];
10--5816[label="0.5;1pkt 1fpkt"];
466--1169[label="1;4pkt 4fpkt"];
466--1782[label="1;1pkt 1fpkt"];
466--5809[label="0.5;1pkt 1fpkt"];
1169--5809[label="0.5;1pkt 1fpkt"];
3647--5816[label="1;242pkt 242fpkt"];
</description>
    <slice>
      <filter dst_ip="148.29.24.129" src_ip="211.45.250.37" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_277{
style=filled;
color=gray75;
1724[label="138.186.49.130;d;76pkt 76fpkt", shape=diamond, color=yellow];
1785[label="215.219.116.169;s;5pkt 5fpkt", shape=diamond, color=yellow];
3103[label="215.219.116.169;s;5pkt 5fpkt", shape=hexagon, color=black];
3592[label="208.166.235.32;60pkt 60fpkt", shape=pentagon, color=darkviolet];
5784[label="208.166.235.32;61pkt 61fpkt", shape=invtriangle, color=brown];
7206[label="208.166.235.32;61pkt 61fpkt", shape=invhouse, color=bisque];
stat277[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.166.235.32:80, 138.186.49.130:*}[77.9221%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8134%)&lt;BR/&gt; 1381: (0.932836%)&lt;BR/&gt; 1492: (0.746269%)&lt;BR/&gt; 1491: (0.746269%)&lt;BR/&gt; 1490: (0.746269%)&gt;];
}
1724--1785[label="1;5pkt 5fpkt"];
1724--3103[label="1;5pkt 5fpkt"];
1724--3592[label="1;60pkt 60fpkt"];
1724--5784[label="0.983607;60pkt 60fpkt"];
1724--7206[label="0.983607;60pkt 60fpkt"];
1785--3103[label="1;5pkt 5fpkt"];
3592--5784[label="1;60pkt 60fpkt"];
3592--7206[label="1;60pkt 60fpkt"];
5784--7206[label="1;61pkt 61fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.49.130" src_ip="208.166.235.32" src_port="80"/>
    </slice>
    <from sec="1039669297" usec="0"/>
    <to sec="1039669792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645838,1.80177,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_278{
style=filled;
color=gray75;
1807[label="193.19.219.205;d;2pkt 2fpkt", shape=diamond, color=yellow];
1808[label="140.3.228.198;s;2pkt 2fpkt", shape=diamond, color=yellow];
5099[label="140.3.228.198;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6763[label="140.3.228.198;1pkt 1fpkt", shape=invtriangle, color=brown];
stat278[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.228.198:1433, 193.19.219.205:554}[50%]&lt;BR/&gt;{140.3.228.198:6972, 193.19.219.205:15434}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (28.5714%)&lt;BR/&gt; 554: (28.5714%)&lt;BR/&gt; 15434: (21.4286%)&lt;BR/&gt; 6972: (21.4286%)&gt;];
}
1807--1808[label="1;2pkt 2fpkt"];
1807--5099[label="1;2pkt 2fpkt"];
1807--6763[label="1;1pkt 1fpkt"];
1808--5099[label="1;2pkt 2fpkt"];
1808--6763[label="1;1pkt 1fpkt"];
5099--6763[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.19.219.205" dst_port="15434" src_ip="140.3.228.198" src_port="6972"/>
      <filter dst_ip="193.19.219.205" dst_port="554" src_ip="140.3.228.198" src_port="1433"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_279{
style=filled;
color=gray75;
995[label="172.93.208.26;d;1pkt 1fpkt", shape=diamond, color=yellow];
1810[label="152.31.29.238;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat279[shape=component, label=&lt;Rules:&lt;BR/&gt;{152.31.29.238:6080, 172.93.208.26:3137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6080: (50%)&lt;BR/&gt; 3137: (50%)&gt;];
}
995--1810[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.93.208.26" dst_port="3137" src_ip="152.31.29.238" src_port="6080"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_280{
style=filled;
color=gray75;
1575[label="208.211.246.11;d;1pkt 1fpkt", shape=diamond, color=yellow];
1822[label="140.3.234.130;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat280[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.234.130:8277, 208.211.246.11:8292}[50%]&lt;BR/&gt;{140.3.234.130:8198, 199.131.213.86:8194}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8292: (33.3333%)&lt;BR/&gt; 8277: (33.3333%)&lt;BR/&gt; 8198: (16.6667%)&lt;BR/&gt; 8194: (16.6667%)&gt;];
}
1575--1822[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.131.213.86" dst_port="8194" src_ip="140.3.234.130" src_port="8198"/>
      <filter dst_ip="208.211.246.11" dst_port="8292" src_ip="140.3.234.130" src_port="8277"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_281{
style=filled;
color=gray75;
1167[label="198.42.23.195;s;160pkt 160fpkt", shape=diamond, color=yellow];
1436[label="38.72.234.140;s;189pkt 189fpkt", shape=diamond, color=yellow];
1762[label="209.1.41.12;s;140pkt 140fpkt", shape=diamond, color=yellow];
1929[label="39.111.129.66;s;30pkt 30fpkt", shape=diamond, color=yellow];
2226[label="209.1.160.114;s;146pkt 146fpkt", shape=diamond, color=yellow];
2627[label="198.42.23.195;s;160pkt 160fpkt", shape=hexagon, color=black];
2836[label="38.72.234.140;s;189pkt 189fpkt", shape=hexagon, color=black];
2897[label="138.186.51.47;d;9pkt 9fpkt", shape=hexagon, color=black];
4341[label="197.151.219.109;51pkt 51fpkt", shape=pentagon, color=darkviolet];
4369[label="209.1.160.114;148pkt 148fpkt", shape=pentagon, color=darkviolet];
5383[label="208.166.171.234;22pkt 22fpkt", shape=pentagon, color=darkviolet];
5416[label="38.96.129.239;38pkt 38fpkt", shape=pentagon, color=darkviolet];
6265[label="197.151.219.109;51pkt 51fpkt", shape=invtriangle, color=brown];
6284[label="209.1.160.114;147pkt 147fpkt", shape=invtriangle, color=brown];
6949[label="208.166.171.234;22pkt 22fpkt", shape=invtriangle, color=brown];
7517[label="209.1.160.114;148pkt 148fpkt", shape=invhouse, color=bisque];
stat281[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 138.186.8.154:*}[52.2293%]&lt;BR/&gt;{38.72.234.140:80, *:*}[24.0764%]&lt;BR/&gt;{198.42.23.195:80, *:*}[20.3822%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7576%)&lt;BR/&gt; 39209: (0.121212%)&lt;BR/&gt; 39204: (0.121212%)&lt;BR/&gt; 39203: (0.121212%)&lt;BR/&gt; 39195: (0.121212%)&gt;];
}
1167--1506[label="0.00671141;1pkt 1fpkt"];
1167--2037[label="0.222222;2pkt 2fpkt"];
1167--2627[label="1;160pkt 160fpkt"];
1167--2884[label="0.00671141;1pkt 1fpkt"];
1167--2897[label="0.222222;2pkt 2fpkt"];
1167--5064[label="1;160pkt 160fpkt"];
1167--6738[label="1;160pkt 160fpkt"];
1436--1505[label="0.026455;5pkt 5fpkt"];
1436--1759[label="0.211864;25pkt 25fpkt"];
1436--2836[label="1;189pkt 189fpkt"];
1436--3098[label="0.211864;25pkt 25fpkt"];
1436--4596[label="1;189pkt 189fpkt"];
1436--6438[label="0.994709;188pkt 188fpkt"];
1436--7617[label="1;189pkt 189fpkt"];
1762--3357[label="1;139pkt 139fpkt"];
1929--2817[label="0.266667;8pkt 8fpkt"];
1929--2871[label="0.133333;4pkt 4fpkt"];
1929--3061[label="0.1;3pkt 3fpkt"];
1929--3920[label="0.966667;29pkt 29fpkt"];
1929--5995[label="0.966667;29pkt 29fpkt"];
1929--7341[label="0.966667;29pkt 29fpkt"];
2226--4369[label="1;146pkt 146fpkt"];
2226--6284[label="0.993151;145pkt 145fpkt"];
2226--7517[label="1;146pkt 146fpkt"];
2627--2884[label="0.00671141;1pkt 1fpkt"];
2627--2897[label="0.222222;2pkt 2fpkt"];
2627--5064[label="1;160pkt 160fpkt"];
2627--6738[label="1;160pkt 160fpkt"];
2836--3098[label="0.211864;25pkt 25fpkt"];
2836--4596[label="1;189pkt 189fpkt"];
2836--6438[label="0.994709;188pkt 188fpkt"];
2836--7617[label="1;189pkt 189fpkt"];
2897--3648[label="0.333333;3pkt 3fpkt"];
2897--5064[label="0.222222;2pkt 2fpkt"];
2897--6738[label="0.222222;2pkt 2fpkt"];
4341--6265[label="1;51pkt 51fpkt"];
4341--7504[label="1;50pkt 50fpkt"];
4369--6284[label="1;147pkt 147fpkt"];
4369--7517[label="1;148pkt 148fpkt"];
5383--6949[label="1;22pkt 22fpkt"];
5383--7956[label="1;21pkt 21fpkt"];
5416--6970[label="1;37pkt 37fpkt"];
5416--7969[label="1;37pkt 37fpkt"];
6265--7504[label="1;50pkt 50fpkt"];
6284--7517[label="1;147pkt 147fpkt"];
6949--7956[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter src_ip="38.72.234.140" src_port="80"/>
      <filter src_ip="198.42.23.195" src_port="80"/>
      <filter dst_ip="138.186.8.154" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="148.110.48.138"/>
      <from sec="1039669201" usec="0"/>
      <to sec="1039669848" usec="0"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_284{
style=filled;
color=gray75;
461[label="138.186.8.17;s;489pkt 489fpkt", shape=diamond, color=yellow];
3417[label="138.186.8.17;843pkt 843fpkt", shape=pentagon, color=darkviolet];
5669[label="138.186.8.17;843pkt 843fpkt", shape=invtriangle, color=brown];
7136[label="138.186.8.17;843pkt 843fpkt", shape=invhouse, color=bisque];
stat284[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.8.17:63538, *:53}[53.7367%]&lt;BR/&gt;{138.186.8.17:53, *:*}[42.8233%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (52.1703%)&lt;BR/&gt; 63538: (27.2366%)&lt;BR/&gt; 0: (3.34659%)&lt;BR/&gt; 1053: (0.513585%)&lt;BR/&gt; 32769: (0.447316%)&gt;];
}
461--1883[label="0.0243902;1pkt 1fpkt"];
461--3417[label="1;489pkt 489fpkt"];
461--5669[label="1;489pkt 489fpkt"];
461--7136[label="1;489pkt 489fpkt"];
3417--5669[label="1;843pkt 843fpkt"];
3417--7136[label="1;843pkt 843fpkt"];
5669--7136[label="1;843pkt 843fpkt"];
</description>
    <slice>
      <filter src_ip="138.186.8.17" src_port="53"/>
      <filter dst_port="53" src_ip="138.186.8.17" src_port="63538"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_285{
style=filled;
color=gray75;
1011[label="64.161.75.120;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat285[shape=component, label=&lt;Rules:&lt;BR/&gt;{64.161.75.120:6699, 138.186.218.131:2967}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 2967: (50%)&gt;];
}
1011--2489[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.218.131" dst_port="2967" src_ip="64.161.75.120" src_port="6699"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669514" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_286{
style=filled;
color=gray75;
1828[label="138.186.177.18;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat286[shape=component, label=&lt;Rules:&lt;BR/&gt;{64.232.126.14:6699, 138.186.177.18:1152}[50%]&lt;BR/&gt;{211.90.155.52:1863, 138.186.177.18:1039}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (25%)&lt;BR/&gt; 1863: (25%)&lt;BR/&gt; 1152: (25%)&lt;BR/&gt; 1039: (25%)&gt;];
}
1828--2060[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.177.18" dst_port="1039" src_ip="211.90.155.52" src_port="1863"/>
      <filter dst_ip="138.186.177.18" dst_port="1152" src_ip="64.232.126.14" src_port="6699"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_287{
style=filled;
color=gray75;
1132[label="199.94.214.198;s;28pkt 28fpkt", shape=diamond, color=yellow];
1867[label="140.3.136.10;d;18pkt 18fpkt", shape=diamond, color=yellow];
5098[label="199.94.214.198;28pkt 28fpkt", shape=pentagon, color=darkviolet];
stat287[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 140.3.136.10:*}[43.9024%]&lt;BR/&gt;{199.94.214.198:80, 214.216.50.132:*}[24.3902%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.5676%)&lt;BR/&gt; 6346: (4.05405%)&lt;BR/&gt; 1863: (2.7027%)&lt;BR/&gt; 39853: (2.02703%)&lt;BR/&gt; 39852: (2.02703%)&gt;];
}
1132--1855[label="0.107143;3pkt 3fpkt"];
1132--1867[label="0.277778;5pkt 5fpkt"];
1132--2122[label="0.357143;10pkt 10fpkt"];
1132--2930[label="0.107143;3pkt 3fpkt"];
1132--5098[label="1;28pkt 28fpkt"];
1132--6762[label="1;28pkt 28fpkt"];
1132--7828[label="1;27pkt 27fpkt"];
1867--1897[label="0.111111;2pkt 2fpkt"];
1867--2820[label="0.111111;2pkt 2fpkt"];
1867--3649[label="0.111111;2pkt 2fpkt"];
1867--5098[label="0.277778;5pkt 5fpkt"];
1867--5817[label="0.111111;2pkt 2fpkt"];
1867--6762[label="0.277778;5pkt 5fpkt"];
1867--7828[label="0.277778;5pkt 5fpkt"];
5098--6762[label="1;28pkt 28fpkt"];
5098--7828[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.136.10"/>
      <filter dst_ip="214.216.50.132" src_ip="199.94.214.198" src_port="80"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11796,1.82888,503,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_288{
style=filled;
color=gray75;
216[label="215.166.83.123s;1pkt 1fpkt", shape=rectangle, color=red];
1960[label="36.192.27.123;s;98pkt 98fpkt", shape=diamond, color=yellow];
2976[label="36.192.27.123;s;98pkt 98fpkt", shape=hexagon, color=black];
4440[label="36.192.27.123;124pkt 124fpkt", shape=pentagon, color=darkviolet];
6331[label="36.192.27.123;123pkt 123fpkt", shape=invtriangle, color=brown];
stat288[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.192.27.123:80, 214.231.185.25:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 40947: (0.563063%)&lt;BR/&gt; 40883: (0.45045%)&lt;BR/&gt; 40879: (0.45045%)&lt;BR/&gt; 40878: (0.45045%)&gt;];
}
216--475[label="1;1pkt 1fpkt"];
216--1960[label="1;1pkt 1fpkt"];
216--2976[label="1;1pkt 1fpkt"];
216--4440[label="1;1pkt 1fpkt"];
216--6331[label="1;1pkt 1fpkt"];
1960--2976[label="1;98pkt 98fpkt"];
1960--4440[label="1;98pkt 98fpkt"];
1960--6331[label="1;98pkt 98fpkt"];
2976--4440[label="1;98pkt 98fpkt"];
2976--6331[label="1;98pkt 98fpkt"];
4440--6331[label="1;123pkt 123fpkt"];
</description>
    <slice>
      <filter dst_ip="214.231.185.25" src_ip="36.192.27.123" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669802" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="220.236.93.200"/>
      <from sec="1039669515" usec="0"/>
      <to sec="1039669647" usec="0"/>
    </slice>
    <from sec="1039669515" usec="0"/>
    <to sec="1039669647" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645838,1.80177,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_290{
style=filled;
color=gray75;
1955[label="140.3.137.59;s;30pkt 30fpkt", shape=diamond, color=yellow];
1992[label="222.186.0.110;d;4pkt 4fpkt", shape=diamond, color=yellow];
3852[label="140.3.137.59;31pkt 31fpkt", shape=pentagon, color=darkviolet];
5949[label="140.3.137.59;31pkt 31fpkt", shape=invtriangle, color=brown];
stat290[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.137.59:*, 222.186.0.108:80}[37.5%]&lt;BR/&gt;{140.3.137.59:*, 192.254.161.177:80}[28.125%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1754: (2.08333%)&lt;BR/&gt; 1753: (2.08333%)&lt;BR/&gt; 1752: (2.08333%)&lt;BR/&gt; 1751: (1.5625%)&gt;];
}
1955--1992[label="1;4pkt 4fpkt"];
1955--3852[label="0.966667;29pkt 29fpkt"];
1955--5949[label="0.966667;29pkt 29fpkt"];
1992--3852[label="0.75;3pkt 3fpkt"];
1992--5949[label="0.75;3pkt 3fpkt"];
3852--5949[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="222.186.0.108" dst_port="80" src_ip="140.3.137.59"/>
      <filter dst_ip="192.254.161.177" dst_port="80" src_ip="140.3.137.59"/>
    </slice>
    <from sec="1039669210" usec="0"/>
    <to sec="1039669683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_291{
style=filled;
color=gray75;
2003[label="140.3.87.137;s;24pkt 24fpkt", shape=diamond, color=yellow];
2004[label="96.3.43.82;d;24pkt 24fpkt", shape=diamond, color=yellow];
4573[label="140.3.87.137;23pkt 23fpkt", shape=pentagon, color=darkviolet];
stat291[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.87.137:80, 96.3.43.82:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1533: (2.11268%)&lt;BR/&gt; 1532: (2.11268%)&lt;BR/&gt; 1531: (2.11268%)&lt;BR/&gt; 1530: (2.11268%)&gt;];
}
2003--2004[label="1;24pkt 24fpkt"];
2003--4573[label="1;23pkt 23fpkt"];
2004--4573[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="96.3.43.82" src_ip="140.3.87.137" src_port="80"/>
    </slice>
    <from sec="1039669569" usec="0"/>
    <to sec="1039669644" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_292{
style=filled;
color=gray75;
2002[label="140.3.87.137;d;24pkt 24fpkt", shape=diamond, color=yellow];
2005[label="96.3.43.82;s;24pkt 24fpkt", shape=diamond, color=yellow];
4078[label="96.3.43.82;23pkt 23fpkt", shape=pentagon, color=darkviolet];
6094[label="96.3.43.82;23pkt 23fpkt", shape=invtriangle, color=brown];
7405[label="96.3.43.82;24pkt 24fpkt", shape=invhouse, color=bisque];
stat292[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.3.43.82:*, 140.3.87.137:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1533: (2.11864%)&lt;BR/&gt; 1532: (2.11864%)&lt;BR/&gt; 1531: (2.11864%)&lt;BR/&gt; 1530: (2.11864%)&gt;];
}
2002--2005[label="1;24pkt 24fpkt"];
2002--4078[label="1;23pkt 23fpkt"];
2002--6094[label="1;23pkt 23fpkt"];
2002--7405[label="1;24pkt 24fpkt"];
2005--4078[label="1;23pkt 23fpkt"];
2005--6094[label="1;23pkt 23fpkt"];
2005--7405[label="1;24pkt 24fpkt"];
4078--6094[label="1;23pkt 23fpkt"];
4078--7405[label="1;23pkt 23fpkt"];
6094--7405[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.87.137" dst_port="80" src_ip="96.3.43.82"/>
    </slice>
    <from sec="1039669569" usec="0"/>
    <to sec="1039669644" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_293{
style=filled;
color=gray75;
1793[label="193.19.219.143;d;2pkt 2fpkt", shape=diamond, color=yellow];
2025[label="148.110.65.19;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat293[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.110.65.19:1122, 193.19.219.143:554}[50%]&lt;BR/&gt;{148.110.65.19:6972, 193.19.219.143:9126}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9126: (25%)&lt;BR/&gt; 6972: (25%)&lt;BR/&gt; 1122: (25%)&lt;BR/&gt; 554: (25%)&gt;];
}
1793--2025[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="193.19.219.143" dst_port="9126" src_ip="148.110.65.19" src_port="6972"/>
      <filter dst_ip="193.19.219.143" dst_port="554" src_ip="148.110.65.19" src_port="1122"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14144,1.92665,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_294{
style=filled;
color=gray75;
155[label="202.85.133.60s;1pkt 1fpkt", shape=rectangle, color=red];
156[label="96.208.161.60s;1pkt 1fpkt", shape=rectangle, color=red];
2041[label="215.90.90.65;d;30pkt 30fpkt", shape=diamond, color=yellow];
2899[label="215.90.90.65;d;29pkt 29fpkt", shape=hexagon, color=black];
stat294[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 215.90.90.65:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (8.19672%)&lt;BR/&gt; 9999: (6.55738%)&lt;BR/&gt; 4200: (5.7377%)&lt;BR/&gt; 7777: (4.91803%)&lt;BR/&gt; 6666: (4.91803%)&gt;];
}
155--156[label="1;1pkt 1fpkt"];
155--2041[label="1;1pkt 1fpkt"];
155--2899[label="1;1pkt 1fpkt"];
156--2041[label="1;1pkt 1fpkt"];
156--2899[label="1;1pkt 1fpkt"];
2041--2899[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.90.65"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_295{
style=filled;
color=gray75;
1554[label="215.90.76.62;d;2pkt 2fpkt", shape=diamond, color=yellow];
2048[label="64.144.54.62;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat295[shape=component, label=&lt;Rules:&lt;BR/&gt;{64.144.54.62:6699, 215.90.76.62:3098}[50%]&lt;BR/&gt;{99.76.8.100:6699, 215.90.76.62:2991}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3098: (33.3333%)&lt;BR/&gt; 2991: (16.6667%)&gt;];
}
1554--2048[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.76.62" dst_port="2991" src_ip="99.76.8.100" src_port="6699"/>
      <filter dst_ip="215.90.76.62" dst_port="3098" src_ip="64.144.54.62" src_port="6699"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="169.126.166.90"/>
      <from sec="1039669200" usec="0"/>
      <to sec="1039669848" usec="0"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.17121,1.84455,999,1 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_297{
style=filled;
color=gray75;
316[label="196.12.95.230s;1pkt 1fpkt", shape=rectangle, color=red];
2052[label="60.153.19.230;s;1pkt 1fpkt", shape=diamond, color=yellow];
2910[label="60.153.19.230;s;1pkt 1fpkt", shape=hexagon, color=black];
5343[label="60.153.19.230;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7939[label="60.153.19.230;1pkt 1fpkt", shape=invhouse, color=bisque];
stat297[shape=component, label=&lt;Rules:&lt;BR/&gt;{60.153.19.230:4662, 172.93.103.255:3681}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 3681: (50%)&gt;];
}
316--816[label="1;1pkt 1fpkt"];
316--2052[label="1;1pkt 1fpkt"];
316--2572[label="1;1pkt 1fpkt"];
316--2910[label="1;1pkt 1fpkt"];
316--5343[label="1;1pkt 1fpkt"];
316--7939[label="1;1pkt 1fpkt"];
2052--2572[label="1;1pkt 1fpkt"];
2052--2910[label="1;1pkt 1fpkt"];
2052--5343[label="1;1pkt 1fpkt"];
2052--7939[label="1;1pkt 1fpkt"];
2910--5343[label="1;1pkt 1fpkt"];
2910--7939[label="1;1pkt 1fpkt"];
5343--7939[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.93.103.255" dst_port="3681" src_ip="60.153.19.230" src_port="4662"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="138.186.177.18"/>
      <from sec="1039669200" usec="0"/>
      <to sec="1039669757" usec="0"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669757" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.916727,1.89524,999,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_299{
style=filled;
color=gray75;
162[label="64.3.11.65s;1pkt 1fpkt", shape=rectangle, color=red];
2072[label="33.112.47.147;d;1pkt 1fpkt", shape=diamond, color=yellow];
2073[label="138.186.51.65;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat299[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.51.65:1357, 33.112.47.147:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1357: (50%)&gt;];
}
162--2072[label="1;1pkt 1fpkt"];
162--2073[label="1;1pkt 1fpkt"];
2072--2073[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="33.112.47.147" dst_port="6699" src_ip="138.186.51.65" src_port="1357"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.937874,1.83478,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_300{
style=filled;
color=gray75;
1114[label="140.3.214.203;s;376pkt 376fpkt", shape=diamond, color=yellow];
1277[label="172.93.129.191;s;32pkt 32fpkt", shape=diamond, color=yellow];
1457[label="38.64.190.133;d;6pkt 6fpkt", shape=diamond, color=yellow];
2549[label="140.3.214.203;s;219pkt 219fpkt", shape=hexagon, color=black];
3242[label="140.3.55.4;20pkt 20fpkt", shape=pentagon, color=darkviolet];
5559[label="140.3.55.4;20pkt 20fpkt", shape=invtriangle, color=brown];
stat300[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.214.203:65115, *:53}[80.8411%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (42.5706%)&lt;BR/&gt; 65115: (40.5646%)&lt;BR/&gt; 80: (5.42348%)&lt;BR/&gt; 0: (3.41753%)&lt;BR/&gt; 3930: (0.297177%)&gt;];
}
1114--1608[label="0.0169492;1pkt 1fpkt"];
1114--1883[label="0.0243902;1pkt 1fpkt"];
1114--2549[label="1;219pkt 219fpkt"];
1277--1457[label="1;6pkt 6fpkt"];
1277--2035[label="0.03125;1pkt 1fpkt"];
1277--2763[label="0.5;3pkt 3fpkt"];
1277--2890[label="0.333333;4pkt 4fpkt"];
3242--5559[label="1;20pkt 20fpkt"];
3242--7072[label="1;20pkt 20fpkt"];
5559--7072[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="140.3.214.203" src_port="65115"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669903" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_301{
style=filled;
color=gray75;
4498[label="140.3.55.130;35pkt 35fpkt", shape=pentagon, color=darkviolet];
6372[label="140.3.55.130;35pkt 35fpkt", shape=invtriangle, color=brown];
stat301[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.55.130:*, 143.188.226.199:80}[88.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1587: (1.42857%)&lt;BR/&gt; 1586: (1.42857%)&lt;BR/&gt; 1585: (1.42857%)&lt;BR/&gt; 1490: (1.42857%)&gt;];
}
4498--6372[label="1;35pkt 35fpkt"];
4498--7575[label="1;35pkt 35fpkt"];
6372--7575[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="143.188.226.199" dst_port="80" src_ip="140.3.55.130"/>
    </slice>
    <from sec="1039669217" usec="0"/>
    <to sec="1039669711" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_302{
style=filled;
color=gray75;
578[label="138.186.8.16;s;283pkt 283fpkt", shape=diamond, color=yellow];
579[label="38.72.235.84;d;1pkt 1fpkt", shape=diamond, color=yellow];
2101[label="39.111.172.4;d;31pkt 31fpkt", shape=diamond, color=yellow];
stat302[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.8.16:*, *:25}[76.873%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.0952%)&lt;BR/&gt; 110: (1.74603%)&lt;BR/&gt; 64960: (0.31746%)&lt;BR/&gt; 64531: (0.31746%)&lt;BR/&gt; 64425: (0.31746%)&gt;];
}
578--579[label="1;1pkt 1fpkt"];
578--2101[label="0.225806;7pkt 7fpkt"];
2101--2140[label="0.0322581;1pkt 1fpkt"];
2101--2952[label="0.0322581;1pkt 1fpkt"];
2101--3019[label="0.645161;20pkt 20fpkt"];
2101--3576[label="0.0322581;1pkt 1fpkt"];
2101--4098[label="0.0322581;1pkt 1fpkt"];
2101--4240[label="0.645161;20pkt 20fpkt"];
2101--6106[label="0.0322581;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="138.186.8.16"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_303{
style=filled;
color=gray75;
702[label="169.126.142.97;d;511pkt 511fpkt", shape=diamond, color=yellow];
1082[label="169.126.247.0;d;80pkt 80fpkt", shape=diamond, color=yellow];
2350[label="39.111.172.21;s;32pkt 32fpkt", shape=diamond, color=yellow];
2797[label="169.126.247.4;d;39pkt 39fpkt", shape=hexagon, color=black];
2949[label="140.3.217.217;d;51pkt 51fpkt", shape=hexagon, color=black];
3018[label="169.126.142.97;d;511pkt 511fpkt", shape=hexagon, color=black];
3084[label="39.111.172.21;s;32pkt 32fpkt", shape=hexagon, color=black];
3349[label="38.208.132.11;31pkt 31fpkt", shape=pentagon, color=darkviolet];
3554[label="38.64.148.28;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3656[label="215.22.167.38;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3776[label="215.191.28.52;18pkt 18fpkt", shape=pentagon, color=darkviolet];
3787[label="215.191.28.53;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3841[label="39.111.214.58;21pkt 21fpkt", shape=pentagon, color=darkviolet];
3921[label="198.24.148.66;24pkt 24fpkt", shape=pentagon, color=darkviolet];
3971[label="39.111.174.71;22pkt 22fpkt", shape=pentagon, color=darkviolet];
4145[label="38.209.187.88;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4576[label="39.111.214.137;12pkt 12fpkt", shape=pentagon, color=darkviolet];
4862[label="38.64.150.169;21pkt 21fpkt", shape=pentagon, color=darkviolet];
4904[label="39.111.175.174;36pkt 36fpkt", shape=pentagon, color=darkviolet];
4943[label="215.26.179.179;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5392[label="215.21.4.236;20pkt 20fpkt", shape=pentagon, color=darkviolet];
5761[label="38.64.148.28;18pkt 18fpkt", shape=invtriangle, color=brown];
5821[label="215.22.167.38;12pkt 12fpkt", shape=invtriangle, color=brown];
5902[label="215.191.28.52;18pkt 18fpkt", shape=invtriangle, color=brown];
5943[label="39.111.214.58;20pkt 20fpkt", shape=invtriangle, color=brown];
5996[label="198.24.148.66;24pkt 24fpkt", shape=invtriangle, color=brown];
6428[label="39.111.214.137;11pkt 11fpkt", shape=invtriangle, color=brown];
6615[label="38.64.150.169;21pkt 21fpkt", shape=invtriangle, color=brown];
6646[label="39.111.175.174;35pkt 35fpkt", shape=invtriangle, color=brown];
6670[label="215.26.179.179;9pkt 9fpkt", shape=invtriangle, color=brown];
6954[label="215.21.4.236;20pkt 20fpkt", shape=invtriangle, color=brown];
7197[label="38.64.148.28;17pkt 17fpkt", shape=invhouse, color=bisque];
7283[label="215.191.28.52;18pkt 18fpkt", shape=invhouse, color=bisque];
7308[label="39.111.214.58;21pkt 21fpkt", shape=invhouse, color=bisque];
7610[label="39.111.214.137;11pkt 11fpkt", shape=invhouse, color=bisque];
7733[label="38.64.150.169;22pkt 22fpkt", shape=invhouse, color=bisque];
7960[label="215.21.4.236;21pkt 21fpkt", shape=invhouse, color=bisque];
stat303[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, 169.126.142.97:*}[54.2567%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (46.6539%)&lt;BR/&gt; 80: (1.64564%)&lt;BR/&gt; 113: (1.09709%)&lt;BR/&gt; 53: (0.41141%)&lt;BR/&gt; 36772: (0.329128%)&gt;];
}
702--768[label="0.727273;8pkt 8fpkt"];
702--1163[label="0.761905;16pkt 16fpkt"];
702--1403[label="1;11pkt 11fpkt"];
702--2102[label="0.606061;20pkt 20fpkt"];
702--2350[label="0.75;24pkt 24fpkt"];
702--2356[label="0.548387;17pkt 17fpkt"];
702--2550[label="0.571429;4pkt 4fpkt"];
702--2716[label="0.761905;16pkt 16fpkt"];
702--3018[label="1;511pkt 511fpkt"];
702--3046[label="0.606061;20pkt 20fpkt"];
702--3084[label="0.75;24pkt 24fpkt"];
702--3089[label="0.548387;17pkt 17fpkt"];
702--3185[label="0.00587084;3pkt 3fpkt"];
702--3225[label="0.53125;17pkt 17fpkt"];
702--3255[label="0.555556;20pkt 20fpkt"];
702--3311[label="0.37037;10pkt 10fpkt"];
702--3342[label="0.5;10pkt 10fpkt"];
702--3349[label="0.354839;11pkt 11fpkt"];
702--3410[label="0.444444;8pkt 8fpkt"];
702--3470[label="0.285714;2pkt 2fpkt"];
702--3554[label="0.0588235;1pkt 1fpkt"];
702--3656[label="1;12pkt 12fpkt"];
702--3776[label="0.722222;13pkt 13fpkt"];
702--3787[label="1;9pkt 9fpkt"];
702--3841[label="0.619048;13pkt 13fpkt"];
702--3921[label="0.333333;8pkt 8fpkt"];
702--3971[label="0.727273;16pkt 16fpkt"];
702--4145[label="0.3125;5pkt 5fpkt"];
702--4185[label="0.388889;7pkt 7fpkt"];
702--4540[label="0.142857;2pkt 2fpkt"];
702--4576[label="0.583333;7pkt 7fpkt"];
702--4812[label="0.387097;12pkt 12fpkt"];
702--4862[label="0.0952381;2pkt 2fpkt"];
702--4904[label="0.638889;23pkt 23fpkt"];
702--4943[label="0.5;5pkt 5fpkt"];
702--5392[label="0.65;13pkt 13fpkt"];
702--5605[label="0.37037;10pkt 10fpkt"];
702--5665[label="0.411765;7pkt 7fpkt"];
702--5706[label="0.285714;2pkt 2fpkt"];
702--5761[label="0.111111;2pkt 2fpkt"];
702--5821[label="1;12pkt 12fpkt"];
702--5902[label="0.722222;13pkt 13fpkt"];
702--5943[label="0.6;12pkt 12fpkt"];
702--5996[label="0.333333;8pkt 8fpkt"];
702--6402[label="0.0769231;1pkt 1fpkt"];
702--6428[label="0.545455;6pkt 6fpkt"];
702--6615[label="0.0952381;2pkt 2fpkt"];
702--6646[label="0.628571;22pkt 22fpkt"];
702--6670[label="0.444444;4pkt 4fpkt"];
702--6954[label="0.65;13pkt 13fpkt"];
702--7101[label="0.346154;9pkt 9fpkt"];
702--7133[label="0.444444;8pkt 8fpkt"];
702--7160[label="0.375;3pkt 3fpkt"];
702--7197[label="0.0588235;1pkt 1fpkt"];
702--7283[label="0.722222;13pkt 13fpkt"];
702--7308[label="0.619048;13pkt 13fpkt"];
702--7610[label="0.545455;6pkt 6fpkt"];
702--7733[label="0.136364;3pkt 3fpkt"];
702--7960[label="0.666667;14pkt 14fpkt"];
1082--3554[label="0.176471;3pkt 3fpkt"];
1082--3921[label="0.0416667;1pkt 1fpkt"];
1082--4185[label="0.111111;2pkt 2fpkt"];
1082--4862[label="0.190476;4pkt 4fpkt"];
1082--4943[label="0.4;4pkt 4fpkt"];
1082--5071[label="0.285714;2pkt 2fpkt"];
1082--5392[label="0.15;3pkt 3fpkt"];
1082--5761[label="0.166667;3pkt 3fpkt"];
1082--5996[label="0.0416667;1pkt 1fpkt"];
1082--6615[label="0.190476;4pkt 4fpkt"];
1082--6670[label="0.444444;4pkt 4fpkt"];
1082--6742[label="0.285714;2pkt 2fpkt"];
1082--6954[label="0.15;3pkt 3fpkt"];
1082--7197[label="0.176471;3pkt 3fpkt"];
1082--7733[label="0.181818;4pkt 4fpkt"];
1082--7960[label="0.142857;3pkt 3fpkt"];
2350--3018[label="0.75;24pkt 24fpkt"];
2350--3084[label="1;32pkt 32fpkt"];
2797--3470[label="0.142857;1pkt 1fpkt"];
2797--3554[label="0.117647;2pkt 2fpkt"];
2797--3921[label="0.0416667;1pkt 1fpkt"];
2797--4145[label="0.0625;1pkt 1fpkt"];
2797--4862[label="0.0952381;2pkt 2fpkt"];
2797--5311[label="0.5;1pkt 1fpkt"];
2797--5392[label="0.1;2pkt 2fpkt"];
2797--5706[label="0.142857;1pkt 1fpkt"];
2797--5761[label="0.111111;2pkt 2fpkt"];
2797--5996[label="0.0416667;1pkt 1fpkt"];
2797--6615[label="0.0952381;2pkt 2fpkt"];
2797--6900[label="0.5;1pkt 1fpkt"];
2797--6954[label="0.1;2pkt 2fpkt"];
2797--7160[label="0.125;1pkt 1fpkt"];
2797--7197[label="0.117647;2pkt 2fpkt"];
2797--7733[label="0.0909091;2pkt 2fpkt"];
2797--7927[label="0.5;1pkt 1fpkt"];
2797--7960[label="0.0952381;2pkt 2fpkt"];
2949--3342[label="0.15;3pkt 3fpkt"];
2949--3410[label="0.0555556;1pkt 1fpkt"];
2949--3554[label="0.117647;2pkt 2fpkt"];
2949--3841[label="0.0952381;2pkt 2fpkt"];
2949--4576[label="0.166667;2pkt 2fpkt"];
2949--4862[label="0.0952381;2pkt 2fpkt"];
2949--4904[label="0.0555556;2pkt 2fpkt"];
2949--5317[label="0.0588235;3pkt 3fpkt"];
2949--5491[label="0.2;1pkt 1fpkt"];
2949--5665[label="0.0588235;1pkt 1fpkt"];
2949--5761[label="0.111111;2pkt 2fpkt"];
2949--5943[label="0.1;2pkt 2fpkt"];
2949--6428[label="0.181818;2pkt 2fpkt"];
2949--6615[label="0.0952381;2pkt 2fpkt"];
2949--6646[label="0.0571429;2pkt 2fpkt"];
2949--7029[label="0.2;1pkt 1fpkt"];
2949--7133[label="0.0555556;1pkt 1fpkt"];
2949--7197[label="0.117647;2pkt 2fpkt"];
2949--7308[label="0.0952381;2pkt 2fpkt"];
2949--7610[label="0.181818;2pkt 2fpkt"];
2949--7733[label="0.0909091;2pkt 2fpkt"];
3018--3046[label="0.606061;20pkt 20fpkt"];
3018--3084[label="0.75;24pkt 24fpkt"];
3018--3089[label="0.548387;17pkt 17fpkt"];
3018--3185[label="0.00587084;3pkt 3fpkt"];
3018--3225[label="0.53125;17pkt 17fpkt"];
3018--3255[label="0.555556;20pkt 20fpkt"];
3018--3311[label="0.37037;10pkt 10fpkt"];
3018--3342[label="0.5;10pkt 10fpkt"];
3018--3349[label="0.354839;11pkt 11fpkt"];
3018--3410[label="0.444444;8pkt 8fpkt"];
3018--3470[label="0.285714;2pkt 2fpkt"];
3018--3554[label="0.0588235;1pkt 1fpkt"];
3018--3656[label="1;12pkt 12fpkt"];
3018--3776[label="0.722222;13pkt 13fpkt"];
3018--3787[label="1;9pkt 9fpkt"];
3018--3841[label="0.619048;13pkt 13fpkt"];
3018--3921[label="0.333333;8pkt 8fpkt"];
3018--3971[label="0.727273;16pkt 16fpkt"];
3018--4145[label="0.3125;5pkt 5fpkt"];
3018--4185[label="0.388889;7pkt 7fpkt"];
3018--4540[label="0.142857;2pkt 2fpkt"];
3018--4576[label="0.583333;7pkt 7fpkt"];
3018--4812[label="0.387097;12pkt 12fpkt"];
3018--4862[label="0.0952381;2pkt 2fpkt"];
3018--4904[label="0.638889;23pkt 23fpkt"];
3018--4943[label="0.5;5pkt 5fpkt"];
3018--5392[label="0.65;13pkt 13fpkt"];
3018--5605[label="0.37037;10pkt 10fpkt"];
3018--5665[label="0.411765;7pkt 7fpkt"];
3018--5706[label="0.285714;2pkt 2fpkt"];
3018--5761[label="0.111111;2pkt 2fpkt"];
3018--5821[label="1;12pkt 12fpkt"];
3018--5902[label="0.722222;13pkt 13fpkt"];
3018--5943[label="0.6;12pkt 12fpkt"];
3018--5996[label="0.333333;8pkt 8fpkt"];
3018--6402[label="0.0769231;1pkt 1fpkt"];
3018--6428[label="0.545455;6pkt 6fpkt"];
3018--6615[label="0.0952381;2pkt 2fpkt"];
3018--6646[label="0.628571;22pkt 22fpkt"];
3018--6670[label="0.444444;4pkt 4fpkt"];
3018--6954[label="0.65;13pkt 13fpkt"];
3018--7101[label="0.346154;9pkt 9fpkt"];
3018--7133[label="0.444444;8pkt 8fpkt"];
3018--7160[label="0.375;3pkt 3fpkt"];
3018--7197[label="0.0588235;1pkt 1fpkt"];
3018--7283[label="0.722222;13pkt 13fpkt"];
3018--7308[label="0.619048;13pkt 13fpkt"];
3018--7610[label="0.545455;6pkt 6fpkt"];
3018--7733[label="0.136364;3pkt 3fpkt"];
3018--7960[label="0.666667;14pkt 14fpkt"];
3554--5761[label="1;17pkt 17fpkt"];
3554--7197[label="1;17pkt 17fpkt"];
3656--5821[label="1;12pkt 12fpkt"];
3776--5902[label="1;18pkt 18fpkt"];
3776--7283[label="1;18pkt 18fpkt"];
3841--5943[label="1;20pkt 20fpkt"];
3841--7308[label="1;21pkt 21fpkt"];
3921--5996[label="1;24pkt 24fpkt"];
4576--6428[label="1;11pkt 11fpkt"];
4576--7610[label="1;11pkt 11fpkt"];
4862--6615[label="1;21pkt 21fpkt"];
4862--7733[label="1;21pkt 21fpkt"];
4904--6646[label="1;35pkt 35fpkt"];
4943--6670[label="1;9pkt 9fpkt"];
5392--6954[label="1;20pkt 20fpkt"];
5392--7960[label="1;20pkt 20fpkt"];
5761--7197[label="1;17pkt 17fpkt"];
5902--7283[label="1;18pkt 18fpkt"];
5943--7308[label="1;20pkt 20fpkt"];
6428--7610[label="1;11pkt 11fpkt"];
6615--7733[label="1;21pkt 21fpkt"];
6954--7960[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="169.126.142.97" src_port="25"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="148.110.50.232"/>
      <from sec="1039669201" usec="0"/>
      <to sec="1039669758" usec="0"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669758" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_305{
style=filled;
color=gray75;
1375[label="199.94.146.121;s;163pkt 163fpkt", shape=diamond, color=yellow];
2107[label="140.3.105.65;d;100pkt 100fpkt", shape=diamond, color=yellow];
2113[label="140.3.144.74;d;95pkt 95fpkt", shape=diamond, color=yellow];
2319[label="172.93.72.5;d;90pkt 90fpkt", shape=diamond, color=yellow];
2939[label="140.3.105.65;d;77pkt 77fpkt", shape=hexagon, color=black];
stat305[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.94.146.121:80, 140.3.105.65:*}[33.564%]&lt;BR/&gt;{199.94.146.121:80, 140.3.144.74:*}[32.872%]&lt;BR/&gt;{199.94.146.121:80, 172.93.72.5:*}[30.7958%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4286%)&lt;BR/&gt; 1863: (0.571429%)&lt;BR/&gt; 1374: (0.47619%)&lt;BR/&gt; 1373: (0.47619%)&lt;BR/&gt; 1372: (0.47619%)&gt;];
}
1375--2107[label="0.53;53pkt 53fpkt"];
1375--2113[label="0.610526;58pkt 58fpkt"];
1375--2319[label="0.533333;48pkt 48fpkt"];
1375--2939[label="0.688312;53pkt 53fpkt"];
2107--2939[label="1;77pkt 77fpkt"];
2107--3450[label="0.111111;1pkt 1fpkt"];
2107--5692[label="0.1;1pkt 1fpkt"];
2107--7151[label="0.111111;1pkt 1fpkt"];
2939--3450[label="0.111111;1pkt 1fpkt"];
2939--5692[label="0.1;1pkt 1fpkt"];
2939--7151[label="0.111111;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.105.65" src_ip="199.94.146.121" src_port="80"/>
      <filter dst_ip="140.3.144.74" src_ip="199.94.146.121" src_port="80"/>
      <filter dst_ip="172.93.72.5" src_ip="199.94.146.121" src_port="80"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_306{
style=filled;
color=gray75;
2110[label="143.188.54.190;d;1pkt 1fpkt", shape=diamond, color=yellow];
2111[label="169.126.137.185;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat306[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.126.137.185:1058, 143.188.54.190:6666}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6666: (50%)&lt;BR/&gt; 1058: (50%)&gt;];
}
2110--2111[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.188.54.190" dst_port="6666" src_ip="169.126.137.185" src_port="1058"/>
    </slice>
    <from sec="1039669202" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="138.186.49.160"/>
      <from sec="1039669202" usec="0"/>
      <to sec="1039669620" usec="0"/>
    </slice>
    <from sec="1039669202" usec="0"/>
    <to sec="1039669620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645838,1.80177,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_308{
style=filled;
color=gray75;
1681[label="169.126.165.148;s;128pkt 128fpkt", shape=diamond, color=yellow];
2156[label="215.17.37.68;d;22pkt 22fpkt", shape=diamond, color=yellow];
4667[label="169.126.165.148;142pkt 142fpkt", shape=pentagon, color=darkviolet];
6486[label="169.126.165.148;143pkt 143fpkt", shape=invtriangle, color=brown];
stat308[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.126.165.148:53, *:*}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (48.046%)&lt;BR/&gt; 80: (10.3448%)&lt;BR/&gt; 33701: (1.72414%)&lt;BR/&gt; 33268: (0.689655%)&lt;BR/&gt; 32769: (0.689655%)&gt;];
}
1681--2156[label="1;22pkt 22fpkt"];
1681--2245[label="0.2;1pkt 1fpkt"];
1681--4667[label="0.984375;126pkt 126fpkt"];
1681--6486[label="0.992188;127pkt 127fpkt"];
2156--4667[label="1;22pkt 22fpkt"];
2156--6486[label="1;22pkt 22fpkt"];
4667--6486[label="1;142pkt 142fpkt"];
</description>
    <slice>
      <filter src_ip="169.126.165.148" src_port="53"/>
    </slice>
    <from sec="1039669214" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_309{
style=filled;
color=gray75;
2192[label="33.7.193.137;d;1pkt 1fpkt", shape=diamond, color=yellow];
2193[label="215.90.90.19;s;1pkt 1fpkt", shape=diamond, color=yellow];
3446[label="215.90.90.19;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5689[label="215.90.90.19;1pkt 1fpkt", shape=invtriangle, color=brown];
7148[label="215.90.90.19;1pkt 1fpkt", shape=invhouse, color=bisque];
stat309[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.90.90.19:1237, 33.8.100.84:21}[50%]&lt;BR/&gt;{215.90.90.19:1245, 33.7.193.137:6699}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (25%)&lt;BR/&gt; 1245: (25%)&lt;BR/&gt; 1237: (25%)&lt;BR/&gt; 21: (25%)&gt;];
}
2192--2193[label="1;1pkt 1fpkt"];
2192--3446[label="1;1pkt 1fpkt"];
2193--3446[label="1;1pkt 1fpkt"];
3446--5689[label="1;1pkt 1fpkt"];
3446--7148[label="1;1pkt 1fpkt"];
5689--7148[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="33.7.193.137" dst_port="6699" src_ip="215.90.90.19" src_port="1245"/>
      <filter dst_ip="33.8.100.84" dst_port="21" src_ip="215.90.90.19" src_port="1237"/>
    </slice>
    <from sec="1039669216" usec="0"/>
    <to sec="1039669909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_310{
style=filled;
color=gray75;
2207[label="96.36.114.236;d;5pkt 5fpkt", shape=diamond, color=yellow];
stat310[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.110.65.27:3125, 96.36.114.236:1995}[20%]&lt;BR/&gt;{148.110.65.27:3126, 96.36.114.236:1995}[20%]&lt;BR/&gt;{148.110.65.27:3127, 96.36.114.236:1995}[20%]&lt;BR/&gt;{148.110.65.27:3128, 96.36.114.236:1995}[20%]&lt;BR/&gt;{148.110.65.27:3139, 96.36.114.236:1995}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1995: (50%)&lt;BR/&gt; 3139: (10%)&lt;BR/&gt; 3128: (10%)&lt;BR/&gt; 3127: (10%)&lt;BR/&gt; 3126: (10%)&gt;];
}
2207--3542[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="96.36.114.236" dst_port="1995" src_ip="148.110.65.27" src_port="3139"/>
      <filter dst_ip="96.36.114.236" dst_port="1995" src_ip="148.110.65.27" src_port="3128"/>
      <filter dst_ip="96.36.114.236" dst_port="1995" src_ip="148.110.65.27" src_port="3127"/>
      <filter dst_ip="96.36.114.236" dst_port="1995" src_ip="148.110.65.27" src_port="3126"/>
      <filter dst_ip="96.36.114.236" dst_port="1995" src_ip="148.110.65.27" src_port="3125"/>
    </slice>
    <from sec="1039669622" usec="0"/>
    <to sec="1039669779" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_311{
style=filled;
color=gray75;
543[label="98.44.120.228;d;3pkt 3fpkt", shape=diamond, color=yellow];
1234[label="148.110.13.221;s;333pkt 333fpkt", shape=diamond, color=yellow];
2230[label="98.44.120.12;d;2pkt 2fpkt", shape=diamond, color=yellow];
2996[label="98.44.120.228;d;3pkt 3fpkt", shape=hexagon, color=black];
5275[label="148.110.13.221;333pkt 333fpkt", shape=pentagon, color=darkviolet];
6882[label="148.110.13.221;332pkt 332fpkt", shape=invtriangle, color=brown];
7914[label="148.110.13.221;333pkt 333fpkt", shape=invhouse, color=bisque];
stat311[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.110.13.221:*, *:1717}[90.991%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1717: (45.3323%)&lt;BR/&gt; 1117: (7.20687%)&lt;BR/&gt; 1119: (6.57207%)&lt;BR/&gt; 1125: (6.38536%)&lt;BR/&gt; 1123: (5.45183%)&gt;];
}
543--1234[label="1;3pkt 3fpkt"];
543--2996[label="1;3pkt 3fpkt"];
543--5275[label="1;3pkt 3fpkt"];
543--6882[label="1;3pkt 3fpkt"];
543--7914[label="1;3pkt 3fpkt"];
1234--2230[label="1;2pkt 2fpkt"];
1234--2996[label="1;3pkt 3fpkt"];
1234--5275[label="1;333pkt 333fpkt"];
1234--6882[label="1;332pkt 332fpkt"];
1234--7914[label="1;333pkt 333fpkt"];
2230--5275[label="1;2pkt 2fpkt"];
2230--6882[label="1;2pkt 2fpkt"];
2230--7914[label="1;2pkt 2fpkt"];
2996--5275[label="1;3pkt 3fpkt"];
2996--6882[label="1;3pkt 3fpkt"];
2996--7914[label="1;3pkt 3fpkt"];
5275--6882[label="1;332pkt 332fpkt"];
5275--7914[label="1;333pkt 333fpkt"];
6882--7914[label="1;332pkt 332fpkt"];
</description>
    <slice>
      <filter dst_port="1717" src_ip="148.110.13.221"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645838,1.80177,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_312{
style=filled;
color=gray75;
2233[label="172.93.84.153;d;295pkt 295fpkt", shape=diamond, color=yellow];
2239[label="130.172.50.41;s;259pkt 259fpkt", shape=diamond, color=yellow];
3680[label="130.172.50.41;259pkt 259fpkt", shape=pentagon, color=darkviolet];
5836[label="130.172.50.41;259pkt 259fpkt", shape=invtriangle, color=brown];
stat312[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.172.50.41:80, 172.93.84.153:*}[87.7966%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4089: (0.186567%)&lt;BR/&gt; 4088: (0.186567%)&lt;BR/&gt; 4087: (0.186567%)&lt;BR/&gt; 4086: (0.186567%)&gt;];
}
2233--2239[label="1;259pkt 259fpkt"];
2233--3680[label="1;259pkt 259fpkt"];
2233--5836[label="1;259pkt 259fpkt"];
2239--3680[label="1;259pkt 259fpkt"];
2239--5836[label="1;259pkt 259fpkt"];
3680--5836[label="1;259pkt 259fpkt"];
</description>
    <slice>
      <filter dst_ip="172.93.84.153" src_ip="130.172.50.41" src_port="80"/>
    </slice>
    <from sec="1039669706" usec="0"/>
    <to sec="1039669805" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11796,1.82888,503,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_313{
style=filled;
color=gray75;
1[label="140.3.234.1s;2pkt 2fpkt", shape=rectangle, color=red];
2234[label="130.82.82.0;d;2pkt 2fpkt", shape=diamond, color=yellow];
2236[label="140.3.234.1;s;11pkt 11fpkt", shape=diamond, color=yellow];
2240[label="217.226.210.231;d;8pkt 8fpkt", shape=diamond, color=yellow];
2991[label="130.82.82.0;d;1pkt 1fpkt", shape=hexagon, color=black];
3210[label="140.3.234.1;11pkt 11fpkt", shape=pentagon, color=darkviolet];
5541[label="140.3.234.1;10pkt 10fpkt", shape=invtriangle, color=brown];
stat313[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.234.1:*, *:80}[46.6667%]&lt;BR/&gt;{*:*, 217.226.210.231:21}[26.6667%]&lt;BR/&gt;{215.87.86.234:*, 217.226.210.231:*}[26.6667%]&lt;BR/&gt;{140.3.234.1:*, 217.226.210.231:*}[26.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (26.6667%)&lt;BR/&gt; 21: (11.1111%)&lt;BR/&gt; 20: (10%)&lt;BR/&gt; 3703: (5.55556%)&lt;BR/&gt; 3695: (5.55556%)&gt;];
}
1--2236[label="1;2pkt 2fpkt"];
1--2240[label="0.5;1pkt 1fpkt"];
1--3210[label="1;2pkt 2fpkt"];
1--5541[label="1;2pkt 2fpkt"];
2234--2236[label="1;2pkt 2fpkt"];
2234--2991[label="1;1pkt 1fpkt"];
2234--3210[label="1;2pkt 2fpkt"];
2234--5541[label="1;2pkt 2fpkt"];
2236--2240[label="0.5;4pkt 4fpkt"];
2236--2991[label="1;1pkt 1fpkt"];
2236--3210[label="1;11pkt 11fpkt"];
2236--5541[label="1;10pkt 10fpkt"];
2240--3210[label="0.5;4pkt 4fpkt"];
2240--5378[label="0.5;4pkt 4fpkt"];
2240--5541[label="0.5;4pkt 4fpkt"];
2240--6944[label="0.5;4pkt 4fpkt"];
2991--3210[label="1;1pkt 1fpkt"];
2991--5541[label="1;1pkt 1fpkt"];
3210--5541[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="217.226.210.231" src_ip="140.3.234.1"/>
      <filter dst_port="80" src_ip="140.3.234.1"/>
      <filter dst_ip="217.226.210.231" src_ip="215.87.86.234"/>
      <filter dst_ip="217.226.210.231" dst_port="21"/>
    </slice>
    <from sec="1039669716" usec="0"/>
    <to sec="1039669877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.983876,1.77655,002,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_314{
style=filled;
color=gray75;
182[label="150.32.12.88s;1pkt 1fpkt", shape=rectangle, color=red];
2044[label="172.93.75.207;d;3pkt 3fpkt", shape=diamond, color=yellow];
2254[label="201.37.236.88;s;1pkt 1fpkt", shape=diamond, color=yellow];
3413[label="197.88.240.16;114pkt 114fpkt", shape=pentagon, color=darkviolet];
5666[label="197.88.240.16;113pkt 113fpkt", shape=invtriangle, color=brown];
6135[label="201.37.236.88;1pkt 1fpkt", shape=invtriangle, color=brown];
7134[label="197.88.240.16;113pkt 113fpkt", shape=invhouse, color=bisque];
stat314[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.88.240.16:1027, *:137}[98.2759%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (49.2775%)&lt;BR/&gt; 137: (49.2775%)&lt;BR/&gt; 5100: (0.578035%)&lt;BR/&gt; 3715: (0.578035%)&lt;BR/&gt; 3683: (0.144509%)&gt;];
}
182--2044[label="1;1pkt 1fpkt"];
182--2254[label="1;1pkt 1fpkt"];
182--6135[label="1;1pkt 1fpkt"];
2044--2254[label="1;1pkt 1fpkt"];
2044--3413[label="0.333333;1pkt 1fpkt"];
2044--5666[label="0.333333;1pkt 1fpkt"];
2044--6135[label="1;1pkt 1fpkt"];
2044--7134[label="0.333333;1pkt 1fpkt"];
2254--6135[label="1;1pkt 1fpkt"];
3413--5666[label="1;113pkt 113fpkt"];
3413--7134[label="1;113pkt 113fpkt"];
5666--7134[label="1;113pkt 113fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.88.240.16" src_port="1027"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.916727,1.89524,999,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_315{
style=filled;
color=gray75;
158[label="96.182.132.62s;1pkt 1fpkt", shape=rectangle, color=red];
1555[label="215.90.76.62;s;2pkt 2fpkt", shape=diamond, color=yellow];
2255[label="64.144.54.62;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat315[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.90.76.62:3098, 64.144.54.62:6699}[50%]&lt;BR/&gt;{215.90.76.62:2991, 99.76.8.100:6699}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3098: (37.5%)&lt;BR/&gt; 2991: (12.5%)&gt;];
}
158--1555[label="1;1pkt 1fpkt"];
158--2255[label="1;1pkt 1fpkt"];
1555--2255[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="99.76.8.100" dst_port="6699" src_ip="215.90.76.62" src_port="2991"/>
      <filter dst_ip="64.144.54.62" dst_port="6699" src_ip="215.90.76.62" src_port="3098"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_316{
style=filled;
color=gray75;
618[label="215.90.65.35;s;112pkt 112fpkt", shape=diamond, color=yellow];
915[label="200.224.248.146;d;1pkt 1fpkt", shape=diamond, color=yellow];
3005[label="200.224.248.146;d;1pkt 1fpkt", shape=hexagon, color=black];
3616[label="215.90.65.35;129pkt 129fpkt", shape=pentagon, color=darkviolet];
5798[label="215.90.65.35;129pkt 129fpkt", shape=invtriangle, color=brown];
7216[label="215.90.65.35;130pkt 130fpkt", shape=invhouse, color=bisque];
stat316[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.90.65.35:*, *:8888}[48.4615%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (24.1036%)&lt;BR/&gt; 7000: (4.58167%)&lt;BR/&gt; 3456: (3.88446%)&lt;BR/&gt; 9999: (3.78486%)&lt;BR/&gt; 6677: (3.08765%)&gt;];
}
618--915[label="1;1pkt 1fpkt"];
618--2256[label="0.5;1pkt 1fpkt"];
618--3005[label="1;1pkt 1fpkt"];
618--3616[label="0.991071;111pkt 111fpkt"];
618--5798[label="0.991071;111pkt 111fpkt"];
618--7216[label="1;112pkt 112fpkt"];
915--3005[label="1;1pkt 1fpkt"];
915--3616[label="1;1pkt 1fpkt"];
915--5798[label="1;1pkt 1fpkt"];
915--7216[label="1;1pkt 1fpkt"];
3005--3616[label="1;1pkt 1fpkt"];
3005--5798[label="1;1pkt 1fpkt"];
3005--7216[label="1;1pkt 1fpkt"];
3616--5798[label="1;129pkt 129fpkt"];
3616--7216[label="1;129pkt 129fpkt"];
5798--7216[label="1;129pkt 129fpkt"];
</description>
    <slice>
      <filter dst_port="8888" src_ip="215.90.65.35"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="138.186.176.137"/>
      <from sec="1039669200" usec="0"/>
      <to sec="1039669841" usec="0"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669841" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_318{
style=filled;
color=gray75;
2058[label="215.90.75.189;s;2pkt 2fpkt", shape=diamond, color=yellow];
2263[label="201.120.187.89;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat318[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.90.75.189:1324, 92.254.8.9:6699}[50%]&lt;BR/&gt;{215.90.75.189:1289, 201.120.187.89:6699}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1289: (33.3333%)&lt;BR/&gt; 1324: (16.6667%)&gt;];
}
2058--2263[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.120.187.89" dst_port="6699" src_ip="215.90.75.189" src_port="1289"/>
      <filter dst_ip="92.254.8.9" dst_port="6699" src_ip="215.90.75.189" src_port="1324"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_319{
style=filled;
color=gray75;
663[label="138.186.49.3;d;18pkt 18fpkt", shape=diamond, color=yellow];
998[label="64.70.185.76;s;1pkt 1fpkt", shape=diamond, color=yellow];
1044[label="223.138.109.147;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat319[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6257, 138.186.49.3:6257}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (60%)&lt;BR/&gt; 6699: (10%)&lt;BR/&gt; 1863: (7.5%)&lt;BR/&gt; 1152: (5%)&lt;BR/&gt; 1148: (5%)&gt;];
}
663--998[label="1;1pkt 1fpkt"];
663--1044[label="1;1pkt 1fpkt"];
663--2265[label="0.0555556;1pkt 1fpkt"];
663--3352[label="0.25;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.49.3" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,501,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="172.93.177.219"/>
      <from sec="1039669200" usec="0"/>
      <to sec="1039669848" usec="0"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_321{
style=filled;
color=gray75;
900[label="193.92.157.88;s;38pkt 38fpkt", shape=diamond, color=yellow];
1507[label="169.126.128.79;d;15pkt 15fpkt", shape=diamond, color=yellow];
2288[label="169.126.146.67;d;30pkt 30fpkt", shape=diamond, color=yellow];
stat321[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.92.157.88:*, 148.110.20.119:*}[25%]&lt;BR/&gt;{211.168.177.74:53, 169.126.146.67:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (10.8434%)&lt;BR/&gt; 5190: (7.83133%)&lt;BR/&gt; 6667: (3.01205%)&lt;BR/&gt; 6666: (3.01205%)&lt;BR/&gt; 3709: (3.01205%)&gt;];
}
900--1507[label="0.133333;2pkt 2fpkt"];
900--2288[label="0.0333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.20.119" src_ip="193.92.157.88"/>
      <filter dst_ip="169.126.146.67" src_ip="211.168.177.74" src_port="53"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_322{
style=filled;
color=gray75;
1861[label="172.93.107.6;d;26pkt 26fpkt", shape=diamond, color=yellow];
2291[label="152.31.29.206;s;26pkt 26fpkt", shape=diamond, color=yellow];
5155[label="152.31.29.206;29pkt 29fpkt", shape=pentagon, color=darkviolet];
stat322[shape=component, label=&lt;Rules:&lt;BR/&gt;{152.31.29.206:80, 172.93.107.6:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1715: (1.85185%)&lt;BR/&gt; 1714: (1.85185%)&lt;BR/&gt; 1713: (1.85185%)&lt;BR/&gt; 1712: (1.85185%)&gt;];
}
1861--2291[label="1;26pkt 26fpkt"];
1861--5155[label="1;26pkt 26fpkt"];
2291--5155[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="172.93.107.6" src_ip="152.31.29.206" src_port="80"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_323{
style=filled;
color=gray75;
899[label="193.92.157.88;d;25pkt 25fpkt", shape=diamond, color=yellow];
1797[label="169.126.128.79;s;15pkt 15fpkt", shape=diamond, color=yellow];
2087[label="169.126.146.67;s;31pkt 31fpkt", shape=diamond, color=yellow];
2286[label="169.126.128.2;s;1pkt 1fpkt", shape=diamond, color=yellow];
2300[label="214.216.51.93;s;181pkt 181fpkt", shape=diamond, color=yellow];
3922[label="169.126.156.66;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3932[label="169.126.146.67;35pkt 35fpkt", shape=pentagon, color=darkviolet];
4193[label="214.216.51.93;211pkt 211fpkt", shape=pentagon, color=darkviolet];
5997[label="169.126.156.66;3pkt 3fpkt", shape=invtriangle, color=brown];
6168[label="214.216.51.93;210pkt 210fpkt", shape=invtriangle, color=brown];
7342[label="169.126.156.66;3pkt 3fpkt", shape=invhouse, color=bisque];
7453[label="214.216.51.93;210pkt 210fpkt", shape=invhouse, color=bisque];
stat323[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.216.51.93:0, *:0}[74.2958%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (87.6078%)&lt;BR/&gt; 53: (2.15517%)&lt;BR/&gt; 5190: (1.23922%)&lt;BR/&gt; 6667: (0.431034%)&lt;BR/&gt; 5050: (0.431034%)&gt;];
}
899--1797[label="0.133333;2pkt 2fpkt"];
899--2087[label="0.04;1pkt 1fpkt"];
899--2286[label="1;1pkt 1fpkt"];
899--2300[label="0.04;1pkt 1fpkt"];
899--3922[label="0.333333;1pkt 1fpkt"];
899--3932[label="0.04;1pkt 1fpkt"];
899--4193[label="0.04;1pkt 1fpkt"];
899--5997[label="0.333333;1pkt 1fpkt"];
899--6168[label="0.04;1pkt 1fpkt"];
899--7342[label="0.333333;1pkt 1fpkt"];
899--7453[label="0.04;1pkt 1fpkt"];
2087--3932[label="1;31pkt 31fpkt"];
2300--4193[label="1;181pkt 181fpkt"];
2300--6168[label="0.994475;180pkt 180fpkt"];
2300--7453[label="0.994475;180pkt 180fpkt"];
3922--5997[label="1;3pkt 3fpkt"];
3922--7342[label="1;3pkt 3fpkt"];
4193--6168[label="1;210pkt 210fpkt"];
4193--7453[label="1;210pkt 210fpkt"];
5997--7342[label="1;3pkt 3fpkt"];
6168--7453[label="1;210pkt 210fpkt"];
</description>
    <slice>
      <filter src_ip="214.216.51.93"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09135,1.86305,002,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_324{
style=filled;
color=gray75;
337[label="96.7.163.247s;133pkt 133fpkt", shape=rectangle, color=red];
2305[label="200.192.68.46;s;1pkt 1fpkt", shape=diamond, color=yellow];
2306[label="215.90.93.145;d;2pkt 2fpkt", shape=diamond, color=yellow];
3052[label="215.90.93.145;d;2pkt 2fpkt", shape=hexagon, color=black];
5469[label="96.7.163.247;214pkt 214fpkt", shape=pentagon, color=darkviolet];
stat324[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.7.163.247:1046, *:137}[99.537%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1046: (49.5739%)&lt;BR/&gt; 137: (49.5739%)&lt;BR/&gt; 6699: (0.426136%)&lt;BR/&gt; 3257: (0.426136%)&gt;];
}
337--5469[label="0.992481;132pkt 132fpkt"];
2305--2306[label="1;1pkt 1fpkt"];
2305--3052[label="1;1pkt 1fpkt"];
2306--3052[label="1;2pkt 2fpkt"];
2306--5469[label="0.5;1pkt 1fpkt"];
3052--5469[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.7.163.247" src_port="1046"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="138.165.212.40"/>
      <from sec="1039669202" usec="0"/>
      <to sec="1039669847" usec="0"/>
    </slice>
    <from sec="1039669202" usec="0"/>
    <to sec="1039669847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_326{
style=filled;
color=gray75;
2235[label="140.3.234.1;d;4pkt 4fpkt", shape=diamond, color=yellow];
stat326[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.226.210.231:20, 140.3.234.1:3699}[25%]&lt;BR/&gt;{217.226.210.231:20, 140.3.234.1:3703}[25%]&lt;BR/&gt;{217.226.210.231:21, 140.3.234.1:3698}[25%]&lt;BR/&gt;{217.226.210.231:21, 140.3.234.1:3702}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (25%)&lt;BR/&gt; 20: (25%)&lt;BR/&gt; 3703: (12.5%)&lt;BR/&gt; 3702: (12.5%)&lt;BR/&gt; 3699: (12.5%)&gt;];
}
2235--2241[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.234.1" dst_port="3702" src_ip="217.226.210.231" src_port="21"/>
      <filter dst_ip="140.3.234.1" dst_port="3698" src_ip="217.226.210.231" src_port="21"/>
      <filter dst_ip="140.3.234.1" dst_port="3703" src_ip="217.226.210.231" src_port="20"/>
      <filter dst_ip="140.3.234.1" dst_port="3699" src_ip="217.226.210.231" src_port="20"/>
    </slice>
    <from sec="1039669716" usec="0"/>
    <to sec="1039669820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="214.216.48.201"/>
      <from sec="1039669202" usec="0"/>
      <to sec="1039669846" usec="0"/>
    </slice>
    <from sec="1039669202" usec="0"/>
    <to sec="1039669846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_328{
style=filled;
color=gray75;
1099[label="138.186.70.206;s;139pkt 139fpkt", shape=diamond, color=yellow];
stat328[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.70.206:*, *:80}[42.446%]&lt;BR/&gt;{138.186.70.206:8000, 215.21.5.67:*}[36.6906%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (24.8201%)&lt;BR/&gt; 8000: (23.741%)&lt;BR/&gt; 1080: (0.719424%)&lt;BR/&gt; 51322: (0.359712%)&lt;BR/&gt; 51318: (0.359712%)&gt;];
}
1099--1391[label="0.00793651;1pkt 1fpkt"];
1099--1433[label="0.0431655;6pkt 6fpkt"];
1099--1568[label="0.00719424;1pkt 1fpkt"];
1099--1649[label="0.016129;2pkt 2fpkt"];
1099--2065[label="0.011236;1pkt 1fpkt"];
1099--2793[label="0.00719424;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="138.186.70.206"/>
      <filter dst_ip="215.21.5.67" src_ip="138.186.70.206" src_port="8000"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_329{
style=filled;
color=gray75;
486[label="64.53.134.177;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat329[shape=component, label=&lt;Rules:&lt;BR/&gt;{64.53.134.177:6699, 215.90.87.248:4491}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 4491: (50%)&gt;];
}
486--842[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.87.248" dst_port="4491" src_ip="64.53.134.177" src_port="6699"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="214.216.49.185"/>
      <from sec="1039669206" usec="0"/>
      <to sec="1039669848" usec="0"/>
    </slice>
    <from sec="1039669206" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_332{
style=filled;
color=gray75;
2098[label="211.90.23.65;s;90pkt 90fpkt", shape=diamond, color=yellow];
stat332[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.90.23.65:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1032: (3.88889%)&lt;BR/&gt; 1033: (2.77778%)&lt;BR/&gt; 1031: (2.22222%)&lt;BR/&gt; 1037: (1.66667%)&gt;];
}
2098--2158[label="0.0724638;5pkt 5fpkt"];
2098--2359[label="0.0666667;1pkt 1fpkt"];
2098--2482[label="0.0111111;1pkt 1fpkt"];
2098--2505[label="0.0555556;5pkt 5fpkt"];
2098--2863[label="0.0487805;2pkt 2fpkt"];
2098--2875[label="0.0222222;2pkt 2fpkt"];
2098--3059[label="0.0222222;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="211.90.23.65" src_port="80"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_333{
style=filled;
color=gray75;
604[label="173.55.225.198;d;1pkt 1fpkt", shape=diamond, color=yellow];
904[label="138.186.1.231;s;153pkt 153fpkt", shape=diamond, color=yellow];
1871[label="138.186.8.168;s;87pkt 87fpkt", shape=diamond, color=yellow];
2370[label="32.68.81.191;d;24pkt 24fpkt", shape=diamond, color=yellow];
3099[label="32.68.81.191;d;24pkt 24fpkt", shape=hexagon, color=black];
stat333[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.1.231:80, *:*}[63.2231%]&lt;BR/&gt;{138.186.8.168:80, *:*}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.827%)&lt;BR/&gt; 35656: (0.519031%)&lt;BR/&gt; 35653: (0.519031%)&lt;BR/&gt; 35652: (0.519031%)&lt;BR/&gt; 35650: (0.519031%)&gt;];
}
604--904[label="1;1pkt 1fpkt"];
904--2370[label="0.666667;16pkt 16fpkt"];
904--3099[label="0.666667;16pkt 16fpkt"];
1871--2370[label="0.25;6pkt 6fpkt"];
1871--3099[label="0.25;6pkt 6fpkt"];
2370--3099[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter src_ip="138.186.1.231" src_port="80"/>
      <filter src_ip="138.186.8.168" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_335{
style=filled;
color=gray75;
2397[label="193.66.169.219;s;14pkt 14fpkt", shape=diamond, color=yellow];
5268[label="193.66.169.219;21pkt 21fpkt", shape=pentagon, color=darkviolet];
6876[label="193.66.169.219;20pkt 20fpkt", shape=invtriangle, color=brown];
7909[label="193.66.169.219;21pkt 21fpkt", shape=invhouse, color=bisque];
stat335[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.66.169.219:80, 140.3.201.85:*}[80.9524%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1695: (4.60526%)&lt;BR/&gt; 1705: (2.63158%)&lt;BR/&gt; 1694: (2.63158%)&lt;BR/&gt; 1693: (2.63158%)&gt;];
}
2397--5268[label="1;14pkt 14fpkt"];
2397--6876[label="0.928571;13pkt 13fpkt"];
2397--7909[label="1;14pkt 14fpkt"];
5268--6876[label="1;20pkt 20fpkt"];
5268--7909[label="1;21pkt 21fpkt"];
6876--7909[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.201.85" src_ip="193.66.169.219" src_port="80"/>
    </slice>
    <from sec="1039669560" usec="0"/>
    <to sec="1039669891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.937874,1.83478,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_336{
style=filled;
color=gray75;
956[label="215.90.152.120;d;3pkt 3fpkt", shape=diamond, color=yellow];
957[label="96.66.76.10;s;2pkt 2fpkt", shape=diamond, color=yellow];
1745[label="96.66.76.8;s;1pkt 1fpkt", shape=diamond, color=yellow];
2415[label="96.66.76.14;s;1pkt 1fpkt", shape=diamond, color=yellow];
2530[label="96.66.76.10;s;2pkt 2fpkt", shape=hexagon, color=black];
2731[label="96.66.76.8;s;1pkt 1fpkt", shape=hexagon, color=black];
3009[label="215.90.152.120;d;3pkt 3fpkt", shape=hexagon, color=black];
3308[label="96.66.76.8;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3335[label="96.66.76.10;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5603[label="96.66.76.8;1pkt 1fpkt", shape=invtriangle, color=brown];
stat336[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.66.76.8:5001, 215.90.152.120:1348}[25%]&lt;BR/&gt;{96.66.76.14:5001, 215.90.152.120:1349}[25%]&lt;BR/&gt;{96.66.76.10:5001, 138.186.119.93:4558}[25%]&lt;BR/&gt;{96.66.76.10:5001, 215.90.152.120:1347}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (50%)&lt;BR/&gt; 1348: (18.75%)&lt;BR/&gt; 1347: (15.625%)&lt;BR/&gt; 1349: (9.375%)&lt;BR/&gt; 4558: (6.25%)&gt;];
}
956--957[label="0.5;1pkt 1fpkt"];
956--1745[label="1;1pkt 1fpkt"];
956--2415[label="1;1pkt 1fpkt"];
956--2530[label="0.5;1pkt 1fpkt"];
956--2731[label="1;1pkt 1fpkt"];
956--3009[label="1;3pkt 3fpkt"];
956--3308[label="1;1pkt 1fpkt"];
956--3335[label="1;1pkt 1fpkt"];
956--5603[label="1;1pkt 1fpkt"];
957--1644[label="0.5;1pkt 1fpkt"];
957--2530[label="1;2pkt 2fpkt"];
957--3009[label="0.5;1pkt 1fpkt"];
957--3335[label="1;1pkt 1fpkt"];
1745--2731[label="1;1pkt 1fpkt"];
1745--3009[label="1;1pkt 1fpkt"];
1745--3308[label="1;1pkt 1fpkt"];
1745--5603[label="1;1pkt 1fpkt"];
2415--3009[label="1;1pkt 1fpkt"];
2530--3009[label="0.5;1pkt 1fpkt"];
2530--3335[label="1;1pkt 1fpkt"];
2731--3009[label="1;1pkt 1fpkt"];
2731--3308[label="1;1pkt 1fpkt"];
2731--5603[label="1;1pkt 1fpkt"];
3009--3308[label="1;1pkt 1fpkt"];
3009--3335[label="1;1pkt 1fpkt"];
3009--5603[label="1;1pkt 1fpkt"];
3308--5603[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.152.120" dst_port="1347" src_ip="96.66.76.10" src_port="5001"/>
      <filter dst_ip="138.186.119.93" dst_port="4558" src_ip="96.66.76.10" src_port="5001"/>
      <filter dst_ip="215.90.152.120" dst_port="1349" src_ip="96.66.76.14" src_port="5001"/>
      <filter dst_ip="215.90.152.120" dst_port="1348" src_ip="96.66.76.8" src_port="5001"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11796,1.82888,999,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_337{
style=filled;
color=gray75;
7[label="138.186.58.32s;2pkt 2fpkt", shape=rectangle, color=red];
1191[label="138.186.58.32;s;3pkt 3fpkt", shape=diamond, color=yellow];
1193[label="145.19.180.80;d;1pkt 1fpkt", shape=diamond, color=yellow];
2429[label="61.137.97.225;d;1pkt 1fpkt", shape=diamond, color=yellow];
2837[label="138.186.58.32;s;2pkt 2fpkt", shape=hexagon, color=black];
3584[label="138.186.58.32;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5780[label="138.186.58.32;3pkt 3fpkt", shape=invtriangle, color=brown];
stat337[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.58.32:1136, 211.90.155.28:1863}[33.3333%]&lt;BR/&gt;{138.186.58.32:6699, 145.19.180.80:4130}[33.3333%]&lt;BR/&gt;{138.186.58.32:6699, 61.137.97.225:1975}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (36.6667%)&lt;BR/&gt; 4130: (20%)&lt;BR/&gt; 1975: (16.6667%)&lt;BR/&gt; 1863: (13.3333%)&lt;BR/&gt; 1136: (13.3333%)&gt;];
}
7--1191[label="1;2pkt 2fpkt"];
7--1193[label="1;1pkt 1fpkt"];
7--2429[label="1;1pkt 1fpkt"];
7--2837[label="0.5;1pkt 1fpkt"];
7--3584[label="1;2pkt 2fpkt"];
7--5780[label="1;2pkt 2fpkt"];
1191--1193[label="1;1pkt 1fpkt"];
1191--2429[label="1;1pkt 1fpkt"];
1191--2837[label="1;2pkt 2fpkt"];
1191--3584[label="1;3pkt 3fpkt"];
1191--5780[label="1;3pkt 3fpkt"];
1193--2837[label="1;1pkt 1fpkt"];
1193--3584[label="1;1pkt 1fpkt"];
1193--5780[label="1;1pkt 1fpkt"];
2429--3584[label="1;1pkt 1fpkt"];
2429--5780[label="1;1pkt 1fpkt"];
2837--3584[label="1;2pkt 2fpkt"];
2837--5780[label="1;2pkt 2fpkt"];
3584--5780[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="61.137.97.225" dst_port="1975" src_ip="138.186.58.32" src_port="6699"/>
      <filter dst_ip="145.19.180.80" dst_port="4130" src_ip="138.186.58.32" src_port="6699"/>
      <filter dst_ip="211.90.155.28" dst_port="1863" src_ip="138.186.58.32" src_port="1136"/>
    </slice>
    <from sec="1039669270" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_338{
style=filled;
color=gray75;
2238[label="130.172.50.41;d;259pkt 259fpkt", shape=diamond, color=yellow];
2434[label="172.93.84.153;s;297pkt 297fpkt", shape=diamond, color=yellow];
4701[label="172.93.84.153;296pkt 296fpkt", shape=pentagon, color=darkviolet];
6508[label="172.93.84.153;297pkt 297fpkt", shape=invtriangle, color=brown];
7665[label="172.93.84.153;296pkt 296fpkt", shape=invhouse, color=bisque];
stat338[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.93.84.153:*, 130.172.50.41:80}[87.2054%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4089: (0.17301%)&lt;BR/&gt; 4088: (0.17301%)&lt;BR/&gt; 4087: (0.17301%)&lt;BR/&gt; 4086: (0.17301%)&gt;];
}
2238--2434[label="1;259pkt 259fpkt"];
2238--3185[label="0.27027;70pkt 70fpkt"];
2238--4701[label="1;259pkt 259fpkt"];
2238--6508[label="1;259pkt 259fpkt"];
2238--7665[label="1;259pkt 259fpkt"];
2434--3185[label="0.350168;104pkt 104fpkt"];
2434--4701[label="1;296pkt 296fpkt"];
2434--6508[label="1;297pkt 297fpkt"];
2434--7665[label="1;296pkt 296fpkt"];
4701--6508[label="1;296pkt 296fpkt"];
4701--7665[label="1;296pkt 296fpkt"];
6508--7665[label="1;296pkt 296fpkt"];
</description>
    <slice>
      <filter dst_ip="130.172.50.41" dst_port="80" src_ip="172.93.84.153"/>
    </slice>
    <from sec="1039669706" usec="0"/>
    <to sec="1039669805" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="143.178.59.85"/>
      <from sec="1039669742" usec="0"/>
      <to sec="1039669848" usec="0"/>
    </slice>
    <from sec="1039669742" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_340{
style=filled;
color=gray75;
2447[label="214.216.48.168;s;3pkt 3fpkt", shape=diamond, color=yellow];
stat340[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.216.48.168:80, 36.170.148.206:3660}[33.3333%]&lt;BR/&gt;{214.216.48.168:80, 36.170.148.206:3661}[33.3333%]&lt;BR/&gt;{214.216.48.168:80, 36.170.148.206:3662}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3662: (16.6667%)&lt;BR/&gt; 3661: (16.6667%)&lt;BR/&gt; 3660: (16.6667%)&gt;];
}
2447--4847[label="0.666667;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="36.170.148.206" dst_port="3662" src_ip="214.216.48.168" src_port="80"/>
      <filter dst_ip="36.170.148.206" dst_port="3661" src_ip="214.216.48.168" src_port="80"/>
      <filter dst_ip="36.170.148.206" dst_port="3660" src_ip="214.216.48.168" src_port="80"/>
    </slice>
    <from sec="1039669748" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_341{
style=filled;
color=gray75;
2406[label="138.186.48.45;s;5pkt 5fpkt", shape=diamond, color=yellow];
2451[label="39.61.165.98;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat341[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.48.45:3122, 211.90.155.25:1863}[20%]&lt;BR/&gt;{138.186.48.45:6699, 33.134.36.70:1526}[20%]&lt;BR/&gt;{138.186.48.45:3207, 199.180.68.73:6699}[20%]&lt;BR/&gt;{138.186.48.45:6699, 39.61.165.98:63311}[20%]&lt;BR/&gt;{138.186.48.45:3206, 211.90.152.182:1863}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (33.3333%)&lt;BR/&gt; 63311: (16.6667%)&lt;BR/&gt; 1863: (16.6667%)&lt;BR/&gt; 3207: (8.33333%)&lt;BR/&gt; 3206: (8.33333%)&gt;];
}
2406--2451[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.90.152.182" dst_port="1863" src_ip="138.186.48.45" src_port="3206"/>
      <filter dst_ip="39.61.165.98" dst_port="63311" src_ip="138.186.48.45" src_port="6699"/>
      <filter dst_ip="199.180.68.73" dst_port="6699" src_ip="138.186.48.45" src_port="3207"/>
      <filter dst_ip="33.134.36.70" dst_port="1526" src_ip="138.186.48.45" src_port="6699"/>
      <filter dst_ip="211.90.155.25" dst_port="1863" src_ip="138.186.48.45" src_port="3122"/>
    </slice>
    <from sec="1039669617" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_342{
style=filled;
color=gray75;
560[label="148.110.23.36;d;22pkt 22fpkt", shape=diamond, color=yellow];
1530[label="33.110.255.41;s;2pkt 2fpkt", shape=diamond, color=yellow];
2454[label="197.115.98.111;s;1pkt 1fpkt", shape=diamond, color=yellow];
2513[label="148.110.23.36;d;8pkt 8fpkt", shape=hexagon, color=black];
3688[label="33.110.255.41;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4731[label="38.185.21.156;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5842[label="33.110.255.41;2pkt 2fpkt", shape=invtriangle, color=brown];
6527[label="38.185.21.156;6pkt 6fpkt", shape=invtriangle, color=brown];
7676[label="38.185.21.156;6pkt 6fpkt", shape=invhouse, color=bisque];
stat342[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 148.110.23.36:2565}[36.3636%]&lt;BR/&gt;{38.185.21.156:80, 148.110.23.36:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30.5556%)&lt;BR/&gt; 2565: (17.5926%)&lt;BR/&gt; 4853: (3.7037%)&lt;BR/&gt; 4624: (3.7037%)&lt;BR/&gt; 1217: (3.7037%)&gt;];
}
560--1530[label="1;2pkt 2fpkt"];
560--2454[label="1;1pkt 1fpkt"];
560--2513[label="1;8pkt 8fpkt"];
560--3688[label="1;1pkt 1fpkt"];
560--4731[label="1;6pkt 6fpkt"];
560--5842[label="1;2pkt 2fpkt"];
560--6527[label="1;6pkt 6fpkt"];
560--7676[label="1;6pkt 6fpkt"];
1530--2513[label="0.5;1pkt 1fpkt"];
1530--3688[label="1;1pkt 1fpkt"];
1530--5842[label="1;2pkt 2fpkt"];
2513--5842[label="0.5;1pkt 1fpkt"];
3688--5842[label="1;1pkt 1fpkt"];
4731--6527[label="1;6pkt 6fpkt"];
4731--7676[label="1;6pkt 6fpkt"];
6527--7676[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.23.36" dst_port="2565"/>
      <filter dst_ip="148.110.23.36" src_ip="38.185.21.156" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14144,1.92665,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_343{
style=filled;
color=gray75;
59[label="215.90.87.225s;2pkt 2fpkt", shape=rectangle, color=red];
1405[label="215.90.87.225;s;46pkt 46fpkt", shape=diamond, color=yellow];
1767[label="92.245.69.180;d;1pkt 1fpkt", shape=diamond, color=yellow];
1768[label="150.8.14.156;d;1pkt 1fpkt", shape=diamond, color=yellow];
1971[label="36.217.177.113;d;1pkt 1fpkt", shape=diamond, color=yellow];
2227[label="64.113.2.169;d;1pkt 1fpkt", shape=diamond, color=yellow];
2228[label="92.255.11.233;d;1pkt 1fpkt", shape=diamond, color=yellow];
2436[label="80.144.122.199;d;1pkt 1fpkt", shape=diamond, color=yellow];
2456[label="64.175.193.22;d;1pkt 1fpkt", shape=diamond, color=yellow];
2624[label="215.90.87.225;s;13pkt 13fpkt", shape=hexagon, color=black];
2852[label="36.217.177.113;d;1pkt 1fpkt", shape=hexagon, color=black];
2853[label="150.8.14.156;d;1pkt 1fpkt", shape=hexagon, color=black];
3100[label="92.245.69.180;d;1pkt 1fpkt", shape=hexagon, color=black];
stat343[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.90.87.225:*, *:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3357: (2.8169%)&lt;BR/&gt; 3345: (2.8169%)&lt;BR/&gt; 3344: (2.8169%)&lt;BR/&gt; 3425: (2.11268%)&gt;];
}
59--1405[label="1;2pkt 2fpkt"];
59--2228[label="1;1pkt 1fpkt"];
59--2456[label="1;1pkt 1fpkt"];
1405--1767[label="1;1pkt 1fpkt"];
1405--1768[label="1;1pkt 1fpkt"];
1405--1971[label="1;1pkt 1fpkt"];
1405--1973[label="1;1pkt 1fpkt"];
1405--2143[label="0.333333;1pkt 1fpkt"];
1405--2227[label="1;1pkt 1fpkt"];
1405--2228[label="1;1pkt 1fpkt"];
1405--2436[label="1;1pkt 1fpkt"];
1405--2456[label="1;1pkt 1fpkt"];
1405--2624[label="1;13pkt 13fpkt"];
1405--2852[label="1;1pkt 1fpkt"];
1405--2853[label="1;1pkt 1fpkt"];
1405--3100[label="1;1pkt 1fpkt"];
1767--2624[label="1;1pkt 1fpkt"];
1767--3100[label="1;1pkt 1fpkt"];
1768--2624[label="1;1pkt 1fpkt"];
1768--2853[label="1;1pkt 1fpkt"];
1971--2624[label="1;1pkt 1fpkt"];
1971--2852[label="1;1pkt 1fpkt"];
2624--2852[label="1;1pkt 1fpkt"];
2624--2853[label="1;1pkt 1fpkt"];
2624--3100[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="6699" src_ip="215.90.87.225"/>
    </slice>
    <from sec="1039669209" usec="0"/>
    <to sec="1039669879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,502,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_344{
style=filled;
color=gray75;
2459[label="203.52.36.114;s;3pkt 3fpkt", shape=diamond, color=yellow];
2460[label="140.3.104.132;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat344[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.52.36.114:59067, 140.3.104.132:22}[33.3333%]&lt;BR/&gt;{203.52.36.114:59065, 140.3.104.129:53}[33.3333%]&lt;BR/&gt;{203.52.36.114:59066, 140.3.104.129:53}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59067: (25%)&lt;BR/&gt; 53: (25%)&lt;BR/&gt; 22: (25%)&lt;BR/&gt; 59066: (12.5%)&lt;BR/&gt; 59065: (12.5%)&gt;];
}
2459--2460[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.104.129" dst_port="53" src_ip="203.52.36.114" src_port="59066"/>
      <filter dst_ip="140.3.104.129" dst_port="53" src_ip="203.52.36.114" src_port="59065"/>
      <filter dst_ip="140.3.104.132" dst_port="22" src_ip="203.52.36.114" src_port="59067"/>
    </slice>
    <from sec="1039669819" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19604,1.81002,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_345{
style=filled;
color=gray75;
64[label="215.90.87.248s;2pkt 2fpkt", shape=rectangle, color=red];
485[label="64.53.134.177;d;1pkt 1fpkt", shape=diamond, color=yellow];
487[label="215.90.87.248;s;4pkt 4fpkt", shape=diamond, color=yellow];
637[label="201.119.175.153;d;1pkt 1fpkt", shape=diamond, color=yellow];
2066[label="98.210.193.19;d;1pkt 1fpkt", shape=diamond, color=yellow];
2464[label="64.53.134.177;d;1pkt 1fpkt", shape=hexagon, color=black];
2663[label="201.119.175.153;d;1pkt 1fpkt", shape=hexagon, color=black];
5477[label="215.90.87.248;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7018[label="215.90.87.248;4pkt 4fpkt", shape=invtriangle, color=brown];
7993[label="215.90.87.248;3pkt 3fpkt", shape=invhouse, color=bisque];
stat345[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.90.87.248:4067, 36.92.163.15:6699}[25%]&lt;BR/&gt;{215.90.87.248:4442, 98.210.193.19:6699}[25%]&lt;BR/&gt;{215.90.87.248:4398, 201.119.175.153:6699}[25%]&lt;BR/&gt;{215.90.87.248:4491, 64.53.134.177:6699}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 4491: (15.9091%)&lt;BR/&gt; 4398: (15.9091%)&lt;BR/&gt; 4442: (9.09091%)&lt;BR/&gt; 4067: (9.09091%)&gt;];
}
64--485[label="1;1pkt 1fpkt"];
64--487[label="1;2pkt 2fpkt"];
64--637[label="1;1pkt 1fpkt"];
64--2464[label="1;1pkt 1fpkt"];
64--2663[label="1;1pkt 1fpkt"];
64--5477[label="1;2pkt 2fpkt"];
64--7018[label="1;2pkt 2fpkt"];
64--7993[label="1;2pkt 2fpkt"];
485--487[label="1;1pkt 1fpkt"];
485--2464[label="1;1pkt 1fpkt"];
485--5477[label="1;1pkt 1fpkt"];
485--7018[label="1;1pkt 1fpkt"];
485--7993[label="1;1pkt 1fpkt"];
487--637[label="1;1pkt 1fpkt"];
487--2066[label="1;1pkt 1fpkt"];
487--2464[label="1;1pkt 1fpkt"];
487--2663[label="1;1pkt 1fpkt"];
487--5477[label="1;4pkt 4fpkt"];
487--7018[label="1;4pkt 4fpkt"];
487--7993[label="1;3pkt 3fpkt"];
637--2663[label="1;1pkt 1fpkt"];
637--5477[label="1;1pkt 1fpkt"];
637--7018[label="1;1pkt 1fpkt"];
637--7993[label="1;1pkt 1fpkt"];
2066--5477[label="1;1pkt 1fpkt"];
2066--7018[label="1;1pkt 1fpkt"];
2464--5477[label="1;1pkt 1fpkt"];
2464--7018[label="1;1pkt 1fpkt"];
2464--7993[label="1;1pkt 1fpkt"];
2663--5477[label="1;1pkt 1fpkt"];
2663--7018[label="1;1pkt 1fpkt"];
2663--7993[label="1;1pkt 1fpkt"];
5477--7018[label="1;4pkt 4fpkt"];
5477--7993[label="1;3pkt 3fpkt"];
7018--7993[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="64.53.134.177" dst_port="6699" src_ip="215.90.87.248" src_port="4491"/>
      <filter dst_ip="201.119.175.153" dst_port="6699" src_ip="215.90.87.248" src_port="4398"/>
      <filter dst_ip="98.210.193.19" dst_port="6699" src_ip="215.90.87.248" src_port="4442"/>
      <filter dst_ip="36.92.163.15" dst_port="6699" src_ip="215.90.87.248" src_port="4067"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.916727,1.89524,999,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_346{
style=filled;
color=gray75;
137[label="202.77.134.47s;1pkt 1fpkt", shape=rectangle, color=red];
144[label="212.193.214.52s;1pkt 1fpkt", shape=rectangle, color=red];
1032[label="64.51.6.155;s;1pkt 1fpkt", shape=diamond, color=yellow];
1222[label="142.150.20.128;s;1pkt 1fpkt", shape=diamond, color=yellow];
1588[label="60.164.30.236;s;1pkt 1fpkt", shape=diamond, color=yellow];
1846[label="92.194.165.118;s;1pkt 1fpkt", shape=diamond, color=yellow];
2075[label="61.84.156.104;s;1pkt 1fpkt", shape=diamond, color=yellow];
2250[label="64.177.11.64;s;1pkt 1fpkt", shape=diamond, color=yellow];
2266[label="33.9.65.19;s;1pkt 1fpkt", shape=diamond, color=yellow];
2279[label="33.81.87.46;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat346[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 148.110.86.86:6346}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (50%)&lt;BR/&gt; 64956: (5%)&lt;BR/&gt; 33279: (5%)&lt;BR/&gt; 4103: (5%)&lt;BR/&gt; 3871: (5%)&gt;];
}
137--496[label="1;1pkt 1fpkt"];
137--2465[label="1;1pkt 1fpkt"];
144--496[label="1;1pkt 1fpkt"];
144--2465[label="1;1pkt 1fpkt"];
1032--2465[label="1;1pkt 1fpkt"];
1222--2465[label="1;1pkt 1fpkt"];
1588--2465[label="1;1pkt 1fpkt"];
1846--2465[label="1;1pkt 1fpkt"];
2075--2465[label="1;1pkt 1fpkt"];
2250--2465[label="1;1pkt 1fpkt"];
2266--2465[label="1;1pkt 1fpkt"];
2279--2465[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.86.86" dst_port="6346"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_348{
style=filled;
color=gray75;
509[label="204.76.19.42;d;1pkt 1fpkt", shape=diamond, color=yellow];
819[label="148.110.192.55;s;562pkt 562fpkt", shape=diamond, color=yellow];
860[label="64.2.237.142;d;1pkt 1fpkt", shape=diamond, color=yellow];
910[label="33.66.126.123;d;1pkt 1fpkt", shape=diamond, color=yellow];
1012[label="201.10.3.99;d;2pkt 2fpkt", shape=diamond, color=yellow];
2471[label="204.76.19.42;d;1pkt 1fpkt", shape=hexagon, color=black];
stat348[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.110.192.55:6257, *:6257}[95.3737%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (95.5106%)&lt;BR/&gt; 6699: (1.84859%)&lt;BR/&gt; 1240: (0.264085%)&lt;BR/&gt; 1578: (0.176056%)&lt;BR/&gt; 1334: (0.176056%)&gt;];
}
509--819[label="1;1pkt 1fpkt"];
509--2471[label="1;1pkt 1fpkt"];
819--820[label="1;1pkt 1fpkt"];
819--860[label="1;1pkt 1fpkt"];
819--910[label="1;1pkt 1fpkt"];
819--1012[label="1;2pkt 2fpkt"];
819--2471[label="1;1pkt 1fpkt"];
819--2868[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="148.110.192.55" src_port="6257"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14144,1.92665,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_350{
style=filled;
color=gray75;
186[label="39.5.64.93s;2pkt 2fpkt", shape=rectangle, color=red];
595[label="138.186.52.93;s;2pkt 2fpkt", shape=diamond, color=yellow];
596[label="38.177.18.26;d;1pkt 1fpkt", shape=diamond, color=yellow];
2477[label="38.177.18.26;d;1pkt 1fpkt", shape=hexagon, color=black];
stat350[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.32.20.93:2061, 169.126.142.97:80}[33.3333%]&lt;BR/&gt;{138.186.52.93:6699, 38.177.18.26:2008}[33.3333%]&lt;BR/&gt;{138.186.52.93:6699, 214.197.22.177:3230}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (41.6667%)&lt;BR/&gt; 2008: (33.3333%)&lt;BR/&gt; 3230: (8.33333%)&lt;BR/&gt; 2061: (8.33333%)&lt;BR/&gt; 80: (8.33333%)&gt;];
}
186--595[label="0.5;1pkt 1fpkt"];
186--596[label="1;1pkt 1fpkt"];
186--702[label="0.5;1pkt 1fpkt"];
186--1403[label="0.5;1pkt 1fpkt"];
186--2477[label="1;1pkt 1fpkt"];
186--3018[label="0.5;1pkt 1fpkt"];
595--596[label="1;1pkt 1fpkt"];
595--2477[label="1;1pkt 1fpkt"];
596--2477[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.197.22.177" dst_port="3230" src_ip="138.186.52.93" src_port="6699"/>
      <filter dst_ip="38.177.18.26" dst_port="2008" src_ip="138.186.52.93" src_port="6699"/>
      <filter dst_ip="169.126.142.97" dst_port="80" src_ip="215.32.20.93" src_port="2061"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_351{
style=filled;
color=gray75;
597[label="193.216.154.213;s;1pkt 1fpkt", shape=diamond, color=yellow];
2478[label="193.216.154.213;s;1pkt 1fpkt", shape=hexagon, color=black];
stat351[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.216.154.213:61465, 138.186.52.55:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61465: (50%)&lt;BR/&gt; 6699: (50%)&gt;];
}
597--845[label="1;1pkt 1fpkt"];
597--2478[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.52.55" dst_port="6699" src_ip="193.216.154.213" src_port="61465"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_352{
style=filled;
color=gray75;
601[label="172.93.144.46;s;61pkt 61fpkt", shape=diamond, color=yellow];
2479[label="172.93.144.46;s;13pkt 13fpkt", shape=hexagon, color=black];
stat352[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.93.144.46:1096, *:4665}[73.7705%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1096: (45.9459%)&lt;BR/&gt; 4665: (35.1351%)&lt;BR/&gt; 4662: (4.05405%)&lt;BR/&gt; 4669: (2.02703%)&lt;BR/&gt; 6670: (1.35135%)&gt;];
}
601--724[label="1;1pkt 1fpkt"];
601--1248[label="1;1pkt 1fpkt"];
601--2479[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_port="4665" src_ip="172.93.144.46" src_port="1096"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669758" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.877599,1.95518,002,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.231.137.231"/>
      <from sec="1039669696" usec="0"/>
      <to sec="1039669702" usec="0"/>
    </slice>
    <from sec="1039669696" usec="0"/>
    <to sec="1039669702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.877599,1.95518,002,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="96.152.153.70"/>
      <from sec="1039669696" usec="0"/>
      <to sec="1039669702" usec="0"/>
    </slice>
    <from sec="1039669696" usec="0"/>
    <to sec="1039669702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_357{
style=filled;
color=gray75;
478[label="138.186.54.0;s;51pkt 51fpkt", shape=diamond, color=yellow];
610[label="98.169.198.117;d;4pkt 4fpkt", shape=diamond, color=yellow];
701[label="33.80.48.31;d;1pkt 1fpkt", shape=diamond, color=yellow];
835[label="60.144.129.111;d;2pkt 2fpkt", shape=diamond, color=yellow];
2442[label="64.65.28.90;d;2pkt 2fpkt", shape=diamond, color=yellow];
2508[label="60.144.129.111;d;2pkt 2fpkt", shape=hexagon, color=black];
2580[label="138.186.54.0;s;42pkt 42fpkt", shape=hexagon, color=black];
3117[label="64.65.28.90;d;2pkt 2fpkt", shape=hexagon, color=black];
3190[label="138.186.54.0;50pkt 50fpkt", shape=pentagon, color=darkviolet];
5530[label="138.186.54.0;51pkt 51fpkt", shape=invtriangle, color=brown];
7057[label="138.186.54.0;50pkt 50fpkt", shape=invhouse, color=bisque];
stat357[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.54.0:6257, *:6257}[78.1818%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (82.4903%)&lt;BR/&gt; 6699: (7.7821%)&lt;BR/&gt; 1126: (1.36187%)&lt;BR/&gt; 1232: (1.16732%)&lt;BR/&gt; 1127: (1.16732%)&gt;];
}
478--610[label="0.25;1pkt 1fpkt"];
478--701[label="1;1pkt 1fpkt"];
478--835[label="0.5;1pkt 1fpkt"];
478--2442[label="1;2pkt 2fpkt"];
478--2508[label="0.5;1pkt 1fpkt"];
478--2580[label="1;42pkt 42fpkt"];
478--3117[label="1;2pkt 2fpkt"];
478--3190[label="1;50pkt 50fpkt"];
478--5530[label="1;51pkt 51fpkt"];
478--7057[label="1;50pkt 50fpkt"];
610--890[label="0.25;1pkt 1fpkt"];
610--2580[label="0.25;1pkt 1fpkt"];
610--2744[label="0.25;1pkt 1fpkt"];
610--2885[label="0.25;1pkt 1fpkt"];
610--3155[label="0.25;1pkt 1fpkt"];
610--3190[label="0.25;1pkt 1fpkt"];
610--3809[label="0.25;1pkt 1fpkt"];
610--4144[label="0.25;1pkt 1fpkt"];
610--5341[label="0.25;1pkt 1fpkt"];
610--5530[label="0.25;1pkt 1fpkt"];
610--5924[label="0.25;1pkt 1fpkt"];
610--6134[label="0.25;1pkt 1fpkt"];
610--7057[label="0.25;1pkt 1fpkt"];
610--7296[label="0.25;1pkt 1fpkt"];
610--7432[label="0.25;1pkt 1fpkt"];
701--2580[label="1;1pkt 1fpkt"];
701--3190[label="1;1pkt 1fpkt"];
701--5530[label="1;1pkt 1fpkt"];
701--7057[label="1;1pkt 1fpkt"];
835--2508[label="1;2pkt 2fpkt"];
835--2580[label="0.5;1pkt 1fpkt"];
835--3190[label="0.5;1pkt 1fpkt"];
835--5530[label="0.5;1pkt 1fpkt"];
835--7057[label="0.5;1pkt 1fpkt"];
2442--3117[label="1;2pkt 2fpkt"];
2442--3190[label="1;2pkt 2fpkt"];
2442--5530[label="1;2pkt 2fpkt"];
2442--7057[label="1;2pkt 2fpkt"];
2508--2580[label="0.5;1pkt 1fpkt"];
2508--3190[label="0.5;1pkt 1fpkt"];
2508--5530[label="0.5;1pkt 1fpkt"];
2508--7057[label="0.5;1pkt 1fpkt"];
2580--3190[label="0.97619;41pkt 41fpkt"];
2580--5530[label="1;42pkt 42fpkt"];
2580--7057[label="0.97619;41pkt 41fpkt"];
3117--3190[label="1;2pkt 2fpkt"];
3117--5530[label="1;2pkt 2fpkt"];
3117--7057[label="1;2pkt 2fpkt"];
3190--5530[label="1;50pkt 50fpkt"];
3190--7057[label="1;50pkt 50fpkt"];
5530--7057[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="138.186.54.0" src_port="6257"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905994,1.86884,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_358{
style=filled;
color=gray75;
878[label="80.129.130.247;d;1pkt 1fpkt", shape=diamond, color=yellow];
879[label="138.186.218.120;s;2pkt 2fpkt", shape=diamond, color=yellow];
2514[label="80.129.130.247;d;1pkt 1fpkt", shape=hexagon, color=black];
4418[label="138.186.218.120;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat358[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.218.120:7743, 80.129.130.247:1547}[33.3333%]&lt;BR/&gt;{138.186.218.120:3205, 36.50.151.112:7743}[33.3333%]&lt;BR/&gt;{138.186.218.120:3238, 36.50.151.112:7743}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7743: (50%)&lt;BR/&gt; 1547: (28.5714%)&lt;BR/&gt; 3205: (14.2857%)&lt;BR/&gt; 3238: (7.14286%)&gt;];
}
878--879[label="1;1pkt 1fpkt"];
878--2514[label="1;1pkt 1fpkt"];
878--4418[label="1;1pkt 1fpkt"];
879--2514[label="1;1pkt 1fpkt"];
879--4418[label="1;2pkt 2fpkt"];
2514--4418[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="36.50.151.112" dst_port="7743" src_ip="138.186.218.120" src_port="3238"/>
      <filter dst_ip="36.50.151.112" dst_port="7743" src_ip="138.186.218.120" src_port="3205"/>
      <filter dst_ip="80.129.130.247" dst_port="1547" src_ip="138.186.218.120" src_port="7743"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_359{
style=filled;
color=gray75;
893[label="214.216.52.225;s;279pkt 279fpkt", shape=diamond, color=yellow];
2518[label="214.216.52.225;s;90pkt 90fpkt", shape=hexagon, color=black];
stat359[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.216.52.225:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
893--2518[label="1;90pkt 90fpkt"];
</description>
    <slice>
      <filter src_ip="214.216.52.225"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_360{
style=filled;
color=gray75;
603[label="198.171.164.90;d;1pkt 1fpkt", shape=diamond, color=yellow];
2521[label="198.171.164.90;d;1pkt 1fpkt", shape=hexagon, color=black];
stat360[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.87.96.170:30631, 198.171.164.90:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 30631: (50%)&lt;BR/&gt; 6699: (50%)&gt;];
}
603--2521[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.171.164.90" dst_port="6699" src_ip="215.87.96.170" src_port="30631"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905994,1.86884,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_361{
style=filled;
color=gray75;
646[label="172.93.129.67;d;1pkt 1fpkt", shape=diamond, color=yellow];
649[label="200.30.250.214;s;1pkt 1fpkt", shape=diamond, color=yellow];
2525[label="200.30.250.214;s;1pkt 1fpkt", shape=hexagon, color=black];
2665[label="172.93.129.67;d;1pkt 1fpkt", shape=hexagon, color=black];
5228[label="200.30.250.214;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat361[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.30.250.214:6699, 172.93.129.67:2882}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 2882: (50%)&gt;];
}
646--649[label="1;1pkt 1fpkt"];
646--2525[label="1;1pkt 1fpkt"];
646--2665[label="1;1pkt 1fpkt"];
646--5228[label="1;1pkt 1fpkt"];
649--2525[label="1;1pkt 1fpkt"];
649--2665[label="1;1pkt 1fpkt"];
649--5228[label="1;1pkt 1fpkt"];
2525--2665[label="1;1pkt 1fpkt"];
2525--5228[label="1;1pkt 1fpkt"];
2665--5228[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.93.129.67" dst_port="2882" src_ip="200.30.250.214" src_port="6699"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645838,1.80177,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_362{
style=filled;
color=gray75;
1140[label="148.110.106.40;s;67pkt 67fpkt", shape=diamond, color=yellow];
1432[label="140.3.229.114;s;152pkt 152fpkt", shape=diamond, color=yellow];
3673[label="148.110.106.40;70pkt 70fpkt", shape=pentagon, color=darkviolet];
4744[label="140.3.211.157;16pkt 16fpkt", shape=pentagon, color=darkviolet];
6538[label="140.3.211.157;16pkt 16fpkt", shape=invtriangle, color=brown];
stat362[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.229.114:*, *:80}[34.8739%]&lt;BR/&gt;{148.110.106.40:*, *:80}[27.7311%]&lt;BR/&gt;{140.3.229.114:32904, *:53}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.0062%)&lt;BR/&gt; 53: (9.34579%)&lt;BR/&gt; 32904: (8.72274%)&lt;BR/&gt; 0: (3.11526%)&lt;BR/&gt; 5190: (0.934579%)&gt;];
}
1140--3673[label="1;67pkt 67fpkt"];
1140--5833[label="1;67pkt 67fpkt"];
1432--1514[label="0.0533333;4pkt 4fpkt"];
1432--1671[label="0.016129;1pkt 1fpkt"];
1432--1893[label="0.00729927;1pkt 1fpkt"];
1432--3185[label="0.0263158;4pkt 4fpkt"];
1432--4375[label="1;152pkt 152fpkt"];
1432--6288[label="1;152pkt 152fpkt"];
1432--7519[label="1;152pkt 152fpkt"];
3673--5833[label="1;70pkt 70fpkt"];
4744--6538[label="1;16pkt 16fpkt"];
4744--7683[label="1;15pkt 15fpkt"];
6538--7683[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="140.3.229.114"/>
      <filter dst_port="80" src_ip="148.110.106.40"/>
      <filter dst_port="53" src_ip="140.3.229.114" src_port="32904"/>
    </slice>
    <from sec="1039669209" usec="0"/>
    <to sec="1039669914" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_363{
style=filled;
color=gray75;
1047[label="201.97.13.165;d;1pkt 1fpkt", shape=diamond, color=yellow];
1337[label="148.110.218.192;s;1pkt 1fpkt", shape=diamond, color=yellow];
2536[label="201.97.13.165;d;1pkt 1fpkt", shape=hexagon, color=black];
stat363[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.110.218.192:49174, 201.97.13.165:20182}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49174: (50%)&lt;BR/&gt; 20182: (50%)&gt;];
}
1047--1337[label="1;1pkt 1fpkt"];
1047--2536[label="1;1pkt 1fpkt"];
1337--2536[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.97.13.165" dst_port="20182" src_ip="148.110.218.192" src_port="49174"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905994,1.86884,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_364{
style=filled;
color=gray75;
1070[label="215.90.90.30;s;15pkt 15fpkt", shape=diamond, color=yellow];
1130[label="64.96.74.143;d;1pkt 1fpkt", shape=diamond, color=yellow];
2541[label="215.90.90.30;s;2pkt 2fpkt", shape=hexagon, color=black];
3572[label="215.90.90.30;19pkt 19fpkt", shape=pentagon, color=darkviolet];
stat364[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.90.90.30:*, 211.196.1.30:80}[84.2105%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.8378%)&lt;BR/&gt; 6699: (9.45946%)&lt;BR/&gt; 1544: (5.40541%)&lt;BR/&gt; 1039: (4.05405%)&lt;BR/&gt; 7743: (2.7027%)&gt;];
}
1070--1130[label="1;1pkt 1fpkt"];
1070--2541[label="1;2pkt 2fpkt"];
1070--3185[label="0.133333;2pkt 2fpkt"];
1070--3572[label="1;15pkt 15fpkt"];
1130--2541[label="1;1pkt 1fpkt"];
1130--3572[label="1;1pkt 1fpkt"];
2541--3572[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="211.196.1.30" dst_port="80" src_ip="215.90.90.30"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669922" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905994,1.86884,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_365{
style=filled;
color=gray75;
753[label="96.44.0.61;s;163pkt 163fpkt", shape=diamond, color=yellow];
935[label="215.90.72.231;d;324pkt 324fpkt", shape=diamond, color=yellow];
936[label="96.9.149.63;s;1pkt 1fpkt", shape=diamond, color=yellow];
2542[label="96.44.0.61;s;68pkt 68fpkt", shape=hexagon, color=black];
2591[label="96.9.149.63;s;1pkt 1fpkt", shape=hexagon, color=black];
5040[label="202.93.75.191;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat365[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.44.0.61:2011, 215.90.72.231:*}[49.8462%]&lt;BR/&gt;{*:80, 215.90.72.231:*}[32%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2011: (34.9732%)&lt;BR/&gt; 80: (9.39177%)&lt;BR/&gt; 21: (4.56172%)&lt;BR/&gt; 46853: (0.268336%)&lt;BR/&gt; 3604: (0.268336%)&gt;];
}
753--935[label="1;163pkt 163fpkt"];
753--2542[label="1;68pkt 68fpkt"];
935--936[label="1;1pkt 1fpkt"];
935--2100[label="0.015625;1pkt 1fpkt"];
935--2329[label="1;6pkt 6fpkt"];
935--2542[label="1;68pkt 68fpkt"];
935--2591[label="1;1pkt 1fpkt"];
935--3520[label="0.0142857;1pkt 1fpkt"];
935--4164[label="0.75;3pkt 3fpkt"];
935--4461[label="1;5pkt 5fpkt"];
935--5040[label="0.5;1pkt 1fpkt"];
936--2591[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.72.231" src_port="80"/>
      <filter dst_ip="215.90.72.231" src_ip="96.44.0.61" src_port="2011"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_366{
style=filled;
color=gray75;
1106[label="215.92.63.9;s;33pkt 33fpkt", shape=diamond, color=yellow];
1150[label="220.106.254.212;d;22pkt 22fpkt", shape=diamond, color=yellow];
2548[label="215.92.63.9;s;16pkt 16fpkt", shape=hexagon, color=black];
2625[label="220.106.254.212;d;22pkt 22fpkt", shape=hexagon, color=black];
3322[label="215.92.63.9;33pkt 33fpkt", shape=pentagon, color=darkviolet];
5611[label="215.92.63.9;33pkt 33fpkt", shape=invtriangle, color=brown];
7105[label="215.92.63.9;33pkt 33fpkt", shape=invhouse, color=bisque];
stat366[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.92.63.9:*, 220.106.254.212:80}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4208: (1.82292%)&lt;BR/&gt; 4207: (1.82292%)&lt;BR/&gt; 4206: (1.82292%)&lt;BR/&gt; 4205: (1.82292%)&gt;];
}
1106--1150[label="1;22pkt 22fpkt"];
1106--2548[label="1;16pkt 16fpkt"];
1106--2625[label="1;22pkt 22fpkt"];
1106--3322[label="1;33pkt 33fpkt"];
1106--5611[label="1;33pkt 33fpkt"];
1106--7105[label="1;33pkt 33fpkt"];
1150--2548[label="0.6875;11pkt 11fpkt"];
1150--2625[label="1;22pkt 22fpkt"];
1150--3322[label="1;22pkt 22fpkt"];
1150--5611[label="1;22pkt 22fpkt"];
1150--7105[label="1;22pkt 22fpkt"];
2548--2625[label="0.6875;11pkt 11fpkt"];
2548--3322[label="1;16pkt 16fpkt"];
2548--5611[label="1;16pkt 16fpkt"];
2548--7105[label="1;16pkt 16fpkt"];
2625--3322[label="1;22pkt 22fpkt"];
2625--5611[label="1;22pkt 22fpkt"];
2625--7105[label="1;22pkt 22fpkt"];
3322--5611[label="1;33pkt 33fpkt"];
3322--7105[label="1;33pkt 33fpkt"];
5611--7105[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="220.106.254.212" dst_port="80" src_ip="215.92.63.9"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669666" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_367{
style=filled;
color=gray75;
1127[label="96.6.133.92;d;1pkt 1fpkt", shape=diamond, color=yellow];
2552[label="96.6.133.92;d;1pkt 1fpkt", shape=hexagon, color=black];
stat367[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.110.147.12:4493, 96.6.133.92:4040}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4493: (50%)&lt;BR/&gt; 4040: (50%)&gt;];
}
1127--2552[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="96.6.133.92" dst_port="4040" src_ip="148.110.147.12" src_port="4493"/>
    </slice>
    <from sec="1039669204" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_368{
style=filled;
color=gray75;
1156[label="140.3.133.54;s;27pkt 27fpkt", shape=diamond, color=yellow];
2558[label="140.3.133.54;s;10pkt 10fpkt", shape=hexagon, color=black];
3801[label="140.3.133.54;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5918[label="140.3.133.54;2pkt 2fpkt", shape=invtriangle, color=brown];
7292[label="140.3.133.54;2pkt 2fpkt", shape=invhouse, color=bisque];
stat368[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.133.54:80, 36.83.14.224:*}[65.5172%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3504: (3.40909%)&lt;BR/&gt; 3503: (3.40909%)&lt;BR/&gt; 3122: (3.40909%)&lt;BR/&gt; 4378: (2.27273%)&gt;];
}
1156--1157[label="0.826087;19pkt 19fpkt"];
1156--2558[label="1;10pkt 10fpkt"];
1156--2559[label="0.857143;6pkt 6fpkt"];
1156--3801[label="0.333333;1pkt 1fpkt"];
2558--2559[label="0.857143;6pkt 6fpkt"];
2558--3801[label="0.333333;1pkt 1fpkt"];
3801--5918[label="1;2pkt 2fpkt"];
3801--7292[label="1;2pkt 2fpkt"];
5918--7292[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="36.83.14.224" src_ip="140.3.133.54" src_port="80"/>
    </slice>
    <from sec="1039669216" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19604,1.81002,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_369{
style=filled;
color=gray75;
24[label="202.76.85.90s;2pkt 2fpkt", shape=rectangle, color=red];
766[label="148.110.154.15;d;7pkt 7fpkt", shape=diamond, color=yellow];
802[label="202.76.85.90;s;1pkt 1fpkt", shape=diamond, color=yellow];
1779[label="36.83.101.90;s;5pkt 5fpkt", shape=diamond, color=yellow];
2563[label="202.76.85.90;s;1pkt 1fpkt", shape=hexagon, color=black];
2707[label="148.110.154.15;d;6pkt 6fpkt", shape=hexagon, color=black];
3746[label="211.90.158.48;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5204[label="202.148.188.211;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5882[label="211.90.158.48;7pkt 7fpkt", shape=invtriangle, color=brown];
7269[label="211.90.158.48;6pkt 6fpkt", shape=invhouse, color=bisque];
stat369[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.90.158.48:1863, *:*}[38.8889%]&lt;BR/&gt;{*:*, 148.110.154.15:*}[38.8889%]&lt;BR/&gt;{36.83.101.90:80, *:*}[27.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (30.2326%)&lt;BR/&gt; 80: (6.97674%)&lt;BR/&gt; 7456: (5.81395%)&lt;BR/&gt; 1411: (5.81395%)&lt;BR/&gt; 1344: (5.81395%)&gt;];
}
24--475[label="0.5;1pkt 1fpkt"];
24--766[label="0.5;1pkt 1fpkt"];
24--802[label="1;1pkt 1fpkt"];
24--1779[label="0.5;1pkt 1fpkt"];
24--2563[label="1;1pkt 1fpkt"];
24--2707[label="0.5;1pkt 1fpkt"];
766--802[label="1;1pkt 1fpkt"];
766--2563[label="1;1pkt 1fpkt"];
766--2707[label="1;6pkt 6fpkt"];
766--3746[label="0.142857;1pkt 1fpkt"];
766--4294[label="0.142857;1pkt 1fpkt"];
766--5204[label="1;1pkt 1fpkt"];
766--5882[label="0.142857;1pkt 1fpkt"];
766--6236[label="0.142857;1pkt 1fpkt"];
766--7269[label="0.166667;1pkt 1fpkt"];
766--7491[label="0.142857;1pkt 1fpkt"];
802--2563[label="1;1pkt 1fpkt"];
802--2707[label="1;1pkt 1fpkt"];
1779--2875[label="0.6;3pkt 3fpkt"];
2563--2707[label="1;1pkt 1fpkt"];
2707--3746[label="0.166667;1pkt 1fpkt"];
2707--4294[label="0.166667;1pkt 1fpkt"];
2707--5204[label="1;1pkt 1fpkt"];
2707--5882[label="0.166667;1pkt 1fpkt"];
2707--6236[label="0.166667;1pkt 1fpkt"];
2707--7269[label="0.166667;1pkt 1fpkt"];
2707--7491[label="0.166667;1pkt 1fpkt"];
3746--5882[label="1;7pkt 7fpkt"];
3746--7269[label="1;6pkt 6fpkt"];
5882--7269[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.154.15"/>
      <filter src_ip="211.90.158.48" src_port="1863"/>
      <filter src_ip="36.83.101.90" src_port="80"/>
    </slice>
    <from sec="1039669203" usec="0"/>
    <to sec="1039669884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,053,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_370{
style=filled;
color=gray75;
1199[label="39.80.5.142;d;60pkt 60fpkt", shape=diamond, color=yellow];
2567[label="39.80.5.142;d;58pkt 58fpkt", shape=hexagon, color=black];
stat370[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.29.24.129:*, 39.80.5.142:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 22580: (0.847458%)&lt;BR/&gt; 21740: (0.847458%)&lt;BR/&gt; 21339: (0.847458%)&lt;BR/&gt; 21320: (0.847458%)&gt;];
}
1199--2567[label="1;58pkt 58fpkt"];
1199--4485[label="1;60pkt 60fpkt"];
2567--4485[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_ip="39.80.5.142" dst_port="80" src_ip="148.29.24.129"/>
    </slice>
    <from sec="1039669309" usec="0"/>
    <to sec="1039669441" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_371{
style=filled;
color=gray75;
1200[label="202.155.218.74;s;53pkt 53fpkt", shape=diamond, color=yellow];
2568[label="202.155.218.74;s;53pkt 53fpkt", shape=hexagon, color=black];
stat371[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.155.218.74:5003, 215.90.72.42:*}[88.6792%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5003: (44.3396%)&lt;BR/&gt; 5004: (4.71698%)&lt;BR/&gt; 5001: (0.943396%)&lt;BR/&gt; 2849: (0.943396%)&lt;BR/&gt; 2841: (0.943396%)&gt;];
}
1200--2568[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.72.42" src_ip="202.155.218.74" src_port="5003"/>
    </slice>
    <from sec="1039669321" usec="0"/>
    <to sec="1039669498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19604,1.81002,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_372{
style=filled;
color=gray75;
258[label="37.33.167.166s;1pkt 1fpkt", shape=rectangle, color=red];
816[label="172.93.103.255;d;194pkt 194fpkt", shape=diamond, color=yellow];
1020[label="200.4.5.70;s;1pkt 1fpkt", shape=diamond, color=yellow];
1299[label="223.169.207.142;s;1pkt 1fpkt", shape=diamond, color=yellow];
1361[label="61.181.30.216;s;1pkt 1fpkt", shape=diamond, color=yellow];
1370[label="61.177.11.88;s;2pkt 2fpkt", shape=diamond, color=yellow];
1489[label="60.253.58.109;s;1pkt 1fpkt", shape=diamond, color=yellow];
1498[label="220.153.133.57;s;1pkt 1fpkt", shape=diamond, color=yellow];
1633[label="200.4.163.13;s;1pkt 1fpkt", shape=diamond, color=yellow];
1819[label="214.133.110.101;s;1pkt 1fpkt", shape=diamond, color=yellow];
1878[label="200.4.80.5;s;1pkt 1fpkt", shape=diamond, color=yellow];
1945[label="60.240.226.109;s;1pkt 1fpkt", shape=diamond, color=yellow];
2157[label="220.157.133.148;s;2pkt 2fpkt", shape=diamond, color=yellow];
2572[label="172.93.103.255;d;181pkt 181fpkt", shape=hexagon, color=black];
2993[label="60.253.58.109;s;1pkt 1fpkt", shape=hexagon, color=black];
3081[label="220.157.133.148;s;2pkt 2fpkt", shape=hexagon, color=black];
3374[label="200.4.163.13;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4137[label="61.177.11.88;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4286[label="96.29.119.103;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6231[label="96.29.119.103;1pkt 1fpkt", shape=invtriangle, color=brown];
7122[label="200.4.163.13;1pkt 1fpkt", shape=invhouse, color=bisque];
7303[label="220.153.133.57;1pkt 1fpkt", shape=invhouse, color=bisque];
stat372[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:4662, 172.93.103.255:*}[78.866%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (39.4472%)&lt;BR/&gt; 80: (2.51256%)&lt;BR/&gt; 413: (2.38693%)&lt;BR/&gt; 0: (2.01005%)&lt;BR/&gt; 3956: (1.75879%)&gt;];
}
258--816[label="1;1pkt 1fpkt"];
258--2572[label="1;1pkt 1fpkt"];
816--1020[label="1;1pkt 1fpkt"];
816--1299[label="1;1pkt 1fpkt"];
816--1361[label="1;1pkt 1fpkt"];
816--1370[label="1;2pkt 2fpkt"];
816--1489[label="1;1pkt 1fpkt"];
816--1498[label="1;1pkt 1fpkt"];
816--1633[label="1;1pkt 1fpkt"];
816--1819[label="1;1pkt 1fpkt"];
816--1878[label="1;1pkt 1fpkt"];
816--1888[label="1;1pkt 1fpkt"];
816--1945[label="1;1pkt 1fpkt"];
816--2052[label="1;1pkt 1fpkt"];
816--2157[label="1;2pkt 2fpkt"];
816--2572[label="1;181pkt 181fpkt"];
816--2910[label="1;1pkt 1fpkt"];
816--2993[label="1;1pkt 1fpkt"];
816--3081[label="1;2pkt 2fpkt"];
816--3374[label="1;1pkt 1fpkt"];
816--4137[label="1;1pkt 1fpkt"];
816--4266[label="1;1pkt 1fpkt"];
816--4286[label="1;1pkt 1fpkt"];
816--5343[label="1;1pkt 1fpkt"];
816--6217[label="1;1pkt 1fpkt"];
816--6231[label="1;1pkt 1fpkt"];
816--7122[label="1;1pkt 1fpkt"];
816--7303[label="1;1pkt 1fpkt"];
816--7939[label="1;1pkt 1fpkt"];
1020--2572[label="1;1pkt 1fpkt"];
1299--2572[label="1;1pkt 1fpkt"];
1361--2572[label="1;1pkt 1fpkt"];
1370--2572[label="1;2pkt 2fpkt"];
1370--4137[label="1;1pkt 1fpkt"];
1489--2572[label="1;1pkt 1fpkt"];
1489--2993[label="1;1pkt 1fpkt"];
1498--2572[label="1;1pkt 1fpkt"];
1498--7303[label="1;1pkt 1fpkt"];
1633--2572[label="1;1pkt 1fpkt"];
1633--3374[label="1;1pkt 1fpkt"];
1633--7122[label="1;1pkt 1fpkt"];
1819--2572[label="1;1pkt 1fpkt"];
1878--2572[label="1;1pkt 1fpkt"];
1945--2572[label="1;1pkt 1fpkt"];
2157--2572[label="1;2pkt 2fpkt"];
2157--3081[label="1;2pkt 2fpkt"];
2572--2910[label="1;1pkt 1fpkt"];
2572--2993[label="1;1pkt 1fpkt"];
2572--3081[label="1;2pkt 2fpkt"];
2572--3374[label="1;1pkt 1fpkt"];
2572--4137[label="1;1pkt 1fpkt"];
2572--4266[label="1;1pkt 1fpkt"];
2572--4286[label="1;1pkt 1fpkt"];
2572--5343[label="1;1pkt 1fpkt"];
2572--6217[label="1;1pkt 1fpkt"];
2572--6231[label="1;1pkt 1fpkt"];
2572--7122[label="1;1pkt 1fpkt"];
2572--7303[label="1;1pkt 1fpkt"];
2572--7939[label="1;1pkt 1fpkt"];
3374--7122[label="1;1pkt 1fpkt"];
4286--6231[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.93.103.255" src_port="4662"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_373{
style=filled;
color=gray75;
436[label="172.93.103.255;s;359pkt 359fpkt", shape=diamond, color=yellow];
1019[label="200.4.5.70;d;1pkt 1fpkt", shape=diamond, color=yellow];
1104[label="61.177.11.88;d;2pkt 2fpkt", shape=diamond, color=yellow];
1360[label="61.181.30.216;d;1pkt 1fpkt", shape=diamond, color=yellow];
1488[label="60.253.58.109;d;1pkt 1fpkt", shape=diamond, color=yellow];
1512[label="200.66.190.218;d;1pkt 1fpkt", shape=diamond, color=yellow];
1557[label="223.169.207.142;d;1pkt 1fpkt", shape=diamond, color=yellow];
1560[label="193.107.64.80;d;1pkt 1fpkt", shape=diamond, color=yellow];
1596[label="200.224.53.170;d;1pkt 1fpkt", shape=diamond, color=yellow];
1632[label="200.4.163.13;d;1pkt 1fpkt", shape=diamond, color=yellow];
1653[label="99.88.173.171;d;1pkt 1fpkt", shape=diamond, color=yellow];
1734[label="60.240.226.109;d;1pkt 1fpkt", shape=diamond, color=yellow];
1877[label="200.4.80.5;d;1pkt 1fpkt", shape=diamond, color=yellow];
2020[label="220.153.133.57;d;1pkt 1fpkt", shape=diamond, color=yellow];
2051[label="60.153.19.230;d;1pkt 1fpkt", shape=diamond, color=yellow];
2377[label="212.7.186.183;d;1pkt 1fpkt", shape=diamond, color=yellow];
2388[label="64.176.115.166;d;1pkt 1fpkt", shape=diamond, color=yellow];
2399[label="200.224.150.124;d;1pkt 1fpkt", shape=diamond, color=yellow];
2573[label="172.93.103.255;s;359pkt 359fpkt", shape=hexagon, color=black];
2687[label="193.107.64.80;d;1pkt 1fpkt", shape=hexagon, color=black];
2790[label="200.4.5.70;d;1pkt 1fpkt", shape=hexagon, color=black];
2810[label="61.177.11.88;d;2pkt 2fpkt", shape=hexagon, color=black];
2843[label="60.240.226.109;d;1pkt 1fpkt", shape=hexagon, color=black];
2865[label="60.253.58.109;d;1pkt 1fpkt", shape=hexagon, color=black];
3024[label="223.169.207.142;d;1pkt 1fpkt", shape=hexagon, color=black];
3055[label="200.4.80.5;d;1pkt 1fpkt", shape=hexagon, color=black];
3102[label="64.176.115.166;d;1pkt 1fpkt", shape=hexagon, color=black];
stat373[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.93.103.255:*, *:4662}[64.3454%]&lt;BR/&gt;{172.93.103.255:3956, *:*}[26.1838%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (32.6174%)&lt;BR/&gt; 3956: (12.6174%)&lt;BR/&gt; 4665: (8.45638%)&lt;BR/&gt; 413: (1.34228%)&lt;BR/&gt; 4661: (0.805369%)&gt;];
}
436--1019[label="1;1pkt 1fpkt"];
436--1104[label="1;2pkt 2fpkt"];
436--1360[label="1;1pkt 1fpkt"];
436--1488[label="1;1pkt 1fpkt"];
436--1512[label="1;1pkt 1fpkt"];
436--1557[label="1;1pkt 1fpkt"];
436--1560[label="1;1pkt 1fpkt"];
436--1596[label="1;1pkt 1fpkt"];
436--1632[label="1;1pkt 1fpkt"];
436--1653[label="1;1pkt 1fpkt"];
436--1734[label="1;1pkt 1fpkt"];
436--1877[label="1;1pkt 1fpkt"];
436--2020[label="1;1pkt 1fpkt"];
436--2051[label="1;1pkt 1fpkt"];
436--2377[label="1;1pkt 1fpkt"];
436--2388[label="1;1pkt 1fpkt"];
436--2399[label="1;1pkt 1fpkt"];
436--2573[label="1;359pkt 359fpkt"];
436--2687[label="1;1pkt 1fpkt"];
436--2790[label="1;1pkt 1fpkt"];
436--2810[label="1;2pkt 2fpkt"];
436--2843[label="1;1pkt 1fpkt"];
436--2865[label="1;1pkt 1fpkt"];
436--3024[label="1;1pkt 1fpkt"];
436--3055[label="1;1pkt 1fpkt"];
436--3102[label="1;1pkt 1fpkt"];
436--3185[label="0.00278552;1pkt 1fpkt"];
1019--2573[label="1;1pkt 1fpkt"];
1019--2790[label="1;1pkt 1fpkt"];
1104--2573[label="1;2pkt 2fpkt"];
1104--2810[label="1;2pkt 2fpkt"];
1360--2573[label="1;1pkt 1fpkt"];
1488--2573[label="1;1pkt 1fpkt"];
1488--2865[label="1;1pkt 1fpkt"];
1512--2573[label="1;1pkt 1fpkt"];
1557--2573[label="1;1pkt 1fpkt"];
1557--3024[label="1;1pkt 1fpkt"];
1560--2573[label="1;1pkt 1fpkt"];
1560--2687[label="1;1pkt 1fpkt"];
1596--2573[label="1;1pkt 1fpkt"];
1632--2573[label="1;1pkt 1fpkt"];
1653--2573[label="1;1pkt 1fpkt"];
1734--2573[label="1;1pkt 1fpkt"];
1734--2843[label="1;1pkt 1fpkt"];
1877--2573[label="1;1pkt 1fpkt"];
1877--3055[label="1;1pkt 1fpkt"];
2020--2573[label="1;1pkt 1fpkt"];
2051--2573[label="1;1pkt 1fpkt"];
2377--2573[label="1;1pkt 1fpkt"];
2388--2573[label="1;1pkt 1fpkt"];
2388--3102[label="1;1pkt 1fpkt"];
2399--2573[label="1;1pkt 1fpkt"];
2573--2687[label="1;1pkt 1fpkt"];
2573--2790[label="1;1pkt 1fpkt"];
2573--2810[label="1;2pkt 2fpkt"];
2573--2843[label="1;1pkt 1fpkt"];
2573--2865[label="1;1pkt 1fpkt"];
2573--3024[label="1;1pkt 1fpkt"];
2573--3055[label="1;1pkt 1fpkt"];
2573--3102[label="1;1pkt 1fpkt"];
2573--3185[label="0.00278552;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="172.93.103.255" src_port="3956"/>
      <filter dst_port="4662" src_ip="172.93.103.255"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.937874,1.83478,504,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_374{
style=filled;
color=gray75;
1645[label="211.196.0.124;d;50pkt 50fpkt", shape=diamond, color=yellow];
2706[label="211.196.0.124;d;50pkt 50fpkt", shape=hexagon, color=black];
5029[label="140.3.249.188;53pkt 53fpkt", shape=pentagon, color=darkviolet];
5583[label="140.3.230.5;27pkt 27fpkt", shape=invtriangle, color=brown];
stat374[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.249.188:*, 211.196.0.124:443}[34.4086%]&lt;BR/&gt;{140.3.230.5:*, *:*}[29.0323%]&lt;BR/&gt;{140.3.249.188:*, 211.196.4.31:443}[22.5806%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (45.8333%)&lt;BR/&gt; 80: (3.61111%)&lt;BR/&gt; 0: (1.11111%)&lt;BR/&gt; 1690: (0.833333%)&lt;BR/&gt; 1689: (0.833333%)&gt;];
}
1645--2706[label="1;50pkt 50fpkt"];
1645--3280[label="0.333333;9pkt 9fpkt"];
1645--3897[label="0.375;3pkt 3fpkt"];
1645--5029[label="0.56;28pkt 28fpkt"];
1645--5583[label="0.333333;9pkt 9fpkt"];
1645--5977[label="0.375;3pkt 3fpkt"];
1645--7333[label="0.375;3pkt 3fpkt"];
2706--3280[label="0.333333;9pkt 9fpkt"];
2706--3897[label="0.375;3pkt 3fpkt"];
2706--5029[label="0.56;28pkt 28fpkt"];
2706--5583[label="0.333333;9pkt 9fpkt"];
2706--5977[label="0.375;3pkt 3fpkt"];
2706--7333[label="0.375;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="140.3.230.5"/>
      <filter dst_ip="211.196.0.124" dst_port="443" src_ip="140.3.249.188"/>
      <filter dst_ip="211.196.4.31" dst_port="443" src_ip="140.3.249.188"/>
    </slice>
    <from sec="1039669202" usec="0"/>
    <to sec="1039669907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905994,1.86884,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_375{
style=filled;
color=gray75;
670[label="138.186.176.219;s;1064pkt 1064fpkt", shape=diamond, color=yellow];
723[label="64.3.177.57;d;3pkt 3fpkt", shape=diamond, color=yellow];
826[label="148.110.14.245;s;874pkt 874fpkt", shape=diamond, color=yellow];
1813[label="33.85.177.29;d;3pkt 3fpkt", shape=diamond, color=yellow];
2576[label="148.110.14.245;s;874pkt 874fpkt", shape=hexagon, color=black];
5269[label="138.186.176.219;1173pkt 1173fpkt", shape=pentagon, color=darkviolet];
stat375[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.176.219:6257, *:6257}[56.3752%]&lt;BR/&gt;{148.110.14.245:6257, *:6257}[41.0845%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (97.9328%)&lt;BR/&gt; 6699: (0.751691%)&lt;BR/&gt; 16257: (0.0751691%)&lt;BR/&gt; 1214: (0.0501128%)&lt;BR/&gt; 4271: (0.0375846%)&gt;];
}
670--723[label="0.333333;1pkt 1fpkt"];
670--1356[label="1;1pkt 1fpkt"];
670--1520[label="1;1pkt 1fpkt"];
670--1591[label="1;1pkt 1fpkt"];
670--1813[label="0.333333;1pkt 1fpkt"];
670--2143[label="0.333333;1pkt 1fpkt"];
670--5269[label="1;1064pkt 1064fpkt"];
723--826[label="0.666667;2pkt 2fpkt"];
723--2576[label="0.666667;2pkt 2fpkt"];
723--5269[label="0.333333;1pkt 1fpkt"];
826--1813[label="0.666667;2pkt 2fpkt"];
826--2576[label="1;874pkt 874fpkt"];
1813--2576[label="0.666667;2pkt 2fpkt"];
1813--5269[label="0.333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="138.186.176.219" src_port="6257"/>
      <filter dst_port="6257" src_ip="148.110.14.245" src_port="6257"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905994,1.86884,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_376{
style=filled;
color=gray75;
833[label="98.131.46.23;s;1pkt 1fpkt", shape=diamond, color=yellow];
834[label="138.186.55.6;d;7pkt 7fpkt", shape=diamond, color=yellow];
2449[label="39.24.111.64;s;1pkt 1fpkt", shape=diamond, color=yellow];
2579[label="98.131.46.23;s;1pkt 1fpkt", shape=hexagon, color=black];
4246[label="37.24.3.98;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat376[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 138.186.55.6:6699}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (45.4545%)&lt;BR/&gt; 10391: (13.6364%)&lt;BR/&gt; 38043: (9.09091%)&lt;BR/&gt; 1382: (9.09091%)&lt;BR/&gt; 4681: (4.54545%)&gt;];
}
833--834[label="1;1pkt 1fpkt"];
833--2579[label="1;1pkt 1fpkt"];
834--2449[label="1;1pkt 1fpkt"];
834--2579[label="1;1pkt 1fpkt"];
834--4246[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.55.6" dst_port="6699"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669921" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_377{
style=filled;
color=gray75;
1230[label="96.104.213.154;s;1pkt 1fpkt", shape=diamond, color=yellow];
2582[label="96.104.213.154;s;1pkt 1fpkt", shape=hexagon, color=black];
stat377[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.104.213.154:3653, 148.110.22.91:1801}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3653: (50%)&lt;BR/&gt; 1801: (50%)&gt;];
}
1230--2582[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.22.91" dst_port="1801" src_ip="96.104.213.154" src_port="3653"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_378{
style=filled;
color=gray75;
857[label="148.110.65.19;d;2pkt 2fpkt", shape=diamond, color=yellow];
858[label="193.19.219.143;s;2pkt 2fpkt", shape=diamond, color=yellow];
2584[label="193.19.219.143;s;2pkt 2fpkt", shape=hexagon, color=black];
4618[label="193.19.219.143;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6452[label="193.19.219.143;1pkt 1fpkt", shape=invtriangle, color=brown];
7628[label="193.19.219.143;2pkt 2fpkt", shape=invhouse, color=bisque];
stat378[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.19.219.143:554, 148.110.65.19:1122}[50%]&lt;BR/&gt;{193.19.219.143:9126, 148.110.65.19:6972}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1122: (30%)&lt;BR/&gt; 554: (30%)&lt;BR/&gt; 9126: (20%)&lt;BR/&gt; 6972: (20%)&gt;];
}
857--858[label="1;2pkt 2fpkt"];
857--2584[label="1;2pkt 2fpkt"];
857--4618[label="1;1pkt 1fpkt"];
857--6452[label="1;1pkt 1fpkt"];
857--7628[label="1;2pkt 2fpkt"];
858--2584[label="1;2pkt 2fpkt"];
858--4618[label="1;1pkt 1fpkt"];
858--6452[label="1;1pkt 1fpkt"];
858--7628[label="1;2pkt 2fpkt"];
2584--4618[label="1;1pkt 1fpkt"];
2584--6452[label="1;1pkt 1fpkt"];
2584--7628[label="1;2pkt 2fpkt"];
4618--6452[label="1;1pkt 1fpkt"];
4618--7628[label="1;1pkt 1fpkt"];
6452--7628[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.65.19" dst_port="6972" src_ip="193.19.219.143" src_port="9126"/>
      <filter dst_ip="148.110.65.19" dst_port="1122" src_ip="193.19.219.143" src_port="554"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_379{
style=filled;
color=gray75;
551[label="138.186.54.41;d;2pkt 2fpkt", shape=diamond, color=yellow];
863[label="197.95.65.226;s;1pkt 1fpkt", shape=diamond, color=yellow];
2586[label="197.95.65.226;s;1pkt 1fpkt", shape=hexagon, color=black];
stat379[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.90.155.218:1863, 138.186.54.41:1122}[50%]&lt;BR/&gt;{197.95.65.226:3421, 138.186.54.41:6699}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (37.5%)&lt;BR/&gt; 3421: (37.5%)&lt;BR/&gt; 1863: (12.5%)&lt;BR/&gt; 1122: (12.5%)&gt;];
}
551--863[label="1;1pkt 1fpkt"];
551--2586[label="1;1pkt 1fpkt"];
863--2586[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.54.41" dst_port="6699" src_ip="197.95.65.226" src_port="3421"/>
      <filter dst_ip="138.186.54.41" dst_port="1122" src_ip="211.90.155.218" src_port="1863"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_380{
style=filled;
color=gray75;
647[label="172.93.129.67;s;2pkt 2fpkt", shape=diamond, color=yellow];
648[label="200.30.250.214;d;1pkt 1fpkt", shape=diamond, color=yellow];
700[label="200.226.34.105;d;1pkt 1fpkt", shape=diamond, color=yellow];
2590[label="172.93.129.67;s;2pkt 2fpkt", shape=hexagon, color=black];
stat380[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.93.129.67:2886, 200.226.34.105:6699}[50%]&lt;BR/&gt;{172.93.129.67:2882, 200.30.250.214:6699}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 2886: (25%)&lt;BR/&gt; 2882: (25%)&gt;];
}
647--648[label="1;1pkt 1fpkt"];
647--700[label="1;1pkt 1fpkt"];
647--2590[label="1;2pkt 2fpkt"];
648--2590[label="1;1pkt 1fpkt"];
700--2590[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.30.250.214" dst_port="6699" src_ip="172.93.129.67" src_port="2882"/>
      <filter dst_ip="200.226.34.105" dst_port="6699" src_ip="172.93.129.67" src_port="2886"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11796,1.82888,999,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_381{
style=filled;
color=gray75;
5[label="138.186.50.25s;2pkt 2fpkt", shape=rectangle, color=red];
672[label="33.54.166.232;d;1pkt 1fpkt", shape=diamond, color=yellow];
947[label="138.186.50.25;s;4pkt 4fpkt", shape=diamond, color=yellow];
1205[label="99.216.182.240;d;1pkt 1fpkt", shape=diamond, color=yellow];
1682[label="214.212.218.225;d;1pkt 1fpkt", shape=diamond, color=yellow];
2593[label="138.186.50.25;s;4pkt 4fpkt", shape=hexagon, color=black];
3521[label="138.186.50.25;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5741[label="138.186.50.25;3pkt 3fpkt", shape=invtriangle, color=brown];
stat381[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.50.25:3076, 211.90.154.13:1863}[25%]&lt;BR/&gt;{138.186.50.25:6699, 214.212.218.225:3725}[25%]&lt;BR/&gt;{138.186.50.25:6699, 33.54.166.232:65391}[25%]&lt;BR/&gt;{138.186.50.25:6699, 99.216.182.240:4498}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (42.5%)&lt;BR/&gt; 4498: (15%)&lt;BR/&gt; 3725: (15%)&lt;BR/&gt; 65391: (12.5%)&lt;BR/&gt; 3076: (7.5%)&gt;];
}
5--947[label="1;2pkt 2fpkt"];
5--1205[label="1;1pkt 1fpkt"];
5--1682[label="1;1pkt 1fpkt"];
5--2593[label="1;2pkt 2fpkt"];
5--3521[label="1;2pkt 2fpkt"];
5--5741[label="1;2pkt 2fpkt"];
672--947[label="1;1pkt 1fpkt"];
672--2593[label="1;1pkt 1fpkt"];
672--3521[label="1;1pkt 1fpkt"];
672--5741[label="1;1pkt 1fpkt"];
947--1205[label="1;1pkt 1fpkt"];
947--1682[label="1;1pkt 1fpkt"];
947--2593[label="1;4pkt 4fpkt"];
947--3521[label="1;4pkt 4fpkt"];
947--5741[label="1;3pkt 3fpkt"];
1205--2593[label="1;1pkt 1fpkt"];
1205--3521[label="1;1pkt 1fpkt"];
1205--5741[label="1;1pkt 1fpkt"];
1682--2593[label="1;1pkt 1fpkt"];
1682--3521[label="1;1pkt 1fpkt"];
1682--5741[label="1;1pkt 1fpkt"];
2593--3521[label="1;4pkt 4fpkt"];
2593--5741[label="1;3pkt 3fpkt"];
3521--5741[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="99.216.182.240" dst_port="4498" src_ip="138.186.50.25" src_port="6699"/>
      <filter dst_ip="33.54.166.232" dst_port="65391" src_ip="138.186.50.25" src_port="6699"/>
      <filter dst_ip="214.212.218.225" dst_port="3725" src_ip="138.186.50.25" src_port="6699"/>
      <filter dst_ip="211.90.154.13" dst_port="1863" src_ip="138.186.50.25" src_port="3076"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905994,1.86884,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_382{
style=filled;
color=gray75;
1272[label="140.3.231.78;d;195pkt 195fpkt", shape=diamond, color=yellow];
1275[label="199.94.162.34;s;193pkt 193fpkt", shape=diamond, color=yellow];
2595[label="199.94.162.34;s;85pkt 85fpkt", shape=hexagon, color=black];
2900[label="140.3.231.78;d;195pkt 195fpkt", shape=hexagon, color=black];
3613[label="199.94.162.34;193pkt 193fpkt", shape=pentagon, color=darkviolet];
stat382[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.94.162.34:80, 140.3.231.78:*}[98.9744%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8839%)&lt;BR/&gt; 1954: (0.29036%)&lt;BR/&gt; 1953: (0.29036%)&lt;BR/&gt; 1952: (0.29036%)&lt;BR/&gt; 1951: (0.29036%)&gt;];
}
1272--1275[label="1;193pkt 193fpkt"];
1272--2595[label="1;85pkt 85fpkt"];
1272--2900[label="1;195pkt 195fpkt"];
1272--3613[label="1;193pkt 193fpkt"];
1275--2595[label="1;85pkt 85fpkt"];
1275--2900[label="1;193pkt 193fpkt"];
1275--3613[label="1;193pkt 193fpkt"];
2595--2900[label="1;85pkt 85fpkt"];
2595--3613[label="1;85pkt 85fpkt"];
2900--3613[label="1;193pkt 193fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.231.78" src_ip="199.94.162.34" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669765" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_383{
style=filled;
color=gray75;
991[label="39.111.168.216;d;1pkt 1fpkt", shape=diamond, color=yellow];
2599[label="39.111.168.216;d;1pkt 1fpkt", shape=hexagon, color=black];
stat383[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.160.138.180:40163, 39.111.168.216:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 40163: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
991--2599[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="39.111.168.216" dst_port="80" src_ip="215.160.138.180" src_port="40163"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669403" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21802,1.90876,999,1 0 0 1 1 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_384{
style=filled;
color=gray75;
109[label="214.132.54.26s;2pkt 2fpkt", shape=rectangle, color=red];
741[label="215.90.72.4;d;2pkt 2fpkt", shape=diamond, color=yellow];
1055[label="96.63.118.26;s;2pkt 2fpkt", shape=diamond, color=yellow];
2609[label="215.90.72.4;d;2pkt 2fpkt", shape=hexagon, color=black];
7189[label="96.63.118.26;1pkt 1fpkt", shape=invhouse, color=bisque];
stat384[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.177.18.26:2008, 138.186.52.93:6699}[33.3333%]&lt;BR/&gt;{96.63.118.26:8080, 215.90.72.4:1212}[33.3333%]&lt;BR/&gt;{96.63.118.26:8080, 215.90.72.4:1213}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (44.4444%)&lt;BR/&gt; 1212: (27.7778%)&lt;BR/&gt; 1213: (16.6667%)&lt;BR/&gt; 6699: (5.55556%)&lt;BR/&gt; 2008: (5.55556%)&gt;];
}
109--741[label="0.5;1pkt 1fpkt"];
109--901[label="1;1pkt 1fpkt"];
109--902[label="1;1pkt 1fpkt"];
109--1055[label="0.5;1pkt 1fpkt"];
109--2609[label="0.5;1pkt 1fpkt"];
109--2760[label="1;1pkt 1fpkt"];
109--7189[label="1;1pkt 1fpkt"];
741--1055[label="1;2pkt 2fpkt"];
741--2609[label="1;2pkt 2fpkt"];
741--7189[label="1;1pkt 1fpkt"];
1055--2609[label="1;2pkt 2fpkt"];
1055--7189[label="1;1pkt 1fpkt"];
2609--7189[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.72.4" dst_port="1213" src_ip="96.63.118.26" src_port="8080"/>
      <filter dst_ip="215.90.72.4" dst_port="1212" src_ip="96.63.118.26" src_port="8080"/>
      <filter dst_ip="138.186.52.93" dst_port="6699" src_ip="38.177.18.26" src_port="2008"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905994,1.86884,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_385{
style=filled;
color=gray75;
1052[label="96.66.76.83;s;2pkt 2fpkt", shape=diamond, color=yellow];
1369[label="138.186.51.141;d;2pkt 2fpkt", shape=diamond, color=yellow];
1589[label="138.186.52.0;d;2pkt 2fpkt", shape=diamond, color=yellow];
2608[label="96.66.76.83;s;2pkt 2fpkt", shape=hexagon, color=black];
2614[label="138.186.51.141;d;2pkt 2fpkt", shape=hexagon, color=black];
4089[label="96.66.76.83;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat385[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.90.155.42:1863, 138.186.51.141:3001}[25%]&lt;BR/&gt;{211.90.155.180:1863, 138.186.52.0:1029}[25%]&lt;BR/&gt;{96.66.76.83:5001, 138.186.52.0:1040}[25%]&lt;BR/&gt;{96.66.76.83:5001, 138.186.51.141:3328}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (36.3636%)&lt;BR/&gt; 3328: (22.7273%)&lt;BR/&gt; 1863: (13.6364%)&lt;BR/&gt; 1040: (13.6364%)&lt;BR/&gt; 3001: (9.09091%)&gt;];
}
1052--1369[label="0.5;1pkt 1fpkt"];
1052--1589[label="0.5;1pkt 1fpkt"];
1052--2608[label="1;2pkt 2fpkt"];
1052--2614[label="0.5;1pkt 1fpkt"];
1052--4089[label="1;1pkt 1fpkt"];
1369--2608[label="0.5;1pkt 1fpkt"];
1369--2614[label="1;2pkt 2fpkt"];
1369--4089[label="1;1pkt 1fpkt"];
1589--2608[label="0.5;1pkt 1fpkt"];
2608--2614[label="0.5;1pkt 1fpkt"];
2608--4089[label="1;1pkt 1fpkt"];
2614--4089[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.51.141" dst_port="3328" src_ip="96.66.76.83" src_port="5001"/>
      <filter dst_ip="138.186.52.0" dst_port="1040" src_ip="96.66.76.83" src_port="5001"/>
      <filter dst_ip="138.186.52.0" dst_port="1029" src_ip="211.90.155.180" src_port="1863"/>
      <filter dst_ip="138.186.51.141" dst_port="3001" src_ip="211.90.155.42" src_port="1863"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_386{
style=filled;
color=gray75;
767[label="39.111.172.16;d;9pkt 9fpkt", shape=diamond, color=yellow];
1124[label="140.3.217.217;s;50pkt 50fpkt", shape=diamond, color=yellow];
2496[label="39.111.172.16;d;1pkt 1fpkt", shape=hexagon, color=black];
2621[label="140.3.217.217;s;16pkt 16fpkt", shape=hexagon, color=black];
5245[label="140.3.217.217;57pkt 57fpkt", shape=pentagon, color=darkviolet];
6862[label="140.3.217.217;56pkt 56fpkt", shape=invtriangle, color=brown];
7899[label="140.3.217.217;56pkt 56fpkt", shape=invhouse, color=bisque];
stat386[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.217.217:*, *:25}[50.7692%]&lt;BR/&gt;{140.3.217.217:25, *:*}[32.3077%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (47.3469%)&lt;BR/&gt; 995: (1.63265%)&lt;BR/&gt; 53239: (1.42857%)&lt;BR/&gt; 53686: (1.02041%)&lt;BR/&gt; 53650: (1.02041%)&gt;];
}
767--1124[label="0.111111;1pkt 1fpkt"];
767--2496[label="1;1pkt 1fpkt"];
767--2621[label="0.111111;1pkt 1fpkt"];
767--3019[label="0.888889;8pkt 8fpkt"];
767--4240[label="0.888889;8pkt 8fpkt"];
767--5245[label="0.111111;1pkt 1fpkt"];
767--6862[label="0.111111;1pkt 1fpkt"];
767--7899[label="0.111111;1pkt 1fpkt"];
1124--2496[label="1;1pkt 1fpkt"];
1124--2621[label="1;16pkt 16fpkt"];
1124--5245[label="1;50pkt 50fpkt"];
1124--6862[label="0.98;49pkt 49fpkt"];
1124--7899[label="0.98;49pkt 49fpkt"];
2496--2621[label="1;1pkt 1fpkt"];
2496--5245[label="1;1pkt 1fpkt"];
2496--6862[label="1;1pkt 1fpkt"];
2496--7899[label="1;1pkt 1fpkt"];
2621--5245[label="1;16pkt 16fpkt"];
2621--6862[label="1;16pkt 16fpkt"];
2621--7899[label="1;16pkt 16fpkt"];
5245--6862[label="1;56pkt 56fpkt"];
5245--7899[label="1;56pkt 56fpkt"];
6862--7899[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter src_ip="140.3.217.217" src_port="25"/>
      <filter dst_port="25" src_ip="140.3.217.217"/>
    </slice>
    <from sec="1039669203" usec="0"/>
    <to sec="1039669919" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_387{
style=filled;
color=gray75;
691[label="138.186.56.45;s;6pkt 6fpkt", shape=diamond, color=yellow];
810[label="198.50.41.131;d;1pkt 1fpkt", shape=diamond, color=yellow];
2633[label="198.50.41.131;d;1pkt 1fpkt", shape=hexagon, color=black];
stat387[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.56.45:*, 211.90.72.38:80}[33.3333%]&lt;BR/&gt;{138.186.56.45:6699, *:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (31.25%)&lt;BR/&gt; 1877: (18.75%)&lt;BR/&gt; 80: (18.75%)&lt;BR/&gt; 1329: (6.25%)&lt;BR/&gt; 1328: (6.25%)&gt;];
}
691--810[label="1;1pkt 1fpkt"];
691--2633[label="1;1pkt 1fpkt"];
810--2633[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="138.186.56.45" src_port="6699"/>
      <filter dst_ip="211.90.72.38" dst_port="80" src_ip="138.186.56.45"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05515,1.91441,020,0 0 0 1 1 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_388{
style=filled;
color=gray75;
809[label="214.231.137.230;d;2pkt 2fpkt", shape=diamond, color=yellow];
1450[label="193.55.76.83;s;1pkt 1fpkt", shape=diamond, color=yellow];
2502[label="214.231.137.230;d;2pkt 2fpkt", shape=hexagon, color=black];
2635[label="193.55.76.83;s;1pkt 1fpkt", shape=hexagon, color=black];
7410[label="193.55.76.83;1pkt 1fpkt", shape=invhouse, color=bisque];
stat388[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.180.69.8:0, 214.231.137.230:0}[50%]&lt;BR/&gt;{193.55.76.83:0, 214.231.137.230:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
809--1450[label="1;1pkt 1fpkt"];
809--2502[label="1;2pkt 2fpkt"];
809--2635[label="1;1pkt 1fpkt"];
809--3307[label="0.5;1pkt 1fpkt"];
809--5602[label="0.5;1pkt 1fpkt"];
809--7410[label="1;1pkt 1fpkt"];
1450--2502[label="1;1pkt 1fpkt"];
1450--2635[label="1;1pkt 1fpkt"];
1450--7410[label="1;1pkt 1fpkt"];
2502--2635[label="1;1pkt 1fpkt"];
2502--3307[label="0.5;1pkt 1fpkt"];
2502--5602[label="0.5;1pkt 1fpkt"];
2502--7410[label="1;1pkt 1fpkt"];
2635--7410[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.231.137.230" src_ip="193.55.76.83"/>
      <filter dst_ip="214.231.137.230" src_ip="208.180.69.8"/>
    </slice>
    <from sec="1039669277" usec="0"/>
    <to sec="1039669423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_389{
style=filled;
color=gray75;
1474[label="215.90.159.37;d;60pkt 60fpkt", shape=diamond, color=yellow];
1475[label="197.231.187.154;s;60pkt 60fpkt", shape=diamond, color=yellow];
2638[label="197.231.187.154;s;27pkt 27fpkt", shape=hexagon, color=black];
4714[label="197.231.187.154;60pkt 60fpkt", shape=pentagon, color=darkviolet];
6518[label="197.231.187.154;60pkt 60fpkt", shape=invtriangle, color=brown];
7672[label="197.231.187.154;61pkt 61fpkt", shape=invhouse, color=bisque];
stat389[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.231.187.154:80, 215.90.159.37:*}[95.1613%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.0854%)&lt;BR/&gt; 4801: (0.914634%)&lt;BR/&gt; 4800: (0.914634%)&lt;BR/&gt; 4799: (0.914634%)&lt;BR/&gt; 4797: (0.914634%)&gt;];
}
1474--1475[label="0.983333;59pkt 59fpkt"];
1474--2638[label="0.962963;26pkt 26fpkt"];
1474--4714[label="0.983333;59pkt 59fpkt"];
1474--6518[label="0.983333;59pkt 59fpkt"];
1474--7672[label="0.983333;59pkt 59fpkt"];
1475--2638[label="1;27pkt 27fpkt"];
1475--4714[label="0.983333;59pkt 59fpkt"];
1475--6518[label="0.983333;59pkt 59fpkt"];
1475--7672[label="1;60pkt 60fpkt"];
2638--4714[label="0.962963;26pkt 26fpkt"];
2638--6518[label="0.962963;26pkt 26fpkt"];
2638--7672[label="1;27pkt 27fpkt"];
4714--6518[label="1;60pkt 60fpkt"];
4714--7672[label="1;60pkt 60fpkt"];
6518--7672[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.159.37" src_ip="197.231.187.154" src_port="80"/>
    </slice>
    <from sec="1039669411" usec="0"/>
    <to sec="1039669778" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_390{
style=filled;
color=gray75;
1216[label="38.64.39.60;d;23pkt 23fpkt", shape=diamond, color=yellow];
1494[label="140.3.244.32;s;28pkt 28fpkt", shape=diamond, color=yellow];
1995[label="208.166.131.74;d;1pkt 1fpkt", shape=diamond, color=yellow];
2643[label="140.3.244.32;s;26pkt 26fpkt", shape=hexagon, color=black];
3106[label="208.166.131.74;d;1pkt 1fpkt", shape=hexagon, color=black];
3593[label="140.3.244.32;28pkt 28fpkt", shape=pentagon, color=darkviolet];
5785[label="140.3.244.32;28pkt 28fpkt", shape=invtriangle, color=brown];
7207[label="140.3.244.32;28pkt 28fpkt", shape=invhouse, color=bisque];
stat390[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.244.32:*, 38.64.39.60:80}[30.7692%]&lt;BR/&gt;{215.160.138.182:*, 38.64.39.60:80}[28.2051%]&lt;BR/&gt;{140.3.244.32:*, 200.251.84.146:80}[20.5128%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1947: (2.14724%)&lt;BR/&gt; 1926: (1.84049%)&lt;BR/&gt; 1925: (1.84049%)&lt;BR/&gt; 1924: (1.84049%)&gt;];
}
1216--1494[label="0.521739;12pkt 12fpkt"];
1216--2643[label="0.521739;12pkt 12fpkt"];
1216--3185[label="0.0869565;2pkt 2fpkt"];
1216--3593[label="0.521739;12pkt 12fpkt"];
1216--5785[label="0.521739;12pkt 12fpkt"];
1216--7207[label="0.521739;12pkt 12fpkt"];
1494--1995[label="1;1pkt 1fpkt"];
1494--2643[label="1;26pkt 26fpkt"];
1494--3106[label="1;1pkt 1fpkt"];
1494--3185[label="0.107143;3pkt 3fpkt"];
1494--3593[label="1;28pkt 28fpkt"];
1494--5785[label="1;28pkt 28fpkt"];
1494--7207[label="1;28pkt 28fpkt"];
1995--2643[label="1;1pkt 1fpkt"];
1995--3106[label="1;1pkt 1fpkt"];
1995--3185[label="1;1pkt 1fpkt"];
1995--3593[label="1;1pkt 1fpkt"];
1995--5785[label="1;1pkt 1fpkt"];
1995--7207[label="1;1pkt 1fpkt"];
2643--3106[label="1;1pkt 1fpkt"];
2643--3185[label="0.0384615;1pkt 1fpkt"];
2643--3593[label="1;26pkt 26fpkt"];
2643--5785[label="1;26pkt 26fpkt"];
2643--7207[label="1;26pkt 26fpkt"];
3106--3185[label="1;1pkt 1fpkt"];
3106--3593[label="1;1pkt 1fpkt"];
3106--5785[label="1;1pkt 1fpkt"];
3106--7207[label="1;1pkt 1fpkt"];
3593--5785[label="1;28pkt 28fpkt"];
3593--7207[label="1;28pkt 28fpkt"];
5785--7207[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="38.64.39.60" dst_port="80" src_ip="140.3.244.32"/>
      <filter dst_ip="200.251.84.146" dst_port="80" src_ip="140.3.244.32"/>
      <filter dst_ip="38.64.39.60" dst_port="80" src_ip="215.160.138.182"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905994,1.86884,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_391{
style=filled;
color=gray75;
1500[label="138.186.48.128;s;5pkt 5fpkt", shape=diamond, color=yellow];
1543[label="64.68.40.205;d;1pkt 1fpkt", shape=diamond, color=yellow];
2648[label="138.186.48.128;s;5pkt 5fpkt", shape=hexagon, color=black];
4476[label="138.186.48.128;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat391[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.48.128:1693, 211.90.155.34:1863}[20%]&lt;BR/&gt;{138.186.48.128:6699, 38.139.25.106:1840}[20%]&lt;BR/&gt;{138.186.48.128:6699, 64.84.227.203:3541}[20%]&lt;BR/&gt;{138.186.48.128:6699, 64.68.40.205:2443}[20%]&lt;BR/&gt;{138.186.48.128:6699, 142.151.90.214:4244}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (40.625%)&lt;BR/&gt; 2443: (12.5%)&lt;BR/&gt; 4244: (9.375%)&lt;BR/&gt; 3541: (9.375%)&lt;BR/&gt; 1863: (9.375%)&gt;];
}
1500--1543[label="1;1pkt 1fpkt"];
1500--2648[label="1;5pkt 5fpkt"];
1500--4476[label="1;5pkt 5fpkt"];
1543--2648[label="1;1pkt 1fpkt"];
1543--4476[label="1;1pkt 1fpkt"];
2648--4476[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="142.151.90.214" dst_port="4244" src_ip="138.186.48.128" src_port="6699"/>
      <filter dst_ip="64.68.40.205" dst_port="2443" src_ip="138.186.48.128" src_port="6699"/>
      <filter dst_ip="64.84.227.203" dst_port="3541" src_ip="138.186.48.128" src_port="6699"/>
      <filter dst_ip="38.139.25.106" dst_port="1840" src_ip="138.186.48.128" src_port="6699"/>
      <filter dst_ip="211.90.155.34" dst_port="1863" src_ip="138.186.48.128" src_port="1693"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_392{
style=filled;
color=gray75;
559[label="215.88.164.120;s;1pkt 1fpkt", shape=diamond, color=yellow];
2652[label="215.88.164.120;s;1pkt 1fpkt", shape=hexagon, color=black];
stat392[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.88.164.120:80, 138.186.8.154:58634}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58634: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
559--2652[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.8.154" dst_port="58634" src_ip="215.88.164.120" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669639" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905994,1.86884,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_393{
style=filled;
color=gray75;
586[label="61.180.164.40;d;2pkt 2fpkt", shape=diamond, color=yellow];
1241[label="140.3.3.22;s;2pkt 2fpkt", shape=diamond, color=yellow];
2655[label="61.180.164.40;d;2pkt 2fpkt", shape=hexagon, color=black];
3487[label="140.3.3.22;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat393[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.3.22:21, 61.180.164.40:2189}[25%]&lt;BR/&gt;{140.3.3.22:3153, 61.180.164.40:2215}[25%]&lt;BR/&gt;{140.3.3.22:3154, 61.180.164.40:2216}[25%]&lt;BR/&gt;{140.3.3.22:3157, 61.180.164.40:2217}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3154: (20%)&lt;BR/&gt; 3153: (20%)&lt;BR/&gt; 2216: (20%)&lt;BR/&gt; 2215: (20%)&lt;BR/&gt; 3157: (5%)&gt;];
}
586--1241[label="1;2pkt 2fpkt"];
586--2655[label="1;2pkt 2fpkt"];
586--3487[label="1;2pkt 2fpkt"];
1241--2655[label="1;2pkt 2fpkt"];
1241--3487[label="1;2pkt 2fpkt"];
2655--3487[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="61.180.164.40" dst_port="2217" src_ip="140.3.3.22" src_port="3157"/>
      <filter dst_ip="61.180.164.40" dst_port="2216" src_ip="140.3.3.22" src_port="3154"/>
      <filter dst_ip="61.180.164.40" dst_port="2215" src_ip="140.3.3.22" src_port="3153"/>
      <filter dst_ip="61.180.164.40" dst_port="2189" src_ip="140.3.3.22" src_port="21"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_394{
style=filled;
color=gray75;
314[label="148.110.221.229s;3pkt 3fpkt", shape=rectangle, color=red];
stat394[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.36.165:1084, 98.149.184.246:1755}[33.3333%]&lt;BR/&gt;{148.110.221.229:6699, 33.43.243.212:1491}[33.3333%]&lt;BR/&gt;{148.110.221.229:6257, 193.25.196.247:6257}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (33.3333%)&lt;BR/&gt; 6699: (16.6667%)&lt;BR/&gt; 1755: (16.6667%)&lt;BR/&gt; 1491: (16.6667%)&lt;BR/&gt; 1084: (16.6667%)&gt;];
}
314--890[label="0.666667;2pkt 2fpkt"];
314--905[label="1;1pkt 1fpkt"];
314--906[label="0.333333;1pkt 1fpkt"];
314--1242[label="1;1pkt 1fpkt"];
314--2659[label="1;1pkt 1fpkt"];
314--2885[label="0.666667;2pkt 2fpkt"];
314--3001[label="1;1pkt 1fpkt"];
314--4814[label="0.333333;1pkt 1fpkt"];
314--5341[label="0.666667;2pkt 2fpkt"];
314--6581[label="0.333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.25.196.247" dst_port="6257" src_ip="148.110.221.229" src_port="6257"/>
      <filter dst_ip="33.43.243.212" dst_port="1491" src_ip="148.110.221.229" src_port="6699"/>
      <filter dst_ip="98.149.184.246" dst_port="1755" src_ip="140.3.36.165" src_port="1084"/>
    </slice>
    <from sec="1039669265" usec="0"/>
    <to sec="1039669819" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_395{
style=filled;
color=gray75;
555[label="138.186.58.5;d;6pkt 6fpkt", shape=diamond, color=yellow];
918[label="61.200.31.143;s;1pkt 1fpkt", shape=diamond, color=yellow];
1028[label="98.168.90.249;s;1pkt 1fpkt", shape=diamond, color=yellow];
1565[label="33.104.206.16;s;1pkt 1fpkt", shape=diamond, color=yellow];
2661[label="61.200.31.143;s;1pkt 1fpkt", shape=hexagon, color=black];
2752[label="138.186.58.5;d;6pkt 6fpkt", shape=hexagon, color=black];
2912[label="98.168.90.249;s;1pkt 1fpkt", shape=hexagon, color=black];
stat395[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6699, 138.186.58.5:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (32.3529%)&lt;BR/&gt; 6257: (11.7647%)&lt;BR/&gt; 2319: (11.7647%)&lt;BR/&gt; 2005: (11.7647%)&lt;BR/&gt; 0: (11.7647%)&gt;];
}
555--918[label="1;1pkt 1fpkt"];
555--1028[label="1;1pkt 1fpkt"];
555--1565[label="1;1pkt 1fpkt"];
555--2661[label="1;1pkt 1fpkt"];
555--2752[label="1;6pkt 6fpkt"];
555--2912[label="1;1pkt 1fpkt"];
918--2661[label="1;1pkt 1fpkt"];
918--2752[label="1;1pkt 1fpkt"];
1028--2752[label="1;1pkt 1fpkt"];
1028--2912[label="1;1pkt 1fpkt"];
1565--2752[label="1;1pkt 1fpkt"];
2661--2752[label="1;1pkt 1fpkt"];
2752--2912[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.58.5" src_port="6699"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_396{
style=filled;
color=gray75;
643[label="215.17.120.20;d;420pkt 420fpkt", shape=diamond, color=yellow];
933[label="169.126.142.116;s;427pkt 427fpkt", shape=diamond, color=yellow];
2664[label="215.17.120.20;d;350pkt 350fpkt", shape=hexagon, color=black];
stat396[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.126.142.116:80, 215.17.120.20:*}[97.6636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7911%)&lt;BR/&gt; 0: (0.417711%)&lt;BR/&gt; 30046: (0.125313%)&lt;BR/&gt; 30043: (0.125313%)&lt;BR/&gt; 30039: (0.125313%)&gt;];
}
643--933[label="0.997619;419pkt 419fpkt"];
643--1033[label="0.00238095;1pkt 1fpkt"];
643--2664[label="1;350pkt 350fpkt"];
643--2691[label="0.003367;1pkt 1fpkt"];
643--3141[label="0.003367;1pkt 1fpkt"];
643--3941[label="0.00238095;1pkt 1fpkt"];
933--2664[label="0.997143;349pkt 349fpkt"];
2664--2691[label="0.003367;1pkt 1fpkt"];
2664--3141[label="0.003367;1pkt 1fpkt"];
2664--3941[label="0.00285714;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.17.120.20" src_ip="169.126.142.116" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00075,1.85039,999,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_397{
style=filled;
color=gray75;
669[label="138.186.176.219;d;204pkt 204fpkt", shape=diamond, color=yellow];
943[label="38.178.36.119;s;1pkt 1fpkt", shape=diamond, color=yellow];
1021[label="60.167.204.104;s;1pkt 1fpkt", shape=diamond, color=yellow];
2667[label="38.178.36.119;s;1pkt 1fpkt", shape=hexagon, color=black];
4402[label="38.178.36.119;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7604[label="162.116.108.136;1pkt 1fpkt", shape=invhouse, color=bisque];
stat397[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6257, 138.186.176.219:6257}[92.6471%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (91.1483%)&lt;BR/&gt; 6699: (3.34928%)&lt;BR/&gt; 3506: (0.956938%)&lt;BR/&gt; 0: (0.956938%)&lt;BR/&gt; 2553: (0.478469%)&gt;];
}
669--943[label="1;1pkt 1fpkt"];
669--959[label="1;1pkt 1fpkt"];
669--1021[label="1;1pkt 1fpkt"];
669--2667[label="1;1pkt 1fpkt"];
669--4402[label="1;1pkt 1fpkt"];
669--4754[label="1;1pkt 1fpkt"];
669--7604[label="1;1pkt 1fpkt"];
943--2667[label="1;1pkt 1fpkt"];
943--4402[label="1;1pkt 1fpkt"];
2667--4402[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.176.219" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669921" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_398{
style=filled;
color=gray75;
1522[label="39.46.212.152;s;550pkt 550fpkt", shape=diamond, color=yellow];
2669[label="39.46.212.152;s;474pkt 474fpkt", shape=hexagon, color=black];
stat398[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.46.212.152:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1522--2669[label="1;474pkt 474fpkt"];
</description>
    <slice>
      <filter src_ip="39.46.212.152"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.727288,1.86745,999,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_399{
style=filled;
color=gray75;
2314[label="211.90.152.182;s;82pkt 82fpkt", shape=diamond, color=yellow];
5820[label="211.90.157.38;2pkt 2fpkt", shape=invtriangle, color=brown];
stat399[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.90.152.182:1863, *:*}[57.1429%]&lt;BR/&gt;{211.90.152.182:80, *:*}[40.4762%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (28.5714%)&lt;BR/&gt; 80: (21.4286%)&lt;BR/&gt; 1080: (1.19048%)&lt;BR/&gt; 64824: (0.595238%)&lt;BR/&gt; 64793: (0.595238%)&gt;];
}
2314--2390[label="0.0140845;1pkt 1fpkt"];
2314--2470[label="0.0121951;1pkt 1fpkt"];
2314--2649[label="0.0121951;1pkt 1fpkt"];
2314--2871[label="0.0365854;3pkt 3fpkt"];
2314--2875[label="0.0121951;1pkt 1fpkt"];
2314--3059[label="0.0121951;1pkt 1fpkt"];
2314--4976[label="0.987805;81pkt 81fpkt"];
5820--7233[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="211.90.152.182" src_port="1863"/>
      <filter src_ip="211.90.152.182" src_port="80"/>
    </slice>
    <from sec="1039669202" usec="0"/>
    <to sec="1039669924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_400{
style=filled;
color=gray75;
939[label="138.186.49.3;s;70pkt 70fpkt", shape=diamond, color=yellow];
997[label="64.70.185.76;d;1pkt 1fpkt", shape=diamond, color=yellow];
1017[label="33.115.170.38;d;1pkt 1fpkt", shape=diamond, color=yellow];
1043[label="223.138.109.147;d;1pkt 1fpkt", shape=diamond, color=yellow];
1293[label="198.246.184.186;d;1pkt 1fpkt", shape=diamond, color=yellow];
1518[label="61.3.75.48;d;1pkt 1fpkt", shape=diamond, color=yellow];
2666[label="138.186.49.3;s;70pkt 70fpkt", shape=hexagon, color=black];
2683[label="64.70.185.76;d;1pkt 1fpkt", shape=hexagon, color=black];
3233[label="138.186.49.3;70pkt 70fpkt", shape=pentagon, color=darkviolet];
5552[label="138.186.49.3;69pkt 69fpkt", shape=invtriangle, color=brown];
7068[label="138.186.49.3;70pkt 70fpkt", shape=invhouse, color=bisque];
stat400[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.49.3:6257, *:6257}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (84.2254%)&lt;BR/&gt; 6699: (5.07042%)&lt;BR/&gt; 1863: (2.11268%)&lt;BR/&gt; 1148: (0.985915%)&lt;BR/&gt; 4047: (0.84507%)&gt;];
}
939--997[label="1;1pkt 1fpkt"];
939--1017[label="1;1pkt 1fpkt"];
939--1043[label="1;1pkt 1fpkt"];
939--1293[label="1;1pkt 1fpkt"];
939--1518[label="1;1pkt 1fpkt"];
939--2666[label="1;70pkt 70fpkt"];
939--2683[label="1;1pkt 1fpkt"];
939--3233[label="1;70pkt 70fpkt"];
939--5552[label="1;69pkt 69fpkt"];
939--7068[label="1;70pkt 70fpkt"];
997--2666[label="1;1pkt 1fpkt"];
997--2683[label="1;1pkt 1fpkt"];
997--3233[label="1;1pkt 1fpkt"];
997--5552[label="1;1pkt 1fpkt"];
997--7068[label="1;1pkt 1fpkt"];
1017--2666[label="1;1pkt 1fpkt"];
1017--3233[label="1;1pkt 1fpkt"];
1017--5552[label="1;1pkt 1fpkt"];
1017--7068[label="1;1pkt 1fpkt"];
1043--2666[label="1;1pkt 1fpkt"];
1043--3233[label="1;1pkt 1fpkt"];
1043--5552[label="1;1pkt 1fpkt"];
1043--7068[label="1;1pkt 1fpkt"];
1293--2666[label="1;1pkt 1fpkt"];
1293--3233[label="1;1pkt 1fpkt"];
1293--5552[label="1;1pkt 1fpkt"];
1293--7068[label="1;1pkt 1fpkt"];
1518--2666[label="1;1pkt 1fpkt"];
1518--3233[label="1;1pkt 1fpkt"];
1518--5552[label="1;1pkt 1fpkt"];
1518--7068[label="1;1pkt 1fpkt"];
2666--2683[label="1;1pkt 1fpkt"];
2666--3233[label="1;70pkt 70fpkt"];
2666--5552[label="1;69pkt 69fpkt"];
2666--7068[label="1;70pkt 70fpkt"];
2683--3233[label="1;1pkt 1fpkt"];
2683--5552[label="1;1pkt 1fpkt"];
2683--7068[label="1;1pkt 1fpkt"];
3233--5552[label="1;69pkt 69fpkt"];
3233--7068[label="1;70pkt 70fpkt"];
5552--7068[label="1;69pkt 69fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="138.186.49.3" src_port="6257"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_402{
style=filled;
color=gray75;
593[label="138.186.52.7;d;14pkt 14fpkt", shape=diamond, color=yellow];
925[label="39.29.216.174;s;1pkt 1fpkt", shape=diamond, color=yellow];
940[label="200.133.179.210;s;1pkt 1fpkt", shape=diamond, color=yellow];
1026[label="64.23.79.189;s;1pkt 1fpkt", shape=diamond, color=yellow];
2658[label="138.186.52.7;d;14pkt 14fpkt", shape=hexagon, color=black];
2689[label="64.23.79.189;s;1pkt 1fpkt", shape=hexagon, color=black];
4907[label="39.29.216.174;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5195[label="200.133.179.210;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6648[label="39.29.216.174;1pkt 1fpkt", shape=invtriangle, color=brown];
6725[label="64.23.79.189;1pkt 1fpkt", shape=invtriangle, color=brown];
6830[label="200.133.179.210;1pkt 1fpkt", shape=invtriangle, color=brown];
7754[label="39.29.216.174;1pkt 1fpkt", shape=invhouse, color=bisque];
stat402[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6257, 138.186.52.7:6257}[64.2857%]&lt;BR/&gt;{*:*, 138.186.52.7:6699}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (47.3684%)&lt;BR/&gt; 6699: (21.0526%)&lt;BR/&gt; 1445: (7.89474%)&lt;BR/&gt; 2936: (6.57895%)&lt;BR/&gt; 2766: (6.57895%)&gt;];
}
593--925[label="1;1pkt 1fpkt"];
593--940[label="1;1pkt 1fpkt"];
593--1026[label="1;1pkt 1fpkt"];
593--2658[label="1;14pkt 14fpkt"];
593--2689[label="1;1pkt 1fpkt"];
593--4907[label="1;1pkt 1fpkt"];
593--5195[label="1;1pkt 1fpkt"];
593--6648[label="1;1pkt 1fpkt"];
593--6725[label="1;1pkt 1fpkt"];
593--6830[label="1;1pkt 1fpkt"];
593--7754[label="1;1pkt 1fpkt"];
925--2658[label="1;1pkt 1fpkt"];
925--4907[label="1;1pkt 1fpkt"];
925--6648[label="1;1pkt 1fpkt"];
925--7754[label="1;1pkt 1fpkt"];
940--2658[label="1;1pkt 1fpkt"];
940--5195[label="1;1pkt 1fpkt"];
940--6830[label="1;1pkt 1fpkt"];
1026--2658[label="1;1pkt 1fpkt"];
1026--2689[label="1;1pkt 1fpkt"];
1026--6725[label="1;1pkt 1fpkt"];
2658--2689[label="1;1pkt 1fpkt"];
2658--4907[label="1;1pkt 1fpkt"];
2658--5195[label="1;1pkt 1fpkt"];
2658--6648[label="1;1pkt 1fpkt"];
2658--6725[label="1;1pkt 1fpkt"];
2658--6830[label="1;1pkt 1fpkt"];
2658--7754[label="1;1pkt 1fpkt"];
2689--6725[label="1;1pkt 1fpkt"];
4907--6648[label="1;1pkt 1fpkt"];
4907--7754[label="1;1pkt 1fpkt"];
5195--6830[label="1;1pkt 1fpkt"];
6648--7754[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.52.7" dst_port="6699"/>
      <filter dst_ip="138.186.52.7" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_403{
style=filled;
color=gray75;
1605[label="214.110.104.216;s;1pkt 1fpkt", shape=diamond, color=yellow];
2700[label="214.110.104.216;s;1pkt 1fpkt", shape=hexagon, color=black];
stat403[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.110.104.216:1695, 214.216.48.172:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1695: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
1605--2700[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.216.48.172" dst_port="53" src_ip="214.110.104.216" src_port="1695"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_404{
style=filled;
color=gray75;
1355[label="214.216.52.224;s;269pkt 269fpkt", shape=diamond, color=yellow];
2701[label="214.216.52.224;s;168pkt 168fpkt", shape=hexagon, color=black];
stat404[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.216.52.224:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1355--2701[label="1;168pkt 168fpkt"];
</description>
    <slice>
      <filter src_ip="214.216.52.224"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.937874,1.83478,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_405{
style=filled;
color=gray75;
575[label="64.176.10.194;d;1pkt 1fpkt", shape=diamond, color=yellow];
757[label="214.129.95.81;d;1pkt 1fpkt", shape=diamond, color=yellow];
880[label="215.90.81.22;s;5pkt 5fpkt", shape=diamond, color=yellow];
1338[label="39.28.57.120;d;1pkt 1fpkt", shape=diamond, color=yellow];
2702[label="214.129.95.81;d;1pkt 1fpkt", shape=hexagon, color=black];
2755[label="64.176.10.194;d;1pkt 1fpkt", shape=hexagon, color=black];
3489[label="215.90.81.22;14pkt 14fpkt", shape=pentagon, color=darkviolet];
5717[label="215.90.81.22;13pkt 13fpkt", shape=invtriangle, color=brown];
stat405[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.90.81.22:*, *:6699}[35.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (29.7297%)&lt;BR/&gt; 29692: (6.75676%)&lt;BR/&gt; 1863: (6.75676%)&lt;BR/&gt; 11488: (5.40541%)&lt;BR/&gt; 7001: (5.40541%)&gt;];
}
575--880[label="1;1pkt 1fpkt"];
575--2755[label="1;1pkt 1fpkt"];
575--3489[label="1;1pkt 1fpkt"];
575--5717[label="1;1pkt 1fpkt"];
757--880[label="1;1pkt 1fpkt"];
757--2702[label="1;1pkt 1fpkt"];
757--3489[label="1;1pkt 1fpkt"];
880--1338[label="1;1pkt 1fpkt"];
880--2702[label="1;1pkt 1fpkt"];
880--2755[label="1;1pkt 1fpkt"];
880--3489[label="1;5pkt 5fpkt"];
880--5717[label="0.8;4pkt 4fpkt"];
1338--3489[label="1;1pkt 1fpkt"];
1338--5717[label="1;1pkt 1fpkt"];
2702--3489[label="1;1pkt 1fpkt"];
2755--3489[label="1;1pkt 1fpkt"];
2755--5717[label="1;1pkt 1fpkt"];
3489--5717[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_port="6699" src_ip="215.90.81.22"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_406{
style=filled;
color=gray75;
770[label="216.242.74.56;d;613pkt 613fpkt", shape=diamond, color=yellow];
771[label="141.44.6.45;s;613pkt 613fpkt", shape=diamond, color=yellow];
2710[label="216.242.74.56;d;613pkt 613fpkt", shape=hexagon, color=black];
3065[label="141.44.6.45;s;613pkt 613fpkt", shape=hexagon, color=black];
stat406[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.44.6.45:*, 216.242.74.56:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2165: (0.0815661%)&lt;BR/&gt; 2164: (0.0815661%)&lt;BR/&gt; 2163: (0.0815661%)&lt;BR/&gt; 2162: (0.0815661%)&gt;];
}
770--771[label="1;613pkt 613fpkt"];
770--2710[label="1;613pkt 613fpkt"];
770--3065[label="1;613pkt 613fpkt"];
770--3185[label="0.0603589;37pkt 37fpkt"];
771--2710[label="1;613pkt 613fpkt"];
771--3065[label="1;613pkt 613fpkt"];
771--3185[label="0.0603589;37pkt 37fpkt"];
2710--3065[label="1;613pkt 613fpkt"];
2710--3185[label="0.0603589;37pkt 37fpkt"];
3065--3185[label="0.0603589;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_ip="216.242.74.56" dst_port="80" src_ip="141.44.6.45"/>
    </slice>
    <from sec="1039669204" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_407{
style=filled;
color=gray75;
1427[label="197.169.113.154;s;2pkt 2fpkt", shape=diamond, color=yellow];
2718[label="197.169.113.154;s;2pkt 2fpkt", shape=hexagon, color=black];
4709[label="197.169.113.154;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6513[label="197.169.113.154;2pkt 2fpkt", shape=invtriangle, color=brown];
7669[label="197.169.113.154;2pkt 2fpkt", shape=invhouse, color=bisque];
stat407[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.169.113.154:6257, 138.186.51.169:6257}[50%]&lt;BR/&gt;{197.169.113.154:6699, 138.186.51.169:1052}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (44.4444%)&lt;BR/&gt; 6699: (27.7778%)&lt;BR/&gt; 1052: (27.7778%)&gt;];
}
1427--2718[label="1;2pkt 2fpkt"];
1427--2818[label="1;2pkt 2fpkt"];
1427--4709[label="1;1pkt 1fpkt"];
1427--6513[label="1;2pkt 2fpkt"];
1427--7669[label="1;2pkt 2fpkt"];
2718--2818[label="1;2pkt 2fpkt"];
2718--4709[label="1;1pkt 1fpkt"];
2718--6513[label="1;2pkt 2fpkt"];
2718--7669[label="1;2pkt 2fpkt"];
4709--6513[label="1;1pkt 1fpkt"];
4709--7669[label="1;1pkt 1fpkt"];
6513--7669[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.51.169" dst_port="1052" src_ip="197.169.113.154" src_port="6699"/>
      <filter dst_ip="138.186.51.169" dst_port="6257" src_ip="197.169.113.154" src_port="6257"/>
    </slice>
    <from sec="1039669222" usec="0"/>
    <to sec="1039669605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_408{
style=filled;
color=gray75;
1742[label="201.197.108.181;s;20pkt 20fpkt", shape=diamond, color=yellow];
2730[label="201.197.108.181;s;20pkt 20fpkt", shape=hexagon, color=black];
stat408[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.197.108.181:80, 140.3.246.227:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4935: (2.5%)&lt;BR/&gt; 4934: (2.5%)&lt;BR/&gt; 4779: (2.5%)&lt;BR/&gt; 4778: (2.5%)&gt;];
}
1742--2730[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.246.227" src_ip="201.197.108.181" src_port="80"/>
    </slice>
    <from sec="1039669358" usec="0"/>
    <to sec="1039669755" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_409{
style=filled;
color=gray75;
656[label="140.3.211.84;d;67pkt 67fpkt", shape=diamond, color=yellow];
1752[label="198.128.176.8;s;4pkt 4fpkt", shape=diamond, color=yellow];
2733[label="198.128.176.8;s;4pkt 4fpkt", shape=hexagon, color=black];
3314[label="198.128.176.8;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5607[label="198.128.176.8;4pkt 4fpkt", shape=invtriangle, color=brown];
7103[label="198.128.176.8;4pkt 4fpkt", shape=invhouse, color=bisque];
stat409[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.128.15.214:80, 140.3.211.84:*}[94.0299%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2263: (3.48837%)&lt;BR/&gt; 2262: (3.48837%)&lt;BR/&gt; 2261: (3.48837%)&lt;BR/&gt; 2260: (2.90698%)&gt;];
}
656--657[label="1;63pkt 63fpkt"];
656--1752[label="1;4pkt 4fpkt"];
656--2592[label="1;63pkt 63fpkt"];
656--2733[label="1;4pkt 4fpkt"];
656--3314[label="1;3pkt 3fpkt"];
656--5226[label="0.96875;62pkt 62fpkt"];
656--5607[label="1;4pkt 4fpkt"];
656--6850[label="0.969231;63pkt 63fpkt"];
656--7103[label="1;4pkt 4fpkt"];
1752--2733[label="1;4pkt 4fpkt"];
1752--3314[label="1;3pkt 3fpkt"];
1752--5607[label="1;4pkt 4fpkt"];
1752--7103[label="1;4pkt 4fpkt"];
2733--3314[label="1;3pkt 3fpkt"];
2733--5607[label="1;4pkt 4fpkt"];
2733--7103[label="1;4pkt 4fpkt"];
3314--5607[label="1;3pkt 3fpkt"];
3314--7103[label="1;3pkt 3fpkt"];
5607--7103[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.211.84" src_ip="198.128.15.214" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_410{
style=filled;
color=gray75;
1753[label="201.146.33.54;s;76pkt 76fpkt", shape=diamond, color=yellow];
2734[label="201.146.33.54;s;76pkt 76fpkt", shape=hexagon, color=black];
stat410[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.146.33.54:80, 138.186.8.154:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 34782: (0.657895%)&lt;BR/&gt; 34780: (0.657895%)&lt;BR/&gt; 34776: (0.657895%)&lt;BR/&gt; 34774: (0.657895%)&gt;];
}
1753--2734[label="1;76pkt 76fpkt"];
1753--3796[label="1;75pkt 75fpkt"];
2734--3796[label="1;75pkt 75fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.8.154" src_ip="201.146.33.54" src_port="80"/>
    </slice>
    <from sec="1039669417" usec="0"/>
    <to sec="1039669728" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_411{
style=filled;
color=gray75;
1757[label="215.219.122.233;d;120pkt 120fpkt", shape=diamond, color=yellow];
2736[label="215.219.122.233;d;109pkt 109fpkt", shape=hexagon, color=black];
stat411[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.29.24.129:*, 215.219.122.233:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 25862: (0.436681%)&lt;BR/&gt; 25857: (0.436681%)&lt;BR/&gt; 25855: (0.436681%)&lt;BR/&gt; 25853: (0.436681%)&gt;];
}
1757--2736[label="1;109pkt 109fpkt"];
1757--3185[label="0.00833333;1pkt 1fpkt"];
1757--4485[label="1;120pkt 120fpkt"];
2736--4485[label="1;109pkt 109fpkt"];
</description>
    <slice>
      <filter dst_ip="215.219.122.233" dst_port="80" src_ip="148.29.24.129"/>
    </slice>
    <from sec="1039669426" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_412{
style=filled;
color=gray75;
1769[label="209.129.247.103;s;1pkt 1fpkt", shape=diamond, color=yellow];
2737[label="209.129.247.103;s;1pkt 1fpkt", shape=hexagon, color=black];
4289[label="209.129.247.103;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6234[label="209.129.247.103;1pkt 1fpkt", shape=invtriangle, color=brown];
7489[label="209.129.247.103;1pkt 1fpkt", shape=invhouse, color=bisque];
stat412[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.129.247.103:6699, 215.90.87.225:3358}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3358: (50%)&gt;];
}
1769--2737[label="1;1pkt 1fpkt"];
1769--4289[label="1;1pkt 1fpkt"];
1769--6234[label="1;1pkt 1fpkt"];
1769--7489[label="1;1pkt 1fpkt"];
2737--4289[label="1;1pkt 1fpkt"];
2737--6234[label="1;1pkt 1fpkt"];
2737--7489[label="1;1pkt 1fpkt"];
4289--6234[label="1;1pkt 1fpkt"];
4289--7489[label="1;1pkt 1fpkt"];
6234--7489[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.87.225" dst_port="3358" src_ip="209.129.247.103" src_port="6699"/>
    </slice>
    <from sec="1039669461" usec="0"/>
    <to sec="1039669747" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_414{
style=filled;
color=gray75;
4003[label="202.112.255.74;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat414[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.112.255.74:80, 140.3.12.103:10159}[25%]&lt;BR/&gt;{202.112.255.74:80, 140.3.12.103:10232}[25%]&lt;BR/&gt;{202.112.255.74:80, 172.93.129.191:3245}[25%]&lt;BR/&gt;{202.112.255.74:80, 172.93.129.191:3246}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 10232: (12.5%)&lt;BR/&gt; 10159: (12.5%)&lt;BR/&gt; 3246: (12.5%)&lt;BR/&gt; 3245: (12.5%)&gt;];
}
4003--6050[label="1;4pkt 4fpkt"];
4003--7381[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="172.93.129.191" dst_port="3246" src_ip="202.112.255.74" src_port="80"/>
      <filter dst_ip="172.93.129.191" dst_port="3245" src_ip="202.112.255.74" src_port="80"/>
      <filter dst_ip="140.3.12.103" dst_port="10232" src_ip="202.112.255.74" src_port="80"/>
      <filter dst_ip="140.3.12.103" dst_port="10159" src_ip="202.112.255.74" src_port="80"/>
    </slice>
    <from sec="1039669435" usec="0"/>
    <to sec="1039669710" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.937874,1.83478,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_415{
style=filled;
color=gray75;
949[label="140.3.242.45;s;7pkt 7fpkt", shape=diamond, color=yellow];
950[label="170.103.142.51;d;4pkt 4fpkt", shape=diamond, color=yellow];
2773[label="140.3.242.45;s;5pkt 5fpkt", shape=hexagon, color=black];
3717[label="140.3.242.45;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5861[label="140.3.242.45;8pkt 8fpkt", shape=invtriangle, color=brown];
stat415[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.242.45:80, 170.103.142.51:*}[44.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1453: (7.57576%)&lt;BR/&gt; 1450: (7.57576%)&lt;BR/&gt; 1449: (7.57576%)&lt;BR/&gt; 1448: (7.57576%)&gt;];
}
949--950[label="1;4pkt 4fpkt"];
949--2773[label="1;5pkt 5fpkt"];
949--3717[label="1;7pkt 7fpkt"];
949--5861[label="1;7pkt 7fpkt"];
950--2773[label="1;4pkt 4fpkt"];
950--3717[label="1;4pkt 4fpkt"];
950--5861[label="1;4pkt 4fpkt"];
2773--3717[label="1;5pkt 5fpkt"];
2773--5861[label="1;5pkt 5fpkt"];
3717--5861[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="170.103.142.51" src_ip="140.3.242.45" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_417{
style=filled;
color=gray75;
1525[label="215.90.90.65;s;74pkt 74fpkt", shape=diamond, color=yellow];
2776[label="215.90.90.65;s;56pkt 56fpkt", shape=hexagon, color=black];
stat417[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.90.90.65:*, *:8888}[37.8378%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (18.8462%)&lt;BR/&gt; 3456: (8.07692%)&lt;BR/&gt; 9999: (2.69231%)&lt;BR/&gt; 8899: (2.69231%)&lt;BR/&gt; 8814: (2.69231%)&gt;];
}
1525--2776[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_port="8888" src_ip="215.90.90.65"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14144,1.92665,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_418{
style=filled;
color=gray75;
150[label="38.72.228.58s;3pkt 3fpkt", shape=rectangle, color=red];
690[label="138.186.56.45;d;6pkt 6fpkt", shape=diamond, color=yellow];
777[label="38.72.228.58;s;120pkt 120fpkt", shape=diamond, color=yellow];
1444[label="198.50.41.131;s;1pkt 1fpkt", shape=diamond, color=yellow];
2782[label="138.186.56.45;d;3pkt 3fpkt", shape=hexagon, color=black];
stat418[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.72.228.58:80, *:*}[95.2381%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.9925%)&lt;BR/&gt; 6699: (3.00752%)&lt;BR/&gt; 1877: (1.12782%)&lt;BR/&gt; 1324: (1.12782%)&lt;BR/&gt; 41348: (0.75188%)&gt;];
}
150--494[label="0.666667;2pkt 2fpkt"];
150--690[label="0.333333;1pkt 1fpkt"];
150--777[label="0.666667;2pkt 2fpkt"];
150--2782[label="0.333333;1pkt 1fpkt"];
150--2875[label="0.666667;2pkt 2fpkt"];
150--3844[label="0.666667;2pkt 2fpkt"];
690--1444[label="1;1pkt 1fpkt"];
690--2782[label="1;3pkt 3fpkt"];
690--4249[label="0.166667;1pkt 1fpkt"];
690--6207[label="0.166667;1pkt 1fpkt"];
777--1100[label="0.0666667;8pkt 8fpkt"];
777--1118[label="0.0666667;8pkt 8fpkt"];
777--1377[label="0.0686275;7pkt 7fpkt"];
777--1506[label="0.158333;19pkt 19fpkt"];
777--2096[label="0.0583333;7pkt 7fpkt"];
777--2142[label="0.157895;9pkt 9fpkt"];
777--2673[label="0.025;3pkt 3fpkt"];
777--2875[label="0.2;24pkt 24fpkt"];
777--2884[label="0.158333;19pkt 19fpkt"];
777--2940[label="0.0470588;4pkt 4fpkt"];
777--3041[label="0.0583333;7pkt 7fpkt"];
777--3844[label="1;120pkt 120fpkt"];
1444--2782[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="38.72.228.58" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905994,1.86884,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_419{
style=filled;
color=gray75;
720[label="214.231.184.66;d;10pkt 10fpkt", shape=diamond, color=yellow];
721[label="214.83.132.138;s;66pkt 66fpkt", shape=diamond, color=yellow];
2791[label="214.231.184.66;d;10pkt 10fpkt", shape=hexagon, color=black];
2792[label="214.83.132.138;s;47pkt 47fpkt", shape=hexagon, color=black];
4578[label="214.83.132.138;66pkt 66fpkt", shape=pentagon, color=darkviolet];
stat419[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.83.132.138:*, 214.231.189.41:80}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.191%)&lt;BR/&gt; 4226: (1.25628%)&lt;BR/&gt; 4173: (1.25628%)&lt;BR/&gt; 2732: (1.25628%)&lt;BR/&gt; 2363: (1.25628%)&gt;];
}
720--721[label="0.9;9pkt 9fpkt"];
720--2791[label="1;10pkt 10fpkt"];
720--2792[label="0.9;9pkt 9fpkt"];
720--4578[label="0.9;9pkt 9fpkt"];
721--2791[label="0.9;9pkt 9fpkt"];
721--2792[label="1;47pkt 47fpkt"];
721--3185[label="0.121212;8pkt 8fpkt"];
721--4578[label="0.984848;65pkt 65fpkt"];
2791--2792[label="0.9;9pkt 9fpkt"];
2791--4578[label="0.9;9pkt 9fpkt"];
2792--4578[label="0.978723;46pkt 46fpkt"];
</description>
    <slice>
      <filter dst_ip="214.231.189.41" dst_port="80" src_ip="214.83.132.138"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_420{
style=filled;
color=gray75;
1037[label="61.138.160.165;s;1pkt 1fpkt", shape=diamond, color=yellow];
2798[label="61.138.160.165;s;1pkt 1fpkt", shape=hexagon, color=black];
stat420[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.138.160.165:3305, 148.110.158.4:4662}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 3305: (50%)&gt;];
}
1037--2798[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.158.4" dst_port="4662" src_ip="61.138.160.165" src_port="3305"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09135,1.86305,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_422{
style=filled;
color=gray75;
188[label="202.84.236.94s;1pkt 1fpkt", shape=rectangle, color=red];
1669[label="140.3.12.94;s;4pkt 4fpkt", shape=diamond, color=yellow];
1670[label="201.164.167.222;d;4pkt 4fpkt", shape=diamond, color=yellow];
2822[label="140.3.12.94;s;4pkt 4fpkt", shape=hexagon, color=black];
2823[label="201.164.167.222;d;4pkt 4fpkt", shape=hexagon, color=black];
4205[label="140.3.12.94;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat422[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.12.94:1228, 201.164.167.222:21}[25%]&lt;BR/&gt;{140.3.12.94:1229, 201.164.167.222:63133}[25%]&lt;BR/&gt;{140.3.12.94:1230, 201.164.167.222:21}[25%]&lt;BR/&gt;{140.3.12.94:1231, 201.164.167.222:53443}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (25%)&lt;BR/&gt; 53443: (15%)&lt;BR/&gt; 1231: (15%)&lt;BR/&gt; 1230: (12.5%)&lt;BR/&gt; 1228: (12.5%)&gt;];
}
188--1669[label="1;1pkt 1fpkt"];
188--1670[label="1;1pkt 1fpkt"];
188--2822[label="1;1pkt 1fpkt"];
188--2823[label="1;1pkt 1fpkt"];
188--4205[label="1;1pkt 1fpkt"];
1669--1670[label="1;4pkt 4fpkt"];
1669--2822[label="1;4pkt 4fpkt"];
1669--2823[label="1;4pkt 4fpkt"];
1669--4205[label="1;3pkt 3fpkt"];
1670--2822[label="1;4pkt 4fpkt"];
1670--2823[label="1;4pkt 4fpkt"];
1670--4205[label="1;3pkt 3fpkt"];
2822--2823[label="1;4pkt 4fpkt"];
2822--4205[label="1;3pkt 3fpkt"];
2823--4205[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="201.164.167.222" dst_port="53443" src_ip="140.3.12.94" src_port="1231"/>
      <filter dst_ip="201.164.167.222" dst_port="21" src_ip="140.3.12.94" src_port="1230"/>
      <filter dst_ip="201.164.167.222" dst_port="63133" src_ip="140.3.12.94" src_port="1229"/>
      <filter dst_ip="201.164.167.222" dst_port="21" src_ip="140.3.12.94" src_port="1228"/>
    </slice>
    <from sec="1039669209" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_423{
style=filled;
color=gray75;
1410[label="201.100.18.255;d;108pkt 108fpkt", shape=diamond, color=yellow];
stat423[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.8.154:*, 201.100.18.255:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65535: (0.462963%)&lt;BR/&gt; 65496: (0.462963%)&lt;BR/&gt; 65461: (0.462963%)&lt;BR/&gt; 65258: (0.462963%)&gt;];
}
1410--2826[label="1;101pkt 101fpkt"];
1410--3185[label="0.0185185;2pkt 2fpkt"];
1410--4706[label="1;108pkt 108fpkt"];
</description>
    <slice>
      <filter dst_ip="201.100.18.255" dst_port="80" src_ip="138.186.8.154"/>
    </slice>
    <from sec="1039669211" usec="0"/>
    <to sec="1039669834" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.727288,1.86745,503,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_424{
style=filled;
color=gray75;
1388[label="140.3.212.18;s;130pkt 130fpkt", shape=diamond, color=yellow];
1718[label="140.3.55.177;s;93pkt 93fpkt", shape=diamond, color=yellow];
6124[label="140.3.210.86;18pkt 18fpkt", shape=invtriangle, color=brown];
stat424[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.212.18:*, *:80}[53.9419%]&lt;BR/&gt;{140.3.55.177:*, *:80}[38.5892%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1338: (0.414938%)&lt;BR/&gt; 1337: (0.414938%)&lt;BR/&gt; 1336: (0.414938%)&lt;BR/&gt; 1335: (0.414938%)&gt;];
}
1388--1662[label="0.0307692;4pkt 4fpkt"];
1388--1823[label="0.0714286;5pkt 5fpkt"];
1388--2324[label="0.139535;6pkt 6fpkt"];
1388--2816[label="0.0307692;4pkt 4fpkt"];
1388--3185[label="0.00769231;1pkt 1fpkt"];
1388--3434[label="1;130pkt 130fpkt"];
1388--5681[label="1;129pkt 129fpkt"];
1718--1894[label="0.047619;1pkt 1fpkt"];
1718--2105[label="0.0178571;1pkt 1fpkt"];
1718--2816[label="0.0537634;5pkt 5fpkt"];
1718--4928[label="1;93pkt 93fpkt"];
1718--6661[label="1;93pkt 93fpkt"];
6124--7425[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="140.3.212.18"/>
      <filter dst_port="80" src_ip="140.3.55.177"/>
    </slice>
    <from sec="1039669203" usec="0"/>
    <to sec="1039669779" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_425{
style=filled;
color=gray75;
1917[label="148.110.93.210;s;178pkt 178fpkt", shape=diamond, color=yellow];
2014[label="197.57.185.246;d;159pkt 159fpkt", shape=diamond, color=yellow];
2829[label="148.110.93.210;s;116pkt 116fpkt", shape=hexagon, color=black];
5193[label="148.110.93.210;178pkt 178fpkt", shape=pentagon, color=darkviolet];
6828[label="148.110.93.210;178pkt 178fpkt", shape=invtriangle, color=brown];
7875[label="148.110.93.210;179pkt 179fpkt", shape=invhouse, color=bisque];
stat425[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.110.93.210:*, 197.57.185.246:80}[89.3855%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.7348%)&lt;BR/&gt; 123: (1.01215%)&lt;BR/&gt; 6200: (0.506073%)&lt;BR/&gt; 3317: (0.303644%)&lt;BR/&gt; 3316: (0.303644%)&gt;];
}
1917--2014[label="1;159pkt 159fpkt"];
1917--2829[label="1;116pkt 116fpkt"];
1917--3185[label="0.0505618;9pkt 9fpkt"];
1917--5193[label="0.994382;177pkt 177fpkt"];
1917--6828[label="0.994382;177pkt 177fpkt"];
1917--7875[label="1;178pkt 178fpkt"];
2014--2829[label="0.836207;97pkt 97fpkt"];
2014--3185[label="0.0566038;9pkt 9fpkt"];
2014--5193[label="1;159pkt 159fpkt"];
2014--6828[label="1;159pkt 159fpkt"];
2014--7875[label="1;159pkt 159fpkt"];
2829--3185[label="0.0689655;8pkt 8fpkt"];
2829--5193[label="0.991379;115pkt 115fpkt"];
2829--6828[label="0.991379;115pkt 115fpkt"];
2829--7875[label="1;116pkt 116fpkt"];
5193--6828[label="1;178pkt 178fpkt"];
5193--7875[label="1;178pkt 178fpkt"];
6828--7875[label="1;178pkt 178fpkt"];
</description>
    <slice>
      <filter dst_ip="197.57.185.246" dst_port="80" src_ip="148.110.93.210"/>
    </slice>
    <from sec="1039669217" usec="0"/>
    <to sec="1039669884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_427{
style=filled;
color=gray75;
1766[label="198.90.178.11;d;11pkt 11fpkt", shape=diamond, color=yellow];
2851[label="198.90.178.11;d;11pkt 11fpkt", shape=hexagon, color=black];
stat427[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.224.227:*, 198.90.178.11:443}[54.5455%]&lt;BR/&gt;{140.3.224.227:*, 198.90.178.11:80}[45.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (27.2727%)&lt;BR/&gt; 80: (22.7273%)&lt;BR/&gt; 59783: (4.54545%)&lt;BR/&gt; 59710: (4.54545%)&lt;BR/&gt; 59706: (4.54545%)&gt;];
}
1766--2851[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="198.90.178.11" dst_port="443" src_ip="140.3.224.227"/>
      <filter dst_ip="198.90.178.11" dst_port="80" src_ip="140.3.224.227"/>
    </slice>
    <from sec="1039669443" usec="0"/>
    <to sec="1039669640" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_428{
style=filled;
color=gray75;
1973[label="209.129.247.103;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat428[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.90.87.225:3358, 209.129.247.103:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3358: (50%)&gt;];
}
1973--2624[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.129.247.103" dst_port="6699" src_ip="215.90.87.225" src_port="3358"/>
    </slice>
    <from sec="1039669461" usec="0"/>
    <to sec="1039669746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_429{
style=filled;
color=gray75;
1983[label="138.186.147.2;s;54pkt 54fpkt", shape=diamond, color=yellow];
2857[label="138.186.147.2;s;54pkt 54fpkt", shape=hexagon, color=black];
stat429[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.147.2:*, 36.2.50.64:80}[27.7778%]&lt;BR/&gt;{138.186.147.2:*, 36.2.50.90:80}[27.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33022: (0.925926%)&lt;BR/&gt; 33021: (0.925926%)&lt;BR/&gt; 33020: (0.925926%)&lt;BR/&gt; 33019: (0.925926%)&gt;];
}
1983--2857[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter dst_ip="36.2.50.90" dst_port="80" src_ip="138.186.147.2"/>
      <filter dst_ip="36.2.50.64" dst_port="80" src_ip="138.186.147.2"/>
    </slice>
    <from sec="1039669526" usec="0"/>
    <to sec="1039669665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19604,1.81002,503,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_430{
style=filled;
color=gray75;
70[label="199.108.34.193s;4pkt 4fpkt", shape=rectangle, color=red];
520[label="199.108.34.10;s;421pkt 421fpkt", shape=diamond, color=yellow];
553[label="199.108.34.12;s;144pkt 144fpkt", shape=diamond, color=yellow];
623[label="215.160.138.180;d;191pkt 191fpkt", shape=diamond, color=yellow];
635[label="140.3.211.2;d;129pkt 129fpkt", shape=diamond, color=yellow];
638[label="138.186.52.169;d;147pkt 147fpkt", shape=diamond, color=yellow];
639[label="140.3.244.3;d;67pkt 67fpkt", shape=diamond, color=yellow];
689[label="199.108.34.223;s;242pkt 242fpkt", shape=diamond, color=yellow];
708[label="39.111.168.216;s;1pkt 1fpkt", shape=diamond, color=yellow];
731[label="199.108.34.3;s;113pkt 113fpkt", shape=diamond, color=yellow];
750[label="140.3.210.88;d;66pkt 66fpkt", shape=diamond, color=yellow];
913[label="172.93.27.129;d;31pkt 31fpkt", shape=diamond, color=yellow];
929[label="199.108.34.167;s;136pkt 136fpkt", shape=diamond, color=yellow];
931[label="199.108.34.2;s;103pkt 103fpkt", shape=diamond, color=yellow];
966[label="199.108.34.26;s;181pkt 181fpkt", shape=diamond, color=yellow];
1095[label="199.108.34.193;s;139pkt 139fpkt", shape=diamond, color=yellow];
1165[label="215.90.65.18;d;244pkt 244fpkt", shape=diamond, color=yellow];
1297[label="140.3.243.49;d;52pkt 52fpkt", shape=diamond, color=yellow];
1377[label="140.3.224.227;d;102pkt 102fpkt", shape=diamond, color=yellow];
1438[label="172.93.222.97;d;33pkt 33fpkt", shape=diamond, color=yellow];
1712[label="140.3.110.162;d;124pkt 124fpkt", shape=diamond, color=yellow];
1989[label="140.3.55.182;d;34pkt 34fpkt", shape=diamond, color=yellow];
2142[label="140.3.244.12;d;57pkt 57fpkt", shape=diamond, color=yellow];
2174[label="140.3.70.192;d;86pkt 86fpkt", shape=diamond, color=yellow];
2175[label="196.179.216.45;s;82pkt 82fpkt", shape=diamond, color=yellow];
2197[label="140.3.240.10;d;68pkt 68fpkt", shape=diamond, color=yellow];
2242[label="215.90.157.85;d;65pkt 65fpkt", shape=diamond, color=yellow];
2334[label="140.3.213.174;d;41pkt 41fpkt", shape=diamond, color=yellow];
2482[label="215.160.138.180;d;191pkt 191fpkt", shape=hexagon, color=black];
2505[label="215.150.149.99;d;388pkt 388fpkt", shape=hexagon, color=black];
2524[label="138.186.52.169;d;110pkt 110fpkt", shape=hexagon, color=black];
2632[label="172.93.222.97;d;27pkt 27fpkt", shape=hexagon, color=black];
2677[label="199.108.34.223;s;183pkt 183fpkt", shape=hexagon, color=black];
2681[label="199.108.34.198;s;71pkt 71fpkt", shape=hexagon, color=black];
2750[label="199.108.34.10;s;421pkt 421fpkt", shape=hexagon, color=black];
2858[label="140.3.55.182;d;34pkt 34fpkt", shape=hexagon, color=black];
2882[label="199.108.34.12;s;144pkt 144fpkt", shape=hexagon, color=black];
2891[label="140.3.211.2;d;97pkt 97fpkt", shape=hexagon, color=black];
2892[label="199.108.34.167;s;111pkt 111fpkt", shape=hexagon, color=black];
2934[label="199.108.34.193;s;139pkt 139fpkt", shape=hexagon, color=black];
2980[label="140.3.240.10;d;37pkt 37fpkt", shape=hexagon, color=black];
3295[label="211.45.251.6;264pkt 264fpkt", shape=pentagon, color=darkviolet];
3333[label="199.108.34.10;455pkt 455fpkt", shape=pentagon, color=darkviolet];
3648[label="201.100.9.38;254pkt 254fpkt", shape=pentagon, color=darkviolet];
3662[label="199.107.13.39;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3716[label="196.179.216.45;87pkt 87fpkt", shape=pentagon, color=darkviolet];
3817[label="202.158.197.56;152pkt 152fpkt", shape=pentagon, color=darkviolet];
4839[label="199.108.34.167;154pkt 154fpkt", shape=pentagon, color=darkviolet];
5239[label="39.111.168.216;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5283[label="199.108.34.223;321pkt 321fpkt", shape=pentagon, color=darkviolet];
5360[label="196.139.146.232;13pkt 13fpkt", shape=pentagon, color=darkviolet];
5825[label="199.107.13.39;12pkt 12fpkt", shape=invtriangle, color=brown];
5931[label="202.158.197.56;151pkt 151fpkt", shape=invtriangle, color=brown];
6597[label="199.108.34.167;154pkt 154fpkt", shape=invtriangle, color=brown];
6754[label="196.139.146.197;57pkt 57fpkt", shape=invtriangle, color=brown];
6933[label="196.139.146.232;13pkt 13fpkt", shape=invtriangle, color=brown];
7822[label="196.139.146.197;56pkt 56fpkt", shape=invhouse, color=bisque];
7946[label="196.139.146.232;12pkt 12fpkt", shape=invhouse, color=bisque];
stat430[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, *:*}[90.6686%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.8679%)&lt;BR/&gt; 137: (2.11102%)&lt;BR/&gt; 443: (1.18355%)&lt;BR/&gt; 0: (0.927464%)&lt;BR/&gt; 53: (0.276855%)&gt;];
}
70--638[label="0.5;2pkt 2fpkt"];
70--1095[label="1;4pkt 4fpkt"];
70--1297[label="0.5;2pkt 2fpkt"];
70--2524[label="0.5;2pkt 2fpkt"];
70--2934[label="1;4pkt 4fpkt"];
520--523[label="0.00475059;2pkt 2fpkt"];
520--545[label="0.00675676;2pkt 2fpkt"];
520--623[label="0.0209424;4pkt 4fpkt"];
520--635[label="0.116279;15pkt 15fpkt"];
520--638[label="0.142857;21pkt 21fpkt"];
520--639[label="0.119403;8pkt 8fpkt"];
520--736[label="0.0196078;4pkt 4fpkt"];
520--750[label="0.257576;17pkt 17fpkt"];
520--818[label="0.0283505;11pkt 11fpkt"];
520--913[label="0.0645161;2pkt 2fpkt"];
520--1091[label="0.0387597;5pkt 5fpkt"];
520--1100[label="0.00574713;1pkt 1fpkt"];
520--1165[label="0.27459;67pkt 67fpkt"];
520--1215[label="0.00950119;4pkt 4fpkt"];
520--1297[label="0.192308;10pkt 10fpkt"];
520--1377[label="0.0294118;3pkt 3fpkt"];
520--1438[label="0.181818;6pkt 6fpkt"];
520--1712[label="0.217742;27pkt 27fpkt"];
520--1989[label="0.117647;4pkt 4fpkt"];
520--2174[label="0.0232558;2pkt 2fpkt"];
520--2197[label="0.25;17pkt 17fpkt"];
520--2242[label="0.0769231;5pkt 5fpkt"];
520--2318[label="0.0106383;1pkt 1fpkt"];
520--2334[label="0.170732;7pkt 7fpkt"];
520--2470[label="0.00950119;4pkt 4fpkt"];
520--2472[label="0.0237389;8pkt 8fpkt"];
520--2482[label="0.0209424;4pkt 4fpkt"];
520--2505[label="0.0283505;11pkt 11fpkt"];
520--2524[label="0.154545;17pkt 17fpkt"];
520--2632[label="0.185185;5pkt 5fpkt"];
520--2750[label="1;421pkt 421fpkt"];
520--2858[label="0.117647;4pkt 4fpkt"];
520--2871[label="0.00950119;4pkt 4fpkt"];
520--2891[label="0.113402;11pkt 11fpkt"];
520--2940[label="0.0352941;3pkt 3fpkt"];
520--2980[label="0.243243;9pkt 9fpkt"];
520--3333[label="1;421pkt 421fpkt"];
553--623[label="0.0138889;2pkt 2fpkt"];
553--639[label="0.134328;9pkt 9fpkt"];
553--736[label="0.00694444;1pkt 1fpkt"];
553--818[label="0.0208333;3pkt 3fpkt"];
553--913[label="0.0967742;3pkt 3fpkt"];
553--1091[label="0.0155039;2pkt 2fpkt"];
553--1100[label="0.00694444;1pkt 1fpkt"];
553--1165[label="0.145833;21pkt 21fpkt"];
553--1215[label="0.0138889;2pkt 2fpkt"];
553--1297[label="0.0961538;5pkt 5fpkt"];
553--1377[label="0.00980392;1pkt 1fpkt"];
553--1438[label="0.181818;6pkt 6fpkt"];
553--1712[label="0.0322581;4pkt 4fpkt"];
553--2197[label="0.0882353;6pkt 6fpkt"];
553--2242[label="0.0153846;1pkt 1fpkt"];
553--2334[label="0.146341;6pkt 6fpkt"];
553--2472[label="0.0208333;3pkt 3fpkt"];
553--2482[label="0.0138889;2pkt 2fpkt"];
553--2505[label="0.0208333;3pkt 3fpkt"];
553--2632[label="0.148148;4pkt 4fpkt"];
553--2871[label="0.0138889;2pkt 2fpkt"];
553--2882[label="1;144pkt 144fpkt"];
553--2940[label="0.0117647;1pkt 1fpkt"];
553--2980[label="0.162162;6pkt 6fpkt"];
623--658[label="0.0288462;3pkt 3fpkt"];
623--689[label="0.0209424;4pkt 4fpkt"];
623--708[label="1;1pkt 1fpkt"];
623--731[label="0.00884956;1pkt 1fpkt"];
623--735[label="0.0309278;3pkt 3fpkt"];
623--892[label="0.0111111;1pkt 1fpkt"];
623--929[label="0.00735294;1pkt 1fpkt"];
623--931[label="0.0194175;2pkt 2fpkt"];
623--966[label="0.0165746;3pkt 3fpkt"];
623--1013[label="0.0163934;1pkt 1fpkt"];
623--1095[label="0.0215827;3pkt 3fpkt"];
623--1287[label="0.0315789;3pkt 3fpkt"];
623--1335[label="0.0598802;10pkt 10fpkt"];
623--1343[label="0.184615;12pkt 12fpkt"];
623--1387[label="0.0186916;2pkt 2fpkt"];
623--1392[label="0.0337079;3pkt 3fpkt"];
623--1466[label="0.00970874;1pkt 1fpkt"];
623--1539[label="0.00862069;1pkt 1fpkt"];
623--1549[label="0.0348837;3pkt 3fpkt"];
623--1829[label="0.0172414;1pkt 1fpkt"];
623--2098[label="0.0111111;1pkt 1fpkt"];
623--2175[label="0.0365854;3pkt 3fpkt"];
623--2261[label="0.0151515;1pkt 1fpkt"];
623--2298[label="0.0178571;1pkt 1fpkt"];
623--2339[label="0.02;1pkt 1fpkt"];
623--2404[label="0.0540541;2pkt 2fpkt"];
623--2482[label="1;191pkt 191fpkt"];
623--2484[label="0.032967;3pkt 3fpkt"];
623--2607[label="0.192308;10pkt 10fpkt"];
623--2619[label="0.0186916;2pkt 2fpkt"];
623--2656[label="0.0153846;1pkt 1fpkt"];
623--2677[label="0.0218579;4pkt 4fpkt"];
623--2681[label="0.0422535;3pkt 3fpkt"];
623--2750[label="0.0209424;4pkt 4fpkt"];
623--2780[label="0.0225564;3pkt 3fpkt"];
623--2882[label="0.0138889;2pkt 2fpkt"];
623--2892[label="0.00900901;1pkt 1fpkt"];
623--2921[label="0.0196078;1pkt 1fpkt"];
623--2934[label="0.0215827;3pkt 3fpkt"];
623--3272[label="0.016129;1pkt 1fpkt"];
623--3333[label="0.0209424;4pkt 4fpkt"];
623--3429[label="0.0882353;3pkt 3fpkt"];
623--3639[label="0.0172414;1pkt 1fpkt"];
623--3716[label="0.0344828;3pkt 3fpkt"];
623--4236[label="0.00980392;1pkt 1fpkt"];
623--4249[label="0.0175439;1pkt 1fpkt"];
623--4751[label="0.0135135;1pkt 1fpkt"];
623--4839[label="0.00649351;1pkt 1fpkt"];
623--4967[label="0.0105263;1pkt 1fpkt"];
623--5086[label="1;56pkt 56fpkt"];
623--5097[label="0.104348;12pkt 12fpkt"];
623--5118[label="0.0215827;3pkt 3fpkt"];
623--5238[label="0.0564972;10pkt 10fpkt"];
623--5239[label="1;1pkt 1fpkt"];
623--5283[label="0.0209424;4pkt 4fpkt"];
623--5300[label="0.0714286;3pkt 3fpkt"];
623--5360[label="0.692308;9pkt 9fpkt"];
623--5445[label="0.0714286;1pkt 1fpkt"];
623--5678[label="0.0909091;3pkt 3fpkt"];
623--6197[label="0.00970874;1pkt 1fpkt"];
623--6207[label="0.0175439;1pkt 1fpkt"];
623--6542[label="0.0135135;1pkt 1fpkt"];
623--6597[label="0.00649351;1pkt 1fpkt"];
623--6689[label="0.0104167;1pkt 1fpkt"];
623--6754[label="0.982456;56pkt 56fpkt"];
623--6761[label="0.104348;12pkt 12fpkt"];
623--6777[label="0.0214286;3pkt 3fpkt"];
623--6858[label="0.0568182;10pkt 10fpkt"];
623--6933[label="0.692308;9pkt 9fpkt"];
623--6996[label="0.0769231;1pkt 1fpkt"];
623--7140[label="0.0882353;3pkt 3fpkt"];
623--7470[label="0.00980392;1pkt 1fpkt"];
623--7686[label="0.0136986;1pkt 1fpkt"];
623--7822[label="1;56pkt 56fpkt"];
623--7837[label="0.0215827;3pkt 3fpkt"];
623--7896[label="0.0564972;10pkt 10fpkt"];
623--7946[label="0.75;9pkt 9fpkt"];
623--7987[label="0.0769231;1pkt 1fpkt"];
635--689[label="0.186047;24pkt 24fpkt"];
635--731[label="0.132743;15pkt 15fpkt"];
635--929[label="0.116279;15pkt 15fpkt"];
635--966[label="0.116279;15pkt 15fpkt"];
635--1095[label="0.139535;18pkt 18fpkt"];
635--1539[label="0.0948276;11pkt 11fpkt"];
635--2677[label="0.155039;20pkt 20fpkt"];
635--2750[label="0.116279;15pkt 15fpkt"];
635--2780[label="0.0852713;11pkt 11fpkt"];
635--2891[label="1;97pkt 97fpkt"];
635--2892[label="0.0990991;11pkt 11fpkt"];
635--2934[label="0.139535;18pkt 18fpkt"];
635--3333[label="0.116279;15pkt 15fpkt"];
635--4839[label="0.116279;15pkt 15fpkt"];
635--5283[label="0.248062;32pkt 32fpkt"];
635--6597[label="0.116279;15pkt 15fpkt"];
638--658[label="0.173077;18pkt 18fpkt"];
638--689[label="0.163265;24pkt 24fpkt"];
638--929[label="0.125;17pkt 17fpkt"];
638--966[label="0.156463;23pkt 23fpkt"];
638--1095[label="0.115108;16pkt 16fpkt"];
638--1539[label="0.137931;16pkt 16fpkt"];
638--2484[label="0.153846;14pkt 14fpkt"];
638--2524[label="1;110pkt 110fpkt"];
638--2677[label="0.0748299;11pkt 11fpkt"];
638--2750[label="0.142857;21pkt 21fpkt"];
638--2780[label="0.105263;14pkt 14fpkt"];
638--2892[label="0.117117;13pkt 13fpkt"];
638--2934[label="0.115108;16pkt 16fpkt"];
638--3333[label="0.142857;21pkt 21fpkt"];
638--4839[label="0.115646;17pkt 17fpkt"];
638--5283[label="0.217687;32pkt 32fpkt"];
638--6597[label="0.115646;17pkt 17fpkt"];
639--689[label="0.119403;8pkt 8fpkt"];
639--731[label="0.134328;9pkt 9fpkt"];
639--929[label="0.104478;7pkt 7fpkt"];
639--931[label="0.134328;9pkt 9fpkt"];
639--1095[label="0.149254;10pkt 10fpkt"];
639--1287[label="0.104478;7pkt 7fpkt"];
639--2677[label="0.119403;8pkt 8fpkt"];
639--2681[label="0.104478;7pkt 7fpkt"];
639--2750[label="0.119403;8pkt 8fpkt"];
639--2882[label="0.134328;9pkt 9fpkt"];
639--2892[label="0.104478;7pkt 7fpkt"];
639--2934[label="0.149254;10pkt 10fpkt"];
639--3333[label="0.119403;8pkt 8fpkt"];
639--4839[label="0.104478;7pkt 7fpkt"];
639--5283[label="0.119403;8pkt 8fpkt"];
639--6597[label="0.104478;7pkt 7fpkt"];
689--736[label="0.00490196;1pkt 1fpkt"];
689--818[label="0.0206612;5pkt 5fpkt"];
689--913[label="0.0645161;2pkt 2fpkt"];
689--1091[label="0.00775194;1pkt 1fpkt"];
689--1100[label="0.00574713;1pkt 1fpkt"];
689--1165[label="0.140496;34pkt 34fpkt"];
689--1215[label="0.0123967;3pkt 3fpkt"];
689--1297[label="0.134615;7pkt 7fpkt"];
689--1438[label="0.0909091;3pkt 3fpkt"];
689--1712[label="0.0887097;11pkt 11fpkt"];
689--1989[label="0.117647;4pkt 4fpkt"];
689--2142[label="0.0175439;1pkt 1fpkt"];
689--2174[label="0.0232558;2pkt 2fpkt"];
689--2197[label="0.117647;8pkt 8fpkt"];
689--2334[label="0.097561;4pkt 4fpkt"];
689--2470[label="0.0330579;8pkt 8fpkt"];
689--2472[label="0.0123967;3pkt 3fpkt"];
689--2482[label="0.0209424;4pkt 4fpkt"];
689--2505[label="0.0206612;5pkt 5fpkt"];
689--2524[label="0.218182;24pkt 24fpkt"];
689--2632[label="0.0740741;2pkt 2fpkt"];
689--2649[label="0.00436681;1pkt 1fpkt"];
689--2677[label="1;183pkt 183fpkt"];
689--2858[label="0.117647;4pkt 4fpkt"];
689--2871[label="0.0123967;3pkt 3fpkt"];
689--2891[label="0.247423;24pkt 24fpkt"];
689--2980[label="0.216216;8pkt 8fpkt"];
689--5283[label="1;242pkt 242fpkt"];
708--2482[label="1;1pkt 1fpkt"];
708--5239[label="1;1pkt 1fpkt"];
731--750[label="0.106061;7pkt 7fpkt"];
731--818[label="0.0176991;2pkt 2fpkt"];
731--913[label="0.0322581;1pkt 1fpkt"];
731--1091[label="0.0176991;2pkt 2fpkt"];
731--1165[label="0.0619469;7pkt 7fpkt"];
731--1297[label="0.153846;8pkt 8fpkt"];
731--1377[label="0.00980392;1pkt 1fpkt"];
731--1438[label="0.0909091;3pkt 3fpkt"];
731--1712[label="0.0353982;4pkt 4fpkt"];
731--1989[label="0.117647;4pkt 4fpkt"];
731--2197[label="0.0588235;4pkt 4fpkt"];
731--2242[label="0.0153846;1pkt 1fpkt"];
731--2318[label="0.0106383;1pkt 1fpkt"];
731--2334[label="0.146341;6pkt 6fpkt"];
731--2472[label="0.00884956;1pkt 1fpkt"];
731--2482[label="0.00884956;1pkt 1fpkt"];
731--2505[label="0.0176991;2pkt 2fpkt"];
731--2632[label="0.111111;3pkt 3fpkt"];
731--2649[label="0.00884956;1pkt 1fpkt"];
731--2858[label="0.117647;4pkt 4fpkt"];
731--2891[label="0.154639;15pkt 15fpkt"];
731--2940[label="0.0117647;1pkt 1fpkt"];
731--2980[label="0.108108;4pkt 4fpkt"];
750--929[label="0.106061;7pkt 7fpkt"];
750--931[label="0.121212;8pkt 8fpkt"];
750--966[label="0.121212;8pkt 8fpkt"];
750--1539[label="0.151515;10pkt 10fpkt"];
750--1549[label="0.136364;9pkt 9fpkt"];
750--2750[label="0.257576;17pkt 17fpkt"];
750--2780[label="0.121212;8pkt 8fpkt"];
750--2892[label="0.106061;7pkt 7fpkt"];
750--3333[label="0.257576;17pkt 17fpkt"];
750--4839[label="0.106061;7pkt 7fpkt"];
750--6597[label="0.106061;7pkt 7fpkt"];
913--929[label="0.0322581;1pkt 1fpkt"];
913--1549[label="0.0645161;2pkt 2fpkt"];
913--2750[label="0.0645161;2pkt 2fpkt"];
913--2882[label="0.0967742;3pkt 3fpkt"];
913--2892[label="0.0322581;1pkt 1fpkt"];
913--3333[label="0.0645161;2pkt 2fpkt"];
913--3817[label="0.0322581;1pkt 1fpkt"];
913--4839[label="0.0322581;1pkt 1fpkt"];
913--4965[label="1;1pkt 1fpkt"];
913--5283[label="0.0645161;2pkt 2fpkt"];
913--5931[label="0.0322581;1pkt 1fpkt"];
913--6597[label="0.0322581;1pkt 1fpkt"];
913--6687[label="1;1pkt 1fpkt"];
929--1091[label="0.00775194;1pkt 1fpkt"];
929--1165[label="0.0588235;8pkt 8fpkt"];
929--1215[label="0.0220588;3pkt 3fpkt"];
929--1377[label="0.00980392;1pkt 1fpkt"];
929--1438[label="0.121212;4pkt 4fpkt"];
929--1712[label="0.0725806;9pkt 9fpkt"];
929--1989[label="0.117647;4pkt 4fpkt"];
929--2242[label="0.0153846;1pkt 1fpkt"];
929--2318[label="0.0106383;1pkt 1fpkt"];
929--2334[label="0.0243902;1pkt 1fpkt"];
929--2472[label="0.00735294;1pkt 1fpkt"];
929--2482[label="0.00735294;1pkt 1fpkt"];
929--2505[label="0.0367647;5pkt 5fpkt"];
929--2524[label="0.118182;13pkt 13fpkt"];
929--2632[label="0.0740741;2pkt 2fpkt"];
929--2649[label="0.00735294;1pkt 1fpkt"];
929--2858[label="0.117647;4pkt 4fpkt"];
929--2871[label="0.0220588;3pkt 3fpkt"];
929--2891[label="0.113402;11pkt 11fpkt"];
929--2892[label="1;111pkt 111fpkt"];
929--4839[label="1;136pkt 136fpkt"];
929--6597[label="1;136pkt 136fpkt"];
931--1091[label="0.00970874;1pkt 1fpkt"];
931--1100[label="0.00970874;1pkt 1fpkt"];
931--1165[label="0.0970874;10pkt 10fpkt"];
931--1215[label="0.0194175;2pkt 2fpkt"];
931--1377[label="0.00980392;1pkt 1fpkt"];
931--1438[label="0.121212;4pkt 4fpkt"];
931--1712[label="0.0970874;10pkt 10fpkt"];
931--2242[label="0.0307692;2pkt 2fpkt"];
931--2334[label="0.0243902;1pkt 1fpkt"];
931--2470[label="0.0291262;3pkt 3fpkt"];
931--2472[label="0.0194175;2pkt 2fpkt"];
931--2482[label="0.0194175;2pkt 2fpkt"];
931--2505[label="0.0291262;3pkt 3fpkt"];
931--2632[label="0.148148;4pkt 4fpkt"];
931--2871[label="0.0194175;2pkt 2fpkt"];
966--1091[label="0.0155039;2pkt 2fpkt"];
966--1165[label="0.116022;21pkt 21fpkt"];
966--1177[label="0.00769231;1pkt 1fpkt"];
966--1215[label="0.0110497;2pkt 2fpkt"];
966--1377[label="0.0196078;2pkt 2fpkt"];
966--1712[label="0.0967742;12pkt 12fpkt"];
966--1989[label="0.117647;4pkt 4fpkt"];
966--2174[label="0.0465116;4pkt 4fpkt"];
966--2242[label="0.0769231;5pkt 5fpkt"];
966--2472[label="0.00552486;1pkt 1fpkt"];
966--2482[label="0.0165746;3pkt 3fpkt"];
966--2505[label="0.038674;7pkt 7fpkt"];
966--2524[label="0.127273;14pkt 14fpkt"];
966--2649[label="0.00552486;1pkt 1fpkt"];
966--2780[label="1;133pkt 133fpkt"];
966--2858[label="0.117647;4pkt 4fpkt"];
966--2871[label="0.0110497;2pkt 2fpkt"];
966--2891[label="0.113402;11pkt 11fpkt"];
966--2940[label="0.0117647;1pkt 1fpkt"];
1095--1165[label="0.0935252;13pkt 13fpkt"];
1095--1297[label="0.134615;7pkt 7fpkt"];
1095--1377[label="0.00980392;1pkt 1fpkt"];
1095--1438[label="0.0606061;2pkt 2fpkt"];
1095--1712[label="0.0967742;12pkt 12fpkt"];
1095--1989[label="0.117647;4pkt 4fpkt"];
1095--2174[label="0.0116279;1pkt 1fpkt"];
1095--2334[label="0.097561;4pkt 4fpkt"];
1095--2470[label="0.00719424;1pkt 1fpkt"];
1095--2472[label="0.00719424;1pkt 1fpkt"];
1095--2482[label="0.0215827;3pkt 3fpkt"];
1095--2505[label="0.028777;4pkt 4fpkt"];
1095--2524[label="0.109091;12pkt 12fpkt"];
1095--2632[label="0.0740741;2pkt 2fpkt"];
1095--2858[label="0.117647;4pkt 4fpkt"];
1095--2891[label="0.14433;14pkt 14fpkt"];
1095--2934[label="1;139pkt 139fpkt"];
1165--1287[label="0.147368;14pkt 14fpkt"];
1165--1539[label="0.0172414;2pkt 2fpkt"];
1165--1549[label="0.104651;9pkt 9fpkt"];
1165--2484[label="0.208791;19pkt 19fpkt"];
1165--2677[label="0.153005;28pkt 28fpkt"];
1165--2681[label="0.140845;10pkt 10fpkt"];
1165--2750[label="0.27459;67pkt 67fpkt"];
1165--2780[label="0.150376;20pkt 20fpkt"];
1165--2882[label="0.145833;21pkt 21fpkt"];
1165--2892[label="0.0720721;8pkt 8fpkt"];
1165--2934[label="0.0935252;13pkt 13fpkt"];
1165--3333[label="0.27459;67pkt 67fpkt"];
1165--4010[label="0.00409836;1pkt 1fpkt"];
1165--4839[label="0.0519481;8pkt 8fpkt"];
1165--5283[label="0.139344;34pkt 34fpkt"];
1165--6055[label="0.00409836;1pkt 1fpkt"];
1165--6597[label="0.0519481;8pkt 8fpkt"];
1297--1539[label="0.153846;8pkt 8fpkt"];
1297--2677[label="0.134615;7pkt 7fpkt"];
1297--2750[label="0.192308;10pkt 10fpkt"];
1297--2882[label="0.0961538;5pkt 5fpkt"];
1297--2934[label="0.134615;7pkt 7fpkt"];
1297--3333[label="0.192308;10pkt 10fpkt"];
1297--5283[label="0.134615;7pkt 7fpkt"];
1377--1539[label="0.00980392;1pkt 1fpkt"];
1377--1549[label="0.0116279;1pkt 1fpkt"];
1377--1660[label="0.0588235;3pkt 3fpkt"];
1377--1820[label="0.0196078;2pkt 2fpkt"];
1377--1914[label="0.0196078;2pkt 2fpkt"];
1377--1925[label="0.0227273;1pkt 1fpkt"];
1377--2102[label="0.030303;1pkt 1fpkt"];
1377--2117[label="0.00980392;1pkt 1fpkt"];
1377--2155[label="0.00980392;1pkt 1fpkt"];
1377--2161[label="0.0196078;2pkt 2fpkt"];
1377--2247[label="0.00980392;1pkt 1fpkt"];
1377--2317[label="0.0196078;2pkt 2fpkt"];
1377--2688[label="0.00980392;1pkt 1fpkt"];
1377--2750[label="0.0294118;3pkt 3fpkt"];
1377--2828[label="0.0196078;2pkt 2fpkt"];
1377--2882[label="0.00980392;1pkt 1fpkt"];
1377--2911[label="0.00980392;1pkt 1fpkt"];
1377--2934[label="0.00980392;1pkt 1fpkt"];
1377--2940[label="1;85pkt 85fpkt"];
1377--3046[label="0.030303;1pkt 1fpkt"];
1377--3058[label="0.0196078;2pkt 2fpkt"];
1377--3071[label="0.0588235;3pkt 3fpkt"];
1377--3212[label="0.0196078;2pkt 2fpkt"];
1377--3255[label="0.0277778;1pkt 1fpkt"];
1377--3295[label="0.00980392;1pkt 1fpkt"];
1377--3333[label="0.0294118;3pkt 3fpkt"];
1377--3648[label="0.0196078;2pkt 2fpkt"];
1377--3662[label="1;12pkt 12fpkt"];
1377--3844[label="0.0686275;7pkt 7fpkt"];
1377--4357[label="0.00980392;1pkt 1fpkt"];
1377--4447[label="0.0465116;2pkt 2fpkt"];
1377--4522[label="0.00980392;1pkt 1fpkt"];
1377--4688[label="0.00980392;1pkt 1fpkt"];
1377--4716[label="0.0215054;2pkt 2fpkt"];
1377--4839[label="0.00980392;1pkt 1fpkt"];
1377--4889[label="0.176471;18pkt 18fpkt"];
1377--4904[label="0.0277778;1pkt 1fpkt"];
1377--5283[label="0.0196078;2pkt 2fpkt"];
1377--5317[label="0.00980392;1pkt 1fpkt"];
1377--5452[label="0.0666667;2pkt 2fpkt"];
1377--5513[label="0.00980392;1pkt 1fpkt"];
1377--5825[label="1;12pkt 12fpkt"];
1377--6275[label="0.00980392;1pkt 1fpkt"];
1377--6335[label="0.0465116;2pkt 2fpkt"];
1377--6389[label="0.00980392;1pkt 1fpkt"];
1377--6597[label="0.00980392;1pkt 1fpkt"];
1377--6638[label="0.176471;18pkt 18fpkt"];
1377--6646[label="0.0285714;1pkt 1fpkt"];
1377--7046[label="0.00980392;1pkt 1fpkt"];
1377--7511[label="0.00980392;1pkt 1fpkt"];
1377--7546[label="0.047619;2pkt 2fpkt"];
1377--7588[label="0.00980392;1pkt 1fpkt"];
1377--7748[label="0.176471;18pkt 18fpkt"];
1377--8013[label="0.00980392;1pkt 1fpkt"];
1438--2632[label="1;27pkt 27fpkt"];
1438--2677[label="0.0606061;2pkt 2fpkt"];
1438--2681[label="0.0909091;3pkt 3fpkt"];
1438--2750[label="0.181818;6pkt 6fpkt"];
1438--2882[label="0.181818;6pkt 6fpkt"];
1438--2892[label="0.121212;4pkt 4fpkt"];
1438--2934[label="0.0606061;2pkt 2fpkt"];
1438--3333[label="0.181818;6pkt 6fpkt"];
1438--4839[label="0.121212;4pkt 4fpkt"];
1438--5283[label="0.0909091;3pkt 3fpkt"];
1438--6597[label="0.121212;4pkt 4fpkt"];
1712--2484[label="0.0989011;9pkt 9fpkt"];
1712--2677[label="0.0887097;11pkt 11fpkt"];
1712--2681[label="0.0704225;5pkt 5fpkt"];
1712--2750[label="0.217742;27pkt 27fpkt"];
1712--2780[label="0.0483871;6pkt 6fpkt"];
1712--2882[label="0.0322581;4pkt 4fpkt"];
1712--2892[label="0.045045;5pkt 5fpkt"];
1712--2934[label="0.0967742;12pkt 12fpkt"];
1712--3333[label="0.217742;27pkt 27fpkt"];
1712--4839[label="0.0725806;9pkt 9fpkt"];
1712--5283[label="0.0887097;11pkt 11fpkt"];
1712--6597[label="0.0725806;9pkt 9fpkt"];
1989--2677[label="0.117647;4pkt 4fpkt"];
1989--2681[label="0.0588235;2pkt 2fpkt"];
1989--2750[label="0.117647;4pkt 4fpkt"];
1989--2780[label="0.117647;4pkt 4fpkt"];
1989--2821[label="0.0588235;2pkt 2fpkt"];
1989--2858[label="1;34pkt 34fpkt"];
1989--2892[label="0.117647;4pkt 4fpkt"];
1989--2934[label="0.117647;4pkt 4fpkt"];
1989--3333[label="0.117647;4pkt 4fpkt"];
1989--4839[label="0.117647;4pkt 4fpkt"];
1989--5057[label="0.0588235;2pkt 2fpkt"];
1989--5283[label="0.117647;4pkt 4fpkt"];
1989--6597[label="0.117647;4pkt 4fpkt"];
1989--6736[label="0.0588235;2pkt 2fpkt"];
1989--7811[label="0.0588235;2pkt 2fpkt"];
2142--2342[label="0.0350877;2pkt 2fpkt"];
2142--2677[label="0.0175439;1pkt 1fpkt"];
2142--2878[label="0.0526316;3pkt 3fpkt"];
2142--3076[label="0.0350877;2pkt 2fpkt"];
2142--3209[label="0.0175439;1pkt 1fpkt"];
2142--3260[label="0.0243902;1pkt 1fpkt"];
2142--3647[label="0.0350877;2pkt 2fpkt"];
2142--3844[label="0.157895;9pkt 9fpkt"];
2142--4106[label="0.0285714;1pkt 1fpkt"];
2142--4304[label="0.0526316;3pkt 3fpkt"];
2142--4320[label="0.025641;1pkt 1fpkt"];
2142--4344[label="0.0175439;1pkt 1fpkt"];
2142--4451[label="0.0350877;2pkt 2fpkt"];
2142--4699[label="0.04;2pkt 2fpkt"];
2142--4713[label="0.105263;2pkt 2fpkt"];
2142--4716[label="0.0350877;2pkt 2fpkt"];
2142--4889[label="0.368421;21pkt 21fpkt"];
2142--5283[label="0.0175439;1pkt 1fpkt"];
2142--5570[label="0.025;1pkt 1fpkt"];
2142--5816[label="0.0350877;2pkt 2fpkt"];
2142--6112[label="0.0294118;1pkt 1fpkt"];
2142--6244[label="0.0526316;3pkt 3fpkt"];
2142--6266[label="0.0175439;1pkt 1fpkt"];
2142--6339[label="0.0350877;2pkt 2fpkt"];
2142--6506[label="0.04;2pkt 2fpkt"];
2142--6517[label="0.105263;2pkt 2fpkt"];
2142--6638[label="0.368421;21pkt 21fpkt"];
2142--7081[label="0.0243902;1pkt 1fpkt"];
2142--7418[label="0.0294118;1pkt 1fpkt"];
2142--7505[label="0.0175439;1pkt 1fpkt"];
2142--7548[label="0.0350877;2pkt 2fpkt"];
2142--7664[label="0.0408163;2pkt 2fpkt"];
2142--7748[label="0.368421;21pkt 21fpkt"];
2174--2750[label="0.0232558;2pkt 2fpkt"];
2174--2934[label="0.0116279;1pkt 1fpkt"];
2174--3082[label="0.0465116;4pkt 4fpkt"];
2174--3209[label="0.0138889;1pkt 1fpkt"];
2174--3277[label="0.313953;27pkt 27fpkt"];
2174--3295[label="0.174419;15pkt 15fpkt"];
2174--3333[label="0.0232558;2pkt 2fpkt"];
2174--4357[label="0.162791;14pkt 14fpkt"];
2174--4424[label="0.0192308;1pkt 1fpkt"];
2174--5283[label="0.0232558;2pkt 2fpkt"];
2174--5581[label="0.313953;27pkt 27fpkt"];
2174--6275[label="0.162791;14pkt 14fpkt"];
2174--6323[label="0.0188679;1pkt 1fpkt"];
2174--7089[label="0.313953;27pkt 27fpkt"];
2174--7511[label="0.162791;14pkt 14fpkt"];
2174--7539[label="0.0188679;1pkt 1fpkt"];
2175--2482[label="0.0365854;3pkt 3fpkt"];
2175--3094[label="0.963415;79pkt 79fpkt"];
2175--3716[label="1;82pkt 82fpkt"];
2197--2677[label="0.0294118;2pkt 2fpkt"];
2197--2750[label="0.25;17pkt 17fpkt"];
2197--2882[label="0.0882353;6pkt 6fpkt"];
2197--2980[label="1;37pkt 37fpkt"];
2197--3333[label="0.25;17pkt 17fpkt"];
2197--5283[label="0.220588;15pkt 15fpkt"];
2242--2247[label="0.0153846;1pkt 1fpkt"];
2242--2484[label="0.0461538;3pkt 3fpkt"];
2242--2623[label="0.107692;7pkt 7fpkt"];
2242--2681[label="0.0307692;2pkt 2fpkt"];
2242--2750[label="0.0769231;5pkt 5fpkt"];
2242--2780[label="0.0769231;5pkt 5fpkt"];
2242--2882[label="0.0153846;1pkt 1fpkt"];
2242--2892[label="0.0153846;1pkt 1fpkt"];
2242--3212[label="0.0307692;2pkt 2fpkt"];
2242--3295[label="0.0153846;1pkt 1fpkt"];
2242--3333[label="0.0769231;5pkt 5fpkt"];
2242--3480[label="0.444444;16pkt 16fpkt"];
2242--3706[label="0.333333;5pkt 5fpkt"];
2242--4342[label="0.107692;7pkt 7fpkt"];
2242--4688[label="0.0153846;1pkt 1fpkt"];
2242--4716[label="0.0153846;1pkt 1fpkt"];
2242--4839[label="0.0153846;1pkt 1fpkt"];
2242--5203[label="0.0615385;4pkt 4fpkt"];
2242--5854[label="0.357143;5pkt 5fpkt"];
2242--6597[label="0.0153846;1pkt 1fpkt"];
2334--2677[label="0.0243902;1pkt 1fpkt"];
2334--2750[label="0.170732;7pkt 7fpkt"];
2334--2882[label="0.146341;6pkt 6fpkt"];
2334--2892[label="0.0243902;1pkt 1fpkt"];
2334--2934[label="0.097561;4pkt 4fpkt"];
2334--3333[label="0.170732;7pkt 7fpkt"];
2334--4839[label="0.0243902;1pkt 1fpkt"];
2334--5283[label="0.097561;4pkt 4fpkt"];
2334--6597[label="0.0243902;1pkt 1fpkt"];
2482--2484[label="0.032967;3pkt 3fpkt"];
2482--2607[label="0.192308;10pkt 10fpkt"];
2482--2619[label="0.0186916;2pkt 2fpkt"];
2482--2656[label="0.0153846;1pkt 1fpkt"];
2482--2677[label="0.0218579;4pkt 4fpkt"];
2482--2681[label="0.0422535;3pkt 3fpkt"];
2482--2750[label="0.0209424;4pkt 4fpkt"];
2482--2780[label="0.0225564;3pkt 3fpkt"];
2482--2882[label="0.0138889;2pkt 2fpkt"];
2482--2892[label="0.00900901;1pkt 1fpkt"];
2482--2921[label="0.0196078;1pkt 1fpkt"];
2482--2934[label="0.0215827;3pkt 3fpkt"];
2482--3272[label="0.016129;1pkt 1fpkt"];
2482--3333[label="0.0209424;4pkt 4fpkt"];
2482--3429[label="0.0882353;3pkt 3fpkt"];
2482--3639[label="0.0172414;1pkt 1fpkt"];
2482--3716[label="0.0344828;3pkt 3fpkt"];
2482--4236[label="0.00980392;1pkt 1fpkt"];
2482--4249[label="0.0175439;1pkt 1fpkt"];
2482--4751[label="0.0135135;1pkt 1fpkt"];
2482--4839[label="0.00649351;1pkt 1fpkt"];
2482--4967[label="0.0105263;1pkt 1fpkt"];
2482--5086[label="1;56pkt 56fpkt"];
2482--5097[label="0.104348;12pkt 12fpkt"];
2482--5118[label="0.0215827;3pkt 3fpkt"];
2482--5238[label="0.0564972;10pkt 10fpkt"];
2482--5239[label="1;1pkt 1fpkt"];
2482--5283[label="0.0209424;4pkt 4fpkt"];
2482--5300[label="0.0714286;3pkt 3fpkt"];
2482--5360[label="0.692308;9pkt 9fpkt"];
2482--5445[label="0.0714286;1pkt 1fpkt"];
2482--5678[label="0.0909091;3pkt 3fpkt"];
2482--6197[label="0.00970874;1pkt 1fpkt"];
2482--6207[label="0.0175439;1pkt 1fpkt"];
2482--6542[label="0.0135135;1pkt 1fpkt"];
2482--6597[label="0.00649351;1pkt 1fpkt"];
2482--6689[label="0.0104167;1pkt 1fpkt"];
2482--6754[label="0.982456;56pkt 56fpkt"];
2482--6761[label="0.104348;12pkt 12fpkt"];
2482--6777[label="0.0214286;3pkt 3fpkt"];
2482--6858[label="0.0568182;10pkt 10fpkt"];
2482--6933[label="0.692308;9pkt 9fpkt"];
2482--6996[label="0.0769231;1pkt 1fpkt"];
2482--7140[label="0.0882353;3pkt 3fpkt"];
2482--7470[label="0.00980392;1pkt 1fpkt"];
2482--7686[label="0.0136986;1pkt 1fpkt"];
2482--7822[label="1;56pkt 56fpkt"];
2482--7837[label="0.0215827;3pkt 3fpkt"];
2482--7896[label="0.0564972;10pkt 10fpkt"];
2482--7946[label="0.75;9pkt 9fpkt"];
2482--7987[label="0.0769231;1pkt 1fpkt"];
2505--2677[label="0.0273224;5pkt 5fpkt"];
2505--2681[label="0.0704225;5pkt 5fpkt"];
2505--2750[label="0.0283505;11pkt 11fpkt"];
2505--2780[label="0.037594;5pkt 5fpkt"];
2505--2821[label="0.00671141;1pkt 1fpkt"];
2505--2828[label="0.00574713;1pkt 1fpkt"];
2505--2878[label="0.00847458;1pkt 1fpkt"];
2505--2882[label="0.0208333;3pkt 3fpkt"];
2505--2892[label="0.045045;5pkt 5fpkt"];
2505--2911[label="0.00446429;1pkt 1fpkt"];
2505--2934[label="0.028777;4pkt 4fpkt"];
2505--2974[label="0.163934;10pkt 10fpkt"];
2505--3212[label="0.00333333;1pkt 1fpkt"];
2505--3295[label="0.00378788;1pkt 1fpkt"];
2505--3323[label="0.0454545;1pkt 1fpkt"];
2505--3333[label="0.0283505;11pkt 11fpkt"];
2505--3520[label="0.1;7pkt 7fpkt"];
2505--3578[label="0.021978;2pkt 2fpkt"];
2505--3628[label="0.166667;8pkt 8fpkt"];
2505--3639[label="0.137931;8pkt 8fpkt"];
2505--3648[label="0.015748;4pkt 4fpkt"];
2505--3832[label="0.00609756;1pkt 1fpkt"];
2505--3868[label="0.0515464;10pkt 10fpkt"];
2505--3998[label="0.04;1pkt 1fpkt"];
2505--4105[label="0.0384615;1pkt 1fpkt"];
2505--4249[label="0.157895;9pkt 9fpkt"];
2505--4304[label="0.00680272;1pkt 1fpkt"];
2505--4314[label="0.0454545;2pkt 2fpkt"];
2505--4320[label="0.025641;1pkt 1fpkt"];
2505--4325[label="0.0454545;2pkt 2fpkt"];
2505--4449[label="0.0625;2pkt 2fpkt"];
2505--4688[label="0.00680272;1pkt 1fpkt"];
2505--4746[label="0.0416667;1pkt 1fpkt"];
2505--4791[label="0.285714;2pkt 2fpkt"];
2505--4793[label="0.410256;16pkt 16fpkt"];
2505--4797[label="0.588235;30pkt 30fpkt"];
2505--4839[label="0.0324675;5pkt 5fpkt"];
2505--4841[label="0.333333;6pkt 6fpkt"];
2505--4933[label="0.45;9pkt 9fpkt"];
2505--5036[label="0.659574;31pkt 31fpkt"];
2505--5057[label="0.00552486;1pkt 1fpkt"];
2505--5114[label="0.0606061;2pkt 2fpkt"];
2505--5203[label="0.0298507;4pkt 4fpkt"];
2505--5283[label="0.0186916;6pkt 6fpkt"];
2505--5317[label="0.00257732;1pkt 1fpkt"];
2505--5480[label="0.2;4pkt 4fpkt"];
2505--5482[label="0.00813008;1pkt 1fpkt"];
2505--5502[label="0.0454545;1pkt 1fpkt"];
2505--5612[label="0.0454545;1pkt 1fpkt"];
2505--5776[label="0.0222222;2pkt 2fpkt"];
2505--5959[label="0.0518135;10pkt 10fpkt"];
2505--6047[label="0.0416667;1pkt 1fpkt"];
2505--6111[label="0.0384615;1pkt 1fpkt"];
2505--6207[label="0.157895;9pkt 9fpkt"];
2505--6244[label="0.00680272;1pkt 1fpkt"];
2505--6251[label="0.0444444;2pkt 2fpkt"];
2505--6257[label="0.0454545;2pkt 2fpkt"];
2505--6337[label="0.0606061;2pkt 2fpkt"];
2505--6565[label="0.285714;2pkt 2fpkt"];
2505--6567[label="0.410256;16pkt 16fpkt"];
2505--6571[label="0.588235;30pkt 30fpkt"];
2505--6597[label="0.0324675;5pkt 5fpkt"];
2505--6599[label="0.315789;6pkt 6fpkt"];
2505--6663[label="0.45;9pkt 9fpkt"];
2505--6727[label="0.673913;31pkt 31fpkt"];
2505--6736[label="0.00549451;1pkt 1fpkt"];
2505--7020[label="0.238095;5pkt 5fpkt"];
2505--7021[label="0.00806452;1pkt 1fpkt"];
2505--7038[label="0.0434783;1pkt 1fpkt"];
2505--7319[label="0.0515464;10pkt 10fpkt"];
2505--7498[label="0.0444444;2pkt 2fpkt"];
2505--7702[label="0.333333;2pkt 2fpkt"];
2505--7704[label="0.425;17pkt 17fpkt"];
2505--7762[label="0.421053;8pkt 8fpkt"];
2505--7811[label="0.00552486;1pkt 1fpkt"];
2505--7995[label="0.238095;5pkt 5fpkt"];
2524--2677[label="0.1;11pkt 11fpkt"];
2524--2750[label="0.154545;17pkt 17fpkt"];
2524--2780[label="0.127273;14pkt 14fpkt"];
2524--2892[label="0.118182;13pkt 13fpkt"];
2524--2934[label="0.109091;12pkt 12fpkt"];
2524--3333[label="0.154545;17pkt 17fpkt"];
2524--4839[label="0.118182;13pkt 13fpkt"];
2524--5283[label="0.218182;24pkt 24fpkt"];
2524--6597[label="0.118182;13pkt 13fpkt"];
2632--2677[label="0.0740741;2pkt 2fpkt"];
2632--2681[label="0.111111;3pkt 3fpkt"];
2632--2750[label="0.185185;5pkt 5fpkt"];
2632--2882[label="0.148148;4pkt 4fpkt"];
2632--2892[label="0.0740741;2pkt 2fpkt"];
2632--2934[label="0.0740741;2pkt 2fpkt"];
2632--3333[label="0.185185;5pkt 5fpkt"];
2632--4839[label="0.0740741;2pkt 2fpkt"];
2632--5283[label="0.0740741;2pkt 2fpkt"];
2632--6597[label="0.0740741;2pkt 2fpkt"];
2677--2858[label="0.117647;4pkt 4fpkt"];
2677--2871[label="0.0163934;3pkt 3fpkt"];
2677--2891[label="0.206186;20pkt 20fpkt"];
2677--2980[label="0.0540541;2pkt 2fpkt"];
2677--5283[label="1;183pkt 183fpkt"];
2681--2858[label="0.0588235;2pkt 2fpkt"];
2681--2871[label="0.0422535;3pkt 3fpkt"];
2750--2858[label="0.117647;4pkt 4fpkt"];
2750--2871[label="0.00950119;4pkt 4fpkt"];
2750--2891[label="0.113402;11pkt 11fpkt"];
2750--2940[label="0.0352941;3pkt 3fpkt"];
2750--2980[label="0.243243;9pkt 9fpkt"];
2750--3333[label="1;421pkt 421fpkt"];
2858--2892[label="0.117647;4pkt 4fpkt"];
2858--2934[label="0.117647;4pkt 4fpkt"];
2858--3333[label="0.117647;4pkt 4fpkt"];
2858--4839[label="0.117647;4pkt 4fpkt"];
2858--5057[label="0.0588235;2pkt 2fpkt"];
2858--5283[label="0.117647;4pkt 4fpkt"];
2858--6597[label="0.117647;4pkt 4fpkt"];
2858--6736[label="0.0588235;2pkt 2fpkt"];
2858--7811[label="0.0588235;2pkt 2fpkt"];
2882--2940[label="0.0117647;1pkt 1fpkt"];
2882--2980[label="0.162162;6pkt 6fpkt"];
2891--2892[label="0.113402;11pkt 11fpkt"];
2891--2934[label="0.14433;14pkt 14fpkt"];
2891--3333[label="0.113402;11pkt 11fpkt"];
2891--4839[label="0.113402;11pkt 11fpkt"];
2891--5283[label="0.247423;24pkt 24fpkt"];
2891--6597[label="0.113402;11pkt 11fpkt"];
2892--4839[label="1;111pkt 111fpkt"];
2892--6597[label="1;111pkt 111fpkt"];
2980--3333[label="0.243243;9pkt 9fpkt"];
2980--5283[label="0.216216;8pkt 8fpkt"];
3662--5825[label="1;12pkt 12fpkt"];
3817--5931[label="1;151pkt 151fpkt"];
4839--6597[label="1;154pkt 154fpkt"];
5360--6933[label="1;13pkt 13fpkt"];
5360--7946[label="1;12pkt 12fpkt"];
6754--7822[label="1;56pkt 56fpkt"];
6933--7946[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_432{
style=filled;
color=gray75;
820[label="33.84.118.99;d;1pkt 1fpkt", shape=diamond, color=yellow];
2868[label="33.84.118.99;d;1pkt 1fpkt", shape=hexagon, color=black];
stat432[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.110.192.55:6699, 33.84.118.99:1212}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1212: (50%)&gt;];
}
820--2868[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="33.84.118.99" dst_port="1212" src_ip="148.110.192.55" src_port="6699"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_433{
style=filled;
color=gray75;
1401[label="140.3.3.163;d;209pkt 209fpkt", shape=diamond, color=yellow];
3384[label="96.41.88.14;19pkt 19fpkt", shape=pentagon, color=darkviolet];
4308[label="96.51.22.106;35pkt 35fpkt", shape=pentagon, color=darkviolet];
stat433[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 140.3.3.163:*}[95.7944%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2395%)&lt;BR/&gt; 1309: (0.380228%)&lt;BR/&gt; 1308: (0.380228%)&lt;BR/&gt; 1307: (0.380228%)&lt;BR/&gt; 1306: (0.380228%)&gt;];
}
1401--1703[label="0.0191388;4pkt 4fpkt"];
1401--1836[label="0.0102041;1pkt 1fpkt"];
1401--1900[label="0.186603;39pkt 39fpkt"];
1401--2141[label="0.101449;7pkt 7fpkt"];
1401--2259[label="0.0168539;3pkt 3fpkt"];
1401--2317[label="0.0833333;10pkt 10fpkt"];
1401--2656[label="0.0307692;2pkt 2fpkt"];
1401--2951[label="1;198pkt 198fpkt"];
1401--2962[label="0.0222222;4pkt 4fpkt"];
1401--3058[label="0.0833333;10pkt 10fpkt"];
1401--3209[label="0.0972222;7pkt 7fpkt"];
1401--3384[label="0.894737;17pkt 17fpkt"];
1401--3581[label="0.0217391;1pkt 1fpkt"];
1401--3687[label="0.0143541;3pkt 3fpkt"];
1401--3832[label="0.0243902;4pkt 4fpkt"];
1401--4308[label="0.914286;32pkt 32fpkt"];
1401--4344[label="0.0384615;4pkt 4fpkt"];
1401--4713[label="0.263158;5pkt 5fpkt"];
1401--4837[label="0.08;2pkt 2fpkt"];
1401--4967[label="0.0210526;2pkt 2fpkt"];
1401--5777[label="0.0222222;1pkt 1fpkt"];
1401--5841[label="0.0143541;3pkt 3fpkt"];
1401--6266[label="0.0384615;4pkt 4fpkt"];
1401--6517[label="0.263158;5pkt 5fpkt"];
1401--6689[label="0.0208333;2pkt 2fpkt"];
1401--7505[label="0.0380952;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.3.163" src_port="80"/>
    </slice>
    <from sec="1039669208" usec="0"/>
    <to sec="1039669893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_434{
style=filled;
color=gray75;
1885[label="201.100.9.36;s;51pkt 51fpkt", shape=diamond, color=yellow];
stat434[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.100.9.36:80, 138.7.26.50:*}[29.4118%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62997: (0.980392%)&lt;BR/&gt; 57098: (0.980392%)&lt;BR/&gt; 51365: (0.980392%)&lt;BR/&gt; 51362: (0.980392%)&gt;];
}
1885--1928[label="0.0196078;1pkt 1fpkt"];
1885--2489[label="0.0769231;1pkt 1fpkt"];
1885--2961[label="0.0196078;1pkt 1fpkt"];
1885--3621[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter dst_ip="138.7.26.50" src_ip="201.100.9.36" src_port="80"/>
    </slice>
    <from sec="1039669203" usec="0"/>
    <to sec="1039669822" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_435{
style=filled;
color=gray75;
1022[label="196.207.188.155;d;3pkt 3fpkt", shape=diamond, color=yellow];
3745[label="169.126.131.48;8pkt 8fpkt", shape=pentagon, color=darkviolet];
stat435[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.126.131.48:80, 203.17.173.134:*}[66.6667%]&lt;BR/&gt;{169.126.131.48:80, 196.207.188.155:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.4545%)&lt;BR/&gt; 1211: (9.09091%)&lt;BR/&gt; 1210: (9.09091%)&lt;BR/&gt; 0: (9.09091%)&lt;BR/&gt; 2906: (4.54545%)&gt;];
}
1022--1033[label="0.333333;1pkt 1fpkt"];
1022--2604[label="1;3pkt 3fpkt"];
1022--2691[label="0.333333;1pkt 1fpkt"];
1022--3141[label="0.333333;1pkt 1fpkt"];
1022--3745[label="0.666667;2pkt 2fpkt"];
1022--3941[label="0.333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="203.17.173.134" src_ip="169.126.131.48" src_port="80"/>
      <filter dst_ip="196.207.188.155" src_ip="169.126.131.48" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_436{
style=filled;
color=gray75;
1910[label="172.93.10.97;s;162pkt 162fpkt", shape=diamond, color=yellow];
stat436[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.93.10.97:*, 197.99.83.102:80}[69.1358%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6914%)&lt;BR/&gt; 56602: (0.308642%)&lt;BR/&gt; 56601: (0.308642%)&lt;BR/&gt; 56600: (0.308642%)&lt;BR/&gt; 56599: (0.308642%)&gt;];
}
1910--1957[label="0.903226;112pkt 112fpkt"];
</description>
    <slice>
      <filter dst_ip="197.99.83.102" dst_port="80" src_ip="172.93.10.97"/>
    </slice>
    <from sec="1039669210" usec="0"/>
    <to sec="1039669814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905994,1.86884,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_437{
style=filled;
color=gray75;
642[label="148.110.53.147;d;216pkt 216fpkt", shape=diamond, color=yellow];
2894[label="148.110.53.147;d;208pkt 208fpkt", shape=hexagon, color=black];
3989[label="38.22.5.74;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4756[label="36.187.127.159;13pkt 13fpkt", shape=pentagon, color=darkviolet];
5461[label="36.187.127.246;14pkt 14fpkt", shape=pentagon, color=darkviolet];
stat437[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 148.110.53.147:80}[90.0826%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8927%)&lt;BR/&gt; 65311: (0.321888%)&lt;BR/&gt; 65094: (0.321888%)&lt;BR/&gt; 53265: (0.321888%)&lt;BR/&gt; 52534: (0.321888%)&gt;];
}
642--2894[label="1;208pkt 208fpkt"];
642--3185[label="0.0231481;5pkt 5fpkt"];
642--3989[label="0.8;12pkt 12fpkt"];
642--4756[label="0.153846;2pkt 2fpkt"];
642--5461[label="0.142857;2pkt 2fpkt"];
2894--3185[label="0.0144231;3pkt 3fpkt"];
2894--3989[label="0.8;12pkt 12fpkt"];
2894--4756[label="0.153846;2pkt 2fpkt"];
2894--5461[label="0.142857;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.53.147" dst_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_438{
style=filled;
color=gray75;
1535[label="169.126.152.135;s;47pkt 47fpkt", shape=diamond, color=yellow];
2901[label="169.126.152.135;s;47pkt 47fpkt", shape=hexagon, color=black];
stat438[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.126.152.135:*, *:5190}[46.8085%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5190: (23.4043%)&lt;BR/&gt; 5050: (9.57447%)&lt;BR/&gt; 23: (6.38298%)&lt;BR/&gt; 20: (6.38298%)&lt;BR/&gt; 1086: (3.19149%)&gt;];
}
1535--2901[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_port="5190" src_ip="169.126.152.135"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_439{
style=filled;
color=gray75;
1806[label="215.129.14.29;s;129pkt 129fpkt", shape=diamond, color=yellow];
2902[label="215.129.14.29;s;129pkt 129fpkt", shape=hexagon, color=black];
stat439[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.129.14.29:53, *:53}[32.5581%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (66.2791%)&lt;BR/&gt; 32768: (1.93798%)&lt;BR/&gt; 1026: (1.16279%)&lt;BR/&gt; 1024: (0.775194%)&lt;BR/&gt; 65142: (0.387597%)&gt;];
}
1806--2902[label="1;129pkt 129fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="215.129.14.29" src_port="53"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669758" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_440{
style=filled;
color=gray75;
2043[label="201.37.236.88;d;1pkt 1fpkt", shape=diamond, color=yellow];
2045[label="172.93.75.207;s;2pkt 2fpkt", shape=diamond, color=yellow];
2906[label="201.37.236.88;d;1pkt 1fpkt", shape=hexagon, color=black];
5164[label="172.93.75.207;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6808[label="172.93.75.207;2pkt 2fpkt", shape=invtriangle, color=brown];
7860[label="172.93.75.207;1pkt 1fpkt", shape=invhouse, color=bisque];
stat440[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.93.75.207:3683, 201.37.160.64:23}[50%]&lt;BR/&gt;{172.93.75.207:3715, 201.37.236.88:5100}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5100: (37.5%)&lt;BR/&gt; 3715: (37.5%)&lt;BR/&gt; 3683: (12.5%)&lt;BR/&gt; 23: (12.5%)&gt;];
}
2043--2045[label="1;1pkt 1fpkt"];
2043--2906[label="1;1pkt 1fpkt"];
2043--5164[label="1;1pkt 1fpkt"];
2043--6808[label="1;1pkt 1fpkt"];
2043--7860[label="1;1pkt 1fpkt"];
2045--2906[label="1;1pkt 1fpkt"];
2045--5164[label="1;1pkt 1fpkt"];
2045--6808[label="1;2pkt 2fpkt"];
2045--7860[label="1;1pkt 1fpkt"];
2906--5164[label="1;1pkt 1fpkt"];
2906--6808[label="1;1pkt 1fpkt"];
2906--7860[label="1;1pkt 1fpkt"];
5164--6808[label="1;1pkt 1fpkt"];
5164--7860[label="1;1pkt 1fpkt"];
6808--7860[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.37.236.88" dst_port="5100" src_ip="172.93.75.207" src_port="3715"/>
      <filter dst_ip="201.37.160.64" dst_port="23" src_ip="172.93.75.207" src_port="3683"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_441{
style=filled;
color=gray75;
3509[label="211.90.73.24;17pkt 17fpkt", shape=pentagon, color=darkviolet];
stat441[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.90.73.24:80, 140.3.133.37:*}[47.0588%]&lt;BR/&gt;{211.90.73.24:443, *:*}[29.4118%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.2941%)&lt;BR/&gt; 443: (14.7059%)&lt;BR/&gt; 56264: (2.94118%)&lt;BR/&gt; 56249: (2.94118%)&lt;BR/&gt; 56248: (2.94118%)&gt;];
}
3509--5733[label="1;16pkt 16fpkt"];
3509--7177[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter src_ip="211.90.73.24" src_port="443"/>
      <filter dst_ip="140.3.133.37" src_ip="211.90.73.24" src_port="80"/>
    </slice>
    <from sec="1039669211" usec="0"/>
    <to sec="1039669917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_442{
style=filled;
color=gray75;
1031[label="64.51.6.155;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat442[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.110.86.86:6346, 64.51.6.155:3871}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (50%)&lt;BR/&gt; 3871: (50%)&gt;];
}
1031--2644[label="1;1pkt 1fpkt"];
1031--2915[label="1;1pkt 1fpkt"];
1031--3138[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="64.51.6.155" dst_port="3871" src_ip="148.110.86.86" src_port="6346"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_443{
style=filled;
color=gray75;
2346[label="36.137.190.95;s;75pkt 75fpkt", shape=diamond, color=yellow];
stat443[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.137.190.95:80, 138.186.177.99:*}[76%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38%)&lt;BR/&gt; 50491: (0.666667%)&lt;BR/&gt; 50490: (0.666667%)&lt;BR/&gt; 50489: (0.666667%)&lt;BR/&gt; 50488: (0.666667%)&gt;];
}
2346--4220[label="0.986667;74pkt 74fpkt"];
2346--6185[label="0.986667;74pkt 74fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.177.99" src_ip="36.137.190.95" src_port="80"/>
    </slice>
    <from sec="1039669215" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905994,1.86884,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_444{
style=filled;
color=gray75;
1059[label="96.66.76.20;s;2pkt 2fpkt", shape=diamond, color=yellow];
1342[label="215.90.66.40;d;1pkt 1fpkt", shape=diamond, color=yellow];
2923[label="215.90.66.40;d;1pkt 1fpkt", shape=hexagon, color=black];
3463[label="96.66.76.20;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat444[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.66.76.20:5001, 138.186.51.0:4189}[50%]&lt;BR/&gt;{96.66.76.20:5001, 215.90.66.40:1800}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (50%)&lt;BR/&gt; 1800: (30%)&lt;BR/&gt; 4189: (20%)&gt;];
}
1059--1117[label="0.5;1pkt 1fpkt"];
1059--1342[label="1;1pkt 1fpkt"];
1059--2923[label="1;1pkt 1fpkt"];
1059--3463[label="1;1pkt 1fpkt"];
1342--2923[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.66.40" dst_port="1800" src_ip="96.66.76.20" src_port="5001"/>
      <filter dst_ip="138.186.51.0" dst_port="4189" src_ip="96.66.76.20" src_port="5001"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.937874,1.83478,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_445{
style=filled;
color=gray75;
1232[label="201.100.9.38;s;205pkt 205fpkt", shape=diamond, color=yellow];
2171[label="197.231.171.65;s;18pkt 18fpkt", shape=diamond, color=yellow];
2241[label="217.226.210.231;s;8pkt 8fpkt", shape=diamond, color=yellow];
2310[label="215.87.86.234;d;34pkt 34fpkt", shape=diamond, color=yellow];
2369[label="140.3.243.171;d;26pkt 26fpkt", shape=diamond, color=yellow];
2964[label="197.231.171.65;s;18pkt 18fpkt", shape=hexagon, color=black];
3293[label="197.231.171.6;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3904[label="197.231.171.65;17pkt 17fpkt", shape=pentagon, color=darkviolet];
5593[label="197.231.171.6;8pkt 8fpkt", shape=invtriangle, color=brown];
stat445[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.100.9.38:80, *:*}[74.2754%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.2303%)&lt;BR/&gt; 21: (0.874636%)&lt;BR/&gt; 53093: (0.58309%)&lt;BR/&gt; 9700: (0.58309%)&lt;BR/&gt; 1145: (0.58309%)&gt;];
}
1232--1377[label="0.0196078;2pkt 2fpkt"];
1232--1505[label="0.0292683;6pkt 6fpkt"];
1232--1855[label="0.0201342;3pkt 3fpkt"];
1232--1939[label="0.0149254;1pkt 1fpkt"];
1232--2037[label="0.333333;3pkt 3fpkt"];
1232--2310[label="0.0294118;1pkt 1fpkt"];
1232--2505[label="0.0195122;4pkt 4fpkt"];
1232--2673[label="0.0243902;5pkt 5fpkt"];
1232--2740[label="0.00487805;1pkt 1fpkt"];
1232--2871[label="0.0097561;2pkt 2fpkt"];
1232--2875[label="0.0195122;4pkt 4fpkt"];
1232--2897[label="0.333333;3pkt 3fpkt"];
1232--2930[label="0.0230769;3pkt 3fpkt"];
1232--2940[label="0.0235294;2pkt 2fpkt"];
1232--3059[label="0.0243902;5pkt 5fpkt"];
1232--3154[label="0.00487805;1pkt 1fpkt"];
1232--3648[label="0.995122;204pkt 204fpkt"];
2171--2310[label="0.0555556;1pkt 1fpkt"];
2171--2369[label="0.666667;12pkt 12fpkt"];
2171--2964[label="1;18pkt 18fpkt"];
2171--3904[label="1;17pkt 17fpkt"];
2241--2310[label="0.5;4pkt 4fpkt"];
2310--2964[label="0.0555556;1pkt 1fpkt"];
2310--3310[label="0.047619;1pkt 1fpkt"];
2310--3354[label="0.0294118;1pkt 1fpkt"];
2310--3375[label="0.0384615;1pkt 1fpkt"];
2310--3648[label="0.0588235;2pkt 2fpkt"];
2310--3792[label="0.0294118;1pkt 1fpkt"];
2310--3904[label="0.0588235;1pkt 1fpkt"];
2310--4079[label="0.0909091;1pkt 1fpkt"];
2310--4403[label="0.75;6pkt 6fpkt"];
2310--5631[label="0.0294118;1pkt 1fpkt"];
2310--6307[label="0.666667;6pkt 6fpkt"];
2310--7114[label="0.0294118;1pkt 1fpkt"];
2310--7528[label="0.666667;6pkt 6fpkt"];
2369--2964[label="0.666667;12pkt 12fpkt"];
2369--3293[label="0.666667;6pkt 6fpkt"];
2369--3904[label="0.705882;12pkt 12fpkt"];
2369--4792[label="0.153846;4pkt 4fpkt"];
2369--5360[label="0.153846;2pkt 2fpkt"];
2369--5593[label="0.625;5pkt 5fpkt"];
2369--6566[label="0.153846;4pkt 4fpkt"];
2369--6933[label="0.153846;2pkt 2fpkt"];
2369--7703[label="0.153846;4pkt 4fpkt"];
2369--7946[label="0.0833333;1pkt 1fpkt"];
2964--3904[label="1;17pkt 17fpkt"];
3293--5593[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter src_ip="201.100.9.38" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669845" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_446{
style=filled;
color=gray75;
861[label="148.110.106.5;s;21pkt 21fpkt", shape=diamond, color=yellow];
1358[label="64.75.136.197;d;5pkt 5fpkt", shape=diamond, color=yellow];
1503[label="142.130.216.43;d;1pkt 1fpkt", shape=diamond, color=yellow];
2933[label="64.75.136.197;d;5pkt 5fpkt", shape=hexagon, color=black];
3268[label="148.110.106.5;22pkt 22fpkt", shape=pentagon, color=darkviolet];
5575[label="148.110.106.5;21pkt 21fpkt", shape=invtriangle, color=brown];
7085[label="148.110.106.5;22pkt 22fpkt", shape=invhouse, color=bisque];
stat446[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.110.106.5:*, *:80}[45.4545%]&lt;BR/&gt;{148.110.106.5:*, 64.75.136.197:1404}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (20.1031%)&lt;BR/&gt; 1404: (17.0103%)&lt;BR/&gt; 1214: (8.76289%)&lt;BR/&gt; 1863: (4.12371%)&lt;BR/&gt; 2878: (3.09278%)&gt;];
}
861--1358[label="1;5pkt 5fpkt"];
861--1503[label="1;1pkt 1fpkt"];
861--1918[label="0.047619;1pkt 1fpkt"];
861--2299[label="0.047619;1pkt 1fpkt"];
861--2354[label="0.0952381;2pkt 2fpkt"];
861--2933[label="1;5pkt 5fpkt"];
861--2958[label="0.047619;1pkt 1fpkt"];
861--3185[label="0.285714;6pkt 6fpkt"];
861--3268[label="1;21pkt 21fpkt"];
861--5575[label="0.952381;20pkt 20fpkt"];
861--7085[label="1;21pkt 21fpkt"];
1358--2933[label="1;5pkt 5fpkt"];
1358--3268[label="1;5pkt 5fpkt"];
1358--5575[label="1;5pkt 5fpkt"];
1358--7085[label="1;5pkt 5fpkt"];
1503--3268[label="1;1pkt 1fpkt"];
1503--5575[label="1;1pkt 1fpkt"];
1503--7085[label="1;1pkt 1fpkt"];
2933--3268[label="1;5pkt 5fpkt"];
2933--5575[label="1;5pkt 5fpkt"];
2933--7085[label="1;5pkt 5fpkt"];
3268--5575[label="1;21pkt 21fpkt"];
3268--7085[label="1;22pkt 22fpkt"];
5575--7085[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="148.110.106.5"/>
      <filter dst_ip="64.75.136.197" dst_port="1404" src_ip="148.110.106.5"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_447{
style=filled;
color=gray75;
1381[label="172.93.136.161;s;310pkt 310fpkt", shape=diamond, color=yellow];
1764[label="201.245.94.53;d;175pkt 175fpkt", shape=diamond, color=yellow];
2942[label="172.93.136.161;s;310pkt 310fpkt", shape=hexagon, color=black];
stat447[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.93.136.161:*, 201.245.94.53:80}[56.4516%]&lt;BR/&gt;{172.93.136.161:*, 201.245.94.48:80}[22.9032%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8742%)&lt;BR/&gt; 2025: (0.188679%)&lt;BR/&gt; 2024: (0.188679%)&lt;BR/&gt; 2023: (0.188679%)&lt;BR/&gt; 2022: (0.188679%)&gt;];
}
1381--1764[label="1;175pkt 175fpkt"];
1381--2942[label="1;310pkt 310fpkt"];
1764--2942[label="1;175pkt 175fpkt"];
</description>
    <slice>
      <filter dst_ip="201.245.94.53" dst_port="80" src_ip="172.93.136.161"/>
      <filter dst_ip="201.245.94.48" dst_port="80" src_ip="172.93.136.161"/>
    </slice>
    <from sec="1039669202" usec="0"/>
    <to sec="1039669841" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_448{
style=filled;
color=gray75;
1393[label="214.216.54.227;d;353pkt 353fpkt", shape=diamond, color=yellow];
1394[label="202.80.133.67;s;244pkt 244fpkt", shape=diamond, color=yellow];
2950[label="202.80.133.67;s;205pkt 205fpkt", shape=hexagon, color=black];
3930[label="202.80.133.67;365pkt 365fpkt", shape=pentagon, color=darkviolet];
4324[label="197.248.92.107;138pkt 138fpkt", shape=pentagon, color=darkviolet];
4740[label="197.194.59.157;75pkt 75fpkt", shape=pentagon, color=darkviolet];
6003[label="202.80.133.67;365pkt 365fpkt", shape=invtriangle, color=brown];
6535[label="197.194.59.157;75pkt 75fpkt", shape=invtriangle, color=brown];
7680[label="197.194.59.157;74pkt 74fpkt", shape=invhouse, color=bisque];
stat448[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.80.133.67:*, 214.216.54.227:80}[62.2867%]&lt;BR/&gt;{197.248.92.107:80, 214.216.54.227:*}[23.5495%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2767: (0.131996%)&lt;BR/&gt; 2766: (0.131996%)&lt;BR/&gt; 2765: (0.131996%)&lt;BR/&gt; 2764: (0.131996%)&gt;];
}
1393--1394[label="1;244pkt 244fpkt"];
1393--1656[label="0.00769231;1pkt 1fpkt"];
1393--2950[label="1;205pkt 205fpkt"];
1393--3185[label="0.00566572;2pkt 2fpkt"];
1393--3748[label="0.00757576;1pkt 1fpkt"];
1393--3930[label="0.691218;244pkt 244fpkt"];
1393--4324[label="0.23913;33pkt 33fpkt"];
1393--4406[label="0.2;1pkt 1fpkt"];
1393--4740[label="0.906667;68pkt 68fpkt"];
1393--6003[label="0.691218;244pkt 244fpkt"];
1393--6310[label="0.2;1pkt 1fpkt"];
1393--6535[label="0.906667;68pkt 68fpkt"];
1393--7680[label="0.905405;67pkt 67fpkt"];
1394--2950[label="1;205pkt 205fpkt"];
1394--3185[label="0.00819672;2pkt 2fpkt"];
1394--3930[label="1;244pkt 244fpkt"];
1394--6003[label="1;244pkt 244fpkt"];
2950--3185[label="0.0097561;2pkt 2fpkt"];
2950--3930[label="1;205pkt 205fpkt"];
2950--6003[label="1;205pkt 205fpkt"];
3930--6003[label="1;365pkt 365fpkt"];
4740--6535[label="1;75pkt 75fpkt"];
4740--7680[label="1;74pkt 74fpkt"];
6535--7680[label="1;74pkt 74fpkt"];
</description>
    <slice>
      <filter dst_ip="214.216.54.227" dst_port="80" src_ip="202.80.133.67"/>
      <filter dst_ip="214.216.54.227" src_ip="197.248.92.107" src_port="80"/>
    </slice>
    <from sec="1039669205" usec="0"/>
    <to sec="1039669922" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905994,1.86884,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_449{
style=filled;
color=gray75;
1668[label="172.93.32.207;d;18pkt 18fpkt", shape=diamond, color=yellow];
1904[label="197.231.161.14;s;18pkt 18fpkt", shape=diamond, color=yellow];
2953[label="172.93.32.207;d;17pkt 17fpkt", shape=hexagon, color=black];
3390[label="197.231.161.14;17pkt 17fpkt", shape=pentagon, color=darkviolet];
stat449[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.231.161.14:80, 172.93.32.207:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2287: (2.85714%)&lt;BR/&gt; 2226: (2.85714%)&lt;BR/&gt; 2187: (2.85714%)&lt;BR/&gt; 2092: (2.85714%)&gt;];
}
1668--1904[label="1;18pkt 18fpkt"];
1668--2953[label="1;17pkt 17fpkt"];
1668--3390[label="1;17pkt 17fpkt"];
1904--2953[label="1;17pkt 17fpkt"];
1904--3390[label="1;17pkt 17fpkt"];
2953--3390[label="0.941176;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="172.93.32.207" src_ip="197.231.161.14" src_port="80"/>
    </slice>
    <from sec="1039669208" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_450{
style=filled;
color=gray75;
1909[label="211.90.157.21;s;133pkt 133fpkt", shape=diamond, color=yellow];
2954[label="211.90.157.21;s;133pkt 133fpkt", shape=hexagon, color=black];
stat450[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.90.157.21:80, 215.87.67.219:*}[99.2481%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 36432: (0.37594%)&lt;BR/&gt; 23715: (0.37594%)&lt;BR/&gt; 23700: (0.37594%)&lt;BR/&gt; 23695: (0.37594%)&gt;];
}
1909--2871[label="0.0075188;1pkt 1fpkt"];
1909--2954[label="1;133pkt 133fpkt"];
</description>
    <slice>
      <filter dst_ip="215.87.67.219" src_ip="211.90.157.21" src_port="80"/>
    </slice>
    <from sec="1039669209" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_451{
style=filled;
color=gray75;
2152[label="138.186.27.194;s;37pkt 37fpkt", shape=diamond, color=yellow];
stat451[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.27.194:*, 142.151.156.37:80}[83.7838%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.2973%)&lt;BR/&gt; 5190: (1.35135%)&lt;BR/&gt; 2601: (1.35135%)&lt;BR/&gt; 2596: (1.35135%)&lt;BR/&gt; 2579: (1.35135%)&gt;];
}
2152--2410[label="1;31pkt 31fpkt"];
2152--2956[label="1;34pkt 34fpkt"];
2152--3185[label="0.162162;6pkt 6fpkt"];
2152--5055[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="142.151.156.37" dst_port="80" src_ip="138.186.27.194"/>
    </slice>
    <from sec="1039669215" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905994,1.86884,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_452{
style=filled;
color=gray75;
1420[label="138.186.49.182;s;5pkt 5fpkt", shape=diamond, color=yellow];
1477[label="64.145.11.248;d;1pkt 1fpkt", shape=diamond, color=yellow];
2959[label="138.186.49.182;s;5pkt 5fpkt", shape=hexagon, color=black];
4970[label="138.186.49.182;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat452[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.49.182:1037, 211.90.155.47:1863}[20%]&lt;BR/&gt;{138.186.49.182:1252, 144.33.244.199:6699}[20%]&lt;BR/&gt;{138.186.49.182:1233, 64.219.130.204:412}[20%]&lt;BR/&gt;{138.186.49.182:1249, 64.41.114.233:6699}[20%]&lt;BR/&gt;{138.186.49.182:1250, 64.145.11.248:6699}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (31.25%)&lt;BR/&gt; 1250: (12.5%)&lt;BR/&gt; 1863: (9.375%)&lt;BR/&gt; 1252: (9.375%)&lt;BR/&gt; 1249: (9.375%)&gt;];
}
1420--1477[label="1;1pkt 1fpkt"];
1420--2959[label="1;5pkt 5fpkt"];
1420--4970[label="1;5pkt 5fpkt"];
1477--2959[label="1;1pkt 1fpkt"];
1477--4970[label="1;1pkt 1fpkt"];
2959--4970[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="64.145.11.248" dst_port="6699" src_ip="138.186.49.182" src_port="1250"/>
      <filter dst_ip="64.41.114.233" dst_port="6699" src_ip="138.186.49.182" src_port="1249"/>
      <filter dst_ip="64.219.130.204" dst_port="412" src_ip="138.186.49.182" src_port="1233"/>
      <filter dst_ip="144.33.244.199" dst_port="6699" src_ip="138.186.49.182" src_port="1252"/>
      <filter dst_ip="211.90.155.47" dst_port="1863" src_ip="138.186.49.182" src_port="1037"/>
    </slice>
    <from sec="1039669219" usec="0"/>
    <to sec="1039669738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_453{
style=filled;
color=gray75;
1940[label="172.93.68.51;s;83pkt 83fpkt", shape=diamond, color=yellow];
2362[label="172.117.112.13;d;68pkt 68fpkt", shape=diamond, color=yellow];
2965[label="172.93.68.51;s;83pkt 83fpkt", shape=hexagon, color=black];
stat453[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.93.68.51:*, 172.117.112.13:80}[81.9277%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4615: (0.641026%)&lt;BR/&gt; 4614: (0.641026%)&lt;BR/&gt; 4612: (0.641026%)&lt;BR/&gt; 4611: (0.641026%)&gt;];
}
1940--2362[label="1;68pkt 68fpkt"];
1940--2965[label="1;83pkt 83fpkt"];
2362--2965[label="1;68pkt 68fpkt"];
</description>
    <slice>
      <filter dst_ip="172.117.112.13" dst_port="80" src_ip="172.93.68.51"/>
    </slice>
    <from sec="1039669293" usec="0"/>
    <to sec="1039669695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.937874,1.83478,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_454{
style=filled;
color=gray75;
1642[label="140.3.16.57;s;279pkt 279fpkt", shape=diamond, color=yellow];
1791[label="211.45.250.105;d;139pkt 139fpkt", shape=diamond, color=yellow];
2812[label="140.3.16.57;s;279pkt 279fpkt", shape=hexagon, color=black];
3217[label="172.93.103.2;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3238[label="140.3.201.3;82pkt 82fpkt", shape=pentagon, color=darkviolet];
3823[label="140.3.16.57;352pkt 352fpkt", shape=pentagon, color=darkviolet];
5545[label="172.93.103.2;9pkt 9fpkt", shape=invtriangle, color=brown];
5556[label="140.3.201.3;82pkt 82fpkt", shape=invtriangle, color=brown];
stat454[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.16.57:*, 141.243.105.50:80}[45.8188%]&lt;BR/&gt;{*:*, 211.45.250.105:80}[23.6934%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.147%)&lt;BR/&gt; 1863: (0.365556%)&lt;BR/&gt; 443: (0.365556%)&lt;BR/&gt; 0: (0.243704%)&lt;BR/&gt; 1047: (0.203087%)&gt;];
}
1642--1773[label="0.856604;227pkt 227fpkt"];
1642--1791[label="0.0143885;2pkt 2fpkt"];
1642--1921[label="0.0357143;1pkt 1fpkt"];
1642--2083[label="0.019802;2pkt 2fpkt"];
1642--2745[label="0.02;2pkt 2fpkt"];
1642--2812[label="1;279pkt 279fpkt"];
1642--2979[label="0.97449;191pkt 191fpkt"];
1642--3185[label="0.00358423;1pkt 1fpkt"];
1642--3823[label="0.996416;278pkt 278fpkt"];
1791--2189[label="0.047619;2pkt 2fpkt"];
1791--2462[label="0.00719424;1pkt 1fpkt"];
1791--2745[label="1;100pkt 100fpkt"];
1791--2812[label="0.0143885;2pkt 2fpkt"];
1791--2827[label="0.0461538;3pkt 3fpkt"];
1791--3010[label="0.00719424;1pkt 1fpkt"];
1791--3121[label="0.00719424;1pkt 1fpkt"];
1791--3185[label="0.0791367;11pkt 11fpkt"];
1791--3217[label="0.111111;1pkt 1fpkt"];
1791--3238[label="0.0731707;6pkt 6fpkt"];
1791--3339[label="0.0107527;1pkt 1fpkt"];
1791--3366[label="0.0517241;3pkt 3fpkt"];
1791--3484[label="0.428571;3pkt 3fpkt"];
1791--3606[label="0.75;3pkt 3fpkt"];
1791--3823[label="0.0143885;2pkt 2fpkt"];
1791--3896[label="0.025;1pkt 1fpkt"];
1791--3966[label="0.0333333;1pkt 1fpkt"];
1791--4120[label="0.0363636;2pkt 2fpkt"];
1791--4485[label="0.28777;40pkt 40fpkt"];
1791--4706[label="0.0215827;3pkt 3fpkt"];
1791--4979[label="0.00719424;1pkt 1fpkt"];
1791--5062[label="0.0263158;1pkt 1fpkt"];
1791--5545[label="0.111111;1pkt 1fpkt"];
1791--5556[label="0.0731707;6pkt 6fpkt"];
1791--5622[label="0.0106383;1pkt 1fpkt"];
1791--5638[label="0.0508475;3pkt 3fpkt"];
1791--5793[label="0.75;3pkt 3fpkt"];
1791--5976[label="0.025;1pkt 1fpkt"];
1791--6121[label="0.037037;2pkt 2fpkt"];
1791--6696[label="0.00719424;1pkt 1fpkt"];
1791--7110[label="0.0107527;1pkt 1fpkt"];
1791--7422[label="0.037037;2pkt 2fpkt"];
1791--7782[label="0.00719424;1pkt 1fpkt"];
2812--2979[label="0.97449;191pkt 191fpkt"];
2812--3185[label="0.00358423;1pkt 1fpkt"];
2812--3823[label="0.996416;278pkt 278fpkt"];
3217--5545[label="1;9pkt 9fpkt"];
3238--5556[label="1;82pkt 82fpkt"];
</description>
    <slice>
      <filter dst_ip="211.45.250.105" dst_port="80"/>
      <filter dst_ip="141.243.105.50" dst_port="80" src_ip="140.3.16.57"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_455{
style=filled;
color=gray75;
1996[label="208.166.131.74;s;1pkt 1fpkt", shape=diamond, color=yellow];
2983[label="208.166.131.74;s;1pkt 1fpkt", shape=hexagon, color=black];
stat455[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.166.131.74:80, 140.3.244.32:1947}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1947: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1996--2983[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.244.32" dst_port="1947" src_ip="208.166.131.74" src_port="80"/>
    </slice>
    <from sec="1039669552" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_456{
style=filled;
color=gray75;
2218[label="201.146.122.85;d;72pkt 72fpkt", shape=diamond, color=yellow];
2988[label="201.146.122.85;d;72pkt 72fpkt", shape=hexagon, color=black];
stat456[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.29.24.129:*, 201.146.122.85:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 28948: (0.694444%)&lt;BR/&gt; 28947: (0.694444%)&lt;BR/&gt; 28946: (0.694444%)&lt;BR/&gt; 28932: (0.694444%)&gt;];
}
2218--2988[label="1;72pkt 72fpkt"];
2218--4485[label="1;72pkt 72fpkt"];
2988--4485[label="1;72pkt 72fpkt"];
</description>
    <slice>
      <filter dst_ip="201.146.122.85" dst_port="80" src_ip="148.29.24.129"/>
    </slice>
    <from sec="1039669655" usec="0"/>
    <to sec="1039669682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_457{
style=filled;
color=gray75;
1502[label="215.90.152.74;d;1pkt 1fpkt", shape=diamond, color=yellow];
2997[label="215.90.152.74;d;1pkt 1fpkt", shape=hexagon, color=black];
stat457[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.66.76.19:5001, 215.90.152.74:1193}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (50%)&lt;BR/&gt; 1193: (50%)&gt;];
}
1502--2997[label="1;1pkt 1fpkt"];
1502--3445[label="1;1pkt 1fpkt"];
1502--5688[label="1;1pkt 1fpkt"];
1502--7147[label="1;1pkt 1fpkt"];
2997--3445[label="1;1pkt 1fpkt"];
2997--5688[label="1;1pkt 1fpkt"];
2997--7147[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.152.74" dst_port="1193" src_ip="96.66.76.19" src_port="5001"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_458{
style=filled;
color=gray75;
1796[label="201.234.255.74;s;313pkt 313fpkt", shape=diamond, color=yellow];
3004[label="201.234.255.74;s;313pkt 313fpkt", shape=hexagon, color=black];
stat458[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.234.255.74:6667, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (50%)&lt;BR/&gt; 1451: (0.479233%)&lt;BR/&gt; 2371: (0.319489%)&lt;BR/&gt; 2366: (0.319489%)&lt;BR/&gt; 2347: (0.319489%)&gt;];
}
1796--3004[label="1;313pkt 313fpkt"];
</description>
    <slice>
      <filter src_ip="201.234.255.74" src_port="6667"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905994,1.86884,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_459{
style=filled;
color=gray75;
842[label="215.90.87.248;d;4pkt 4fpkt", shape=diamond, color=yellow];
1802[label="201.119.175.153;s;1pkt 1fpkt", shape=diamond, color=yellow];
2272[label="98.210.193.19;s;1pkt 1fpkt", shape=diamond, color=yellow];
2332[label="36.92.163.15;s;1pkt 1fpkt", shape=diamond, color=yellow];
3007[label="201.119.175.153;s;1pkt 1fpkt", shape=hexagon, color=black];
4704[label="201.119.175.153;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat459[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.92.163.15:6699, 215.90.87.248:4067}[25%]&lt;BR/&gt;{98.210.193.19:6699, 215.90.87.248:4442}[25%]&lt;BR/&gt;{201.119.175.153:6699, 215.90.87.248:4398}[25%]&lt;BR/&gt;{64.53.134.177:6699, 215.90.87.248:4491}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 4398: (22.2222%)&lt;BR/&gt; 4442: (11.1111%)&lt;BR/&gt; 4067: (11.1111%)&lt;BR/&gt; 4491: (5.55556%)&gt;];
}
842--1802[label="1;1pkt 1fpkt"];
842--2272[label="1;1pkt 1fpkt"];
842--2332[label="1;1pkt 1fpkt"];
842--3007[label="1;1pkt 1fpkt"];
842--4704[label="1;1pkt 1fpkt"];
1802--3007[label="1;1pkt 1fpkt"];
1802--4704[label="1;1pkt 1fpkt"];
3007--4704[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.87.248" dst_port="4491" src_ip="64.53.134.177" src_port="6699"/>
      <filter dst_ip="215.90.87.248" dst_port="4398" src_ip="201.119.175.153" src_port="6699"/>
      <filter dst_ip="215.90.87.248" dst_port="4442" src_ip="98.210.193.19" src_port="6699"/>
      <filter dst_ip="215.90.87.248" dst_port="4067" src_ip="36.92.163.15" src_port="6699"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_460{
style=filled;
color=gray75;
4096[label="138.186.24.84;29pkt 29fpkt", shape=pentagon, color=darkviolet];
5028[label="172.93.244.188;18pkt 18fpkt", shape=pentagon, color=darkviolet];
6104[label="138.186.24.84;30pkt 30fpkt", shape=invtriangle, color=brown];
6723[label="172.93.244.188;18pkt 18fpkt", shape=invtriangle, color=brown];
stat460[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.24.84:*, *:80}[45.8333%]&lt;BR/&gt;{172.93.244.188:*, *:*}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.0526%)&lt;BR/&gt; 1083: (8.42105%)&lt;BR/&gt; 53: (8.42105%)&lt;BR/&gt; 1863: (7.36842%)&lt;BR/&gt; 7001: (2.10526%)&gt;];
}
4096--6104[label="1;29pkt 29fpkt"];
4096--7414[label="1;29pkt 29fpkt"];
5028--6723[label="1;18pkt 18fpkt"];
5028--7802[label="1;18pkt 18fpkt"];
6104--7414[label="1;29pkt 29fpkt"];
6723--7802[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter src_ip="172.93.244.188"/>
      <filter dst_port="80" src_ip="138.186.24.84"/>
    </slice>
    <from sec="1039669256" usec="0"/>
    <to sec="1039669925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905994,1.86884,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_461{
style=filled;
color=gray75;
907[label="215.90.152.75;d;1pkt 1fpkt", shape=diamond, color=yellow];
964[label="215.90.152.100;d;1pkt 1fpkt", shape=diamond, color=yellow];
1249[label="96.66.76.67;s;3pkt 3fpkt", shape=diamond, color=yellow];
2761[label="215.90.152.75;d;1pkt 1fpkt", shape=hexagon, color=black];
3013[label="215.90.152.100;d;1pkt 1fpkt", shape=hexagon, color=black];
3927[label="96.66.76.67;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat461[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.66.76.67:5001, 215.90.65.35:54081}[33.3333%]&lt;BR/&gt;{96.66.76.67:5001, 215.90.152.75:1121}[33.3333%]&lt;BR/&gt;{96.66.76.67:5001, 215.90.152.100:1061}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (50%)&lt;BR/&gt; 1121: (20%)&lt;BR/&gt; 1061: (20%)&lt;BR/&gt; 54081: (10%)&gt;];
}
907--1249[label="1;1pkt 1fpkt"];
907--2761[label="1;1pkt 1fpkt"];
907--3927[label="1;1pkt 1fpkt"];
964--1249[label="1;1pkt 1fpkt"];
964--3013[label="1;1pkt 1fpkt"];
964--3927[label="1;1pkt 1fpkt"];
1249--2761[label="1;1pkt 1fpkt"];
1249--3013[label="1;1pkt 1fpkt"];
1249--3927[label="1;3pkt 3fpkt"];
2761--3927[label="1;1pkt 1fpkt"];
3013--3927[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.152.100" dst_port="1061" src_ip="96.66.76.67" src_port="5001"/>
      <filter dst_ip="215.90.152.75" dst_port="1121" src_ip="96.66.76.67" src_port="5001"/>
      <filter dst_ip="215.90.65.35" dst_port="54081" src_ip="96.66.76.67" src_port="5001"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_462{
style=filled;
color=gray75;
1163[label="39.111.174.71;s;21pkt 21fpkt", shape=diamond, color=yellow];
1207[label="140.3.252.104;d;3pkt 3fpkt", shape=diamond, color=yellow];
2716[label="39.111.174.71;s;21pkt 21fpkt", shape=hexagon, color=black];
stat462[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.111.174.71:25, 169.126.142.97:*}[69.5652%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 46804: (3.33333%)&lt;BR/&gt; 38429: (2.22222%)&lt;BR/&gt; 37812: (2.22222%)&lt;BR/&gt; 15572: (2.22222%)&gt;];
}
1163--1207[label="0.333333;1pkt 1fpkt"];
1163--1423[label="0.047619;1pkt 1fpkt"];
1163--2716[label="1;21pkt 21fpkt"];
1163--3018[label="0.761905;16pkt 16fpkt"];
1163--3971[label="1;21pkt 21fpkt"];
1207--2716[label="0.333333;1pkt 1fpkt"];
1207--3971[label="0.333333;1pkt 1fpkt"];
2716--3018[label="0.761905;16pkt 16fpkt"];
2716--3971[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="169.126.142.97" src_ip="39.111.174.71" src_port="25"/>
    </slice>
    <from sec="1039669220" usec="0"/>
    <to sec="1039669794" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_463{
style=filled;
color=gray75;
1004[label="203.52.32.130;s;1pkt 1fpkt", shape=diamond, color=yellow];
3022[label="138.49.94.169;d;1pkt 1fpkt", shape=hexagon, color=black];
stat463[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.52.32.130:43465, 138.49.94.169:9243}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43465: (50%)&lt;BR/&gt; 9243: (50%)&gt;];
}
1004--1546[label="1;1pkt 1fpkt"];
1004--3022[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.49.94.169" dst_port="9243" src_ip="203.52.32.130" src_port="43465"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669843" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_464{
style=filled;
color=gray75;
1315[label="138.7.10.88;s;422pkt 422fpkt", shape=diamond, color=yellow];
3028[label="138.7.10.88;s;422pkt 422fpkt", shape=hexagon, color=black];
stat464[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.7.10.88:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1315--3028[label="1;422pkt 422fpkt"];
</description>
    <slice>
      <filter src_ip="138.7.10.88"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,011,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_465{
style=filled;
color=gray75;
1336[label="198.11.101.175;d;432pkt 432fpkt", shape=diamond, color=yellow];
3031[label="198.11.101.175;d;432pkt 432fpkt", shape=hexagon, color=black];
stat465[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:139, 198.11.101.175:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 5000: (0.115741%)&lt;BR/&gt; 4999: (0.115741%)&lt;BR/&gt; 4998: (0.115741%)&lt;BR/&gt; 4997: (0.115741%)&gt;];
}
1336--3031[label="1;432pkt 432fpkt"];
</description>
    <slice>
      <filter dst_ip="198.11.101.175" src_port="139"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_466{
style=filled;
color=gray75;
1078[label="169.126.148.169;s;2pkt 2fpkt", shape=diamond, color=yellow];
1351[label="196.153.194.236;d;1pkt 1fpkt", shape=diamond, color=yellow];
3035[label="196.153.194.236;d;1pkt 1fpkt", shape=hexagon, color=black];
stat466[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.126.148.169:80, 215.24.24.160:11589}[50%]&lt;BR/&gt;{169.126.148.169:80, 196.153.194.236:31226}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 31226: (37.5%)&lt;BR/&gt; 11589: (12.5%)&gt;];
}
1078--1351[label="1;1pkt 1fpkt"];
1078--1858[label="0.5;1pkt 1fpkt"];
1078--3035[label="1;1pkt 1fpkt"];
1351--3035[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.153.194.236" dst_port="31226" src_ip="169.126.148.169" src_port="80"/>
      <filter dst_ip="215.24.24.160" dst_port="11589" src_ip="169.126.148.169" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_467{
style=filled;
color=gray75;
2093[label="201.162.163.23;s;31pkt 31fpkt", shape=diamond, color=yellow];
3040[label="201.162.163.23;s;31pkt 31fpkt", shape=hexagon, color=black];
stat467[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.162.163.23:80, 140.3.155.81:*}[64.5161%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.3871%)&lt;BR/&gt; 0: (3.22581%)&lt;BR/&gt; 60354: (1.6129%)&lt;BR/&gt; 60337: (1.6129%)&lt;BR/&gt; 60330: (1.6129%)&gt;];
}
2093--3040[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.155.81" src_ip="201.162.163.23" src_port="80"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_468{
style=filled;
color=gray75;
1617[label="36.69.214.69;d;1pkt 1fpkt", shape=diamond, color=yellow];
3047[label="36.69.214.69;d;1pkt 1fpkt", shape=hexagon, color=black];
stat468[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.50.17:6699, 36.69.214.69:38318}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 38318: (50%)&lt;BR/&gt; 6699: (50%)&gt;];
}
1617--3047[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="36.69.214.69" dst_port="38318" src_ip="138.186.50.17" src_port="6699"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_469{
style=filled;
color=gray75;
1625[label="138.186.55.87;d;1pkt 1fpkt", shape=diamond, color=yellow];
1781[label="96.78.153.33;s;1pkt 1fpkt", shape=diamond, color=yellow];
3051[label="138.186.55.87;d;1pkt 1fpkt", shape=hexagon, color=black];
stat469[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.78.153.33:3853, 138.186.55.87:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3853: (50%)&gt;];
}
1625--1781[label="1;1pkt 1fpkt"];
1625--3051[label="1;1pkt 1fpkt"];
1781--3051[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.55.87" dst_port="6699" src_ip="96.78.153.33" src_port="3853"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14144,1.92665,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_470{
style=filled;
color=gray75;
372[label="169.126.131.11s;1pkt 1fpkt", shape=rectangle, color=red];
1128[label="169.126.131.11;s;66pkt 66fpkt", shape=diamond, color=yellow];
1171[label="33.58.87.60;d;15pkt 15fpkt", shape=diamond, color=yellow];
3068[label="169.126.131.11;s;66pkt 66fpkt", shape=hexagon, color=black];
3086[label="33.58.87.60;d;15pkt 15fpkt", shape=hexagon, color=black];
stat470[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.126.131.11:80, 215.21.108.27:*}[28.7879%]&lt;BR/&gt;{169.126.131.11:80, 33.58.87.60:*}[22.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1600: (1.53374%)&lt;BR/&gt; 1607: (1.22699%)&lt;BR/&gt; 1606: (1.22699%)&lt;BR/&gt; 1605: (1.22699%)&gt;];
}
372--1128[label="1;1pkt 1fpkt"];
372--1171[label="1;1pkt 1fpkt"];
372--3068[label="1;1pkt 1fpkt"];
372--3086[label="1;1pkt 1fpkt"];
1128--1171[label="1;15pkt 15fpkt"];
1128--3068[label="1;66pkt 66fpkt"];
1128--3086[label="1;15pkt 15fpkt"];
1171--3068[label="1;15pkt 15fpkt"];
1171--3086[label="1;15pkt 15fpkt"];
3068--3086[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="215.21.108.27" src_ip="169.126.131.11" src_port="80"/>
      <filter dst_ip="33.58.87.60" src_ip="169.126.131.11" src_port="80"/>
    </slice>
    <from sec="1039669204" usec="0"/>
    <to sec="1039669901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_471{
style=filled;
color=gray75;
2333[label="215.120.144.216;s;13pkt 13fpkt", shape=diamond, color=yellow];
3069[label="215.120.144.216;s;13pkt 13fpkt", shape=hexagon, color=black];
stat471[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.120.144.216:*, 156.204.107.101:3132}[46.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3132: (23.0769%)&lt;BR/&gt; 1066: (7.69231%)&lt;BR/&gt; 16624: (3.84615%)&lt;BR/&gt; 15713: (3.84615%)&lt;BR/&gt; 13341: (3.84615%)&gt;];
}
2333--3069[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="156.204.107.101" dst_port="3132" src_ip="215.120.144.216"/>
    </slice>
    <from sec="1039669204" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_472{
style=filled;
color=gray75;
1674[label="210.97.201.131;s;3pkt 3fpkt", shape=diamond, color=yellow];
3074[label="210.97.201.131;s;3pkt 3fpkt", shape=hexagon, color=black];
stat472[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.97.201.131:80, 215.87.67.142:1324}[33.3333%]&lt;BR/&gt;{210.97.201.131:80, 215.87.67.142:1617}[33.3333%]&lt;BR/&gt;{210.97.201.131:80, 215.87.67.142:4577}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4577: (16.6667%)&lt;BR/&gt; 1617: (16.6667%)&lt;BR/&gt; 1324: (16.6667%)&gt;];
}
1674--3074[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="215.87.67.142" dst_port="4577" src_ip="210.97.201.131" src_port="80"/>
      <filter dst_ip="215.87.67.142" dst_port="1617" src_ip="210.97.201.131" src_port="80"/>
      <filter dst_ip="215.87.67.142" dst_port="1324" src_ip="210.97.201.131" src_port="80"/>
    </slice>
    <from sec="1039669210" usec="0"/>
    <to sec="1039669700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905994,1.86884,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_474{
style=filled;
color=gray75;
622[label="38.161.191.25;d;1pkt 1fpkt", shape=diamond, color=yellow];
795[label="64.147.106.46;d;1pkt 1fpkt", shape=diamond, color=yellow];
850[label="215.90.87.50;s;7pkt 7fpkt", shape=diamond, color=yellow];
1825[label="33.53.36.25;d;1pkt 1fpkt", shape=diamond, color=yellow];
2879[label="215.90.87.50;s;7pkt 7fpkt", shape=hexagon, color=black];
2888[label="38.161.191.25;d;1pkt 1fpkt", shape=hexagon, color=black];
2916[label="33.53.36.25;d;1pkt 1fpkt", shape=hexagon, color=black];
3085[label="64.147.106.46;d;1pkt 1fpkt", shape=hexagon, color=black];
3765[label="215.90.87.50;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat474[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.90.87.50:*, *:6699}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (44.2308%)&lt;BR/&gt; 3141: (9.61538%)&lt;BR/&gt; 3136: (9.61538%)&lt;BR/&gt; 3134: (9.61538%)&lt;BR/&gt; 3138: (5.76923%)&gt;];
}
622--850[label="1;1pkt 1fpkt"];
622--2879[label="1;1pkt 1fpkt"];
622--2888[label="1;1pkt 1fpkt"];
622--3765[label="1;1pkt 1fpkt"];
795--850[label="1;1pkt 1fpkt"];
795--2879[label="1;1pkt 1fpkt"];
795--3085[label="1;1pkt 1fpkt"];
795--3765[label="1;1pkt 1fpkt"];
850--1825[label="1;1pkt 1fpkt"];
850--2879[label="1;7pkt 7fpkt"];
850--2888[label="1;1pkt 1fpkt"];
850--2916[label="1;1pkt 1fpkt"];
850--3085[label="1;1pkt 1fpkt"];
850--3185[label="0.142857;1pkt 1fpkt"];
850--3765[label="1;6pkt 6fpkt"];
1825--2879[label="1;1pkt 1fpkt"];
1825--2916[label="1;1pkt 1fpkt"];
1825--3765[label="1;1pkt 1fpkt"];
2879--2888[label="1;1pkt 1fpkt"];
2879--2916[label="1;1pkt 1fpkt"];
2879--3085[label="1;1pkt 1fpkt"];
2879--3185[label="0.142857;1pkt 1fpkt"];
2879--3765[label="1;6pkt 6fpkt"];
2888--3765[label="1;1pkt 1fpkt"];
2916--3765[label="1;1pkt 1fpkt"];
3085--3765[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="6699" src_ip="215.90.87.50"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_475{
style=filled;
color=gray75;
2164[label="99.188.64.99;s;19pkt 19fpkt", shape=diamond, color=yellow];
3088[label="99.188.64.99;s;19pkt 19fpkt", shape=hexagon, color=black];
stat475[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.188.64.99:80, 140.3.208.204:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1072: (2.63158%)&lt;BR/&gt; 1071: (2.63158%)&lt;BR/&gt; 1070: (2.63158%)&lt;BR/&gt; 1069: (2.63158%)&gt;];
}
2164--3088[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.208.204" src_ip="99.188.64.99" src_port="80"/>
    </slice>
    <from sec="1039669246" usec="0"/>
    <to sec="1039669816" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.937874,1.83478,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_476{
style=filled;
color=gray75;
873[label="215.90.72.24;s;379pkt 379fpkt", shape=diamond, color=yellow];
1719[label="202.68.77.251;d;164pkt 164fpkt", shape=diamond, color=yellow];
3092[label="202.68.77.251;d;164pkt 164fpkt", shape=hexagon, color=black];
3508[label="215.90.72.24;379pkt 379fpkt", shape=pentagon, color=darkviolet];
5732[label="215.90.72.24;378pkt 378fpkt", shape=invtriangle, color=brown];
stat476[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.90.72.24:*, 202.68.77.251:80}[43.2718%]&lt;BR/&gt;{215.90.72.24:*, 215.218.41.217:80}[26.1214%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7951%)&lt;BR/&gt; 554: (0.204918%)&lt;BR/&gt; 2813: (0.170765%)&lt;BR/&gt; 2812: (0.170765%)&lt;BR/&gt; 2811: (0.170765%)&gt;];
}
873--1719[label="1;164pkt 164fpkt"];
873--2282[label="0.980198;99pkt 99fpkt"];
873--2400[label="0.4;2pkt 2fpkt"];
873--3092[label="1;164pkt 164fpkt"];
873--3185[label="0.129288;49pkt 49fpkt"];
873--3508[label="1;379pkt 379fpkt"];
873--5732[label="1;378pkt 378fpkt"];
1719--3092[label="1;164pkt 164fpkt"];
1719--3185[label="0.134146;22pkt 22fpkt"];
1719--3508[label="1;164pkt 164fpkt"];
1719--5732[label="1;164pkt 164fpkt"];
3092--3185[label="0.134146;22pkt 22fpkt"];
3092--3508[label="1;164pkt 164fpkt"];
3092--5732[label="1;164pkt 164fpkt"];
3508--5732[label="1;378pkt 378fpkt"];
</description>
    <slice>
      <filter dst_ip="202.68.77.251" dst_port="80" src_ip="215.90.72.24"/>
      <filter dst_ip="215.218.41.217" dst_port="80" src_ip="215.90.72.24"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669782" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_477{
style=filled;
color=gray75;
2419[label="140.3.243.148;d;7pkt 7fpkt", shape=diamond, color=yellow];
3113[label="140.3.243.148;d;7pkt 7fpkt", shape=hexagon, color=black];
stat477[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.161.205.34:80, 140.3.243.148:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1406: (7.14286%)&lt;BR/&gt; 1404: (7.14286%)&lt;BR/&gt; 1399: (7.14286%)&lt;BR/&gt; 1397: (7.14286%)&gt;];
}
2419--3113[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.243.148" src_ip="36.161.205.34" src_port="80"/>
    </slice>
    <from sec="1039669671" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_483{
style=filled;
color=gray75;
1709[label="140.3.95.26;d;99pkt 99fpkt", shape=diamond, color=yellow];
stat483[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.92.233.170:80, 140.3.95.26:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2018: (0.505051%)&lt;BR/&gt; 2017: (0.505051%)&lt;BR/&gt; 2016: (0.505051%)&lt;BR/&gt; 2015: (0.505051%)&gt;];
}
1709--2486[label="0.120879;11pkt 11fpkt"];
1709--2723[label="1;99pkt 99fpkt"];
1709--3148[label="1;73pkt 73fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.95.26" src_ip="199.92.233.170" src_port="80"/>
    </slice>
    <from sec="1039669263" usec="0"/>
    <to sec="1039669846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645838,1.80177,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_490{
style=filled;
color=gray75;
728[label="169.126.142.121;s;659pkt 659fpkt", shape=diamond, color=yellow];
1282[label="169.126.143.67;s;579pkt 579fpkt", shape=diamond, color=yellow];
1606[label="201.164.129.5;d;9pkt 9fpkt", shape=diamond, color=yellow];
3931[label="169.126.143.67;852pkt 852fpkt", shape=pentagon, color=darkviolet];
4422[label="169.126.142.121;844pkt 844fpkt", shape=pentagon, color=darkviolet];
6004[label="169.126.143.67;853pkt 853fpkt", shape=invtriangle, color=brown];
6322[label="169.126.142.121;845pkt 845fpkt", shape=invtriangle, color=brown];
stat490[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.126.143.67:2604, *:53}[36.4223%]&lt;BR/&gt;{169.126.142.121:2587, *:53}[32.7859%]&lt;BR/&gt;{*:53, *:*}[27.2141%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50.5171%)&lt;BR/&gt; 2604: (17.9272%)&lt;BR/&gt; 2587: (16.7529%)&lt;BR/&gt; 0: (2.99504%)&lt;BR/&gt; 1024: (0.269339%)&gt;];
}
728--1540[label="0.111111;1pkt 1fpkt"];
728--1606[label="0.111111;1pkt 1fpkt"];
728--1883[label="0.0243902;1pkt 1fpkt"];
728--2340[label="0.0769231;1pkt 1fpkt"];
728--2380[label="0.0454545;1pkt 1fpkt"];
728--2914[label="1;659pkt 659fpkt"];
728--2929[label="0.111111;1pkt 1fpkt"];
728--3020[label="0.111111;1pkt 1fpkt"];
728--4422[label="0.998483;658pkt 658fpkt"];
728--6322[label="1;659pkt 659fpkt"];
1282--1540[label="0.111111;1pkt 1fpkt"];
1282--1606[label="0.111111;1pkt 1fpkt"];
1282--1608[label="0.0169492;1pkt 1fpkt"];
1282--1619[label="0.333333;2pkt 2fpkt"];
1282--1858[label="0.5;1pkt 1fpkt"];
1282--1883[label="0.0243902;1pkt 1fpkt"];
1282--2245[label="0.2;1pkt 1fpkt"];
1282--2340[label="0.0769231;1pkt 1fpkt"];
1282--2380[label="0.0454545;1pkt 1fpkt"];
1282--2929[label="0.111111;1pkt 1fpkt"];
1282--3020[label="0.111111;1pkt 1fpkt"];
1282--3931[label="0.998273;578pkt 578fpkt"];
1282--6004[label="1;579pkt 579fpkt"];
1606--1856[label="0.111111;1pkt 1fpkt"];
1606--2693[label="0.111111;1pkt 1fpkt"];
1606--2914[label="0.111111;1pkt 1fpkt"];
1606--2929[label="1;9pkt 9fpkt"];
1606--2931[label="0.111111;1pkt 1fpkt"];
1606--3179[label="0.111111;1pkt 1fpkt"];
1606--3182[label="0.111111;1pkt 1fpkt"];
1606--3187[label="0.111111;1pkt 1fpkt"];
1606--3251[label="0.111111;1pkt 1fpkt"];
1606--3358[label="0.111111;1pkt 1fpkt"];
1606--3438[label="0.111111;1pkt 1fpkt"];
1606--3931[label="0.111111;1pkt 1fpkt"];
1606--4422[label="0.111111;1pkt 1fpkt"];
1606--4885[label="0.222222;2pkt 2fpkt"];
1606--5143[label="0.111111;1pkt 1fpkt"];
1606--5564[label="0.111111;1pkt 1fpkt"];
1606--5683[label="0.111111;1pkt 1fpkt"];
1606--6004[label="0.111111;1pkt 1fpkt"];
1606--6322[label="0.111111;1pkt 1fpkt"];
1606--6635[label="0.222222;2pkt 2fpkt"];
3931--6004[label="1;852pkt 852fpkt"];
4422--6322[label="1;844pkt 844fpkt"];
</description>
    <slice>
      <filter src_port="53"/>
      <filter dst_port="53" src_ip="169.126.143.67" src_port="2604"/>
      <filter dst_port="53" src_ip="169.126.142.121" src_port="2587"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.727288,1.86745,503,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_491{
style=filled;
color=gray75;
1915[label="140.3.133.54;d;24pkt 24fpkt", shape=diamond, color=yellow];
2040[label="138.170.136.220;s;106pkt 106fpkt", shape=diamond, color=yellow];
6892[label="36.83.14.224;24pkt 24fpkt", shape=invtriangle, color=brown];
stat491[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.170.136.220:*, *:443}[44.697%]&lt;BR/&gt;{138.170.136.220:*, *:80}[35.6061%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30.8442%)&lt;BR/&gt; 443: (19.1558%)&lt;BR/&gt; 4828: (0.649351%)&lt;BR/&gt; 4378: (0.649351%)&lt;BR/&gt; 4286: (0.649351%)&gt;];
}
1915--2153[label="0.95;19pkt 19fpkt"];
1915--3185[label="0.125;3pkt 3fpkt"];
1915--5291[label="0.916667;22pkt 22fpkt"];
1915--6892[label="0.916667;22pkt 22fpkt"];
2040--2898[label="1;106pkt 106fpkt"];
2040--3185[label="0.188679;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="138.170.136.220"/>
      <filter dst_port="443" src_ip="138.170.136.220"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669915" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_492{
style=filled;
color=gray75;
882[label="211.90.23.0;s;132pkt 132fpkt", shape=diamond, color=yellow];
1121[label="215.90.68.67;d;77pkt 77fpkt", shape=diamond, color=yellow];
stat492[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.90.23.0:80, *:*}[64.7059%]&lt;BR/&gt;{211.45.226.5:80, 215.90.68.67:*}[20.5882%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1034: (0.956938%)&lt;BR/&gt; 1031: (0.956938%)&lt;BR/&gt; 1104: (0.717703%)&lt;BR/&gt; 1091: (0.717703%)&gt;];
}
882--1121[label="0.0649351;5pkt 5fpkt"];
882--1215[label="0.0681818;9pkt 9fpkt"];
882--2871[label="0.0681818;9pkt 9fpkt"];
882--2945[label="0.0649351;5pkt 5fpkt"];
882--3189[label="1;132pkt 132fpkt"];
882--5529[label="1;132pkt 132fpkt"];
882--7056[label="0.992424;131pkt 131fpkt"];
1121--1820[label="0.0909091;7pkt 7fpkt"];
1121--1911[label="0.545455;42pkt 42fpkt"];
1121--2099[label="0.0294118;2pkt 2fpkt"];
1121--2155[label="0.0909091;7pkt 7fpkt"];
1121--2911[label="0.0779221;6pkt 6fpkt"];
1121--2945[label="1;77pkt 77fpkt"];
1121--3189[label="0.0649351;5pkt 5fpkt"];
1121--3212[label="0.0909091;7pkt 7fpkt"];
1121--3277[label="0.545455;42pkt 42fpkt"];
1121--3792[label="0.025974;2pkt 2fpkt"];
1121--3832[label="0.012987;1pkt 1fpkt"];
1121--4357[label="0.0909091;7pkt 7fpkt"];
1121--4531[label="0.0238095;1pkt 1fpkt"];
1121--5529[label="0.0649351;5pkt 5fpkt"];
1121--5581[label="0.545455;42pkt 42fpkt"];
1121--6275[label="0.0909091;7pkt 7fpkt"];
1121--6395[label="0.0243902;1pkt 1fpkt"];
1121--7056[label="0.0649351;5pkt 5fpkt"];
1121--7089[label="0.545455;42pkt 42fpkt"];
1121--7511[label="0.0909091;7pkt 7fpkt"];
</description>
    <slice>
      <filter src_ip="211.90.23.0" src_port="80"/>
      <filter dst_ip="215.90.68.67" src_ip="211.45.226.5" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669805" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_493{
style=filled;
color=gray75;
76[label="96.48.160.0s;151pkt 151fpkt", shape=rectangle, color=red];
3192[label="96.48.160.0;251pkt 251fpkt", shape=pentagon, color=darkviolet];
5531[label="96.48.160.0;251pkt 251fpkt", shape=invtriangle, color=brown];
7058[label="96.48.160.0;251pkt 251fpkt", shape=invhouse, color=bisque];
stat493[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.48.160.0:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
76--3192[label="0.993377;150pkt 150fpkt"];
76--5531[label="0.993377;150pkt 150fpkt"];
76--7058[label="0.993377;150pkt 150fpkt"];
3192--5531[label="1;251pkt 251fpkt"];
3192--7058[label="1;251pkt 251fpkt"];
5531--7058[label="1;251pkt 251fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.48.160.0" src_port="1027"/>
    </slice>
    <from sec="1039669809" usec="0"/>
    <to sec="1039669849" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.111.170.0"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.160.196.0"/>
    </slice>
    <from sec="1039669225" usec="0"/>
    <to sec="1039669927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="140.3.55.1"/>
    </slice>
    <from sec="1039669215" usec="0"/>
    <to sec="1039669383" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.19.129.1"/>
    </slice>
    <from sec="1039669879" usec="0"/>
    <to sec="1039669909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_498{
style=filled;
color=gray75;
540[label="169.126.137.1;s;29pkt 29fpkt", shape=diamond, color=yellow];
541[label="169.124.226.83;d;64pkt 64fpkt", shape=diamond, color=yellow];
2583[label="169.126.137.1;s;13pkt 13fpkt", shape=hexagon, color=black];
3205[label="169.126.137.1;30pkt 30fpkt", shape=pentagon, color=darkviolet];
3313[label="169.126.137.8;39pkt 39fpkt", shape=pentagon, color=darkviolet];
4445[label="169.126.165.123;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5606[label="169.126.137.8;40pkt 40fpkt", shape=invtriangle, color=brown];
7102[label="169.126.137.8;40pkt 40fpkt", shape=invhouse, color=bisque];
stat498[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.126.137.8:*, 169.124.226.83:6668}[49.3671%]&lt;BR/&gt;{169.126.137.1:*, 169.124.226.83:6668}[37.9747%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6668: (47.3384%)&lt;BR/&gt; 6667: (0.95057%)&lt;BR/&gt; 5190: (0.760456%)&lt;BR/&gt; 1255: (0.760456%)&lt;BR/&gt; 1254: (0.760456%)&gt;];
}
540--541[label="0.965517;28pkt 28fpkt"];
540--2583[label="1;13pkt 13fpkt"];
540--3205[label="0.965517;28pkt 28fpkt"];
541--2583[label="0.923077;12pkt 12fpkt"];
541--3205[label="0.933333;28pkt 28fpkt"];
541--3313[label="0.871795;34pkt 34fpkt"];
541--4445[label="0.25;2pkt 2fpkt"];
541--5606[label="0.85;34pkt 34fpkt"];
541--7102[label="0.85;34pkt 34fpkt"];
2583--3205[label="0.923077;12pkt 12fpkt"];
3313--5606[label="1;39pkt 39fpkt"];
3313--7102[label="1;39pkt 39fpkt"];
5606--7102[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_ip="169.124.226.83" dst_port="6668" src_ip="169.126.137.8"/>
      <filter dst_ip="169.124.226.83" dst_port="6668" src_ip="169.126.137.1"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_499{
style=filled;
color=gray75;
1635[label="148.110.91.155;d;53pkt 53fpkt", shape=diamond, color=yellow];
3214[label="215.165.18.2;23pkt 23fpkt", shape=pentagon, color=darkviolet];
4158[label="215.35.17.90;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4653[label="220.113.79.147;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6478[label="220.113.79.147;12pkt 12fpkt", shape=invtriangle, color=brown];
7644[label="220.113.79.147;12pkt 12fpkt", shape=invhouse, color=bisque];
stat499[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.165.18.2:80, 148.110.91.155:*}[45.283%]&lt;BR/&gt;{220.113.79.147:80, 148.110.91.155:*}[24.5283%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1453%)&lt;BR/&gt; 1682: (1.7094%)&lt;BR/&gt; 1681: (1.7094%)&lt;BR/&gt; 1676: (1.7094%)&lt;BR/&gt; 1675: (1.7094%)&gt;];
}
1635--3214[label="1;23pkt 23fpkt"];
1635--4158[label="1;5pkt 5fpkt"];
1635--4653[label="1;12pkt 12fpkt"];
1635--6478[label="1;12pkt 12fpkt"];
1635--7644[label="1;12pkt 12fpkt"];
4653--6478[label="1;12pkt 12fpkt"];
4653--7644[label="1;12pkt 12fpkt"];
6478--7644[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.91.155" src_ip="215.165.18.2" src_port="80"/>
      <filter dst_ip="148.110.91.155" src_ip="220.113.79.147" src_port="80"/>
    </slice>
    <from sec="1039669202" usec="0"/>
    <to sec="1039669794" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.9.99.2"/>
    </slice>
    <from sec="1039669578" usec="0"/>
    <to sec="1039669595" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.33.104.2"/>
    </slice>
    <from sec="1039669225" usec="0"/>
    <to sec="1039669254" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752371,1.85474,999,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_502{
style=filled;
color=gray75;
78[label="37.33.104.2s;2pkt 2fpkt", shape=rectangle, color=red];
3222[label="197.108.156.2;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat502[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.126.128.2:1046, 193.92.157.88:6666}[50%]&lt;BR/&gt;{197.108.156.2:6699, 215.90.87.50:3137}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (33.3333%)&lt;BR/&gt; 3137: (33.3333%)&lt;BR/&gt; 6666: (16.6667%)&lt;BR/&gt; 1046: (16.6667%)&gt;];
}
78--512[label="0.5;1pkt 1fpkt"];
78--899[label="0.5;1pkt 1fpkt"];
78--2286[label="1;1pkt 1fpkt"];
78--3222[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.87.50" dst_port="3137" src_ip="197.108.156.2" src_port="6699"/>
      <filter dst_ip="193.92.157.88" dst_port="6666" src_ip="169.126.128.2" src_port="1046"/>
    </slice>
    <from sec="1039669202" usec="0"/>
    <to sec="1039669553" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790471,1.82041,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_503{
style=filled;
color=gray75;
79[label="202.168.152.3s;41pkt 41fpkt", shape=rectangle, color=red];
3236[label="202.168.152.3;208pkt 208fpkt", shape=pentagon, color=darkviolet];
5555[label="202.168.152.3;208pkt 208fpkt", shape=invtriangle, color=brown];
stat503[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.168.152.3:1032, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1032: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
79--3236[label="1;41pkt 41fpkt"];
79--5555[label="1;41pkt 41fpkt"];
3236--5555[label="1;208pkt 208fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.168.152.3" src_port="1032"/>
    </slice>
    <from sec="1039669644" usec="0"/>
    <to sec="1039669678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.90.72.4"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.27.201.4"/>
    </slice>
    <from sec="1039669368" usec="0"/>
    <to sec="1039669407" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_506{
style=filled;
color=gray75;
729[label="169.126.247.4;s;154pkt 154fpkt", shape=diamond, color=yellow];
3259[label="169.126.247.4;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5569[label="169.126.247.4;3pkt 3fpkt", shape=invtriangle, color=brown];
7080[label="169.126.247.4;3pkt 3fpkt", shape=invhouse, color=bisque];
stat506[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.126.247.4:*, *:25}[85.2564%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (44.1718%)&lt;BR/&gt; 113: (5.52147%)&lt;BR/&gt; 4862: (1.22699%)&lt;BR/&gt; 1095: (0.920245%)&lt;BR/&gt; 1088: (0.920245%)&gt;];
}
729--3259[label="0.333333;1pkt 1fpkt"];
729--5569[label="0.333333;1pkt 1fpkt"];
729--7080[label="0.333333;1pkt 1fpkt"];
3259--5569[label="1;3pkt 3fpkt"];
3259--7080[label="1;3pkt 3fpkt"];
5569--7080[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="169.126.247.4"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19604,1.81002,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_507{
style=filled;
color=gray75;
81[label="138.186.58.5s;2pkt 2fpkt", shape=rectangle, color=red];
554[label="92.235.200.35;d;2pkt 2fpkt", shape=diamond, color=yellow];
556[label="138.186.58.5;s;33pkt 33fpkt", shape=diamond, color=yellow];
917[label="61.200.31.143;d;1pkt 1fpkt", shape=diamond, color=yellow];
1018[label="200.226.186.240;d;1pkt 1fpkt", shape=diamond, color=yellow];
1027[label="98.168.90.249;d;1pkt 1fpkt", shape=diamond, color=yellow];
1721[label="64.22.6.34;s;2pkt 2fpkt", shape=diamond, color=yellow];
1821[label="192.25.64.123;d;1pkt 1fpkt", shape=diamond, color=yellow];
2651[label="92.235.200.35;d;2pkt 2fpkt", shape=hexagon, color=black];
2690[label="98.168.90.249;d;1pkt 1fpkt", shape=hexagon, color=black];
3262[label="138.186.58.5;35pkt 35fpkt", shape=pentagon, color=darkviolet];
5571[label="138.186.58.5;35pkt 35fpkt", shape=invtriangle, color=brown];
7082[label="138.186.58.5;35pkt 35fpkt", shape=invhouse, color=bisque];
stat507[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.58.5:6257, *:6257}[71.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (73.8411%)&lt;BR/&gt; 6699: (9.93377%)&lt;BR/&gt; 0: (2.64901%)&lt;BR/&gt; 2019: (2.31788%)&lt;BR/&gt; 2319: (1.98675%)&gt;];
}
81--554[label="0.5;1pkt 1fpkt"];
81--556[label="0.5;1pkt 1fpkt"];
81--1266[label="0.5;1pkt 1fpkt"];
81--1721[label="0.5;1pkt 1fpkt"];
81--2651[label="0.5;1pkt 1fpkt"];
81--3262[label="0.5;1pkt 1fpkt"];
81--5571[label="0.5;1pkt 1fpkt"];
81--7082[label="0.5;1pkt 1fpkt"];
554--556[label="0.5;1pkt 1fpkt"];
554--2651[label="1;2pkt 2fpkt"];
554--3262[label="0.5;1pkt 1fpkt"];
554--4226[label="0.5;1pkt 1fpkt"];
554--5571[label="0.5;1pkt 1fpkt"];
554--6189[label="0.5;1pkt 1fpkt"];
554--7082[label="0.5;1pkt 1fpkt"];
554--7463[label="0.5;1pkt 1fpkt"];
556--917[label="1;1pkt 1fpkt"];
556--1018[label="1;1pkt 1fpkt"];
556--1027[label="1;1pkt 1fpkt"];
556--1821[label="1;1pkt 1fpkt"];
556--2651[label="0.5;1pkt 1fpkt"];
556--2690[label="1;1pkt 1fpkt"];
556--3262[label="1;33pkt 33fpkt"];
556--5571[label="1;33pkt 33fpkt"];
556--7082[label="1;33pkt 33fpkt"];
917--3262[label="1;1pkt 1fpkt"];
917--5571[label="1;1pkt 1fpkt"];
917--7082[label="1;1pkt 1fpkt"];
1018--3262[label="1;1pkt 1fpkt"];
1018--5571[label="1;1pkt 1fpkt"];
1018--7082[label="1;1pkt 1fpkt"];
1027--2690[label="1;1pkt 1fpkt"];
1027--3262[label="1;1pkt 1fpkt"];
1027--5571[label="1;1pkt 1fpkt"];
1027--7082[label="1;1pkt 1fpkt"];
1821--3262[label="1;1pkt 1fpkt"];
1821--5571[label="1;1pkt 1fpkt"];
1821--7082[label="1;1pkt 1fpkt"];
2651--3262[label="0.5;1pkt 1fpkt"];
2651--4226[label="0.5;1pkt 1fpkt"];
2651--5571[label="0.5;1pkt 1fpkt"];
2651--6189[label="0.5;1pkt 1fpkt"];
2651--7082[label="0.5;1pkt 1fpkt"];
2651--7463[label="0.5;1pkt 1fpkt"];
2690--3262[label="1;1pkt 1fpkt"];
2690--5571[label="1;1pkt 1fpkt"];
2690--7082[label="1;1pkt 1fpkt"];
3262--5571[label="1;35pkt 35fpkt"];
3262--7082[label="1;35pkt 35fpkt"];
5571--7082[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="138.186.58.5" src_port="6257"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.72.76.5"/>
    </slice>
    <from sec="1039669405" usec="0"/>
    <to sec="1039669436" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.123.77.5"/>
    </slice>
    <from sec="1039669604" usec="0"/>
    <to sec="1039669866" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_510{
style=filled;
color=gray75;
1382[label="140.3.249.188;s;48pkt 48fpkt", shape=diamond, color=yellow];
stat510[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.249.188:*, 211.196.0.124:443}[58.3333%]&lt;BR/&gt;{140.3.249.188:*, 211.196.4.31:443}[41.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1459: (1.04167%)&lt;BR/&gt; 1458: (1.04167%)&lt;BR/&gt; 1457: (1.04167%)&lt;BR/&gt; 1456: (1.04167%)&gt;];
}
1382--1645[label="0.583333;28pkt 28fpkt"];
1382--2547[label="0.416667;20pkt 20fpkt"];
1382--2706[label="0.583333;28pkt 28fpkt"];
1382--5029[label="0.979167;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_ip="211.196.0.124" dst_port="443" src_ip="140.3.249.188"/>
      <filter dst_ip="211.196.4.31" dst_port="443" src_ip="140.3.249.188"/>
    </slice>
    <from sec="1039669202" usec="0"/>
    <to sec="1039669479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_511{
style=filled;
color=gray75;
5441[label="36.187.127.243;18pkt 18fpkt", shape=pentagon, color=darkviolet];
6992[label="36.187.127.243;18pkt 18fpkt", shape=invtriangle, color=brown];
stat511[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.187.127.243:*, 138.186.8.168:80}[33.3333%]&lt;BR/&gt;{36.187.127.243:*, 138.186.1.231:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64887: (2.77778%)&lt;BR/&gt; 64166: (2.77778%)&lt;BR/&gt; 63980: (2.77778%)&lt;BR/&gt; 63979: (2.77778%)&gt;];
}
5441--6992[label="1;18pkt 18fpkt"];
5441--7984[label="1;18pkt 18fpkt"];
6992--7984[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.1.231" dst_port="80" src_ip="36.187.127.243"/>
      <filter dst_ip="138.186.8.168" dst_port="80" src_ip="36.187.127.243"/>
    </slice>
    <from sec="1039669225" usec="0"/>
    <to sec="1039669815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752371,1.85474,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_512{
style=filled;
color=gray75;
84[label="96.180.24.6s;103pkt 103fpkt", shape=rectangle, color=red];
3285[label="96.180.24.6;128pkt 128fpkt", shape=pentagon, color=darkviolet];
stat512[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.180.24.6:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
84--3184[label="1;103pkt 103fpkt"];
84--3285[label="1;103pkt 103fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.180.24.6" src_port="1028"/>
    </slice>
    <from sec="1039669747" usec="0"/>
    <to sec="1039669767" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.937874,1.83478,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_513{
style=filled;
color=gray75;
790[label="202.73.101.172;d;2pkt 2fpkt", shape=diamond, color=yellow];
793[label="215.90.72.6;s;5pkt 5fpkt", shape=diamond, color=yellow];
2400[label="215.219.101.58;d;5pkt 5fpkt", shape=diamond, color=yellow];
2561[label="202.73.101.172;d;2pkt 2fpkt", shape=hexagon, color=black];
2629[label="215.90.72.6;s;1pkt 1fpkt", shape=hexagon, color=black];
3288[label="215.90.72.6;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5590[label="215.90.72.6;4pkt 4fpkt", shape=invtriangle, color=brown];
stat513[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.90.72.6:*, 215.219.101.58:80}[42.8571%]&lt;BR/&gt;{215.90.72.6:*, 202.73.101.172:80}[28.5714%]&lt;BR/&gt;{215.90.72.24:*, 215.219.101.58:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.8261%)&lt;BR/&gt; 2319: (10.8696%)&lt;BR/&gt; 2341: (8.69565%)&lt;BR/&gt; 2336: (8.69565%)&lt;BR/&gt; 2334: (8.69565%)&gt;];
}
790--793[label="1;2pkt 2fpkt"];
790--2561[label="1;2pkt 2fpkt"];
790--2629[label="1;1pkt 1fpkt"];
790--3288[label="0.5;1pkt 1fpkt"];
790--5590[label="0.5;1pkt 1fpkt"];
793--2400[label="0.6;3pkt 3fpkt"];
793--2561[label="1;2pkt 2fpkt"];
793--2629[label="1;1pkt 1fpkt"];
793--3288[label="1;4pkt 4fpkt"];
793--5590[label="1;4pkt 4fpkt"];
2400--3288[label="0.75;3pkt 3fpkt"];
2400--3508[label="0.4;2pkt 2fpkt"];
2400--5590[label="0.75;3pkt 3fpkt"];
2400--5732[label="0.4;2pkt 2fpkt"];
2561--2629[label="1;1pkt 1fpkt"];
2561--3288[label="0.5;1pkt 1fpkt"];
2561--5590[label="0.5;1pkt 1fpkt"];
3288--5590[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="215.219.101.58" src_ip="215.90.72.24"/>
      <filter dst_ip="215.219.101.58" dst_port="80" src_ip="215.90.72.6"/>
      <filter dst_ip="202.73.101.172" dst_port="80" src_ip="215.90.72.6"/>
    </slice>
    <from sec="1039669228" usec="0"/>
    <to sec="1039669709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.164.156.6"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.100.35.7"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.128.39.7"/>
    </slice>
    <from sec="1039669622" usec="0"/>
    <to sec="1039669628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_517{
style=filled;
color=gray75;
1446[label="140.3.239.2;d;62pkt 62fpkt", shape=diamond, color=yellow];
stat517[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.92.233.170:80, 140.3.239.2:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1975: (0.806452%)&lt;BR/&gt; 1974: (0.806452%)&lt;BR/&gt; 1973: (0.806452%)&lt;BR/&gt; 1972: (0.806452%)&gt;];
}
1446--2486[label="0.0967742;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.239.2" src_ip="199.92.233.170" src_port="80"/>
    </slice>
    <from sec="1039669289" usec="0"/>
    <to sec="1039669752" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.214.133.8"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.59.16.9"/>
    </slice>
    <from sec="1039669501" usec="0"/>
    <to sec="1039669531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.216.21.9"/>
    </slice>
    <from sec="1039669543" usec="0"/>
    <to sec="1039669559" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645838,1.80177,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_521{
style=filled;
color=gray75;
2273[label="215.87.66.212;d;206pkt 206fpkt", shape=diamond, color=yellow];
5186[label="38.64.151.209;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6825[label="38.64.151.209;3pkt 3fpkt", shape=invtriangle, color=brown];
stat521[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 215.87.66.212:1146}[89.0476%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (48.5915%)&lt;BR/&gt; 1146: (43.8967%)&lt;BR/&gt; 0: (2.8169%)&lt;BR/&gt; 15839: (1.64319%)&lt;BR/&gt; 80: (0.469484%)&gt;];
}
2273--3034[label="1;206pkt 206fpkt"];
2273--3323[label="0.0454545;1pkt 1fpkt"];
2273--3491[label="0.025641;1pkt 1fpkt"];
2273--3587[label="0.0277778;1pkt 1fpkt"];
2273--4386[label="0.25;1pkt 1fpkt"];
2273--4502[label="0.0384615;1pkt 1fpkt"];
2273--4567[label="0.025;1pkt 1fpkt"];
2273--4632[label="0.0588235;1pkt 1fpkt"];
2273--4712[label="0.111111;1pkt 1fpkt"];
2273--4746[label="0.0416667;1pkt 1fpkt"];
2273--5092[label="0.0434783;1pkt 1fpkt"];
2273--5212[label="0.025641;1pkt 1fpkt"];
2273--5240[label="0.0175439;1pkt 1fpkt"];
2273--5365[label="0.142857;1pkt 1fpkt"];
2273--5612[label="0.0454545;1pkt 1fpkt"];
2273--5781[label="0.027027;1pkt 1fpkt"];
2273--6298[label="0.25;1pkt 1fpkt"];
2273--6374[label="0.0384615;1pkt 1fpkt"];
2273--6462[label="0.0588235;1pkt 1fpkt"];
2273--6516[label="0.1;1pkt 1fpkt"];
2273--6859[label="0.0175439;1pkt 1fpkt"];
2273--6936[label="0.142857;1pkt 1fpkt"];
2273--7671[label="0.1;1pkt 1fpkt"];
2273--7897[label="0.0175439;1pkt 1fpkt"];
5186--6825[label="1;3pkt 3fpkt"];
5186--7873[label="1;3pkt 3fpkt"];
6825--7873[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="215.87.66.212" dst_port="1146" src_port="53"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669915" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.56.98.9"/>
    </slice>
    <from sec="1039669302" usec="0"/>
    <to sec="1039669334" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_523{
style=filled;
color=gray75;
1809[label="221.201.19.10;s;248pkt 248fpkt", shape=diamond, color=yellow];
3332[label="221.201.19.10;268pkt 268fpkt", shape=pentagon, color=darkviolet];
stat523[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.201.19.10:53, *:*}[99.6269%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.8062%)&lt;BR/&gt; 1451: (0.581395%)&lt;BR/&gt; 1088: (0.581395%)&lt;BR/&gt; 3590: (0.387597%)&lt;BR/&gt; 2180: (0.387597%)&gt;];
}
1809--3332[label="1;248pkt 248fpkt"];
</description>
    <slice>
      <filter src_ip="221.201.19.10" src_port="53"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_524{
style=filled;
color=gray75;
2061[label="138.186.56.10;s;4pkt 4fpkt", shape=diamond, color=yellow];
3334[label="138.186.56.10;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat524[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.56.10:1277, 210.17.61.11:16699}[20%]&lt;BR/&gt;{138.186.56.10:1287, 99.28.209.24:6699}[20%]&lt;BR/&gt;{138.186.56.10:1288, 64.34.0.102:6699}[20%]&lt;BR/&gt;{138.186.56.10:1284, 36.2.37.201:80}[20%]&lt;BR/&gt;{138.186.56.10:1269, 61.181.114.225:6699}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (25%)&lt;BR/&gt; 16699: (12.5%)&lt;BR/&gt; 1284: (12.5%)&lt;BR/&gt; 1277: (12.5%)&lt;BR/&gt; 1269: (12.5%)&gt;];
}
2061--3334[label="0.75;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="61.181.114.225" dst_port="6699" src_ip="138.186.56.10" src_port="1269"/>
      <filter dst_ip="36.2.37.201" dst_port="80" src_ip="138.186.56.10" src_port="1284"/>
      <filter dst_ip="64.34.0.102" dst_port="6699" src_ip="138.186.56.10" src_port="1288"/>
      <filter dst_ip="99.28.209.24" dst_port="6699" src_ip="138.186.56.10" src_port="1287"/>
      <filter dst_ip="210.17.61.11" dst_port="16699" src_ip="138.186.56.10" src_port="1277"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752371,1.85474,999,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_525{
style=filled;
color=gray75;
88[label="215.216.4.10s;1pkt 1fpkt", shape=rectangle, color=red];
3342[label="39.111.172.10;20pkt 20fpkt", shape=pentagon, color=darkviolet];
stat525[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.111.172.10:25, 169.126.142.97:*}[55%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 1127: (4.7619%)&lt;BR/&gt; 60685: (2.38095%)&lt;BR/&gt; 53914: (2.38095%)&lt;BR/&gt; 53798: (2.38095%)&gt;];
}
88--1423[label="1;1pkt 1fpkt"];
88--3342[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.126.142.97" src_ip="39.111.172.10" src_port="25"/>
    </slice>
    <from sec="1039669235" usec="0"/>
    <to sec="1039669893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_526{
style=filled;
color=gray75;
2089[label="215.90.72.91;d;31pkt 31fpkt", shape=diamond, color=yellow];
3363[label="197.198.182.12;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5635[label="197.198.182.12;1pkt 1fpkt", shape=invtriangle, color=brown];
7116[label="197.198.182.12;2pkt 2fpkt", shape=invhouse, color=bisque];
stat526[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.192.129.1:2001, 215.90.72.91:*}[87.0968%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2001: (38.5714%)&lt;BR/&gt; 80: (11.4286%)&lt;BR/&gt; 1063: (5.71429%)&lt;BR/&gt; 1064: (2.85714%)&lt;BR/&gt; 1461: (1.42857%)&gt;];
}
2089--3363[label="1;1pkt 1fpkt"];
2089--5635[label="1;1pkt 1fpkt"];
2089--7116[label="1;2pkt 2fpkt"];
3363--5635[label="1;1pkt 1fpkt"];
3363--7116[label="1;1pkt 1fpkt"];
5635--7116[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.72.91" src_ip="197.192.129.1" src_port="2001"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669919" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.196.106.13"/>
    </slice>
    <from sec="1039669373" usec="0"/>
    <to sec="1039669549" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.74.146.13"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.98.47.14"/>
    </slice>
    <from sec="1039669518" usec="0"/>
    <to sec="1039669523" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.212.69.14"/>
    </slice>
    <from sec="1039669513" usec="0"/>
    <to sec="1039669535" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.66.76.14"/>
    </slice>
    <from sec="1039669667" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.12.112.14"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_533{
style=filled;
color=gray75;
2417[label="214.216.50.236;d;12pkt 12fpkt", shape=diamond, color=yellow];
3387[label="39.46.156.14;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat533[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.210.105.124:80, 214.216.50.236:*}[46.1538%]&lt;BR/&gt;{39.46.156.14:80, 214.216.50.236:*}[30.7692%]&lt;BR/&gt;{211.189.181.213:80, 214.216.50.236:*}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 32810: (6.66667%)&lt;BR/&gt; 32807: (6.66667%)&lt;BR/&gt; 32815: (3.33333%)&lt;BR/&gt; 32814: (3.33333%)&gt;];
}
2417--3387[label="0.666667;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="214.216.50.236" src_ip="198.210.105.124" src_port="80"/>
      <filter dst_ip="214.216.50.236" src_ip="39.46.156.14" src_port="80"/>
      <filter dst_ip="214.216.50.236" src_ip="211.189.181.213" src_port="80"/>
    </slice>
    <from sec="1039669668" usec="0"/>
    <to sec="1039669897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.102.156.14"/>
    </slice>
    <from sec="1039669701" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.937874,1.83478,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_535{
style=filled;
color=gray75;
617[label="215.90.65.35;d;66pkt 66fpkt", shape=diamond, color=yellow];
2050[label="64.178.180.148;s;1pkt 1fpkt", shape=diamond, color=yellow];
2262[label="215.90.74.18;d;13pkt 13fpkt", shape=diamond, color=yellow];
2907[label="64.178.180.148;s;1pkt 1fpkt", shape=hexagon, color=black];
3394[label="39.154.30.15;12pkt 12fpkt", shape=pentagon, color=darkviolet];
4010[label="214.139.166.75;245pkt 245fpkt", shape=pentagon, color=darkviolet];
6055[label="214.139.166.75;245pkt 245fpkt", shape=invtriangle, color=brown];
stat535[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.139.166.75:1036, *:137}[74.6951%]&lt;BR/&gt;{*:*, 215.90.65.35:*}[20.4268%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (42.1955%)&lt;BR/&gt; 1036: (42.1098%)&lt;BR/&gt; 8888: (3.60206%)&lt;BR/&gt; 7000: (1.45798%)&lt;BR/&gt; 9999: (0.77187%)&gt;];
}
617--1249[label="0.333333;1pkt 1fpkt"];
617--2050[label="1;1pkt 1fpkt"];
617--2907[label="1;1pkt 1fpkt"];
617--3394[label="0.5;6pkt 6fpkt"];
617--3927[label="0.333333;1pkt 1fpkt"];
617--4010[label="0.0151515;1pkt 1fpkt"];
617--6055[label="0.0151515;1pkt 1fpkt"];
2050--2907[label="1;1pkt 1fpkt"];
2262--3394[label="0.0833333;1pkt 1fpkt"];
4010--6055[label="1;245pkt 245fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.65.35"/>
      <filter dst_port="137" src_ip="214.139.166.75" src_port="1036"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.135.121.15"/>
    </slice>
    <from sec="1039669350" usec="0"/>
    <to sec="1039669386" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.129.14.16"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.9.20.16"/>
    </slice>
    <from sec="1039669553" usec="0"/>
    <to sec="1039669580" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.90.158.16"/>
    </slice>
    <from sec="1039669223" usec="0"/>
    <to sec="1039669926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.104.206.16"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.72.230.16"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_542{
style=filled;
color=gray75;
1932[label="96.39.127.17;s;1pkt 1fpkt", shape=diamond, color=yellow];
3420[label="96.39.127.17;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat542[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.39.127.17:2439, 148.110.13.218:1396}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2439: (50%)&lt;BR/&gt; 1396: (50%)&gt;];
}
1932--3420[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.13.218" dst_port="1396" src_ip="96.39.127.17" src_port="2439"/>
    </slice>
    <from sec="1039669260" usec="0"/>
    <to sec="1039669696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752371,1.85474,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_543{
style=filled;
color=gray75;
99[label="196.90.234.18s;86pkt 86fpkt", shape=rectangle, color=red];
3435[label="196.90.234.18;231pkt 231fpkt", shape=pentagon, color=darkviolet];
stat543[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.90.234.18:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
99--3435[label="1;86pkt 86fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.90.234.18" src_port="1029"/>
    </slice>
    <from sec="1039669486" usec="0"/>
    <to sec="1039669523" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_544{
style=filled;
color=gray75;
1743[label="37.75.231.35;d;8pkt 8fpkt", shape=diamond, color=yellow];
3436[label="140.3.247.18;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5297[label="140.3.248.224;9pkt 9fpkt", shape=pentagon, color=darkviolet];
stat544[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.248.224:80, *:*}[52.9412%]&lt;BR/&gt;{140.3.247.18:80, 37.75.231.35:*}[29.4118%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1358: (4%)&lt;BR/&gt; 1357: (4%)&lt;BR/&gt; 1356: (4%)&lt;BR/&gt; 1355: (4%)&gt;];
}
1743--3436[label="0.625;5pkt 5fpkt"];
1743--5297[label="0.375;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="140.3.248.224" src_port="80"/>
      <filter dst_ip="37.75.231.35" src_ip="140.3.247.18" src_port="80"/>
    </slice>
    <from sec="1039669279" usec="0"/>
    <to sec="1039669923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.9.65.19"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.90.157.19"/>
    </slice>
    <from sec="1039669206" usec="0"/>
    <to sec="1039669917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="98.210.193.19"/>
    </slice>
    <from sec="1039669205" usec="0"/>
    <to sec="1039669926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_548{
style=filled;
color=gray75;
1611[label="36.215.56.248;s;167pkt 167fpkt", shape=diamond, color=yellow];
stat548[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.215.56.248:80, 215.87.64.183:*}[94.012%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64655: (0.299401%)&lt;BR/&gt; 58199: (0.299401%)&lt;BR/&gt; 58082: (0.299401%)&lt;BR/&gt; 34864: (0.299401%)&gt;];
}
1611--2145[label="0.0232558;2pkt 2fpkt"];
1611--2679[label="0.011976;2pkt 2fpkt"];
1611--2740[label="0.94012;157pkt 157fpkt"];
1611--2874[label="0.011976;2pkt 2fpkt"];
1611--3075[label="0.0232558;2pkt 2fpkt"];
1611--3154[label="0.94012;157pkt 157fpkt"];
</description>
    <slice>
      <filter dst_ip="215.87.64.183" src_ip="36.215.56.248" src_port="80"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.194.225.19"/>
    </slice>
    <from sec="1039669235" usec="0"/>
    <to sec="1039669892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_550{
style=filled;
color=gray75;
3760[label="96.51.16.50;38pkt 38fpkt", shape=pentagon, color=darkviolet];
5891[label="96.51.16.50;39pkt 39fpkt", shape=invtriangle, color=brown];
stat550[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.51.16.50:80, 215.90.72.21:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1203: (1.2987%)&lt;BR/&gt; 1202: (1.2987%)&lt;BR/&gt; 1201: (1.2987%)&lt;BR/&gt; 1200: (1.2987%)&gt;];
}
3760--5891[label="1;38pkt 38fpkt"];
3760--7275[label="1;38pkt 38fpkt"];
5891--7275[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.72.21" src_ip="96.51.16.50" src_port="80"/>
    </slice>
    <from sec="1039669828" usec="0"/>
    <to sec="1039669856" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_551{
style=filled;
color=gray75;
2398[label="140.3.255.249;d;36pkt 36fpkt", shape=diamond, color=yellow];
3462[label="215.221.75.20;28pkt 28fpkt", shape=pentagon, color=darkviolet];
3764[label="215.221.75.50;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5701[label="215.221.75.20;28pkt 28fpkt", shape=invtriangle, color=brown];
5894[label="215.221.75.50;9pkt 9fpkt", shape=invtriangle, color=brown];
7155[label="215.221.75.20;29pkt 29fpkt", shape=invhouse, color=bisque];
7276[label="215.221.75.50;10pkt 10fpkt", shape=invhouse, color=bisque];
stat551[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.221.75.20:80, 140.3.255.249:*}[67.4419%]&lt;BR/&gt;{215.221.75.50:80, 140.3.255.249:*}[23.2558%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3078: (1.34228%)&lt;BR/&gt; 3077: (1.34228%)&lt;BR/&gt; 3075: (1.34228%)&lt;BR/&gt; 3074: (1.34228%)&gt;];
}
2398--3462[label="0.821429;23pkt 23fpkt"];
2398--3764[label="0.777778;7pkt 7fpkt"];
2398--5701[label="0.821429;23pkt 23fpkt"];
2398--5894[label="0.777778;7pkt 7fpkt"];
2398--7155[label="0.827586;24pkt 24fpkt"];
2398--7276[label="0.8;8pkt 8fpkt"];
3462--5701[label="1;28pkt 28fpkt"];
3462--7155[label="1;28pkt 28fpkt"];
3764--5894[label="1;9pkt 9fpkt"];
3764--7276[label="1;9pkt 9fpkt"];
5701--7155[label="1;28pkt 28fpkt"];
5894--7276[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.255.249" src_ip="215.221.75.20" src_port="80"/>
      <filter dst_ip="140.3.255.249" src_ip="215.221.75.50" src_port="80"/>
    </slice>
    <from sec="1039669563" usec="0"/>
    <to sec="1039669917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.141.150.20"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_553{
style=filled;
color=gray75;
1330[label="169.126.247.4;d;85pkt 85fpkt", shape=diamond, color=yellow];
stat553[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, 169.126.247.4:*}[91.7647%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (47.6471%)&lt;BR/&gt; 113: (1.76471%)&lt;BR/&gt; 38697: (0.588235%)&lt;BR/&gt; 33701: (0.588235%)&lt;BR/&gt; 24634: (0.588235%)&gt;];
}
1330--2797[label="1;39pkt 39fpkt"];
1330--3470[label="0.142857;1pkt 1fpkt"];
1330--3554[label="0.235294;4pkt 4fpkt"];
1330--3921[label="0.125;3pkt 3fpkt"];
1330--4145[label="0.0625;1pkt 1fpkt"];
1330--4542[label="0.0555556;1pkt 1fpkt"];
1330--4862[label="0.190476;4pkt 4fpkt"];
1330--5311[label="0.5;1pkt 1fpkt"];
1330--5392[label="0.2;4pkt 4fpkt"];
1330--5706[label="0.142857;1pkt 1fpkt"];
1330--5761[label="0.222222;4pkt 4fpkt"];
1330--5996[label="0.125;3pkt 3fpkt"];
1330--6404[label="0.0526316;1pkt 1fpkt"];
1330--6615[label="0.190476;4pkt 4fpkt"];
1330--6900[label="0.5;1pkt 1fpkt"];
1330--6954[label="0.2;4pkt 4fpkt"];
1330--7160[label="0.125;1pkt 1fpkt"];
1330--7197[label="0.235294;4pkt 4fpkt"];
1330--7733[label="0.181818;4pkt 4fpkt"];
1330--7927[label="0.5;1pkt 1fpkt"];
1330--7960[label="0.190476;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="169.126.247.4" src_port="25"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="140.3.210.20"/>
    </slice>
    <from sec="1039669901" usec="0"/>
    <to sec="1039669913" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="140.3.244.20"/>
    </slice>
    <from sec="1039669333" usec="0"/>
    <to sec="1039669364" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_556{
style=filled;
color=gray75;
101[label="172.158.46.21s;52pkt 52fpkt", shape=rectangle, color=red];
3476[label="172.158.46.21;226pkt 226fpkt", shape=pentagon, color=darkviolet];
5709[label="172.158.46.21;226pkt 226fpkt", shape=invtriangle, color=brown];
7163[label="172.158.46.21;225pkt 225fpkt", shape=invhouse, color=bisque];
stat556[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.158.46.21:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
101--3476[label="1;52pkt 52fpkt"];
101--5709[label="1;52pkt 52fpkt"];
101--7163[label="1;52pkt 52fpkt"];
3476--5709[label="1;226pkt 226fpkt"];
3476--7163[label="1;225pkt 225fpkt"];
5709--7163[label="1;225pkt 225fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="172.158.46.21" src_port="1029"/>
    </slice>
    <from sec="1039669650" usec="0"/>
    <to sec="1039669686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.66.76.21"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.110.90.21"/>
    </slice>
    <from sec="1039669214" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.111.172.21"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.0.174.21"/>
    </slice>
    <from sec="1039669214" usec="0"/>
    <to sec="1039669923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.123.90.22"/>
    </slice>
    <from sec="1039669203" usec="0"/>
    <to sec="1039669924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_562{
style=filled;
color=gray75;
103[label="37.91.141.22s;162pkt 162fpkt", shape=rectangle, color=red];
3492[label="37.91.141.22;171pkt 171fpkt", shape=pentagon, color=darkviolet];
5719[label="37.91.141.22;172pkt 172fpkt", shape=invtriangle, color=brown];
7170[label="37.91.141.22;172pkt 172fpkt", shape=invhouse, color=bisque];
stat562[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.91.141.22:1037, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1037: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
103--3492[label="0.993827;161pkt 161fpkt"];
103--5719[label="1;162pkt 162fpkt"];
103--7170[label="1;162pkt 162fpkt"];
3492--5719[label="1;171pkt 171fpkt"];
3492--7170[label="1;171pkt 171fpkt"];
5719--7170[label="1;172pkt 172fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="37.91.141.22" src_port="1037"/>
    </slice>
    <from sec="1039669699" usec="0"/>
    <to sec="1039669728" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.60.46.23"/>
    </slice>
    <from sec="1039669217" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790471,1.82041,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_564{
style=filled;
color=gray75;
105[label="96.21.208.23s;72pkt 72fpkt", shape=rectangle, color=red];
3504[label="96.21.208.23;202pkt 202fpkt", shape=pentagon, color=darkviolet];
5728[label="96.21.208.23;203pkt 203fpkt", shape=invtriangle, color=brown];
stat564[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.21.208.23:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
105--3504[label="1;72pkt 72fpkt"];
105--5728[label="1;72pkt 72fpkt"];
3504--5728[label="1;202pkt 202fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.21.208.23" src_port="1025"/>
    </slice>
    <from sec="1039669819" usec="0"/>
    <to sec="1039669852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.199.206.24"/>
    </slice>
    <from sec="1039669645" usec="0"/>
    <to sec="1039669686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.28.209.24"/>
    </slice>
    <from sec="1039669807" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.123.80.25"/>
    </slice>
    <from sec="1039669203" usec="0"/>
    <to sec="1039669922" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_568{
style=filled;
color=gray75;
108[label="202.66.163.25s;167pkt 167fpkt", shape=rectangle, color=red];
3524[label="202.66.163.25;254pkt 254fpkt", shape=pentagon, color=darkviolet];
5744[label="202.66.163.25;254pkt 254fpkt", shape=invtriangle, color=brown];
7185[label="202.66.163.25;255pkt 255fpkt", shape=invhouse, color=bisque];
stat568[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.66.163.25:1044, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1044: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
108--3524[label="0.994012;166pkt 166fpkt"];
108--5744[label="0.994012;166pkt 166fpkt"];
108--7185[label="1;167pkt 167fpkt"];
3524--5744[label="1;254pkt 254fpkt"];
3524--7185[label="1;254pkt 254fpkt"];
5744--7185[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.66.163.25" src_port="1044"/>
    </slice>
    <from sec="1039669389" usec="0"/>
    <to sec="1039669431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.163.210.25"/>
    </slice>
    <from sec="1039669368" usec="0"/>
    <to sec="1039669492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.177.18.26"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.937874,1.83478,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_571{
style=filled;
color=gray75;
958[label="215.90.75.26;s;4pkt 4fpkt", shape=diamond, color=yellow];
1526[label="61.201.56.22;d;1pkt 1fpkt", shape=diamond, color=yellow];
2671[label="61.201.56.22;d;1pkt 1fpkt", shape=hexagon, color=black];
3533[label="215.90.75.26;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5749[label="215.90.75.26;5pkt 5fpkt", shape=invtriangle, color=brown];
stat571[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.90.75.26:1085, 33.85.167.14:6699}[20%]&lt;BR/&gt;{215.90.75.26:1079, 61.201.56.22:6699}[20%]&lt;BR/&gt;{215.90.75.26:1080, 133.227.51.55:6699}[20%]&lt;BR/&gt;{215.90.75.26:1054, 64.56.193.121:6699}[20%]&lt;BR/&gt;{215.90.75.26:1074, 196.90.153.209:6699}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1079: (16.6667%)&lt;BR/&gt; 1080: (10%)&lt;BR/&gt; 1074: (10%)&lt;BR/&gt; 1085: (6.66667%)&gt;];
}
958--1526[label="1;1pkt 1fpkt"];
958--2671[label="1;1pkt 1fpkt"];
958--3533[label="0.75;3pkt 3fpkt"];
958--5749[label="1;4pkt 4fpkt"];
1526--2671[label="1;1pkt 1fpkt"];
1526--3533[label="1;1pkt 1fpkt"];
1526--5749[label="1;1pkt 1fpkt"];
2671--3533[label="1;1pkt 1fpkt"];
2671--5749[label="1;1pkt 1fpkt"];
3533--5749[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="196.90.153.209" dst_port="6699" src_ip="215.90.75.26" src_port="1074"/>
      <filter dst_ip="64.56.193.121" dst_port="6699" src_ip="215.90.75.26" src_port="1054"/>
      <filter dst_ip="133.227.51.55" dst_port="6699" src_ip="215.90.75.26" src_port="1080"/>
      <filter dst_ip="61.201.56.22" dst_port="6699" src_ip="215.90.75.26" src_port="1079"/>
      <filter dst_ip="33.85.167.14" dst_port="6699" src_ip="215.90.75.26" src_port="1085"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.65.76.26"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.63.118.26"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.90.156.26"/>
    </slice>
    <from sec="1039669212" usec="0"/>
    <to sec="1039669885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.93.208.26"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.5.11.27"/>
    </slice>
    <from sec="1039669679" usec="0"/>
    <to sec="1039669718" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_577{
style=filled;
color=gray75;
2024[label="148.110.65.27;s;9pkt 9fpkt", shape=diamond, color=yellow];
3542[label="148.110.65.27;9pkt 9fpkt", shape=pentagon, color=darkviolet];
stat577[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.110.65.27:*, 96.36.114.236:1995}[50%]&lt;BR/&gt;{148.110.65.27:*, *:80}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1995: (27.7778%)&lt;BR/&gt; 80: (13.8889%)&lt;BR/&gt; 3139: (5.55556%)&lt;BR/&gt; 3128: (5.55556%)&lt;BR/&gt; 3127: (5.55556%)&gt;];
}
2024--2207[label="1;5pkt 5fpkt"];
2024--3542[label="0.888889;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="148.110.65.27"/>
      <filter dst_ip="96.36.114.236" dst_port="1995" src_ip="148.110.65.27"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669903" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.126.182.27"/>
    </slice>
    <from sec="1039669229" usec="0"/>
    <to sec="1039669897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.230.219.27"/>
    </slice>
    <from sec="1039669209" usec="0"/>
    <to sec="1039669924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_580{
style=filled;
color=gray75;
2184[label="214.239.66.6;d;2pkt 2fpkt", shape=diamond, color=yellow];
3547[label="215.154.47.28;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat580[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.154.47.28:80, 214.239.66.6:1046}[50%]&lt;BR/&gt;{215.154.47.28:80, 214.239.66.6:1047}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1047: (33.3333%)&lt;BR/&gt; 1046: (16.6667%)&gt;];
}
2184--3547[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.239.66.6" dst_port="1047" src_ip="215.154.47.28" src_port="80"/>
      <filter dst_ip="214.239.66.6" dst_port="1046" src_ip="215.154.47.28" src_port="80"/>
    </slice>
    <from sec="1039669417" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.138.83.28"/>
    </slice>
    <from sec="1039669831" usec="0"/>
    <to sec="1039669926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.126.149.28"/>
    </slice>
    <from sec="1039669213" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752371,1.85474,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_583{
style=filled;
color=gray75;
114[label="214.203.232.28s;47pkt 47fpkt", shape=rectangle, color=red];
3560[label="214.203.232.28;208pkt 208fpkt", shape=pentagon, color=darkviolet];
stat583[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.203.232.28:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
114--3560[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.203.232.28" src_port="1030"/>
    </slice>
    <from sec="1039669325" usec="0"/>
    <to sec="1039669357" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.12.12.29"/>
    </slice>
    <from sec="1039669386" usec="0"/>
    <to sec="1039669406" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.110.13.29"/>
    </slice>
    <from sec="1039669202" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.85.177.29"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752371,1.85474,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_587{
style=filled;
color=gray75;
115[label="39.183.74.30s;43pkt 43fpkt", shape=rectangle, color=red];
3569[label="39.183.74.30;102pkt 102fpkt", shape=pentagon, color=darkviolet];
stat587[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.183.74.30:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
115--3569[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="39.183.74.30" src_port="1025"/>
    </slice>
    <from sec="1039669485" usec="0"/>
    <to sec="1039669501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.74.81.30"/>
    </slice>
    <from sec="1039669377" usec="0"/>
    <to sec="1039669687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="138.177.207.31"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.90.74.32"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.126.130.32"/>
    </slice>
    <from sec="1039669204" usec="0"/>
    <to sec="1039669924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_592{
style=filled;
color=gray75;
120[label="213.132.1.33s;142pkt 142fpkt", shape=rectangle, color=red];
3594[label="213.132.1.33;286pkt 286fpkt", shape=pentagon, color=darkviolet];
5786[label="213.132.1.33;287pkt 287fpkt", shape=invtriangle, color=brown];
7208[label="213.132.1.33;286pkt 286fpkt", shape=invhouse, color=bisque];
stat592[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.132.1.33:1030, *:137}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1030: (43.8561%)&lt;BR/&gt; 1033: (6.14386%)&gt;];
}
120--3594[label="0.992958;141pkt 141fpkt"];
120--5786[label="1;142pkt 142fpkt"];
120--7208[label="0.992958;141pkt 141fpkt"];
3594--5786[label="1;286pkt 286fpkt"];
3594--7208[label="1;286pkt 286fpkt"];
5786--7208[label="1;286pkt 286fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="213.132.1.33" src_port="1030"/>
    </slice>
    <from sec="1039669399" usec="0"/>
    <to sec="1039669755" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752371,1.85474,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_593{
style=filled;
color=gray75;
121[label="215.208.52.33s;225pkt 225fpkt", shape=rectangle, color=red];
3597[label="215.208.52.33;224pkt 224fpkt", shape=pentagon, color=darkviolet];
stat593[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.208.52.33:43265, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43265: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
121--3597[label="1;224pkt 224fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.208.52.33" src_port="43265"/>
    </slice>
    <from sec="1039669270" usec="0"/>
    <to sec="1039669305" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.78.153.33"/>
    </slice>
    <from sec="1039669498" usec="0"/>
    <to sec="1039669751" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_595{
style=filled;
color=gray75;
1460[label="141.97.237.211;d;31pkt 31fpkt", shape=diamond, color=yellow];
2729[label="141.97.237.211;d;31pkt 31fpkt", shape=hexagon, color=black];
3602[label="140.3.210.33;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5790[label="140.3.210.33;2pkt 2fpkt", shape=invtriangle, color=brown];
7211[label="140.3.210.33;2pkt 2fpkt", shape=invhouse, color=bisque];
stat595[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.87.96.170:*, 141.97.237.211:80}[90.3226%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1603: (3.67647%)&lt;BR/&gt; 1602: (3.67647%)&lt;BR/&gt; 36905: (1.47059%)&lt;BR/&gt; 36904: (1.47059%)&gt;];
}
1460--2729[label="1;31pkt 31fpkt"];
1460--3602[label="1;2pkt 2fpkt"];
1460--5790[label="1;2pkt 2fpkt"];
1460--7211[label="1;2pkt 2fpkt"];
2729--3602[label="1;2pkt 2fpkt"];
2729--5790[label="1;2pkt 2fpkt"];
2729--7211[label="1;2pkt 2fpkt"];
3602--5790[label="1;2pkt 2fpkt"];
3602--7211[label="1;2pkt 2fpkt"];
5790--7211[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="141.97.237.211" dst_port="80" src_ip="215.87.96.170"/>
    </slice>
    <from sec="1039669358" usec="0"/>
    <to sec="1039669474" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905994,1.86884,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_596{
style=filled;
color=gray75;
1057[label="201.113.91.60;d;1pkt 1fpkt", shape=diamond, color=yellow];
1058[label="169.126.130.34;s;2pkt 2fpkt", shape=diamond, color=yellow];
2538[label="169.126.130.34;s;2pkt 2fpkt", shape=hexagon, color=black];
3610[label="169.126.130.34;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat596[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.126.130.34:80, 215.17.74.37:*}[42.8571%]&lt;BR/&gt;{169.126.130.34:25, *:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.8182%)&lt;BR/&gt; 46853: (18.1818%)&lt;BR/&gt; 61373: (9.09091%)&lt;BR/&gt; 5050: (9.09091%)&lt;BR/&gt; 25: (9.09091%)&gt;];
}
1057--1058[label="1;1pkt 1fpkt"];
1057--2538[label="1;1pkt 1fpkt"];
1057--3610[label="1;1pkt 1fpkt"];
1058--2538[label="1;2pkt 2fpkt"];
1058--3610[label="0.5;1pkt 1fpkt"];
2538--3610[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="169.126.130.34" src_port="25"/>
      <filter dst_ip="215.17.74.37" src_ip="169.126.130.34" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669916" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.90.2.35"/>
    </slice>
    <from sec="1039669454" usec="0"/>
    <to sec="1039669492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.90.158.35"/>
    </slice>
    <from sec="1039669350" usec="0"/>
    <to sec="1039669926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.1.33.36"/>
    </slice>
    <from sec="1039669751" usec="0"/>
    <to sec="1039669793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752371,1.85474,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_600{
style=filled;
color=gray75;
124[label="96.46.119.36s;80pkt 80fpkt", shape=rectangle, color=red];
3629[label="96.46.119.36;214pkt 214fpkt", shape=pentagon, color=darkviolet];
stat600[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.46.119.36:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
124--3629[label="1;80pkt 80fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.46.119.36" src_port="1026"/>
    </slice>
    <from sec="1039669649" usec="0"/>
    <to sec="1039669682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.126.152.36"/>
    </slice>
    <from sec="1039669206" usec="0"/>
    <to sec="1039669917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790471,1.82041,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_602{
style=filled;
color=gray75;
125[label="158.73.183.36s;104pkt 104fpkt", shape=rectangle, color=red];
3631[label="158.73.183.36;244pkt 244fpkt", shape=pentagon, color=darkviolet];
5803[label="158.73.183.36;245pkt 245fpkt", shape=invtriangle, color=brown];
stat602[shape=component, label=&lt;Rules:&lt;BR/&gt;{158.73.183.36:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
125--3631[label="0.990385;103pkt 103fpkt"];
125--5803[label="1;104pkt 104fpkt"];
3631--5803[label="1;244pkt 244fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="158.73.183.36" src_port="1026"/>
    </slice>
    <from sec="1039669493" usec="0"/>
    <to sec="1039669539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.216.51.37"/>
    </slice>
    <from sec="1039669208" usec="0"/>
    <to sec="1039669918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_604{
style=filled;
color=gray75;
127[label="61.165.212.37s;40pkt 40fpkt", shape=rectangle, color=red];
3645[label="61.165.212.37;167pkt 167fpkt", shape=pentagon, color=darkviolet];
5814[label="61.165.212.37;167pkt 167fpkt", shape=invtriangle, color=brown];
7229[label="61.165.212.37;167pkt 167fpkt", shape=invhouse, color=bisque];
stat604[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.165.212.37:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
127--3645[label="1;40pkt 40fpkt"];
127--5814[label="1;40pkt 40fpkt"];
127--7229[label="1;40pkt 40fpkt"];
3645--5814[label="1;167pkt 167fpkt"];
3645--7229[label="1;167pkt 167fpkt"];
5814--7229[label="1;167pkt 167fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="61.165.212.37" src_port="1029"/>
    </slice>
    <from sec="1039669279" usec="0"/>
    <to sec="1039669314" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.151.229.37"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.199.40.38"/>
    </slice>
    <from sec="1039669464" usec="0"/>
    <to sec="1039669787" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_607{
style=filled;
color=gray75;
1630[label="140.3.255.208;s;133pkt 133fpkt", shape=diamond, color=yellow];
stat607[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.255.208:*, 197.99.97.7:80}[20.3008%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.8722%)&lt;BR/&gt; 2007: (1.12782%)&lt;BR/&gt; 3976: (0.37594%)&lt;BR/&gt; 3975: (0.37594%)&lt;BR/&gt; 3974: (0.37594%)&gt;];
}
1630--1639[label="0.0827068;11pkt 11fpkt"];
1630--2160[label="0.0530303;7pkt 7fpkt"];
1630--5182[label="1;133pkt 133fpkt"];
1630--6821[label="1;133pkt 133fpkt"];
</description>
    <slice>
      <filter dst_ip="197.99.97.7" dst_port="80" src_ip="140.3.255.208"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669844" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.110.170.38"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669345" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_609{
style=filled;
color=gray75;
1732[label="211.189.182.38;s;47pkt 47fpkt", shape=diamond, color=yellow];
2966[label="211.189.182.38;s;47pkt 47fpkt", shape=hexagon, color=black];
3658[label="211.189.182.38;47pkt 47fpkt", shape=pentagon, color=darkviolet];
5822[label="211.189.182.38;47pkt 47fpkt", shape=invtriangle, color=brown];
7234[label="211.189.182.38;46pkt 46fpkt", shape=invhouse, color=bisque];
stat609[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.189.182.38:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1051: (7.47863%)&lt;BR/&gt; 1050: (7.47863%)&lt;BR/&gt; 1049: (7.47863%)&lt;BR/&gt; 1052: (3.20513%)&gt;];
}
1732--2966[label="1;47pkt 47fpkt"];
1732--3658[label="1;47pkt 47fpkt"];
1732--5822[label="1;47pkt 47fpkt"];
1732--7234[label="1;46pkt 46fpkt"];
2966--3658[label="1;47pkt 47fpkt"];
2966--5822[label="1;47pkt 47fpkt"];
2966--7234[label="1;46pkt 46fpkt"];
3658--5822[label="1;47pkt 47fpkt"];
3658--7234[label="1;46pkt 46fpkt"];
5822--7234[label="1;46pkt 46fpkt"];
</description>
    <slice>
      <filter src_ip="211.189.182.38" src_port="80"/>
    </slice>
    <from sec="1039669324" usec="0"/>
    <to sec="1039669583" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_610{
style=filled;
color=gray75;
895[label="148.110.192.11;d;4pkt 4fpkt", shape=diamond, color=yellow];
896[label="36.137.188.38;s;2pkt 2fpkt", shape=diamond, color=yellow];
3659[label="36.137.188.38;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5347[label="36.42.132.230;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat610[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.137.188.38:80, 148.110.192.11:1774}[20%]&lt;BR/&gt;{36.137.188.38:80, 148.110.192.11:1777}[20%]&lt;BR/&gt;{36.42.132.230:80, 148.110.192.11:1775}[20%]&lt;BR/&gt;{36.42.132.230:80, 148.110.192.11:1778}[20%]&lt;BR/&gt;{36.42.132.230:80, 148.110.192.11:1797}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1777: (15%)&lt;BR/&gt; 1774: (15%)&lt;BR/&gt; 1778: (10%)&lt;BR/&gt; 1797: (5%)&gt;];
}
895--896[label="1;2pkt 2fpkt"];
895--1744[label="1;2pkt 2fpkt"];
895--3659[label="1;2pkt 2fpkt"];
895--5347[label="0.5;1pkt 1fpkt"];
896--3659[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.192.11" dst_port="1797" src_ip="36.42.132.230" src_port="80"/>
      <filter dst_ip="148.110.192.11" dst_port="1778" src_ip="36.42.132.230" src_port="80"/>
      <filter dst_ip="148.110.192.11" dst_port="1775" src_ip="36.42.132.230" src_port="80"/>
      <filter dst_ip="148.110.192.11" dst_port="1777" src_ip="36.137.188.38" src_port="80"/>
      <filter dst_ip="148.110.192.11" dst_port="1774" src_ip="36.137.188.38" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,501,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_611{
style=filled;
color=gray75;
2008[label="38.66.227.39;s;26pkt 26fpkt", shape=diamond, color=yellow];
3666[label="38.66.227.39;25pkt 25fpkt", shape=pentagon, color=darkviolet];
stat611[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.66.227.39:21, 148.29.24.129:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (24.5098%)&lt;BR/&gt; 54542: (1.96078%)&lt;BR/&gt; 54538: (1.96078%)&lt;BR/&gt; 54532: (1.96078%)&lt;BR/&gt; 54527: (1.96078%)&gt;];
}
2008--3666[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="148.29.24.129" src_ip="38.66.227.39" src_port="21"/>
    </slice>
    <from sec="1039669574" usec="0"/>
    <to sec="1039669858" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.59.38.40"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.216.51.41"/>
    </slice>
    <from sec="1039669220" usec="0"/>
    <to sec="1039669900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790471,1.82041,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_614{
style=filled;
color=gray75;
131[label="215.208.52.41s;233pkt 233fpkt", shape=rectangle, color=red];
3682[label="215.208.52.41;243pkt 243fpkt", shape=pentagon, color=darkviolet];
5837[label="215.208.52.41;243pkt 243fpkt", shape=invtriangle, color=brown];
stat614[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.208.52.41:23488, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23488: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
131--3682[label="1;233pkt 233fpkt"];
131--5837[label="1;233pkt 233fpkt"];
3682--5837[label="1;243pkt 243fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.208.52.41" src_port="23488"/>
    </slice>
    <from sec="1039669473" usec="0"/>
    <to sec="1039669513" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_615{
style=filled;
color=gray75;
140[label="192.218.135.49s;340pkt 340fpkt", shape=rectangle, color=red];
3696[label="197.108.211.42;107pkt 107fpkt", shape=pentagon, color=darkviolet];
5848[label="197.108.211.42;107pkt 107fpkt", shape=invtriangle, color=brown];
7248[label="197.108.211.42;106pkt 106fpkt", shape=invhouse, color=bisque];
stat615[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.218.135.49:1030, *:137}[57.289%]&lt;BR/&gt;{197.108.211.42:1027, *:137}[27.3657%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1027: (28.4848%)&lt;BR/&gt; 1030: (16.9697%)&lt;BR/&gt; 1029: (4.54545%)&gt;];
}
140--3696[label="0.523364;56pkt 56fpkt"];
140--5848[label="0.523364;56pkt 56fpkt"];
140--7248[label="0.518868;55pkt 55fpkt"];
3696--5848[label="1;107pkt 107fpkt"];
3696--7248[label="1;106pkt 106fpkt"];
5848--7248[label="1;106pkt 106fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="192.218.135.49" src_port="1030"/>
      <filter dst_port="137" src_ip="197.108.211.42" src_port="1027"/>
    </slice>
    <from sec="1039669322" usec="0"/>
    <to sec="1039669374" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.202.217.42"/>
    </slice>
    <from sec="1039669758" usec="0"/>
    <to sec="1039669782" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.238.36.43"/>
    </slice>
    <from sec="1039669571" usec="0"/>
    <to sec="1039669660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_618{
style=filled;
color=gray75;
2028[label="148.110.69.43;s;343pkt 343fpkt", shape=diamond, color=yellow];
3701[label="148.110.69.43;425pkt 425fpkt", shape=pentagon, color=darkviolet];
stat618[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.110.69.43:0, *:0}[68.3099%]&lt;BR/&gt;{148.110.69.43:3973, *:*}[30.2817%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (68.2292%)&lt;BR/&gt; 3973: (15.1693%)&lt;BR/&gt; 80: (0.325521%)&lt;BR/&gt; 3012: (0.260417%)&lt;BR/&gt; 1373: (0.260417%)&gt;];
}
2028--2069[label="0.333333;1pkt 1fpkt"];
2028--3701[label="0.997085;342pkt 342fpkt"];
</description>
    <slice>
      <filter src_ip="148.110.69.43" src_port="3973"/>
      <filter src_ip="148.110.69.43"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.19.9.44"/>
    </slice>
    <from sec="1039669879" usec="0"/>
    <to sec="1039669896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.115.72.45"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.160.125.45"/>
    </slice>
    <from sec="1039669426" usec="0"/>
    <to sec="1039669460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.66.186.45"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.32.6.46"/>
    </slice>
    <from sec="1039669274" usec="0"/>
    <to sec="1039669552" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790471,1.82041,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_624{
style=filled;
color=gray75;
136[label="61.136.74.46s;74pkt 74fpkt", shape=rectangle, color=red];
3721[label="61.136.74.46;251pkt 251fpkt", shape=pentagon, color=darkviolet];
5864[label="61.136.74.46;250pkt 250fpkt", shape=invtriangle, color=brown];
stat624[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.136.74.46:18869, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 18869: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
136--3721[label="1;74pkt 74fpkt"];
136--5864[label="0.986486;73pkt 73fpkt"];
3721--5864[label="1;250pkt 250fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="61.136.74.46" src_port="18869"/>
    </slice>
    <from sec="1039669823" usec="0"/>
    <to sec="1039669864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.206.178.46"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_626{
style=filled;
color=gray75;
1804[label="221.201.19.47;s;267pkt 267fpkt", shape=diamond, color=yellow];
3725[label="221.201.19.47;283pkt 283fpkt", shape=pentagon, color=darkviolet];
stat626[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.201.19.47:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 1237: (0.727273%)&lt;BR/&gt; 1449: (0.545455%)&lt;BR/&gt; 4220: (0.363636%)&lt;BR/&gt; 3538: (0.363636%)&gt;];
}
1804--3725[label="1;267pkt 267fpkt"];
</description>
    <slice>
      <filter src_ip="221.201.19.47" src_port="53"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.29.130.47"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752371,1.85474,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_628{
style=filled;
color=gray75;
138[label="96.177.42.48s;93pkt 93fpkt", shape=rectangle, color=red];
3737[label="96.177.42.48;112pkt 112fpkt", shape=pentagon, color=darkviolet];
stat628[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.177.42.48:1043, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1043: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
138--3737[label="0.989247;92pkt 92fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.177.42.48" src_port="1043"/>
    </slice>
    <from sec="1039669492" usec="0"/>
    <to sec="1039669510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.112.54.48"/>
    </slice>
    <from sec="1039669207" usec="0"/>
    <to sec="1039669925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.216.55.48"/>
    </slice>
    <from sec="1039669203" usec="0"/>
    <to sec="1039669865" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752371,1.85474,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_631{
style=filled;
color=gray75;
139[label="39.4.119.48s;213pkt 213fpkt", shape=rectangle, color=red];
3744[label="39.4.119.48;255pkt 255fpkt", shape=pentagon, color=darkviolet];
stat631[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.4.119.48:1032, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1032: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
139--3744[label="1;213pkt 213fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="39.4.119.48" src_port="1032"/>
    </slice>
    <from sec="1039669613" usec="0"/>
    <to sec="1039669648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.42.52.49"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="138.186.52.49"/>
    </slice>
    <from sec="1039669238" usec="0"/>
    <to sec="1039669872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.46.123.49"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_635{
style=filled;
color=gray75;
352[label="196.153.129.50s;39pkt 39fpkt", shape=rectangle, color=red];
3768[label="196.153.129.50;184pkt 184fpkt", shape=pentagon, color=darkviolet];
5897[label="196.153.129.50;184pkt 184fpkt", shape=invtriangle, color=brown];
7279[label="196.153.129.50;184pkt 184fpkt", shape=invhouse, color=bisque];
stat635[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.153.129.50:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 2751: (0.338409%)&lt;BR/&gt; 2730: (0.338409%)&lt;BR/&gt; 2615: (0.338409%)&lt;BR/&gt; 2610: (0.338409%)&gt;];
}
352--3768[label="1;39pkt 39fpkt"];
352--5897[label="1;39pkt 39fpkt"];
352--7279[label="1;39pkt 39fpkt"];
3768--5897[label="1;184pkt 184fpkt"];
3768--7279[label="1;184pkt 184fpkt"];
5897--7279[label="1;184pkt 184fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.153.129.50"/>
    </slice>
    <from sec="1039669829" usec="0"/>
    <to sec="1039669857" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752371,1.85474,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_636{
style=filled;
color=gray75;
141[label="202.83.230.51s;38pkt 38fpkt", shape=rectangle, color=red];
3774[label="202.83.230.51;202pkt 202fpkt", shape=pentagon, color=darkviolet];
stat636[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.83.230.51:1034, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1034: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
141--3774[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.83.230.51" src_port="1034"/>
    </slice>
    <from sec="1039669629" usec="0"/>
    <to sec="1039669669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.90.158.52"/>
    </slice>
    <from sec="1039669204" usec="0"/>
    <to sec="1039669927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.53.166.52"/>
    </slice>
    <from sec="1039669510" usec="0"/>
    <to sec="1039669927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.110.192.52"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645838,1.80177,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_640{
style=filled;
color=gray75;
1994[label="140.3.201.52;s;80pkt 80fpkt", shape=diamond, color=yellow];
3783[label="140.3.201.52;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5907[label="140.3.201.52;2pkt 2fpkt", shape=invtriangle, color=brown];
stat640[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.201.52:*, 211.45.226.5:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.8235%)&lt;BR/&gt; 1343: (1.17647%)&lt;BR/&gt; 1327: (1.17647%)&lt;BR/&gt; 1062: (1.17647%)&lt;BR/&gt; 443: (1.17647%)&gt;];
}
1994--2065[label="0.0125;1pkt 1fpkt"];
1994--2160[label="0.0875;7pkt 7fpkt"];
1994--2308[label="0.05;4pkt 4fpkt"];
1994--2622[label="0.153846;2pkt 2fpkt"];
1994--2825[label="0.5125;41pkt 41fpkt"];
1994--2860[label="1;80pkt 80fpkt"];
1994--3783[label="0.333333;1pkt 1fpkt"];
3783--5907[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="211.45.226.5" dst_port="80" src_ip="140.3.201.52"/>
    </slice>
    <from sec="1039669549" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_641{
style=filled;
color=gray75;
2188[label="64.184.10.54;s;2pkt 2fpkt", shape=diamond, color=yellow];
3794[label="64.184.10.54;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat641[shape=component, label=&lt;Rules:&lt;BR/&gt;{64.184.10.54:1333, 138.186.177.88:6699}[50%]&lt;BR/&gt;{64.184.10.54:6257, 138.186.177.88:6257}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (33.3333%)&lt;BR/&gt; 6257: (33.3333%)&lt;BR/&gt; 1333: (33.3333%)&gt;];
}
2188--3794[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.177.88" dst_port="6257" src_ip="64.184.10.54" src_port="6257"/>
      <filter dst_ip="138.186.177.88" dst_port="6699" src_ip="64.184.10.54" src_port="1333"/>
    </slice>
    <from sec="1039669436" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.227.51.55"/>
    </slice>
    <from sec="1039669267" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.139.6.56"/>
    </slice>
    <from sec="1039669212" usec="0"/>
    <to sec="1039669922" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_644{
style=filled;
color=gray75;
1882[label="215.162.4.57;s;162pkt 162fpkt", shape=diamond, color=yellow];
3822[label="215.162.4.57;164pkt 164fpkt", shape=pentagon, color=darkviolet];
stat644[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.162.4.57:25, *:*}[98.7879%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.3865%)&lt;BR/&gt; 0: (1.22699%)&lt;BR/&gt; 62990: (0.306748%)&lt;BR/&gt; 62670: (0.306748%)&lt;BR/&gt; 61798: (0.306748%)&gt;];
}
1882--3822[label="0.993827;161pkt 161fpkt"];
</description>
    <slice>
      <filter src_ip="215.162.4.57" src_port="25"/>
    </slice>
    <from sec="1039669202" usec="0"/>
    <to sec="1039669922" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_645{
style=filled;
color=gray75;
148[label="96.178.46.57s;107pkt 107fpkt", shape=rectangle, color=red];
3825[label="96.178.46.57;208pkt 208fpkt", shape=pentagon, color=darkviolet];
5935[label="96.178.46.57;208pkt 208fpkt", shape=invtriangle, color=brown];
7301[label="96.178.46.57;208pkt 208fpkt", shape=invhouse, color=bisque];
stat645[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.178.46.57:1033, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1033: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
148--3825[label="0.990654;106pkt 106fpkt"];
148--5935[label="0.990654;106pkt 106fpkt"];
148--7301[label="0.990654;106pkt 106fpkt"];
3825--5935[label="1;208pkt 208fpkt"];
3825--7301[label="1;208pkt 208fpkt"];
5935--7301[label="1;208pkt 208fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.178.46.57" src_port="1033"/>
    </slice>
    <from sec="1039669564" usec="0"/>
    <to sec="1039669596" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.153.133.57"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.179.140.57"/>
    </slice>
    <from sec="1039669301" usec="0"/>
    <to sec="1039669504" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.90.158.57"/>
    </slice>
    <from sec="1039669207" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.66.208.57"/>
    </slice>
    <from sec="1039669847" usec="0"/>
    <to sec="1039669880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.17.34.58"/>
    </slice>
    <from sec="1039669253" usec="0"/>
    <to sec="1039669571" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.98.186.58"/>
    </slice>
    <from sec="1039669235" usec="0"/>
    <to sec="1039669278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.61.212.58"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.93.217.58"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.187.15.59"/>
    </slice>
    <from sec="1039669505" usec="0"/>
    <to sec="1039669534" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752371,1.85474,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_655{
style=filled;
color=gray75;
152[label="202.85.16.59s;257pkt 257fpkt", shape=rectangle, color=red];
3847[label="202.85.16.59;218pkt 218fpkt", shape=pentagon, color=darkviolet];
stat655[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.85.16.59:10148, *:137}[77.5801%]&lt;BR/&gt;{96.146.40.59:1069, *:137}[22.4199%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 10148: (43.3684%)&lt;BR/&gt; 1069: (6.63158%)&gt;];
}
152--3847[label="0.889908;194pkt 194fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.85.16.59" src_port="10148"/>
      <filter dst_port="137" src_ip="96.146.40.59" src_port="1069"/>
    </slice>
    <from sec="1039669350" usec="0"/>
    <to sec="1039669384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="10.10.40.59"/>
    </slice>
    <from sec="1039669239" usec="0"/>
    <to sec="1039669909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752371,1.85474,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_657{
style=filled;
color=gray75;
154[label="197.96.103.59s;82pkt 82fpkt", shape=rectangle, color=red];
3851[label="197.96.103.59;160pkt 160fpkt", shape=pentagon, color=darkviolet];
stat657[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.96.103.59:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
154--3851[label="1;82pkt 82fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.96.103.59" src_port="1029"/>
    </slice>
    <from sec="1039669878" usec="0"/>
    <to sec="1039669903" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.174.174.59"/>
    </slice>
    <from sec="1039669606" usec="0"/>
    <to sec="1039669628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.95.219.59"/>
    </slice>
    <from sec="1039669773" usec="0"/>
    <to sec="1039669812" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_660{
style=filled;
color=gray75;
2036[label="140.3.110.80;d;57pkt 57fpkt", shape=diamond, color=yellow];
3863[label="211.90.158.60;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4985[label="197.151.218.183;36pkt 36fpkt", shape=pentagon, color=darkviolet];
stat660[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.151.218.183:80, 140.3.110.80:*}[58.7302%]&lt;BR/&gt;{*:1863, *:*}[25.3968%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.5%)&lt;BR/&gt; 1863: (8.5%)&lt;BR/&gt; 33747: (1%)&lt;BR/&gt; 33740: (1%)&lt;BR/&gt; 33704: (1%)&gt;];
}
2036--2106[label="0.0185185;1pkt 1fpkt"];
2036--2889[label="1;57pkt 57fpkt"];
2036--3863[label="0.142857;1pkt 1fpkt"];
2036--4985[label="1;36pkt 36fpkt"];
2036--5350[label="0.0175439;1pkt 1fpkt"];
2036--6925[label="0.0175439;1pkt 1fpkt"];
2036--7941[label="0.0175439;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_port="1863"/>
      <filter dst_ip="140.3.110.80" src_ip="197.151.218.183" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_661{
style=filled;
color=gray75;
515[label="140.3.128.234;d;12pkt 12fpkt", shape=diamond, color=yellow];
1158[label="98.149.172.61;s;2pkt 2fpkt", shape=diamond, color=yellow];
3869[label="98.149.172.61;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5960[label="98.149.172.61;1pkt 1fpkt", shape=invtriangle, color=brown];
7320[label="98.149.172.61;1pkt 1fpkt", shape=invhouse, color=bisque];
stat661[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.162.171.1:80, 140.3.128.234:*}[25%]&lt;BR/&gt;{201.162.171.28:80, 140.3.128.234:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57307: (14.7059%)&lt;BR/&gt; 57304: (5.88235%)&lt;BR/&gt; 57953: (2.94118%)&lt;BR/&gt; 57950: (2.94118%)&gt;];
}
515--952[label="0.0833333;1pkt 1fpkt"];
515--1158[label="1;2pkt 2fpkt"];
515--3869[label="1;1pkt 1fpkt"];
515--5203[label="0.0833333;1pkt 1fpkt"];
515--5960[label="1;1pkt 1fpkt"];
515--7320[label="1;1pkt 1fpkt"];
1158--3869[label="1;1pkt 1fpkt"];
1158--5960[label="1;1pkt 1fpkt"];
1158--7320[label="1;1pkt 1fpkt"];
3869--5960[label="1;1pkt 1fpkt"];
3869--7320[label="1;1pkt 1fpkt"];
5960--7320[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.128.234" src_ip="201.162.171.28" src_port="80"/>
      <filter dst_ip="140.3.128.234" src_ip="201.162.171.1" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.182.132.62"/>
    </slice>
    <from sec="1039669607" usec="0"/>
    <to sec="1039669631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752371,1.85474,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_663{
style=filled;
color=gray75;
159[label="96.14.147.62s;158pkt 158fpkt", shape=rectangle, color=red];
3872[label="96.14.147.62;183pkt 183fpkt", shape=pentagon, color=darkviolet];
stat663[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.14.147.62:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
159--3872[label="1;158pkt 158fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.14.147.62" src_port="1027"/>
    </slice>
    <from sec="1039669307" usec="0"/>
    <to sec="1039669341" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.87.75.63"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.194.159.63"/>
    </slice>
    <from sec="1039669247" usec="0"/>
    <to sec="1039669287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.177.11.64"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_667{
style=filled;
color=gray75;
1982[label="138.186.147.2;d;53pkt 53fpkt", shape=diamond, color=yellow];
2194[label="215.90.90.102;d;86pkt 86fpkt", shape=diamond, color=yellow];
3884[label="36.2.50.64;47pkt 47fpkt", shape=pentagon, color=darkviolet];
4079[label="36.2.50.82;11pkt 11fpkt", shape=pentagon, color=darkviolet];
4159[label="36.2.50.90;47pkt 47fpkt", shape=pentagon, color=darkviolet];
5966[label="36.2.50.64;47pkt 47fpkt", shape=invtriangle, color=brown];
7326[label="36.2.50.64;48pkt 48fpkt", shape=invhouse, color=bisque];
stat667[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 138.186.147.2:*}[32.9193%]&lt;BR/&gt;{36.2.50.90:80, *:*}[29.8137%]&lt;BR/&gt;{36.2.50.64:80, 215.90.90.102:*}[20.4969%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5575%)&lt;BR/&gt; 33002: (0.589971%)&lt;BR/&gt; 33001: (0.589971%)&lt;BR/&gt; 33000: (0.589971%)&lt;BR/&gt; 32999: (0.589971%)&gt;];
}
1982--3884[label="0.297872;14pkt 14fpkt"];
1982--3939[label="0.35;7pkt 7fpkt"];
1982--4079[label="0.272727;3pkt 3fpkt"];
1982--4159[label="0.297872;14pkt 14fpkt"];
1982--5966[label="0.297872;14pkt 14fpkt"];
1982--6011[label="0.35;7pkt 7fpkt"];
1982--7326[label="0.3125;15pkt 15fpkt"];
1982--7352[label="0.333333;7pkt 7fpkt"];
2194--3884[label="0.702128;33pkt 33fpkt"];
2194--3939[label="0.4;8pkt 8fpkt"];
2194--4159[label="0.404255;19pkt 19fpkt"];
2194--5966[label="0.702128;33pkt 33fpkt"];
2194--6011[label="0.4;8pkt 8fpkt"];
2194--7326[label="0.6875;33pkt 33fpkt"];
2194--7352[label="0.380952;8pkt 8fpkt"];
3884--5966[label="1;47pkt 47fpkt"];
3884--7326[label="1;47pkt 47fpkt"];
5966--7326[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter src_ip="36.2.50.90" src_port="80"/>
      <filter dst_ip="138.186.147.2" src_port="80"/>
      <filter dst_ip="215.90.90.102" src_ip="36.2.50.64" src_port="80"/>
    </slice>
    <from sec="1039669224" usec="0"/>
    <to sec="1039669860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.24.111.64"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="140.3.129.64"/>
    </slice>
    <from sec="1039669390" usec="0"/>
    <to sec="1039669587" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.212.168.64"/>
    </slice>
    <from sec="1039669553" usec="0"/>
    <to sec="1039669583" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_671{
style=filled;
color=gray75;
808[label="201.249.96.76;s;337pkt 337fpkt", shape=diamond, color=yellow];
stat671[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.249.96.76:80, 140.3.248.178:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4442: (0.148368%)&lt;BR/&gt; 4441: (0.148368%)&lt;BR/&gt; 4440: (0.148368%)&lt;BR/&gt; 4439: (0.148368%)&gt;];
}
808--2768[label="1;337pkt 337fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.248.178" src_ip="201.249.96.76" src_port="80"/>
    </slice>
    <from sec="1039669277" usec="0"/>
    <to sec="1039669599" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="138.186.51.65"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.196.181.65"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="140.3.201.65"/>
    </slice>
    <from sec="1039669740" usec="0"/>
    <to sec="1039669816" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.220.29.66"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.78.116.66"/>
    </slice>
    <from sec="1039669231" usec="0"/>
    <to sec="1039669274" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.201.217.66"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.129.78.67"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.181.80.68"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669619" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="140.3.242.68"/>
    </slice>
    <from sec="1039669280" usec="0"/>
    <to sec="1039669333" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.152.0.69"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.111.92.69"/>
    </slice>
    <from sec="1039669216" usec="0"/>
    <to sec="1039669916" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.172.126.69"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="140.3.244.69"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.4.5.70"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645838,1.80177,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_686{
style=filled;
color=gray75;
2432[label="215.46.16.92;d;2pkt 2fpkt", shape=diamond, color=yellow];
2433[label="140.3.11.70;s;5pkt 5fpkt", shape=diamond, color=yellow];
3959[label="140.3.11.70;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6024[label="140.3.11.70;4pkt 4fpkt", shape=invtriangle, color=brown];
stat686[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.11.70:80, 215.46.16.92:43319}[20%]&lt;BR/&gt;{140.3.11.70:80, 215.46.16.92:47053}[20%]&lt;BR/&gt;{140.3.11.70:80, 36.187.127.212:57699}[20%]&lt;BR/&gt;{140.3.11.70:80, 36.187.127.212:57820}[20%]&lt;BR/&gt;{140.3.11.70:80, 36.187.127.212:57993}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 47053: (13.3333%)&lt;BR/&gt; 57993: (10%)&lt;BR/&gt; 57820: (10%)&lt;BR/&gt; 57699: (10%)&gt;];
}
2432--2433[label="1;2pkt 2fpkt"];
2432--3959[label="0.5;1pkt 1fpkt"];
2432--6024[label="0.5;1pkt 1fpkt"];
2433--3959[label="1;4pkt 4fpkt"];
2433--6024[label="1;4pkt 4fpkt"];
3959--6024[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="36.187.127.212" dst_port="57993" src_ip="140.3.11.70" src_port="80"/>
      <filter dst_ip="36.187.127.212" dst_port="57820" src_ip="140.3.11.70" src_port="80"/>
      <filter dst_ip="36.187.127.212" dst_port="57699" src_ip="140.3.11.70" src_port="80"/>
      <filter dst_ip="215.46.16.92" dst_port="47053" src_ip="140.3.11.70" src_port="80"/>
      <filter dst_ip="215.46.16.92" dst_port="43319" src_ip="140.3.11.70" src_port="80"/>
    </slice>
    <from sec="1039669706" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905994,1.86884,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_687{
style=filled;
color=gray75;
1728[label="202.75.65.70;s;21pkt 21fpkt", shape=diamond, color=yellow];
2840[label="202.75.65.70;s;21pkt 21fpkt", shape=hexagon, color=black];
3960[label="202.75.65.70;20pkt 20fpkt", shape=pentagon, color=darkviolet];
stat687[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.75.65.70:4040, 148.110.147.12:*}[57.1429%]&lt;BR/&gt;{202.75.65.70:*, 148.110.147.12:4040}[47.619%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4040: (52.4194%)&lt;BR/&gt; 4564: (2.41935%)&lt;BR/&gt; 4562: (2.41935%)&lt;BR/&gt; 4525: (2.41935%)&lt;BR/&gt; 4509: (2.41935%)&gt;];
}
1728--2840[label="1;21pkt 21fpkt"];
1728--3960[label="1;20pkt 20fpkt"];
2840--3960[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.147.12" src_ip="202.75.65.70" src_port="4040"/>
      <filter dst_ip="148.110.147.12" dst_port="4040" src_ip="202.75.65.70"/>
    </slice>
    <from sec="1039669310" usec="0"/>
    <to sec="1039669885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.93.97.70"/>
    </slice>
    <from sec="1039669366" usec="0"/>
    <to sec="1039669909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.152.153.70"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="138.186.177.70"/>
    </slice>
    <from sec="1039669202" usec="0"/>
    <to sec="1039669927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="138.186.218.70"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752371,1.85474,503,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_692{
style=filled;
color=gray75;
74[label="140.3.244.70s;3pkt 3fpkt", shape=rectangle, color=red];
3966[label="140.3.244.70;30pkt 30fpkt", shape=pentagon, color=darkviolet];
stat692[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.244.70:*, 199.186.168.57:80}[93.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3181: (3.0303%)&lt;BR/&gt; 3180: (3.0303%)&lt;BR/&gt; 3179: (3.0303%)&lt;BR/&gt; 3263: (1.51515%)&gt;];
}
74--3966[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="199.186.168.57" dst_port="80" src_ip="140.3.244.70"/>
    </slice>
    <from sec="1039669436" usec="0"/>
    <to sec="1039669917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.216.55.71"/>
    </slice>
    <from sec="1039669204" usec="0"/>
    <to sec="1039669927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_694{
style=filled;
color=gray75;
1987[label="211.45.228.7;d;148pkt 148fpkt", shape=diamond, color=yellow];
stat694[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.48.218:*, 211.45.228.7:80}[46.6216%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 41395: (0.337838%)&lt;BR/&gt; 41391: (0.337838%)&lt;BR/&gt; 41387: (0.337838%)&lt;BR/&gt; 41386: (0.337838%)&gt;];
}
1987--1991[label="0.108108;16pkt 16fpkt"];
1987--2216[label="0.280899;25pkt 25fpkt"];
1987--2738[label="0.60396;61pkt 61fpkt"];
1987--2977[label="0.222222;26pkt 26fpkt"];
1987--2981[label="1;144pkt 144fpkt"];
1987--3185[label="0.00675676;1pkt 1fpkt"];
1987--3974[label="0.222222;26pkt 26fpkt"];
1987--4803[label="0.0816327;4pkt 4fpkt"];
1987--4822[label="0.284091;25pkt 25fpkt"];
1987--5253[label="0.633028;69pkt 69fpkt"];
1987--5254[label="0.108108;16pkt 16fpkt"];
1987--6030[label="0.224138;26pkt 26fpkt"];
1987--6576[label="0.0833333;4pkt 4fpkt"];
1987--6586[label="0.280899;25pkt 25fpkt"];
1987--6866[label="0.108108;16pkt 16fpkt"];
1987--7365[label="0.224138;26pkt 26fpkt"];
1987--7708[label="0.0833333;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="211.45.228.7" dst_port="80" src_ip="138.186.48.218"/>
    </slice>
    <from sec="1039669539" usec="0"/>
    <to sec="1039669802" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_695{
style=filled;
color=gray75;
2364[label="140.3.55.96;s;35pkt 35fpkt", shape=diamond, color=yellow];
stat695[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.55.96:*, 211.217.180.138:80}[45.7143%]&lt;BR/&gt;{140.3.55.96:*, 211.189.190.11:80}[22.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1269: (2.85714%)&lt;BR/&gt; 1328: (1.42857%)&lt;BR/&gt; 1327: (1.42857%)&lt;BR/&gt; 1326: (1.42857%)&gt;];
}
2364--2841[label="0.0857143;3pkt 3fpkt"];
2364--3108[label="0.457143;16pkt 16fpkt"];
2364--3185[label="0.171429;6pkt 6fpkt"];
2364--4227[label="1;35pkt 35fpkt"];
2364--6190[label="1;34pkt 34fpkt"];
2364--7464[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="211.217.180.138" dst_port="80" src_ip="140.3.55.96"/>
      <filter dst_ip="211.189.190.11" dst_port="80" src_ip="140.3.55.96"/>
    </slice>
    <from sec="1039669357" usec="0"/>
    <to sec="1039669758" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.146.56.73"/>
    </slice>
    <from sec="1039669217" usec="0"/>
    <to sec="1039669246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.72.222.73"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_698{
style=filled;
color=gray75;
172[label="211.69.54.74s;52pkt 52fpkt", shape=rectangle, color=red];
3990[label="211.69.54.74;110pkt 110fpkt", shape=pentagon, color=darkviolet];
3991[label="96.73.90.74;117pkt 117fpkt", shape=pentagon, color=darkviolet];
6040[label="211.69.54.74;111pkt 111fpkt", shape=invtriangle, color=brown];
6041[label="96.73.90.74;118pkt 118fpkt", shape=invtriangle, color=brown];
7372[label="211.69.54.74;110pkt 110fpkt", shape=invhouse, color=bisque];
7373[label="96.73.90.74;117pkt 117fpkt", shape=invhouse, color=bisque];
stat698[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.73.90.74:1030, *:137}[51.5284%]&lt;BR/&gt;{211.69.54.74:1043, *:137}[48.4716%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1043: (25.2381%)&lt;BR/&gt; 1030: (24.7619%)&gt;];
}
172--3990[label="0.75;39pkt 39fpkt"];
172--3991[label="0.230769;12pkt 12fpkt"];
172--6040[label="0.769231;40pkt 40fpkt"];
172--6041[label="0.230769;12pkt 12fpkt"];
172--7372[label="0.75;39pkt 39fpkt"];
172--7373[label="0.230769;12pkt 12fpkt"];
3990--6040[label="1;110pkt 110fpkt"];
3990--7372[label="1;110pkt 110fpkt"];
3991--6041[label="1;117pkt 117fpkt"];
3991--7373[label="1;117pkt 117fpkt"];
6040--7372[label="1;110pkt 110fpkt"];
6041--7373[label="1;117pkt 117fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.73.90.74" src_port="1030"/>
      <filter dst_port="137" src_ip="211.69.54.74" src_port="1043"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669234" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.166.131.74"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645838,1.80177,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_700{
style=filled;
color=gray75;
1786[label="215.90.72.48;d;15pkt 15fpkt", shape=diamond, color=yellow];
4004[label="202.68.14.75;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6051[label="202.68.14.75;5pkt 5fpkt", shape=invtriangle, color=brown];
stat700[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.68.14.75:80, 215.90.72.48:*}[27.7778%]&lt;BR/&gt;{215.214.133.8:80, 215.90.72.48:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1143: (6%)&lt;BR/&gt; 1140: (6%)&lt;BR/&gt; 1136: (4%)&lt;BR/&gt; 1135: (4%)&gt;];
}
1786--4004[label="0.4;2pkt 2fpkt"];
1786--6051[label="0.4;2pkt 2fpkt"];
4004--6051[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.72.48" src_ip="202.68.14.75" src_port="80"/>
      <filter dst_ip="215.90.72.48" src_ip="215.214.133.8" src_port="80"/>
    </slice>
    <from sec="1039669222" usec="0"/>
    <to sec="1039669805" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.81.128.75"/>
    </slice>
    <from sec="1039669456" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752371,1.85474,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_702{
style=filled;
color=gray75;
354[label="215.90.64.75s;109pkt 109fpkt", shape=rectangle, color=red];
4012[label="201.121.208.75;185pkt 185fpkt", shape=pentagon, color=darkviolet];
stat702[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.121.208.75:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
354--4012[label="1;109pkt 109fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.121.208.75" src_port="1029"/>
    </slice>
    <from sec="1039669566" usec="0"/>
    <to sec="1039669595" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.69.3.76"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.80.3.76"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.70.185.76"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_706{
style=filled;
color=gray75;
174[label="96.2.1.77s;452pkt 452fpkt", shape=rectangle, color=red];
4023[label="96.2.1.77;451pkt 451fpkt", shape=pentagon, color=darkviolet];
6061[label="96.2.1.77;451pkt 451fpkt", shape=invtriangle, color=brown];
7387[label="96.2.1.77;451pkt 451fpkt", shape=invhouse, color=bisque];
stat706[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.2.1.77:1127, *:137}[50.2212%]&lt;BR/&gt;{96.2.1.77:1088, *:137}[49.7788%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1127: (25.0693%)&lt;BR/&gt; 1088: (24.9307%)&gt;];
}
174--4023[label="1;451pkt 451fpkt"];
174--6061[label="1;451pkt 451fpkt"];
174--7387[label="1;451pkt 451fpkt"];
4023--6061[label="1;451pkt 451fpkt"];
4023--7387[label="1;451pkt 451fpkt"];
6061--7387[label="1;451pkt 451fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.2.1.77" src_port="1127"/>
      <filter dst_port="137" src_ip="96.2.1.77" src_port="1088"/>
    </slice>
    <from sec="1039669781" usec="0"/>
    <to sec="1039669829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.166.18.77"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.199.97.77"/>
    </slice>
    <from sec="1039669214" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905994,1.86884,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_709{
style=filled;
color=gray75;
773[label="140.3.55.78;s;19pkt 19fpkt", shape=diamond, color=yellow];
2497[label="140.3.55.78;s;19pkt 19fpkt", shape=hexagon, color=black];
4034[label="140.3.55.78;19pkt 19fpkt", shape=pentagon, color=darkviolet];
stat709[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.55.78:*, 211.217.180.138:80}[84.2105%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3125: (2.63158%)&lt;BR/&gt; 3124: (2.63158%)&lt;BR/&gt; 3123: (2.63158%)&lt;BR/&gt; 3122: (2.63158%)&gt;];
}
773--2497[label="1;19pkt 19fpkt"];
773--4034[label="1;19pkt 19fpkt"];
2497--4034[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="211.217.180.138" dst_port="80" src_ip="140.3.55.78"/>
    </slice>
    <from sec="1039669205" usec="0"/>
    <to sec="1039669307" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_710{
style=filled;
color=gray75;
1950[label="211.152.237.78;s;63pkt 63fpkt", shape=diamond, color=yellow];
2000[label="140.3.137.197;d;72pkt 72fpkt", shape=diamond, color=yellow];
2861[label="140.3.137.197;d;72pkt 72fpkt", shape=hexagon, color=black];
2972[label="211.152.237.78;s;63pkt 63fpkt", shape=hexagon, color=black];
4042[label="211.152.237.78;67pkt 67fpkt", shape=pentagon, color=darkviolet];
6073[label="211.152.237.78;67pkt 67fpkt", shape=invtriangle, color=brown];
7392[label="211.152.237.78;66pkt 66fpkt", shape=invhouse, color=bisque];
stat710[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.152.237.78:80, 140.3.137.197:*}[57.9545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1287: (1.2766%)&lt;BR/&gt; 1271: (1.2766%)&lt;BR/&gt; 1323: (0.744681%)&lt;BR/&gt; 1317: (0.744681%)&gt;];
}
1950--2000[label="0.809524;51pkt 51fpkt"];
1950--2673[label="0.031746;2pkt 2fpkt"];
1950--2861[label="0.809524;51pkt 51fpkt"];
1950--2972[label="1;63pkt 63fpkt"];
1950--4042[label="1;63pkt 63fpkt"];
1950--6073[label="1;63pkt 63fpkt"];
1950--7392[label="0.984127;62pkt 62fpkt"];
2000--2861[label="1;72pkt 72fpkt"];
2000--2972[label="0.809524;51pkt 51fpkt"];
2000--4042[label="0.761194;51pkt 51fpkt"];
2000--4051[label="0.24;6pkt 6fpkt"];
2000--6073[label="0.761194;51pkt 51fpkt"];
2000--6078[label="0.24;6pkt 6fpkt"];
2000--7392[label="0.772727;51pkt 51fpkt"];
2861--2972[label="0.809524;51pkt 51fpkt"];
2861--4042[label="0.761194;51pkt 51fpkt"];
2861--4051[label="0.24;6pkt 6fpkt"];
2861--6073[label="0.761194;51pkt 51fpkt"];
2861--6078[label="0.24;6pkt 6fpkt"];
2861--7392[label="0.772727;51pkt 51fpkt"];
2972--4042[label="1;63pkt 63fpkt"];
2972--6073[label="1;63pkt 63fpkt"];
2972--7392[label="0.984127;62pkt 62fpkt"];
4042--6073[label="1;67pkt 67fpkt"];
4042--7392[label="1;66pkt 66fpkt"];
6073--7392[label="1;66pkt 66fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.137.197" src_ip="211.152.237.78" src_port="80"/>
    </slice>
    <from sec="1039669388" usec="0"/>
    <to sec="1039669915" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="140.3.244.78"/>
    </slice>
    <from sec="1039669573" usec="0"/>
    <to sec="1039669614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_712{
style=filled;
color=gray75;
1062[label="138.186.8.79;s;350pkt 350fpkt", shape=diamond, color=yellow];
4044[label="138.186.8.79;392pkt 392fpkt", shape=pentagon, color=darkviolet];
stat712[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.8.79:60067, *:53}[82.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (48.9218%)&lt;BR/&gt; 60067: (41.1051%)&lt;BR/&gt; 0: (4.31267%)&lt;BR/&gt; 65033: (0.134771%)&lt;BR/&gt; 60544: (0.134771%)&gt;];
}
1062--1883[label="0.0243902;1pkt 1fpkt"];
1062--2340[label="0.0769231;1pkt 1fpkt"];
1062--2386[label="0.0909091;1pkt 1fpkt"];
1062--2539[label="1;148pkt 148fpkt"];
1062--4044[label="1;350pkt 350fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="138.186.8.79" src_port="60067"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.48.149.79"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905994,1.86884,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_714{
style=filled;
color=gray75;
1365[label="214.216.53.80;s;628pkt 628fpkt", shape=diamond, color=yellow];
2703[label="214.216.53.80;s;628pkt 628fpkt", shape=hexagon, color=black];
4055[label="214.216.53.80;638pkt 638fpkt", shape=pentagon, color=darkviolet];
stat714[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.216.53.80:3312, *:53}[49.4523%]&lt;BR/&gt;{214.216.53.80:*, *:25}[20.6573%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (36.0876%)&lt;BR/&gt; 3312: (25%)&lt;BR/&gt; 25: (10.6389%)&lt;BR/&gt; 113: (3.0887%)&lt;BR/&gt; 80: (2.32313%)&gt;];
}
1365--1883[label="0.0243902;1pkt 1fpkt"];
1365--2703[label="1;628pkt 628fpkt"];
1365--4055[label="0.998408;627pkt 627fpkt"];
2703--4055[label="0.998408;627pkt 627fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="214.216.53.80"/>
      <filter dst_port="53" src_ip="214.216.53.80" src_port="3312"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.19.180.80"/>
    </slice>
    <from sec="1039669276" usec="0"/>
    <to sec="1039669585" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="138.186.55.81"/>
    </slice>
    <from sec="1039669228" usec="0"/>
    <to sec="1039669913" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.132.158.81"/>
    </slice>
    <from sec="1039669568" usec="0"/>
    <to sec="1039669587" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.72.200.81"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="140.3.210.81"/>
    </slice>
    <from sec="1039669300" usec="0"/>
    <to sec="1039669564" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="138.197.22.83"/>
    </slice>
    <from sec="1039669205" usec="0"/>
    <to sec="1039669926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.55.76.83"/>
    </slice>
    <from sec="1039669394" usec="0"/>
    <to sec="1039669423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="138.186.137.83"/>
    </slice>
    <from sec="1039669221" usec="0"/>
    <to sec="1039669917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.239.147.83"/>
    </slice>
    <from sec="1039669247" usec="0"/>
    <to sec="1039669267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.70.162.83"/>
    </slice>
    <from sec="1039669214" usec="0"/>
    <to sec="1039669926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.937874,1.83478,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_725{
style=filled;
color=gray75;
2140[label="148.110.53.84;s;65pkt 65fpkt", shape=diamond, color=yellow];
2952[label="148.110.53.84;s;65pkt 65fpkt", shape=hexagon, color=black];
4098[label="148.110.53.84;81pkt 81fpkt", shape=pentagon, color=darkviolet];
6106[label="148.110.53.84;81pkt 81fpkt", shape=invtriangle, color=brown];
stat725[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.110.53.84:*, *:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 59986: (0.684932%)&lt;BR/&gt; 59980: (0.684932%)&lt;BR/&gt; 59969: (0.684932%)&lt;BR/&gt; 59962: (0.684932%)&gt;];
}
2140--2952[label="1;65pkt 65fpkt"];
2140--4098[label="0.984615;64pkt 64fpkt"];
2140--6106[label="0.984615;64pkt 64fpkt"];
2952--4098[label="0.984615;64pkt 64fpkt"];
2952--6106[label="0.984615;64pkt 64fpkt"];
4098--6106[label="1;81pkt 81fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="148.110.53.84"/>
    </slice>
    <from sec="1039669208" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.12.146.84"/>
    </slice>
    <from sec="1039669413" usec="0"/>
    <to sec="1039669435" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790471,1.82041,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_728{
style=filled;
color=gray75;
178[label="202.158.58.85s;169pkt 169fpkt", shape=rectangle, color=red];
4111[label="202.158.58.85;168pkt 168fpkt", shape=pentagon, color=darkviolet];
6116[label="202.158.58.85;169pkt 169fpkt", shape=invtriangle, color=brown];
stat728[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.158.58.85:65040, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65040: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
178--4111[label="1;168pkt 168fpkt"];
178--6116[label="1;169pkt 169fpkt"];
4111--6116[label="1;168pkt 168fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.158.58.85" src_port="65040"/>
    </slice>
    <from sec="1039669795" usec="0"/>
    <to sec="1039669809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.145.97.85"/>
    </slice>
    <from sec="1039669846" usec="0"/>
    <to sec="1039669880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="223.73.194.86"/>
    </slice>
    <from sec="1039669903" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_731{
style=filled;
color=gray75;
181[label="96.198.172.87s;31pkt 31fpkt", shape=rectangle, color=red];
4132[label="96.198.172.87;170pkt 170fpkt", shape=pentagon, color=darkviolet];
6127[label="96.198.172.87;170pkt 170fpkt", shape=invtriangle, color=brown];
7427[label="96.198.172.87;170pkt 170fpkt", shape=invhouse, color=bisque];
stat731[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.198.172.87:65063, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65063: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
181--4132[label="1;31pkt 31fpkt"];
181--6127[label="1;31pkt 31fpkt"];
181--7427[label="1;31pkt 31fpkt"];
4132--6127[label="1;170pkt 170fpkt"];
4132--7427[label="1;170pkt 170fpkt"];
6127--7427[label="1;170pkt 170fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.198.172.87" src_port="65063"/>
    </slice>
    <from sec="1039669207" usec="0"/>
    <to sec="1039669246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="138.186.54.88"/>
    </slice>
    <from sec="1039669405" usec="0"/>
    <to sec="1039669927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.101.156.88"/>
    </slice>
    <from sec="1039669916" usec="0"/>
    <to sec="1039669924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.37.236.88"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.109.83.89"/>
    </slice>
    <from sec="1039669532" usec="0"/>
    <to sec="1039669662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.160.214.89"/>
    </slice>
    <from sec="1039669336" usec="0"/>
    <to sec="1039669368" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_737{
style=filled;
color=gray75;
1472[label="138.7.236.89;s;2pkt 2fpkt", shape=diamond, color=yellow];
1760[label="220.248.23.225;d;2pkt 2fpkt", shape=diamond, color=yellow];
4157[label="138.7.236.89;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6142[label="138.7.236.89;1pkt 1fpkt", shape=invtriangle, color=brown];
7439[label="138.7.236.89;1pkt 1fpkt", shape=invhouse, color=bisque];
stat737[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.7.9.234:0, 220.248.23.225:0}[33.3333%]&lt;BR/&gt;{138.7.236.89:4690, 223.235.69.248:80}[33.3333%]&lt;BR/&gt;{138.7.236.89:4691, 220.248.23.225:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.75%)&lt;BR/&gt; 4690: (25%)&lt;BR/&gt; 4691: (18.75%)&lt;BR/&gt; 0: (12.5%)&gt;];
}
1472--1760[label="0.5;1pkt 1fpkt"];
1472--4157[label="1;2pkt 2fpkt"];
1472--6142[label="1;1pkt 1fpkt"];
1472--7439[label="1;1pkt 1fpkt"];
1760--4157[label="0.5;1pkt 1fpkt"];
4157--6142[label="1;1pkt 1fpkt"];
4157--7439[label="1;1pkt 1fpkt"];
6142--7439[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="220.248.23.225" dst_port="80" src_ip="138.7.236.89" src_port="4691"/>
      <filter dst_ip="223.235.69.248" dst_port="80" src_ip="138.7.236.89" src_port="4690"/>
      <filter dst_ip="220.248.23.225" src_ip="138.7.9.234"/>
    </slice>
    <from sec="1039669405" usec="0"/>
    <to sec="1039669445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.76.85.90"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_739{
style=filled;
color=gray75;
2011[label="140.3.22.91;d;41pkt 41fpkt", shape=diamond, color=yellow];
2012[label="202.148.137.185;s;81pkt 81fpkt", shape=diamond, color=yellow];
2863[label="140.3.22.91;d;41pkt 41fpkt", shape=hexagon, color=black];
4173[label="202.148.190.91;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5005[label="202.148.137.185;80pkt 80fpkt", shape=pentagon, color=darkviolet];
5355[label="197.65.42.232;27pkt 27fpkt", shape=pentagon, color=darkviolet];
6145[label="196.41.91.90;4pkt 4fpkt", shape=invtriangle, color=brown];
6153[label="202.148.190.91;9pkt 9fpkt", shape=invtriangle, color=brown];
6710[label="202.148.137.185;81pkt 81fpkt", shape=invtriangle, color=brown];
7791[label="202.148.137.185;81pkt 81fpkt", shape=invhouse, color=bisque];
stat739[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 140.3.22.91:*}[49.2754%]&lt;BR/&gt;{202.148.137.185:80, 140.3.105.93:*}[40.5797%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7797%)&lt;BR/&gt; 1044: (0.881057%)&lt;BR/&gt; 1043: (0.770925%)&lt;BR/&gt; 1494: (0.660793%)&lt;BR/&gt; 1493: (0.660793%)&gt;];
}
2011--2012[label="0.243902;10pkt 10fpkt"];
2011--2098[label="0.0487805;2pkt 2fpkt"];
2011--2863[label="1;41pkt 41fpkt"];
2011--4162[label="0.4;2pkt 2fpkt"];
2011--4173[label="0.444444;4pkt 4fpkt"];
2011--5005[label="0.243902;10pkt 10fpkt"];
2011--5355[label="0.296296;8pkt 8fpkt"];
2011--6145[label="0.5;2pkt 2fpkt"];
2011--6153[label="0.444444;4pkt 4fpkt"];
2011--6710[label="0.243902;10pkt 10fpkt"];
2011--7791[label="0.243902;10pkt 10fpkt"];
2012--2096[label="0.691358;56pkt 56fpkt"];
2012--2863[label="0.243902;10pkt 10fpkt"];
2012--3041[label="0.691358;56pkt 56fpkt"];
2012--5005[label="1;80pkt 80fpkt"];
2012--6710[label="1;81pkt 81fpkt"];
2012--7791[label="1;81pkt 81fpkt"];
2863--4162[label="0.4;2pkt 2fpkt"];
2863--4173[label="0.444444;4pkt 4fpkt"];
2863--5005[label="0.243902;10pkt 10fpkt"];
2863--5355[label="0.296296;8pkt 8fpkt"];
2863--6145[label="0.5;2pkt 2fpkt"];
2863--6153[label="0.444444;4pkt 4fpkt"];
2863--6710[label="0.243902;10pkt 10fpkt"];
2863--7791[label="0.243902;10pkt 10fpkt"];
4173--6153[label="1;9pkt 9fpkt"];
5005--6710[label="1;80pkt 80fpkt"];
5005--7791[label="1;80pkt 80fpkt"];
6710--7791[label="1;81pkt 81fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.22.91" src_port="80"/>
      <filter dst_ip="140.3.105.93" src_ip="202.148.137.185" src_port="80"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669916" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_740{
style=filled;
color=gray75;
671[label="172.93.144.32;d;67pkt 67fpkt", shape=diamond, color=yellow];
1271[label="192.36.223.125;s;1pkt 1fpkt", shape=diamond, color=yellow];
4164[label="96.48.115.90;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4457[label="192.36.223.125;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat740[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:4662, 172.93.144.32:*}[48.5714%]&lt;BR/&gt;{*:0, 172.93.144.32:0}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (28.7671%)&lt;BR/&gt; 4662: (24.6575%)&lt;BR/&gt; 80: (2.73973%)&lt;BR/&gt; 2162: (2.05479%)&lt;BR/&gt; 1987: (2.05479%)&gt;];
}
671--1271[label="1;1pkt 1fpkt"];
671--4164[label="0.25;1pkt 1fpkt"];
671--4457[label="1;1pkt 1fpkt"];
1271--4457[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.93.144.32" src_port="4662"/>
      <filter dst_ip="172.93.144.32"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_741{
style=filled;
color=gray75;
855[label="96.104.213.154;d;1pkt 1fpkt", shape=diamond, color=yellow];
4169[label="148.110.22.91;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat741[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.110.22.91:1801, 197.131.21.117:2797}[50%]&lt;BR/&gt;{148.110.22.91:1801, 96.104.213.154:3653}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1801: (50%)&lt;BR/&gt; 3653: (33.3333%)&lt;BR/&gt; 2797: (16.6667%)&gt;];
}
855--4169[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="96.104.213.154" dst_port="3653" src_ip="148.110.22.91" src_port="1801"/>
      <filter dst_ip="197.131.21.117" dst_port="2797" src_ip="148.110.22.91" src_port="1801"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,011,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_742{
style=filled;
color=gray75;
1122[label="140.3.240.206;d;424pkt 424fpkt", shape=diamond, color=yellow];
3059[label="140.3.240.206;d;424pkt 424fpkt", shape=hexagon, color=black];
3704[label="197.220.166.43;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3769[label="197.220.166.50;132pkt 132fpkt", shape=pentagon, color=darkviolet];
3771[label="197.220.166.51;131pkt 131fpkt", shape=pentagon, color=darkviolet];
4172[label="196.245.144.91;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5049[label="196.13.27.193;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5170[label="196.13.27.208;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5200[label="196.13.27.211;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5852[label="197.220.166.43;5pkt 5fpkt", shape=invtriangle, color=brown];
5898[label="197.220.166.50;132pkt 132fpkt", shape=invtriangle, color=brown];
6732[label="196.13.27.193;7pkt 7fpkt", shape=invtriangle, color=brown];
6813[label="196.13.27.208;7pkt 7fpkt", shape=invtriangle, color=brown];
6833[label="196.13.27.211;8pkt 8fpkt", shape=invtriangle, color=brown];
7250[label="197.220.166.43;6pkt 6fpkt", shape=invhouse, color=bisque];
7280[label="197.220.166.50;131pkt 131fpkt", shape=invhouse, color=bisque];
7864[label="196.13.27.208;7pkt 7fpkt", shape=invhouse, color=bisque];
stat742[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.220.166.50:80, 140.3.240.206:*}[30.8411%]&lt;BR/&gt;{197.220.166.51:80, 140.3.240.206:*}[30.8411%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3439%)&lt;BR/&gt; 110: (0.276243%)&lt;BR/&gt; 7001: (0.207182%)&lt;BR/&gt; 4073: (0.207182%)&lt;BR/&gt; 4181: (0.172652%)&gt;];
}
1122--1232[label="0.0243902;5pkt 5fpkt"];
1122--1318[label="0.00540541;1pkt 1fpkt"];
1122--1367[label="0.0259067;5pkt 5fpkt"];
1122--2098[label="0.0222222;2pkt 2fpkt"];
1122--2265[label="0.00793651;1pkt 1fpkt"];
1122--2314[label="0.0121951;1pkt 1fpkt"];
1122--2688[label="0.00540541;1pkt 1fpkt"];
1122--3059[label="1;424pkt 424fpkt"];
1122--3648[label="0.019685;5pkt 5fpkt"];
1122--3704[label="1;6pkt 6fpkt"];
1122--3769[label="1;132pkt 132fpkt"];
1122--3771[label="1;131pkt 131fpkt"];
1122--4172[label="0.2;1pkt 1fpkt"];
1122--4522[label="0.00704225;1pkt 1fpkt"];
1122--4976[label="0.00961538;1pkt 1fpkt"];
1122--5049[label="1;8pkt 8fpkt"];
1122--5054[label="0.212121;7pkt 7fpkt"];
1122--5170[label="1;8pkt 8fpkt"];
1122--5200[label="1;7pkt 7fpkt"];
1122--5513[label="0.00492611;1pkt 1fpkt"];
1122--5852[label="1;5pkt 5fpkt"];
1122--5898[label="1;132pkt 132fpkt"];
1122--6389[label="0.00699301;1pkt 1fpkt"];
1122--6732[label="1;7pkt 7fpkt"];
1122--6813[label="1;7pkt 7fpkt"];
1122--6833[label="1;8pkt 8fpkt"];
1122--7046[label="0.00492611;1pkt 1fpkt"];
1122--7250[label="1;6pkt 6fpkt"];
1122--7280[label="1;131pkt 131fpkt"];
1122--7588[label="0.00699301;1pkt 1fpkt"];
1122--7864[label="1;7pkt 7fpkt"];
1122--8013[label="0.0049505;1pkt 1fpkt"];
3059--3648[label="0.019685;5pkt 5fpkt"];
3059--3704[label="1;6pkt 6fpkt"];
3059--3769[label="1;132pkt 132fpkt"];
3059--3771[label="1;131pkt 131fpkt"];
3059--4172[label="0.2;1pkt 1fpkt"];
3059--4522[label="0.00704225;1pkt 1fpkt"];
3059--4976[label="0.00961538;1pkt 1fpkt"];
3059--5049[label="1;8pkt 8fpkt"];
3059--5054[label="0.212121;7pkt 7fpkt"];
3059--5170[label="1;8pkt 8fpkt"];
3059--5200[label="1;7pkt 7fpkt"];
3059--5513[label="0.00492611;1pkt 1fpkt"];
3059--5852[label="1;5pkt 5fpkt"];
3059--5898[label="1;132pkt 132fpkt"];
3059--6389[label="0.00699301;1pkt 1fpkt"];
3059--6732[label="1;7pkt 7fpkt"];
3059--6813[label="1;7pkt 7fpkt"];
3059--6833[label="1;8pkt 8fpkt"];
3059--7046[label="0.00492611;1pkt 1fpkt"];
3059--7250[label="1;6pkt 6fpkt"];
3059--7280[label="1;131pkt 131fpkt"];
3059--7588[label="0.00699301;1pkt 1fpkt"];
3059--7864[label="1;7pkt 7fpkt"];
3059--8013[label="0.0049505;1pkt 1fpkt"];
3704--5852[label="1;5pkt 5fpkt"];
3704--7250[label="1;6pkt 6fpkt"];
3769--5898[label="1;132pkt 132fpkt"];
3769--7280[label="1;131pkt 131fpkt"];
5049--6732[label="1;7pkt 7fpkt"];
5170--6813[label="1;7pkt 7fpkt"];
5170--7864[label="1;7pkt 7fpkt"];
5200--6833[label="1;7pkt 7fpkt"];
5852--7250[label="1;5pkt 5fpkt"];
5898--7280[label="1;131pkt 131fpkt"];
6813--7864[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.240.206" src_ip="197.220.166.51" src_port="80"/>
      <filter dst_ip="140.3.240.206" src_ip="197.220.166.50" src_port="80"/>
    </slice>
    <from sec="1039669202" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_743{
style=filled;
color=gray75;
4175[label="196.179.209.91;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6155[label="196.179.209.91;12pkt 12fpkt", shape=invtriangle, color=brown];
stat743[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.179.209.91:80, 138.186.51.0:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4199: (4.16667%)&lt;BR/&gt; 4198: (4.16667%)&lt;BR/&gt; 4197: (4.16667%)&lt;BR/&gt; 4196: (4.16667%)&gt;];
}
4175--6155[label="1;12pkt 12fpkt"];
4175--7444[label="1;12pkt 12fpkt"];
6155--7444[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.51.0" src_ip="196.179.209.91" src_port="80"/>
    </slice>
    <from sec="1039669207" usec="0"/>
    <to sec="1039669904" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_744{
style=filled;
color=gray75;
1655[label="96.6.133.92;s;2pkt 2fpkt", shape=diamond, color=yellow];
4182[label="96.6.133.92;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6162[label="96.6.133.92;1pkt 1fpkt", shape=invtriangle, color=brown];
7450[label="96.6.133.92;1pkt 1fpkt", shape=invhouse, color=bisque];
stat744[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.6.133.92:4040, 148.110.147.12:4040}[50%]&lt;BR/&gt;{96.6.133.92:4040, 148.110.147.12:4493}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4040: (60%)&lt;BR/&gt; 4493: (40%)&gt;];
}
1655--4182[label="1;1pkt 1fpkt"];
1655--6162[label="1;1pkt 1fpkt"];
1655--7450[label="1;1pkt 1fpkt"];
4182--6162[label="1;1pkt 1fpkt"];
4182--7450[label="1;1pkt 1fpkt"];
6162--7450[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.147.12" dst_port="4493" src_ip="96.6.133.92" src_port="4040"/>
      <filter dst_ip="148.110.147.12" dst_port="4040" src_ip="96.6.133.92" src_port="4040"/>
    </slice>
    <from sec="1039669204" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.104.136.92"/>
    </slice>
    <from sec="1039669885" usec="0"/>
    <to sec="1039669924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.45.38.93"/>
    </slice>
    <from sec="1039669529" usec="0"/>
    <to sec="1039669552" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.90.75.93"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19604,1.81002,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_749{
style=filled;
color=gray75;
180[label="197.70.196.85s;1pkt 1fpkt", shape=rectangle, color=red];
437[label="214.216.48.172;d;8369pkt 8369fpkt", shape=diamond, color=yellow];
979[label="169.126.143.67;d;450pkt 450fpkt", shape=diamond, color=yellow];
1051[label="221.47.8.235;d;726pkt 726fpkt", shape=diamond, color=yellow];
1063[label="140.3.59.50;d;488pkt 488fpkt", shape=diamond, color=yellow];
1073[label="214.216.48.174;d;744pkt 744fpkt", shape=diamond, color=yellow];
1186[label="197.17.150.227;s;1267pkt 1267fpkt", shape=diamond, color=yellow];
1244[label="36.214.28.50;s;2pkt 2fpkt", shape=diamond, color=yellow];
1269[label="221.50.153.157;d;55pkt 55fpkt", shape=diamond, color=yellow];
1364[label="214.216.53.80;d;374pkt 374fpkt", shape=diamond, color=yellow];
1453[label="140.3.134.171;d;36pkt 36fpkt", shape=diamond, color=yellow];
1536[label="138.165.208.233;d;304pkt 304fpkt", shape=diamond, color=yellow];
1831[label="221.165.24.78;s;1pkt 1fpkt", shape=diamond, color=yellow];
1875[label="36.11.46.145;s;2pkt 2fpkt", shape=diamond, color=yellow];
1946[label="197.231.164.5;s;37pkt 37fpkt", shape=diamond, color=yellow];
2151[label="169.126.165.148;d;94pkt 94fpkt", shape=diamond, color=yellow];
2153[label="36.83.14.224;s;20pkt 20fpkt", shape=diamond, color=yellow];
2246[label="201.180.123.239;s;3pkt 3fpkt", shape=diamond, color=yellow];
2258[label="215.87.66.226;d;247pkt 247fpkt", shape=diamond, color=yellow];
2269[label="214.160.196.127;s;1pkt 1fpkt", shape=diamond, color=yellow];
2293[label="214.139.4.8;s;5pkt 5fpkt", shape=diamond, color=yellow];
2302[label="214.216.48.184;d;286pkt 286fpkt", shape=diamond, color=yellow];
2327[label="215.53.165.222;s;1pkt 1fpkt", shape=diamond, color=yellow];
2613[label="214.216.53.80;d;354pkt 354fpkt", shape=hexagon, color=black];
2636[label="140.3.134.171;d;36pkt 36fpkt", shape=hexagon, color=black];
3016[label="138.165.208.233;d;304pkt 304fpkt", shape=hexagon, color=black];
3033[label="140.3.59.50;d;488pkt 488fpkt", shape=hexagon, color=black];
3043[label="214.139.4.8;s;5pkt 5fpkt", shape=hexagon, color=black];
3050[label="214.216.48.184;d;286pkt 286fpkt", shape=hexagon, color=black];
3240[label="166.144.7.4;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3271[label="197.231.164.5;44pkt 44fpkt", shape=pentagon, color=darkviolet];
3274[label="129.113.206.5;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3305[label="214.139.4.8;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3307[label="208.180.69.8;23pkt 23fpkt", shape=pentagon, color=darkviolet];
3367[label="166.144.7.13;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3612[label="215.88.162.34;18pkt 18fpkt", shape=pentagon, color=darkviolet];
3622[label="201.163.13.36;29pkt 29fpkt", shape=pentagon, color=darkviolet];
3663[label="193.85.34.39;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3683[label="38.20.102.41;181pkt 181fpkt", shape=pentagon, color=darkviolet];
3730[label="201.146.102.47;195pkt 195fpkt", shape=pentagon, color=darkviolet];
3836[label="98.139.92.58;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3911[label="215.17.7.66;19pkt 19fpkt", shape=pentagon, color=darkviolet];
4019[label="38.82.136.76;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4085[label="36.83.14.83;31pkt 31fpkt", shape=pentagon, color=darkviolet];
4110[label="215.218.54.85;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4201[label="215.219.109.93;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4215[label="217.242.239.94;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4353[label="201.188.104.111;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4362[label="201.58.1.113;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4441[label="221.6.48.123;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4446[label="198.42.192.123;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4540[label="221.186.178.134;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4542[label="36.161.203.134;18pkt 18fpkt", shape=pentagon, color=darkviolet];
4551[label="197.17.150.135;132pkt 132fpkt", shape=pentagon, color=darkviolet];
4565[label="96.45.185.136;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4632[label="192.103.99.145;17pkt 17fpkt", shape=pentagon, color=darkviolet];
4659[label="223.133.3.148;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4677[label="215.37.236.149;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4690[label="166.144.7.152;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4705[label="166.144.7.154;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4712[label="201.161.160.154;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4735[label="197.231.172.156;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4755[label="36.187.77.159;31pkt 31fpkt", shape=pentagon, color=darkviolet];
4765[label="193.80.104.160;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4871[label="201.100.17.171;39pkt 39fpkt", shape=pentagon, color=darkviolet];
4886[label="215.88.161.172;18pkt 18fpkt", shape=pentagon, color=darkviolet];
4892[label="201.29.87.173;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4903[label="201.37.150.174;53pkt 53fpkt", shape=pentagon, color=darkviolet];
5006[label="215.88.143.185;145pkt 145fpkt", shape=pentagon, color=darkviolet];
5038[label="215.17.122.190;218pkt 218fpkt", shape=pentagon, color=darkviolet];
5046[label="221.18.131.192;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5071[label="141.64.181.195;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5092[label="38.64.32.198;23pkt 23fpkt", shape=pentagon, color=darkviolet];
5119[label="170.223.141.201;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5138[label="211.193.33.204;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5178[label="208.166.186.208;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5291[label="36.83.14.224;25pkt 25fpkt", shape=pentagon, color=darkviolet];
5305[label="170.223.173.225;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5361[label="197.17.150.232;135pkt 135fpkt", shape=pentagon, color=darkviolet];
5365[label="211.12.230.232;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5371[label="197.17.150.233;78pkt 78fpkt", shape=pentagon, color=darkviolet];
5450[label="96.192.51.244;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5481[label="196.179.217.248;33pkt 33fpkt", shape=pentagon, color=darkviolet];
5489[label="223.244.137.250;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5502[label="196.179.217.251;22pkt 22fpkt", shape=pentagon, color=darkviolet];
5511[label="36.83.14.253;23pkt 23fpkt", shape=pentagon, color=darkviolet];
5577[label="197.231.164.5;43pkt 43fpkt", shape=invtriangle, color=brown];
5601[label="214.139.4.8;5pkt 5fpkt", shape=invtriangle, color=brown];
5602[label="208.180.69.8;23pkt 23fpkt", shape=invtriangle, color=brown];
5639[label="166.144.7.13;6pkt 6fpkt", shape=invtriangle, color=brown];
5697[label="197.194.225.19;1pkt 1fpkt", shape=invtriangle, color=brown];
5797[label="215.88.162.34;19pkt 19fpkt", shape=invtriangle, color=brown];
5838[label="38.20.102.41;182pkt 182fpkt", shape=invtriangle, color=brown];
5871[label="201.146.102.47;195pkt 195fpkt", shape=invtriangle, color=brown];
5939[label="98.139.92.58;10pkt 10fpkt", shape=invtriangle, color=brown];
6059[label="38.82.136.76;2pkt 2fpkt", shape=invtriangle, color=brown];
6098[label="36.83.14.83;32pkt 32fpkt", shape=invtriangle, color=brown];
6115[label="215.218.54.85;2pkt 2fpkt", shape=invtriangle, color=brown];
6174[label="215.219.109.93;4pkt 4fpkt", shape=invtriangle, color=brown];
6188[label="166.178.50.96;1pkt 1fpkt", shape=invtriangle, color=brown];
6278[label="201.58.1.113;9pkt 9fpkt", shape=invtriangle, color=brown];
6332[label="221.6.48.123;4pkt 4fpkt", shape=invtriangle, color=brown];
6334[label="198.42.192.123;9pkt 9fpkt", shape=invtriangle, color=brown];
6402[label="221.186.178.134;13pkt 13fpkt", shape=invtriangle, color=brown];
6404[label="36.161.203.134;19pkt 19fpkt", shape=invtriangle, color=brown];
6412[label="197.17.150.135;131pkt 131fpkt", shape=invtriangle, color=brown];
6422[label="96.45.185.136;3pkt 3fpkt", shape=invtriangle, color=brown];
6462[label="192.103.99.145;17pkt 17fpkt", shape=invtriangle, color=brown];
6492[label="215.37.236.149;2pkt 2fpkt", shape=invtriangle, color=brown];
6500[label="166.144.7.152;4pkt 4fpkt", shape=invtriangle, color=brown];
6510[label="166.144.7.154;9pkt 9fpkt", shape=invtriangle, color=brown];
6516[label="201.161.160.154;10pkt 10fpkt", shape=invtriangle, color=brown];
6530[label="197.231.172.156;7pkt 7fpkt", shape=invtriangle, color=brown];
6544[label="36.187.77.159;30pkt 30fpkt", shape=invtriangle, color=brown];
6636[label="215.88.161.172;19pkt 19fpkt", shape=invtriangle, color=brown];
6639[label="201.29.87.173;6pkt 6fpkt", shape=invtriangle, color=brown];
6645[label="201.37.150.174;53pkt 53fpkt", shape=invtriangle, color=brown];
6711[label="215.88.143.185;145pkt 145fpkt", shape=invtriangle, color=brown];
6742[label="141.64.181.195;7pkt 7fpkt", shape=invtriangle, color=brown];
6791[label="211.193.33.204;7pkt 7fpkt", shape=invtriangle, color=brown];
6818[label="208.166.186.208;1pkt 1fpkt", shape=invtriangle, color=brown];
6936[label="211.12.230.232;7pkt 7fpkt", shape=invtriangle, color=brown];
6939[label="197.17.150.233;77pkt 77fpkt", shape=invtriangle, color=brown];
7000[label="96.192.51.244;3pkt 3fpkt", shape=invtriangle, color=brown];
7038[label="196.179.217.251;23pkt 23fpkt", shape=invtriangle, color=brown];
7044[label="36.83.14.253;24pkt 24fpkt", shape=invtriangle, color=brown];
7086[label="197.231.164.5;44pkt 44fpkt", shape=invhouse, color=bisque];
7099[label="214.139.4.8;4pkt 4fpkt", shape=invhouse, color=bisque];
7241[label="38.20.102.41;181pkt 181fpkt", shape=invhouse, color=bisque];
7305[label="98.139.92.58;10pkt 10fpkt", shape=invhouse, color=bisque];
7409[label="36.83.14.83;31pkt 31fpkt", shape=invhouse, color=bisque];
7420[label="215.218.54.85;1pkt 1fpkt", shape=invhouse, color=bisque];
7513[label="201.58.1.113;10pkt 10fpkt", shape=invhouse, color=bisque];
7545[label="198.42.192.123;10pkt 10fpkt", shape=invhouse, color=bisque];
7571[label="99.188.10.130;3pkt 3fpkt", shape=invhouse, color=bisque];
7600[label="197.17.150.135;132pkt 132fpkt", shape=invhouse, color=bisque];
7654[label="215.37.236.149;1pkt 1fpkt", shape=invhouse, color=bisque];
7658[label="166.144.7.152;3pkt 3fpkt", shape=invhouse, color=bisque];
7666[label="166.144.7.154;9pkt 9fpkt", shape=invhouse, color=bisque];
7671[label="201.161.160.154;10pkt 10fpkt", shape=invhouse, color=bisque];
7678[label="197.231.172.156;8pkt 8fpkt", shape=invhouse, color=bisque];
7749[label="201.29.87.173;7pkt 7fpkt", shape=invhouse, color=bisque];
7752[label="201.37.150.174;54pkt 54fpkt", shape=invhouse, color=bisque];
7792[label="215.88.143.185;145pkt 145fpkt", shape=invhouse, color=bisque];
7846[label="211.193.33.204;7pkt 7fpkt", shape=invhouse, color=bisque];
7950[label="197.17.150.233;77pkt 77fpkt", shape=invhouse, color=bisque];
7984[label="36.187.127.243;18pkt 18fpkt", shape=invhouse, color=bisque];
7989[label="96.192.51.244;2pkt 2fpkt", shape=invhouse, color=bisque];
8011[label="36.83.14.253;24pkt 24fpkt", shape=invhouse, color=bisque];
stat749[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 214.216.48.172:53}[64.1069%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (52.4771%)&lt;BR/&gt; 80: (1.49697%)&lt;BR/&gt; 1289: (1.3122%)&lt;BR/&gt; 1024: (1.14616%)&lt;BR/&gt; 0: (1.09796%)&gt;];
}
180--437[label="1;1pkt 1fpkt"];
437--1186[label="0.945541;1198pkt 1198fpkt"];
437--1244[label="1;2pkt 2fpkt"];
437--1605[label="1;1pkt 1fpkt"];
437--1831[label="1;1pkt 1fpkt"];
437--1875[label="1;2pkt 2fpkt"];
437--1946[label="0.027027;1pkt 1fpkt"];
437--2153[label="0.05;1pkt 1fpkt"];
437--2246[label="0.333333;1pkt 1fpkt"];
437--2269[label="1;1pkt 1fpkt"];
437--2293[label="0.2;1pkt 1fpkt"];
437--2327[label="1;1pkt 1fpkt"];
437--2700[label="1;1pkt 1fpkt"];
437--3043[label="0.2;1pkt 1fpkt"];
437--3179[label="0.016129;11pkt 11fpkt"];
437--3180[label="0.0022792;4pkt 4fpkt"];
437--3181[label="0.00544465;3pkt 3fpkt"];
437--3182[label="0.00470746;7pkt 7fpkt"];
437--3183[label="0.00692521;5pkt 5fpkt"];
437--3184[label="0.00371978;6pkt 6fpkt"];
437--3187[label="0.016129;11pkt 11fpkt"];
437--3188[label="0.0022792;4pkt 4fpkt"];
437--3240[label="0.2;1pkt 1fpkt"];
437--3271[label="0.0227273;1pkt 1fpkt"];
437--3274[label="0.0909091;1pkt 1fpkt"];
437--3305[label="0.25;1pkt 1fpkt"];
437--3307[label="0.0434783;1pkt 1fpkt"];
437--3367[label="0.2;1pkt 1fpkt"];
437--3612[label="0.0555556;1pkt 1fpkt"];
437--3622[label="0.0689655;2pkt 2fpkt"];
437--3663[label="0.166667;1pkt 1fpkt"];
437--3683[label="0.955801;173pkt 173fpkt"];
437--3730[label="0.102564;20pkt 20fpkt"];
437--3836[label="0.1;1pkt 1fpkt"];
437--4019[label="1;1pkt 1fpkt"];
437--4085[label="0.0322581;1pkt 1fpkt"];
437--4110[label="1;1pkt 1fpkt"];
437--4201[label="0.25;1pkt 1fpkt"];
437--4215[label="1;1pkt 1fpkt"];
437--4353[label="0.857143;6pkt 6fpkt"];
437--4362[label="0.1;1pkt 1fpkt"];
437--4446[label="0.1;1pkt 1fpkt"];
437--4540[label="0.0714286;1pkt 1fpkt"];
437--4542[label="0.0555556;1pkt 1fpkt"];
437--4551[label="0.984848;130pkt 130fpkt"];
437--4565[label="0.5;1pkt 1fpkt"];
437--4632[label="0.0588235;1pkt 1fpkt"];
437--4659[label="0.333333;1pkt 1fpkt"];
437--4677[label="0.5;1pkt 1fpkt"];
437--4690[label="0.25;1pkt 1fpkt"];
437--4705[label="0.125;1pkt 1fpkt"];
437--4712[label="0.111111;1pkt 1fpkt"];
437--4735[label="0.142857;1pkt 1fpkt"];
437--4755[label="0.0322581;1pkt 1fpkt"];
437--4765[label="1;1pkt 1fpkt"];
437--4886[label="0.0555556;1pkt 1fpkt"];
437--4892[label="0.142857;1pkt 1fpkt"];
437--4903[label="0.0188679;1pkt 1fpkt"];
437--5000[label="0.307692;4pkt 4fpkt"];
437--5006[label="0.765517;111pkt 111fpkt"];
437--5046[label="0.2;1pkt 1fpkt"];
437--5119[label="0.25;1pkt 1fpkt"];
437--5138[label="0.125;1pkt 1fpkt"];
437--5159[label="0.0714286;1pkt 1fpkt"];
437--5178[label="0.5;1pkt 1fpkt"];
437--5186[label="0.25;1pkt 1fpkt"];
437--5291[label="0.04;1pkt 1fpkt"];
437--5305[label="0.142857;1pkt 1fpkt"];
437--5317[label="0.946288;1198pkt 1198fpkt"];
437--5361[label="0.740741;100pkt 100fpkt"];
437--5365[label="0.142857;1pkt 1fpkt"];
437--5371[label="0.974359;76pkt 76fpkt"];
437--5450[label="0.333333;1pkt 1fpkt"];
437--5481[label="0.030303;1pkt 1fpkt"];
437--5489[label="1;1pkt 1fpkt"];
437--5502[label="0.0454545;1pkt 1fpkt"];
437--5511[label="0.0434783;1pkt 1fpkt"];
437--5577[label="0.0232558;1pkt 1fpkt"];
437--5601[label="0.2;1pkt 1fpkt"];
437--5602[label="0.0434783;1pkt 1fpkt"];
437--5639[label="0.166667;1pkt 1fpkt"];
437--5697[label="1;1pkt 1fpkt"];
437--5797[label="0.0526316;1pkt 1fpkt"];
437--5838[label="0.956044;174pkt 174fpkt"];
437--5871[label="0.102564;20pkt 20fpkt"];
437--5939[label="0.1;1pkt 1fpkt"];
437--6059[label="0.5;1pkt 1fpkt"];
437--6098[label="0.03125;1pkt 1fpkt"];
437--6115[label="0.5;1pkt 1fpkt"];
437--6174[label="0.25;1pkt 1fpkt"];
437--6188[label="1;1pkt 1fpkt"];
437--6278[label="0.111111;1pkt 1fpkt"];
437--6334[label="0.111111;1pkt 1fpkt"];
437--6402[label="0.0769231;1pkt 1fpkt"];
437--6404[label="0.0526316;1pkt 1fpkt"];
437--6412[label="0.992366;130pkt 130fpkt"];
437--6422[label="0.333333;1pkt 1fpkt"];
437--6462[label="0.0588235;1pkt 1fpkt"];
437--6492[label="0.5;1pkt 1fpkt"];
437--6500[label="0.25;1pkt 1fpkt"];
437--6510[label="0.111111;1pkt 1fpkt"];
437--6516[label="0.1;1pkt 1fpkt"];
437--6530[label="0.142857;1pkt 1fpkt"];
437--6544[label="0.0333333;1pkt 1fpkt"];
437--6636[label="0.0526316;1pkt 1fpkt"];
437--6639[label="0.166667;1pkt 1fpkt"];
437--6645[label="0.0188679;1pkt 1fpkt"];
437--6706[label="0.307692;4pkt 4fpkt"];
437--6711[label="0.765517;111pkt 111fpkt"];
437--6791[label="0.142857;1pkt 1fpkt"];
437--6818[label="1;1pkt 1fpkt"];
437--6936[label="0.142857;1pkt 1fpkt"];
437--6939[label="0.974026;75pkt 75fpkt"];
437--7000[label="0.333333;1pkt 1fpkt"];
437--7038[label="0.0434783;1pkt 1fpkt"];
437--7044[label="0.0416667;1pkt 1fpkt"];
437--7086[label="0.0227273;1pkt 1fpkt"];
437--7099[label="0.25;1pkt 1fpkt"];
437--7241[label="0.955801;173pkt 173fpkt"];
437--7305[label="0.1;1pkt 1fpkt"];
437--7409[label="0.0322581;1pkt 1fpkt"];
437--7420[label="1;1pkt 1fpkt"];
437--7513[label="0.1;1pkt 1fpkt"];
437--7545[label="0.1;1pkt 1fpkt"];
437--7600[label="0.984848;130pkt 130fpkt"];
437--7654[label="1;1pkt 1fpkt"];
437--7658[label="0.333333;1pkt 1fpkt"];
437--7666[label="0.111111;1pkt 1fpkt"];
437--7671[label="0.1;1pkt 1fpkt"];
437--7678[label="0.125;1pkt 1fpkt"];
437--7749[label="0.142857;1pkt 1fpkt"];
437--7752[label="0.0185185;1pkt 1fpkt"];
437--7792[label="0.765517;111pkt 111fpkt"];
437--7846[label="0.142857;1pkt 1fpkt"];
437--7950[label="0.974026;75pkt 75fpkt"];
437--7989[label="0.5;1pkt 1fpkt"];
437--8011[label="0.0416667;1pkt 1fpkt"];
979--3323[label="0.0454545;1pkt 1fpkt"];
979--3491[label="0.025641;1pkt 1fpkt"];
979--3587[label="0.0277778;1pkt 1fpkt"];
979--3776[label="0.111111;2pkt 2fpkt"];
979--3911[label="0.0526316;1pkt 1fpkt"];
979--4085[label="0.0322581;1pkt 1fpkt"];
979--4204[label="0.037037;1pkt 1fpkt"];
979--4441[label="0.25;1pkt 1fpkt"];
979--4540[label="0.142857;2pkt 2fpkt"];
979--4567[label="0.025;1pkt 1fpkt"];
979--4871[label="0.025641;1pkt 1fpkt"];
979--4903[label="0.0188679;1pkt 1fpkt"];
979--5034[label="0.00393701;1pkt 1fpkt"];
979--5038[label="0.0458716;10pkt 10fpkt"];
979--5071[label="0.142857;1pkt 1fpkt"];
979--5092[label="0.0434783;1pkt 1fpkt"];
979--5212[label="0.025641;1pkt 1fpkt"];
979--5240[label="0.0175439;1pkt 1fpkt"];
979--5481[label="0.030303;1pkt 1fpkt"];
979--5502[label="0.0454545;1pkt 1fpkt"];
979--5612[label="0.0454545;1pkt 1fpkt"];
979--5781[label="0.027027;1pkt 1fpkt"];
979--5902[label="0.111111;2pkt 2fpkt"];
979--6098[label="0.03125;1pkt 1fpkt"];
979--6177[label="0.037037;1pkt 1fpkt"];
979--6332[label="0.25;1pkt 1fpkt"];
979--6402[label="0.153846;2pkt 2fpkt"];
979--6404[label="0.0526316;1pkt 1fpkt"];
979--6516[label="0.1;1pkt 1fpkt"];
979--6645[label="0.0188679;1pkt 1fpkt"];
979--6742[label="0.142857;1pkt 1fpkt"];
979--6859[label="0.0175439;1pkt 1fpkt"];
979--7038[label="0.0434783;1pkt 1fpkt"];
979--7283[label="0.111111;2pkt 2fpkt"];
979--7409[label="0.0322581;1pkt 1fpkt"];
979--7571[label="0.333333;1pkt 1fpkt"];
979--7671[label="0.1;1pkt 1fpkt"];
979--7752[label="0.0185185;1pkt 1fpkt"];
979--7897[label="0.0175439;1pkt 1fpkt"];
1051--3184[label="0.00137741;1pkt 1fpkt"];
1051--3240[label="0.2;1pkt 1fpkt"];
1051--3307[label="0.0434783;1pkt 1fpkt"];
1051--3622[label="0.103448;3pkt 3fpkt"];
1051--3730[label="0.025641;5pkt 5fpkt"];
1051--3841[label="0.0952381;2pkt 2fpkt"];
1051--4085[label="0.0322581;1pkt 1fpkt"];
1051--4441[label="0.25;1pkt 1fpkt"];
1051--4576[label="0.0833333;1pkt 1fpkt"];
1051--4690[label="0.25;1pkt 1fpkt"];
1051--4705[label="0.125;1pkt 1fpkt"];
1051--4755[label="0.0322581;1pkt 1fpkt"];
1051--4871[label="0.025641;1pkt 1fpkt"];
1051--4892[label="0.142857;1pkt 1fpkt"];
1051--4896[label="0.0454545;1pkt 1fpkt"];
1051--5046[label="0.2;1pkt 1fpkt"];
1051--5092[label="0.0434783;1pkt 1fpkt"];
1051--5159[label="0.0714286;1pkt 1fpkt"];
1051--5178[label="0.5;1pkt 1fpkt"];
1051--5240[label="0.0175439;1pkt 1fpkt"];
1051--5602[label="0.0434783;1pkt 1fpkt"];
1051--5871[label="0.025641;5pkt 5fpkt"];
1051--5943[label="0.1;2pkt 2fpkt"];
1051--6098[label="0.03125;1pkt 1fpkt"];
1051--6332[label="0.25;1pkt 1fpkt"];
1051--6428[label="0.0909091;1pkt 1fpkt"];
1051--6500[label="0.25;1pkt 1fpkt"];
1051--6510[label="0.111111;1pkt 1fpkt"];
1051--6544[label="0.0333333;1pkt 1fpkt"];
1051--6859[label="0.0175439;1pkt 1fpkt"];
1051--7308[label="0.0952381;2pkt 2fpkt"];
1051--7409[label="0.0322581;1pkt 1fpkt"];
1051--7610[label="0.0909091;1pkt 1fpkt"];
1051--7658[label="0.333333;1pkt 1fpkt"];
1051--7666[label="0.111111;1pkt 1fpkt"];
1051--7749[label="0.142857;1pkt 1fpkt"];
1051--7897[label="0.0175439;1pkt 1fpkt"];
1063--1186[label="0.0122951;6pkt 6fpkt"];
1063--3033[label="1;488pkt 488fpkt"];
1063--3274[label="0.0909091;1pkt 1fpkt"];
1063--3307[label="0.0434783;1pkt 1fpkt"];
1063--3323[label="0.0454545;1pkt 1fpkt"];
1063--3491[label="0.025641;1pkt 1fpkt"];
1063--3587[label="0.0277778;1pkt 1fpkt"];
1063--3612[label="0.0555556;1pkt 1fpkt"];
1063--3836[label="0.1;1pkt 1fpkt"];
1063--3998[label="0.04;1pkt 1fpkt"];
1063--4029[label="0.333333;2pkt 2fpkt"];
1063--4085[label="0.0322581;1pkt 1fpkt"];
1063--4105[label="0.0384615;1pkt 1fpkt"];
1063--4362[label="0.1;1pkt 1fpkt"];
1063--4446[label="0.1;1pkt 1fpkt"];
1063--4567[label="0.025;1pkt 1fpkt"];
1063--4632[label="0.0588235;1pkt 1fpkt"];
1063--4746[label="0.0416667;1pkt 1fpkt"];
1063--4755[label="0.0322581;1pkt 1fpkt"];
1063--4871[label="0.025641;1pkt 1fpkt"];
1063--4886[label="0.0555556;1pkt 1fpkt"];
1063--4892[label="0.142857;1pkt 1fpkt"];
1063--4903[label="0.0188679;1pkt 1fpkt"];
1063--5046[label="0.2;1pkt 1fpkt"];
1063--5092[label="0.0434783;1pkt 1fpkt"];
1063--5138[label="0.125;1pkt 1fpkt"];
1063--5212[label="0.025641;1pkt 1fpkt"];
1063--5240[label="0.0175439;1pkt 1fpkt"];
1063--5305[label="0.142857;1pkt 1fpkt"];
1063--5317[label="0.0122951;6pkt 6fpkt"];
1063--5481[label="0.030303;1pkt 1fpkt"];
1063--5502[label="0.0454545;1pkt 1fpkt"];
1063--5602[label="0.0434783;1pkt 1fpkt"];
1063--5612[label="0.0454545;1pkt 1fpkt"];
1063--5781[label="0.027027;1pkt 1fpkt"];
1063--5797[label="0.0526316;1pkt 1fpkt"];
1063--5939[label="0.1;1pkt 1fpkt"];
1063--6047[label="0.0416667;1pkt 1fpkt"];
1063--6098[label="0.03125;1pkt 1fpkt"];
1063--6111[label="0.0384615;1pkt 1fpkt"];
1063--6334[label="0.111111;1pkt 1fpkt"];
1063--6462[label="0.0588235;1pkt 1fpkt"];
1063--6544[label="0.0333333;1pkt 1fpkt"];
1063--6636[label="0.0526316;1pkt 1fpkt"];
1063--6639[label="0.166667;1pkt 1fpkt"];
1063--6645[label="0.0188679;1pkt 1fpkt"];
1063--6859[label="0.0175439;1pkt 1fpkt"];
1063--7038[label="0.0434783;1pkt 1fpkt"];
1063--7305[label="0.1;1pkt 1fpkt"];
1063--7409[label="0.0322581;1pkt 1fpkt"];
1063--7513[label="0.1;1pkt 1fpkt"];
1063--7545[label="0.1;1pkt 1fpkt"];
1063--7749[label="0.142857;1pkt 1fpkt"];
1063--7752[label="0.0185185;1pkt 1fpkt"];
1063--7897[label="0.0175439;1pkt 1fpkt"];
1073--1186[label="0.00806452;6pkt 6fpkt"];
1073--1475[label="0.0166667;1pkt 1fpkt"];
1073--2246[label="0.333333;1pkt 1fpkt"];
1073--2293[label="0.2;1pkt 1fpkt"];
1073--2638[label="0.037037;1pkt 1fpkt"];
1073--3043[label="0.2;1pkt 1fpkt"];
1073--3180[label="0.00134409;1pkt 1fpkt"];
1073--3182[label="0.00134409;1pkt 1fpkt"];
1073--3183[label="0.00138504;1pkt 1fpkt"];
1073--3184[label="0.00134409;1pkt 1fpkt"];
1073--3188[label="0.00134409;1pkt 1fpkt"];
1073--3240[label="0.2;1pkt 1fpkt"];
1073--3305[label="0.25;1pkt 1fpkt"];
1073--3367[label="0.2;1pkt 1fpkt"];
1073--3612[label="0.0555556;1pkt 1fpkt"];
1073--3622[label="0.0689655;2pkt 2fpkt"];
1073--3663[label="0.166667;1pkt 1fpkt"];
1073--3730[label="0.00512821;1pkt 1fpkt"];
1073--3776[label="0.0555556;1pkt 1fpkt"];
1073--4446[label="0.1;1pkt 1fpkt"];
1073--4542[label="0.0555556;1pkt 1fpkt"];
1073--4551[label="0.00757576;1pkt 1fpkt"];
1073--4632[label="0.0588235;1pkt 1fpkt"];
1073--4659[label="0.333333;1pkt 1fpkt"];
1073--4677[label="0.5;1pkt 1fpkt"];
1073--4705[label="0.125;1pkt 1fpkt"];
1073--4755[label="0.0322581;1pkt 1fpkt"];
1073--4848[label="0.0666667;1pkt 1fpkt"];
1073--4892[label="0.142857;1pkt 1fpkt"];
1073--4896[label="0.0454545;1pkt 1fpkt"];
1073--4903[label="0.0188679;1pkt 1fpkt"];
1073--5000[label="0.0769231;1pkt 1fpkt"];
1073--5006[label="0.00689655;1pkt 1fpkt"];
1073--5138[label="0.125;1pkt 1fpkt"];
1073--5159[label="0.0714286;1pkt 1fpkt"];
1073--5305[label="0.142857;1pkt 1fpkt"];
1073--5317[label="0.00806452;6pkt 6fpkt"];
1073--5365[label="0.142857;1pkt 1fpkt"];
1073--5450[label="0.333333;1pkt 1fpkt"];
1073--5481[label="0.030303;1pkt 1fpkt"];
1073--5502[label="0.0454545;1pkt 1fpkt"];
1073--5601[label="0.2;1pkt 1fpkt"];
1073--5639[label="0.166667;1pkt 1fpkt"];
1073--5797[label="0.0526316;1pkt 1fpkt"];
1073--5871[label="0.00512821;1pkt 1fpkt"];
1073--5902[label="0.0555556;1pkt 1fpkt"];
1073--6115[label="0.5;1pkt 1fpkt"];
1073--6334[label="0.111111;1pkt 1fpkt"];
1073--6404[label="0.0526316;1pkt 1fpkt"];
1073--6462[label="0.0588235;1pkt 1fpkt"];
1073--6492[label="0.5;1pkt 1fpkt"];
1073--6510[label="0.111111;1pkt 1fpkt"];
1073--6544[label="0.0333333;1pkt 1fpkt"];
1073--6604[label="0.0666667;1pkt 1fpkt"];
1073--6639[label="0.166667;1pkt 1fpkt"];
1073--6645[label="0.0188679;1pkt 1fpkt"];
1073--6706[label="0.0769231;1pkt 1fpkt"];
1073--6711[label="0.00689655;1pkt 1fpkt"];
1073--6791[label="0.142857;1pkt 1fpkt"];
1073--6936[label="0.142857;1pkt 1fpkt"];
1073--7000[label="0.333333;1pkt 1fpkt"];
1073--7038[label="0.0434783;1pkt 1fpkt"];
1073--7099[label="0.25;1pkt 1fpkt"];
1073--7283[label="0.0555556;1pkt 1fpkt"];
1073--7545[label="0.1;1pkt 1fpkt"];
1073--7600[label="0.00757576;1pkt 1fpkt"];
1073--7666[label="0.111111;1pkt 1fpkt"];
1073--7672[label="0.0163934;1pkt 1fpkt"];
1073--7749[label="0.142857;1pkt 1fpkt"];
1073--7752[label="0.0185185;1pkt 1fpkt"];
1073--7792[label="0.00689655;1pkt 1fpkt"];
1073--7846[label="0.142857;1pkt 1fpkt"];
1186--1377[label="0.00980392;1pkt 1fpkt"];
1186--1790[label="0.00540541;2pkt 2fpkt"];
1186--1868[label="0.0060423;2pkt 2fpkt"];
1186--2258[label="0.00809717;2pkt 2fpkt"];
1186--2302[label="0.00699301;2pkt 2fpkt"];
1186--2307[label="0.0172414;2pkt 2fpkt"];
1186--2505[label="0.00257732;1pkt 1fpkt"];
1186--2654[label="0.0229885;2pkt 2fpkt"];
1186--2940[label="0.0117647;1pkt 1fpkt"];
1186--2949[label="0.0588235;3pkt 3fpkt"];
1186--3033[label="0.0122951;6pkt 6fpkt"];
1186--3050[label="0.00699301;2pkt 2fpkt"];
1186--3053[label="0.0172414;2pkt 2fpkt"];
1186--3139[label="0.0229885;2pkt 2fpkt"];
1186--3169[label="0.0172414;2pkt 2fpkt"];
1186--5317[label="1;1266pkt 1266fpkt"];
1269--3307[label="0.0434783;1pkt 1fpkt"];
1269--3612[label="0.0555556;1pkt 1fpkt"];
1269--4886[label="0.0555556;1pkt 1fpkt"];
1269--5602[label="0.0434783;1pkt 1fpkt"];
1269--5797[label="0.0526316;1pkt 1fpkt"];
1269--6636[label="0.0526316;1pkt 1fpkt"];
1364--2444[label="0.0026738;1pkt 1fpkt"];
1364--2613[label="1;354pkt 354fpkt"];
1364--3185[label="0.0106952;4pkt 4fpkt"];
1364--3283[label="0.30303;10pkt 10fpkt"];
1364--3612[label="0.0555556;1pkt 1fpkt"];
1364--3665[label="0.0026738;1pkt 1fpkt"];
1364--4204[label="0.037037;1pkt 1fpkt"];
1364--4540[label="0.428571;6pkt 6fpkt"];
1364--4756[label="0.0769231;1pkt 1fpkt"];
1364--4886[label="0.111111;2pkt 2fpkt"];
1364--4903[label="0.0566038;3pkt 3fpkt"];
1364--4904[label="0.0277778;1pkt 1fpkt"];
1364--5441[label="0.0555556;1pkt 1fpkt"];
1364--5461[label="0.142857;2pkt 2fpkt"];
1364--5586[label="0.30303;10pkt 10fpkt"];
1364--5797[label="0.0526316;1pkt 1fpkt"];
1364--5827[label="0.0026738;1pkt 1fpkt"];
1364--6177[label="0.037037;1pkt 1fpkt"];
1364--6402[label="0.461538;6pkt 6fpkt"];
1364--6636[label="0.105263;2pkt 2fpkt"];
1364--6645[label="0.0566038;3pkt 3fpkt"];
1364--6646[label="0.0285714;1pkt 1fpkt"];
1364--6992[label="0.0555556;1pkt 1fpkt"];
1364--7752[label="0.0555556;3pkt 3fpkt"];
1364--7984[label="0.0555556;1pkt 1fpkt"];
1453--1946[label="1;36pkt 36fpkt"];
1453--2636[label="1;36pkt 36fpkt"];
1453--3271[label="1;36pkt 36fpkt"];
1453--5577[label="0.972222;35pkt 35fpkt"];
1453--7086[label="1;36pkt 36fpkt"];
1536--3016[label="1;304pkt 304fpkt"];
1536--3274[label="0.0909091;1pkt 1fpkt"];
1536--3307[label="0.0434783;1pkt 1fpkt"];
1536--3323[label="0.0454545;1pkt 1fpkt"];
1536--3491[label="0.025641;1pkt 1fpkt"];
1536--3836[label="0.1;1pkt 1fpkt"];
1536--4502[label="0.0384615;1pkt 1fpkt"];
1536--4542[label="0.0555556;1pkt 1fpkt"];
1536--4567[label="0.025;1pkt 1fpkt"];
1536--4746[label="0.0416667;1pkt 1fpkt"];
1536--4755[label="0.0322581;1pkt 1fpkt"];
1536--5092[label="0.0434783;1pkt 1fpkt"];
1536--5159[label="0.0714286;1pkt 1fpkt"];
1536--5212[label="0.025641;1pkt 1fpkt"];
1536--5240[label="0.0175439;1pkt 1fpkt"];
1536--5481[label="0.030303;1pkt 1fpkt"];
1536--5602[label="0.0434783;1pkt 1fpkt"];
1536--5612[label="0.0454545;1pkt 1fpkt"];
1536--5939[label="0.1;1pkt 1fpkt"];
1536--6374[label="0.0384615;1pkt 1fpkt"];
1536--6404[label="0.0526316;1pkt 1fpkt"];
1536--6544[label="0.0333333;1pkt 1fpkt"];
1536--6859[label="0.0175439;1pkt 1fpkt"];
1536--7305[label="0.1;1pkt 1fpkt"];
1536--7897[label="0.0175439;1pkt 1fpkt"];
1946--2636[label="1;36pkt 36fpkt"];
1946--3271[label="1;37pkt 37fpkt"];
1946--5577[label="0.972973;36pkt 36fpkt"];
1946--7086[label="1;37pkt 37fpkt"];
2151--3185[label="0.0638298;6pkt 6fpkt"];
2151--3776[label="0.0555556;1pkt 1fpkt"];
2151--4085[label="0.0322581;1pkt 1fpkt"];
2151--4542[label="0.0555556;1pkt 1fpkt"];
2151--4903[label="0.0188679;1pkt 1fpkt"];
2151--5038[label="0.0957447;9pkt 9fpkt"];
2151--5041[label="0.0666667;1pkt 1fpkt"];
2151--5071[label="0.142857;1pkt 1fpkt"];
2151--5481[label="0.030303;1pkt 1fpkt"];
2151--5902[label="0.0555556;1pkt 1fpkt"];
2151--6098[label="0.03125;1pkt 1fpkt"];
2151--6404[label="0.0526316;1pkt 1fpkt"];
2151--6645[label="0.0188679;1pkt 1fpkt"];
2151--6742[label="0.142857;1pkt 1fpkt"];
2151--7283[label="0.0555556;1pkt 1fpkt"];
2151--7409[label="0.0322581;1pkt 1fpkt"];
2151--7752[label="0.0185185;1pkt 1fpkt"];
2153--5291[label="1;20pkt 20fpkt"];
2153--6892[label="0.95;19pkt 19fpkt"];
2246--2258[label="0.333333;1pkt 1fpkt"];
2258--3182[label="0.00404858;1pkt 1fpkt"];
2258--3612[label="0.0555556;1pkt 1fpkt"];
2258--3622[label="0.0689655;2pkt 2fpkt"];
2258--3663[label="0.166667;1pkt 1fpkt"];
2258--3730[label="0.0666667;13pkt 13fpkt"];
2258--3776[label="0.0555556;1pkt 1fpkt"];
2258--4362[label="0.1;1pkt 1fpkt"];
2258--4540[label="0.0714286;1pkt 1fpkt"];
2258--4705[label="0.125;1pkt 1fpkt"];
2258--4892[label="0.142857;1pkt 1fpkt"];
2258--5071[label="0.142857;1pkt 1fpkt"];
2258--5138[label="0.125;1pkt 1fpkt"];
2258--5159[label="0.0714286;1pkt 1fpkt"];
2258--5305[label="0.142857;1pkt 1fpkt"];
2258--5317[label="0.00809717;2pkt 2fpkt"];
2258--5481[label="0.030303;1pkt 1fpkt"];
2258--5797[label="0.0526316;1pkt 1fpkt"];
2258--5871[label="0.0666667;13pkt 13fpkt"];
2258--5902[label="0.0555556;1pkt 1fpkt"];
2258--6278[label="0.111111;1pkt 1fpkt"];
2258--6402[label="0.0769231;1pkt 1fpkt"];
2258--6510[label="0.111111;1pkt 1fpkt"];
2258--6639[label="0.166667;1pkt 1fpkt"];
2258--6742[label="0.142857;1pkt 1fpkt"];
2258--6791[label="0.142857;1pkt 1fpkt"];
2258--7283[label="0.0555556;1pkt 1fpkt"];
2258--7513[label="0.1;1pkt 1fpkt"];
2258--7666[label="0.111111;1pkt 1fpkt"];
2258--7749[label="0.142857;1pkt 1fpkt"];
2258--7846[label="0.142857;1pkt 1fpkt"];
2293--2302[label="0.2;1pkt 1fpkt"];
2293--3043[label="1;5pkt 5fpkt"];
2293--3050[label="0.2;1pkt 1fpkt"];
2293--3305[label="1;4pkt 4fpkt"];
2293--5601[label="1;5pkt 5fpkt"];
2293--7099[label="1;4pkt 4fpkt"];
2302--3043[label="0.2;1pkt 1fpkt"];
2302--3050[label="1;286pkt 286fpkt"];
2302--3179[label="0.0034965;1pkt 1fpkt"];
2302--3187[label="0.0034965;1pkt 1fpkt"];
2302--3622[label="0.0344828;1pkt 1fpkt"];
2302--4540[label="0.0714286;1pkt 1fpkt"];
2302--4567[label="0.025;1pkt 1fpkt"];
2302--4632[label="0.0588235;1pkt 1fpkt"];
2302--4903[label="0.0188679;1pkt 1fpkt"];
2302--5000[label="0.153846;2pkt 2fpkt"];
2302--5212[label="0.025641;1pkt 1fpkt"];
2302--5240[label="0.0175439;1pkt 1fpkt"];
2302--5317[label="0.00699301;2pkt 2fpkt"];
2302--5601[label="0.2;1pkt 1fpkt"];
2302--6402[label="0.0769231;1pkt 1fpkt"];
2302--6462[label="0.0588235;1pkt 1fpkt"];
2302--6645[label="0.0188679;1pkt 1fpkt"];
2302--6706[label="0.153846;2pkt 2fpkt"];
2302--6859[label="0.0175439;1pkt 1fpkt"];
2302--7752[label="0.0185185;1pkt 1fpkt"];
2302--7897[label="0.0175439;1pkt 1fpkt"];
2613--3283[label="0.181818;6pkt 6fpkt"];
2613--3612[label="0.0555556;1pkt 1fpkt"];
2613--4204[label="0.037037;1pkt 1fpkt"];
2613--4540[label="0.428571;6pkt 6fpkt"];
2613--4756[label="0.0769231;1pkt 1fpkt"];
2613--4886[label="0.111111;2pkt 2fpkt"];
2613--4903[label="0.0377358;2pkt 2fpkt"];
2613--4904[label="0.0277778;1pkt 1fpkt"];
2613--5461[label="0.0714286;1pkt 1fpkt"];
2613--5586[label="0.181818;6pkt 6fpkt"];
2613--5797[label="0.0526316;1pkt 1fpkt"];
2613--6177[label="0.037037;1pkt 1fpkt"];
2613--6402[label="0.461538;6pkt 6fpkt"];
2613--6636[label="0.105263;2pkt 2fpkt"];
2613--6645[label="0.0377358;2pkt 2fpkt"];
2613--6646[label="0.0285714;1pkt 1fpkt"];
2613--7752[label="0.037037;2pkt 2fpkt"];
2636--3271[label="1;36pkt 36fpkt"];
2636--5577[label="0.972222;35pkt 35fpkt"];
2636--7086[label="1;36pkt 36fpkt"];
3016--3274[label="0.0909091;1pkt 1fpkt"];
3016--3307[label="0.0434783;1pkt 1fpkt"];
3016--3323[label="0.0454545;1pkt 1fpkt"];
3016--3491[label="0.025641;1pkt 1fpkt"];
3016--3836[label="0.1;1pkt 1fpkt"];
3016--4502[label="0.0384615;1pkt 1fpkt"];
3016--4542[label="0.0555556;1pkt 1fpkt"];
3016--4567[label="0.025;1pkt 1fpkt"];
3016--4746[label="0.0416667;1pkt 1fpkt"];
3016--4755[label="0.0322581;1pkt 1fpkt"];
3016--5092[label="0.0434783;1pkt 1fpkt"];
3016--5159[label="0.0714286;1pkt 1fpkt"];
3016--5212[label="0.025641;1pkt 1fpkt"];
3016--5240[label="0.0175439;1pkt 1fpkt"];
3016--5481[label="0.030303;1pkt 1fpkt"];
3016--5602[label="0.0434783;1pkt 1fpkt"];
3016--5612[label="0.0454545;1pkt 1fpkt"];
3016--5939[label="0.1;1pkt 1fpkt"];
3016--6374[label="0.0384615;1pkt 1fpkt"];
3016--6404[label="0.0526316;1pkt 1fpkt"];
3016--6544[label="0.0333333;1pkt 1fpkt"];
3016--6859[label="0.0175439;1pkt 1fpkt"];
3016--7305[label="0.1;1pkt 1fpkt"];
3016--7897[label="0.0175439;1pkt 1fpkt"];
3033--3274[label="0.0909091;1pkt 1fpkt"];
3033--3307[label="0.0434783;1pkt 1fpkt"];
3033--3323[label="0.0454545;1pkt 1fpkt"];
3033--3491[label="0.025641;1pkt 1fpkt"];
3033--3587[label="0.0277778;1pkt 1fpkt"];
3033--3612[label="0.0555556;1pkt 1fpkt"];
3033--3836[label="0.1;1pkt 1fpkt"];
3033--3998[label="0.04;1pkt 1fpkt"];
3033--4029[label="0.333333;2pkt 2fpkt"];
3033--4085[label="0.0322581;1pkt 1fpkt"];
3033--4105[label="0.0384615;1pkt 1fpkt"];
3033--4362[label="0.1;1pkt 1fpkt"];
3033--4446[label="0.1;1pkt 1fpkt"];
3033--4567[label="0.025;1pkt 1fpkt"];
3033--4632[label="0.0588235;1pkt 1fpkt"];
3033--4746[label="0.0416667;1pkt 1fpkt"];
3033--4755[label="0.0322581;1pkt 1fpkt"];
3033--4871[label="0.025641;1pkt 1fpkt"];
3033--4886[label="0.0555556;1pkt 1fpkt"];
3033--4892[label="0.142857;1pkt 1fpkt"];
3033--4903[label="0.0188679;1pkt 1fpkt"];
3033--5046[label="0.2;1pkt 1fpkt"];
3033--5092[label="0.0434783;1pkt 1fpkt"];
3033--5138[label="0.125;1pkt 1fpkt"];
3033--5212[label="0.025641;1pkt 1fpkt"];
3033--5240[label="0.0175439;1pkt 1fpkt"];
3033--5305[label="0.142857;1pkt 1fpkt"];
3033--5317[label="0.0122951;6pkt 6fpkt"];
3033--5481[label="0.030303;1pkt 1fpkt"];
3033--5502[label="0.0454545;1pkt 1fpkt"];
3033--5602[label="0.0434783;1pkt 1fpkt"];
3033--5612[label="0.0454545;1pkt 1fpkt"];
3033--5781[label="0.027027;1pkt 1fpkt"];
3033--5797[label="0.0526316;1pkt 1fpkt"];
3033--5939[label="0.1;1pkt 1fpkt"];
3033--6047[label="0.0416667;1pkt 1fpkt"];
3033--6098[label="0.03125;1pkt 1fpkt"];
3033--6111[label="0.0384615;1pkt 1fpkt"];
3033--6334[label="0.111111;1pkt 1fpkt"];
3033--6462[label="0.0588235;1pkt 1fpkt"];
3033--6544[label="0.0333333;1pkt 1fpkt"];
3033--6636[label="0.0526316;1pkt 1fpkt"];
3033--6639[label="0.166667;1pkt 1fpkt"];
3033--6645[label="0.0188679;1pkt 1fpkt"];
3033--6859[label="0.0175439;1pkt 1fpkt"];
3033--7038[label="0.0434783;1pkt 1fpkt"];
3033--7305[label="0.1;1pkt 1fpkt"];
3033--7409[label="0.0322581;1pkt 1fpkt"];
3033--7513[label="0.1;1pkt 1fpkt"];
3033--7545[label="0.1;1pkt 1fpkt"];
3033--7749[label="0.142857;1pkt 1fpkt"];
3033--7752[label="0.0185185;1pkt 1fpkt"];
3033--7897[label="0.0175439;1pkt 1fpkt"];
3043--3050[label="0.2;1pkt 1fpkt"];
3043--3305[label="1;4pkt 4fpkt"];
3043--5601[label="1;5pkt 5fpkt"];
3043--7099[label="1;4pkt 4fpkt"];
3050--3179[label="0.0034965;1pkt 1fpkt"];
3050--3187[label="0.0034965;1pkt 1fpkt"];
3050--3622[label="0.0344828;1pkt 1fpkt"];
3050--4540[label="0.0714286;1pkt 1fpkt"];
3050--4567[label="0.025;1pkt 1fpkt"];
3050--4632[label="0.0588235;1pkt 1fpkt"];
3050--4903[label="0.0188679;1pkt 1fpkt"];
3050--5000[label="0.153846;2pkt 2fpkt"];
3050--5212[label="0.025641;1pkt 1fpkt"];
3050--5240[label="0.0175439;1pkt 1fpkt"];
3050--5317[label="0.00699301;2pkt 2fpkt"];
3050--5601[label="0.2;1pkt 1fpkt"];
3050--6402[label="0.0769231;1pkt 1fpkt"];
3050--6462[label="0.0588235;1pkt 1fpkt"];
3050--6645[label="0.0188679;1pkt 1fpkt"];
3050--6706[label="0.153846;2pkt 2fpkt"];
3050--6859[label="0.0175439;1pkt 1fpkt"];
3050--7752[label="0.0185185;1pkt 1fpkt"];
3050--7897[label="0.0175439;1pkt 1fpkt"];
3271--5577[label="1;43pkt 43fpkt"];
3271--7086[label="1;44pkt 44fpkt"];
3305--5601[label="1;4pkt 4fpkt"];
3305--7099[label="1;4pkt 4fpkt"];
3307--5602[label="1;23pkt 23fpkt"];
3367--5639[label="1;5pkt 5fpkt"];
3612--5797[label="1;18pkt 18fpkt"];
3683--5838[label="1;181pkt 181fpkt"];
3683--7241[label="1;181pkt 181fpkt"];
3730--5871[label="1;195pkt 195fpkt"];
3836--5939[label="1;10pkt 10fpkt"];
3836--7305[label="1;10pkt 10fpkt"];
4019--6059[label="1;1pkt 1fpkt"];
4085--6098[label="1;31pkt 31fpkt"];
4085--7409[label="1;31pkt 31fpkt"];
4110--6115[label="1;1pkt 1fpkt"];
4110--7420[label="1;1pkt 1fpkt"];
4201--6174[label="1;4pkt 4fpkt"];
4362--6278[label="1;9pkt 9fpkt"];
4362--7513[label="1;10pkt 10fpkt"];
4441--6332[label="1;4pkt 4fpkt"];
4446--6334[label="1;9pkt 9fpkt"];
4446--7545[label="1;10pkt 10fpkt"];
4540--6402[label="1;13pkt 13fpkt"];
4542--6404[label="1;18pkt 18fpkt"];
4551--6412[label="1;131pkt 131fpkt"];
4551--7600[label="1;132pkt 132fpkt"];
4565--6422[label="1;2pkt 2fpkt"];
4632--6462[label="1;17pkt 17fpkt"];
4677--6492[label="1;2pkt 2fpkt"];
4677--7654[label="1;1pkt 1fpkt"];
4690--6500[label="1;4pkt 4fpkt"];
4690--7658[label="1;3pkt 3fpkt"];
4705--6510[label="1;8pkt 8fpkt"];
4705--7666[label="1;8pkt 8fpkt"];
4712--6516[label="1;9pkt 9fpkt"];
4712--7671[label="1;9pkt 9fpkt"];
4735--6530[label="1;7pkt 7fpkt"];
4735--7678[label="1;7pkt 7fpkt"];
4755--6544[label="1;30pkt 30fpkt"];
4886--6636[label="1;18pkt 18fpkt"];
4892--6639[label="1;6pkt 6fpkt"];
4892--7749[label="1;7pkt 7fpkt"];
4903--6645[label="1;53pkt 53fpkt"];
4903--7752[label="1;53pkt 53fpkt"];
5006--6711[label="1;145pkt 145fpkt"];
5006--7792[label="1;145pkt 145fpkt"];
5071--6742[label="1;7pkt 7fpkt"];
5138--6791[label="1;7pkt 7fpkt"];
5138--7846[label="1;7pkt 7fpkt"];
5178--6818[label="1;1pkt 1fpkt"];
5291--6892[label="1;24pkt 24fpkt"];
5365--6936[label="1;7pkt 7fpkt"];
5371--6939[label="1;77pkt 77fpkt"];
5371--7950[label="1;77pkt 77fpkt"];
5450--7000[label="1;3pkt 3fpkt"];
5450--7989[label="1;2pkt 2fpkt"];
5502--7038[label="1;22pkt 22fpkt"];
5511--7044[label="1;23pkt 23fpkt"];
5511--8011[label="1;23pkt 23fpkt"];
5577--7086[label="1;43pkt 43fpkt"];
5601--7099[label="1;4pkt 4fpkt"];
5838--7241[label="1;181pkt 181fpkt"];
5939--7305[label="1;10pkt 10fpkt"];
6098--7409[label="1;31pkt 31fpkt"];
6115--7420[label="1;1pkt 1fpkt"];
6278--7513[label="1;9pkt 9fpkt"];
6334--7545[label="1;9pkt 9fpkt"];
6412--7600[label="1;131pkt 131fpkt"];
6492--7654[label="1;1pkt 1fpkt"];
6500--7658[label="1;3pkt 3fpkt"];
6510--7666[label="1;9pkt 9fpkt"];
6516--7671[label="1;10pkt 10fpkt"];
6530--7678[label="1;7pkt 7fpkt"];
6639--7749[label="1;6pkt 6fpkt"];
6645--7752[label="1;53pkt 53fpkt"];
6711--7792[label="1;145pkt 145fpkt"];
6791--7846[label="1;7pkt 7fpkt"];
6939--7950[label="1;77pkt 77fpkt"];
7000--7989[label="1;2pkt 2fpkt"];
7044--8011[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="214.216.48.172" dst_port="53"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.213.13.94"/>
    </slice>
    <from sec="1039669708" usec="0"/>
    <to sec="1039669729" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.81.20.94"/>
    </slice>
    <from sec="1039669261" usec="0"/>
    <to sec="1039669895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.83.73.94"/>
    </slice>
    <from sec="1039669211" usec="0"/>
    <to sec="1039669924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.168.74.94"/>
    </slice>
    <from sec="1039669211" usec="0"/>
    <to sec="1039669228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.106.154.94"/>
    </slice>
    <from sec="1039669567" usec="0"/>
    <to sec="1039669600" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.226.154.94"/>
    </slice>
    <from sec="1039669265" usec="0"/>
    <to sec="1039669431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.93.22.95"/>
    </slice>
    <from sec="1039669207" usec="0"/>
    <to sec="1039669925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.30.69.95"/>
    </slice>
    <from sec="1039669594" usec="0"/>
    <to sec="1039669689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.103.43.96"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.178.50.96"/>
    </slice>
    <from sec="1039669267" usec="0"/>
    <to sec="1039669923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_760{
style=filled;
color=gray75;
474[label="138.186.54.96;s;984pkt 984fpkt", shape=diamond, color=yellow];
547[label="172.93.129.123;s;2pkt 2fpkt", shape=diamond, color=yellow];
548[label="202.34.210.233;d;2pkt 2fpkt", shape=diamond, color=yellow];
589[label="33.53.18.32;d;1pkt 1fpkt", shape=diamond, color=yellow];
687[label="64.42.228.221;d;3pkt 3fpkt", shape=diamond, color=yellow];
870[label="64.4.33.219;d;1pkt 1fpkt", shape=diamond, color=yellow];
908[label="61.13.162.157;d;2pkt 2fpkt", shape=diamond, color=yellow];
923[label="61.97.190.136;d;1pkt 1fpkt", shape=diamond, color=yellow];
1290[label="64.164.18.44;d;1pkt 1fpkt", shape=diamond, color=yellow];
2143[label="208.196.220.48;d;3pkt 3fpkt", shape=diamond, color=yellow];
2463[label="138.186.54.96;s;245pkt 245fpkt", shape=hexagon, color=black];
2751[label="202.34.210.233;d;2pkt 2fpkt", shape=hexagon, color=black];
2765[label="61.97.190.136;d;1pkt 1fpkt", shape=hexagon, color=black];
3003[label="33.53.18.32;d;1pkt 1fpkt", shape=hexagon, color=black];
4226[label="138.186.54.96;1056pkt 1056fpkt", shape=pentagon, color=darkviolet];
4443[label="172.93.129.123;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6189[label="138.186.54.96;1055pkt 1055fpkt", shape=invtriangle, color=brown];
7463[label="138.186.54.96;1055pkt 1055fpkt", shape=invhouse, color=bisque];
stat760[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.54.96:6257, *:6257}[96.7012%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (97.3059%)&lt;BR/&gt; 6699: (0.837673%)&lt;BR/&gt; 16257: (0.181118%)&lt;BR/&gt; 4868: (0.0792393%)&lt;BR/&gt; 6999: (0.0679194%)&gt;];
}
474--548[label="0.5;1pkt 1fpkt"];
474--554[label="0.5;1pkt 1fpkt"];
474--589[label="1;1pkt 1fpkt"];
474--687[label="0.666667;2pkt 2fpkt"];
474--870[label="1;1pkt 1fpkt"];
474--908[label="1;2pkt 2fpkt"];
474--988[label="0.666667;2pkt 2fpkt"];
474--1290[label="1;1pkt 1fpkt"];
474--2143[label="0.333333;1pkt 1fpkt"];
474--2463[label="1;245pkt 245fpkt"];
474--2651[label="0.5;1pkt 1fpkt"];
474--2751[label="0.5;1pkt 1fpkt"];
474--2781[label="0.666667;2pkt 2fpkt"];
474--3003[label="1;1pkt 1fpkt"];
474--4226[label="1;984pkt 984fpkt"];
474--6189[label="0.998984;983pkt 983fpkt"];
474--7463[label="0.998984;983pkt 983fpkt"];
547--548[label="0.5;1pkt 1fpkt"];
547--923[label="1;1pkt 1fpkt"];
547--2751[label="0.5;1pkt 1fpkt"];
547--2765[label="1;1pkt 1fpkt"];
547--4443[label="1;2pkt 2fpkt"];
548--2463[label="0.5;1pkt 1fpkt"];
548--2751[label="1;2pkt 2fpkt"];
548--4226[label="0.5;1pkt 1fpkt"];
548--4443[label="0.5;1pkt 1fpkt"];
548--6189[label="0.5;1pkt 1fpkt"];
548--7463[label="0.5;1pkt 1fpkt"];
589--2463[label="1;1pkt 1fpkt"];
589--3003[label="1;1pkt 1fpkt"];
589--4226[label="1;1pkt 1fpkt"];
589--6189[label="1;1pkt 1fpkt"];
589--7463[label="1;1pkt 1fpkt"];
687--2463[label="0.333333;1pkt 1fpkt"];
687--2781[label="1;3pkt 3fpkt"];
687--4226[label="0.666667;2pkt 2fpkt"];
687--4228[label="0.333333;1pkt 1fpkt"];
687--6189[label="0.666667;2pkt 2fpkt"];
687--6191[label="0.333333;1pkt 1fpkt"];
687--7463[label="0.666667;2pkt 2fpkt"];
687--7465[label="0.333333;1pkt 1fpkt"];
870--2463[label="1;1pkt 1fpkt"];
870--4226[label="1;1pkt 1fpkt"];
870--6189[label="1;1pkt 1fpkt"];
870--7463[label="1;1pkt 1fpkt"];
908--2463[label="0.5;1pkt 1fpkt"];
908--4226[label="1;2pkt 2fpkt"];
908--6189[label="1;2pkt 2fpkt"];
908--7463[label="1;2pkt 2fpkt"];
923--2765[label="1;1pkt 1fpkt"];
923--4443[label="1;1pkt 1fpkt"];
1290--2463[label="1;1pkt 1fpkt"];
1290--4226[label="1;1pkt 1fpkt"];
1290--6189[label="1;1pkt 1fpkt"];
1290--7463[label="1;1pkt 1fpkt"];
2143--2624[label="0.333333;1pkt 1fpkt"];
2143--4226[label="0.333333;1pkt 1fpkt"];
2143--5269[label="0.333333;1pkt 1fpkt"];
2143--6189[label="0.333333;1pkt 1fpkt"];
2143--7463[label="0.333333;1pkt 1fpkt"];
2463--2751[label="0.5;1pkt 1fpkt"];
2463--2781[label="0.333333;1pkt 1fpkt"];
2463--3003[label="1;1pkt 1fpkt"];
2463--4226[label="1;245pkt 245fpkt"];
2463--6189[label="0.995918;244pkt 244fpkt"];
2463--7463[label="0.995918;244pkt 244fpkt"];
2751--4226[label="0.5;1pkt 1fpkt"];
2751--4443[label="0.5;1pkt 1fpkt"];
2751--6189[label="0.5;1pkt 1fpkt"];
2751--7463[label="0.5;1pkt 1fpkt"];
2765--4443[label="1;1pkt 1fpkt"];
3003--4226[label="1;1pkt 1fpkt"];
3003--6189[label="1;1pkt 1fpkt"];
3003--7463[label="1;1pkt 1fpkt"];
4226--6189[label="1;1055pkt 1055fpkt"];
4226--7463[label="1;1055pkt 1055fpkt"];
6189--7463[label="1;1055pkt 1055fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="138.186.54.96" src_port="6257"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_761{
style=filled;
color=gray75;
1440[label="209.1.160.96;s;19pkt 19fpkt", shape=diamond, color=yellow];
4230[label="209.1.160.96;18pkt 18fpkt", shape=pentagon, color=darkviolet];
stat761[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.1.160.96:80, 215.160.138.181:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 42003: (2.7027%)&lt;BR/&gt; 42001: (2.7027%)&lt;BR/&gt; 42000: (2.7027%)&lt;BR/&gt; 41995: (2.7027%)&gt;];
}
1440--4230[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="215.160.138.181" src_ip="209.1.160.96" src_port="80"/>
    </slice>
    <from sec="1039669273" usec="0"/>
    <to sec="1039669453" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.85355,1.83055,503,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_762{
style=filled;
color=gray75;
128[label="96.210.224.37s;2pkt 2fpkt", shape=rectangle, color=red];
1491[label="140.3.95.119;d;35pkt 35fpkt", shape=diamond, color=yellow];
3939[label="36.2.50.68;20pkt 20fpkt", shape=pentagon, color=darkviolet];
stat762[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 140.3.95.119:*}[50.8772%]&lt;BR/&gt;{36.2.50.68:80, *:*}[35.0877%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.7368%)&lt;BR/&gt; 20730: (1.75439%)&lt;BR/&gt; 5190: (1.75439%)&lt;BR/&gt; 1863: (1.75439%)&lt;BR/&gt; 59590: (0.877193%)&gt;];
}
128--523[label="0.5;1pkt 1fpkt"];
128--2298[label="1;2pkt 2fpkt"];
128--3639[label="1;2pkt 2fpkt"];
1491--1677[label="0.0571429;2pkt 2fpkt"];
1491--1771[label="1;2pkt 2fpkt"];
1491--2290[label="0.114286;4pkt 4fpkt"];
1491--2741[label="1;35pkt 35fpkt"];
1491--3415[label="0.171429;6pkt 6fpkt"];
1491--3429[label="0.0294118;1pkt 1fpkt"];
1491--3628[label="0.114286;4pkt 4fpkt"];
1491--4073[label="0.125;1pkt 1fpkt"];
1491--4424[label="0.0571429;2pkt 2fpkt"];
1491--4997[label="1;1pkt 1fpkt"];
1491--5300[label="0.114286;4pkt 4fpkt"];
1491--5678[label="0.030303;1pkt 1fpkt"];
1491--6093[label="0.125;1pkt 1fpkt"];
1491--6323[label="0.0571429;2pkt 2fpkt"];
1491--7140[label="0.0294118;1pkt 1fpkt"];
1491--7539[label="0.0571429;2pkt 2fpkt"];
3939--6011[label="1;20pkt 20fpkt"];
3939--7352[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter src_ip="36.2.50.68" src_port="80"/>
      <filter dst_ip="140.3.95.119" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.56.192.98"/>
    </slice>
    <from sec="1039669475" usec="0"/>
    <to sec="1039669497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.29.211.98"/>
    </slice>
    <from sec="1039669424" usec="0"/>
    <to sec="1039669465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.113.0.99"/>
    </slice>
    <from sec="1039669221" usec="0"/>
    <to sec="1039669919" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.90.99.99"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.240.161.99"/>
    </slice>
    <from sec="1039669812" usec="0"/>
    <to sec="1039669851" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.76.8.100"/>
    </slice>
    <from sec="1039669212" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.115.64.100"/>
    </slice>
    <from sec="1039669240" usec="0"/>
    <to sec="1039669348" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645838,1.80177,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_770{
style=filled;
color=gray75;
1888[label="220.41.124.100;s;1pkt 1fpkt", shape=diamond, color=yellow];
4266[label="220.41.124.100;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6217[label="220.41.124.100;1pkt 1fpkt", shape=invtriangle, color=brown];
stat770[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.41.124.100:4662, 172.93.103.255:4012}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 4012: (50%)&gt;];
}
1888--2572[label="1;1pkt 1fpkt"];
1888--4266[label="1;1pkt 1fpkt"];
1888--6217[label="1;1pkt 1fpkt"];
4266--6217[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.93.103.255" dst_port="4012" src_ip="220.41.124.100" src_port="4662"/>
    </slice>
    <from sec="1039669203" usec="0"/>
    <to sec="1039669762" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.255.135.100"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645838,1.80177,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_772{
style=filled;
color=gray75;
1727[label="140.3.211.100;s;33pkt 33fpkt", shape=diamond, color=yellow];
4272[label="140.3.211.100;34pkt 34fpkt", shape=pentagon, color=darkviolet];
6222[label="140.3.211.100;34pkt 34fpkt", shape=invtriangle, color=brown];
stat772[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.211.100:*, 98.148.91.74:80}[64.7059%]&lt;BR/&gt;{140.3.211.100:*, 209.163.196.212:80}[35.2941%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1735: (1.48515%)&lt;BR/&gt; 1734: (1.48515%)&lt;BR/&gt; 1733: (1.48515%)&lt;BR/&gt; 1732: (1.48515%)&gt;];
}
1727--4272[label="1;33pkt 33fpkt"];
1727--6222[label="1;33pkt 33fpkt"];
4272--6222[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="98.148.91.74" dst_port="80" src_ip="140.3.211.100"/>
      <filter dst_ip="209.163.196.212" dst_port="80" src_ip="140.3.211.100"/>
    </slice>
    <from sec="1039669302" usec="0"/>
    <to sec="1039669926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.133.110.101"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.86.149.101"/>
    </slice>
    <from sec="1039669877" usec="0"/>
    <to sec="1039669924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.8.27.102"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669921" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.211.49.102"/>
    </slice>
    <from sec="1039669832" usec="0"/>
    <to sec="1039669918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.126.142.102"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.144.157.102"/>
    </slice>
    <from sec="1039669344" usec="0"/>
    <to sec="1039669358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.52.53.104"/>
    </slice>
    <from sec="1039669204" usec="0"/>
    <to sec="1039669855" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_780{
style=filled;
color=gray75;
27[label="201.37.161.104s;2pkt 2fpkt", shape=rectangle, color=red];
stat780[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.37.161.104:80, 215.87.67.219:23770}[50%]&lt;BR/&gt;{201.37.161.104:80, 215.87.67.219:23794}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 23794: (25%)&lt;BR/&gt; 23770: (25%)&gt;];
}
27--4293[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.87.67.219" dst_port="23794" src_ip="201.37.161.104" src_port="80"/>
      <filter dst_ip="215.87.67.219" dst_port="23770" src_ip="201.37.161.104" src_port="80"/>
    </slice>
    <from sec="1039669862" usec="0"/>
    <to sec="1039669874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.93.72.105"/>
    </slice>
    <from sec="1039669213" usec="0"/>
    <to sec="1039669397" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,501,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_782{
style=filled;
color=gray75;
805[label="38.66.227.38;s;88pkt 88fpkt", shape=diamond, color=yellow];
stat782[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.66.227.38:21, 148.29.24.129:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (25%)&lt;BR/&gt; 20561: (0.568182%)&lt;BR/&gt; 20500: (0.568182%)&lt;BR/&gt; 20472: (0.568182%)&lt;BR/&gt; 20468: (0.568182%)&gt;];
}
805--2470[label="1;88pkt 88fpkt"];
</description>
    <slice>
      <filter dst_ip="148.29.24.129" src_ip="38.66.227.38" src_port="21"/>
    </slice>
    <from sec="1039669246" usec="0"/>
    <to sec="1039669684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_783{
style=filled;
color=gray75;
2428[label="202.158.10.106;s;2pkt 2fpkt", shape=diamond, color=yellow];
4307[label="202.158.10.106;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat783[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.158.10.106:64439, 148.110.14.245:6257}[50%]&lt;BR/&gt;{202.158.10.106:65108, 148.110.14.245:6699}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65108: (33.3333%)&lt;BR/&gt; 6699: (33.3333%)&lt;BR/&gt; 64439: (16.6667%)&lt;BR/&gt; 6257: (16.6667%)&gt;];
}
2428--4307[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.14.245" dst_port="6699" src_ip="202.158.10.106" src_port="65108"/>
      <filter dst_ip="148.110.14.245" dst_port="6257" src_ip="202.158.10.106" src_port="64439"/>
    </slice>
    <from sec="1039669687" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645838,1.80177,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_784{
style=filled;
color=gray75;
1061[label="215.90.74.49;d;30pkt 30fpkt", shape=diamond, color=yellow];
1345[label="96.66.76.106;s;1pkt 1fpkt", shape=diamond, color=yellow];
4170[label="96.66.76.91;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4312[label="96.66.76.106;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6151[label="96.66.76.91;5pkt 5fpkt", shape=invtriangle, color=brown];
stat784[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 215.90.74.49:0}[50%]&lt;BR/&gt;{*:5001, *:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (44.186%)&lt;BR/&gt; 5001: (18.6047%)&lt;BR/&gt; 6900: (3.48837%)&lt;BR/&gt; 6001: (3.48837%)&lt;BR/&gt; 1150: (3.48837%)&gt;];
}
1061--1345[label="1;1pkt 1fpkt"];
1061--1576[label="0.0333333;1pkt 1fpkt"];
1061--1876[label="0.6;3pkt 3fpkt"];
1061--2368[label="0.6;3pkt 3fpkt"];
1061--2811[label="0.6;3pkt 3fpkt"];
1061--2917[label="0.0333333;1pkt 1fpkt"];
1061--4148[label="0.6;3pkt 3fpkt"];
1061--4170[label="0.75;3pkt 3fpkt"];
1061--4312[label="1;3pkt 3fpkt"];
1061--5388[label="0.0333333;1pkt 1fpkt"];
1061--6151[label="0.6;3pkt 3fpkt"];
1345--4312[label="1;1pkt 1fpkt"];
4170--6151[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_port="5001"/>
      <filter dst_ip="215.90.74.49"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.96.107.106"/>
    </slice>
    <from sec="1039669522" usec="0"/>
    <to sec="1039669549" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.126.154.106"/>
    </slice>
    <from sec="1039669218" usec="0"/>
    <to sec="1039669920" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.206.198.106"/>
    </slice>
    <from sec="1039669614" usec="0"/>
    <to sec="1039669633" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.166.132.107"/>
    </slice>
    <from sec="1039669893" usec="0"/>
    <to sec="1039669916" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.93.20.108"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.168.24.108"/>
    </slice>
    <from sec="1039669909" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.211.201.108"/>
    </slice>
    <from sec="1039669480" usec="0"/>
    <to sec="1039669518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_792{
style=filled;
color=gray75;
2267[label="138.186.50.5;d;4pkt 4fpkt", shape=diamond, color=yellow];
4338[label="162.84.75.109;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat792[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.84.75.109:1221, 138.186.50.5:6699}[25%]&lt;BR/&gt;{142.215.104.125:1767, 138.186.50.5:6699}[25%]&lt;BR/&gt;{211.90.155.154:1863, 138.186.50.5:1040}[25%]&lt;BR/&gt;{60.161.245.156:6699, 138.186.50.5:1114}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (40%)&lt;BR/&gt; 1221: (20%)&lt;BR/&gt; 1863: (10%)&lt;BR/&gt; 1767: (10%)&lt;BR/&gt; 1114: (10%)&gt;];
}
2267--4338[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.50.5" dst_port="1114" src_ip="60.161.245.156" src_port="6699"/>
      <filter dst_ip="138.186.50.5" dst_port="1040" src_ip="211.90.155.154" src_port="1863"/>
      <filter dst_ip="138.186.50.5" dst_port="6699" src_ip="142.215.104.125" src_port="1767"/>
      <filter dst_ip="138.186.50.5" dst_port="6699" src_ip="162.84.75.109" src_port="1221"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.251.132.110"/>
    </slice>
    <from sec="1039669387" usec="0"/>
    <to sec="1039669400" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.66.11.111"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669432" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790471,1.82041,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_795{
style=filled;
color=gray75;
196[label="200.136.88.111s;44pkt 44fpkt", shape=rectangle, color=red];
4351[label="200.136.88.111;203pkt 203fpkt", shape=pentagon, color=darkviolet];
6271[label="200.136.88.111;202pkt 202fpkt", shape=invtriangle, color=brown];
stat795[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.136.88.111:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
196--4351[label="1;44pkt 44fpkt"];
196--6271[label="1;44pkt 44fpkt"];
4351--6271[label="1;202pkt 202fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.136.88.111" src_port="1025"/>
    </slice>
    <from sec="1039669450" usec="0"/>
    <to sec="1039669482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.115.98.111"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.32.151.111"/>
    </slice>
    <from sec="1039669392" usec="0"/>
    <to sec="1039669459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_798{
style=filled;
color=gray75;
199[label="96.159.198.112s;45pkt 45fpkt", shape=rectangle, color=red];
4361[label="96.159.198.112;249pkt 249fpkt", shape=pentagon, color=darkviolet];
6277[label="96.159.198.112;249pkt 249fpkt", shape=invtriangle, color=brown];
7512[label="96.159.198.112;250pkt 250fpkt", shape=invhouse, color=bisque];
stat798[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.159.198.112:1065, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1065: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
199--4361[label="1;45pkt 45fpkt"];
199--6277[label="1;45pkt 45fpkt"];
199--7512[label="1;45pkt 45fpkt"];
4361--6277[label="1;249pkt 249fpkt"];
4361--7512[label="1;249pkt 249fpkt"];
6277--7512[label="1;249pkt 249fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.159.198.112" src_port="1065"/>
    </slice>
    <from sec="1039669210" usec="0"/>
    <to sec="1039669251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.203.97.113"/>
    </slice>
    <from sec="1039669215" usec="0"/>
    <to sec="1039669924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.49.177.114"/>
    </slice>
    <from sec="1039669559" usec="0"/>
    <to sec="1039669597" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_801{
style=filled;
color=gray75;
4374[label="96.53.201.114;433pkt 433fpkt", shape=pentagon, color=darkviolet];
stat801[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.53.201.114:1025, *:137}[59.1224%]&lt;BR/&gt;{96.53.201.114:1026, *:137}[40.8776%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1025: (29.5612%)&lt;BR/&gt; 1026: (20.4388%)&gt;];
}
</description>
    <slice>
      <filter dst_port="137" src_ip="96.53.201.114" src_port="1025"/>
      <filter dst_port="137" src_ip="96.53.201.114" src_port="1026"/>
    </slice>
    <from sec="1039669328" usec="0"/>
    <to sec="1039669741" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.172.13.116"/>
    </slice>
    <from sec="1039669449" usec="0"/>
    <to sec="1039669489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_804{
style=filled;
color=gray75;
207[label="202.66.192.116s;46pkt 46fpkt", shape=rectangle, color=red];
4389[label="202.66.192.116;133pkt 133fpkt", shape=pentagon, color=darkviolet];
6300[label="202.66.192.116;133pkt 133fpkt", shape=invtriangle, color=brown];
7526[label="202.66.192.116;133pkt 133fpkt", shape=invhouse, color=bisque];
stat804[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.66.192.116:1033, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1033: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
207--4389[label="1;46pkt 46fpkt"];
207--6300[label="1;46pkt 46fpkt"];
207--7526[label="1;46pkt 46fpkt"];
4389--6300[label="1;133pkt 133fpkt"];
4389--7526[label="1;133pkt 133fpkt"];
6300--7526[label="1;133pkt 133fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.66.192.116" src_port="1033"/>
    </slice>
    <from sec="1039669639" usec="0"/>
    <to sec="1039669662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.80.113.117"/>
    </slice>
    <from sec="1039669352" usec="0"/>
    <to sec="1039669738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.17.221.117"/>
    </slice>
    <from sec="1039669551" usec="0"/>
    <to sec="1039669586" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.171.39.118"/>
    </slice>
    <from sec="1039669362" usec="0"/>
    <to sec="1039669813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_808{
style=filled;
color=gray75;
1049[label="39.28.57.120;s;1pkt 1fpkt", shape=diamond, color=yellow];
4412[label="39.28.57.120;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat808[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.28.57.120:6699, 215.90.81.22:1109}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1109: (50%)&gt;];
}
1049--4412[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.81.22" dst_port="1109" src_ip="39.28.57.120" src_port="6699"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.192.134.120"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.139.74.121"/>
    </slice>
    <from sec="1039669221" usec="0"/>
    <to sec="1039669916" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.67.136.121"/>
    </slice>
    <from sec="1039669402" usec="0"/>
    <to sec="1039669436" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.50.173.121"/>
    </slice>
    <from sec="1039669830" usec="0"/>
    <to sec="1039669844" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.161.194.121"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="140.3.211.121"/>
    </slice>
    <from sec="1039669556" usec="0"/>
    <to sec="1039669631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_815{
style=filled;
color=gray75;
2264[label="169.126.142.122;s;58pkt 58fpkt", shape=diamond, color=yellow];
4434[label="169.126.142.122;58pkt 58fpkt", shape=pentagon, color=darkviolet];
stat815[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.126.142.122:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2264--4434[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter src_ip="169.126.142.122"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669922" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.93.187.122"/>
    </slice>
    <from sec="1039669395" usec="0"/>
    <to sec="1039669756" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.9.196.122"/>
    </slice>
    <from sec="1039669333" usec="0"/>
    <to sec="1039669371" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.192.20.123"/>
    </slice>
    <from sec="1039669399" usec="0"/>
    <to sec="1039669424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.85355,1.83055,503,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_819{
style=filled;
color=gray75;
215[label="212.192.20.123s;1pkt 1fpkt", shape=rectangle, color=red];
2318[label="140.3.116.223;d;94pkt 94fpkt", shape=diamond, color=yellow];
4696[label="196.249.192.152;36pkt 36fpkt", shape=pentagon, color=darkviolet];
stat819[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.249.192.152:80, 140.3.116.223:*}[38.9474%]&lt;BR/&gt;{38.72.234.140:80, 140.3.116.223:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2366%)&lt;BR/&gt; 1195: (1.14504%)&lt;BR/&gt; 1193: (1.14504%)&lt;BR/&gt; 1189: (1.14504%)&lt;BR/&gt; 1188: (1.14504%)&gt;];
}
215--494[label="1;1pkt 1fpkt"];
215--2875[label="1;1pkt 1fpkt"];
215--4447[label="1;1pkt 1fpkt"];
215--6335[label="1;1pkt 1fpkt"];
2318--2342[label="0.0144928;1pkt 1fpkt"];
2318--2681[label="0.0140845;1pkt 1fpkt"];
2318--2750[label="0.0106383;1pkt 1fpkt"];
2318--2892[label="0.0106383;1pkt 1fpkt"];
2318--2911[label="0.0106383;1pkt 1fpkt"];
2318--2962[label="0.0319149;3pkt 3fpkt"];
2318--3058[label="0.0106383;1pkt 1fpkt"];
2318--3076[label="0.0147059;1pkt 1fpkt"];
2318--3212[label="0.0212766;2pkt 2fpkt"];
2318--3333[label="0.0106383;1pkt 1fpkt"];
2318--4031[label="0.0531915;5pkt 5fpkt"];
2318--4188[label="0.0833333;1pkt 1fpkt"];
2318--4320[label="0.025641;1pkt 1fpkt"];
2318--4397[label="0.0212766;2pkt 2fpkt"];
2318--4447[label="0.0465116;2pkt 2fpkt"];
2318--4451[label="0.0131579;1pkt 1fpkt"];
2318--4522[label="0.0106383;1pkt 1fpkt"];
2318--4596[label="0.202128;19pkt 19fpkt"];
2318--4696[label="1;36pkt 36fpkt"];
2318--4716[label="0.0107527;1pkt 1fpkt"];
2318--4839[label="0.0106383;1pkt 1fpkt"];
2318--6335[label="0.0465116;2pkt 2fpkt"];
2318--6339[label="0.012987;1pkt 1fpkt"];
2318--6389[label="0.0106383;1pkt 1fpkt"];
2318--6438[label="0.202128;19pkt 19fpkt"];
2318--6597[label="0.0106383;1pkt 1fpkt"];
2318--7546[label="0.047619;2pkt 2fpkt"];
2318--7548[label="0.012987;1pkt 1fpkt"];
2318--7588[label="0.0106383;1pkt 1fpkt"];
2318--7617[label="0.202128;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.116.223" src_ip="196.249.192.152" src_port="80"/>
      <filter dst_ip="140.3.116.223" src_ip="38.72.234.140" src_port="80"/>
    </slice>
    <from sec="1039669203" usec="0"/>
    <to sec="1039669845" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_820{
style=filled;
color=gray75;
217[label="215.165.209.125s;51pkt 51fpkt", shape=rectangle, color=red];
4455[label="215.165.209.125;184pkt 184fpkt", shape=pentagon, color=darkviolet];
6343[label="215.165.209.125;183pkt 183fpkt", shape=invtriangle, color=brown];
7552[label="215.165.209.125;184pkt 184fpkt", shape=invhouse, color=bisque];
stat820[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.165.209.125:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
217--4455[label="1;51pkt 51fpkt"];
217--6343[label="1;51pkt 51fpkt"];
217--7552[label="1;51pkt 51fpkt"];
4455--6343[label="1;183pkt 183fpkt"];
4455--7552[label="1;184pkt 184fpkt"];
6343--7552[label="1;183pkt 183fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.165.209.125" src_port="1025"/>
    </slice>
    <from sec="1039669591" usec="0"/>
    <to sec="1039669622" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_821{
style=filled;
color=gray75;
2329[label="96.61.173.126;s;6pkt 6fpkt", shape=diamond, color=yellow];
4461[label="96.61.173.126;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat821[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.61.173.126:2002, 215.90.72.231:*}[50%]&lt;BR/&gt;{96.61.173.126:3004, 215.90.72.231:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2002: (27.2727%)&lt;BR/&gt; 3004: (22.7273%)&lt;BR/&gt; 2652: (9.09091%)&lt;BR/&gt; 2645: (9.09091%)&lt;BR/&gt; 2083: (9.09091%)&gt;];
}
2329--4461[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.72.231" src_ip="96.61.173.126" src_port="3004"/>
      <filter dst_ip="215.90.72.231" src_ip="96.61.173.126" src_port="2002"/>
    </slice>
    <from sec="1039669204" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,999,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_822{
style=filled;
color=gray75;
30[label="223.239.160.127s;2pkt 2fpkt", shape=rectangle, color=red];
4465[label="223.239.160.127;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4468[label="200.26.180.127;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6351[label="200.26.180.127;3pkt 3fpkt", shape=invtriangle, color=brown];
7557[label="200.26.180.127;4pkt 4fpkt", shape=invhouse, color=bisque];
stat822[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.26.180.127:80, 221.47.8.213:*}[66.6667%]&lt;BR/&gt;{223.239.160.127:3128, *:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40%)&lt;BR/&gt; 1186: (13.3333%)&lt;BR/&gt; 3128: (10%)&lt;BR/&gt; 1185: (10%)&lt;BR/&gt; 1184: (10%)&gt;];
}
30--4465[label="0.5;1pkt 1fpkt"];
30--4468[label="0.5;1pkt 1fpkt"];
30--6351[label="0.5;1pkt 1fpkt"];
30--7557[label="0.5;1pkt 1fpkt"];
4468--6351[label="1;3pkt 3fpkt"];
4468--7557[label="1;4pkt 4fpkt"];
6351--7557[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="223.239.160.127" src_port="3128"/>
      <filter dst_ip="221.47.8.213" src_ip="200.26.180.127" src_port="80"/>
    </slice>
    <from sec="1039669482" usec="0"/>
    <to sec="1039669890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.5.162.127"/>
    </slice>
    <from sec="1039669348" usec="0"/>
    <to sec="1039669377" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.160.196.127"/>
    </slice>
    <from sec="1039669202" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19604,1.81002,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_825{
style=filled;
color=gray75;
31[label="138.186.16.128s;2pkt 2fpkt", shape=rectangle, color=red];
1002[label="33.56.40.126;d;1pkt 1fpkt", shape=diamond, color=yellow];
1003[label="138.186.16.128;s;25pkt 25fpkt", shape=diamond, color=yellow];
1076[label="61.94.175.168;d;1pkt 1fpkt", shape=diamond, color=yellow];
1563[label="64.97.219.254;d;1pkt 1fpkt", shape=diamond, color=yellow];
2289[label="211.40.30.135;d;1pkt 1fpkt", shape=diamond, color=yellow];
2905[label="33.56.40.126;d;1pkt 1fpkt", shape=hexagon, color=black];
4474[label="138.186.16.128;27pkt 27fpkt", shape=pentagon, color=darkviolet];
6356[label="138.186.16.128;27pkt 27fpkt", shape=invtriangle, color=brown];
7561[label="138.186.16.128;28pkt 28fpkt", shape=invhouse, color=bisque];
stat825[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.16.128:6257, *:6257}[72.4138%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (71.0526%)&lt;BR/&gt; 6699: (11.8421%)&lt;BR/&gt; 3934: (3.07018%)&lt;BR/&gt; 16699: (2.19298%)&lt;BR/&gt; 3883: (2.19298%)&gt;];
}
31--496[label="0.5;1pkt 1fpkt"];
31--1002[label="1;1pkt 1fpkt"];
31--1003[label="0.5;1pkt 1fpkt"];
31--1222[label="1;1pkt 1fpkt"];
31--2465[label="0.5;1pkt 1fpkt"];
31--2905[label="1;1pkt 1fpkt"];
31--4474[label="0.5;1pkt 1fpkt"];
31--6356[label="0.5;1pkt 1fpkt"];
31--7561[label="0.5;1pkt 1fpkt"];
1002--1003[label="1;1pkt 1fpkt"];
1002--2905[label="1;1pkt 1fpkt"];
1002--4474[label="1;1pkt 1fpkt"];
1002--6356[label="1;1pkt 1fpkt"];
1002--7561[label="1;1pkt 1fpkt"];
1003--1076[label="1;1pkt 1fpkt"];
1003--1563[label="1;1pkt 1fpkt"];
1003--2289[label="1;1pkt 1fpkt"];
1003--2905[label="1;1pkt 1fpkt"];
1003--4474[label="0.96;24pkt 24fpkt"];
1003--6356[label="0.96;24pkt 24fpkt"];
1003--7561[label="1;25pkt 25fpkt"];
1076--7561[label="1;1pkt 1fpkt"];
1563--4474[label="1;1pkt 1fpkt"];
1563--6356[label="1;1pkt 1fpkt"];
1563--7561[label="1;1pkt 1fpkt"];
2289--4474[label="1;1pkt 1fpkt"];
2289--6356[label="1;1pkt 1fpkt"];
2289--7561[label="1;1pkt 1fpkt"];
2905--4474[label="1;1pkt 1fpkt"];
2905--6356[label="1;1pkt 1fpkt"];
2905--7561[label="1;1pkt 1fpkt"];
4474--6356[label="1;27pkt 27fpkt"];
4474--7561[label="1;27pkt 27fpkt"];
6356--7561[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="138.186.16.128" src_port="6257"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="142.150.20.128"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.94.76.128"/>
    </slice>
    <from sec="1039669617" usec="0"/>
    <to sec="1039669645" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.108.2.129"/>
    </slice>
    <from sec="1039669203" usec="0"/>
    <to sec="1039669927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.172.252.129"/>
    </slice>
    <from sec="1039669203" usec="0"/>
    <to sec="1039669845" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="138.7.79.130"/>
    </slice>
    <from sec="1039669259" usec="0"/>
    <to sec="1039669847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.196.23.131"/>
    </slice>
    <from sec="1039669404" usec="0"/>
    <to sec="1039669420" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.50.41.131"/>
    </slice>
    <from sec="1039669278" usec="0"/>
    <to sec="1039669395" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.983876,1.77655,999,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_833{
style=filled;
color=gray75;
224[label="39.1.182.131s;2pkt 2fpkt", shape=rectangle, color=red];
716[label="138.186.218.131;s;16pkt 16fpkt", shape=diamond, color=yellow];
717[label="64.161.75.120;d;1pkt 1fpkt", shape=diamond, color=yellow];
1102[label="209.80.72.189;d;1pkt 1fpkt", shape=diamond, color=yellow];
2275[label="61.74.146.13;d;1pkt 1fpkt", shape=diamond, color=yellow];
4509[label="38.2.94.131;38pkt 38fpkt", shape=pentagon, color=darkviolet];
4513[label="138.186.218.131;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6379[label="38.2.94.131;39pkt 39fpkt", shape=invtriangle, color=brown];
6383[label="138.186.218.131;2pkt 2fpkt", shape=invtriangle, color=brown];
7582[label="138.186.218.131;2pkt 2fpkt", shape=invhouse, color=bisque];
stat833[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.2.94.131:80, 169.126.143.85:*}[61.8182%]&lt;BR/&gt;{138.186.218.131:*, *:*}[29.0909%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.8269%)&lt;BR/&gt; 6699: (7.69231%)&lt;BR/&gt; 2907: (2.88462%)&lt;BR/&gt; 2745: (1.92308%)&lt;BR/&gt; 2962: (1.44231%)&gt;];
}
224--716[label="0.5;1pkt 1fpkt"];
224--2275[label="1;1pkt 1fpkt"];
224--4509[label="0.5;1pkt 1fpkt"];
224--4513[label="0.5;1pkt 1fpkt"];
224--6379[label="0.5;1pkt 1fpkt"];
224--6383[label="0.5;1pkt 1fpkt"];
224--7582[label="0.5;1pkt 1fpkt"];
716--717[label="1;1pkt 1fpkt"];
716--722[label="0.125;2pkt 2fpkt"];
716--1102[label="1;1pkt 1fpkt"];
716--1884[label="0.0625;1pkt 1fpkt"];
716--2275[label="1;1pkt 1fpkt"];
716--4513[label="1;2pkt 2fpkt"];
716--6383[label="1;2pkt 2fpkt"];
716--7582[label="1;2pkt 2fpkt"];
2275--4513[label="1;1pkt 1fpkt"];
2275--6383[label="1;1pkt 1fpkt"];
2275--7582[label="1;1pkt 1fpkt"];
4509--6379[label="1;38pkt 38fpkt"];
4513--6383[label="1;2pkt 2fpkt"];
4513--7582[label="1;2pkt 2fpkt"];
6383--7582[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="138.186.218.131"/>
      <filter dst_ip="169.126.143.85" src_ip="38.2.94.131" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="138.7.35.132"/>
    </slice>
    <from sec="1039669203" usec="0"/>
    <to sec="1039669846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.82.98.132"/>
    </slice>
    <from sec="1039669204" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="138.7.9.133"/>
    </slice>
    <from sec="1039669694" usec="0"/>
    <to sec="1039669722" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.28.142.133"/>
    </slice>
    <from sec="1039669336" usec="0"/>
    <to sec="1039669355" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_838{
style=filled;
color=gray75;
686[label="172.93.129.191;d;34pkt 34fpkt", shape=diamond, color=yellow];
1208[label="38.64.190.133;s;6pkt 6fpkt", shape=diamond, color=yellow];
2570[label="38.64.190.133;s;6pkt 6fpkt", shape=hexagon, color=black];
2597[label="172.93.129.191;d;29pkt 29fpkt", shape=hexagon, color=black];
4318[label="208.166.163.106;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4529[label="38.64.190.133;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6050[label="202.112.255.74;4pkt 4fpkt", shape=invtriangle, color=brown];
6253[label="208.166.163.106;4pkt 4fpkt", shape=invtriangle, color=brown];
7381[label="202.112.255.74;5pkt 5fpkt", shape=invhouse, color=bisque];
stat838[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 172.93.129.191:*}[89.1892%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.9691%)&lt;BR/&gt; 3254: (2.57732%)&lt;BR/&gt; 3232: (2.57732%)&lt;BR/&gt; 3230: (2.57732%)&lt;BR/&gt; 3229: (2.57732%)&gt;];
}
686--1208[label="1;6pkt 6fpkt"];
686--1499[label="0.0588235;2pkt 2fpkt"];
686--2247[label="0.0294118;1pkt 1fpkt"];
686--2290[label="0.0588235;2pkt 2fpkt"];
686--2570[label="1;6pkt 6fpkt"];
686--2597[label="1;29pkt 29fpkt"];
686--2748[label="0.0588235;2pkt 2fpkt"];
686--3354[label="0.0588235;2pkt 2fpkt"];
686--3429[label="0.0294118;1pkt 1fpkt"];
686--3628[label="0.0588235;2pkt 2fpkt"];
686--3695[label="0.6;3pkt 3fpkt"];
686--4003[label="0.5;2pkt 2fpkt"];
686--4318[label="1;4pkt 4fpkt"];
686--4529[label="1;5pkt 5fpkt"];
686--4688[label="0.0294118;1pkt 1fpkt"];
686--4894[label="0.5;3pkt 3fpkt"];
686--5300[label="0.0294118;1pkt 1fpkt"];
686--5496[label="0.0322581;1pkt 1fpkt"];
686--5631[label="0.0588235;2pkt 2fpkt"];
686--5678[label="0.030303;1pkt 1fpkt"];
686--5847[label="0.666667;4pkt 4fpkt"];
686--6050[label="0.5;2pkt 2fpkt"];
686--6253[label="1;4pkt 4fpkt"];
686--6640[label="0.5;3pkt 3fpkt"];
686--7114[label="0.0588235;2pkt 2fpkt"];
686--7140[label="0.0294118;1pkt 1fpkt"];
686--7247[label="0.6;3pkt 3fpkt"];
686--7381[label="0.4;2pkt 2fpkt"];
1208--2570[label="1;6pkt 6fpkt"];
1208--2597[label="1;6pkt 6fpkt"];
1208--4529[label="1;5pkt 5fpkt"];
2570--2597[label="1;6pkt 6fpkt"];
2570--4529[label="1;5pkt 5fpkt"];
2597--3429[label="0.0344828;1pkt 1fpkt"];
2597--3628[label="0.0689655;2pkt 2fpkt"];
2597--3695[label="0.6;3pkt 3fpkt"];
2597--4003[label="0.5;2pkt 2fpkt"];
2597--4318[label="1;4pkt 4fpkt"];
2597--4529[label="1;5pkt 5fpkt"];
2597--4688[label="0.0344828;1pkt 1fpkt"];
2597--4894[label="0.5;3pkt 3fpkt"];
2597--5300[label="0.0344828;1pkt 1fpkt"];
2597--5678[label="0.0344828;1pkt 1fpkt"];
2597--5847[label="0.666667;4pkt 4fpkt"];
2597--6050[label="0.5;2pkt 2fpkt"];
2597--6253[label="1;4pkt 4fpkt"];
2597--6640[label="0.5;3pkt 3fpkt"];
2597--7140[label="0.0344828;1pkt 1fpkt"];
2597--7247[label="0.6;3pkt 3fpkt"];
2597--7381[label="0.4;2pkt 2fpkt"];
4318--6253[label="1;4pkt 4fpkt"];
6050--7381[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="172.93.129.191" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669710" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.203.42.134"/>
    </slice>
    <from sec="1039669520" usec="0"/>
    <to sec="1039669549" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.66.76.135"/>
    </slice>
    <from sec="1039669385" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645838,1.80177,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_841{
style=filled;
color=gray75;
2112[label="214.231.130.96;d;53pkt 53fpkt", shape=diamond, color=yellow];
4549[label="220.41.124.135;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6410[label="220.41.124.135;3pkt 3fpkt", shape=invtriangle, color=brown];
stat841[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 214.231.130.96:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2505: (8.47458%)&lt;BR/&gt; 1214: (6.77966%)&lt;BR/&gt; 0: (5.08475%)&lt;BR/&gt; 3698: (4.23729%)&lt;BR/&gt; 1796: (3.38983%)&gt;];
}
2112--4549[label="1;3pkt 3fpkt"];
2112--6410[label="1;3pkt 3fpkt"];
4549--6410[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="214.231.130.96"/>
    </slice>
    <from sec="1039669202" usec="0"/>
    <to sec="1039669916" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790471,1.82041,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_842{
style=filled;
color=gray75;
228[label="96.27.197.135s;38pkt 38fpkt", shape=rectangle, color=red];
4552[label="96.27.197.135;145pkt 145fpkt", shape=pentagon, color=darkviolet];
6413[label="96.27.197.135;144pkt 144fpkt", shape=invtriangle, color=brown];
stat842[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.27.197.135:1039, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1039: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
228--4552[label="1;38pkt 38fpkt"];
228--6413[label="1;38pkt 38fpkt"];
4552--6413[label="1;144pkt 144fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.27.197.135" src_port="1039"/>
    </slice>
    <from sec="1039669427" usec="0"/>
    <to sec="1039669450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.11.202.135"/>
    </slice>
    <from sec="1039669261" usec="0"/>
    <to sec="1039669925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.221.19.136"/>
    </slice>
    <from sec="1039669487" usec="0"/>
    <to sec="1039669506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.937874,1.83478,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_845{
style=filled;
color=gray75;
1310[label="140.3.249.27;d;383pkt 383fpkt", shape=diamond, color=yellow];
1705[label="198.201.27.136;s;129pkt 129fpkt", shape=diamond, color=yellow];
2963[label="198.201.27.136;s;129pkt 129fpkt", shape=hexagon, color=black];
4558[label="198.201.27.136;128pkt 128fpkt", shape=pentagon, color=darkviolet];
5107[label="199.76.52.200;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6769[label="199.76.52.200;5pkt 5fpkt", shape=invtriangle, color=brown];
stat845[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.153.76.13:80, 140.3.249.27:*}[39.5833%]&lt;BR/&gt;{198.201.27.136:80, 140.3.249.27:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2439: (0.257069%)&lt;BR/&gt; 2436: (0.257069%)&lt;BR/&gt; 2434: (0.257069%)&lt;BR/&gt; 2432: (0.257069%)&gt;];
}
1310--1705[label="0.992248;128pkt 128fpkt"];
1310--2426[label="1;152pkt 152fpkt"];
1310--2963[label="0.992248;128pkt 128fpkt"];
1310--3368[label="1;151pkt 151fpkt"];
1310--4051[label="0.04;1pkt 1fpkt"];
1310--4558[label="1;128pkt 128fpkt"];
1310--5107[label="1;4pkt 4fpkt"];
1310--5640[label="1;152pkt 152fpkt"];
1310--6078[label="0.04;1pkt 1fpkt"];
1310--6769[label="1;5pkt 5fpkt"];
1310--7119[label="1;151pkt 151fpkt"];
1705--2679[label="0.00775194;1pkt 1fpkt"];
1705--2963[label="1;129pkt 129fpkt"];
1705--4558[label="1;128pkt 128fpkt"];
2963--4558[label="1;128pkt 128fpkt"];
5107--6769[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.249.27" src_ip="208.153.76.13" src_port="80"/>
      <filter dst_ip="140.3.249.27" src_ip="198.201.27.136" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.116.108.136"/>
    </slice>
    <from sec="1039669206" usec="0"/>
    <to sec="1039669921" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.194.109.136"/>
    </slice>
    <from sec="1039669205" usec="0"/>
    <to sec="1039669270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.97.190.136"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.188.1.137"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_850{
style=filled;
color=gray75;
1344[label="148.110.14.137;s;2pkt 2fpkt", shape=diamond, color=yellow];
4570[label="148.110.14.137;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat850[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.110.14.137:5801, 202.52.106.19:3332}[25%]&lt;BR/&gt;{148.110.14.137:5801, 36.96.225.29:3077}[25%]&lt;BR/&gt;{148.110.14.137:2620, 196.226.65.23:7743}[25%]&lt;BR/&gt;{148.110.14.137:5801, 196.226.65.23:1619}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5801: (40%)&lt;BR/&gt; 3077: (20%)&lt;BR/&gt; 7743: (10%)&lt;BR/&gt; 3332: (10%)&lt;BR/&gt; 2620: (10%)&gt;];
}
1344--4570[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.226.65.23" dst_port="1619" src_ip="148.110.14.137" src_port="5801"/>
      <filter dst_ip="196.226.65.23" dst_port="7743" src_ip="148.110.14.137" src_port="2620"/>
      <filter dst_ip="36.96.225.29" dst_port="3077" src_ip="148.110.14.137" src_port="5801"/>
      <filter dst_ip="202.52.106.19" dst_port="3332" src_ip="148.110.14.137" src_port="5801"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="138.186.176.137"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_852{
style=filled;
color=gray75;
573[label="202.155.218.137;s;626pkt 626fpkt", shape=diamond, color=yellow];
4577[label="202.155.218.137;626pkt 626fpkt", shape=pentagon, color=darkviolet];
6429[label="202.155.218.137;625pkt 625fpkt", shape=invtriangle, color=brown];
7611[label="202.155.218.137;626pkt 626fpkt", shape=invhouse, color=bisque];
stat852[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.155.218.137:*, 215.90.72.42:80}[27.6358%]&lt;BR/&gt;{202.155.218.137:80, 215.90.72.42:*}[20.4473%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (24.0511%)&lt;BR/&gt; 6699: (7.59089%)&lt;BR/&gt; 1755: (2.71674%)&lt;BR/&gt; 53: (2.71674%)&lt;BR/&gt; 6346: (1.19856%)&gt;];
}
573--3179[label="0.00159744;1pkt 1fpkt"];
573--3180[label="0.00159744;1pkt 1fpkt"];
573--3181[label="0.00181488;1pkt 1fpkt"];
573--3184[label="0.00159744;1pkt 1fpkt"];
573--3185[label="0.0111821;7pkt 7fpkt"];
573--3187[label="0.00159744;1pkt 1fpkt"];
573--3188[label="0.00159744;1pkt 1fpkt"];
573--4577[label="1;626pkt 626fpkt"];
573--6429[label="1;625pkt 625fpkt"];
573--7611[label="1;626pkt 626fpkt"];
4577--6429[label="1;625pkt 625fpkt"];
4577--7611[label="1;626pkt 626fpkt"];
6429--7611[label="1;625pkt 625fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.72.42" src_ip="202.155.218.137" src_port="80"/>
      <filter dst_ip="215.90.72.42" dst_port="80" src_ip="202.155.218.137"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669912" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752371,1.85474,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_853{
style=filled;
color=gray75;
232[label="214.109.49.140s;39pkt 39fpkt", shape=rectangle, color=red];
4586[label="214.109.49.140;103pkt 103fpkt", shape=pentagon, color=darkviolet];
stat853[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.109.49.140:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
232--4586[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.109.49.140" src_port="1028"/>
    </slice>
    <from sec="1039669395" usec="0"/>
    <to sec="1039669412" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.141.56.140"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.209.133.140"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.150.163.140"/>
    </slice>
    <from sec="1039669632" usec="0"/>
    <to sec="1039669657" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="138.186.176.140"/>
    </slice>
    <from sec="1039669219" usec="0"/>
    <to sec="1039669924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.193.198.140"/>
    </slice>
    <from sec="1039669685" usec="0"/>
    <to sec="1039669707" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752371,1.85474,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_859{
style=filled;
color=gray75;
359[label="197.199.24.141s;68pkt 68fpkt", shape=rectangle, color=red];
4598[label="197.199.24.141;115pkt 115fpkt", shape=pentagon, color=darkviolet];
stat859[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.199.24.141:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 2594: (0.546448%)&lt;BR/&gt; 2585: (0.546448%)&lt;BR/&gt; 2576: (0.546448%)&lt;BR/&gt; 2564: (0.546448%)&gt;];
}
359--4598[label="0.985294;67pkt 67fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.199.24.141"/>
    </slice>
    <from sec="1039669897" usec="0"/>
    <to sec="1039669916" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752371,1.85474,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_860{
style=filled;
color=gray75;
237[label="202.85.105.141s;32pkt 32fpkt", shape=rectangle, color=red];
4602[label="202.85.105.141;109pkt 109fpkt", shape=pentagon, color=darkviolet];
stat860[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.85.105.141:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
237--4602[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.85.105.141" src_port="1028"/>
    </slice>
    <from sec="1039669848" usec="0"/>
    <to sec="1039669868" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.193.1.142"/>
    </slice>
    <from sec="1039669206" usec="0"/>
    <to sec="1039669926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752371,1.85474,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_862{
style=filled;
color=gray75;
239[label="212.140.210.142s;45pkt 45fpkt", shape=rectangle, color=red];
4612[label="212.140.210.142;168pkt 168fpkt", shape=pentagon, color=darkviolet];
stat862[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.140.210.142:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
239--4612[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="212.140.210.142" src_port="1026"/>
    </slice>
    <from sec="1039669469" usec="0"/>
    <to sec="1039669496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="140.3.244.142"/>
    </slice>
    <from sec="1039669265" usec="0"/>
    <to sec="1039669308" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.137.18.144"/>
    </slice>
    <from sec="1039669335" usec="0"/>
    <to sec="1039669353" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.937874,1.83478,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_865{
style=filled;
color=gray75;
1544[label="215.87.67.144;s;319pkt 319fpkt", shape=diamond, color=yellow];
2380[label="215.136.45.160;d;22pkt 22fpkt", shape=diamond, color=yellow];
2684[label="215.87.67.144;s;235pkt 235fpkt", shape=hexagon, color=black];
4622[label="215.87.67.144;359pkt 359fpkt", shape=pentagon, color=darkviolet];
6455[label="215.87.67.144;359pkt 359fpkt", shape=invtriangle, color=brown];
stat865[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.87.67.144:1647, *:53}[89.5013%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (47.1793%)&lt;BR/&gt; 1647: (47.102%)&lt;BR/&gt; 0: (4.17311%)&lt;BR/&gt; 80: (0.734158%)&lt;BR/&gt; 4958: (0.0386399%)&gt;];
}
1544--1608[label="0.0169492;1pkt 1fpkt"];
1544--2380[label="0.0454545;1pkt 1fpkt"];
1544--2431[label="0.010989;1pkt 1fpkt"];
1544--2684[label="1;235pkt 235fpkt"];
1544--3115[label="0.010989;1pkt 1fpkt"];
1544--4622[label="0.996865;318pkt 318fpkt"];
1544--6455[label="0.996865;318pkt 318fpkt"];
2380--2504[label="0.863636;19pkt 19fpkt"];
2380--2684[label="0.0454545;1pkt 1fpkt"];
2380--2914[label="0.0454545;1pkt 1fpkt"];
2380--3132[label="0.318182;7pkt 7fpkt"];
2380--3185[label="0.0454545;1pkt 1fpkt"];
2380--3931[label="0.0454545;1pkt 1fpkt"];
2380--4422[label="0.0454545;1pkt 1fpkt"];
2380--4622[label="0.0454545;1pkt 1fpkt"];
2380--6004[label="0.0454545;1pkt 1fpkt"];
2380--6322[label="0.0454545;1pkt 1fpkt"];
2380--6455[label="0.0454545;1pkt 1fpkt"];
2684--4622[label="0.995745;234pkt 234fpkt"];
2684--6455[label="0.995745;234pkt 234fpkt"];
4622--6455[label="1;359pkt 359fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="215.87.67.144" src_port="1647"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905994,1.86884,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_866{
style=filled;
color=gray75;
1123[label="140.3.201.123;d;51pkt 51fpkt", shape=diamond, color=yellow];
1456[label="38.44.54.146;s;38pkt 38fpkt", shape=diamond, color=yellow];
1886[label="215.218.198.23;s;11pkt 11fpkt", shape=diamond, color=yellow];
2709[label="140.3.201.123;d;49pkt 49fpkt", shape=hexagon, color=black];
3060[label="215.218.198.23;s;11pkt 11fpkt", shape=hexagon, color=black];
4642[label="38.44.54.146;37pkt 37fpkt", shape=pentagon, color=darkviolet];
stat866[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.44.54.146:80, 140.3.201.123:*}[74.5098%]&lt;BR/&gt;{215.218.198.23:80, 140.3.201.123:*}[21.5686%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1547: (1.01523%)&lt;BR/&gt; 1544: (1.01523%)&lt;BR/&gt; 1540: (1.01523%)&lt;BR/&gt; 1525: (1.01523%)&gt;];
}
1123--1456[label="1;38pkt 38fpkt"];
1123--1886[label="1;11pkt 11fpkt"];
1123--2709[label="1;49pkt 49fpkt"];
1123--3060[label="1;11pkt 11fpkt"];
1123--4642[label="1;37pkt 37fpkt"];
1456--2709[label="1;38pkt 38fpkt"];
1456--4642[label="1;37pkt 37fpkt"];
1886--2709[label="0.818182;9pkt 9fpkt"];
1886--3060[label="1;11pkt 11fpkt"];
2709--3060[label="0.818182;9pkt 9fpkt"];
2709--4642[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.201.123" src_ip="38.44.54.146" src_port="80"/>
      <filter dst_ip="140.3.201.123" src_ip="215.218.198.23" src_port="80"/>
    </slice>
    <from sec="1039669203" usec="0"/>
    <to sec="1039669835" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.126.177.146"/>
    </slice>
    <from sec="1039669209" usec="0"/>
    <to sec="1039669910" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645838,1.80177,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_868{
style=filled;
color=gray75;
2121[label="61.139.233.146;s;1pkt 1fpkt", shape=diamond, color=yellow];
4648[label="61.139.233.146;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6474[label="61.139.233.146;1pkt 1fpkt", shape=invtriangle, color=brown];
stat868[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.139.233.146:3684, 148.110.158.4:4662}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 3684: (50%)&gt;];
}
2121--4648[label="1;1pkt 1fpkt"];
2121--6474[label="1;1pkt 1fpkt"];
4648--6474[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.158.4" dst_port="4662" src_ip="61.139.233.146" src_port="3684"/>
    </slice>
    <from sec="1039669202" usec="0"/>
    <to sec="1039669927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752371,1.85474,503,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_869{
style=filled;
color=gray75;
37[label="36.193.89.147s;1pkt 1fpkt", shape=rectangle, color=red];
4654[label="36.193.89.147;10pkt 10fpkt", shape=pentagon, color=darkviolet];
stat869[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.193.89.147:80, 140.3.245.109:*}[80%]&lt;BR/&gt;{36.193.89.147:80, 140.3.201.16:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4310: (9.09091%)&lt;BR/&gt; 4485: (4.54545%)&lt;BR/&gt; 4439: (4.54545%)&lt;BR/&gt; 4432: (4.54545%)&gt;];
}
37--1100[label="1;1pkt 1fpkt"];
37--4654[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.245.109" src_ip="36.193.89.147" src_port="80"/>
      <filter dst_ip="140.3.201.16" src_ip="36.193.89.147" src_port="80"/>
    </slice>
    <from sec="1039669258" usec="0"/>
    <to sec="1039669855" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="223.138.109.147"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669455" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="138.177.155.147"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669353" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.180.79.148"/>
    </slice>
    <from sec="1039669213" usec="0"/>
    <to sec="1039669900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.126.128.148"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669910" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.178.180.148"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.213.180.149"/>
    </slice>
    <from sec="1039669273" usec="0"/>
    <to sec="1039669381" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.87.66.150"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669922" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_877{
style=filled;
color=gray75;
1131[label="64.96.74.143;s;1pkt 1fpkt", shape=diamond, color=yellow];
1778[label="61.188.1.137;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat877[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.188.1.137:6699, 215.90.90.30:1620}[50%]&lt;BR/&gt;{64.96.74.143:6699, 215.90.90.30:1544}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1620: (25%)&lt;BR/&gt; 1544: (25%)&gt;];
}
1131--2801[label="1;1pkt 1fpkt"];
1778--2801[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.90.30" dst_port="1544" src_ip="64.96.74.143" src_port="6699"/>
      <filter dst_ip="215.90.90.30" dst_port="1620" src_ip="61.188.1.137" src_port="6699"/>
    </slice>
    <from sec="1039669205" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.65.214.151"/>
    </slice>
    <from sec="1039669545" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_879{
style=filled;
color=gray75;
1881[label="214.216.51.152;s;54pkt 54fpkt", shape=diamond, color=yellow];
4692[label="214.216.51.152;65pkt 65fpkt", shape=pentagon, color=darkviolet];
stat879[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.216.51.152:80, *:*}[98.4848%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1597%)&lt;BR/&gt; 1040: (1.68067%)&lt;BR/&gt; 0: (1.68067%)&lt;BR/&gt; 65311: (0.840336%)&lt;BR/&gt; 65277: (0.840336%)&gt;];
}
1881--4692[label="0.981481;53pkt 53fpkt"];
</description>
    <slice>
      <filter src_ip="214.216.51.152" src_port="80"/>
    </slice>
    <from sec="1039669202" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.6.244.152"/>
    </slice>
    <from sec="1039669450" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.51.6.155"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905994,1.86884,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_882{
style=filled;
color=gray75;
588[label="148.110.221.229;d;172pkt 172fpkt", shape=diamond, color=yellow];
668[label="33.49.166.2;s;2pkt 2fpkt", shape=diamond, color=yellow];
2528[label="33.49.166.2;s;2pkt 2fpkt", shape=hexagon, color=black];
3002[label="148.110.221.229;d;172pkt 172fpkt", shape=hexagon, color=black];
3224[label="33.49.166.2;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4722[label="61.109.62.155;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat882[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6257, 148.110.221.229:6257}[95.3488%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (95.7265%)&lt;BR/&gt; 6699: (1.1396%)&lt;BR/&gt; 1344: (0.712251%)&lt;BR/&gt; 4941: (0.42735%)&lt;BR/&gt; 65535: (0.2849%)&gt;];
}
588--668[label="1;2pkt 2fpkt"];
588--2528[label="1;2pkt 2fpkt"];
588--3002[label="1;172pkt 172fpkt"];
588--3224[label="1;2pkt 2fpkt"];
588--4722[label="1;1pkt 1fpkt"];
668--2528[label="1;2pkt 2fpkt"];
668--3002[label="1;2pkt 2fpkt"];
668--3224[label="1;2pkt 2fpkt"];
2528--3002[label="1;2pkt 2fpkt"];
2528--3224[label="1;2pkt 2fpkt"];
3002--3224[label="1;2pkt 2fpkt"];
3002--4722[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.221.229" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790471,1.82041,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_883{
style=filled;
color=gray75;
248[label="202.36.192.155s;104pkt 104fpkt", shape=rectangle, color=red];
4726[label="202.36.192.155;213pkt 213fpkt", shape=pentagon, color=darkviolet];
6525[label="202.36.192.155;213pkt 213fpkt", shape=invtriangle, color=brown];
stat883[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.36.192.155:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
248--4726[label="0.990385;103pkt 103fpkt"];
248--6525[label="0.990385;103pkt 103fpkt"];
4726--6525[label="1;213pkt 213fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.36.192.155" src_port="1028"/>
    </slice>
    <from sec="1039669249" usec="0"/>
    <to sec="1039669282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752371,1.85474,503,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_884{
style=filled;
color=gray75;
247[label="214.37.56.155s;1pkt 1fpkt", shape=rectangle, color=red];
4727[label="36.128.220.155;18pkt 18fpkt", shape=pentagon, color=darkviolet];
stat884[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.128.220.155:80, 169.126.142.113:*}[66.6667%]&lt;BR/&gt;{36.128.220.155:80, 215.87.67.142:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3912: (5.26316%)&lt;BR/&gt; 3933: (2.63158%)&lt;BR/&gt; 3572: (2.63158%)&lt;BR/&gt; 3510: (2.63158%)&gt;];
}
247--4727[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.126.142.113" src_ip="36.128.220.155" src_port="80"/>
      <filter dst_ip="215.87.67.142" src_ip="36.128.220.155" src_port="80"/>
    </slice>
    <from sec="1039669207" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_885{
style=filled;
color=gray75;
2077[label="64.171.15.156;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat885[shape=component, label=&lt;Rules:&lt;BR/&gt;{64.171.15.156:2975, 148.110.86.86:6346}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (50%)&lt;BR/&gt; 2975: (50%)&gt;];
}
2077--2465[label="1;1pkt 1fpkt"];
2077--4730[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.86.86" dst_port="6346" src_ip="64.171.15.156" src_port="2975"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.93.151.157"/>
    </slice>
    <from sec="1039669713" usec="0"/>
    <to sec="1039669749" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_887{
style=filled;
color=gray75;
2138[label="215.37.32.158;s;7pkt 7fpkt", shape=diamond, color=yellow];
4745[label="215.37.32.158;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6539[label="215.37.32.158;7pkt 7fpkt", shape=invtriangle, color=brown];
7684[label="215.37.32.158;7pkt 7fpkt", shape=invhouse, color=bisque];
stat887[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.37.32.158:80, 215.87.67.219:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 23463: (7.40741%)&lt;BR/&gt; 23293: (7.40741%)&lt;BR/&gt; 22663: (7.40741%)&lt;BR/&gt; 21756: (7.40741%)&gt;];
}
2138--4745[label="1;6pkt 6fpkt"];
2138--6539[label="1;7pkt 7fpkt"];
2138--7684[label="1;7pkt 7fpkt"];
4745--6539[label="1;6pkt 6fpkt"];
4745--7684[label="1;6pkt 6fpkt"];
6539--7684[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="215.87.67.219" src_ip="215.37.32.158" src_port="80"/>
    </slice>
    <from sec="1039669207" usec="0"/>
    <to sec="1039669914" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_888{
style=filled;
color=gray75;
250[label="39.30.135.158s;37pkt 37fpkt", shape=rectangle, color=red];
4749[label="39.30.135.158;207pkt 207fpkt", shape=pentagon, color=darkviolet];
6541[label="39.30.135.158;206pkt 206fpkt", shape=invtriangle, color=brown];
7685[label="39.30.135.158;206pkt 206fpkt", shape=invhouse, color=bisque];
stat888[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.30.135.158:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
250--4749[label="1;37pkt 37fpkt"];
250--6541[label="1;37pkt 37fpkt"];
250--7685[label="1;37pkt 37fpkt"];
4749--6541[label="1;206pkt 206fpkt"];
4749--7685[label="1;206pkt 206fpkt"];
6541--7685[label="1;206pkt 206fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="39.30.135.158" src_port="1029"/>
    </slice>
    <from sec="1039669287" usec="0"/>
    <to sec="1039669348" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_889{
style=filled;
color=gray75;
959[label="162.113.67.159;s;1pkt 1fpkt", shape=diamond, color=yellow];
4754[label="162.113.67.159;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat889[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.113.67.159:6699, 138.186.176.219:3044}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3044: (50%)&gt;];
}
959--4754[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.176.219" dst_port="3044" src_ip="162.113.67.159" src_port="6699"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_890{
style=filled;
color=gray75;
252[label="96.44.176.159s;43pkt 43fpkt", shape=rectangle, color=red];
4757[label="96.44.176.159;232pkt 232fpkt", shape=pentagon, color=darkviolet];
6545[label="96.44.176.159;231pkt 231fpkt", shape=invtriangle, color=brown];
7688[label="96.44.176.159;231pkt 231fpkt", shape=invhouse, color=bisque];
stat890[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.44.176.159:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
252--4757[label="1;43pkt 43fpkt"];
252--6545[label="1;43pkt 43fpkt"];
252--7688[label="1;43pkt 43fpkt"];
4757--6545[label="1;231pkt 231fpkt"];
4757--7688[label="1;231pkt 231fpkt"];
6545--7688[label="1;231pkt 231fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.44.176.159" src_port="1026"/>
    </slice>
    <from sec="1039669278" usec="0"/>
    <to sec="1039669317" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.96.189.159"/>
    </slice>
    <from sec="1039669217" usec="0"/>
    <to sec="1039669919" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.76.36.160"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.216.55.160"/>
    </slice>
    <from sec="1039669469" usec="0"/>
    <to sec="1039669725" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.251.65.160"/>
    </slice>
    <from sec="1039669881" usec="0"/>
    <to sec="1039669909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.162.105.160"/>
    </slice>
    <from sec="1039669870" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.16.143.160"/>
    </slice>
    <from sec="1039669838" usec="0"/>
    <to sec="1039669876" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752371,1.85474,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_897{
style=filled;
color=gray75;
255[label="202.168.201.160s;39pkt 39fpkt", shape=rectangle, color=red];
4772[label="202.168.201.160;127pkt 127fpkt", shape=pentagon, color=darkviolet];
stat897[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.168.201.160:1033, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1033: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
255--4772[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.168.201.160" src_port="1033"/>
    </slice>
    <from sec="1039669665" usec="0"/>
    <to sec="1039669690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.179.207.160"/>
    </slice>
    <from sec="1039669721" usec="0"/>
    <to sec="1039669927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.160.16.161"/>
    </slice>
    <from sec="1039669311" usec="0"/>
    <to sec="1039669925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.85.155.161"/>
    </slice>
    <from sec="1039669489" usec="0"/>
    <to sec="1039669516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_901{
style=filled;
color=gray75;
256[label="212.134.157.161s;91pkt 91fpkt", shape=rectangle, color=red];
4780[label="212.134.157.161;163pkt 163fpkt", shape=pentagon, color=darkviolet];
6554[label="212.134.157.161;163pkt 163fpkt", shape=invtriangle, color=brown];
7694[label="212.134.157.161;162pkt 162fpkt", shape=invhouse, color=bisque];
stat901[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.134.157.161:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
256--4780[label="1;91pkt 91fpkt"];
256--6554[label="1;91pkt 91fpkt"];
256--7694[label="0.989011;90pkt 90fpkt"];
4780--6554[label="1;163pkt 163fpkt"];
4780--7694[label="1;162pkt 162fpkt"];
6554--7694[label="1;162pkt 162fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="212.134.157.161" src_port="1026"/>
    </slice>
    <from sec="1039669587" usec="0"/>
    <to sec="1039669612" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.168.165.161"/>
    </slice>
    <from sec="1039669238" usec="0"/>
    <to sec="1039669272" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.66.76.162"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11796,1.82888,999,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_905{
style=filled;
color=gray75;
41[label="36.74.187.162s;1pkt 1fpkt", shape=rectangle, color=red];
1967[label="36.74.187.162;s;2pkt 2fpkt", shape=diamond, color=yellow];
2978[label="36.74.187.162;s;2pkt 2fpkt", shape=hexagon, color=black];
4794[label="36.74.187.162;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6568[label="36.74.187.162;2pkt 2fpkt", shape=invtriangle, color=brown];
stat905[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.74.187.162:6699, 140.3.3.8:1085}[50%]&lt;BR/&gt;{36.74.187.162:6699, 140.3.3.8:1208}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1208: (25%)&lt;BR/&gt; 1085: (25%)&gt;];
}
41--1967[label="1;1pkt 1fpkt"];
41--2978[label="1;1pkt 1fpkt"];
41--6568[label="1;1pkt 1fpkt"];
1967--2978[label="1;2pkt 2fpkt"];
1967--4794[label="1;1pkt 1fpkt"];
1967--6568[label="1;2pkt 2fpkt"];
2978--4794[label="1;1pkt 1fpkt"];
2978--6568[label="1;2pkt 2fpkt"];
4794--6568[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.3.8" dst_port="1208" src_ip="36.74.187.162" src_port="6699"/>
      <filter dst_ip="140.3.3.8" dst_port="1085" src_ip="36.74.187.162" src_port="6699"/>
    </slice>
    <from sec="1039669437" usec="0"/>
    <to sec="1039669741" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790471,1.82041,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_906{
style=filled;
color=gray75;
257[label="214.238.137.163s;78pkt 78fpkt", shape=rectangle, color=red];
4799[label="214.238.137.163;107pkt 107fpkt", shape=pentagon, color=darkviolet];
6573[label="214.238.137.163;108pkt 108fpkt", shape=invtriangle, color=brown];
stat906[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.238.137.163:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
257--4799[label="0.987179;77pkt 77fpkt"];
257--6573[label="1;78pkt 78fpkt"];
4799--6573[label="1;107pkt 107fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.238.137.163" src_port="1025"/>
    </slice>
    <from sec="1039669574" usec="0"/>
    <to sec="1039669591" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.203.74.164"/>
    </slice>
    <from sec="1039669831" usec="0"/>
    <to sec="1039669846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_908{
style=filled;
color=gray75;
1650[label="199.141.127.170;d;8pkt 8fpkt", shape=diamond, color=yellow];
1651[label="148.110.48.165;s;16pkt 16fpkt", shape=diamond, color=yellow];
4815[label="148.110.48.165;16pkt 16fpkt", shape=pentagon, color=darkviolet];
6582[label="148.110.48.165;16pkt 16fpkt", shape=invtriangle, color=brown];
7711[label="148.110.48.165;16pkt 16fpkt", shape=invhouse, color=bisque];
stat908[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.110.48.165:*, 199.141.127.162:80}[50%]&lt;BR/&gt;{148.110.48.165:*, 199.141.127.170:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3340: (3.47222%)&lt;BR/&gt; 3339: (3.47222%)&lt;BR/&gt; 3338: (3.47222%)&lt;BR/&gt; 3337: (3.47222%)&gt;];
}
1650--1651[label="1;8pkt 8fpkt"];
1650--4815[label="1;8pkt 8fpkt"];
1650--6582[label="1;8pkt 8fpkt"];
1650--7711[label="1;8pkt 8fpkt"];
1651--4815[label="1;16pkt 16fpkt"];
1651--6582[label="1;16pkt 16fpkt"];
1651--7711[label="1;16pkt 16fpkt"];
4815--6582[label="1;16pkt 16fpkt"];
4815--7711[label="1;16pkt 16fpkt"];
6582--7711[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="199.141.127.170" dst_port="80" src_ip="148.110.48.165"/>
      <filter dst_ip="199.141.127.162" dst_port="80" src_ip="148.110.48.165"/>
    </slice>
    <from sec="1039669203" usec="0"/>
    <to sec="1039669651" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.138.160.165"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.195.165.165"/>
    </slice>
    <from sec="1039669278" usec="0"/>
    <to sec="1039669304" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_911{
style=filled;
color=gray75;
2252[label="148.110.54.166;s;37pkt 37fpkt", shape=diamond, color=yellow];
4823[label="148.110.54.166;41pkt 41fpkt", shape=pentagon, color=darkviolet];
stat911[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.110.54.166:25, *:*}[69.0476%]&lt;BR/&gt;{148.110.54.166:0, *:0}[30.9524%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (33.9744%)&lt;BR/&gt; 0: (32.0513%)&lt;BR/&gt; 63283: (1.28205%)&lt;BR/&gt; 63203: (1.28205%)&lt;BR/&gt; 62923: (1.28205%)&gt;];
}
2252--4823[label="0.972973;36pkt 36fpkt"];
</description>
    <slice>
      <filter src_ip="148.110.54.166" src_port="25"/>
      <filter src_ip="148.110.54.166"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669914" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.251.101.166"/>
    </slice>
    <from sec="1039669365" usec="0"/>
    <to sec="1039669391" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.176.115.166"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.33.167.166"/>
    </slice>
    <from sec="1039669808" usec="0"/>
    <to sec="1039669846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.68.209.166"/>
    </slice>
    <from sec="1039669804" usec="0"/>
    <to sec="1039669840" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_916{
style=filled;
color=gray75;
1997[label="140.3.211.218;d;165pkt 165fpkt", shape=diamond, color=yellow];
2212[label="215.90.72.21;d;145pkt 145fpkt", shape=diamond, color=yellow];
3460[label="96.51.23.20;59pkt 59fpkt", shape=pentagon, color=darkviolet];
3474[label="96.51.23.21;71pkt 71fpkt", shape=pentagon, color=darkviolet];
4640[label="96.51.22.146;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5699[label="96.51.23.20;60pkt 60fpkt", shape=invtriangle, color=brown];
7275[label="96.51.16.50;39pkt 39fpkt", shape=invhouse, color=bisque];
stat916[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 140.3.211.218:*}[50.7692%]&lt;BR/&gt;{*:80, 215.90.72.21:*}[44.6154%]&lt;BR/&gt;{96.51.23.21:80, *:*}[21.8462%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9102%)&lt;BR/&gt; 2512: (0.2693%)&lt;BR/&gt; 2510: (0.2693%)&lt;BR/&gt; 2508: (0.2693%)&lt;BR/&gt; 2503: (0.2693%)&gt;];
}
1997--3460[label="0.932203;55pkt 55fpkt"];
1997--4308[label="0.0857143;3pkt 3fpkt"];
1997--4640[label="1;18pkt 18fpkt"];
1997--4837[label="0.16;4pkt 4fpkt"];
1997--5699[label="0.933333;56pkt 56fpkt"];
2212--3460[label="0.0169492;1pkt 1fpkt"];
2212--3474[label="0.84507;60pkt 60fpkt"];
2212--3691[label="0.0625;2pkt 2fpkt"];
2212--3760[label="0.973684;37pkt 37fpkt"];
2212--4837[label="0.36;9pkt 9fpkt"];
2212--5699[label="0.0166667;1pkt 1fpkt"];
2212--5891[label="0.974359;38pkt 38fpkt"];
2212--7275[label="0.974359;38pkt 38fpkt"];
3460--5699[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter src_ip="96.51.23.21" src_port="80"/>
      <filter dst_ip="140.3.211.218" src_port="80"/>
      <filter dst_ip="215.90.72.21" src_port="80"/>
    </slice>
    <from sec="1039669557" usec="0"/>
    <to sec="1039669886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_917{
style=filled;
color=gray75;
658[label="199.108.34.17;s;104pkt 104fpkt", shape=diamond, color=yellow];
1195[label="192.78.199.47;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat917[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.108.34.17:80, 215.150.149.172:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5238%)&lt;BR/&gt; 2425: (0.952381%)&lt;BR/&gt; 0: (0.952381%)&lt;BR/&gt; 65489: (0.47619%)&lt;BR/&gt; 64134: (0.47619%)&gt;];
}
658--736[label="0.00961538;1pkt 1fpkt"];
658--818[label="0.0384615;4pkt 4fpkt"];
658--1091[label="0.00961538;1pkt 1fpkt"];
658--1165[label="0.182692;19pkt 19fpkt"];
658--1215[label="0.00961538;1pkt 1fpkt"];
658--1712[label="0.125;13pkt 13fpkt"];
658--2242[label="0.0461538;3pkt 3fpkt"];
658--2472[label="0.00961538;1pkt 1fpkt"];
658--2482[label="0.0288462;3pkt 3fpkt"];
658--2484[label="1;91pkt 91fpkt"];
658--2505[label="0.0384615;4pkt 4fpkt"];
658--2524[label="0.134615;14pkt 14fpkt"];
658--2871[label="0.00961538;1pkt 1fpkt"];
1195--2505[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.150.149.172" src_ip="199.108.34.17" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_918{
style=filled;
color=gray75;
2446[label="36.170.148.206;d;3pkt 3fpkt", shape=diamond, color=yellow];
4847[label="214.216.48.168;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat918[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.216.48.168:80, 36.170.148.206:*}[42.8571%]&lt;BR/&gt;{214.216.48.168:80, 37.90.21.255:*}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3662: (11.1111%)&lt;BR/&gt; 3661: (11.1111%)&lt;BR/&gt; 33011: (5.55556%)&lt;BR/&gt; 3660: (5.55556%)&gt;];
}
2446--2447[label="1;3pkt 3fpkt"];
2446--4847[label="0.666667;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="37.90.21.255" src_ip="214.216.48.168" src_port="80"/>
      <filter dst_ip="36.170.148.206" src_ip="214.216.48.168" src_port="80"/>
    </slice>
    <from sec="1039669203" usec="0"/>
    <to sec="1039669875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.209.95.168"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_920{
style=filled;
color=gray75;
591[label="37.69.59.146;s;2pkt 2fpkt", shape=diamond, color=yellow];
2657[label="37.69.59.146;s;2pkt 2fpkt", shape=hexagon, color=black];
4643[label="37.69.59.146;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6470[label="37.69.59.146;2pkt 2fpkt", shape=invtriangle, color=brown];
7639[label="37.69.59.146;2pkt 2fpkt", shape=invhouse, color=bisque];
stat920[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.69.59.146:554, 148.110.13.208:1245}[50%]&lt;BR/&gt;{37.69.59.146:20726, 148.110.13.208:6970}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1245: (27.7778%)&lt;BR/&gt; 554: (27.7778%)&lt;BR/&gt; 20726: (22.2222%)&lt;BR/&gt; 6970: (22.2222%)&gt;];
}
591--2657[label="1;2pkt 2fpkt"];
591--4643[label="1;1pkt 1fpkt"];
591--6470[label="1;2pkt 2fpkt"];
591--7639[label="1;2pkt 2fpkt"];
2657--4643[label="1;1pkt 1fpkt"];
2657--6470[label="1;2pkt 2fpkt"];
2657--7639[label="1;2pkt 2fpkt"];
4643--6470[label="1;1pkt 1fpkt"];
4643--7639[label="1;1pkt 1fpkt"];
6470--7639[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.13.208" dst_port="6970" src_ip="37.69.59.146" src_port="20726"/>
      <filter dst_ip="148.110.13.208" dst_port="1245" src_ip="37.69.59.146" src_port="554"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.93.144.169"/>
    </slice>
    <from sec="1039669226" usec="0"/>
    <to sec="1039669795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="138.186.8.170"/>
    </slice>
    <from sec="1039669283" usec="0"/>
    <to sec="1039669295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_923{
style=filled;
color=gray75;
263[label="197.169.165.170s;92pkt 92fpkt", shape=rectangle, color=red];
4866[label="197.169.165.170;143pkt 143fpkt", shape=pentagon, color=darkviolet];
6619[label="197.169.165.170;144pkt 144fpkt", shape=invtriangle, color=brown];
7735[label="197.169.165.170;143pkt 143fpkt", shape=invhouse, color=bisque];
stat923[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.169.165.170:1032, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1032: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
263--4866[label="0.98913;91pkt 91fpkt"];
263--6619[label="1;92pkt 92fpkt"];
263--7735[label="0.98913;91pkt 91fpkt"];
4866--6619[label="1;143pkt 143fpkt"];
4866--7735[label="1;143pkt 143fpkt"];
6619--7735[label="1;143pkt 143fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.169.165.170" src_port="1032"/>
    </slice>
    <from sec="1039669700" usec="0"/>
    <to sec="1039669727" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.231.171.170"/>
    </slice>
    <from sec="1039669202" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="138.186.59.171"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_926{
style=filled;
color=gray75;
1139[label="138.7.91.168;d;106pkt 106fpkt", shape=diamond, color=yellow];
4879[label="96.44.1.172;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5194[label="215.209.133.210;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5309[label="215.214.133.226;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5349[label="96.44.6.231;25pkt 25fpkt", shape=pentagon, color=darkviolet];
6630[label="96.44.1.172;3pkt 3fpkt", shape=invtriangle, color=brown];
6829[label="215.209.133.210;8pkt 8fpkt", shape=invtriangle, color=brown];
6898[label="215.214.133.226;4pkt 4fpkt", shape=invtriangle, color=brown];
7744[label="96.44.1.172;3pkt 3fpkt", shape=invhouse, color=bisque];
stat926[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.44.6.231:80, 138.7.91.168:*}[22.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.773%)&lt;BR/&gt; 0: (1.84049%)&lt;BR/&gt; 4295: (1.22699%)&lt;BR/&gt; 4293: (1.22699%)&lt;BR/&gt; 4294: (0.920245%)&gt;];
}
1139--1927[label="1;16pkt 16fpkt"];
1139--4879[label="0.666667;2pkt 2fpkt"];
1139--5194[label="0.875;7pkt 7fpkt"];
1139--5309[label="0.666667;2pkt 2fpkt"];
1139--5349[label="0.96;24pkt 24fpkt"];
1139--6630[label="0.666667;2pkt 2fpkt"];
1139--6829[label="0.875;7pkt 7fpkt"];
1139--6898[label="0.75;3pkt 3fpkt"];
1139--7744[label="0.666667;2pkt 2fpkt"];
4879--6630[label="1;3pkt 3fpkt"];
4879--7744[label="1;3pkt 3fpkt"];
5194--6829[label="1;8pkt 8fpkt"];
5309--6898[label="1;3pkt 3fpkt"];
6630--7744[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="138.7.91.168" src_ip="96.44.6.231" src_port="80"/>
    </slice>
    <from sec="1039669207" usec="0"/>
    <to sec="1039669925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645838,1.80177,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_927{
style=filled;
color=gray75;
791[label="202.73.101.172;s;2pkt 2fpkt", shape=diamond, color=yellow];
792[label="215.90.72.6;d;14pkt 14fpkt", shape=diamond, color=yellow];
4883[label="202.73.101.172;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6634[label="202.73.101.172;1pkt 1fpkt", shape=invtriangle, color=brown];
stat927[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.248.90.166:80, 215.90.72.6:*}[42.8571%]&lt;BR/&gt;{215.219.101.58:80, 215.90.72.6:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2319: (11.1111%)&lt;BR/&gt; 2297: (5.55556%)&lt;BR/&gt; 2341: (2.77778%)&lt;BR/&gt; 2336: (2.77778%)&gt;];
}
791--792[label="1;2pkt 2fpkt"];
791--4883[label="1;1pkt 1fpkt"];
791--6634[label="1;1pkt 1fpkt"];
792--1170[label="0.166667;1pkt 1fpkt"];
792--1418[label="0.0714286;1pkt 1fpkt"];
792--3563[label="0.0714286;1pkt 1fpkt"];
792--3837[label="0.3;3pkt 3fpkt"];
792--4883[label="1;1pkt 1fpkt"];
792--5765[label="0.0714286;1pkt 1fpkt"];
792--5940[label="0.222222;2pkt 2fpkt"];
792--6634[label="1;1pkt 1fpkt"];
792--7306[label="0.3;3pkt 3fpkt"];
4883--6634[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.72.6" src_ip="197.248.90.166" src_port="80"/>
      <filter dst_ip="215.90.72.6" src_ip="215.219.101.58" src_port="80"/>
    </slice>
    <from sec="1039669228" usec="0"/>
    <to sec="1039669708" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752371,1.85474,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_928{
style=filled;
color=gray75;
265[label="214.85.210.172s;45pkt 45fpkt", shape=rectangle, color=red];
4887[label="214.85.210.172;170pkt 170fpkt", shape=pentagon, color=darkviolet];
stat928[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.85.210.172:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
265--4887[label="0.977778;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.85.210.172" src_port="1027"/>
    </slice>
    <from sec="1039669556" usec="0"/>
    <to sec="1039669587" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.212.44.173"/>
    </slice>
    <from sec="1039669237" usec="0"/>
    <to sec="1039669265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_930{
style=filled;
color=gray75;
1869[label="214.216.48.173;s;488pkt 488fpkt", shape=diamond, color=yellow];
4891[label="214.216.48.173;610pkt 610fpkt", shape=pentagon, color=darkviolet];
stat930[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.216.48.173:53, *:53}[53.0278%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (76.0018%)&lt;BR/&gt; 0: (1.18397%)&lt;BR/&gt; 1024: (1.0929%)&lt;BR/&gt; 32768: (0.637523%)&lt;BR/&gt; 1025: (0.455373%)&gt;];
}
1869--1883[label="0.0243902;1pkt 1fpkt"];
1869--4891[label="0.997951;487pkt 487fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="214.216.48.173" src_port="53"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.129.102.173"/>
    </slice>
    <from sec="1039669246" usec="0"/>
    <to sec="1039669261" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.70.214.173"/>
    </slice>
    <from sec="1039669627" usec="0"/>
    <to sec="1039669657" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.64.5.174"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669849" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_934{
style=filled;
color=gray75;
268[label="96.74.52.174s;44pkt 44fpkt", shape=rectangle, color=red];
4900[label="96.74.52.174;129pkt 129fpkt", shape=pentagon, color=darkviolet];
6643[label="96.74.52.174;128pkt 128fpkt", shape=invtriangle, color=brown];
7750[label="96.74.52.174;128pkt 128fpkt", shape=invhouse, color=bisque];
stat934[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.74.52.174:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
268--4900[label="1;44pkt 44fpkt"];
268--6643[label="1;44pkt 44fpkt"];
268--7750[label="1;44pkt 44fpkt"];
4900--6643[label="1;128pkt 128fpkt"];
4900--7750[label="1;128pkt 128fpkt"];
6643--7750[label="1;128pkt 128fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.74.52.174" src_port="1029"/>
    </slice>
    <from sec="1039669487" usec="0"/>
    <to sec="1039669508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.90.107.174"/>
    </slice>
    <from sec="1039669458" usec="0"/>
    <to sec="1039669892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.35.182.174"/>
    </slice>
    <from sec="1039669274" usec="0"/>
    <to sec="1039669301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_937{
style=filled;
color=gray75;
270[label="96.29.0.175s;111pkt 111fpkt", shape=rectangle, color=red];
4908[label="96.29.0.175;207pkt 207fpkt", shape=pentagon, color=darkviolet];
6649[label="96.29.0.175;207pkt 207fpkt", shape=invtriangle, color=brown];
7755[label="96.29.0.175;208pkt 208fpkt", shape=invhouse, color=bisque];
stat937[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.29.0.175:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
270--4908[label="1;111pkt 111fpkt"];
270--6649[label="1;111pkt 111fpkt"];
270--7755[label="1;111pkt 111fpkt"];
4908--6649[label="1;207pkt 207fpkt"];
4908--7755[label="1;207pkt 207fpkt"];
6649--7755[label="1;207pkt 207fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.29.0.175" src_port="1027"/>
    </slice>
    <from sec="1039669655" usec="0"/>
    <to sec="1039669687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.88.11.175"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752371,1.85474,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_939{
style=filled;
color=gray75;
271[label="96.0.125.175s;40pkt 40fpkt", shape=rectangle, color=red];
4913[label="96.0.125.175;308pkt 308fpkt", shape=pentagon, color=darkviolet];
stat939[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.0.125.175:1186, *:137}[64.9351%]&lt;BR/&gt;{96.0.125.175:1184, *:137}[35.0649%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1186: (28.7356%)&lt;BR/&gt; 1184: (21.2644%)&gt;];
}
271--4913[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.0.125.175" src_port="1186"/>
      <filter dst_port="137" src_ip="96.0.125.175" src_port="1184"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669337" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.0.200.175"/>
    </slice>
    <from sec="1039669786" usec="0"/>
    <to sec="1039669826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="140.3.110.176"/>
    </slice>
    <from sec="1039669247" usec="0"/>
    <to sec="1039669914" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752371,1.85474,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_942{
style=filled;
color=gray75;
272[label="96.192.116.176s;117pkt 117fpkt", shape=rectangle, color=red];
4922[label="96.192.116.176;136pkt 136fpkt", shape=pentagon, color=darkviolet];
stat942[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.192.116.176:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
272--4922[label="1;117pkt 117fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.192.116.176" src_port="1030"/>
    </slice>
    <from sec="1039669704" usec="0"/>
    <to sec="1039669737" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.209.130.176"/>
    </slice>
    <from sec="1039669617" usec="0"/>
    <to sec="1039669920" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.53.134.177"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="138.186.58.178"/>
    </slice>
    <from sec="1039669892" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.203.74.178"/>
    </slice>
    <from sec="1039669831" usec="0"/>
    <to sec="1039669846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.90.76.178"/>
    </slice>
    <from sec="1039669208" usec="0"/>
    <to sec="1039669922" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="138.186.55.180"/>
    </slice>
    <from sec="1039669812" usec="0"/>
    <to sec="1039669861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.162.163.180"/>
    </slice>
    <from sec="1039669345" usec="0"/>
    <to sec="1039669365" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_950{
style=filled;
color=gray75;
280[label="96.30.128.181s;180pkt 180fpkt", shape=rectangle, color=red];
4961[label="96.30.128.181;232pkt 232fpkt", shape=pentagon, color=darkviolet];
6684[label="96.30.128.181;232pkt 232fpkt", shape=invtriangle, color=brown];
7777[label="96.30.128.181;232pkt 232fpkt", shape=invhouse, color=bisque];
stat950[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.30.128.181:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
280--4961[label="0.994444;179pkt 179fpkt"];
280--6684[label="0.994444;179pkt 179fpkt"];
280--7777[label="0.994444;179pkt 179fpkt"];
4961--6684[label="1;232pkt 232fpkt"];
4961--7777[label="1;232pkt 232fpkt"];
6684--7777[label="1;232pkt 232fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.30.128.181" src_port="1026"/>
    </slice>
    <from sec="1039669593" usec="0"/>
    <to sec="1039669631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.147.143.181"/>
    </slice>
    <from sec="1039669243" usec="0"/>
    <to sec="1039669845" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645838,1.80177,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_952{
style=filled;
color=gray75;
912[label="201.97.13.182;s;1pkt 1fpkt", shape=diamond, color=yellow];
4965[label="201.97.13.182;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6687[label="201.97.13.182;1pkt 1fpkt", shape=invtriangle, color=brown];
stat952[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.97.13.182:20104, 172.93.27.129:3406}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20104: (50%)&lt;BR/&gt; 3406: (50%)&gt;];
}
912--913[label="1;1pkt 1fpkt"];
912--4965[label="1;1pkt 1fpkt"];
912--6687[label="1;1pkt 1fpkt"];
4965--6687[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.93.27.129" dst_port="3406" src_ip="201.97.13.182" src_port="20104"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.193.40.182"/>
    </slice>
    <from sec="1039669856" usec="0"/>
    <to sec="1039669885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_954{
style=filled;
color=gray75;
1050[label="140.3.148.182;s;32pkt 32fpkt", shape=diamond, color=yellow];
4975[label="140.3.148.182;32pkt 32fpkt", shape=pentagon, color=darkviolet];
stat954[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.148.182:*, 201.40.212.185:80}[65.625%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1731: (1.5625%)&lt;BR/&gt; 1730: (1.5625%)&lt;BR/&gt; 1729: (1.5625%)&lt;BR/&gt; 1728: (1.5625%)&gt;];
}
1050--4975[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="201.40.212.185" dst_port="80" src_ip="140.3.148.182"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669391" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.40.74.183"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.23.4.184"/>
    </slice>
    <from sec="1039669385" usec="0"/>
    <to sec="1039669426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.66.32.184"/>
    </slice>
    <from sec="1039669310" usec="0"/>
    <to sec="1039669349" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.66.76.184"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="138.186.218.184"/>
    </slice>
    <from sec="1039669606" usec="0"/>
    <to sec="1039669919" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_960{
style=filled;
color=gray75;
1771[label="201.97.13.185;s;2pkt 2fpkt", shape=diamond, color=yellow];
4997[label="201.97.13.185;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat960[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.97.13.185:20730, 140.3.95.119:50100}[50%]&lt;BR/&gt;{201.97.13.185:20730, 140.3.95.119:50105}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20730: (50%)&lt;BR/&gt; 50105: (33.3333%)&lt;BR/&gt; 50100: (16.6667%)&gt;];
}
1771--2741[label="1;2pkt 2fpkt"];
1771--4997[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.95.119" dst_port="50105" src_ip="201.97.13.185" src_port="20730"/>
      <filter dst_ip="140.3.95.119" dst_port="50100" src_ip="201.97.13.185" src_port="20730"/>
    </slice>
    <from sec="1039669464" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.43.46.185"/>
    </slice>
    <from sec="1039669688" usec="0"/>
    <to sec="1039669717" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645838,1.80177,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_962{
style=filled;
color=gray75;
2047[label="215.90.75.185;s;15pkt 15fpkt", shape=diamond, color=yellow];
5002[label="215.90.75.185;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6708[label="215.90.75.185;1pkt 1fpkt", shape=invtriangle, color=brown];
stat962[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.90.75.185:*, 99.40.57.6:3456}[20%]&lt;BR/&gt;{215.90.75.185:*, 98.237.163.113:7000}[20%]&lt;BR/&gt;{215.90.75.185:*, 200.235.51.224:8888}[20%]&lt;BR/&gt;{215.90.75.185:*, *:6699}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (14.7059%)&lt;BR/&gt; 6699: (14.7059%)&lt;BR/&gt; 7000: (8.82353%)&lt;BR/&gt; 4878: (8.82353%)&lt;BR/&gt; 3456: (8.82353%)&gt;];
}
2047--5002[label="1;1pkt 1fpkt"];
2047--6708[label="1;1pkt 1fpkt"];
5002--6708[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="6699" src_ip="215.90.75.185"/>
      <filter dst_ip="200.235.51.224" dst_port="8888" src_ip="215.90.75.185"/>
      <filter dst_ip="98.237.163.113" dst_port="7000" src_ip="215.90.75.185"/>
      <filter dst_ip="99.40.57.6" dst_port="3456" src_ip="215.90.75.185"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.126.137.185"/>
    </slice>
    <from sec="1039669203" usec="0"/>
    <to sec="1039669927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_964{
style=filled;
color=gray75;
697[label="222.147.204.185;s;3pkt 3fpkt", shape=diamond, color=yellow];
1307[label="148.110.17.120;d;8pkt 8fpkt", shape=diamond, color=yellow];
2601[label="148.110.17.120;d;2pkt 2fpkt", shape=hexagon, color=black];
3017[label="222.147.204.185;s;3pkt 3fpkt", shape=hexagon, color=black];
5008[label="222.147.204.185;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6713[label="222.147.204.185;3pkt 3fpkt", shape=invtriangle, color=brown];
7794[label="222.147.204.185;3pkt 3fpkt", shape=invhouse, color=bisque];
stat964[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.1.10.17:80, 148.110.17.120:*}[50%]&lt;BR/&gt;{*:*, 148.110.17.120:1032}[20%]&lt;BR/&gt;{*:5050, 148.110.17.120:*}[20%]&lt;BR/&gt;{222.147.204.185:7070, *:*}[20%]&lt;BR/&gt;{222.147.204.185:*, 148.110.154.123:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7070: (22.9167%)&lt;BR/&gt; 1423: (12.5%)&lt;BR/&gt; 6970: (10.4167%)&lt;BR/&gt; 1076: (10.4167%)&lt;BR/&gt; 1065: (10.4167%)&gt;];
}
697--1307[label="0.333333;1pkt 1fpkt"];
697--2601[label="0.5;1pkt 1fpkt"];
697--3017[label="1;3pkt 3fpkt"];
697--5008[label="1;2pkt 2fpkt"];
697--6713[label="1;3pkt 3fpkt"];
697--7794[label="1;3pkt 3fpkt"];
1307--2601[label="1;2pkt 2fpkt"];
1307--3017[label="0.333333;1pkt 1fpkt"];
1307--3418[label="0.625;5pkt 5fpkt"];
1307--6713[label="0.333333;1pkt 1fpkt"];
1307--7794[label="0.333333;1pkt 1fpkt"];
2601--3017[label="0.5;1pkt 1fpkt"];
2601--6713[label="0.5;1pkt 1fpkt"];
2601--7794[label="0.5;1pkt 1fpkt"];
3017--5008[label="1;2pkt 2fpkt"];
3017--6713[label="1;3pkt 3fpkt"];
3017--7794[label="1;3pkt 3fpkt"];
5008--6713[label="1;2pkt 2fpkt"];
5008--7794[label="1;2pkt 2fpkt"];
6713--7794[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.154.123" src_ip="222.147.204.185"/>
      <filter src_ip="222.147.204.185" src_port="7070"/>
      <filter dst_ip="148.110.17.120" src_port="5050"/>
      <filter dst_ip="148.110.17.120" dst_port="1032"/>
      <filter dst_ip="148.110.17.120" src_ip="209.1.10.17" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.185.43.186"/>
    </slice>
    <from sec="1039669461" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.93.216.186"/>
    </slice>
    <from sec="1039669260" usec="0"/>
    <to sec="1039669926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.243.228.186"/>
    </slice>
    <from sec="1039669355" usec="0"/>
    <to sec="1039669381" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.216.49.187"/>
    </slice>
    <from sec="1039669213" usec="0"/>
    <to sec="1039669919" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_969{
style=filled;
color=gray75;
1008[label="96.66.76.187;s;2pkt 2fpkt", shape=diamond, color=yellow];
1386[label="215.90.90.80;d;13pkt 13fpkt", shape=diamond, color=yellow];
1648[label="96.66.76.177;s;3pkt 3fpkt", shape=diamond, color=yellow];
2708[label="96.66.76.177;s;3pkt 3fpkt", shape=hexagon, color=black];
4930[label="96.66.76.177;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5018[label="96.66.76.187;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6662[label="96.66.76.177;2pkt 2fpkt", shape=invtriangle, color=brown];
7761[label="96.66.76.177;2pkt 2fpkt", shape=invhouse, color=bisque];
7797[label="96.66.76.187;1pkt 1fpkt", shape=invhouse, color=bisque];
stat969[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.66.76.176:6001, 215.90.90.80:*}[28.5714%]&lt;BR/&gt;{96.66.76.33:6900, 215.90.90.80:*}[21.4286%]&lt;BR/&gt;{96.66.76.177:5001, 215.90.90.80:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (37.931%)&lt;BR/&gt; 3125: (10.3448%)&lt;BR/&gt; 3122: (10.3448%)&lt;BR/&gt; 6001: (6.89655%)&lt;BR/&gt; 3130: (6.89655%)&gt;];
}
1008--1386[label="0.5;1pkt 1fpkt"];
1008--2532[label="0.5;1pkt 1fpkt"];
1008--2787[label="1;2pkt 2fpkt"];
1008--5018[label="1;1pkt 1fpkt"];
1008--6717[label="1;2pkt 2fpkt"];
1008--7797[label="1;1pkt 1fpkt"];
1386--1648[label="1;3pkt 3fpkt"];
1386--2708[label="1;3pkt 3fpkt"];
1386--2787[label="0.5;1pkt 1fpkt"];
1386--4930[label="1;2pkt 2fpkt"];
1386--5018[label="1;1pkt 1fpkt"];
1386--6662[label="1;2pkt 2fpkt"];
1386--6717[label="0.5;1pkt 1fpkt"];
1386--7761[label="1;2pkt 2fpkt"];
1386--7797[label="1;1pkt 1fpkt"];
1648--2708[label="1;3pkt 3fpkt"];
1648--4930[label="1;2pkt 2fpkt"];
1648--6662[label="1;2pkt 2fpkt"];
1648--7761[label="1;2pkt 2fpkt"];
2708--4930[label="1;2pkt 2fpkt"];
2708--6662[label="1;2pkt 2fpkt"];
2708--7761[label="1;2pkt 2fpkt"];
4930--6662[label="1;2pkt 2fpkt"];
4930--7761[label="1;2pkt 2fpkt"];
5018--6717[label="1;1pkt 1fpkt"];
5018--7797[label="1;1pkt 1fpkt"];
6662--7761[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.90.80" src_ip="96.66.76.176" src_port="6001"/>
      <filter dst_ip="215.90.90.80" src_ip="96.66.76.177" src_port="5001"/>
      <filter dst_ip="215.90.90.80" src_ip="96.66.76.33" src_port="6900"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.937874,1.83478,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_970{
style=filled;
color=gray75;
754[label="215.90.91.47;d;85pkt 85fpkt", shape=diamond, color=yellow];
755[label="197.14.32.216;s;49pkt 49fpkt", shape=diamond, color=yellow];
1922[label="202.78.118.228;s;8pkt 8fpkt", shape=diamond, color=yellow];
2543[label="215.90.91.47;d;77pkt 77fpkt", shape=hexagon, color=black];
2544[label="197.14.32.216;s;49pkt 49fpkt", shape=hexagon, color=black];
5019[label="96.41.86.187;31pkt 31fpkt", shape=pentagon, color=darkviolet];
5324[label="202.78.118.228;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5509[label="96.44.4.253;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6908[label="202.78.118.228;7pkt 7fpkt", shape=invtriangle, color=brown];
7043[label="96.44.4.253;9pkt 9fpkt", shape=invtriangle, color=brown];
stat970[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.14.32.216:80, 215.90.91.47:*}[46.9565%]&lt;BR/&gt;{96.41.86.187:80, 148.29.24.129:*}[26.087%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.5783%)&lt;BR/&gt; 2057: (3.01205%)&lt;BR/&gt; 2068: (2.40964%)&lt;BR/&gt; 1209: (0.753012%)&lt;BR/&gt; 1202: (0.753012%)&gt;];
}
754--755[label="1;49pkt 49fpkt"];
754--1922[label="1;8pkt 8fpkt"];
754--2543[label="1;77pkt 77fpkt"];
754--2544[label="1;49pkt 49fpkt"];
754--5019[label="0.0322581;1pkt 1fpkt"];
754--5324[label="1;8pkt 8fpkt"];
754--5509[label="1;9pkt 9fpkt"];
754--6908[label="1;7pkt 7fpkt"];
754--7043[label="1;9pkt 9fpkt"];
755--2543[label="1;49pkt 49fpkt"];
755--2544[label="1;49pkt 49fpkt"];
1922--2543[label="1;8pkt 8fpkt"];
1922--5324[label="1;8pkt 8fpkt"];
1922--6908[label="1;7pkt 7fpkt"];
2543--2544[label="1;49pkt 49fpkt"];
2543--5019[label="0.0322581;1pkt 1fpkt"];
2543--5324[label="1;8pkt 8fpkt"];
2543--5509[label="0.777778;7pkt 7fpkt"];
2543--6908[label="1;7pkt 7fpkt"];
2543--7043[label="0.777778;7pkt 7fpkt"];
5324--6908[label="1;7pkt 7fpkt"];
5509--7043[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.91.47" src_ip="197.14.32.216" src_port="80"/>
      <filter dst_ip="148.29.24.129" src_ip="96.41.86.187" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.92.112.187"/>
    </slice>
    <from sec="1039669212" usec="0"/>
    <to sec="1039669924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.22.137.188"/>
    </slice>
    <from sec="1039669626" usec="0"/>
    <to sec="1039669645" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.70.192.188"/>
    </slice>
    <from sec="1039669636" usec="0"/>
    <to sec="1039669650" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.23.79.189"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905994,1.86884,002,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_975{
style=filled;
color=gray75;
1837[label="169.126.143.16;d;2pkt 2fpkt", shape=diamond, color=yellow];
1838[label="96.154.95.130;s;3pkt 3fpkt", shape=diamond, color=yellow];
3032[label="96.154.95.130;s;3pkt 3fpkt", shape=hexagon, color=black];
4501[label="96.154.95.130;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5034[label="96.73.129.189;254pkt 254fpkt", shape=pentagon, color=darkviolet];
stat975[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.73.129.189:64579, *:137}[98.8327%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64579: (48.4791%)&lt;BR/&gt; 137: (48.4791%)&lt;BR/&gt; 65107: (0.760456%)&lt;BR/&gt; 6665: (0.760456%)&lt;BR/&gt; 36949: (0.380228%)&gt;];
}
1837--1838[label="0.5;1pkt 1fpkt"];
1837--3032[label="0.5;1pkt 1fpkt"];
1837--4501[label="1;1pkt 1fpkt"];
1837--5034[label="0.5;1pkt 1fpkt"];
1838--3032[label="1;3pkt 3fpkt"];
1838--4501[label="1;1pkt 1fpkt"];
3032--4501[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.73.129.189" src_port="64579"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.31.100.190"/>
    </slice>
    <from sec="1039669656" usec="0"/>
    <to sec="1039669687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.95.132.191"/>
    </slice>
    <from sec="1039669492" usec="0"/>
    <to sec="1039669513" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.93.183.192"/>
    </slice>
    <from sec="1039669429" usec="0"/>
    <to sec="1039669759" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.110.218.192"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752371,1.85474,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_980{
style=filled;
color=gray75;
290[label="215.219.66.193s;98pkt 98fpkt", shape=rectangle, color=red];
5050[label="215.219.66.193;107pkt 107fpkt", shape=pentagon, color=darkviolet];
stat980[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.219.66.193:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
290--5050[label="1;98pkt 98fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.219.66.193" src_port="1026"/>
    </slice>
    <from sec="1039669351" usec="0"/>
    <to sec="1039669369" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.85.186.194"/>
    </slice>
    <from sec="1039669341" usec="0"/>
    <to sec="1039669366" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645838,1.80177,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_982{
style=filled;
color=gray75;
1581[label="169.126.1.19;d;43pkt 43fpkt", shape=diamond, color=yellow];
1708[label="36.161.205.253;s;1pkt 1fpkt", shape=diamond, color=yellow];
5061[label="36.161.205.194;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5518[label="36.161.205.253;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6737[label="36.161.205.194;4pkt 4fpkt", shape=invtriangle, color=brown];
stat982[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 169.126.1.19:53}[41.6667%]&lt;BR/&gt;{*:53, 169.126.1.19:1025}[25%]&lt;BR/&gt;{*:*, *:25}[22.9167%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (33.6364%)&lt;BR/&gt; 25: (18.1818%)&lt;BR/&gt; 1025: (10.9091%)&lt;BR/&gt; 0: (5.45455%)&lt;BR/&gt; 48867: (2.72727%)&gt;];
}
1581--1708[label="1;1pkt 1fpkt"];
1581--5061[label="0.25;1pkt 1fpkt"];
1581--5518[label="0.333333;1pkt 1fpkt"];
1581--6737[label="0.25;1pkt 1fpkt"];
1708--5518[label="1;1pkt 1fpkt"];
5061--6737[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_port="25"/>
      <filter dst_ip="169.126.1.19" dst_port="53"/>
      <filter dst_ip="169.126.1.19" dst_port="1025" src_port="53"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.92.48.195"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752371,1.85474,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_985{
style=filled;
color=gray75;
292[label="38.178.144.195s;87pkt 87fpkt", shape=rectangle, color=red];
5067[label="38.178.144.195;232pkt 232fpkt", shape=pentagon, color=darkviolet];
stat985[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.178.144.195:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
292--5067[label="1;87pkt 87fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="38.178.144.195" src_port="1025"/>
    </slice>
    <from sec="1039669432" usec="0"/>
    <to sec="1039669468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.72.241.195"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_987{
style=filled;
color=gray75;
2423[label="215.230.229.197;s;3pkt 3fpkt", shape=diamond, color=yellow];
5088[label="215.230.229.197;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6756[label="215.230.229.197;6pkt 6fpkt", shape=invtriangle, color=brown];
7824[label="215.230.229.197;6pkt 6fpkt", shape=invhouse, color=bisque];
stat987[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.230.229.197:80, 215.87.67.219:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 23339: (9.52381%)&lt;BR/&gt; 22790: (9.52381%)&lt;BR/&gt; 22779: (9.52381%)&lt;BR/&gt; 22685: (7.14286%)&gt;];
}
2423--5088[label="1;3pkt 3fpkt"];
2423--6756[label="1;3pkt 3fpkt"];
2423--7824[label="1;3pkt 3fpkt"];
5088--6756[label="1;6pkt 6fpkt"];
5088--7824[label="1;6pkt 6fpkt"];
6756--7824[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="215.87.67.219" src_ip="215.230.229.197" src_port="80"/>
    </slice>
    <from sec="1039669222" usec="0"/>
    <to sec="1039669826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.200.1.198"/>
    </slice>
    <from sec="1039669215" usec="0"/>
    <to sec="1039669252" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_989{
style=filled;
color=gray75;
296[label="202.45.174.198s;76pkt 76fpkt", shape=rectangle, color=red];
5094[label="202.45.174.198;190pkt 190fpkt", shape=pentagon, color=darkviolet];
6759[label="202.45.174.198;189pkt 189fpkt", shape=invtriangle, color=brown];
7827[label="202.45.174.198;190pkt 190fpkt", shape=invhouse, color=bisque];
stat989[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.45.174.198:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
296--5094[label="1;76pkt 76fpkt"];
296--6759[label="1;76pkt 76fpkt"];
296--7827[label="1;76pkt 76fpkt"];
5094--6759[label="1;189pkt 189fpkt"];
5094--7827[label="1;190pkt 190fpkt"];
6759--7827[label="1;189pkt 189fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.45.174.198" src_port="1026"/>
    </slice>
    <from sec="1039669757" usec="0"/>
    <to sec="1039669788" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752371,1.85474,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_990{
style=filled;
color=gray75;
297[label="200.97.175.198s;43pkt 43fpkt", shape=rectangle, color=red];
5095[label="200.97.175.198;122pkt 122fpkt", shape=pentagon, color=darkviolet];
stat990[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.97.175.198:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
297--5095[label="0.976744;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.97.175.198" src_port="1025"/>
    </slice>
    <from sec="1039669906" usec="0"/>
    <to sec="1039669927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.858304,1.88544,503,1 0 0 0 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_991{
style=filled;
color=gray75;
49[label="196.179.206.198s;4pkt 4fpkt", shape=rectangle, color=red];
6761[label="196.179.206.198;115pkt 115fpkt", shape=invtriangle, color=brown];
stat991[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.179.206.198:80, 215.90.155.102:*}[20.6897%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3683: (0.840336%)&lt;BR/&gt; 3678: (0.840336%)&lt;BR/&gt; 3676: (0.840336%)&lt;BR/&gt; 63769: (0.420168%)&gt;];
}
49--736[label="0.75;3pkt 3fpkt"];
49--1092[label="0.25;1pkt 1fpkt"];
49--1343[label="0.75;3pkt 3fpkt"];
49--5097[label="0.75;3pkt 3fpkt"];
49--6761[label="0.75;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.155.102" src_ip="196.179.206.198" src_port="80"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.87.66.199"/>
    </slice>
    <from sec="1039669202" usec="0"/>
    <to sec="1039669912" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_993{
style=filled;
color=gray75;
2034[label="64.23.2.200;s;1pkt 1fpkt", shape=diamond, color=yellow];
5104[label="64.23.2.200;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat993[shape=component, label=&lt;Rules:&lt;BR/&gt;{64.23.2.200:2500, 148.110.13.218:1396}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2500: (50%)&lt;BR/&gt; 1396: (50%)&gt;];
}
2034--5104[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.13.218" dst_port="1396" src_ip="64.23.2.200" src_port="2500"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.64.226.200"/>
    </slice>
    <from sec="1039669335" usec="0"/>
    <to sec="1039669377" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.93.0.201"/>
    </slice>
    <from sec="1039669202" usec="0"/>
    <to sec="1039669919" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.159.200.201"/>
    </slice>
    <from sec="1039669594" usec="0"/>
    <to sec="1039669625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.16.203.201"/>
    </slice>
    <from sec="1039669387" usec="0"/>
    <to sec="1039669419" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19604,1.81002,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_998{
style=filled;
color=gray75;
51[label="197.17.150.206s;2pkt 2fpkt", shape=rectangle, color=red];
527[label="138.186.50.203;s;87pkt 87fpkt", shape=diamond, color=yellow];
528[label="36.90.153.3;d;1pkt 1fpkt", shape=diamond, color=yellow];
602[label="64.139.107.215;d;1pkt 1fpkt", shape=diamond, color=yellow];
629[label="64.54.0.74;d;1pkt 1fpkt", shape=diamond, color=yellow];
661[label="61.200.42.218;d;1pkt 1fpkt", shape=diamond, color=yellow];
1376[label="64.233.55.115;d;1pkt 1fpkt", shape=diamond, color=yellow];
1421[label="36.146.166.188;d;1pkt 1fpkt", shape=diamond, color=yellow];
2520[label="64.139.107.215;d;1pkt 1fpkt", shape=hexagon, color=black];
2626[label="36.146.166.188;d;1pkt 1fpkt", shape=hexagon, color=black];
2769[label="61.200.42.218;d;1pkt 1fpkt", shape=hexagon, color=black];
5129[label="138.186.50.203;106pkt 106fpkt", shape=pentagon, color=darkviolet];
5159[label="197.17.150.206;14pkt 14fpkt", shape=pentagon, color=darkviolet];
6784[label="138.186.50.203;106pkt 106fpkt", shape=invtriangle, color=brown];
7841[label="138.186.50.203;106pkt 106fpkt", shape=invhouse, color=bisque];
stat998[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.50.203:6257, *:6257}[75.2066%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (80%)&lt;BR/&gt; 6699: (8.02326%)&lt;BR/&gt; 53: (3.48837%)&lt;BR/&gt; 3332: (0.697674%)&lt;BR/&gt; 1797: (0.697674%)&gt;];
}
51--437[label="0.5;1pkt 1fpkt"];
51--527[label="0.5;1pkt 1fpkt"];
51--629[label="1;1pkt 1fpkt"];
51--5129[label="0.5;1pkt 1fpkt"];
51--5159[label="0.5;1pkt 1fpkt"];
51--6784[label="0.5;1pkt 1fpkt"];
51--7841[label="0.5;1pkt 1fpkt"];
527--528[label="1;1pkt 1fpkt"];
527--602[label="1;1pkt 1fpkt"];
527--629[label="1;1pkt 1fpkt"];
527--661[label="1;1pkt 1fpkt"];
527--1376[label="1;1pkt 1fpkt"];
527--1421[label="1;1pkt 1fpkt"];
527--2520[label="1;1pkt 1fpkt"];
527--2626[label="1;1pkt 1fpkt"];
527--2769[label="1;1pkt 1fpkt"];
527--5129[label="0.988506;86pkt 86fpkt"];
527--6784[label="0.988506;86pkt 86fpkt"];
527--7841[label="0.988506;86pkt 86fpkt"];
528--5129[label="1;1pkt 1fpkt"];
528--6784[label="1;1pkt 1fpkt"];
528--7841[label="1;1pkt 1fpkt"];
602--2520[label="1;1pkt 1fpkt"];
602--5129[label="1;1pkt 1fpkt"];
602--6784[label="1;1pkt 1fpkt"];
602--7841[label="1;1pkt 1fpkt"];
629--5129[label="1;1pkt 1fpkt"];
629--6784[label="1;1pkt 1fpkt"];
629--7841[label="1;1pkt 1fpkt"];
661--2769[label="1;1pkt 1fpkt"];
661--5129[label="1;1pkt 1fpkt"];
661--6784[label="1;1pkt 1fpkt"];
661--7841[label="1;1pkt 1fpkt"];
1376--5129[label="1;1pkt 1fpkt"];
1376--6784[label="1;1pkt 1fpkt"];
1376--7841[label="1;1pkt 1fpkt"];
1421--2626[label="1;1pkt 1fpkt"];
1421--5129[label="1;1pkt 1fpkt"];
1421--6784[label="1;1pkt 1fpkt"];
1421--7841[label="1;1pkt 1fpkt"];
2520--5129[label="1;1pkt 1fpkt"];
2520--6784[label="1;1pkt 1fpkt"];
2520--7841[label="1;1pkt 1fpkt"];
2626--5129[label="1;1pkt 1fpkt"];
2626--6784[label="1;1pkt 1fpkt"];
2626--7841[label="1;1pkt 1fpkt"];
2769--5129[label="1;1pkt 1fpkt"];
2769--6784[label="1;1pkt 1fpkt"];
2769--7841[label="1;1pkt 1fpkt"];
5129--6784[label="1;106pkt 106fpkt"];
5129--7841[label="1;106pkt 106fpkt"];
6784--7841[label="1;106pkt 106fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="138.186.50.203" src_port="6257"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905994,1.86884,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_999{
style=filled;
color=gray75;
1226[label="199.110.51.204;s;33pkt 33fpkt", shape=diamond, color=yellow];
2747[label="199.110.51.204;s;33pkt 33fpkt", shape=hexagon, color=black];
5139[label="199.110.51.204;32pkt 32fpkt", shape=pentagon, color=darkviolet];
stat999[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.110.51.204:80, 215.87.67.142:*}[75.7576%]&lt;BR/&gt;{199.110.51.204:80, 169.126.142.113:*}[24.2424%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4874: (1.53061%)&lt;BR/&gt; 4832: (1.53061%)&lt;BR/&gt; 4828: (1.53061%)&lt;BR/&gt; 4696: (1.53061%)&gt;];
}
1226--2747[label="1;33pkt 33fpkt"];
1226--5139[label="1;32pkt 32fpkt"];
2747--5139[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="215.87.67.142" src_ip="199.110.51.204" src_port="80"/>
      <filter dst_ip="169.126.142.113" src_ip="199.110.51.204" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1000{
style=filled;
color=gray75;
1419[label="138.186.49.182;d;4pkt 4fpkt", shape=diamond, color=yellow];
1478[label="64.145.11.248;s;1pkt 1fpkt", shape=diamond, color=yellow];
2831[label="138.186.49.182;d;4pkt 4fpkt", shape=hexagon, color=black];
5141[label="64.219.130.204;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6793[label="64.219.130.204;1pkt 1fpkt", shape=invtriangle, color=brown];
7848[label="64.219.130.204;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1000[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.90.155.47:1863, 138.186.49.182:1037}[25%]&lt;BR/&gt;{144.33.244.199:6699, 138.186.49.182:1252}[25%]&lt;BR/&gt;{64.219.130.204:412, 138.186.49.182:1233}[25%]&lt;BR/&gt;{64.145.11.248:6699, 138.186.49.182:1250}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (20.8333%)&lt;BR/&gt; 1233: (20.8333%)&lt;BR/&gt; 412: (20.8333%)&lt;BR/&gt; 1250: (12.5%)&lt;BR/&gt; 1863: (8.33333%)&gt;];
}
1419--1478[label="1;1pkt 1fpkt"];
1419--2831[label="1;4pkt 4fpkt"];
1419--5141[label="1;1pkt 1fpkt"];
1419--6793[label="1;1pkt 1fpkt"];
1419--7848[label="1;1pkt 1fpkt"];
1478--2831[label="1;1pkt 1fpkt"];
2831--5141[label="1;1pkt 1fpkt"];
2831--6793[label="1;1pkt 1fpkt"];
2831--7848[label="1;1pkt 1fpkt"];
5141--6793[label="1;1pkt 1fpkt"];
5141--7848[label="1;1pkt 1fpkt"];
6793--7848[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.49.182" dst_port="1250" src_ip="64.145.11.248" src_port="6699"/>
      <filter dst_ip="138.186.49.182" dst_port="1233" src_ip="64.219.130.204" src_port="412"/>
      <filter dst_ip="138.186.49.182" dst_port="1252" src_ip="144.33.244.199" src_port="6699"/>
      <filter dst_ip="138.186.49.182" dst_port="1037" src_ip="211.90.155.47" src_port="1863"/>
    </slice>
    <from sec="1039669219" usec="0"/>
    <to sec="1039669737" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="138.177.139.204"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.97.20.206"/>
    </slice>
    <from sec="1039669203" usec="0"/>
    <to sec="1039669414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.86.99.206"/>
    </slice>
    <from sec="1039669207" usec="0"/>
    <to sec="1039669922" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.10.125.206"/>
    </slice>
    <from sec="1039669203" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1005{
style=filled;
color=gray75;
2018[label="92.255.211.207;s;1pkt 1fpkt", shape=diamond, color=yellow];
5167[label="92.255.211.207;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat1005[shape=component, label=&lt;Rules:&lt;BR/&gt;{92.255.211.207:2412, 148.110.13.218:1396}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2412: (50%)&lt;BR/&gt; 1396: (50%)&gt;];
}
2018--5167[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.13.218" dst_port="1396" src_ip="92.255.211.207" src_port="2412"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669785" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.110.13.208"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.70.50.210"/>
    </slice>
    <from sec="1039669462" usec="0"/>
    <to sec="1039669747" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.198.77.210"/>
    </slice>
    <from sec="1039669518" usec="0"/>
    <to sec="1039669532" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1009{
style=filled;
color=gray75;
1979[label="172.93.147.105;d;38pkt 38fpkt", shape=diamond, color=yellow];
4564[label="215.209.138.136;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4609[label="215.209.138.142;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5051[label="96.48.105.193;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5173[label="96.48.105.208;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6421[label="215.209.138.136;2pkt 2fpkt", shape=invtriangle, color=brown];
6446[label="215.209.138.142;5pkt 5fpkt", shape=invtriangle, color=brown];
6733[label="96.48.105.193;1pkt 1fpkt", shape=invtriangle, color=brown];
6815[label="96.48.105.208;4pkt 4fpkt", shape=invtriangle, color=brown];
7605[label="215.209.138.136;2pkt 2fpkt", shape=invhouse, color=bisque];
7622[label="215.209.138.142;5pkt 5fpkt", shape=invhouse, color=bisque];
7809[label="96.48.105.193;1pkt 1fpkt", shape=invhouse, color=bisque];
7865[label="96.48.105.208;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1009[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 172.93.147.105:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33301: (2.66667%)&lt;BR/&gt; 33300: (2.66667%)&lt;BR/&gt; 33293: (2.66667%)&lt;BR/&gt; 33292: (2.66667%)&gt;];
}
1979--4564[label="1;3pkt 3fpkt"];
1979--4609[label="1;5pkt 5fpkt"];
1979--5051[label="1;1pkt 1fpkt"];
1979--5173[label="1;4pkt 4fpkt"];
1979--5194[label="0.125;1pkt 1fpkt"];
1979--6421[label="1;2pkt 2fpkt"];
1979--6446[label="1;5pkt 5fpkt"];
1979--6733[label="1;1pkt 1fpkt"];
1979--6815[label="1;4pkt 4fpkt"];
1979--6829[label="0.125;1pkt 1fpkt"];
1979--7605[label="1;2pkt 2fpkt"];
1979--7622[label="1;5pkt 5fpkt"];
1979--7809[label="1;1pkt 1fpkt"];
1979--7865[label="1;4pkt 4fpkt"];
4564--6421[label="1;2pkt 2fpkt"];
4564--7605[label="1;2pkt 2fpkt"];
4609--6446[label="1;5pkt 5fpkt"];
4609--7622[label="1;5pkt 5fpkt"];
5051--6733[label="1;1pkt 1fpkt"];
5051--7809[label="1;1pkt 1fpkt"];
5173--6815[label="1;4pkt 4fpkt"];
5173--7865[label="1;4pkt 4fpkt"];
6421--7605[label="1;2pkt 2fpkt"];
6446--7622[label="1;5pkt 5fpkt"];
6733--7809[label="1;1pkt 1fpkt"];
6815--7865[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="172.93.147.105" src_port="80"/>
    </slice>
    <from sec="1039669511" usec="0"/>
    <to sec="1039669742" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.247.209.210"/>
    </slice>
    <from sec="1039669751" usec="0"/>
    <to sec="1039669786" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790471,1.82041,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1011{
style=filled;
color=gray75;
306[label="215.212.220.210s;172pkt 172fpkt", shape=rectangle, color=red];
5197[label="215.212.220.210;228pkt 228fpkt", shape=pentagon, color=darkviolet];
6831[label="215.212.220.210;228pkt 228fpkt", shape=invtriangle, color=brown];
stat1011[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.212.220.210:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
306--5197[label="1;172pkt 172fpkt"];
306--6831[label="1;172pkt 172fpkt"];
5197--6831[label="1;228pkt 228fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.212.220.210" src_port="1026"/>
    </slice>
    <from sec="1039669607" usec="0"/>
    <to sec="1039669645" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.32.21.211"/>
    </slice>
    <from sec="1039669288" usec="0"/>
    <to sec="1039669322" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.119.141.212"/>
    </slice>
    <from sec="1039669205" usec="0"/>
    <to sec="1039669923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645838,1.80177,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1014{
style=filled;
color=gray75;
982[label="215.90.73.59;d;2pkt 2fpkt", shape=diamond, color=yellow];
983[label="193.19.219.212;s;2pkt 2fpkt", shape=diamond, color=yellow];
5218[label="193.19.219.212;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6845[label="193.19.219.212;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1014[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.19.219.212:554, 215.90.73.59:1271}[50%]&lt;BR/&gt;{193.19.219.212:8786, 215.90.73.59:6970}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8786: (25%)&lt;BR/&gt; 6970: (25%)&lt;BR/&gt; 1271: (25%)&lt;BR/&gt; 554: (25%)&gt;];
}
982--983[label="1;2pkt 2fpkt"];
982--5218[label="1;2pkt 2fpkt"];
982--6845[label="1;2pkt 2fpkt"];
983--5218[label="1;2pkt 2fpkt"];
983--6845[label="1;2pkt 2fpkt"];
5218--6845[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.73.59" dst_port="6970" src_ip="193.19.219.212" src_port="8786"/>
      <filter dst_ip="215.90.73.59" dst_port="1271" src_ip="193.19.219.212" src_port="554"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.126.112.213"/>
    </slice>
    <from sec="1039669591" usec="0"/>
    <to sec="1039669608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.216.154.213"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.937874,1.83478,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1017{
style=filled;
color=gray75;
657[label="198.128.15.214;s;63pkt 63fpkt", shape=diamond, color=yellow];
2592[label="198.128.15.214;s;63pkt 63fpkt", shape=hexagon, color=black];
5226[label="198.128.15.214;64pkt 64fpkt", shape=pentagon, color=darkviolet];
6850[label="198.128.15.214;65pkt 65fpkt", shape=invtriangle, color=brown];
stat1017[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.128.15.214:80, 140.3.211.84:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2324: (0.784314%)&lt;BR/&gt; 2323: (0.784314%)&lt;BR/&gt; 2322: (0.784314%)&lt;BR/&gt; 2321: (0.784314%)&gt;];
}
657--2592[label="1;63pkt 63fpkt"];
657--5226[label="0.984127;62pkt 62fpkt"];
657--6850[label="1;63pkt 63fpkt"];
2592--5226[label="0.984127;62pkt 62fpkt"];
2592--6850[label="1;63pkt 63fpkt"];
5226--6850[label="1;64pkt 64fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.211.84" src_ip="198.128.15.214" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669921" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.42.245.214"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.117.24.215"/>
    </slice>
    <from sec="1039669460" usec="0"/>
    <to sec="1039669926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.55.63.215"/>
    </slice>
    <from sec="1039669229" usec="0"/>
    <to sec="1039669273" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.126.148.215"/>
    </slice>
    <from sec="1039669255" usec="0"/>
    <to sec="1039669895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1022{
style=filled;
color=gray75;
469[label="96.72.241.195;d;1pkt 1fpkt", shape=diamond, color=yellow];
471[label="138.7.12.216;s;7pkt 7fpkt", shape=diamond, color=yellow];
5237[label="138.7.12.216;9pkt 9fpkt", shape=pentagon, color=darkviolet];
stat1022[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.7.12.216:80, 148.43.36.236:*}[77.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.0588%)&lt;BR/&gt; 2712: (8.82353%)&lt;BR/&gt; 60471: (5.88235%)&lt;BR/&gt; 60465: (5.88235%)&lt;BR/&gt; 60459: (5.88235%)&gt;];
}
469--471[label="1;1pkt 1fpkt"];
469--5237[label="1;1pkt 1fpkt"];
471--5237[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="148.43.36.236" src_ip="138.7.12.216" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1023{
style=filled;
color=gray75;
2295[label="172.93.75.45;d;2pkt 2fpkt", shape=diamond, color=yellow];
5244[label="96.24.157.217;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat1023[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.24.157.217:41820, 172.93.75.45:4464}[50%]&lt;BR/&gt;{211.90.155.226:1863, 172.93.75.45:1659}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41820: (33.3333%)&lt;BR/&gt; 4464: (33.3333%)&lt;BR/&gt; 1863: (16.6667%)&lt;BR/&gt; 1659: (16.6667%)&gt;];
}
2295--5244[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.93.75.45" dst_port="1659" src_ip="211.90.155.226" src_port="1863"/>
      <filter dst_ip="172.93.75.45" dst_port="4464" src_ip="96.24.157.217" src_port="41820"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.69.21.218"/>
    </slice>
    <from sec="1039669232" usec="0"/>
    <to sec="1039669267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790471,1.82041,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1025{
style=filled;
color=gray75;
309[label="197.67.163.218s;32pkt 32fpkt", shape=rectangle, color=red];
5257[label="197.67.163.218;113pkt 113fpkt", shape=pentagon, color=darkviolet];
6869[label="197.67.163.218;113pkt 113fpkt", shape=invtriangle, color=brown];
stat1025[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.67.163.218:64941, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64941: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
309--5257[label="1;32pkt 32fpkt"];
309--6869[label="1;32pkt 32fpkt"];
5257--6869[label="1;113pkt 113fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.67.163.218" src_port="64941"/>
    </slice>
    <from sec="1039669437" usec="0"/>
    <to sec="1039669462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.186.205.218"/>
    </slice>
    <from sec="1039669549" usec="0"/>
    <to sec="1039669572" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.4.33.219"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1028{
style=filled;
color=gray75;
853[label="148.110.22.91;d;220pkt 220fpkt", shape=diamond, color=yellow];
stat1028[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 148.110.22.91:1801}[99.0909%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1801: (49.7727%)&lt;BR/&gt; 3932: (0.454545%)&lt;BR/&gt; 3563: (0.454545%)&lt;BR/&gt; 3001: (0.454545%)&lt;BR/&gt; 2084: (0.454545%)&gt;];
}
853--1230[label="1;1pkt 1fpkt"];
853--1283[label="0.333333;1pkt 1fpkt"];
853--1292[label="0.25;1pkt 1fpkt"];
853--1334[label="0.333333;1pkt 1fpkt"];
853--1579[label="0.5;1pkt 1fpkt"];
853--2582[label="1;1pkt 1fpkt"];
853--2904[label="0.333333;1pkt 1fpkt"];
853--3433[label="0.2;1pkt 1fpkt"];
853--5429[label="0.25;1pkt 1fpkt"];
853--5696[label="0.5;1pkt 1fpkt"];
853--6878[label="0.25;1pkt 1fpkt"];
853--7911[label="0.25;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.22.91" dst_port="1801"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1029{
style=filled;
color=gray75;
310[label="214.248.150.220s;121pkt 121fpkt", shape=rectangle, color=red];
5274[label="96.159.162.220;203pkt 203fpkt", shape=pentagon, color=darkviolet];
6881[label="96.159.162.220;203pkt 203fpkt", shape=invtriangle, color=brown];
7913[label="96.159.162.220;204pkt 204fpkt", shape=invhouse, color=bisque];
stat1029[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.159.162.220:1030, *:137}[66.4495%]&lt;BR/&gt;{214.248.150.220:1034, *:137}[33.5505%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1030: (42.9549%)&lt;BR/&gt; 1034: (7.04514%)&gt;];
}
310--5274[label="0.14876;18pkt 18fpkt"];
310--6881[label="0.14876;18pkt 18fpkt"];
310--7913[label="0.14876;18pkt 18fpkt"];
5274--6881[label="1;203pkt 203fpkt"];
5274--7913[label="1;203pkt 203fpkt"];
6881--7913[label="1;203pkt 203fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.159.162.220" src_port="1030"/>
      <filter dst_port="137" src_ip="214.248.150.220" src_port="1034"/>
    </slice>
    <from sec="1039669271" usec="0"/>
    <to sec="1039669433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.97.128.222"/>
    </slice>
    <from sec="1039669217" usec="0"/>
    <to sec="1039669914" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.65.58.223"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.216.52.224"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="138.186.2.225"/>
    </slice>
    <from sec="1039669212" usec="0"/>
    <to sec="1039669491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.109.128.225"/>
    </slice>
    <from sec="1039669716" usec="0"/>
    <to sec="1039669744" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.115.48.226"/>
    </slice>
    <from sec="1039669520" usec="0"/>
    <to sec="1039669547" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.41.26.227"/>
    </slice>
    <from sec="1039669885" usec="0"/>
    <to sec="1039669910" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.734171,1.81767,999,0 0 0 1 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1037{
style=filled;
color=gray75;
737[label="172.93.20.108;d;1pkt 1fpkt", shape=diamond, color=yellow];
739[label="64.84.48.227;s;1pkt 1fpkt", shape=diamond, color=yellow];
5314[label="64.84.48.227;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7928[label="64.84.48.227;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1037[shape=component, label=&lt;Rules:&lt;BR/&gt;{64.84.48.227:6699, 172.93.20.108:3601}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3601: (50%)&gt;];
}
737--739[label="1;1pkt 1fpkt"];
737--5314[label="1;1pkt 1fpkt"];
737--7928[label="1;1pkt 1fpkt"];
739--5314[label="1;1pkt 1fpkt"];
739--7928[label="1;1pkt 1fpkt"];
5314--7928[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.93.20.108" dst_port="3601" src_ip="64.84.48.227" src_port="6699"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="140.3.224.227"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="140.3.246.227"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="138.186.48.228"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.41.254.228"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.232.85.229"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.200.216.229"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790471,1.82041,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1044{
style=filled;
color=gray75;
319[label="197.66.16.232s;172pkt 172fpkt", shape=rectangle, color=red];
5353[label="197.66.16.232;172pkt 172fpkt", shape=pentagon, color=darkviolet];
6928[label="197.66.16.232;171pkt 171fpkt", shape=invtriangle, color=brown];
stat1044[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.66.16.232:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
319--5353[label="1;172pkt 172fpkt"];
319--6928[label="1;171pkt 171fpkt"];
5353--6928[label="1;171pkt 171fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.66.16.232" src_port="1025"/>
    </slice>
    <from sec="1039669354" usec="0"/>
    <to sec="1039669369" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.172.28.232"/>
    </slice>
    <from sec="1039669203" usec="0"/>
    <to sec="1039669926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752371,1.85474,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1047{
style=filled;
color=gray75;
323[label="96.177.89.233s;47pkt 47fpkt", shape=rectangle, color=red];
5368[label="96.177.89.233;103pkt 103fpkt", shape=pentagon, color=darkviolet];
stat1047[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.177.89.233:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
323--5368[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.177.89.233" src_port="1026"/>
    </slice>
    <from sec="1039669823" usec="0"/>
    <to sec="1039669839" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.139.200.233"/>
    </slice>
    <from sec="1039669203" usec="0"/>
    <to sec="1039669926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.34.210.233"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.24.25.234"/>
    </slice>
    <from sec="1039669313" usec="0"/>
    <to sec="1039669335" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752371,1.85474,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1051{
style=filled;
color=gray75;
325[label="37.24.4.235s;111pkt 111fpkt", shape=rectangle, color=red];
5385[label="37.24.4.235;212pkt 212fpkt", shape=pentagon, color=darkviolet];
stat1051[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.24.4.235:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
325--5385[label="1;111pkt 111fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="37.24.4.235" src_port="1026"/>
    </slice>
    <from sec="1039669315" usec="0"/>
    <to sec="1039669356" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.48.105.235"/>
    </slice>
    <from sec="1039669909" usec="0"/>
    <to sec="1039669915" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790471,1.82041,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1053{
style=filled;
color=gray75;
326[label="37.86.180.235s;316pkt 316fpkt", shape=rectangle, color=red];
5390[label="37.86.180.235;245pkt 245fpkt", shape=pentagon, color=darkviolet];
5391[label="197.240.192.235;138pkt 138fpkt", shape=pentagon, color=darkviolet];
6953[label="197.240.192.235;138pkt 138fpkt", shape=invtriangle, color=brown];
stat1053[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.86.180.235:1029, *:137}[63.8021%]&lt;BR/&gt;{197.240.192.235:1034, *:137}[36.1979%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1029: (29.2712%)&lt;BR/&gt; 1034: (20.7288%)&gt;];
}
326--5390[label="1;245pkt 245fpkt"];
326--5391[label="0.507246;70pkt 70fpkt"];
326--6953[label="0.507246;70pkt 70fpkt"];
5391--6953[label="1;138pkt 138fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="37.86.180.235" src_port="1029"/>
      <filter dst_port="137" src_ip="197.240.192.235" src_port="1034"/>
    </slice>
    <from sec="1039669553" usec="0"/>
    <to sec="1039669608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.53.10.236"/>
    </slice>
    <from sec="1039669228" usec="0"/>
    <to sec="1039669827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11796,1.82888,503,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1055{
style=filled;
color=gray75;
62[label="211.45.226.236s;3pkt 3fpkt", shape=rectangle, color=red];
530[label="148.110.65.27;d;19pkt 19fpkt", shape=diamond, color=yellow];
531[label="96.56.23.161;s;1pkt 1fpkt", shape=diamond, color=yellow];
761[label="211.45.226.236;s;123pkt 123fpkt", shape=diamond, color=yellow];
2208[label="96.36.114.236;s;5pkt 5fpkt", shape=diamond, color=yellow];
3114[label="140.3.55.14;d;97pkt 97fpkt", shape=hexagon, color=black];
5398[label="96.36.114.236;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6957[label="96.36.114.236;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1055[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.45.226.236:80, *:*}[53.4783%]&lt;BR/&gt;{*:80, 140.3.55.14:*}[29.5652%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.6484%)&lt;BR/&gt; 443: (5.66406%)&lt;BR/&gt; 1995: (3.71094%)&lt;BR/&gt; 3127: (0.976562%)&lt;BR/&gt; 3139: (0.78125%)&gt;];
}
62--494[label="0.333333;1pkt 1fpkt"];
62--530[label="0.333333;1pkt 1fpkt"];
62--557[label="0.333333;1pkt 1fpkt"];
62--761[label="0.666667;2pkt 2fpkt"];
62--2208[label="0.333333;1pkt 1fpkt"];
62--2875[label="0.333333;1pkt 1fpkt"];
62--5398[label="0.333333;1pkt 1fpkt"];
62--6957[label="0.333333;1pkt 1fpkt"];
530--531[label="1;1pkt 1fpkt"];
530--2208[label="1;5pkt 5fpkt"];
530--5398[label="1;4pkt 4fpkt"];
530--6957[label="1;4pkt 4fpkt"];
761--1121[label="0.155844;12pkt 12fpkt"];
761--1247[label="0.0487805;6pkt 6fpkt"];
761--1993[label="0.116883;9pkt 9fpkt"];
761--2174[label="0.139535;12pkt 12fpkt"];
761--2430[label="0.0927835;9pkt 9fpkt"];
761--2740[label="0.113821;14pkt 14fpkt"];
761--2875[label="0.219512;27pkt 27fpkt"];
761--2945[label="0.155844;12pkt 12fpkt"];
761--3114[label="0.0927835;9pkt 9fpkt"];
761--3154[label="0.113821;14pkt 14fpkt"];
2208--5398[label="1;4pkt 4fpkt"];
2208--6957[label="1;4pkt 4fpkt"];
3114--3212[label="0.0618557;6pkt 6fpkt"];
3114--3277[label="0.257732;25pkt 25fpkt"];
3114--3687[label="0.113402;11pkt 11fpkt"];
3114--3772[label="0.0576923;3pkt 3fpkt"];
3114--3832[label="0.0515464;5pkt 5fpkt"];
3114--4344[label="0.0412371;4pkt 4fpkt"];
3114--4462[label="1;10pkt 10fpkt"];
3114--4688[label="0.0309278;3pkt 3fpkt"];
3114--5581[label="0.257732;25pkt 25fpkt"];
3114--5841[label="0.113402;11pkt 11fpkt"];
3114--5899[label="0.0588235;3pkt 3fpkt"];
3114--6266[label="0.0412371;4pkt 4fpkt"];
3114--6349[label="1;9pkt 9fpkt"];
3114--7089[label="0.257732;25pkt 25fpkt"];
3114--7505[label="0.0412371;4pkt 4fpkt"];
5398--6957[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="211.45.226.236" src_port="80"/>
      <filter dst_ip="140.3.55.14" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.91.167.236"/>
    </slice>
    <from sec="1039669334" usec="0"/>
    <to sec="1039669367" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.153.194.236"/>
    </slice>
    <from sec="1039669363" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.21.4.237"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.100.163.237"/>
    </slice>
    <from sec="1039669767" usec="0"/>
    <to sec="1039669819" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752371,1.85474,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1060{
style=filled;
color=gray75;
329[label="200.195.199.237s;98pkt 98fpkt", shape=rectangle, color=red];
5409[label="200.195.199.237;158pkt 158fpkt", shape=pentagon, color=darkviolet];
stat1060[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.195.199.237:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
329--5409[label="1;98pkt 98fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.195.199.237" src_port="1026"/>
    </slice>
    <from sec="1039669330" usec="0"/>
    <to sec="1039669354" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1061{
style=filled;
color=gray75;
615[label="148.110.153.253;d;693pkt 693fpkt", shape=diamond, color=yellow];
806[label="199.19.210.202;s;180pkt 180fpkt", shape=diamond, color=yellow];
1716[label="199.19.210.203;s;79pkt 79fpkt", shape=diamond, color=yellow];
2196[label="221.236.102.87;s;153pkt 153fpkt", shape=diamond, color=yellow];
2564[label="199.19.210.202;s;180pkt 180fpkt", shape=hexagon, color=black];
3407[label="223.208.104.16;35pkt 35fpkt", shape=pentagon, color=darkviolet];
3423[label="92.142.183.17;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4030[label="210.24.217.77;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4130[label="221.236.102.87;202pkt 202fpkt", shape=pentagon, color=darkviolet];
5136[label="199.19.210.203;79pkt 79fpkt", shape=pentagon, color=darkviolet];
5394[label="36.253.15.236;17pkt 17fpkt", shape=pentagon, color=darkviolet];
5411[label="199.19.210.237;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5673[label="92.142.183.17;10pkt 10fpkt", shape=invtriangle, color=brown];
6045[label="36.161.206.74;12pkt 12fpkt", shape=invtriangle, color=brown];
6065[label="210.24.217.77;6pkt 6fpkt", shape=invtriangle, color=brown];
6789[label="199.19.210.203;78pkt 78fpkt", shape=invtriangle, color=brown];
6967[label="199.19.210.237;10pkt 10fpkt", shape=invtriangle, color=brown];
7137[label="92.142.183.17;10pkt 10fpkt", shape=invhouse, color=bisque];
7377[label="36.161.206.74;12pkt 12fpkt", shape=invhouse, color=bisque];
7844[label="199.19.210.203;78pkt 78fpkt", shape=invhouse, color=bisque];
stat1061[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.236.102.87:80, 148.110.153.253:*}[26.2338%]&lt;BR/&gt;{199.19.210.202:80, 148.110.153.253:*}[22.987%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4997: (0.134481%)&lt;BR/&gt; 4995: (0.134481%)&lt;BR/&gt; 4988: (0.134481%)&lt;BR/&gt; 4962: (0.134481%)&gt;];
}
615--806[label="0.983333;177pkt 177fpkt"];
615--926[label="0.168224;18pkt 18fpkt"];
615--1235[label="0.0198413;5pkt 5fpkt"];
615--1695[label="0.0273973;2pkt 2fpkt"];
615--1716[label="0.911392;72pkt 72fpkt"];
615--2196[label="1;153pkt 153fpkt"];
615--2522[label="0.253521;18pkt 18fpkt"];
615--2564[label="0.983333;177pkt 177fpkt"];
615--3407[label="0.8;28pkt 28fpkt"];
615--3423[label="1;10pkt 10fpkt"];
615--4030[label="1;6pkt 6fpkt"];
615--4124[label="0.0193798;5pkt 5fpkt"];
615--4130[label="0.757426;153pkt 153fpkt"];
615--5136[label="0.911392;72pkt 72fpkt"];
615--5394[label="1;17pkt 17fpkt"];
615--5411[label="1;9pkt 9fpkt"];
615--5673[label="1;10pkt 10fpkt"];
615--6045[label="0.0833333;1pkt 1fpkt"];
615--6065[label="1;6pkt 6fpkt"];
615--6123[label="0.0193798;5pkt 5fpkt"];
615--6789[label="0.910256;71pkt 71fpkt"];
615--6967[label="1;10pkt 10fpkt"];
615--7137[label="1;10pkt 10fpkt"];
615--7377[label="0.0833333;1pkt 1fpkt"];
615--7424[label="0.0193798;5pkt 5fpkt"];
615--7844[label="0.910256;71pkt 71fpkt"];
806--2564[label="1;180pkt 180fpkt"];
1716--5136[label="1;79pkt 79fpkt"];
1716--6789[label="1;78pkt 78fpkt"];
1716--7844[label="1;78pkt 78fpkt"];
2196--4130[label="1;153pkt 153fpkt"];
3423--5673[label="1;10pkt 10fpkt"];
3423--7137[label="1;10pkt 10fpkt"];
4030--6065[label="1;6pkt 6fpkt"];
5136--6789[label="1;78pkt 78fpkt"];
5136--7844[label="1;78pkt 78fpkt"];
5411--6967[label="1;9pkt 9fpkt"];
5673--7137[label="1;10pkt 10fpkt"];
6045--7377[label="1;12pkt 12fpkt"];
6789--7844[label="1;78pkt 78fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.153.253" src_ip="221.236.102.87" src_port="80"/>
      <filter dst_ip="148.110.153.253" src_ip="199.19.210.202" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,011,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.68.166.238"/>
    </slice>
    <from sec="1039669204" usec="0"/>
    <to sec="1039669924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790471,1.82041,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1064{
style=filled;
color=gray75;
331[label="192.216.243.238s;167pkt 167fpkt", shape=rectangle, color=red];
5415[label="192.216.243.238;435pkt 435fpkt", shape=pentagon, color=darkviolet];
6969[label="192.216.243.238;436pkt 436fpkt", shape=invtriangle, color=brown];
stat1064[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.216.243.238:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
331--5415[label="1;167pkt 167fpkt"];
331--6969[label="1;167pkt 167fpkt"];
5415--6969[label="1;435pkt 435fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="192.216.243.238" src_port="1027"/>
    </slice>
    <from sec="1039669396" usec="0"/>
    <to sec="1039669660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.85.164.242"/>
    </slice>
    <from sec="1039669237" usec="0"/>
    <to sec="1039669907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752371,1.85474,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1067{
style=filled;
color=gray75;
332[label="36.96.16.243s;102pkt 102fpkt", shape=rectangle, color=red];
5435[label="36.96.16.243;149pkt 149fpkt", shape=pentagon, color=darkviolet];
stat1067[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.96.16.243:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
332--5435[label="1;102pkt 102fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="36.96.16.243" src_port="1026"/>
    </slice>
    <from sec="1039669413" usec="0"/>
    <to sec="1039669439" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.213.194.243"/>
    </slice>
    <from sec="1039669285" usec="0"/>
    <to sec="1039669317" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752371,1.85474,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1069{
style=filled;
color=gray75;
334[label="196.13.29.244s;36pkt 36fpkt", shape=rectangle, color=red];
5448[label="196.13.29.244;149pkt 149fpkt", shape=pentagon, color=darkviolet];
stat1069[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.13.29.244:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
334--5448[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.13.29.244" src_port="1027"/>
    </slice>
    <from sec="1039669688" usec="0"/>
    <to sec="1039669713" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.126.181.245"/>
    </slice>
    <from sec="1039669238" usec="0"/>
    <to sec="1039669829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.61.224.245"/>
    </slice>
    <from sec="1039669224" usec="0"/>
    <to sec="1039669905" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645838,1.80177,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1072{
style=filled;
color=gray75;
2394[label="138.7.9.246;s;11pkt 11fpkt", shape=diamond, color=yellow];
5457[label="138.7.9.246;17pkt 17fpkt", shape=pentagon, color=darkviolet];
7004[label="138.7.9.246;17pkt 17fpkt", shape=invtriangle, color=brown];
stat1072[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.7.9.246:80, 33.17.52.158:*}[47.0588%]&lt;BR/&gt;{138.7.9.246:80, 92.239.202.221:*}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 46957: (3.33333%)&lt;BR/&gt; 46730: (3.33333%)&lt;BR/&gt; 1203: (3.33333%)&lt;BR/&gt; 1202: (3.33333%)&gt;];
}
2394--5457[label="1;11pkt 11fpkt"];
2394--7004[label="1;11pkt 11fpkt"];
5457--7004[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="33.17.52.158" src_ip="138.7.9.246" src_port="80"/>
      <filter dst_ip="92.239.202.221" src_ip="138.7.9.246" src_port="80"/>
    </slice>
    <from sec="1039669534" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1073{
style=filled;
color=gray75;
567[label="140.3.80.245;d;7pkt 7fpkt", shape=diamond, color=yellow];
569[label="208.166.165.246;s;1pkt 1fpkt", shape=diamond, color=yellow];
5463[label="208.166.165.246;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat1073[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.90.73.232:80, 140.3.80.245:*}[28.5714%]&lt;BR/&gt;{39.111.170.195:80, 140.3.80.245:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.4444%)&lt;BR/&gt; 1859: (16.6667%)&lt;BR/&gt; 1865: (5.55556%)&lt;BR/&gt; 1864: (5.55556%)&lt;BR/&gt; 1863: (5.55556%)&gt;];
}
567--569[label="1;1pkt 1fpkt"];
567--1013[label="0.285714;2pkt 2fpkt"];
567--5069[label="0.428571;3pkt 3fpkt"];
567--5463[label="1;1pkt 1fpkt"];
567--6740[label="0.428571;3pkt 3fpkt"];
567--7813[label="0.428571;3pkt 3fpkt"];
569--5463[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.80.245" src_ip="39.111.170.195" src_port="80"/>
      <filter dst_ip="140.3.80.245" src_ip="211.90.73.232" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790471,1.82041,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1074{
style=filled;
color=gray75;
336[label="96.6.136.247s;70pkt 70fpkt", shape=rectangle, color=red];
5468[label="96.6.136.247;242pkt 242fpkt", shape=pentagon, color=darkviolet];
7013[label="96.6.136.247;242pkt 242fpkt", shape=invtriangle, color=brown];
stat1074[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.6.136.247:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
336--5468[label="1;70pkt 70fpkt"];
336--7013[label="1;70pkt 70fpkt"];
5468--7013[label="1;242pkt 242fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.6.136.247" src_port="1030"/>
    </slice>
    <from sec="1039669251" usec="0"/>
    <to sec="1039669292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1075{
style=filled;
color=gray75;
2056[label="138.165.196.47;d;4pkt 4fpkt", shape=diamond, color=yellow];
5471[label="201.98.195.247;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat1075[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.52.53.104:1449, 138.165.196.47:10000}[25%]&lt;BR/&gt;{98.172.153.140:1121, 138.165.196.47:10000}[25%]&lt;BR/&gt;{64.7.73.163:6699, 138.165.196.47:1630}[25%]&lt;BR/&gt;{201.98.195.247:6699, 138.165.196.47:1632}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (30%)&lt;BR/&gt; 10000: (20%)&lt;BR/&gt; 1632: (20%)&lt;BR/&gt; 1630: (10%)&lt;BR/&gt; 1449: (10%)&gt;];
}
2056--5471[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.165.196.47" dst_port="1632" src_ip="201.98.195.247" src_port="6699"/>
      <filter dst_ip="138.165.196.47" dst_port="1630" src_ip="64.7.73.163" src_port="6699"/>
      <filter dst_ip="138.165.196.47" dst_port="10000" src_ip="98.172.153.140" src_port="1121"/>
      <filter dst_ip="138.165.196.47" dst_port="10000" src_ip="203.52.53.104" src_port="1449"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752371,1.85474,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1076{
style=filled;
color=gray75;
369[label="199.64.199.247s;39pkt 39fpkt", shape=rectangle, color=red];
5472[label="199.64.199.247;147pkt 147fpkt", shape=pentagon, color=darkviolet];
stat1076[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.64.199.247:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1567: (0.537634%)&lt;BR/&gt; 1566: (0.537634%)&lt;BR/&gt; 1565: (0.537634%)&lt;BR/&gt; 1564: (0.537634%)&gt;];
}
369--5472[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.64.199.247"/>
    </slice>
    <from sec="1039669468" usec="0"/>
    <to sec="1039669491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.122.195.248"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752371,1.85474,503,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1078{
style=filled;
color=gray75;
338[label="99.61.200.248s;2pkt 2fpkt", shape=rectangle, color=red];
5482[label="38.72.252.248;123pkt 123fpkt", shape=pentagon, color=darkviolet];
stat1078[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.72.252.248:80, 214.231.185.25:*}[27.4194%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3032: (0.8%)&lt;BR/&gt; 1130: (0.8%)&lt;BR/&gt; 64037: (0.4%)&lt;BR/&gt; 60391: (0.4%)&gt;];
}
338--5482[label="0.5;1pkt 1fpkt"];
338--7021[label="0.5;1pkt 1fpkt"];
5482--7021[label="1;123pkt 123fpkt"];
</description>
    <slice>
      <filter dst_ip="214.231.185.25" src_ip="38.72.252.248" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1079{
style=filled;
color=gray75;
1509[label="138.186.13.249;s;132pkt 132fpkt", shape=diamond, color=yellow];
5483[label="138.186.13.249;138pkt 138fpkt", shape=pentagon, color=darkviolet];
stat1079[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.13.249:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1509--5483[label="1;132pkt 132fpkt"];
</description>
    <slice>
      <filter src_ip="138.186.13.249"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="98.168.90.249"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1081{
style=filled;
color=gray75;
477[label="138.186.54.0;d;403pkt 403fpkt", shape=diamond, color=yellow];
5488[label="64.215.20.250;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7026[label="64.215.20.250;2pkt 2fpkt", shape=invtriangle, color=brown];
8000[label="64.215.20.250;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1081[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6257, 138.186.54.0:6257}[96.2779%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (96.9287%)&lt;BR/&gt; 6699: (0.859951%)&lt;BR/&gt; 1901: (0.4914%)&lt;BR/&gt; 64591: (0.12285%)&lt;BR/&gt; 64338: (0.12285%)&gt;];
}
477--5488[label="1;1pkt 1fpkt"];
477--7026[label="1;2pkt 2fpkt"];
477--8000[label="1;1pkt 1fpkt"];
5488--7026[label="1;1pkt 1fpkt"];
5488--8000[label="1;1pkt 1fpkt"];
7026--8000[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.54.0" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1082{
style=filled;
color=gray75;
343[label="196.250.74.252s;102pkt 102fpkt", shape=rectangle, color=red];
5505[label="196.250.74.252;162pkt 162fpkt", shape=pentagon, color=darkviolet];
7041[label="196.250.74.252;162pkt 162fpkt", shape=invtriangle, color=brown];
8009[label="196.250.74.252;162pkt 162fpkt", shape=invhouse, color=bisque];
stat1082[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.250.74.252:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
343--5505[label="1;102pkt 102fpkt"];
343--7041[label="1;102pkt 102fpkt"];
343--8009[label="1;102pkt 102fpkt"];
5505--7041[label="1;162pkt 162fpkt"];
5505--8009[label="1;162pkt 162fpkt"];
7041--8009[label="1;162pkt 162fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.250.74.252" src_port="1031"/>
    </slice>
    <from sec="1039669690" usec="0"/>
    <to sec="1039669718" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.151.192.252"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1084{
style=filled;
color=gray75;
344[label="96.27.16.253s;39pkt 39fpkt", shape=rectangle, color=red];
5512[label="96.27.16.253;189pkt 189fpkt", shape=pentagon, color=darkviolet];
7045[label="96.27.16.253;189pkt 189fpkt", shape=invtriangle, color=brown];
8012[label="96.27.16.253;188pkt 188fpkt", shape=invhouse, color=bisque];
stat1084[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.27.16.253:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
344--5512[label="1;39pkt 39fpkt"];
344--7045[label="1;39pkt 39fpkt"];
344--8012[label="1;39pkt 39fpkt"];
5512--7045[label="1;189pkt 189fpkt"];
5512--8012[label="1;188pkt 188fpkt"];
7045--8012[label="1;188pkt 188fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.27.16.253" src_port="1027"/>
    </slice>
    <from sec="1039669676" usec="0"/>
    <to sec="1039669709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598603,1.83645,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1085{
style=filled;
color=gray75;
1827[label="61.201.69.253;s;1pkt 1fpkt", shape=diamond, color=yellow];
5515[label="61.201.69.253;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat1085[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.201.69.253:6699, 138.186.177.88:2198}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 2198: (50%)&gt;];
}
1827--5515[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.177.88" dst_port="2198" src_ip="61.201.69.253" src_port="6699"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1086{
style=filled;
color=gray75;
345[label="37.96.162.253s;46pkt 46fpkt", shape=rectangle, color=red];
5517[label="37.96.162.253;174pkt 174fpkt", shape=pentagon, color=darkviolet];
7049[label="37.96.162.253;174pkt 174fpkt", shape=invtriangle, color=brown];
8015[label="37.96.162.253;174pkt 174fpkt", shape=invhouse, color=bisque];
stat1086[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.96.162.253:1033, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1033: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
345--5517[label="1;46pkt 46fpkt"];
345--7049[label="1;46pkt 46fpkt"];
345--8015[label="1;46pkt 46fpkt"];
5517--7049[label="1;174pkt 174fpkt"];
5517--8015[label="1;174pkt 174fpkt"];
7049--8015[label="1;174pkt 174fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="37.96.162.253" src_port="1033"/>
    </slice>
    <from sec="1039669646" usec="0"/>
    <to sec="1039669673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.20.3.254"/>
    </slice>
    <from sec="1039669469" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752371,1.85474,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1088{
style=filled;
color=gray75;
370[label="96.73.200.254s;78pkt 78fpkt", shape=rectangle, color=red];
5521[label="96.73.200.254;160pkt 160fpkt", shape=pentagon, color=darkviolet];
stat1088[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.73.200.254:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 25008: (0.420168%)&lt;BR/&gt; 25002: (0.420168%)&lt;BR/&gt; 24995: (0.420168%)&lt;BR/&gt; 24986: (0.420168%)&gt;];
}
370--5521[label="0.987179;77pkt 77fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.73.200.254"/>
    </slice>
    <from sec="1039669344" usec="0"/>
    <to sec="1039669369" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752371,1.85474,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1089{
style=filled;
color=gray75;
371[label="197.104.17.255s;124pkt 124fpkt", shape=rectangle, color=red];
5522[label="197.104.17.255;124pkt 124fpkt", shape=pentagon, color=darkviolet];
stat1089[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.104.17.255:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 58885: (0.403226%)&lt;BR/&gt; 58880: (0.403226%)&lt;BR/&gt; 58875: (0.403226%)&lt;BR/&gt; 58870: (0.403226%)&gt;];
}
371--5522[label="1;124pkt 124fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.104.17.255"/>
    </slice>
    <from sec="1039669384" usec="0"/>
    <to sec="1039669410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.192.32.255"/>
    </slice>
    <from sec="1039669212" usec="0"/>
    <to sec="1039669910" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.64.74.255"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790471,1.82041,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1092{
style=filled;
color=gray75;
346[label="128.63.184.255s;167pkt 167fpkt", shape=rectangle, color=red];
5528[label="128.63.184.255;183pkt 183fpkt", shape=pentagon, color=darkviolet];
7055[label="128.63.184.255;182pkt 182fpkt", shape=invtriangle, color=brown];
stat1092[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.63.184.255:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
346--5528[label="1;167pkt 167fpkt"];
346--7055[label="0.994012;166pkt 166fpkt"];
5528--7055[label="1;182pkt 182fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="128.63.184.255" src_port="1025"/>
    </slice>
    <from sec="1039669360" usec="0"/>
    <to sec="1039669390" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1094{
style=filled;
color=gray75;
1451[label="215.90.155.203;d;51pkt 51fpkt", shape=diamond, color=yellow];
1740[label="198.128.182.151;s;33pkt 33fpkt", shape=diamond, color=yellow];
2202[label="197.231.178.0;s;18pkt 18fpkt", shape=diamond, color=yellow];
2842[label="215.90.155.203;d;46pkt 46fpkt", shape=hexagon, color=black];
3107[label="197.231.178.0;s;18pkt 18fpkt", shape=hexagon, color=black];
3194[label="197.231.178.0;17pkt 17fpkt", shape=pentagon, color=darkviolet];
4685[label="198.128.182.151;32pkt 32fpkt", shape=pentagon, color=darkviolet];
5532[label="197.231.178.0;17pkt 17fpkt", shape=invtriangle, color=brown];
7059[label="197.231.178.0;17pkt 17fpkt", shape=invhouse, color=bisque];
stat1094[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.128.182.151:80, 215.90.155.203:*}[64.7059%]&lt;BR/&gt;{197.231.178.0:80, 215.90.155.203:*}[35.2941%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1150: (1.40562%)&lt;BR/&gt; 1142: (1.40562%)&lt;BR/&gt; 1141: (1.40562%)&lt;BR/&gt; 1140: (1.40562%)&gt;];
}
1451--1740[label="1;33pkt 33fpkt"];
1451--2202[label="1;18pkt 18fpkt"];
1451--2842[label="1;46pkt 46fpkt"];
1451--3107[label="1;18pkt 18fpkt"];
1451--3194[label="1;17pkt 17fpkt"];
1451--4685[label="1;32pkt 32fpkt"];
1451--5532[label="1;17pkt 17fpkt"];
1451--7059[label="1;17pkt 17fpkt"];
1740--2842[label="1;33pkt 33fpkt"];
1740--4685[label="1;32pkt 32fpkt"];
2202--2842[label="0.722222;13pkt 13fpkt"];
2202--3107[label="1;18pkt 18fpkt"];
2202--3194[label="1;17pkt 17fpkt"];
2202--5532[label="1;17pkt 17fpkt"];
2202--7059[label="1;17pkt 17fpkt"];
2842--3107[label="0.722222;13pkt 13fpkt"];
2842--3194[label="0.705882;12pkt 12fpkt"];
2842--4685[label="1;32pkt 32fpkt"];
2842--5532[label="0.705882;12pkt 12fpkt"];
2842--7059[label="0.705882;12pkt 12fpkt"];
3107--3194[label="1;17pkt 17fpkt"];
3107--5532[label="1;17pkt 17fpkt"];
3107--7059[label="1;17pkt 17fpkt"];
3194--5532[label="1;17pkt 17fpkt"];
3194--7059[label="1;17pkt 17fpkt"];
5532--7059[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.155.203" src_ip="198.128.182.151" src_port="80"/>
      <filter dst_ip="215.90.155.203" src_ip="197.231.178.0" src_port="80"/>
    </slice>
    <from sec="1039669327" usec="0"/>
    <to sec="1039669724" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="64.214.253.0"/>
    </slice>
    <from sec="1039669214" usec="0"/>
    <to sec="1039669922" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1096{
style=filled;
color=gray75;
1958[label="140.3.243.12;d;70pkt 70fpkt", shape=diamond, color=yellow];
3200[label="222.223.23.1;25pkt 25fpkt", shape=pentagon, color=darkviolet];
4973[label="209.192.119.182;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5535[label="222.223.23.1;24pkt 24fpkt", shape=invtriangle, color=brown];
6693[label="209.192.119.182;4pkt 4fpkt", shape=invtriangle, color=brown];
7780[label="209.192.119.182;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1096[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 140.3.243.12:*}[75.2688%]&lt;BR/&gt;{222.223.23.1:80, 148.110.153.253:*}[24.7312%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3202: (1.53846%)&lt;BR/&gt; 3201: (1.53846%)&lt;BR/&gt; 3199: (1.53846%)&lt;BR/&gt; 3240: (1.15385%)&gt;];
}
1958--3200[label="0.08;2pkt 2fpkt"];
1958--4973[label="1;4pkt 4fpkt"];
1958--5535[label="0.0833333;2pkt 2fpkt"];
1958--6693[label="1;4pkt 4fpkt"];
1958--7780[label="1;3pkt 3fpkt"];
3200--5535[label="1;24pkt 24fpkt"];
4973--6693[label="1;4pkt 4fpkt"];
4973--7780[label="1;3pkt 3fpkt"];
6693--7780[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.243.12" src_port="80"/>
      <filter dst_ip="148.110.153.253" src_ip="222.223.23.1" src_port="80"/>
    </slice>
    <from sec="1039669426" usec="0"/>
    <to sec="1039669924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1098{
style=filled;
color=gray75;
3203[label="140.3.75.1;27pkt 27fpkt", shape=pentagon, color=darkviolet];
5537[label="140.3.75.1;26pkt 26fpkt", shape=invtriangle, color=brown];
stat1098[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.75.1:*, 146.218.43.125:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1087: (1.88679%)&lt;BR/&gt; 1086: (1.88679%)&lt;BR/&gt; 1085: (1.88679%)&lt;BR/&gt; 1084: (1.88679%)&gt;];
}
3203--5537[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="146.218.43.125" dst_port="80" src_ip="140.3.75.1"/>
    </slice>
    <from sec="1039669382" usec="0"/>
    <to sec="1039669391" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1099{
style=filled;
color=gray75;
3208[label="202.108.178.1;134pkt 134fpkt", shape=pentagon, color=darkviolet];
5540[label="202.108.178.1;133pkt 133fpkt", shape=invtriangle, color=brown];
stat1099[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.108.178.1:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3208--5540[label="1;133pkt 133fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.108.178.1" src_port="1026"/>
    </slice>
    <from sec="1039669359" usec="0"/>
    <to sec="1039669380" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1100{
style=filled;
color=gray75;
3211[label="96.197.241.1;164pkt 164fpkt", shape=pentagon, color=darkviolet];
5542[label="96.197.241.1;164pkt 164fpkt", shape=invtriangle, color=brown];
stat1100[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.197.241.1:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3211--5542[label="1;164pkt 164fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.197.241.1" src_port="1031"/>
    </slice>
    <from sec="1039669764" usec="0"/>
    <to sec="1039669800" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1101{
style=filled;
color=gray75;
3213[label="172.93.10.2;17pkt 17fpkt", shape=pentagon, color=darkviolet];
5543[label="172.93.10.2;17pkt 17fpkt", shape=invtriangle, color=brown];
stat1101[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.93.10.2:*, 222.204.163.36:80}[64.7059%]&lt;BR/&gt;{172.93.10.2:*, 221.88.66.0:80}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1710: (2.94118%)&lt;BR/&gt; 1709: (2.94118%)&lt;BR/&gt; 1708: (2.94118%)&lt;BR/&gt; 1706: (2.94118%)&gt;];
}
3213--5543[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="222.204.163.36" dst_port="80" src_ip="172.93.10.2"/>
      <filter dst_ip="221.88.66.0" dst_port="80" src_ip="172.93.10.2"/>
    </slice>
    <from sec="1039669258" usec="0"/>
    <to sec="1039669729" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1102{
style=filled;
color=gray75;
3220[label="215.88.143.2;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5546[label="215.88.143.2;1pkt 1fpkt", shape=invtriangle, color=brown];
7064[label="215.88.143.2;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1102[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.88.143.2:80, 215.160.138.180:52197}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52197: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3220--5546[label="1;1pkt 1fpkt"];
3220--7064[label="1;1pkt 1fpkt"];
5546--7064[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.160.138.180" dst_port="52197" src_ip="215.88.143.2" src_port="80"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.937874,1.83478,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1103{
style=filled;
color=gray75;
681[label="199.92.233.170;d;604pkt 604fpkt", shape=diamond, color=yellow];
1710[label="140.3.95.26;s;99pkt 99fpkt", shape=diamond, color=yellow];
1723[label="140.3.239.2;s;69pkt 69fpkt", shape=diamond, color=yellow];
2724[label="140.3.95.26;s;99pkt 99fpkt", shape=hexagon, color=black];
3535[label="140.3.95.26;114pkt 114fpkt", shape=pentagon, color=darkviolet];
5133[label="140.3.76.203;11pkt 11fpkt", shape=pentagon, color=darkviolet];
5750[label="140.3.95.26;115pkt 115fpkt", shape=invtriangle, color=brown];
stat1103[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 199.92.233.170:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1982: (0.315032%)&lt;BR/&gt; 1981: (0.315032%)&lt;BR/&gt; 1980: (0.315032%)&lt;BR/&gt; 1979: (0.315032%)&gt;];
}
681--859[label="0.289604;117pkt 117fpkt"];
681--922[label="0.571429;100pkt 100fpkt"];
681--1609[label="0.452055;99pkt 99fpkt"];
681--1710[label="1;99pkt 99fpkt"];
681--1723[label="1;69pkt 69fpkt"];
681--2169[label="0.978947;93pkt 93fpkt"];
681--2674[label="1;362pkt 362fpkt"];
681--2724[label="1;99pkt 99fpkt"];
681--2881[label="0.305136;101pkt 101fpkt"];
681--3185[label="0.0695364;42pkt 42fpkt"];
681--3230[label="0.92;69pkt 69fpkt"];
681--3535[label="0.859649;98pkt 98fpkt"];
681--4420[label="0.566502;115pkt 115fpkt"];
681--5133[label="1;11pkt 11fpkt"];
681--5549[label="0.92;69pkt 69fpkt"];
681--5750[label="0.86087;99pkt 99fpkt"];
681--6321[label="0.566502;115pkt 115fpkt"];
1710--2674[label="0.565657;56pkt 56fpkt"];
1710--2724[label="1;99pkt 99fpkt"];
1710--3185[label="0.0606061;6pkt 6fpkt"];
1710--3535[label="0.989899;98pkt 98fpkt"];
1710--5750[label="1;99pkt 99fpkt"];
1723--2674[label="0.724638;50pkt 50fpkt"];
1723--3185[label="0.057971;4pkt 4fpkt"];
1723--3230[label="1;69pkt 69fpkt"];
1723--5549[label="1;69pkt 69fpkt"];
2724--3185[label="0.0606061;6pkt 6fpkt"];
2724--3535[label="0.989899;98pkt 98fpkt"];
2724--5750[label="1;99pkt 99fpkt"];
3535--5750[label="1;114pkt 114fpkt"];
</description>
    <slice>
      <filter dst_ip="199.92.233.170" dst_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1104{
style=filled;
color=gray75;
3232[label="199.108.34.3;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5551[label="199.108.34.3;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1104[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.108.34.3:80, 140.3.240.10:1660}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1660: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3232--5551[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.240.10" dst_port="1660" src_ip="199.108.34.3" src_port="80"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1105{
style=filled;
color=gray75;
3235[label="148.110.75.3;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5554[label="148.110.75.3;5pkt 5fpkt", shape=invtriangle, color=brown];
7070[label="148.110.75.3;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1105[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.110.75.3:8740, *:8738}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8740: (50%)&lt;BR/&gt; 8738: (50%)&gt;];
}
3235--5554[label="1;5pkt 5fpkt"];
3235--7070[label="1;6pkt 6fpkt"];
5554--7070[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_port="8738" src_ip="148.110.75.3" src_port="8740"/>
    </slice>
    <from sec="1039669204" usec="0"/>
    <to sec="1039669915" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1106{
style=filled;
color=gray75;
3243[label="215.90.65.4;21pkt 21fpkt", shape=pentagon, color=darkviolet];
5560[label="215.90.65.4;22pkt 22fpkt", shape=invtriangle, color=brown];
7073[label="215.90.65.4;22pkt 22fpkt", shape=invhouse, color=bisque];
stat1106[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.90.65.4:*, *:8888}[50%]&lt;BR/&gt;{215.90.65.4:*, 98.237.163.113:*}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (24.6154%)&lt;BR/&gt; 7000: (9.23077%)&lt;BR/&gt; 3456: (9.23077%)&lt;BR/&gt; 39461: (2.30769%)&lt;BR/&gt; 6699: (2.30769%)&gt;];
}
3243--5560[label="1;21pkt 21fpkt"];
3243--7073[label="1;21pkt 21fpkt"];
5560--7073[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="98.237.163.113" src_ip="215.90.65.4"/>
      <filter dst_port="8888" src_ip="215.90.65.4"/>
    </slice>
    <from sec="1039669208" usec="0"/>
    <to sec="1039669923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1107{
style=filled;
color=gray75;
80[label="197.35.73.4s;202pkt 202fpkt", shape=rectangle, color=red];
3246[label="197.35.73.4;223pkt 223fpkt", shape=pentagon, color=darkviolet];
5561[label="197.35.73.4;222pkt 222fpkt", shape=invtriangle, color=brown];
7074[label="197.35.73.4;223pkt 223fpkt", shape=invhouse, color=bisque];
stat1107[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.35.73.4:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
80--3182[label="1;202pkt 202fpkt"];
80--3246[label="1;202pkt 202fpkt"];
80--5561[label="0.99505;201pkt 201fpkt"];
80--7074[label="1;202pkt 202fpkt"];
3246--5561[label="1;222pkt 222fpkt"];
3246--7074[label="1;223pkt 223fpkt"];
5561--7074[label="1;222pkt 222fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.35.73.4" src_port="1025"/>
    </slice>
    <from sec="1039669751" usec="0"/>
    <to sec="1039669787" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="162.127.76.4"/>
    </slice>
    <from sec="1039669456" usec="0"/>
    <to sec="1039669757" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1109{
style=filled;
color=gray75;
3252[label="215.88.143.4;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5565[label="215.88.143.4;5pkt 5fpkt", shape=invtriangle, color=brown];
7077[label="215.88.143.4;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1109[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.88.143.4:80, 140.3.211.100:1695}[20%]&lt;BR/&gt;{215.88.143.4:80, 140.3.211.100:1696}[20%]&lt;BR/&gt;{215.88.143.4:80, 140.3.211.100:1698}[20%]&lt;BR/&gt;{215.88.143.4:80, 140.3.211.100:1699}[20%]&lt;BR/&gt;{215.88.143.4:80, 140.3.211.100:1700}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1700: (10.7143%)&lt;BR/&gt; 1699: (10.7143%)&lt;BR/&gt; 1698: (10.7143%)&lt;BR/&gt; 1696: (10.7143%)&gt;];
}
3252--5565[label="1;4pkt 4fpkt"];
3252--7077[label="1;4pkt 4fpkt"];
5565--7077[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.211.100" dst_port="1700" src_ip="215.88.143.4" src_port="80"/>
      <filter dst_ip="140.3.211.100" dst_port="1699" src_ip="215.88.143.4" src_port="80"/>
      <filter dst_ip="140.3.211.100" dst_port="1698" src_ip="215.88.143.4" src_port="80"/>
      <filter dst_ip="140.3.211.100" dst_port="1696" src_ip="215.88.143.4" src_port="80"/>
      <filter dst_ip="140.3.211.100" dst_port="1695" src_ip="215.88.143.4" src_port="80"/>
    </slice>
    <from sec="1039669303" usec="0"/>
    <to sec="1039669402" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1110{
style=filled;
color=gray75;
3254[label="98.134.165.4;155pkt 155fpkt", shape=pentagon, color=darkviolet];
5566[label="98.134.165.4;155pkt 155fpkt", shape=invtriangle, color=brown];
7078[label="98.134.165.4;155pkt 155fpkt", shape=invhouse, color=bisque];
stat1110[shape=component, label=&lt;Rules:&lt;BR/&gt;{98.134.165.4:65018, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65018: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3254--5566[label="1;155pkt 155fpkt"];
3254--7078[label="1;155pkt 155fpkt"];
5566--7078[label="1;155pkt 155fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="98.134.165.4" src_port="65018"/>
    </slice>
    <from sec="1039669804" usec="0"/>
    <to sec="1039669836" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1111{
style=filled;
color=gray75;
3256[label="202.148.185.4;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5567[label="202.148.185.4;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1111[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.148.185.4:80, 172.93.12.19:1956}[25%]&lt;BR/&gt;{202.148.185.4:8080, 172.93.75.157:3299}[25%]&lt;BR/&gt;{202.148.185.4:15825, 138.165.30.113:80}[25%]&lt;BR/&gt;{202.148.185.4:16094, 138.165.30.113:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.5%)&lt;BR/&gt; 16094: (12.5%)&lt;BR/&gt; 15825: (12.5%)&lt;BR/&gt; 8080: (12.5%)&lt;BR/&gt; 3299: (12.5%)&gt;];
}
3256--5567[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="138.165.30.113" dst_port="80" src_ip="202.148.185.4" src_port="16094"/>
      <filter dst_ip="138.165.30.113" dst_port="80" src_ip="202.148.185.4" src_port="15825"/>
      <filter dst_ip="172.93.75.157" dst_port="3299" src_ip="202.148.185.4" src_port="8080"/>
      <filter dst_ip="172.93.12.19" dst_port="1956" src_ip="202.148.185.4" src_port="80"/>
    </slice>
    <from sec="1039669578" usec="0"/>
    <to sec="1039669922" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1112{
style=filled;
color=gray75;
5151[label="39.111.177.205;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat1112[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.111.177.205:80, 140.3.210.82:4037}[20%]&lt;BR/&gt;{39.111.177.205:80, 140.3.210.82:4038}[20%]&lt;BR/&gt;{39.111.177.205:80, 140.3.210.82:4044}[20%]&lt;BR/&gt;{39.111.177.205:80, 140.3.210.82:4046}[20%]&lt;BR/&gt;{39.111.177.205:80, 140.3.210.82:4049}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4049: (10%)&lt;BR/&gt; 4046: (10%)&lt;BR/&gt; 4044: (10%)&lt;BR/&gt; 4038: (10%)&gt;];
}
5151--6800[label="1;5pkt 5fpkt"];
5151--7854[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.210.82" dst_port="4049" src_ip="39.111.177.205" src_port="80"/>
      <filter dst_ip="140.3.210.82" dst_port="4046" src_ip="39.111.177.205" src_port="80"/>
      <filter dst_ip="140.3.210.82" dst_port="4044" src_ip="39.111.177.205" src_port="80"/>
      <filter dst_ip="140.3.210.82" dst_port="4038" src_ip="39.111.177.205" src_port="80"/>
      <filter dst_ip="140.3.210.82" dst_port="4037" src_ip="39.111.177.205" src_port="80"/>
    </slice>
    <from sec="1039669785" usec="0"/>
    <to sec="1039669793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1113{
style=filled;
color=gray75;
3263[label="197.70.71.5;106pkt 106fpkt", shape=pentagon, color=darkviolet];
5572[label="197.70.71.5;105pkt 105fpkt", shape=invtriangle, color=brown];
7083[label="197.70.71.5;105pkt 105fpkt", shape=invhouse, color=bisque];
stat1113[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.70.71.5:33164, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33164: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3263--5572[label="1;105pkt 105fpkt"];
3263--7083[label="1;105pkt 105fpkt"];
5572--7083[label="1;105pkt 105fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.70.71.5" src_port="33164"/>
    </slice>
    <from sec="1039669897" usec="0"/>
    <to sec="1039669920" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1114{
style=filled;
color=gray75;
3273[label="140.3.201.5;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5578[label="140.3.201.5;5pkt 5fpkt", shape=invtriangle, color=brown];
7087[label="140.3.201.5;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1114[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.201.5:1946, 196.92.68.13:80}[20%]&lt;BR/&gt;{140.3.201.5:1944, 96.22.89.29:80}[20%]&lt;BR/&gt;{140.3.201.5:1945, 96.22.89.29:80}[20%]&lt;BR/&gt;{140.3.201.5:1942, 196.92.68.43:80}[20%]&lt;BR/&gt;{140.3.201.5:1943, 196.92.68.43:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1946: (10.7143%)&lt;BR/&gt; 1945: (10.7143%)&lt;BR/&gt; 1943: (10.7143%)&lt;BR/&gt; 1942: (10.7143%)&gt;];
}
3273--5578[label="1;5pkt 5fpkt"];
3273--7087[label="1;4pkt 4fpkt"];
5578--7087[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="196.92.68.43" dst_port="80" src_ip="140.3.201.5" src_port="1943"/>
      <filter dst_ip="196.92.68.43" dst_port="80" src_ip="140.3.201.5" src_port="1942"/>
      <filter dst_ip="96.22.89.29" dst_port="80" src_ip="140.3.201.5" src_port="1945"/>
      <filter dst_ip="96.22.89.29" dst_port="80" src_ip="140.3.201.5" src_port="1944"/>
      <filter dst_ip="196.92.68.13" dst_port="80" src_ip="140.3.201.5" src_port="1946"/>
    </slice>
    <from sec="1039669491" usec="0"/>
    <to sec="1039669602" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1115{
style=filled;
color=gray75;
3275[label="140.3.211.5;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5579[label="140.3.211.5;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1115[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.211.5:2634, 211.90.155.215:1863}[20%]&lt;BR/&gt;{140.3.211.5:3006, 208.166.235.11:80}[20%]&lt;BR/&gt;{140.3.211.5:3007, 208.166.235.11:80}[20%]&lt;BR/&gt;{140.3.211.5:3024, 208.166.235.11:80}[20%]&lt;BR/&gt;{140.3.211.5:3025, 208.166.235.11:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40%)&lt;BR/&gt; 3025: (10%)&lt;BR/&gt; 3024: (10%)&lt;BR/&gt; 3007: (10%)&lt;BR/&gt; 3006: (10%)&gt;];
}
3275--5579[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="208.166.235.11" dst_port="80" src_ip="140.3.211.5" src_port="3025"/>
      <filter dst_ip="208.166.235.11" dst_port="80" src_ip="140.3.211.5" src_port="3024"/>
      <filter dst_ip="208.166.235.11" dst_port="80" src_ip="140.3.211.5" src_port="3007"/>
      <filter dst_ip="208.166.235.11" dst_port="80" src_ip="140.3.211.5" src_port="3006"/>
      <filter dst_ip="211.90.155.215" dst_port="1863" src_ip="140.3.211.5" src_port="2634"/>
    </slice>
    <from sec="1039669202" usec="0"/>
    <to sec="1039669791" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1116{
style=filled;
color=gray75;
3281[label="140.3.244.5;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5584[label="140.3.244.5;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1116[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.244.5:3307, 98.137.41.207:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3307: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3281--5584[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="98.137.41.207" dst_port="80" src_ip="140.3.244.5" src_port="3307"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1117{
style=filled;
color=gray75;
3290[label="96.194.118.6;193pkt 193fpkt", shape=pentagon, color=darkviolet];
5591[label="96.194.118.6;192pkt 192fpkt", shape=invtriangle, color=brown];
stat1117[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.194.118.6:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3290--5591[label="1;192pkt 192fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.194.118.6" src_port="1025"/>
    </slice>
    <from sec="1039669710" usec="0"/>
    <to sec="1039669723" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19604,1.81002,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1118{
style=filled;
color=gray75;
8[label="172.93.144.32s;3pkt 3fpkt", shape=rectangle, color=red];
594[label="138.186.52.7;s;33pkt 33fpkt", shape=diamond, color=yellow];
898[label="32.66.42.159;d;1pkt 1fpkt", shape=diamond, color=yellow];
924[label="39.29.216.174;d;1pkt 1fpkt", shape=diamond, color=yellow];
1025[label="64.23.79.189;d;1pkt 1fpkt", shape=diamond, color=yellow];
1039[label="92.237.106.130;d;1pkt 1fpkt", shape=diamond, color=yellow];
1532[label="99.99.128.179;d;1pkt 1fpkt", shape=diamond, color=yellow];
2476[label="138.186.52.7;s;33pkt 33fpkt", shape=hexagon, color=black];
3298[label="138.186.52.7;33pkt 33fpkt", shape=pentagon, color=darkviolet];
5596[label="138.186.52.7;33pkt 33fpkt", shape=invtriangle, color=brown];
7096[label="138.186.52.7;32pkt 32fpkt", shape=invhouse, color=bisque];
stat1118[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.52.7:6257, *:6257}[62.8571%]&lt;BR/&gt;{138.186.52.7:6699, *:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (63.3721%)&lt;BR/&gt; 6699: (14.8256%)&lt;BR/&gt; 1222: (2.03488%)&lt;BR/&gt; 2766: (1.74419%)&lt;BR/&gt; 1848: (1.74419%)&gt;];
}
8--594[label="0.333333;1pkt 1fpkt"];
8--677[label="1;1pkt 1fpkt"];
8--945[label="0.333333;1pkt 1fpkt"];
8--1059[label="0.5;1pkt 1fpkt"];
8--1342[label="1;1pkt 1fpkt"];
8--1532[label="1;1pkt 1fpkt"];
8--2476[label="0.333333;1pkt 1fpkt"];
8--2772[label="0.333333;1pkt 1fpkt"];
8--2923[label="1;1pkt 1fpkt"];
8--3298[label="0.333333;1pkt 1fpkt"];
8--3588[label="0.333333;1pkt 1fpkt"];
8--5596[label="0.333333;1pkt 1fpkt"];
8--7096[label="0.333333;1pkt 1fpkt"];
594--898[label="1;1pkt 1fpkt"];
594--924[label="1;1pkt 1fpkt"];
594--1025[label="1;1pkt 1fpkt"];
594--1039[label="1;1pkt 1fpkt"];
594--1532[label="1;1pkt 1fpkt"];
594--2476[label="1;33pkt 33fpkt"];
594--3298[label="1;33pkt 33fpkt"];
594--5596[label="1;33pkt 33fpkt"];
594--7096[label="1;32pkt 32fpkt"];
898--2476[label="1;1pkt 1fpkt"];
898--3298[label="1;1pkt 1fpkt"];
898--5596[label="1;1pkt 1fpkt"];
898--7096[label="1;1pkt 1fpkt"];
924--2476[label="1;1pkt 1fpkt"];
924--3298[label="1;1pkt 1fpkt"];
924--5596[label="1;1pkt 1fpkt"];
924--7096[label="1;1pkt 1fpkt"];
1025--2476[label="1;1pkt 1fpkt"];
1025--3298[label="1;1pkt 1fpkt"];
1025--5596[label="1;1pkt 1fpkt"];
1025--7096[label="1;1pkt 1fpkt"];
1039--2476[label="1;1pkt 1fpkt"];
1039--3298[label="1;1pkt 1fpkt"];
1039--5596[label="1;1pkt 1fpkt"];
1039--7096[label="1;1pkt 1fpkt"];
1532--2476[label="1;1pkt 1fpkt"];
1532--3298[label="1;1pkt 1fpkt"];
1532--5596[label="1;1pkt 1fpkt"];
1532--7096[label="1;1pkt 1fpkt"];
2476--3298[label="1;33pkt 33fpkt"];
2476--5596[label="1;33pkt 33fpkt"];
2476--7096[label="1;32pkt 32fpkt"];
3298--5596[label="1;33pkt 33fpkt"];
3298--7096[label="1;32pkt 32fpkt"];
5596--7096[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter src_ip="138.186.52.7" src_port="6699"/>
      <filter dst_port="6257" src_ip="138.186.52.7" src_port="6257"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1119{
style=filled;
color=gray75;
3301[label="140.3.211.7;16pkt 16fpkt", shape=pentagon, color=darkviolet];
5599[label="140.3.211.7;17pkt 17fpkt", shape=invtriangle, color=brown];
7098[label="140.3.211.7;16pkt 16fpkt", shape=invhouse, color=bisque];
stat1119[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.211.7:*, 199.186.78.52:80}[64.7059%]&lt;BR/&gt;{140.3.211.7:*, 201.165.82.128:80}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1189: (3.06122%)&lt;BR/&gt; 1188: (3.06122%)&lt;BR/&gt; 1164: (3.06122%)&lt;BR/&gt; 1163: (3.06122%)&gt;];
}
3301--5599[label="1;16pkt 16fpkt"];
3301--7098[label="1;16pkt 16fpkt"];
5599--7098[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="199.186.78.52" dst_port="80" src_ip="140.3.211.7"/>
      <filter dst_ip="201.165.82.128" dst_port="80" src_ip="140.3.211.7"/>
    </slice>
    <from sec="1039669393" usec="0"/>
    <to sec="1039669847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1120{
style=filled;
color=gray75;
783[label="208.180.69.8;s;8pkt 8fpkt", shape=diamond, color=yellow];
stat1120[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.180.69.8:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
783--809[label="0.5;1pkt 1fpkt"];
783--2502[label="0.5;1pkt 1fpkt"];
783--3307[label="1;8pkt 8fpkt"];
783--5602[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter src_ip="208.180.69.8"/>
    </slice>
    <from sec="1039669217" usec="0"/>
    <to sec="1039669305" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1121{
style=filled;
color=gray75;
3309[label="174.235.77.8;79pkt 79fpkt", shape=pentagon, color=darkviolet];
5604[label="174.235.77.8;80pkt 80fpkt", shape=invtriangle, color=brown];
stat1121[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.235.77.8:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3309--5604[label="1;79pkt 79fpkt"];
</description>
    <slice>
      <filter src_ip="174.235.77.8"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1122{
style=filled;
color=gray75;
3315[label="36.161.195.8;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5608[label="36.161.195.8;7pkt 7fpkt", shape=invtriangle, color=brown];
stat1122[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.161.195.8:80, 215.87.67.219:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 22818: (7.14286%)&lt;BR/&gt; 22778: (7.14286%)&lt;BR/&gt; 22675: (7.14286%)&lt;BR/&gt; 22366: (7.14286%)&gt;];
}
3315--5608[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="215.87.67.219" src_ip="36.161.195.8" src_port="80"/>
    </slice>
    <from sec="1039669419" usec="0"/>
    <to sec="1039669575" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1123{
style=filled;
color=gray75;
3325[label="215.90.154.9;27pkt 27fpkt", shape=pentagon, color=darkviolet];
5613[label="215.90.154.9;27pkt 27fpkt", shape=invtriangle, color=brown];
7106[label="215.90.154.9;27pkt 27fpkt", shape=invhouse, color=bisque];
stat1123[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.90.154.9:*, 211.189.190.11:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2049: (1.85185%)&lt;BR/&gt; 2048: (1.85185%)&lt;BR/&gt; 2047: (1.85185%)&lt;BR/&gt; 2046: (1.85185%)&gt;];
}
3325--5613[label="1;27pkt 27fpkt"];
3325--7106[label="1;27pkt 27fpkt"];
5613--7106[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="211.189.190.11" dst_port="80" src_ip="215.90.154.9"/>
    </slice>
    <from sec="1039669792" usec="0"/>
    <to sec="1039669798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1124{
style=filled;
color=gray75;
3326[label="211.90.158.9;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5614[label="211.90.158.9;1pkt 1fpkt", shape=invtriangle, color=brown];
7107[label="211.90.158.9;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1124[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.90.158.9:1863, 214.231.146.145:2321}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2321: (50%)&lt;BR/&gt; 1863: (50%)&gt;];
}
3326--5614[label="1;1pkt 1fpkt"];
3326--7107[label="1;1pkt 1fpkt"];
5614--7107[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.231.146.145" dst_port="2321" src_ip="211.90.158.9" src_port="1863"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1125{
style=filled;
color=gray75;
3327[label="138.177.186.9;43pkt 43fpkt", shape=pentagon, color=darkviolet];
5615[label="138.177.186.9;43pkt 43fpkt", shape=invtriangle, color=brown];
stat1125[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.177.186.9:22912, *:*}[27.907%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22912: (13.9535%)&lt;BR/&gt; 7498: (6.97674%)&lt;BR/&gt; 56927: (4.65116%)&lt;BR/&gt; 5757: (4.65116%)&lt;BR/&gt; 27341: (3.48837%)&gt;];
}
3327--5615[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter src_ip="138.177.186.9" src_port="22912"/>
    </slice>
    <from sec="1039669225" usec="0"/>
    <to sec="1039669927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645838,1.80177,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1126{
style=filled;
color=gray75;
765[label="140.3.210.9;s;40pkt 40fpkt", shape=diamond, color=yellow];
3328[label="140.3.210.9;59pkt 59fpkt", shape=pentagon, color=darkviolet];
5616[label="140.3.210.9;59pkt 59fpkt", shape=invtriangle, color=brown];
stat1126[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.210.9:*, 201.160.98.234:80}[61.0169%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.2025%)&lt;BR/&gt; 443: (3.79747%)&lt;BR/&gt; 1114: (0.949367%)&lt;BR/&gt; 1113: (0.949367%)&lt;BR/&gt; 1112: (0.949367%)&gt;];
}
765--1125[label="0.153846;2pkt 2fpkt"];
765--1568[label="0.05;2pkt 2fpkt"];
765--1659[label="0.15;6pkt 6fpkt"];
765--1918[label="0.05;2pkt 2fpkt"];
765--2065[label="0.025;1pkt 1fpkt"];
765--2622[label="0.153846;2pkt 2fpkt"];
765--2793[label="0.05;2pkt 2fpkt"];
765--2958[label="0.05;2pkt 2fpkt"];
765--3328[label="1;40pkt 40fpkt"];
765--5616[label="1;40pkt 40fpkt"];
3328--5616[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter dst_ip="201.160.98.234" dst_port="80" src_ip="140.3.210.9"/>
    </slice>
    <from sec="1039669203" usec="0"/>
    <to sec="1039669545" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.179.213.9"/>
    </slice>
    <from sec="1039669280" usec="0"/>
    <to sec="1039669318" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1128{
style=filled;
color=gray75;
3330[label="200.129.217.9;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5618[label="200.129.217.9;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1128[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.129.217.9:6699, 215.90.75.25:1388}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1388: (50%)&gt;];
}
3330--5618[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.75.25" dst_port="1388" src_ip="200.129.217.9" src_port="6699"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1129{
style=filled;
color=gray75;
3331[label="215.216.4.10;164pkt 164fpkt", shape=pentagon, color=darkviolet];
5619[label="215.216.4.10;165pkt 165fpkt", shape=invtriangle, color=brown];
7109[label="215.216.4.10;165pkt 165fpkt", shape=invhouse, color=bisque];
stat1129[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.216.4.10:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3331--5619[label="1;164pkt 164fpkt"];
3331--7109[label="1;164pkt 164fpkt"];
5619--7109[label="1;165pkt 165fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.216.4.10" src_port="1025"/>
    </slice>
    <from sec="1039669390" usec="0"/>
    <to sec="1039669417" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1130{
style=filled;
color=gray75;
872[label="170.73.162.96;d;195pkt 195fpkt", shape=diamond, color=yellow];
3339[label="140.3.136.10;93pkt 93fpkt", shape=pentagon, color=darkviolet];
4855[label="140.3.16.169;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5622[label="140.3.136.10;94pkt 94fpkt", shape=invtriangle, color=brown];
6611[label="140.3.16.169;1pkt 1fpkt", shape=invtriangle, color=brown];
7110[label="140.3.136.10;93pkt 93fpkt", shape=invhouse, color=bisque];
7730[label="140.3.16.169;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1130[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.208.204:*, 170.73.162.96:80}[65.614%]&lt;BR/&gt;{140.3.136.10:*, *:*}[32.9825%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.0753%)&lt;BR/&gt; 6346: (10.0418%)&lt;BR/&gt; 1863: (1.88285%)&lt;BR/&gt; 1310: (0.523013%)&lt;BR/&gt; 39982: (0.41841%)&gt;];
}
872--3185[label="0.0102564;2pkt 2fpkt"];
872--3339[label="0.0430108;4pkt 4fpkt"];
872--4855[label="1;1pkt 1fpkt"];
872--5622[label="0.0425532;4pkt 4fpkt"];
872--6611[label="1;1pkt 1fpkt"];
872--7110[label="0.0430108;4pkt 4fpkt"];
872--7730[label="1;1pkt 1fpkt"];
3339--5622[label="1;93pkt 93fpkt"];
3339--7110[label="1;93pkt 93fpkt"];
4855--6611[label="1;1pkt 1fpkt"];
4855--7730[label="1;1pkt 1fpkt"];
5622--7110[label="1;93pkt 93fpkt"];
6611--7730[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="140.3.136.10"/>
      <filter dst_ip="170.73.162.96" dst_port="80" src_ip="140.3.208.204"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1131{
style=filled;
color=gray75;
3340[label="169.126.149.10;21pkt 21fpkt", shape=pentagon, color=darkviolet];
5623[label="169.126.149.10;21pkt 21fpkt", shape=invtriangle, color=brown];
stat1131[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.126.149.10:80, 215.17.7.66:*}[52.381%]&lt;BR/&gt;{169.126.149.10:53, 215.17.122.190:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (26.1905%)&lt;BR/&gt; 53: (23.8095%)&lt;BR/&gt; 61448: (2.38095%)&lt;BR/&gt; 44429: (2.38095%)&lt;BR/&gt; 42835: (2.38095%)&gt;];
}
3340--5623[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="215.17.7.66" src_ip="169.126.149.10" src_port="80"/>
      <filter dst_ip="215.17.122.190" src_ip="169.126.149.10" src_port="53"/>
    </slice>
    <from sec="1039669700" usec="0"/>
    <to sec="1039669924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1132{
style=filled;
color=gray75;
3344[label="140.3.210.10;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5624[label="140.3.210.10;5pkt 5fpkt", shape=invtriangle, color=brown];
7111[label="140.3.210.10;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1132[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.210.10:1579, 38.195.208.34:80}[20%]&lt;BR/&gt;{140.3.210.10:1580, 38.195.208.34:80}[20%]&lt;BR/&gt;{140.3.210.10:1575, 38.17.40.133:80}[20%]&lt;BR/&gt;{140.3.210.10:1576, 38.17.40.133:80}[20%]&lt;BR/&gt;{140.3.210.10:1577, 38.17.40.133:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1580: (11.5385%)&lt;BR/&gt; 1579: (11.5385%)&lt;BR/&gt; 1577: (11.5385%)&lt;BR/&gt; 1575: (11.5385%)&gt;];
}
3344--5624[label="1;4pkt 4fpkt"];
3344--7111[label="1;4pkt 4fpkt"];
5624--7111[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="38.17.40.133" dst_port="80" src_ip="140.3.210.10" src_port="1577"/>
      <filter dst_ip="38.17.40.133" dst_port="80" src_ip="140.3.210.10" src_port="1576"/>
      <filter dst_ip="38.17.40.133" dst_port="80" src_ip="140.3.210.10" src_port="1575"/>
      <filter dst_ip="38.195.208.34" dst_port="80" src_ip="140.3.210.10" src_port="1580"/>
      <filter dst_ip="38.195.208.34" dst_port="80" src_ip="140.3.210.10" src_port="1579"/>
    </slice>
    <from sec="1039669308" usec="0"/>
    <to sec="1039669338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1133{
style=filled;
color=gray75;
3346[label="96.104.233.10;189pkt 189fpkt", shape=pentagon, color=darkviolet];
5626[label="96.104.233.10;190pkt 190fpkt", shape=invtriangle, color=brown];
7113[label="96.104.233.10;189pkt 189fpkt", shape=invhouse, color=bisque];
stat1133[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.104.233.10:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3346--5626[label="1;189pkt 189fpkt"];
3346--7113[label="1;189pkt 189fpkt"];
5626--7113[label="1;189pkt 189fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.104.233.10" src_port="1028"/>
    </slice>
    <from sec="1039669555" usec="0"/>
    <to sec="1039669586" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1134{
style=filled;
color=gray75;
3350[label="215.35.155.11;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5628[label="215.35.155.11;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1134[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.35.155.11:80, 215.87.67.219:23980}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23980: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3350--5628[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.87.67.219" dst_port="23980" src_ip="215.35.155.11" src_port="80"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1135{
style=filled;
color=gray75;
3353[label="196.81.163.11;136pkt 136fpkt", shape=pentagon, color=darkviolet];
5630[label="196.81.163.11;136pkt 136fpkt", shape=invtriangle, color=brown];
stat1135[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.81.163.11:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3353--5630[label="1;136pkt 136fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.81.163.11" src_port="1028"/>
    </slice>
    <from sec="1039669890" usec="0"/>
    <to sec="1039669916" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645838,1.80177,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1136{
style=filled;
color=gray75;
759[label="208.166.235.11;s;5pkt 5fpkt", shape=diamond, color=yellow];
1105[label="140.3.211.5;d;5pkt 5fpkt", shape=diamond, color=yellow];
3355[label="208.166.235.11;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5632[label="208.166.235.11;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1136[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.166.235.11:80, 140.3.211.5:*}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.875%)&lt;BR/&gt; 3025: (12.5%)&lt;BR/&gt; 3024: (12.5%)&lt;BR/&gt; 3007: (12.5%)&lt;BR/&gt; 3006: (6.25%)&gt;];
}
759--1105[label="0.8;4pkt 4fpkt"];
759--3355[label="1;3pkt 3fpkt"];
759--5632[label="1;3pkt 3fpkt"];
1105--3355[label="1;3pkt 3fpkt"];
1105--5632[label="1;3pkt 3fpkt"];
3355--5632[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.211.5" src_ip="208.166.235.11" src_port="80"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1137{
style=filled;
color=gray75;
3360[label="96.26.147.12;129pkt 129fpkt", shape=pentagon, color=darkviolet];
5633[label="96.26.147.12;129pkt 129fpkt", shape=invtriangle, color=brown];
7115[label="96.26.147.12;130pkt 130fpkt", shape=invhouse, color=bisque];
stat1137[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.26.147.12:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3360--5633[label="1;129pkt 129fpkt"];
3360--7115[label="1;129pkt 129fpkt"];
5633--7115[label="1;129pkt 129fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.26.147.12" src_port="1029"/>
    </slice>
    <from sec="1039669731" usec="0"/>
    <to sec="1039669752" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1138{
style=filled;
color=gray75;
3369[label="96.194.77.13;181pkt 181fpkt", shape=pentagon, color=darkviolet];
5641[label="96.194.77.13;181pkt 181fpkt", shape=invtriangle, color=brown];
7120[label="96.194.77.13;181pkt 181fpkt", shape=invhouse, color=bisque];
stat1138[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.194.77.13:30513, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 30513: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3369--5641[label="1;181pkt 181fpkt"];
3369--7120[label="1;181pkt 181fpkt"];
5641--7120[label="1;181pkt 181fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.194.77.13" src_port="30513"/>
    </slice>
    <from sec="1039669384" usec="0"/>
    <to sec="1039669423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1139{
style=filled;
color=gray75;
571[label="215.90.72.24;d;433pkt 433fpkt", shape=diamond, color=yellow];
2754[label="215.90.72.24;d;366pkt 366fpkt", shape=hexagon, color=black];
3371[label="215.214.133.13;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3431[label="215.214.133.18;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3837[label="215.219.101.58;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5642[label="215.214.133.13;9pkt 9fpkt", shape=invtriangle, color=brown];
5679[label="215.214.133.18;4pkt 4fpkt", shape=invtriangle, color=brown];
5940[label="215.219.101.58;9pkt 9fpkt", shape=invtriangle, color=brown];
7121[label="215.214.133.13;10pkt 10fpkt", shape=invhouse, color=bisque];
7141[label="215.214.133.18;5pkt 5fpkt", shape=invhouse, color=bisque];
7306[label="215.219.101.58;10pkt 10fpkt", shape=invhouse, color=bisque];
7898[label="215.218.41.217;100pkt 100fpkt", shape=invhouse, color=bisque];
stat1139[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.68.77.251:80, 215.90.72.24:*}[36.8539%]&lt;BR/&gt;{215.218.41.217:80, 215.90.72.24:*}[22.2472%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3814%)&lt;BR/&gt; 554: (0.515464%)&lt;BR/&gt; 2701: (0.257732%)&lt;BR/&gt; 2695: (0.257732%)&lt;BR/&gt; 2656: (0.257732%)&gt;];
}
571--1170[label="0.833333;5pkt 5fpkt"];
571--1720[label="1;164pkt 164fpkt"];
571--2726[label="1;123pkt 123fpkt"];
571--2754[label="1;366pkt 366fpkt"];
571--3371[label="0.555556;5pkt 5fpkt"];
571--3431[label="1;5pkt 5fpkt"];
571--3837[label="0.7;7pkt 7fpkt"];
571--4924[label="0.891892;66pkt 66fpkt"];
571--5241[label="0.950495;96pkt 96fpkt"];
571--5495[label="1;163pkt 163fpkt"];
571--5642[label="0.555556;5pkt 5fpkt"];
571--5679[label="1;4pkt 4fpkt"];
571--5940[label="0.777778;7pkt 7fpkt"];
571--6657[label="0.891892;66pkt 66fpkt"];
571--6860[label="0.950495;96pkt 96fpkt"];
571--7032[label="1;164pkt 164fpkt"];
571--7121[label="0.5;5pkt 5fpkt"];
571--7141[label="1;5pkt 5fpkt"];
571--7306[label="0.7;7pkt 7fpkt"];
571--7898[label="0.96;96pkt 96fpkt"];
571--8004[label="1;163pkt 163fpkt"];
2754--3371[label="0.444444;4pkt 4fpkt"];
2754--3431[label="0.8;4pkt 4fpkt"];
2754--3837[label="0.7;7pkt 7fpkt"];
2754--4924[label="0.891892;66pkt 66fpkt"];
2754--5241[label="0.742574;75pkt 75fpkt"];
2754--5495[label="0.865031;141pkt 141fpkt"];
2754--5642[label="0.444444;4pkt 4fpkt"];
2754--5679[label="0.75;3pkt 3fpkt"];
2754--5940[label="0.777778;7pkt 7fpkt"];
2754--6657[label="0.891892;66pkt 66fpkt"];
2754--6860[label="0.742574;75pkt 75fpkt"];
2754--7032[label="0.865854;142pkt 142fpkt"];
2754--7121[label="0.4;4pkt 4fpkt"];
2754--7141[label="0.8;4pkt 4fpkt"];
2754--7306[label="0.7;7pkt 7fpkt"];
2754--7898[label="0.75;75pkt 75fpkt"];
2754--8004[label="0.865031;141pkt 141fpkt"];
3371--5642[label="1;9pkt 9fpkt"];
3371--7121[label="1;9pkt 9fpkt"];
3431--5679[label="1;4pkt 4fpkt"];
3431--7141[label="1;5pkt 5fpkt"];
3837--5940[label="1;9pkt 9fpkt"];
3837--7306[label="1;10pkt 10fpkt"];
5642--7121[label="1;9pkt 9fpkt"];
5679--7141[label="1;4pkt 4fpkt"];
5940--7306[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.72.24" src_ip="202.68.77.251" src_port="80"/>
      <filter dst_ip="215.90.72.24" src_ip="215.218.41.217" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669782" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1140{
style=filled;
color=gray75;
3373[label="211.90.158.13;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5644[label="211.90.158.13;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1140[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.90.158.13:1863, 138.186.51.5:1202}[50%]&lt;BR/&gt;{211.90.158.13:1863, 140.3.110.136:64524}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 64524: (25%)&lt;BR/&gt; 1202: (25%)&gt;];
}
3373--5644[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.110.136" dst_port="64524" src_ip="211.90.158.13" src_port="1863"/>
      <filter dst_ip="138.186.51.5" dst_port="1202" src_ip="211.90.158.13" src_port="1863"/>
    </slice>
    <from sec="1039669205" usec="0"/>
    <to sec="1039669926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1141{
style=filled;
color=gray75;
3376[label="96.180.0.14;193pkt 193fpkt", shape=pentagon, color=darkviolet];
5645[label="96.180.0.14;194pkt 194fpkt", shape=invtriangle, color=brown];
stat1141[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.180.0.14:1050, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1050: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3376--5645[label="1;193pkt 193fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.180.0.14" src_port="1050"/>
    </slice>
    <from sec="1039669798" usec="0"/>
    <to sec="1039669828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="96.66.76.14"/>
    </slice>
    <from sec="1039669667" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.12.112.14"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1144{
style=filled;
color=gray75;
3395[label="197.237.37.15;241pkt 241fpkt", shape=pentagon, color=darkviolet];
5656[label="197.237.37.15;240pkt 240fpkt", shape=invtriangle, color=brown];
stat1144[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.237.37.15:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3395--5656[label="1;240pkt 240fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.237.37.15" src_port="1025"/>
    </slice>
    <from sec="1039669262" usec="0"/>
    <to sec="1039669315" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1145{
style=filled;
color=gray75;
3399[label="39.6.205.15;123pkt 123fpkt", shape=pentagon, color=darkviolet];
5657[label="39.6.205.15;123pkt 123fpkt", shape=invtriangle, color=brown];
7127[label="39.6.205.15;124pkt 124fpkt", shape=invhouse, color=bisque];
stat1145[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.6.205.15:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3399--5657[label="1;123pkt 123fpkt"];
3399--7127[label="1;123pkt 123fpkt"];
5657--7127[label="1;123pkt 123fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="39.6.205.15" src_port="1030"/>
    </slice>
    <from sec="1039669774" usec="0"/>
    <to sec="1039669793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1146{
style=filled;
color=gray75;
3400[label="36.208.240.15;128pkt 128fpkt", shape=pentagon, color=darkviolet];
5658[label="36.208.240.15;128pkt 128fpkt", shape=invtriangle, color=brown];
7128[label="36.208.240.15;128pkt 128fpkt", shape=invhouse, color=bisque];
stat1146[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.208.240.15:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3400--5658[label="1;128pkt 128fpkt"];
3400--7128[label="1;128pkt 128fpkt"];
5658--7128[label="1;128pkt 128fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="36.208.240.15" src_port="1028"/>
    </slice>
    <from sec="1039669686" usec="0"/>
    <to sec="1039669706" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1147{
style=filled;
color=gray75;
881[label="211.90.23.0;d;154pkt 154fpkt", shape=diamond, color=yellow];
1383[label="215.90.68.67;s;76pkt 76fpkt", shape=diamond, color=yellow];
1424[label="39.111.170.163;d;47pkt 47fpkt", shape=diamond, color=yellow];
2618[label="215.90.68.67;s;45pkt 45fpkt", shape=hexagon, color=black];
2756[label="211.90.23.0;d;133pkt 133fpkt", shape=hexagon, color=black];
3378[label="148.110.48.14;16pkt 16fpkt", shape=pentagon, color=darkviolet];
3402[label="140.3.6.16;21pkt 21fpkt", shape=pentagon, color=darkviolet];
3405[label="138.186.51.16;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3866[label="138.186.51.61;28pkt 28fpkt", shape=pentagon, color=darkviolet];
3905[label="138.186.181.65;37pkt 37fpkt", shape=pentagon, color=darkviolet];
4122[label="148.110.12.86;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4554[label="140.3.229.135;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5125[label="138.186.55.202;20pkt 20fpkt", shape=pentagon, color=darkviolet];
5158[label="148.110.137.206;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5334[label="215.90.87.229;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5357[label="215.90.84.232;20pkt 20fpkt", shape=pentagon, color=darkviolet];
5647[label="148.110.48.14;16pkt 16fpkt", shape=invtriangle, color=brown];
5660[label="140.3.6.16;21pkt 21fpkt", shape=invtriangle, color=brown];
5661[label="138.186.51.16;6pkt 6fpkt", shape=invtriangle, color=brown];
5957[label="138.186.51.61;27pkt 27fpkt", shape=invtriangle, color=brown];
5983[label="138.186.181.65;37pkt 37fpkt", shape=invtriangle, color=brown];
6414[label="140.3.229.135;10pkt 10fpkt", shape=invtriangle, color=brown];
6780[label="138.186.55.202;19pkt 19fpkt", shape=invtriangle, color=brown];
6803[label="148.110.137.206;19pkt 19fpkt", shape=invtriangle, color=brown];
7130[label="140.3.6.16;21pkt 21fpkt", shape=invhouse, color=bisque];
7131[label="138.186.51.16;7pkt 7fpkt", shape=invhouse, color=bisque];
7346[label="215.90.68.67;76pkt 76fpkt", shape=invhouse, color=bisque];
7839[label="138.186.55.202;19pkt 19fpkt", shape=invhouse, color=bisque];
7857[label="148.110.137.206;18pkt 18fpkt", shape=invhouse, color=bisque];
stat1147[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 211.90.23.0:80}[40.3141%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.8333%)&lt;BR/&gt; 443: (2.4789%)&lt;BR/&gt; 1036: (0.896624%)&lt;BR/&gt; 1214: (0.791139%)&lt;BR/&gt; 1034: (0.791139%)&gt;];
}
881--1136[label="0.031746;2pkt 2fpkt"];
881--1383[label="0.0657895;5pkt 5fpkt"];
881--2504[label="0.00649351;1pkt 1fpkt"];
881--2618[label="0.111111;5pkt 5fpkt"];
881--2756[label="1;133pkt 133fpkt"];
881--2881[label="0.012987;2pkt 2fpkt"];
881--3132[label="0.00649351;1pkt 1fpkt"];
881--3180[label="0.00649351;1pkt 1fpkt"];
881--3185[label="0.0649351;10pkt 10fpkt"];
881--3188[label="0.00649351;1pkt 1fpkt"];
881--3306[label="0.0434783;1pkt 1fpkt"];
881--3378[label="0.1875;3pkt 3fpkt"];
881--3402[label="1;21pkt 21fpkt"];
881--3405[label="0.333333;2pkt 2fpkt"];
881--3866[label="0.142857;4pkt 4fpkt"];
881--3905[label="0.027027;1pkt 1fpkt"];
881--3926[label="0.0666667;5pkt 5fpkt"];
881--4122[label="0.0714286;1pkt 1fpkt"];
881--4199[label="0.031746;2pkt 2fpkt"];
881--4500[label="0.0888889;4pkt 4fpkt"];
881--4554[label="0.5;5pkt 5fpkt"];
881--4616[label="0.0655738;4pkt 4fpkt"];
881--4706[label="0.0454545;7pkt 7fpkt"];
881--4978[label="0.307692;8pkt 8fpkt"];
881--5125[label="0.2;4pkt 4fpkt"];
881--5158[label="0.111111;2pkt 2fpkt"];
881--5334[label="0.285714;2pkt 2fpkt"];
881--5357[label="0.2;4pkt 4fpkt"];
881--5647[label="0.1875;3pkt 3fpkt"];
881--5660[label="1;21pkt 21fpkt"];
881--5661[label="0.333333;2pkt 2fpkt"];
881--5957[label="0.148148;4pkt 4fpkt"];
881--5983[label="0.027027;1pkt 1fpkt"];
881--6001[label="0.0666667;5pkt 5fpkt"];
881--6373[label="0.0869565;4pkt 4fpkt"];
881--6414[label="0.5;5pkt 5fpkt"];
881--6450[label="0.0655738;4pkt 4fpkt"];
881--6780[label="0.210526;4pkt 4fpkt"];
881--6803[label="0.105263;2pkt 2fpkt"];
881--7130[label="1;21pkt 21fpkt"];
881--7131[label="0.285714;2pkt 2fpkt"];
881--7346[label="0.0657895;5pkt 5fpkt"];
881--7576[label="0.0888889;4pkt 4fpkt"];
881--7626[label="0.0666667;4pkt 4fpkt"];
881--7839[label="0.210526;4pkt 4fpkt"];
881--7857[label="0.111111;2pkt 2fpkt"];
1383--1568[label="0.0921053;7pkt 7fpkt"];
1383--1620[label="0.0131579;1pkt 1fpkt"];
1383--1676[label="0.552632;42pkt 42fpkt"];
1383--1918[label="0.0921053;7pkt 7fpkt"];
1383--2053[label="0.0131579;1pkt 1fpkt"];
1383--2615[label="0.2;6pkt 6fpkt"];
1383--2618[label="1;45pkt 45fpkt"];
1383--2756[label="0.0657895;5pkt 5fpkt"];
1383--2793[label="0.0657895;5pkt 5fpkt"];
1383--2825[label="0.539474;41pkt 41fpkt"];
1383--2958[label="0.0921053;7pkt 7fpkt"];
1383--3185[label="0.0394737;3pkt 3fpkt"];
1383--3926[label="1;75pkt 75fpkt"];
1383--6001[label="1;75pkt 75fpkt"];
1383--7346[label="1;76pkt 76fpkt"];
1424--3378[label="0.1875;3pkt 3fpkt"];
1424--3405[label="0.5;3pkt 3fpkt"];
1424--3905[label="0.459459;17pkt 17fpkt"];
1424--5158[label="0.166667;3pkt 3fpkt"];
1424--5357[label="0.7;14pkt 14fpkt"];
1424--5449[label="0.230769;3pkt 3fpkt"];
1424--5647[label="0.1875;3pkt 3fpkt"];
1424--5661[label="0.5;3pkt 3fpkt"];
1424--5983[label="0.459459;17pkt 17fpkt"];
1424--6803[label="0.157895;3pkt 3fpkt"];
1424--6999[label="0.214286;3pkt 3fpkt"];
1424--7131[label="0.428571;3pkt 3fpkt"];
1424--7857[label="0.166667;3pkt 3fpkt"];
2618--2756[label="0.111111;5pkt 5fpkt"];
2618--2793[label="0.0888889;4pkt 4fpkt"];
2618--2825[label="0.488889;22pkt 22fpkt"];
2618--2958[label="0.111111;5pkt 5fpkt"];
2618--3926[label="0.977778;44pkt 44fpkt"];
2618--6001[label="0.977778;44pkt 44fpkt"];
2618--7346[label="1;45pkt 45fpkt"];
2756--3132[label="0.0075188;1pkt 1fpkt"];
2756--3180[label="0.0075188;1pkt 1fpkt"];
2756--3188[label="0.0075188;1pkt 1fpkt"];
2756--3306[label="0.0434783;1pkt 1fpkt"];
2756--3378[label="0.1875;3pkt 3fpkt"];
2756--3402[label="1;21pkt 21fpkt"];
2756--3405[label="0.333333;2pkt 2fpkt"];
2756--3866[label="0.142857;4pkt 4fpkt"];
2756--3905[label="0.027027;1pkt 1fpkt"];
2756--3926[label="0.0666667;5pkt 5fpkt"];
2756--4122[label="0.0714286;1pkt 1fpkt"];
2756--4199[label="0.031746;2pkt 2fpkt"];
2756--4554[label="0.5;5pkt 5fpkt"];
2756--4616[label="0.0655738;4pkt 4fpkt"];
2756--4706[label="0.0526316;7pkt 7fpkt"];
2756--4978[label="0.307692;8pkt 8fpkt"];
2756--5125[label="0.2;4pkt 4fpkt"];
2756--5158[label="0.111111;2pkt 2fpkt"];
2756--5334[label="0.285714;2pkt 2fpkt"];
2756--5357[label="0.15;3pkt 3fpkt"];
2756--5647[label="0.1875;3pkt 3fpkt"];
2756--5660[label="1;21pkt 21fpkt"];
2756--5661[label="0.333333;2pkt 2fpkt"];
2756--5957[label="0.148148;4pkt 4fpkt"];
2756--5983[label="0.027027;1pkt 1fpkt"];
2756--6001[label="0.0666667;5pkt 5fpkt"];
2756--6414[label="0.5;5pkt 5fpkt"];
2756--6450[label="0.0655738;4pkt 4fpkt"];
2756--6780[label="0.210526;4pkt 4fpkt"];
2756--6803[label="0.105263;2pkt 2fpkt"];
2756--7130[label="1;21pkt 21fpkt"];
2756--7131[label="0.285714;2pkt 2fpkt"];
2756--7346[label="0.0657895;5pkt 5fpkt"];
2756--7626[label="0.0666667;4pkt 4fpkt"];
2756--7839[label="0.210526;4pkt 4fpkt"];
2756--7857[label="0.111111;2pkt 2fpkt"];
3378--5647[label="1;16pkt 16fpkt"];
3402--5660[label="1;21pkt 21fpkt"];
3402--7130[label="1;21pkt 21fpkt"];
3405--5661[label="1;6pkt 6fpkt"];
3405--7131[label="1;6pkt 6fpkt"];
3866--5957[label="1;27pkt 27fpkt"];
3905--5983[label="1;37pkt 37fpkt"];
4554--6414[label="1;10pkt 10fpkt"];
5125--6780[label="1;19pkt 19fpkt"];
5125--7839[label="1;19pkt 19fpkt"];
5158--6803[label="1;18pkt 18fpkt"];
5158--7857[label="1;18pkt 18fpkt"];
5660--7130[label="1;21pkt 21fpkt"];
5661--7131[label="1;6pkt 6fpkt"];
6780--7839[label="1;19pkt 19fpkt"];
6803--7857[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="211.90.23.0" dst_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1148{
style=filled;
color=gray75;
3406[label="96.4.92.16;180pkt 180fpkt", shape=pentagon, color=darkviolet];
5662[label="96.4.92.16;179pkt 179fpkt", shape=invtriangle, color=brown];
7132[label="96.4.92.16;180pkt 180fpkt", shape=invhouse, color=bisque];
stat1148[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.4.92.16:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 63989: (0.278293%)&lt;BR/&gt; 63977: (0.278293%)&lt;BR/&gt; 63966: (0.278293%)&lt;BR/&gt; 63959: (0.278293%)&gt;];
}
3406--5662[label="1;179pkt 179fpkt"];
3406--7132[label="1;180pkt 180fpkt"];
5662--7132[label="1;179pkt 179fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.4.92.16"/>
    </slice>
    <from sec="1039669766" usec="0"/>
    <to sec="1039669799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1149{
style=filled;
color=gray75;
3408[label="169.126.148.16;11pkt 11fpkt", shape=pentagon, color=darkviolet];
5663[label="169.126.148.16;11pkt 11fpkt", shape=invtriangle, color=brown];
stat1149[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.126.148.16:80, 215.21.85.89:*}[54.5455%]&lt;BR/&gt;{169.126.148.16:25, *:*}[45.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.2727%)&lt;BR/&gt; 25: (22.7273%)&lt;BR/&gt; 64767: (4.54545%)&lt;BR/&gt; 64762: (4.54545%)&lt;BR/&gt; 64736: (4.54545%)&gt;];
}
3408--5663[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter src_ip="169.126.148.16" src_port="25"/>
      <filter dst_ip="215.21.85.89" src_ip="169.126.148.16" src_port="80"/>
    </slice>
    <from sec="1039669261" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.90.158.16"/>
    </slice>
    <from sec="1039669223" usec="0"/>
    <to sec="1039669926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1151{
style=filled;
color=gray75;
3414[label="140.3.244.16;33pkt 33fpkt", shape=pentagon, color=darkviolet];
5667[label="140.3.244.16;32pkt 32fpkt", shape=invtriangle, color=brown];
stat1151[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.244.16:*, 198.98.45.176:80}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3883: (1.53846%)&lt;BR/&gt; 3880: (1.53846%)&lt;BR/&gt; 3879: (1.53846%)&lt;BR/&gt; 3877: (1.53846%)&gt;];
}
3414--5667[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="198.98.45.176" dst_port="80" src_ip="140.3.244.16"/>
    </slice>
    <from sec="1039669875" usec="0"/>
    <to sec="1039669916" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1152{
style=filled;
color=gray75;
3416[label="202.154.3.17;159pkt 159fpkt", shape=pentagon, color=darkviolet];
5668[label="202.154.3.17;158pkt 158fpkt", shape=invtriangle, color=brown];
7135[label="202.154.3.17;159pkt 159fpkt", shape=invhouse, color=bisque];
stat1152[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.154.3.17:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3416--5668[label="1;158pkt 158fpkt"];
3416--7135[label="1;159pkt 159fpkt"];
5668--7135[label="1;158pkt 158fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.154.3.17" src_port="1025"/>
    </slice>
    <from sec="1039669283" usec="0"/>
    <to sec="1039669326" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1153{
style=filled;
color=gray75;
3419[label="138.49.92.17;17pkt 17fpkt", shape=pentagon, color=darkviolet];
5670[label="138.49.92.17;17pkt 17fpkt", shape=invtriangle, color=brown];
stat1153[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.49.92.17:*, *:25}[82.3529%]&lt;BR/&gt;{138.49.92.17:*, 39.33.22.65:*}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (44.1176%)&lt;BR/&gt; 113: (5.88235%)&lt;BR/&gt; 63638: (2.94118%)&lt;BR/&gt; 63629: (2.94118%)&lt;BR/&gt; 63613: (2.94118%)&gt;];
}
3419--5670[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="39.33.22.65" src_ip="138.49.92.17"/>
      <filter dst_port="25" src_ip="138.49.92.17"/>
    </slice>
    <from sec="1039669304" usec="0"/>
    <to sec="1039669925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1154{
style=filled;
color=gray75;
98[label="196.107.8.18s;46pkt 46fpkt", shape=rectangle, color=red];
3426[label="196.107.8.18;241pkt 241fpkt", shape=pentagon, color=darkviolet];
5676[label="196.107.8.18;241pkt 241fpkt", shape=invtriangle, color=brown];
7139[label="196.107.8.18;240pkt 240fpkt", shape=invhouse, color=bisque];
stat1154[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.107.8.18:1124, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1124: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
98--3426[label="1;46pkt 46fpkt"];
98--5676[label="1;46pkt 46fpkt"];
98--7139[label="1;46pkt 46fpkt"];
3426--5676[label="1;241pkt 241fpkt"];
3426--7139[label="1;240pkt 240fpkt"];
5676--7139[label="1;240pkt 240fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.107.8.18" src_port="1124"/>
    </slice>
    <from sec="1039669441" usec="0"/>
    <to sec="1039669479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1155{
style=filled;
color=gray75;
3427[label="215.90.74.18;46pkt 46fpkt", shape=pentagon, color=darkviolet];
5677[label="215.90.74.18;46pkt 46fpkt", shape=invtriangle, color=brown];
stat1155[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.90.74.18:*, *:8888}[52.1739%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (26.087%)&lt;BR/&gt; 8899: (7.6087%)&lt;BR/&gt; 7777: (4.34783%)&lt;BR/&gt; 6666: (4.34783%)&lt;BR/&gt; 8000: (3.26087%)&gt;];
}
3427--5677[label="1;46pkt 46fpkt"];
</description>
    <slice>
      <filter dst_port="8888" src_ip="215.90.74.18"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1156{
style=filled;
color=gray75;
3432[label="96.197.182.18;143pkt 143fpkt", shape=pentagon, color=darkviolet];
5680[label="96.197.182.18;142pkt 142fpkt", shape=invtriangle, color=brown];
7142[label="96.197.182.18;143pkt 143fpkt", shape=invhouse, color=bisque];
stat1156[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.197.182.18:62809, *:137}[63.6364%]&lt;BR/&gt;{96.197.182.18:62801, *:137}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 62809: (31.7757%)&lt;BR/&gt; 62801: (18.2243%)&gt;];
}
3432--5680[label="1;142pkt 142fpkt"];
3432--7142[label="1;143pkt 143fpkt"];
5680--7142[label="1;142pkt 142fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.197.182.18" src_port="62809"/>
      <filter dst_port="137" src_ip="96.197.182.18" src_port="62801"/>
    </slice>
    <from sec="1039669255" usec="0"/>
    <to sec="1039669288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="98.210.193.19"/>
    </slice>
    <from sec="1039669205" usec="0"/>
    <to sec="1039669926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1159{
style=filled;
color=gray75;
3461[label="197.70.55.20;105pkt 105fpkt", shape=pentagon, color=darkviolet];
5700[label="197.70.55.20;104pkt 104fpkt", shape=invtriangle, color=brown];
7154[label="197.70.55.20;104pkt 104fpkt", shape=invhouse, color=bisque];
stat1159[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.70.55.20:61050, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61050: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3461--5700[label="1;104pkt 104fpkt"];
3461--7154[label="1;104pkt 104fpkt"];
5700--7154[label="1;104pkt 104fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.70.55.20" src_port="61050"/>
    </slice>
    <from sec="1039669640" usec="0"/>
    <to sec="1039669664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.141.150.20"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1161{
style=filled;
color=gray75;
3469[label="99.63.164.20;110pkt 110fpkt", shape=pentagon, color=darkviolet];
5705[label="99.63.164.20;110pkt 110fpkt", shape=invtriangle, color=brown];
7159[label="99.63.164.20;109pkt 109fpkt", shape=invhouse, color=bisque];
stat1161[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.63.164.20:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3469--5705[label="1;110pkt 110fpkt"];
3469--7159[label="1;109pkt 109fpkt"];
5705--7159[label="1;109pkt 109fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="99.63.164.20" src_port="1027"/>
    </slice>
    <from sec="1039669881" usec="0"/>
    <to sec="1039669908" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1162{
style=filled;
color=gray75;
3472[label="96.19.232.20;256pkt 256fpkt", shape=pentagon, color=darkviolet];
5707[label="96.19.232.20;256pkt 256fpkt", shape=invtriangle, color=brown];
7161[label="96.19.232.20;255pkt 255fpkt", shape=invhouse, color=bisque];
stat1162[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.19.232.20:1044, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1044: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3472--5707[label="1;256pkt 256fpkt"];
3472--7161[label="1;255pkt 255fpkt"];
5707--7161[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.19.232.20" src_port="1044"/>
    </slice>
    <from sec="1039669534" usec="0"/>
    <to sec="1039669550" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1163{
style=filled;
color=gray75;
3475[label="202.153.37.21;122pkt 122fpkt", shape=pentagon, color=darkviolet];
5708[label="202.153.37.21;122pkt 122fpkt", shape=invtriangle, color=brown];
7162[label="202.153.37.21;123pkt 123fpkt", shape=invhouse, color=bisque];
stat1163[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.153.37.21:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3475--5708[label="1;122pkt 122fpkt"];
3475--7162[label="1;122pkt 122fpkt"];
5708--7162[label="1;122pkt 122fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.153.37.21" src_port="1031"/>
    </slice>
    <from sec="1039669674" usec="0"/>
    <to sec="1039669714" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1164{
style=filled;
color=gray75;
3477[label="215.90.72.21;13pkt 13fpkt", shape=pentagon, color=darkviolet];
5710[label="215.90.72.21;14pkt 14fpkt", shape=invtriangle, color=brown];
7164[label="215.90.72.21;13pkt 13fpkt", shape=invhouse, color=bisque];
stat1164[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.90.72.21:*, 202.107.153.108:80}[50%]&lt;BR/&gt;{215.90.72.21:*, 96.36.173.253:80}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.25%)&lt;BR/&gt; 1135: (3.75%)&lt;BR/&gt; 1125: (3.75%)&lt;BR/&gt; 1086: (3.75%)&lt;BR/&gt; 1084: (3.75%)&gt;];
}
3477--5710[label="1;13pkt 13fpkt"];
3477--7164[label="1;13pkt 13fpkt"];
5710--7164[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="202.107.153.108" dst_port="80" src_ip="215.90.72.21"/>
      <filter dst_ip="96.36.173.253" dst_port="80" src_ip="215.90.72.21"/>
    </slice>
    <from sec="1039669633" usec="0"/>
    <to sec="1039669818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="148.110.90.21"/>
    </slice>
    <from sec="1039669214" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.0.174.21"/>
    </slice>
    <from sec="1039669214" usec="0"/>
    <to sec="1039669923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.123.90.22"/>
    </slice>
    <from sec="1039669203" usec="0"/>
    <to sec="1039669924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1168{
style=filled;
color=gray75;
3496[label="96.57.220.22;131pkt 131fpkt", shape=pentagon, color=darkviolet];
5721[label="96.57.220.22;131pkt 131fpkt", shape=invtriangle, color=brown];
7172[label="96.57.220.22;130pkt 130fpkt", shape=invhouse, color=bisque];
stat1168[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.57.220.22:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3496--5721[label="1;131pkt 131fpkt"];
3496--7172[label="1;130pkt 130fpkt"];
5721--7172[label="1;130pkt 130fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.57.220.22" src_port="1030"/>
    </slice>
    <from sec="1039669861" usec="0"/>
    <to sec="1039669881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1169{
style=filled;
color=gray75;
3498[label="202.94.1.23;218pkt 218fpkt", shape=pentagon, color=darkviolet];
5723[label="202.94.1.23;219pkt 219fpkt", shape=invtriangle, color=brown];
7174[label="202.94.1.23;219pkt 219fpkt", shape=invhouse, color=bisque];
stat1169[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.94.1.23:1035, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1035: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3498--5723[label="1;218pkt 218fpkt"];
3498--7174[label="1;218pkt 218fpkt"];
5723--7174[label="1;219pkt 219fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.94.1.23" src_port="1035"/>
    </slice>
    <from sec="1039669407" usec="0"/>
    <to sec="1039669447" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.60.46.23"/>
    </slice>
    <from sec="1039669217" usec="0"/>
    <to sec="1039669926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1171{
style=filled;
color=gray75;
3500[label="172.93.52.23;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5725[label="172.93.52.23;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1171[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.93.52.23:1512, 96.84.89.167:24178}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24178: (50%)&lt;BR/&gt; 1512: (50%)&gt;];
}
3500--5725[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="96.84.89.167" dst_port="24178" src_ip="172.93.52.23" src_port="1512"/>
    </slice>
    <from sec="1039669267" usec="0"/>
    <to sec="1039669301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1172{
style=filled;
color=gray75;
3502[label="215.87.111.23;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5727[label="215.87.111.23;19pkt 19fpkt", shape=invtriangle, color=brown];
stat1172[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.87.111.23:*, 211.90.23.65:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1076: (2.7027%)&lt;BR/&gt; 1075: (2.7027%)&lt;BR/&gt; 1074: (2.7027%)&lt;BR/&gt; 1073: (2.7027%)&gt;];
}
3502--5727[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="211.90.23.65" dst_port="80" src_ip="215.87.111.23"/>
    </slice>
    <from sec="1039669891" usec="0"/>
    <to sec="1039669925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645838,1.80177,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1173{
style=filled;
color=gray75;
801[label="140.3.211.23;s;44pkt 44fpkt", shape=diamond, color=yellow];
3505[label="140.3.211.23;44pkt 44fpkt", shape=pentagon, color=darkviolet];
5729[label="140.3.211.23;44pkt 44fpkt", shape=invtriangle, color=brown];
stat1173[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.211.23:*, 38.72.234.140:80}[40.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.5909%)&lt;BR/&gt; 443: (3.40909%)&lt;BR/&gt; 1430: (2.27273%)&lt;BR/&gt; 1474: (1.13636%)&lt;BR/&gt; 1473: (1.13636%)&gt;];
}
801--1125[label="0.0769231;1pkt 1fpkt"];
801--1172[label="0.159091;7pkt 7fpkt"];
801--1435[label="0.409091;18pkt 18fpkt"];
801--1665[label="0.113636;5pkt 5fpkt"];
801--1798[label="0.0454545;2pkt 2fpkt"];
801--2147[label="0.0909091;4pkt 4fpkt"];
801--2160[label="0.0454545;2pkt 2fpkt"];
801--2622[label="0.0769231;1pkt 1fpkt"];
801--3505[label="1;44pkt 44fpkt"];
801--5729[label="1;44pkt 44fpkt"];
3505--5729[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="38.72.234.140" dst_port="80" src_ip="140.3.211.23"/>
    </slice>
    <from sec="1039669239" usec="0"/>
    <to sec="1039669303" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1174{
style=filled;
color=gray75;
3506[label="203.52.32.24;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5730[label="203.52.32.24;2pkt 2fpkt", shape=invtriangle, color=brown];
7176[label="203.52.32.24;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1174[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.52.32.24:10641, 140.3.217.232:80}[50%]&lt;BR/&gt;{203.52.32.24:10642, 140.3.217.232:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 10642: (30%)&lt;BR/&gt; 10641: (20%)&gt;];
}
3506--5730[label="1;1pkt 1fpkt"];
3506--7176[label="1;1pkt 1fpkt"];
5730--7176[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.217.232" dst_port="80" src_ip="203.52.32.24" src_port="10642"/>
      <filter dst_ip="140.3.217.232" dst_port="80" src_ip="203.52.32.24" src_port="10641"/>
    </slice>
    <from sec="1039669424" usec="0"/>
    <to sec="1039669449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1175{
style=filled;
color=gray75;
3507[label="204.78.64.24;168pkt 168fpkt", shape=pentagon, color=darkviolet];
5731[label="204.78.64.24;168pkt 168fpkt", shape=invtriangle, color=brown];
stat1175[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.78.64.24:1038, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1038: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3507--5731[label="1;168pkt 168fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="204.78.64.24" src_port="1038"/>
    </slice>
    <from sec="1039669513" usec="0"/>
    <to sec="1039669527" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="99.28.209.24"/>
    </slice>
    <from sec="1039669807" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1177{
style=filled;
color=gray75;
3515[label="96.192.209.24;128pkt 128fpkt", shape=pentagon, color=darkviolet];
5737[label="96.192.209.24;128pkt 128fpkt", shape=invtriangle, color=brown];
7181[label="96.192.209.24;127pkt 127fpkt", shape=invhouse, color=bisque];
stat1177[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.192.209.24:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3515--5737[label="1;128pkt 128fpkt"];
3515--7181[label="1;127pkt 127fpkt"];
5737--7181[label="1;127pkt 127fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.192.209.24" src_port="1027"/>
    </slice>
    <from sec="1039669796" usec="0"/>
    <to sec="1039669826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1178{
style=filled;
color=gray75;
3518[label="215.129.14.25;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5739[label="215.129.14.25;5pkt 5fpkt", shape=invtriangle, color=brown];
7183[label="215.129.14.25;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1178[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.129.14.25:46648, *:53}[66.6667%]&lt;BR/&gt;{215.129.14.25:53, *:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 46648: (31.25%)&lt;BR/&gt; 63755: (9.375%)&lt;BR/&gt; 38649: (9.375%)&gt;];
}
3518--5739[label="1;5pkt 5fpkt"];
3518--7183[label="1;5pkt 5fpkt"];
5739--7183[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="215.129.14.25" src_port="53"/>
      <filter dst_port="53" src_ip="215.129.14.25" src_port="46648"/>
    </slice>
    <from sec="1039669238" usec="0"/>
    <to sec="1039669926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1179{
style=filled;
color=gray75;
3519[label="39.181.32.25;151pkt 151fpkt", shape=pentagon, color=darkviolet];
5740[label="39.181.32.25;151pkt 151fpkt", shape=invtriangle, color=brown];
stat1179[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.181.32.25:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3519--5740[label="1;151pkt 151fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="39.181.32.25" src_port="1026"/>
    </slice>
    <from sec="1039669695" usec="0"/>
    <to sec="1039669719" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24192,1.87542,999,1 0 0 1 1 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_1180{
style=filled;
color=gray75;
107[label="39.181.32.25s;1pkt 1fpkt", shape=rectangle, color=red];
300[label="196.90.162.204s;1pkt 1fpkt", shape=rectangle, color=red];
498[label="148.110.15.56;d;224pkt 224fpkt", shape=diamond, color=yellow];
1014[label="200.98.10.204;s;1pkt 1fpkt", shape=diamond, color=yellow];
1324[label="64.190.204.17;s;1pkt 1fpkt", shape=diamond, color=yellow];
2533[label="200.98.10.204;s;1pkt 1fpkt", shape=hexagon, color=black];
5742[label="192.123.80.25;1pkt 1fpkt", shape=invtriangle, color=brown];
7184[label="192.123.80.25;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1180[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6257, 148.110.15.56:6257}[93.75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (91.7749%)&lt;BR/&gt; 6699: (3.67965%)&lt;BR/&gt; 3585: (0.865801%)&lt;BR/&gt; 3552: (0.865801%)&lt;BR/&gt; 1164: (0.4329%)&gt;];
}
107--498[label="1;1pkt 1fpkt"];
107--5742[label="1;1pkt 1fpkt"];
107--7184[label="1;1pkt 1fpkt"];
300--498[label="1;1pkt 1fpkt"];
300--1014[label="1;1pkt 1fpkt"];
300--2533[label="1;1pkt 1fpkt"];
498--993[label="1;1pkt 1fpkt"];
498--1014[label="1;1pkt 1fpkt"];
498--1324[label="1;1pkt 1fpkt"];
498--2533[label="1;1pkt 1fpkt"];
498--5742[label="1;1pkt 1fpkt"];
498--7184[label="1;1pkt 1fpkt"];
1014--2533[label="1;1pkt 1fpkt"];
5742--7184[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.15.56" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669922" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1181{
style=filled;
color=gray75;
3530[label="214.132.54.26;134pkt 134fpkt", shape=pentagon, color=darkviolet];
5747[label="214.132.54.26;135pkt 135fpkt", shape=invtriangle, color=brown];
7187[label="214.132.54.26;135pkt 135fpkt", shape=invhouse, color=bisque];
stat1181[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.132.54.26:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3530--5747[label="1;134pkt 134fpkt"];
3530--7187[label="1;134pkt 134fpkt"];
5747--7187[label="1;135pkt 135fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.132.54.26" src_port="1026"/>
    </slice>
    <from sec="1039669828" usec="0"/>
    <to sec="1039669862" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1182{
style=filled;
color=gray75;
3532[label="96.146.65.26;173pkt 173fpkt", shape=pentagon, color=darkviolet];
5748[label="96.146.65.26;173pkt 173fpkt", shape=invtriangle, color=brown];
7188[label="96.146.65.26;173pkt 173fpkt", shape=invhouse, color=bisque];
stat1182[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.146.65.26:10086, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10086: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3532--5748[label="1;173pkt 173fpkt"];
3532--7188[label="1;173pkt 173fpkt"];
5748--7188[label="1;173pkt 173fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.146.65.26" src_port="10086"/>
    </slice>
    <from sec="1039669791" usec="0"/>
    <to sec="1039669827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="96.63.118.26"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1184{
style=filled;
color=gray75;
3538[label="169.126.130.26;20pkt 20fpkt", shape=pentagon, color=darkviolet];
5753[label="169.126.130.26;21pkt 21fpkt", shape=invtriangle, color=brown];
7191[label="169.126.130.26;20pkt 20fpkt", shape=invhouse, color=bisque];
stat1184[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.126.130.26:80, 215.205.221.251:*}[76.1905%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1803%)&lt;BR/&gt; 63018: (2.45902%)&lt;BR/&gt; 63015: (2.45902%)&lt;BR/&gt; 63011: (2.45902%)&lt;BR/&gt; 63006: (2.45902%)&gt;];
}
3538--5753[label="1;20pkt 20fpkt"];
3538--7191[label="1;20pkt 20fpkt"];
5753--7191[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="215.205.221.251" src_ip="169.126.130.26" src_port="80"/>
    </slice>
    <from sec="1039669220" usec="0"/>
    <to sec="1039669926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="172.93.208.26"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1186{
style=filled;
color=gray75;
3548[label="36.21.62.28;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5757[label="36.21.62.28;5pkt 5fpkt", shape=invtriangle, color=brown];
7194[label="36.21.62.28;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1186[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.21.62.28:3744, 138.165.39.172:1537}[20%]&lt;BR/&gt;{36.21.62.28:3744, 138.165.39.172:1614}[20%]&lt;BR/&gt;{36.21.62.28:3744, 138.165.39.172:1637}[20%]&lt;BR/&gt;{36.21.62.28:3744, 138.165.39.172:1653}[20%]&lt;BR/&gt;{36.21.62.28:3744, 138.165.39.172:1683}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3744: (50%)&lt;BR/&gt; 1683: (10%)&lt;BR/&gt; 1653: (10%)&lt;BR/&gt; 1637: (10%)&lt;BR/&gt; 1614: (10%)&gt;];
}
3548--5757[label="1;5pkt 5fpkt"];
3548--7194[label="1;5pkt 5fpkt"];
5757--7194[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="138.165.39.172" dst_port="1683" src_ip="36.21.62.28" src_port="3744"/>
      <filter dst_ip="138.165.39.172" dst_port="1653" src_ip="36.21.62.28" src_port="3744"/>
      <filter dst_ip="138.165.39.172" dst_port="1637" src_ip="36.21.62.28" src_port="3744"/>
      <filter dst_ip="138.165.39.172" dst_port="1614" src_ip="36.21.62.28" src_port="3744"/>
      <filter dst_ip="138.165.39.172" dst_port="1537" src_ip="36.21.62.28" src_port="3744"/>
    </slice>
    <from sec="1039669206" usec="0"/>
    <to sec="1039669924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1187{
style=filled;
color=gray75;
111[label="200.137.68.28s;136pkt 136fpkt", shape=rectangle, color=red];
3549[label="200.137.68.28;192pkt 192fpkt", shape=pentagon, color=darkviolet];
5758[label="200.137.68.28;192pkt 192fpkt", shape=invtriangle, color=brown];
7195[label="200.137.68.28;192pkt 192fpkt", shape=invhouse, color=bisque];
stat1187[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.137.68.28:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
111--3549[label="0.992647;135pkt 135fpkt"];
111--5758[label="0.992647;135pkt 135fpkt"];
111--7195[label="0.992647;135pkt 135fpkt"];
3549--5758[label="1;192pkt 192fpkt"];
3549--7195[label="1;192pkt 192fpkt"];
5758--7195[label="1;192pkt 192fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.137.68.28" src_port="1030"/>
    </slice>
    <from sec="1039669450" usec="0"/>
    <to sec="1039669480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1188{
style=filled;
color=gray75;
3553[label="200.187.145.28;216pkt 216fpkt", shape=pentagon, color=darkviolet];
5760[label="200.187.145.28;217pkt 217fpkt", shape=invtriangle, color=brown];
stat1188[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.187.145.28:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3553--5760[label="1;216pkt 216fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.187.145.28" src_port="1029"/>
    </slice>
    <from sec="1039669719" usec="0"/>
    <to sec="1039669754" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1189{
style=filled;
color=gray75;
3557[label="197.108.194.28;148pkt 148fpkt", shape=pentagon, color=darkviolet];
5762[label="197.108.194.28;148pkt 148fpkt", shape=invtriangle, color=brown];
7198[label="197.108.194.28;148pkt 148fpkt", shape=invhouse, color=bisque];
stat1189[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.108.194.28:1079, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1079: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3557--5762[label="1;148pkt 148fpkt"];
3557--7198[label="1;148pkt 148fpkt"];
5762--7198[label="1;148pkt 148fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.108.194.28" src_port="1079"/>
    </slice>
    <from sec="1039669254" usec="0"/>
    <to sec="1039669290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1190{
style=filled;
color=gray75;
3558[label="208.166.197.28;25pkt 25fpkt", shape=pentagon, color=darkviolet];
5763[label="208.166.197.28;26pkt 26fpkt", shape=invtriangle, color=brown];
7199[label="208.166.197.28;25pkt 25fpkt", shape=invhouse, color=bisque];
stat1190[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.166.197.28:80, 140.3.244.58:*}[61.5385%]&lt;BR/&gt;{208.166.197.28:80, 140.3.244.74:*}[26.9231%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.3947%)&lt;BR/&gt; 5190: (4.60526%)&lt;BR/&gt; 3543: (1.97368%)&lt;BR/&gt; 3542: (1.97368%)&lt;BR/&gt; 3541: (1.97368%)&gt;];
}
3558--5763[label="1;25pkt 25fpkt"];
3558--7199[label="1;25pkt 25fpkt"];
5763--7199[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.244.58" src_ip="208.166.197.28" src_port="80"/>
      <filter dst_ip="140.3.244.74" src_ip="208.166.197.28" src_port="80"/>
    </slice>
    <from sec="1039669212" usec="0"/>
    <to sec="1039669927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1191{
style=filled;
color=gray75;
3559[label="138.186.216.28;14pkt 14fpkt", shape=pentagon, color=darkviolet];
5764[label="138.186.216.28;15pkt 15fpkt", shape=invtriangle, color=brown];
stat1191[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.216.28:80, 175.174.71.60:*}[86.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.8276%)&lt;BR/&gt; 53: (5.17241%)&lt;BR/&gt; 32777: (3.44828%)&lt;BR/&gt; 1182: (3.44828%)&lt;BR/&gt; 1180: (3.44828%)&gt;];
}
3559--5764[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="175.174.71.60" src_ip="138.186.216.28" src_port="80"/>
    </slice>
    <from sec="1039669269" usec="0"/>
    <to sec="1039669469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1192{
style=filled;
color=gray75;
3564[label="140.3.95.29;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5766[label="140.3.95.29;9pkt 9fpkt", shape=invtriangle, color=brown];
stat1192[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.95.29:*, 211.124.15.127:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53648: (5.88235%)&lt;BR/&gt; 53647: (5.88235%)&lt;BR/&gt; 53646: (5.88235%)&lt;BR/&gt; 53645: (5.88235%)&gt;];
}
3564--5766[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="211.124.15.127" dst_port="80" src_ip="140.3.95.29"/>
    </slice>
    <from sec="1039669420" usec="0"/>
    <to sec="1039669430" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1193{
style=filled;
color=gray75;
3568[label="140.3.211.29;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5769[label="140.3.211.29;1pkt 1fpkt", shape=invtriangle, color=brown];
7200[label="140.3.211.29;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1193[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.211.29:1956, 222.187.160.106:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1956: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3568--5769[label="1;1pkt 1fpkt"];
3568--7200[label="1;1pkt 1fpkt"];
5769--7200[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="222.187.160.106" dst_port="80" src_ip="140.3.211.29" src_port="1956"/>
    </slice>
    <from sec="1039669365" usec="0"/>
    <to sec="1039669446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="162.74.81.30"/>
    </slice>
    <from sec="1039669377" usec="0"/>
    <to sec="1039669687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1195{
style=filled;
color=gray75;
3575[label="196.13.43.31;241pkt 241fpkt", shape=pentagon, color=darkviolet];
5774[label="196.13.43.31;241pkt 241fpkt", shape=invtriangle, color=brown];
stat1195[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.13.43.31:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3575--5774[label="1;241pkt 241fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.13.43.31" src_port="1031"/>
    </slice>
    <from sec="1039669480" usec="0"/>
    <to sec="1039669518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1196{
style=filled;
color=gray75;
3583[label="214.216.55.32;39pkt 39fpkt", shape=pentagon, color=darkviolet];
5779[label="214.216.55.32;39pkt 39fpkt", shape=invtriangle, color=brown];
7203[label="214.216.55.32;39pkt 39fpkt", shape=invhouse, color=bisque];
stat1196[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.216.55.32:80, 36.83.14.6:*}[56.4103%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65369: (1.28205%)&lt;BR/&gt; 65362: (1.28205%)&lt;BR/&gt; 43246: (1.28205%)&lt;BR/&gt; 38755: (1.28205%)&gt;];
}
3583--5779[label="1;39pkt 39fpkt"];
3583--7203[label="1;39pkt 39fpkt"];
5779--7203[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="36.83.14.6" src_ip="214.216.55.32" src_port="80"/>
    </slice>
    <from sec="1039669202" usec="0"/>
    <to sec="1039669922" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1197{
style=filled;
color=gray75;
3590[label="169.126.149.32;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5782[label="169.126.149.32;3pkt 3fpkt", shape=invtriangle, color=brown];
7204[label="169.126.149.32;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1197[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.126.149.32:25, 36.161.205.194:46769}[33.3333%]&lt;BR/&gt;{169.126.149.32:25, 215.21.4.237:61841}[33.3333%]&lt;BR/&gt;{169.126.149.32:25, 36.161.205.243:34965}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 61841: (16.6667%)&lt;BR/&gt; 46769: (16.6667%)&lt;BR/&gt; 34965: (16.6667%)&gt;];
}
3590--5782[label="1;3pkt 3fpkt"];
3590--7204[label="1;3pkt 3fpkt"];
5782--7204[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="36.161.205.243" dst_port="34965" src_ip="169.126.149.32" src_port="25"/>
      <filter dst_ip="215.21.4.237" dst_port="61841" src_ip="169.126.149.32" src_port="25"/>
      <filter dst_ip="36.161.205.194" dst_port="46769" src_ip="169.126.149.32" src_port="25"/>
    </slice>
    <from sec="1039669242" usec="0"/>
    <to sec="1039669875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1198{
style=filled;
color=gray75;
3596[label="138.186.51.33;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5788[label="138.186.51.33;2pkt 2fpkt", shape=invtriangle, color=brown];
7209[label="138.186.51.33;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1198[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.51.33:4559, 201.162.171.1:80}[33.3333%]&lt;BR/&gt;{138.186.51.33:4642, 38.119.156.218:80}[33.3333%]&lt;BR/&gt;{138.186.51.33:4648, 201.100.13.253:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4648: (21.4286%)&lt;BR/&gt; 4642: (21.4286%)&lt;BR/&gt; 4559: (7.14286%)&gt;];
}
3596--5788[label="1;2pkt 2fpkt"];
3596--7209[label="1;2pkt 2fpkt"];
5788--7209[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="201.100.13.253" dst_port="80" src_ip="138.186.51.33" src_port="4648"/>
      <filter dst_ip="38.119.156.218" dst_port="80" src_ip="138.186.51.33" src_port="4642"/>
      <filter dst_ip="201.162.171.1" dst_port="80" src_ip="138.186.51.33" src_port="4559"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1199{
style=filled;
color=gray75;
3601[label="36.161.205.33;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5789[label="36.161.205.33;2pkt 2fpkt", shape=invtriangle, color=brown];
7210[label="36.161.205.33;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1199[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.161.205.33:80, 169.126.143.85:3384}[50%]&lt;BR/&gt;{36.161.205.33:80, 169.126.143.85:3472}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3472: (25%)&lt;BR/&gt; 3384: (25%)&gt;];
}
3601--5789[label="1;2pkt 2fpkt"];
3601--7210[label="1;2pkt 2fpkt"];
5789--7210[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="169.126.143.85" dst_port="3472" src_ip="36.161.205.33" src_port="80"/>
      <filter dst_ip="169.126.143.85" dst_port="3384" src_ip="36.161.205.33" src_port="80"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1200{
style=filled;
color=gray75;
3605[label="214.216.49.34;38pkt 38fpkt", shape=pentagon, color=darkviolet];
5792[label="214.216.49.34;38pkt 38fpkt", shape=invtriangle, color=brown];
7213[label="214.216.49.34;37pkt 37fpkt", shape=invhouse, color=bisque];
stat1200[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.216.49.34:0, *:0}[34.2105%]&lt;BR/&gt;{214.216.49.34:*, *:25}[28.9474%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (34.5133%)&lt;BR/&gt; 25: (22.1239%)&lt;BR/&gt; 113: (10.6195%)&lt;BR/&gt; 62033: (1.32743%)&lt;BR/&gt; 62029: (1.32743%)&gt;];
}
3605--5792[label="1;38pkt 38fpkt"];
3605--7213[label="1;37pkt 37fpkt"];
5792--7213[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="214.216.49.34"/>
      <filter src_ip="214.216.49.34"/>
    </slice>
    <from sec="1039669207" usec="0"/>
    <to sec="1039669726" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1201{
style=filled;
color=gray75;
3607[label="202.168.79.34;188pkt 188fpkt", shape=pentagon, color=darkviolet];
5794[label="202.168.79.34;189pkt 189fpkt", shape=invtriangle, color=brown];
7214[label="202.168.79.34;189pkt 189fpkt", shape=invhouse, color=bisque];
stat1201[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.168.79.34:1032, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1032: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3607--5794[label="1;188pkt 188fpkt"];
3607--7214[label="1;188pkt 188fpkt"];
5794--7214[label="1;189pkt 189fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.168.79.34" src_port="1032"/>
    </slice>
    <from sec="1039669426" usec="0"/>
    <to sec="1039669466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1202{
style=filled;
color=gray75;
3609[label="38.96.129.34;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5796[label="38.96.129.34;5pkt 5fpkt", shape=invtriangle, color=brown];
7215[label="38.96.129.34;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1202[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.96.129.34:80, 138.186.59.147:1122}[20%]&lt;BR/&gt;{38.96.129.34:80, 140.3.244.4:4185}[20%]&lt;BR/&gt;{38.96.129.34:80, 140.3.244.4:4194}[20%]&lt;BR/&gt;{38.96.129.34:80, 140.3.201.78:1164}[20%]&lt;BR/&gt;{38.96.129.34:80, 140.3.201.78:1174}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4194: (10%)&lt;BR/&gt; 4185: (10%)&lt;BR/&gt; 1174: (10%)&lt;BR/&gt; 1164: (10%)&gt;];
}
3609--5796[label="1;5pkt 5fpkt"];
3609--7215[label="1;5pkt 5fpkt"];
5796--7215[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.201.78" dst_port="1174" src_ip="38.96.129.34" src_port="80"/>
      <filter dst_ip="140.3.201.78" dst_port="1164" src_ip="38.96.129.34" src_port="80"/>
      <filter dst_ip="140.3.244.4" dst_port="4194" src_ip="38.96.129.34" src_port="80"/>
      <filter dst_ip="140.3.244.4" dst_port="4185" src_ip="38.96.129.34" src_port="80"/>
      <filter dst_ip="138.186.59.147" dst_port="1122" src_ip="38.96.129.34" src_port="80"/>
    </slice>
    <from sec="1039669304" usec="0"/>
    <to sec="1039669874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1203{
style=filled;
color=gray75;
3625[label="138.186.26.36;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5801[label="138.186.26.36;1pkt 1fpkt", shape=invtriangle, color=brown];
7219[label="138.186.26.36;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1203[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.26.36:0, 223.196.202.165:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3625--5801[label="1;1pkt 1fpkt"];
3625--7219[label="1;1pkt 1fpkt"];
5801--7219[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="223.196.202.165" src_ip="138.186.26.36"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1204{
style=filled;
color=gray75;
3641[label="202.84.130.37;152pkt 152fpkt", shape=pentagon, color=darkviolet];
5811[label="202.84.130.37;153pkt 153fpkt", shape=invtriangle, color=brown];
7226[label="202.84.130.37;153pkt 153fpkt", shape=invhouse, color=bisque];
stat1204[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.84.130.37:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3641--5811[label="1;152pkt 152fpkt"];
3641--7226[label="1;152pkt 152fpkt"];
5811--7226[label="1;153pkt 153fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.84.130.37" src_port="1026"/>
    </slice>
    <from sec="1039669547" usec="0"/>
    <to sec="1039669571" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1205{
style=filled;
color=gray75;
3643[label="169.126.152.37;66pkt 66fpkt", shape=pentagon, color=darkviolet];
5812[label="169.126.152.37;66pkt 66fpkt", shape=invtriangle, color=brown];
7227[label="169.126.152.37;66pkt 66fpkt", shape=invhouse, color=bisque];
stat1205[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.126.152.37:32768, *:53}[96.9697%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.2424%)&lt;BR/&gt; 32768: (48.4848%)&lt;BR/&gt; 0: (1.51515%)&lt;BR/&gt; 2562: (0.757576%)&gt;];
}
3643--5812[label="1;66pkt 66fpkt"];
3643--7227[label="1;66pkt 66fpkt"];
5812--7227[label="1;66pkt 66fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="169.126.152.37" src_port="32768"/>
    </slice>
    <from sec="1039669210" usec="0"/>
    <to sec="1039669893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1206{
style=filled;
color=gray75;
3660[label="36.161.205.38;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5823[label="36.161.205.38;1pkt 1fpkt", shape=invtriangle, color=brown];
7235[label="36.161.205.38;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1206[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.161.205.38:80, 215.87.67.142:1261}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1261: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3660--5823[label="1;1pkt 1fpkt"];
3660--7235[label="1;1pkt 1fpkt"];
5823--7235[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.87.67.142" dst_port="1261" src_ip="36.161.205.38" src_port="80"/>
    </slice>
    <from sec="1039669728" usec="0"/>
    <to sec="1039669849" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1208{
style=filled;
color=gray75;
3667[label="169.126.0.40;12pkt 12fpkt", shape=pentagon, color=darkviolet];
5828[label="169.126.0.40;12pkt 12fpkt", shape=invtriangle, color=brown];
7237[label="169.126.0.40;12pkt 12fpkt", shape=invhouse, color=bisque];
stat1208[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.126.0.40:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3667--5828[label="1;12pkt 12fpkt"];
3667--7237[label="1;12pkt 12fpkt"];
5828--7237[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter src_ip="169.126.0.40"/>
    </slice>
    <from sec="1039669206" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1209{
style=filled;
color=gray75;
3668[label="198.204.8.40;223pkt 223fpkt", shape=pentagon, color=darkviolet];
5829[label="198.204.8.40;223pkt 223fpkt", shape=invtriangle, color=brown];
stat1209[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.204.8.40:1048, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1048: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3668--5829[label="1;223pkt 223fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="198.204.8.40" src_port="1048"/>
    </slice>
    <from sec="1039669759" usec="0"/>
    <to sec="1039669796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1210{
style=filled;
color=gray75;
3670[label="215.115.40.40;26pkt 26fpkt", shape=pentagon, color=darkviolet];
5830[label="215.115.40.40;26pkt 26fpkt", shape=invtriangle, color=brown];
7238[label="215.115.40.40;26pkt 26fpkt", shape=invhouse, color=bisque];
stat1210[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.115.40.40:*, 142.69.196.222:80}[69.2308%]&lt;BR/&gt;{215.115.40.40:*, 143.80.156.81:80}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64143: (1.92308%)&lt;BR/&gt; 59528: (1.92308%)&lt;BR/&gt; 43865: (1.92308%)&lt;BR/&gt; 36928: (1.92308%)&gt;];
}
3670--5830[label="1;26pkt 26fpkt"];
3670--7238[label="1;26pkt 26fpkt"];
5830--7238[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="142.69.196.222" dst_port="80" src_ip="215.115.40.40"/>
      <filter dst_ip="143.80.156.81" dst_port="80" src_ip="215.115.40.40"/>
    </slice>
    <from sec="1039669296" usec="0"/>
    <to sec="1039669667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1211{
style=filled;
color=gray75;
3672[label="201.160.98.40;19pkt 19fpkt", shape=pentagon, color=darkviolet];
5832[label="201.160.98.40;19pkt 19fpkt", shape=invtriangle, color=brown];
stat1211[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.160.98.40:80, 140.3.210.84:*}[84.2105%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3992: (2.63158%)&lt;BR/&gt; 3991: (2.63158%)&lt;BR/&gt; 3988: (2.63158%)&lt;BR/&gt; 1364: (2.63158%)&gt;];
}
3672--5832[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.210.84" src_ip="201.160.98.40" src_port="80"/>
    </slice>
    <from sec="1039669672" usec="0"/>
    <to sec="1039669838" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1212{
style=filled;
color=gray75;
3684[label="215.215.110.41;138pkt 138fpkt", shape=pentagon, color=darkviolet];
5839[label="215.215.110.41;139pkt 139fpkt", shape=invtriangle, color=brown];
7242[label="215.215.110.41;139pkt 139fpkt", shape=invhouse, color=bisque];
stat1212[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.215.110.41:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 8148: (0.360577%)&lt;BR/&gt; 8079: (0.360577%)&lt;BR/&gt; 8029: (0.360577%)&lt;BR/&gt; 8020: (0.360577%)&gt;];
}
3684--5839[label="1;138pkt 138fpkt"];
3684--7242[label="1;138pkt 138fpkt"];
5839--7242[label="1;139pkt 139fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.215.110.41"/>
    </slice>
    <from sec="1039669283" usec="0"/>
    <to sec="1039669305" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1213{
style=filled;
color=gray75;
3689[label="220.27.0.42;22pkt 22fpkt", shape=pentagon, color=darkviolet];
5843[label="220.27.0.42;22pkt 22fpkt", shape=invtriangle, color=brown];
7243[label="220.27.0.42;22pkt 22fpkt", shape=invhouse, color=bisque];
stat1213[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.27.0.42:80, 148.110.192.52:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1460: (2.27273%)&lt;BR/&gt; 1459: (2.27273%)&lt;BR/&gt; 1458: (2.27273%)&lt;BR/&gt; 1457: (2.27273%)&gt;];
}
3689--5843[label="1;22pkt 22fpkt"];
3689--7243[label="1;22pkt 22fpkt"];
5843--7243[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.192.52" src_ip="220.27.0.42" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669269" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1214{
style=filled;
color=gray75;
3692[label="214.216.49.42;52pkt 52fpkt", shape=pentagon, color=darkviolet];
5845[label="214.216.49.42;52pkt 52fpkt", shape=invtriangle, color=brown];
7245[label="214.216.49.42;51pkt 51fpkt", shape=invhouse, color=bisque];
stat1214[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.216.49.42:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3692--5845[label="1;52pkt 52fpkt"];
3692--7245[label="1;51pkt 51fpkt"];
5845--7245[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter src_ip="214.216.49.42"/>
    </slice>
    <from sec="1039669203" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.238.36.43"/>
    </slice>
    <from sec="1039669571" usec="0"/>
    <to sec="1039669660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11796,1.82888,999,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1216{
style=filled;
color=gray75;
13[label="197.12.98.43s;3pkt 3fpkt", shape=rectangle, color=red];
776[label="138.186.51.169;d;212pkt 212fpkt", shape=diamond, color=yellow];
1691[label="61.200.162.43;s;2pkt 2fpkt", shape=diamond, color=yellow];
2720[label="61.200.162.43;s;2pkt 2fpkt", shape=hexagon, color=black];
2818[label="138.186.51.169;d;212pkt 212fpkt", shape=hexagon, color=black];
3703[label="61.200.162.43;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4395[label="64.185.208.117;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5851[label="61.200.162.43;1pkt 1fpkt", shape=invtriangle, color=brown];
6303[label="64.185.208.117;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1216[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6257, 138.186.51.169:6257}[93.4579%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (93.3638%)&lt;BR/&gt; 6699: (1.71625%)&lt;BR/&gt; 80: (0.915332%)&lt;BR/&gt; 1054: (0.800915%)&lt;BR/&gt; 1589: (0.457666%)&gt;];
}
13--776[label="0.333333;1pkt 1fpkt"];
13--1691[label="0.5;1pkt 1fpkt"];
13--2720[label="0.5;1pkt 1fpkt"];
13--2818[label="0.333333;1pkt 1fpkt"];
13--3703[label="1;1pkt 1fpkt"];
13--5851[label="1;1pkt 1fpkt"];
776--1427[label="1;2pkt 2fpkt"];
776--1691[label="1;2pkt 2fpkt"];
776--2265[label="0.00793651;1pkt 1fpkt"];
776--2718[label="1;2pkt 2fpkt"];
776--2720[label="1;2pkt 2fpkt"];
776--2818[label="1;212pkt 212fpkt"];
776--3703[label="1;1pkt 1fpkt"];
776--4395[label="1;2pkt 2fpkt"];
776--4709[label="1;1pkt 1fpkt"];
776--5851[label="1;1pkt 1fpkt"];
776--6303[label="1;2pkt 2fpkt"];
776--6513[label="1;2pkt 2fpkt"];
776--7669[label="1;2pkt 2fpkt"];
1691--2720[label="1;2pkt 2fpkt"];
1691--2818[label="1;2pkt 2fpkt"];
1691--3703[label="1;1pkt 1fpkt"];
1691--5851[label="1;1pkt 1fpkt"];
2720--2818[label="1;2pkt 2fpkt"];
2720--3703[label="1;1pkt 1fpkt"];
2720--5851[label="1;1pkt 1fpkt"];
2818--3703[label="1;1pkt 1fpkt"];
2818--4395[label="1;2pkt 2fpkt"];
2818--4709[label="1;1pkt 1fpkt"];
2818--5851[label="1;1pkt 1fpkt"];
2818--6303[label="1;2pkt 2fpkt"];
2818--6513[label="1;2pkt 2fpkt"];
2818--7669[label="1;2pkt 2fpkt"];
3703--5851[label="1;1pkt 1fpkt"];
4395--6303[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.51.169" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1039669206" usec="0"/>
    <to sec="1039669838" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1217{
style=filled;
color=gray75;
3705[label="172.93.194.43;24pkt 24fpkt", shape=pentagon, color=darkviolet];
5853[label="172.93.194.43;23pkt 23fpkt", shape=invtriangle, color=brown];
stat1217[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.93.194.43:*, 193.155.90.13:80}[25%]&lt;BR/&gt;{172.93.194.43:*, 98.181.82.232:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1865: (2.12766%)&lt;BR/&gt; 1864: (2.12766%)&lt;BR/&gt; 1863: (2.12766%)&lt;BR/&gt; 1861: (2.12766%)&gt;];
}
3705--5853[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="98.181.82.232" dst_port="80" src_ip="172.93.194.43"/>
      <filter dst_ip="193.155.90.13" dst_port="80" src_ip="172.93.194.43"/>
    </slice>
    <from sec="1039669211" usec="0"/>
    <to sec="1039669818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645838,1.80177,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1218{
style=filled;
color=gray75;
2243[label="138.186.49.103;d;10pkt 10fpkt", shape=diamond, color=yellow];
3708[label="64.97.72.44;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5855[label="64.97.72.44;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1218[shape=component, label=&lt;Rules:&lt;BR/&gt;{64.97.72.44:80, 138.186.49.103:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1158: (12.5%)&lt;BR/&gt; 1159: (4.16667%)&lt;BR/&gt; 1157: (4.16667%)&lt;BR/&gt; 1156: (4.16667%)&gt;];
}
2243--3708[label="1;1pkt 1fpkt"];
2243--5855[label="1;1pkt 1fpkt"];
2243--7251[label="0.5;1pkt 1fpkt"];
3708--5855[label="1;1pkt 1fpkt"];
3708--7251[label="1;1pkt 1fpkt"];
5855--7251[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.49.103" src_ip="64.97.72.44" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1219{
style=filled;
color=gray75;
3710[label="141.44.6.45;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5857[label="141.44.6.45;2pkt 2fpkt", shape=invtriangle, color=brown];
7253[label="141.44.6.45;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1219[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.44.6.45:2226, 216.242.74.56:80}[50%]&lt;BR/&gt;{141.44.6.45:2227, 216.242.74.56:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2227: (25%)&lt;BR/&gt; 2226: (25%)&gt;];
}
3710--5857[label="1;2pkt 2fpkt"];
3710--7253[label="1;2pkt 2fpkt"];
5857--7253[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="216.242.74.56" dst_port="80" src_ip="141.44.6.45" src_port="2227"/>
      <filter dst_ip="216.242.74.56" dst_port="80" src_ip="141.44.6.45" src_port="2226"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1220{
style=filled;
color=gray75;
3711[label="96.198.33.45;143pkt 143fpkt", shape=pentagon, color=darkviolet];
5858[label="96.198.33.45;142pkt 142fpkt", shape=invtriangle, color=brown];
7254[label="96.198.33.45;142pkt 142fpkt", shape=invhouse, color=bisque];
stat1220[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.198.33.45:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3711--5858[label="1;142pkt 142fpkt"];
3711--7254[label="1;142pkt 142fpkt"];
5858--7254[label="1;142pkt 142fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.198.33.45" src_port="1025"/>
    </slice>
    <from sec="1039669652" usec="0"/>
    <to sec="1039669687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.115.72.45"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1222{
style=filled;
color=gray75;
3720[label="196.58.41.46;111pkt 111fpkt", shape=pentagon, color=darkviolet];
5863[label="196.58.41.46;110pkt 110fpkt", shape=invtriangle, color=brown];
stat1222[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.58.41.46:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3720--5863[label="1;110pkt 110fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.58.41.46" src_port="1026"/>
    </slice>
    <from sec="1039669502" usec="0"/>
    <to sec="1039669519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1223{
style=filled;
color=gray75;
698[label="198.211.199.46;s;245pkt 245fpkt", shape=diamond, color=yellow];
699[label="140.3.148.90;d;247pkt 247fpkt", shape=diamond, color=yellow];
3723[label="198.211.199.46;261pkt 261fpkt", shape=pentagon, color=darkviolet];
5865[label="198.211.199.46;260pkt 260fpkt", shape=invtriangle, color=brown];
7257[label="198.211.199.46;260pkt 260fpkt", shape=invhouse, color=bisque];
stat1223[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.211.199.46:80, 140.3.148.90:*}[99.2395%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9214%)&lt;BR/&gt; 3691: (0.196386%)&lt;BR/&gt; 3690: (0.196386%)&lt;BR/&gt; 3689: (0.196386%)&lt;BR/&gt; 3688: (0.196386%)&gt;];
}
698--699[label="1;245pkt 245fpkt"];
698--3723[label="1;245pkt 245fpkt"];
698--5865[label="0.995918;244pkt 244fpkt"];
698--7257[label="0.995918;244pkt 244fpkt"];
699--3723[label="0.991903;245pkt 245fpkt"];
699--3724[label="1;1pkt 1fpkt"];
699--5865[label="0.987854;244pkt 244fpkt"];
699--5866[label="1;1pkt 1fpkt"];
699--7257[label="0.987854;244pkt 244fpkt"];
3723--5865[label="1;260pkt 260fpkt"];
3723--7257[label="1;260pkt 260fpkt"];
5865--7257[label="1;260pkt 260fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.148.90" src_ip="198.211.199.46" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1224{
style=filled;
color=gray75;
3724[label="64.196.202.46;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5866[label="64.196.202.46;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1224[shape=component, label=&lt;Rules:&lt;BR/&gt;{64.196.202.46:6699, 140.3.148.90:3051}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3051: (50%)&gt;];
}
3724--5866[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.148.90" dst_port="3051" src_ip="64.196.202.46" src_port="6699"/>
    </slice>
    <from sec="1039669237" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="39.29.130.47"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1226{
style=filled;
color=gray75;
3732[label="202.77.134.47;243pkt 243fpkt", shape=pentagon, color=darkviolet];
5873[label="202.77.134.47;243pkt 243fpkt", shape=invtriangle, color=brown];
7264[label="202.77.134.47;243pkt 243fpkt", shape=invhouse, color=bisque];
stat1226[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.77.134.47:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3732--5873[label="1;243pkt 243fpkt"];
3732--7264[label="1;243pkt 243fpkt"];
5873--7264[label="1;243pkt 243fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.77.134.47" src_port="1027"/>
    </slice>
    <from sec="1039669689" usec="0"/>
    <to sec="1039669733" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1227{
style=filled;
color=gray75;
3733[label="214.162.140.47;108pkt 108fpkt", shape=pentagon, color=darkviolet];
5874[label="214.162.140.47;108pkt 108fpkt", shape=invtriangle, color=brown];
stat1227[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.162.140.47:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3733--5874[label="1;108pkt 108fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.162.140.47" src_port="1027"/>
    </slice>
    <from sec="1039669347" usec="0"/>
    <to sec="1039669382" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1228{
style=filled;
color=gray75;
3736[label="61.140.245.47;154pkt 154fpkt", shape=pentagon, color=darkviolet];
5876[label="61.140.245.47;154pkt 154fpkt", shape=invtriangle, color=brown];
7266[label="61.140.245.47;155pkt 155fpkt", shape=invhouse, color=bisque];
stat1228[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.140.245.47:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3736--5876[label="1;154pkt 154fpkt"];
3736--7266[label="1;154pkt 154fpkt"];
5876--7266[label="1;154pkt 154fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="61.140.245.47" src_port="1027"/>
    </slice>
    <from sec="1039669454" usec="0"/>
    <to sec="1039669482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1229{
style=filled;
color=gray75;
3738[label="36.2.50.48;14pkt 14fpkt", shape=pentagon, color=darkviolet];
5877[label="36.2.50.48;15pkt 15fpkt", shape=invtriangle, color=brown];
7267[label="36.2.50.48;15pkt 15fpkt", shape=invhouse, color=bisque];
stat1229[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.2.50.48:80, 148.110.153.253:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2738: (3.40909%)&lt;BR/&gt; 2734: (3.40909%)&lt;BR/&gt; 2728: (3.40909%)&lt;BR/&gt; 2718: (3.40909%)&gt;];
}
3738--5877[label="1;14pkt 14fpkt"];
3738--7267[label="1;14pkt 14fpkt"];
5877--7267[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.153.253" src_ip="36.2.50.48" src_port="80"/>
    </slice>
    <from sec="1039669857" usec="0"/>
    <to sec="1039669876" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.112.54.48"/>
    </slice>
    <from sec="1039669207" usec="0"/>
    <to sec="1039669925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1231{
style=filled;
color=gray75;
3743[label="202.152.108.48;134pkt 134fpkt", shape=pentagon, color=darkviolet];
5881[label="202.152.108.48;133pkt 133fpkt", shape=invtriangle, color=brown];
stat1231[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.152.108.48:1038, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1038: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3743--5881[label="1;133pkt 133fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.152.108.48" src_port="1038"/>
    </slice>
    <from sec="1039669255" usec="0"/>
    <to sec="1039669294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1232{
style=filled;
color=gray75;
3747[label="202.155.218.48;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5883[label="202.155.218.48;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1232[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.155.218.48:5004, 215.90.72.42:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5004: (50%)&lt;BR/&gt; 2911: (9.09091%)&lt;BR/&gt; 2903: (9.09091%)&lt;BR/&gt; 2854: (9.09091%)&lt;BR/&gt; 2846: (9.09091%)&gt;];
}
3747--5883[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.72.42" src_ip="202.155.218.48" src_port="5004"/>
    </slice>
    <from sec="1039669321" usec="0"/>
    <to sec="1039669886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1233{
style=filled;
color=gray75;
3754[label="214.216.55.49;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5886[label="214.216.55.49;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1233[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.216.55.49:21, 192.123.75.27:2953}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2953: (50%)&lt;BR/&gt; 21: (50%)&gt;];
}
3754--5886[label="1;1pkt 1fpkt"];
3754--7272[label="1;1pkt 1fpkt"];
5886--7272[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.123.75.27" dst_port="2953" src_ip="214.216.55.49" src_port="21"/>
    </slice>
    <from sec="1039669203" usec="0"/>
    <to sec="1039669572" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.46.123.49"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1235{
style=filled;
color=gray75;
3757[label="211.90.158.49;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5888[label="211.90.158.49;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1235[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.90.158.49:1863, 172.93.97.70:2122}[20%]&lt;BR/&gt;{211.90.158.49:1863, 172.93.36.86:3204}[20%]&lt;BR/&gt;{211.90.158.49:1863, 172.93.36.100:1424}[20%]&lt;BR/&gt;{211.90.158.49:1863, 214.231.171.159:1607}[20%]&lt;BR/&gt;{211.90.158.49:1863, 138.186.48.233:1122}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3204: (11.1111%)&lt;BR/&gt; 1607: (11.1111%)&lt;BR/&gt; 1424: (11.1111%)&lt;BR/&gt; 1122: (11.1111%)&gt;];
}
3757--5888[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.48.233" dst_port="1122" src_ip="211.90.158.49" src_port="1863"/>
      <filter dst_ip="214.231.171.159" dst_port="1607" src_ip="211.90.158.49" src_port="1863"/>
      <filter dst_ip="172.93.36.100" dst_port="1424" src_ip="211.90.158.49" src_port="1863"/>
      <filter dst_ip="172.93.36.86" dst_port="3204" src_ip="211.90.158.49" src_port="1863"/>
      <filter dst_ip="172.93.97.70" dst_port="2122" src_ip="211.90.158.49" src_port="1863"/>
    </slice>
    <from sec="1039669204" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1236{
style=filled;
color=gray75;
3766[label="138.49.94.50;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5895[label="138.49.94.50;1pkt 1fpkt", shape=invtriangle, color=brown];
7277[label="138.49.94.50;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1236[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.49.94.50:22, 36.91.114.190:2042}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2042: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
3766--5895[label="1;1pkt 1fpkt"];
3766--7277[label="1;1pkt 1fpkt"];
5895--7277[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="36.91.114.190" dst_port="2042" src_ip="138.49.94.50" src_port="22"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1237{
style=filled;
color=gray75;
3775[label="192.58.24.52;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5901[label="192.58.24.52;1pkt 1fpkt", shape=invtriangle, color=brown];
7282[label="192.58.24.52;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1237[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.58.24.52:80, 215.87.67.142:2720}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2720: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3775--5901[label="1;1pkt 1fpkt"];
3775--7282[label="1;1pkt 1fpkt"];
5901--7282[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.87.67.142" dst_port="2720" src_ip="192.58.24.52" src_port="80"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790471,1.82041,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1238{
style=filled;
color=gray75;
143[label="211.218.100.52s;202pkt 202fpkt", shape=rectangle, color=red];
3777[label="211.218.100.52;239pkt 239fpkt", shape=pentagon, color=darkviolet];
5903[label="211.218.100.52;238pkt 238fpkt", shape=invtriangle, color=brown];
stat1238[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.218.100.52:1032, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1032: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
143--3777[label="1;202pkt 202fpkt"];
143--5903[label="1;202pkt 202fpkt"];
3777--5903[label="1;238pkt 238fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="211.218.100.52" src_port="1032"/>
    </slice>
    <from sec="1039669313" usec="0"/>
    <to sec="1039669350" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645838,1.80177,502,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1239{
style=filled;
color=gray75;
2355[label="169.126.137.52;s;3pkt 3fpkt", shape=diamond, color=yellow];
3778[label="169.126.137.52;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5904[label="169.126.137.52;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1239[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.126.137.52:0, 201.215.9.3:0}[25%]&lt;BR/&gt;{169.126.137.52:25, 38.106.101.76:60199}[25%]&lt;BR/&gt;{169.126.137.52:32941, 199.15.96.146:22}[25%]&lt;BR/&gt;{169.126.137.52:25, 36.161.205.194:1904}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (30%)&lt;BR/&gt; 0: (20%)&lt;BR/&gt; 60199: (15%)&lt;BR/&gt; 1904: (15%)&lt;BR/&gt; 32941: (10%)&gt;];
}
2355--3778[label="0.666667;2pkt 2fpkt"];
2355--5904[label="1;3pkt 3fpkt"];
3778--5904[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="36.161.205.194" dst_port="1904" src_ip="169.126.137.52" src_port="25"/>
      <filter dst_ip="199.15.96.146" dst_port="22" src_ip="169.126.137.52" src_port="32941"/>
      <filter dst_ip="38.106.101.76" dst_port="60199" src_ip="169.126.137.52" src_port="25"/>
      <filter dst_ip="201.215.9.3" src_ip="169.126.137.52"/>
    </slice>
    <from sec="1039669250" usec="0"/>
    <to sec="1039669903" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.53.166.52"/>
    </slice>
    <from sec="1039669510" usec="0"/>
    <to sec="1039669927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1241{
style=filled;
color=gray75;
3786[label="140.3.15.53;34pkt 34fpkt", shape=pentagon, color=darkviolet];
5910[label="140.3.15.53;34pkt 34fpkt", shape=invtriangle, color=brown];
stat1241[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.15.53:*, *:113}[32.3529%]&lt;BR/&gt;{140.3.15.53:25, *:*}[32.3529%]&lt;BR/&gt;{140.3.15.53:*, 217.226.174.243:*}[29.4118%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (25%)&lt;BR/&gt; 113: (16.1765%)&lt;BR/&gt; 53: (8.82353%)&lt;BR/&gt; 0: (2.94118%)&lt;BR/&gt; 48171: (1.47059%)&gt;];
}
3786--5910[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="217.226.174.243" src_ip="140.3.15.53"/>
      <filter src_ip="140.3.15.53" src_port="25"/>
      <filter dst_port="113" src_ip="140.3.15.53"/>
    </slice>
    <from sec="1039669220" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1242{
style=filled;
color=gray75;
3789[label="211.90.158.53;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5911[label="211.90.158.53;2pkt 2fpkt", shape=invtriangle, color=brown];
7285[label="211.90.158.53;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1242[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.90.158.53:1863, 140.3.243.152:1676}[50%]&lt;BR/&gt;{211.90.158.53:1863, 140.3.243.153:2277}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 2277: (25%)&lt;BR/&gt; 1676: (25%)&gt;];
}
3789--5911[label="1;2pkt 2fpkt"];
3789--7285[label="1;2pkt 2fpkt"];
5911--7285[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.243.153" dst_port="2277" src_ip="211.90.158.53" src_port="1863"/>
      <filter dst_ip="140.3.243.152" dst_port="1676" src_ip="211.90.158.53" src_port="1863"/>
    </slice>
    <from sec="1039669208" usec="0"/>
    <to sec="1039669927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1243{
style=filled;
color=gray75;
146[label="39.25.163.53s;46pkt 46fpkt", shape=rectangle, color=red];
3790[label="39.25.163.53;106pkt 106fpkt", shape=pentagon, color=darkviolet];
5912[label="39.25.163.53;107pkt 107fpkt", shape=invtriangle, color=brown];
7286[label="39.25.163.53;106pkt 106fpkt", shape=invhouse, color=bisque];
stat1243[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.25.163.53:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
146--3790[label="1;46pkt 46fpkt"];
146--5912[label="1;46pkt 46fpkt"];
146--7286[label="1;46pkt 46fpkt"];
3790--5912[label="1;106pkt 106fpkt"];
3790--7286[label="1;106pkt 106fpkt"];
5912--7286[label="1;106pkt 106fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="39.25.163.53" src_port="1030"/>
    </slice>
    <from sec="1039669241" usec="0"/>
    <to sec="1039669258" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1244{
style=filled;
color=gray75;
3791[label="140.3.210.53;19pkt 19fpkt", shape=pentagon, color=darkviolet];
5913[label="140.3.210.53;19pkt 19fpkt", shape=invtriangle, color=brown];
7287[label="140.3.210.53;20pkt 20fpkt", shape=invhouse, color=bisque];
stat1244[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.210.53:*, 209.163.196.162:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1668: (2.58621%)&lt;BR/&gt; 1666: (2.58621%)&lt;BR/&gt; 1665: (2.58621%)&lt;BR/&gt; 1663: (2.58621%)&gt;];
}
3791--5913[label="1;19pkt 19fpkt"];
3791--7287[label="1;19pkt 19fpkt"];
5913--7287[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="209.163.196.162" dst_port="80" src_ip="140.3.210.53"/>
    </slice>
    <from sec="1039669222" usec="0"/>
    <to sec="1039669824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19604,1.81002,503,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1245{
style=filled;
color=gray75;
365[label="196.22.137.188s;1pkt 1fpkt", shape=rectangle, color=red];
944[label="221.50.153.157;s;117pkt 117fpkt", shape=diamond, color=yellow];
1521[label="36.212.55.189;d;1pkt 1fpkt", shape=diamond, color=yellow];
1736[label="138.186.24.212;s;60pkt 60fpkt", shape=diamond, color=yellow];
2392[label="138.186.218.171;s;42pkt 42fpkt", shape=diamond, color=yellow];
2529[label="221.50.153.157;s;26pkt 26fpkt", shape=hexagon, color=black];
2617[label="215.87.86.234;s;27pkt 27fpkt", shape=hexagon, color=black];
2668[label="36.212.55.189;d;1pkt 1fpkt", shape=hexagon, color=black];
3501[label="138.186.52.23;21pkt 21fpkt", shape=pentagon, color=darkviolet];
4379[label="138.186.137.115;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4582[label="140.3.55.139;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4616[label="140.3.84.143;61pkt 61fpkt", shape=pentagon, color=darkviolet];
4743[label="221.50.153.157;129pkt 129fpkt", shape=pentagon, color=darkviolet];
5111[label="140.3.215.200;13pkt 13fpkt", shape=pentagon, color=darkviolet];
5808[label="138.186.52.37;8pkt 8fpkt", shape=invtriangle, color=brown];
5914[label="140.3.3.54;30pkt 30fpkt", shape=invtriangle, color=brown];
6292[label="138.186.137.115;5pkt 5fpkt", shape=invtriangle, color=brown];
6432[label="140.3.55.139;5pkt 5fpkt", shape=invtriangle, color=brown];
6450[label="140.3.84.143;61pkt 61fpkt", shape=invtriangle, color=brown];
6537[label="221.50.153.157;130pkt 130fpkt", shape=invtriangle, color=brown];
6773[label="140.3.215.200;13pkt 13fpkt", shape=invtriangle, color=brown];
7682[label="221.50.153.157;130pkt 130fpkt", shape=invhouse, color=bisque];
stat1245[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:80}[61.0422%]&lt;BR/&gt;{221.50.153.157:*, *:*}[32.2581%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (18.9675%)&lt;BR/&gt; 53: (17.5645%)&lt;BR/&gt; 25: (9.48373%)&lt;BR/&gt; 113: (7.68799%)&lt;BR/&gt; 0: (7.40741%)&gt;];
}
365--665[label="1;1pkt 1fpkt"];
365--722[label="1;1pkt 1fpkt"];
944--1303[label="0.0285714;1pkt 1fpkt"];
944--1521[label="1;1pkt 1fpkt"];
944--1883[label="0.0243902;1pkt 1fpkt"];
944--2529[label="1;26pkt 26fpkt"];
944--2668[label="1;1pkt 1fpkt"];
944--4743[label="0.991453;116pkt 116fpkt"];
944--6537[label="1;117pkt 117fpkt"];
944--7682[label="1;117pkt 117fpkt"];
1521--2529[label="1;1pkt 1fpkt"];
1521--2668[label="1;1pkt 1fpkt"];
1521--4743[label="1;1pkt 1fpkt"];
1521--6537[label="1;1pkt 1fpkt"];
1521--7682[label="1;1pkt 1fpkt"];
1736--1798[label="0.116667;7pkt 7fpkt"];
1736--1918[label="0.0666667;4pkt 4fpkt"];
1736--2065[label="0.0333333;2pkt 2fpkt"];
1736--2180[label="0.588235;10pkt 10fpkt"];
1736--2958[label="0.0666667;4pkt 4fpkt"];
1736--5208[label="1;59pkt 59fpkt"];
1736--6837[label="1;60pkt 60fpkt"];
1736--7880[label="1;60pkt 60fpkt"];
2392--3185[label="0.0714286;3pkt 3fpkt"];
2392--4875[label="1;41pkt 41fpkt"];
2392--6626[label="1;41pkt 41fpkt"];
2529--2668[label="1;1pkt 1fpkt"];
2529--4743[label="0.961538;25pkt 25fpkt"];
2529--6537[label="1;26pkt 26fpkt"];
2529--7682[label="1;26pkt 26fpkt"];
2617--5378[label="1;27pkt 27fpkt"];
2617--6944[label="1;27pkt 27fpkt"];
2668--4743[label="1;1pkt 1fpkt"];
2668--6537[label="1;1pkt 1fpkt"];
2668--7682[label="1;1pkt 1fpkt"];
3501--5726[label="1;21pkt 21fpkt"];
3501--7175[label="1;21pkt 21fpkt"];
4379--6292[label="1;5pkt 5fpkt"];
4379--7523[label="1;5pkt 5fpkt"];
4582--6432[label="1;5pkt 5fpkt"];
4616--6450[label="1;61pkt 61fpkt"];
4616--7626[label="1;60pkt 60fpkt"];
4743--6537[label="1;129pkt 129fpkt"];
4743--7682[label="1;129pkt 129fpkt"];
5111--6773[label="1;13pkt 13fpkt"];
5111--7835[label="1;13pkt 13fpkt"];
5808--7223[label="1;8pkt 8fpkt"];
5914--7288[label="1;29pkt 29fpkt"];
6292--7523[label="1;5pkt 5fpkt"];
6450--7626[label="1;60pkt 60fpkt"];
6537--7682[label="1;130pkt 130fpkt"];
6773--7835[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter src_ip="221.50.153.157"/>
      <filter dst_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1246{
style=filled;
color=gray75;
3814[label="38.3.106.56;16pkt 16fpkt", shape=pentagon, color=darkviolet];
5928[label="38.3.106.56;15pkt 15fpkt", shape=invtriangle, color=brown];
stat1246[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.3.106.56:80, 140.3.211.209:*}[75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.0968%)&lt;BR/&gt; 26596: (3.22581%)&lt;BR/&gt; 26590: (3.22581%)&lt;BR/&gt; 26588: (3.22581%)&lt;BR/&gt; 1607: (3.22581%)&gt;];
}
3814--5928[label="1;15pkt 15fpkt"];
3814--7300[label="1;15pkt 15fpkt"];
5928--7300[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.211.209" src_ip="38.3.106.56" src_port="80"/>
    </slice>
    <from sec="1039669754" usec="0"/>
    <to sec="1039669913" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1247{
style=filled;
color=gray75;
3798[label="214.216.51.54;55pkt 55fpkt", shape=pentagon, color=darkviolet];
5916[label="214.216.51.54;56pkt 56fpkt", shape=invtriangle, color=brown];
7290[label="214.216.51.54;55pkt 55fpkt", shape=invhouse, color=bisque];
stat1247[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.216.51.54:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3798--5916[label="1;55pkt 55fpkt"];
3798--7290[label="1;55pkt 55fpkt"];
5916--7290[label="1;55pkt 55fpkt"];
</description>
    <slice>
      <filter src_ip="214.216.51.54"/>
    </slice>
    <from sec="1039669209" usec="0"/>
    <to sec="1039669888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1248{
style=filled;
color=gray75;
3800[label="169.126.130.54;12pkt 12fpkt", shape=pentagon, color=darkviolet];
5917[label="169.126.130.54;12pkt 12fpkt", shape=invtriangle, color=brown];
7291[label="169.126.130.54;11pkt 11fpkt", shape=invhouse, color=bisque];
stat1248[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.126.130.54:53, 215.17.122.190:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (41.4286%)&lt;BR/&gt; 80: (8.57143%)&lt;BR/&gt; 64723: (4.28571%)&lt;BR/&gt; 57193: (4.28571%)&lt;BR/&gt; 35098: (4.28571%)&gt;];
}
3800--5917[label="1;12pkt 12fpkt"];
3800--7291[label="1;11pkt 11fpkt"];
5917--7291[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="215.17.122.190" src_ip="169.126.130.54" src_port="53"/>
    </slice>
    <from sec="1039669202" usec="0"/>
    <to sec="1039669908" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1249{
style=filled;
color=gray75;
3805[label="196.90.93.55;197pkt 197fpkt", shape=pentagon, color=darkviolet];
5921[label="196.90.93.55;196pkt 196fpkt", shape=invtriangle, color=brown];
stat1249[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.90.93.55:1034, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1034: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3805--5921[label="1;196pkt 196fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.90.93.55" src_port="1034"/>
    </slice>
    <from sec="1039669209" usec="0"/>
    <to sec="1039669244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1250{
style=filled;
color=gray75;
3806[label="96.20.145.55;135pkt 135fpkt", shape=pentagon, color=darkviolet];
5922[label="96.20.145.55;136pkt 136fpkt", shape=invtriangle, color=brown];
7294[label="96.20.145.55;135pkt 135fpkt", shape=invhouse, color=bisque];
stat1250[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.20.145.55:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3806--5922[label="1;135pkt 135fpkt"];
3806--7294[label="1;135pkt 135fpkt"];
5922--7294[label="1;135pkt 135fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.20.145.55" src_port="1028"/>
    </slice>
    <from sec="1039669273" usec="0"/>
    <to sec="1039669296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1251{
style=filled;
color=gray75;
3811[label="214.151.76.56;178pkt 178fpkt", shape=pentagon, color=darkviolet];
5925[label="214.151.76.56;179pkt 179fpkt", shape=invtriangle, color=brown];
7297[label="214.151.76.56;179pkt 179fpkt", shape=invhouse, color=bisque];
stat1251[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.151.76.56:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 18497: (0.279851%)&lt;BR/&gt; 18489: (0.279851%)&lt;BR/&gt; 18481: (0.279851%)&lt;BR/&gt; 18473: (0.279851%)&gt;];
}
3811--5925[label="1;178pkt 178fpkt"];
3811--7297[label="1;178pkt 178fpkt"];
5925--7297[label="1;179pkt 179fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.151.76.56"/>
    </slice>
    <from sec="1039669208" usec="0"/>
    <to sec="1039669247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1252{
style=filled;
color=gray75;
3812[label="197.64.95.56;155pkt 155fpkt", shape=pentagon, color=darkviolet];
5926[label="197.64.95.56;156pkt 156fpkt", shape=invtriangle, color=brown];
7298[label="197.64.95.56;155pkt 155fpkt", shape=invhouse, color=bisque];
stat1252[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.64.95.56:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3812--5926[label="1;155pkt 155fpkt"];
3812--7298[label="1;155pkt 155fpkt"];
5926--7298[label="1;155pkt 155fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.64.95.56" src_port="1029"/>
    </slice>
    <from sec="1039669370" usec="0"/>
    <to sec="1039669407" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1253{
style=filled;
color=gray75;
3813[label="197.95.104.56;107pkt 107fpkt", shape=pentagon, color=darkviolet];
5927[label="197.95.104.56;107pkt 107fpkt", shape=invtriangle, color=brown];
7299[label="197.95.104.56;107pkt 107fpkt", shape=invhouse, color=bisque];
stat1253[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.95.104.56:65369, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65369: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3813--5927[label="1;107pkt 107fpkt"];
3813--7299[label="1;107pkt 107fpkt"];
5927--7299[label="1;107pkt 107fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.95.104.56" src_port="65369"/>
    </slice>
    <from sec="1039669898" usec="0"/>
    <to sec="1039669922" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1254{
style=filled;
color=gray75;
3821[label="214.203.247.56;185pkt 185fpkt", shape=pentagon, color=darkviolet];
5933[label="214.203.247.56;185pkt 185fpkt", shape=invtriangle, color=brown];
stat1254[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.203.247.56:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3821--5933[label="1;185pkt 185fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.203.247.56" src_port="1026"/>
    </slice>
    <from sec="1039669478" usec="0"/>
    <to sec="1039669508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1255{
style=filled;
color=gray75;
3824[label="96.0.18.57;208pkt 208fpkt", shape=pentagon, color=darkviolet];
5934[label="96.0.18.57;208pkt 208fpkt", shape=invtriangle, color=brown];
stat1255[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.0.18.57:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3824--5934[label="1;208pkt 208fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.0.18.57" src_port="1025"/>
    </slice>
    <from sec="1039669298" usec="0"/>
    <to sec="1039669341" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1256{
style=filled;
color=gray75;
3826[label="96.210.73.57;101pkt 101fpkt", shape=pentagon, color=darkviolet];
5936[label="96.210.73.57;101pkt 101fpkt", shape=invtriangle, color=brown];
7302[label="96.210.73.57;102pkt 102fpkt", shape=invhouse, color=bisque];
stat1256[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.210.73.57:1046, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1046: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3826--5936[label="1;101pkt 101fpkt"];
3826--7302[label="1;101pkt 101fpkt"];
5936--7302[label="1;101pkt 101fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.210.73.57" src_port="1046"/>
    </slice>
    <from sec="1039669339" usec="0"/>
    <to sec="1039669365" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.153.133.57"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="128.61.212.58"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1259{
style=filled;
color=gray75;
3843[label="197.1.225.58;156pkt 156fpkt", shape=pentagon, color=darkviolet];
5944[label="197.1.225.58;156pkt 156fpkt", shape=invtriangle, color=brown];
7309[label="197.1.225.58;157pkt 157fpkt", shape=invhouse, color=bisque];
stat1259[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.1.225.58:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3843--5944[label="1;156pkt 156fpkt"];
3843--7309[label="1;156pkt 156fpkt"];
5944--7309[label="1;156pkt 156fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.1.225.58" src_port="1025"/>
    </slice>
    <from sec="1039669410" usec="0"/>
    <to sec="1039669434" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790471,1.82041,999,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1260{
style=filled;
color=gray75;
151[label="209.187.15.59s;1pkt 1fpkt", shape=rectangle, color=red];
3845[label="197.173.7.59;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5945[label="197.173.7.59;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1260[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.173.7.59:1214, 138.165.39.172:1578}[20%]&lt;BR/&gt;{197.173.7.59:1214, 138.165.39.172:1606}[20%]&lt;BR/&gt;{197.173.7.59:1214, 138.165.39.172:1656}[20%]&lt;BR/&gt;{197.173.7.59:1214, 138.165.39.172:1670}[20%]&lt;BR/&gt;{197.173.7.59:1214, 138.165.39.172:1709}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 1656: (15%)&lt;BR/&gt; 1709: (10%)&lt;BR/&gt; 1670: (10%)&lt;BR/&gt; 1606: (10%)&gt;];
}
151--3845[label="1;1pkt 1fpkt"];
151--5945[label="1;1pkt 1fpkt"];
3845--5945[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="138.165.39.172" dst_port="1709" src_ip="197.173.7.59" src_port="1214"/>
      <filter dst_ip="138.165.39.172" dst_port="1670" src_ip="197.173.7.59" src_port="1214"/>
      <filter dst_ip="138.165.39.172" dst_port="1656" src_ip="197.173.7.59" src_port="1214"/>
      <filter dst_ip="138.165.39.172" dst_port="1606" src_ip="197.173.7.59" src_port="1214"/>
      <filter dst_ip="138.165.39.172" dst_port="1578" src_ip="197.173.7.59" src_port="1214"/>
    </slice>
    <from sec="1039669203" usec="0"/>
    <to sec="1039669918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,002,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="10.10.40.59"/>
    </slice>
    <from sec="1039669239" usec="0"/>
    <to sec="1039669909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1262{
style=filled;
color=gray75;
3849[label="96.45.47.59;132pkt 132fpkt", shape=pentagon, color=darkviolet];
5947[label="96.45.47.59;132pkt 132fpkt", shape=invtriangle, color=brown];
7311[label="96.45.47.59;133pkt 133fpkt", shape=invhouse, color=bisque];
stat1262[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.45.47.59:62869, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62869: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3849--5947[label="1;132pkt 132fpkt"];
3849--7311[label="1;132pkt 132fpkt"];
5947--7311[label="1;132pkt 132fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.45.47.59" src_port="62869"/>
    </slice>
    <from sec="1039669406" usec="0"/>
    <to sec="1039669427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1263{
style=filled;
color=gray75;
3850[label="202.65.74.59;201pkt 201fpkt", shape=pentagon, color=darkviolet];
5948[label="202.65.74.59;201pkt 201fpkt", shape=invtriangle, color=brown];
7312[label="202.65.74.59;201pkt 201fpkt", shape=invhouse, color=bisque];
stat1263[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.65.74.59:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3850--5948[label="1;201pkt 201fpkt"];
3850--7312[label="1;201pkt 201fpkt"];
5948--7312[label="1;201pkt 201fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.65.74.59" src_port="1027"/>
    </slice>
    <from sec="1039669439" usec="0"/>
    <to sec="1039669474" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1264{
style=filled;
color=gray75;
751[label="148.110.147.12;d;141pkt 141fpkt", shape=diamond, color=yellow];
1084[label="96.40.74.183;s;1pkt 1fpkt", shape=diamond, color=yellow];
2382[label="96.5.76.251;s;37pkt 37fpkt", shape=diamond, color=yellow];
3856[label="96.160.25.60;31pkt 31fpkt", shape=pentagon, color=darkviolet];
5951[label="96.160.25.60;30pkt 30fpkt", shape=invtriangle, color=brown];
7314[label="96.160.25.60;31pkt 31fpkt", shape=invhouse, color=bisque];
stat1264[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 148.110.147.12:4040}[77.0186%]&lt;BR/&gt;{*:4040, 148.110.147.12:*}[30.4348%]&lt;BR/&gt;{96.5.76.251:*, 148.110.147.12:*}[22.9814%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4040: (52.3985%)&lt;BR/&gt; 45459: (0.738007%)&lt;BR/&gt; 45458: (0.738007%)&lt;BR/&gt; 45457: (0.738007%)&lt;BR/&gt; 45456: (0.738007%)&gt;];
}
751--1084[label="1;1pkt 1fpkt"];
751--1655[label="1;2pkt 2fpkt"];
751--1728[label="0.809524;17pkt 17fpkt"];
751--2382[label="0.675676;25pkt 25fpkt"];
751--2840[label="0.809524;17pkt 17fpkt"];
751--3856[label="0.741935;23pkt 23fpkt"];
751--3960[label="0.8;16pkt 16fpkt"];
751--4182[label="1;1pkt 1fpkt"];
751--5951[label="0.733333;22pkt 22fpkt"];
751--6162[label="1;1pkt 1fpkt"];
751--7314[label="0.741935;23pkt 23fpkt"];
751--7450[label="1;1pkt 1fpkt"];
3856--5951[label="1;30pkt 30fpkt"];
3856--7314[label="1;31pkt 31fpkt"];
5951--7314[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.147.12" src_ip="96.5.76.251"/>
      <filter dst_ip="148.110.147.12" src_port="4040"/>
      <filter dst_ip="148.110.147.12" dst_port="4040"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1265{
style=filled;
color=gray75;
1217[label="38.64.39.60;s;21pkt 21fpkt", shape=diamond, color=yellow];
1218[label="140.3.244.32;d;25pkt 25fpkt", shape=diamond, color=yellow];
3751[label="38.64.48.49;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3857[label="38.64.39.60;26pkt 26fpkt", shape=pentagon, color=darkviolet];
5885[label="38.64.48.49;2pkt 2fpkt", shape=invtriangle, color=brown];
5952[label="38.64.39.60;26pkt 26fpkt", shape=invtriangle, color=brown];
7271[label="38.64.48.49;2pkt 2fpkt", shape=invhouse, color=bisque];
7315[label="38.64.39.60;26pkt 26fpkt", shape=invhouse, color=bisque];
stat1265[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.64.39.60:80, 215.160.138.182:*}[37.5%]&lt;BR/&gt;{38.64.39.60:80, 140.3.244.32:*}[30%]&lt;BR/&gt;{200.251.84.146:80, 140.3.244.32:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1926: (1.93798%)&lt;BR/&gt; 1925: (1.93798%)&lt;BR/&gt; 1924: (1.93798%)&lt;BR/&gt; 1923: (1.93798%)&gt;];
}
1217--1218[label="0.571429;12pkt 12fpkt"];
1217--3857[label="0.952381;20pkt 20fpkt"];
1217--5952[label="0.952381;20pkt 20fpkt"];
1217--7315[label="0.952381;20pkt 20fpkt"];
1218--1996[label="1;1pkt 1fpkt"];
1218--2983[label="1;1pkt 1fpkt"];
1218--3751[label="1;1pkt 1fpkt"];
1218--3857[label="0.48;12pkt 12fpkt"];
1218--5885[label="1;2pkt 2fpkt"];
1218--5952[label="0.48;12pkt 12fpkt"];
1218--7271[label="1;2pkt 2fpkt"];
1218--7315[label="0.48;12pkt 12fpkt"];
3751--5885[label="1;1pkt 1fpkt"];
3751--7271[label="1;1pkt 1fpkt"];
3857--5952[label="1;26pkt 26fpkt"];
3857--7315[label="1;26pkt 26fpkt"];
5885--7271[label="1;2pkt 2fpkt"];
5952--7315[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.244.32" src_ip="38.64.39.60" src_port="80"/>
      <filter dst_ip="215.160.138.182" src_ip="38.64.39.60" src_port="80"/>
      <filter dst_ip="140.3.244.32" src_ip="200.251.84.146" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1266{
style=filled;
color=gray75;
3859[label="175.174.71.60;12pkt 12fpkt", shape=pentagon, color=darkviolet];
5953[label="175.174.71.60;12pkt 12fpkt", shape=invtriangle, color=brown];
7316[label="175.174.71.60;12pkt 12fpkt", shape=invhouse, color=bisque];
stat1266[shape=component, label=&lt;Rules:&lt;BR/&gt;{175.174.71.60:*, 138.186.216.28:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1182: (4.16667%)&lt;BR/&gt; 1180: (4.16667%)&lt;BR/&gt; 1179: (4.16667%)&lt;BR/&gt; 1178: (4.16667%)&gt;];
}
3859--5953[label="1;12pkt 12fpkt"];
3859--7316[label="1;12pkt 12fpkt"];
5953--7316[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.216.28" dst_port="80" src_ip="175.174.71.60"/>
    </slice>
    <from sec="1039669270" usec="0"/>
    <to sec="1039669473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1267{
style=filled;
color=gray75;
3860[label="215.220.91.60;37pkt 37fpkt", shape=pentagon, color=darkviolet];
5954[label="215.220.91.60;36pkt 36fpkt", shape=invtriangle, color=brown];
7317[label="215.220.91.60;37pkt 37fpkt", shape=invhouse, color=bisque];
stat1267[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.220.91.60:*, 215.90.64.230:80}[43.2432%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4743: (1.36364%)&lt;BR/&gt; 4733: (1.36364%)&lt;BR/&gt; 4711: (1.36364%)&lt;BR/&gt; 4648: (1.36364%)&gt;];
}
3860--5954[label="1;36pkt 36fpkt"];
3860--7317[label="1;37pkt 37fpkt"];
5954--7317[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.64.230" dst_port="80" src_ip="215.220.91.60"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="64.212.111.60"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669600" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1269{
style=filled;
color=gray75;
3867[label="196.160.98.61;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5958[label="196.160.98.61;3pkt 3fpkt", shape=invtriangle, color=brown];
7318[label="196.160.98.61;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1269[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.160.98.61:34606, 138.186.218.87:1149}[25%]&lt;BR/&gt;{196.160.98.61:34607, 138.186.218.87:1150}[25%]&lt;BR/&gt;{196.160.98.61:21, 138.186.218.87:1147}[25%]&lt;BR/&gt;{196.160.98.61:21, 138.186.218.87:1148}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (27.2727%)&lt;BR/&gt; 34607: (13.6364%)&lt;BR/&gt; 1150: (13.6364%)&lt;BR/&gt; 1148: (13.6364%)&lt;BR/&gt; 1147: (13.6364%)&gt;];
}
3867--5958[label="1;3pkt 3fpkt"];
3867--7318[label="1;4pkt 4fpkt"];
5958--7318[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.218.87" dst_port="1148" src_ip="196.160.98.61" src_port="21"/>
      <filter dst_ip="138.186.218.87" dst_port="1147" src_ip="196.160.98.61" src_port="21"/>
      <filter dst_ip="138.186.218.87" dst_port="1150" src_ip="196.160.98.61" src_port="34607"/>
      <filter dst_ip="138.186.218.87" dst_port="1149" src_ip="196.160.98.61" src_port="34606"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1270{
style=filled;
color=gray75;
1091[label="215.160.138.182;d;129pkt 129fpkt", shape=diamond, color=yellow];
2183[label="198.24.133.61;s;76pkt 76fpkt", shape=diamond, color=yellow];
2974[label="198.24.133.61;s;61pkt 61fpkt", shape=hexagon, color=black];
3868[label="198.24.133.61;194pkt 194fpkt", shape=pentagon, color=darkviolet];
4992[label="215.70.95.184;114pkt 114fpkt", shape=pentagon, color=darkviolet];
5959[label="198.24.133.61;193pkt 193fpkt", shape=invtriangle, color=brown];
7319[label="198.24.133.61;194pkt 194fpkt", shape=invhouse, color=bisque];
stat1270[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.24.133.61:80, *:*}[47.7723%]&lt;BR/&gt;{*:80, 215.160.138.182:*}[31.9307%]&lt;BR/&gt;{215.70.95.184:80, *:*}[28.2178%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7399%)&lt;BR/&gt; 0: (0.520291%)&lt;BR/&gt; 42579: (0.312175%)&lt;BR/&gt; 42574: (0.312175%)&lt;BR/&gt; 42564: (0.312175%)&gt;];
}
1091--1095[label="0.0232558;3pkt 3fpkt"];
1091--1217[label="0.428571;9pkt 9fpkt"];
1091--1287[label="0.0105263;1pkt 1fpkt"];
1091--1499[label="0.0310078;4pkt 4fpkt"];
1091--1539[label="0.00862069;1pkt 1fpkt"];
1091--1549[label="0.0116279;1pkt 1fpkt"];
1091--1656[label="0.0155039;2pkt 2fpkt"];
1091--1693[label="0.175439;20pkt 20fpkt"];
1091--2099[label="0.0147059;1pkt 1fpkt"];
1091--2100[label="0.03125;2pkt 2fpkt"];
1091--2183[label="0.0394737;3pkt 3fpkt"];
1091--2298[label="0.0178571;1pkt 1fpkt"];
1091--2339[label="0.02;1pkt 1fpkt"];
1091--2484[label="0.010989;1pkt 1fpkt"];
1091--2677[label="0.00775194;1pkt 1fpkt"];
1091--2681[label="0.0140845;1pkt 1fpkt"];
1091--2748[label="0.0310078;4pkt 4fpkt"];
1091--2750[label="0.0387597;5pkt 5fpkt"];
1091--2780[label="0.0155039;2pkt 2fpkt"];
1091--2882[label="0.0155039;2pkt 2fpkt"];
1091--2892[label="0.00900901;1pkt 1fpkt"];
1091--2934[label="0.0232558;3pkt 3fpkt"];
1091--2974[label="0.0491803;3pkt 3fpkt"];
1091--3333[label="0.0387597;5pkt 5fpkt"];
1091--3354[label="0.0310078;4pkt 4fpkt"];
1091--3429[label="0.176471;6pkt 6fpkt"];
1091--3520[label="0.0285714;2pkt 2fpkt"];
1091--3639[label="0.0172414;1pkt 1fpkt"];
1091--3748[label="0.0155039;2pkt 2fpkt"];
1091--3792[label="0.0123457;1pkt 1fpkt"];
1091--3857[label="0.384615;10pkt 10fpkt"];
1091--3868[label="0.100775;13pkt 13fpkt"];
1091--3902[label="0.06;3pkt 3fpkt"];
1091--4249[label="0.0175439;1pkt 1fpkt"];
1091--4825[label="0.0540541;2pkt 2fpkt"];
1091--4839[label="0.00775194;1pkt 1fpkt"];
1091--4992[label="0.175439;20pkt 20fpkt"];
1091--5283[label="0.00775194;1pkt 1fpkt"];
1091--5300[label="0.0714286;3pkt 3fpkt"];
1091--5496[label="0.0322581;1pkt 1fpkt"];
1091--5507[label="0.0322581;1pkt 1fpkt"];
1091--5631[label="0.0310078;4pkt 4fpkt"];
1091--5678[label="0.181818;6pkt 6fpkt"];
1091--5952[label="0.384615;10pkt 10fpkt"];
1091--5959[label="0.100775;13pkt 13fpkt"];
1091--5981[label="0.06;3pkt 3fpkt"];
1091--6207[label="0.0175439;1pkt 1fpkt"];
1091--6597[label="0.00775194;1pkt 1fpkt"];
1091--7114[label="0.0310078;4pkt 4fpkt"];
1091--7140[label="0.176471;6pkt 6fpkt"];
1091--7315[label="0.384615;10pkt 10fpkt"];
1091--7319[label="0.100775;13pkt 13fpkt"];
2183--2505[label="0.131579;10pkt 10fpkt"];
2183--2974[label="1;61pkt 61fpkt"];
2183--3868[label="1;76pkt 76fpkt"];
2183--5959[label="1;76pkt 76fpkt"];
2183--7319[label="1;76pkt 76fpkt"];
2974--3868[label="1;61pkt 61fpkt"];
2974--5959[label="1;61pkt 61fpkt"];
2974--7319[label="1;61pkt 61fpkt"];
3868--5959[label="1;193pkt 193fpkt"];
3868--7319[label="1;194pkt 194fpkt"];
5959--7319[label="1;193pkt 193fpkt"];
</description>
    <slice>
      <filter src_ip="198.24.133.61" src_port="80"/>
      <filter src_ip="215.70.95.184" src_port="80"/>
      <filter dst_ip="215.160.138.182" src_port="80"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669915" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.87.75.63"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="64.188.184.63"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1273{
style=filled;
color=gray75;
3885[label="214.216.54.64;25pkt 25fpkt", shape=pentagon, color=darkviolet];
5967[label="214.216.54.64;24pkt 24fpkt", shape=invtriangle, color=brown];
stat1273[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.216.54.64:*, 221.12.94.16:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4937: (2.04082%)&lt;BR/&gt; 4936: (2.04082%)&lt;BR/&gt; 4935: (2.04082%)&lt;BR/&gt; 4934: (2.04082%)&gt;];
}
3885--5967[label="1;24pkt 24fpkt"];
3885--7327[label="1;25pkt 25fpkt"];
5967--7327[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="221.12.94.16" dst_port="80" src_ip="214.216.54.64"/>
    </slice>
    <from sec="1039669318" usec="0"/>
    <to sec="1039669554" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1274{
style=filled;
color=gray75;
3887[label="202.76.81.64;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5968[label="202.76.81.64;6pkt 6fpkt", shape=invtriangle, color=brown];
7328[label="202.76.81.64;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1274[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.76.81.64:80, 215.90.155.102:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1605: (7.89474%)&lt;BR/&gt; 1604: (7.89474%)&lt;BR/&gt; 1496: (7.89474%)&lt;BR/&gt; 1462: (7.89474%)&gt;];
}
3887--5968[label="1;6pkt 6fpkt"];
3887--7328[label="1;6pkt 6fpkt"];
5968--7328[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.155.102" src_ip="202.76.81.64" src_port="80"/>
    </slice>
    <from sec="1039669861" usec="0"/>
    <to sec="1039669923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="39.24.111.64"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="140.3.129.64"/>
    </slice>
    <from sec="1039669390" usec="0"/>
    <to sec="1039669587" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1277{
style=filled;
color=gray75;
3890[label="33.151.156.64;200pkt 200fpkt", shape=pentagon, color=darkviolet];
5971[label="33.151.156.64;199pkt 199fpkt", shape=invtriangle, color=brown];
stat1277[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.151.156.64:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3890--5971[label="1;199pkt 199fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="33.151.156.64" src_port="1026"/>
    </slice>
    <from sec="1039669256" usec="0"/>
    <to sec="1039669287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1278{
style=filled;
color=gray75;
3894[label="140.3.211.64;52pkt 52fpkt", shape=pentagon, color=darkviolet];
5974[label="140.3.211.64;52pkt 52fpkt", shape=invtriangle, color=brown];
7332[label="140.3.211.64;53pkt 53fpkt", shape=invhouse, color=bisque];
stat1278[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.211.64:*, 98.148.91.74:80}[84.9057%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1197: (0.955414%)&lt;BR/&gt; 1196: (0.955414%)&lt;BR/&gt; 1195: (0.955414%)&lt;BR/&gt; 1194: (0.955414%)&gt;];
}
3894--5974[label="1;52pkt 52fpkt"];
3894--7332[label="1;52pkt 52fpkt"];
5974--7332[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter dst_ip="98.148.91.74" dst_port="80" src_ip="140.3.211.64"/>
    </slice>
    <from sec="1039669841" usec="0"/>
    <to sec="1039669905" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1279{
style=filled;
color=gray75;
3895[label="138.186.218.64;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5975[label="138.186.218.64;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1279[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.218.64:80, 64.145.144.183:4895}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4895: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3895--5975[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="64.145.144.183" dst_port="4895" src_ip="138.186.218.64" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1280{
style=filled;
color=gray75;
3898[label="33.97.20.65;110pkt 110fpkt", shape=pentagon, color=darkviolet];
5978[label="33.97.20.65;109pkt 109fpkt", shape=invtriangle, color=brown];
7334[label="33.97.20.65;110pkt 110fpkt", shape=invhouse, color=bisque];
stat1280[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.97.20.65:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3898--5978[label="1;109pkt 109fpkt"];
3898--7334[label="1;110pkt 110fpkt"];
5978--7334[label="1;109pkt 109fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="33.97.20.65" src_port="1029"/>
    </slice>
    <from sec="1039669837" usec="0"/>
    <to sec="1039669855" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1281{
style=filled;
color=gray75;
3900[label="211.90.98.65;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5979[label="211.90.98.65;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1281[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.90.98.65:80, 140.3.133.37:56350}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56350: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3900--5979[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.133.37" dst_port="56350" src_ip="211.90.98.65" src_port="80"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="64.196.181.65"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1283{
style=filled;
color=gray75;
3908[label="140.3.209.65;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5986[label="140.3.209.65;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1283[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.209.65:1502, 211.217.180.96:80}[33.3333%]&lt;BR/&gt;{140.3.209.65:1530, 211.217.180.177:80}[33.3333%]&lt;BR/&gt;{140.3.209.65:1531, 211.217.180.177:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1531: (20%)&lt;BR/&gt; 1530: (20%)&lt;BR/&gt; 1502: (10%)&gt;];
}
3908--5986[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="211.217.180.177" dst_port="80" src_ip="140.3.209.65" src_port="1531"/>
      <filter dst_ip="211.217.180.177" dst_port="80" src_ip="140.3.209.65" src_port="1530"/>
      <filter dst_ip="211.217.180.96" dst_port="80" src_ip="140.3.209.65" src_port="1502"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1284{
style=filled;
color=gray75;
3910[label="201.35.222.65;230pkt 230fpkt", shape=pentagon, color=darkviolet];
5988[label="201.35.222.65;230pkt 230fpkt", shape=invtriangle, color=brown];
stat1284[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.35.222.65:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3910--5988[label="1;230pkt 230fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.35.222.65" src_port="1027"/>
    </slice>
    <from sec="1039669267" usec="0"/>
    <to sec="1039669303" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.842395,1.84899,503,0 0 0 1 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_1285{
style=filled;
color=gray75;
1696[label="216.209.40.40;d;112pkt 112fpkt", shape=diamond, color=yellow];
2391[label="140.3.22.66;s;59pkt 59fpkt", shape=diamond, color=yellow];
5991[label="140.3.22.66;76pkt 76fpkt", shape=invtriangle, color=brown];
7339[label="140.3.22.66;76pkt 76fpkt", shape=invhouse, color=bisque];
stat1285[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.84.143:*, 216.209.40.40:80}[32.0513%]&lt;BR/&gt;{140.3.22.66:*, 216.209.40.40:80}[20.5128%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5356%)&lt;BR/&gt; 14157: (0.619195%)&lt;BR/&gt; 14156: (0.619195%)&lt;BR/&gt; 14155: (0.619195%)&lt;BR/&gt; 14154: (0.619195%)&gt;];
}
1696--2091[label="0.375;21pkt 21fpkt"];
1696--2391[label="0.355932;21pkt 21fpkt"];
1696--3104[label="0.344828;20pkt 20fpkt"];
1696--3914[label="0.413333;31pkt 31fpkt"];
1696--4616[label="0.819672;50pkt 50fpkt"];
1696--5991[label="0.421053;32pkt 32fpkt"];
1696--6092[label="0.5;1pkt 1fpkt"];
1696--6450[label="0.819672;50pkt 50fpkt"];
1696--7339[label="0.421053;32pkt 32fpkt"];
1696--7626[label="0.816667;49pkt 49fpkt"];
2391--3104[label="1;58pkt 58fpkt"];
2391--3185[label="0.0508475;3pkt 3fpkt"];
2391--3914[label="0.983051;58pkt 58fpkt"];
2391--5991[label="1;59pkt 59fpkt"];
2391--7339[label="1;59pkt 59fpkt"];
5991--7339[label="1;76pkt 76fpkt"];
</description>
    <slice>
      <filter dst_ip="216.209.40.40" dst_port="80" src_ip="140.3.22.66"/>
      <filter dst_ip="216.209.40.40" dst_port="80" src_ip="140.3.84.143"/>
    </slice>
    <from sec="1039669232" usec="0"/>
    <to sec="1039669917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1286{
style=filled;
color=gray75;
3915[label="211.102.28.66;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5992[label="211.102.28.66;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1286[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.102.28.66:1028, 215.150.155.84:137}[33.3333%]&lt;BR/&gt;{211.102.28.66:1028, 215.150.155.85:137}[33.3333%]&lt;BR/&gt;{211.102.28.66:1028, 215.150.155.87:137}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3915--5992[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.150.155.87" dst_port="137" src_ip="211.102.28.66" src_port="1028"/>
      <filter dst_ip="215.150.155.85" dst_port="137" src_ip="211.102.28.66" src_port="1028"/>
      <filter dst_ip="215.150.155.84" dst_port="137" src_ip="211.102.28.66" src_port="1028"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.220.29.66"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1288{
style=filled;
color=gray75;
763[label="39.111.168.180;s;7pkt 7fpkt", shape=diamond, color=yellow];
1129[label="138.186.48.64;d;6pkt 6fpkt", shape=diamond, color=yellow];
2360[label="36.2.37.203;s;8pkt 8fpkt", shape=diamond, color=yellow];
stat1288[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.111.168.180:80, 138.186.48.64:*}[31.25%]&lt;BR/&gt;{36.2.37.203:80, 215.87.67.219:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.619%)&lt;BR/&gt; 1174: (4.7619%)&lt;BR/&gt; 1169: (4.7619%)&lt;BR/&gt; 1168: (4.7619%)&lt;BR/&gt; 1165: (4.7619%)&gt;];
}
763--774[label="0.142857;1pkt 1fpkt"];
763--1129[label="0.833333;5pkt 5fpkt"];
763--2817[label="0.142857;1pkt 1fpkt"];
2360--2817[label="0.125;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.87.67.219" src_ip="36.2.37.203" src_port="80"/>
      <filter dst_ip="138.186.48.64" src_ip="39.111.168.180" src_port="80"/>
    </slice>
    <from sec="1039669202" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1289{
style=filled;
color=gray75;
3923[label="140.3.201.66;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5998[label="140.3.201.66;2pkt 2fpkt", shape=invtriangle, color=brown];
7343[label="140.3.201.66;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1289[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.201.66:1620, 216.183.154.13:80}[50%]&lt;BR/&gt;{140.3.201.66:1609, 201.160.124.159:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1620: (37.5%)&lt;BR/&gt; 1609: (12.5%)&gt;];
}
3923--5998[label="1;1pkt 1fpkt"];
3923--7343[label="1;1pkt 1fpkt"];
5998--7343[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.160.124.159" dst_port="80" src_ip="140.3.201.66" src_port="1609"/>
      <filter dst_ip="216.183.154.13" dst_port="80" src_ip="140.3.201.66" src_port="1620"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.201.217.66"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1291{
style=filled;
color=gray75;
3929[label="200.144.83.67;238pkt 238fpkt", shape=pentagon, color=darkviolet];
6002[label="200.144.83.67;238pkt 238fpkt", shape=invtriangle, color=brown];
7347[label="200.144.83.67;239pkt 239fpkt", shape=invhouse, color=bisque];
stat1291[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.144.83.67:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3929--6002[label="1;238pkt 238fpkt"];
3929--7347[label="1;238pkt 238fpkt"];
6002--7347[label="1;238pkt 238fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.144.83.67" src_port="1026"/>
    </slice>
    <from sec="1039669545" usec="0"/>
    <to sec="1039669583" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1292{
style=filled;
color=gray75;
3933[label="197.68.151.67;149pkt 149fpkt", shape=pentagon, color=darkviolet];
6005[label="197.68.151.67;150pkt 150fpkt", shape=invtriangle, color=brown];
stat1292[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.68.151.67:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3933--6005[label="1;149pkt 149fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.68.151.67" src_port="1027"/>
    </slice>
    <from sec="1039669577" usec="0"/>
    <to sec="1039669621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1293{
style=filled;
color=gray75;
1999[label="140.3.210.67;s;71pkt 71fpkt", shape=diamond, color=yellow];
3935[label="140.3.210.67;71pkt 71fpkt", shape=pentagon, color=darkviolet];
6007[label="140.3.210.67;71pkt 71fpkt", shape=invtriangle, color=brown];
7349[label="140.3.210.67;72pkt 72fpkt", shape=invhouse, color=bisque];
stat1293[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.210.67:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1786: (0.701754%)&lt;BR/&gt; 1783: (0.701754%)&lt;BR/&gt; 1782: (0.701754%)&lt;BR/&gt; 1781: (0.701754%)&gt;];
}
1999--2396[label="0.285714;4pkt 4fpkt"];
1999--3935[label="0.985915;70pkt 70fpkt"];
1999--6007[label="0.985915;70pkt 70fpkt"];
1999--7349[label="1;71pkt 71fpkt"];
3935--6007[label="1;71pkt 71fpkt"];
3935--7349[label="1;71pkt 71fpkt"];
6007--7349[label="1;71pkt 71fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="140.3.210.67"/>
    </slice>
    <from sec="1039669560" usec="0"/>
    <to sec="1039669856" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_1294{
style=filled;
color=gray75;
6009[label="140.3.243.67;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1294[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.243.67:1805, 211.196.4.31:80}[50%]&lt;BR/&gt;{140.3.243.67:1871, 211.196.4.31:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1871: (25%)&lt;BR/&gt; 1805: (25%)&gt;];
}
6009--7351[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.196.4.31" dst_port="80" src_ip="140.3.243.67" src_port="1871"/>
      <filter dst_ip="211.196.4.31" dst_port="80" src_ip="140.3.243.67" src_port="1805"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1295{
style=filled;
color=gray75;
3938[label="175.152.6.68;146pkt 146fpkt", shape=pentagon, color=darkviolet];
6010[label="175.152.6.68;147pkt 147fpkt", shape=invtriangle, color=brown];
stat1295[shape=component, label=&lt;Rules:&lt;BR/&gt;{175.152.6.68:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3938--6010[label="1;146pkt 146fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="175.152.6.68" src_port="1025"/>
    </slice>
    <from sec="1039669343" usec="0"/>
    <to sec="1039669366" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1296{
style=filled;
color=gray75;
3940[label="196.187.60.68;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6012[label="196.187.60.68;8pkt 8fpkt", shape=invtriangle, color=brown];
stat1296[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.187.60.68:*, 138.186.1.231:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60236: (6.66667%)&lt;BR/&gt; 60225: (6.66667%)&lt;BR/&gt; 60216: (6.66667%)&lt;BR/&gt; 60210: (6.66667%)&gt;];
}
3940--6012[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.1.231" dst_port="80" src_ip="196.187.60.68"/>
    </slice>
    <from sec="1039669504" usec="0"/>
    <to sec="1039669815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.111.92.69"/>
    </slice>
    <from sec="1039669216" usec="0"/>
    <to sec="1039669916" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1298{
style=filled;
color=gray75;
3950[label="169.126.129.69;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6019[label="169.126.129.69;1pkt 1fpkt", shape=invtriangle, color=brown];
7356[label="169.126.129.69;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1298[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.126.129.69:1186, 208.166.60.41:20}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1186: (50%)&lt;BR/&gt; 20: (50%)&gt;];
}
3950--6019[label="1;1pkt 1fpkt"];
3950--7356[label="1;1pkt 1fpkt"];
6019--7356[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.166.60.41" dst_port="20" src_ip="169.126.129.69" src_port="1186"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1299{
style=filled;
color=gray75;
3952[label="201.37.197.69;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6020[label="201.37.197.69;1pkt 1fpkt", shape=invtriangle, color=brown];
7357[label="201.37.197.69;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1299[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.37.197.69:80, 215.87.64.183:31409}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 31409: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3952--6020[label="1;1pkt 1fpkt"];
3952--7357[label="1;1pkt 1fpkt"];
6020--7357[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.87.64.183" dst_port="31409" src_ip="201.37.197.69" src_port="80"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1300{
style=filled;
color=gray75;
2030[label="98.176.155.193;d;2pkt 2fpkt", shape=diamond, color=yellow];
2031[label="138.186.218.69;s;3pkt 3fpkt", shape=diamond, color=yellow];
3955[label="138.186.218.69;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6022[label="138.186.218.69;1pkt 1fpkt", shape=invtriangle, color=brown];
7359[label="138.186.218.69;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1300[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.218.69:1029, 211.90.155.246:1863}[33.3333%]&lt;BR/&gt;{138.186.218.69:1345, 98.176.155.193:554}[33.3333%]&lt;BR/&gt;{138.186.218.69:6970, 98.176.155.193:8758}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8758: (31.25%)&lt;BR/&gt; 6970: (31.25%)&lt;BR/&gt; 1345: (12.5%)&lt;BR/&gt; 554: (12.5%)&lt;BR/&gt; 1863: (6.25%)&gt;];
}
2030--2031[label="1;2pkt 2fpkt"];
2030--3955[label="1;1pkt 1fpkt"];
2030--6022[label="1;1pkt 1fpkt"];
2030--7359[label="1;1pkt 1fpkt"];
2031--3181[label="0.333333;1pkt 1fpkt"];
2031--3955[label="1;1pkt 1fpkt"];
2031--6022[label="1;1pkt 1fpkt"];
2031--7359[label="1;1pkt 1fpkt"];
3955--6022[label="1;1pkt 1fpkt"];
3955--7359[label="1;1pkt 1fpkt"];
6022--7359[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="98.176.155.193" dst_port="8758" src_ip="138.186.218.69" src_port="6970"/>
      <filter dst_ip="98.176.155.193" dst_port="554" src_ip="138.186.218.69" src_port="1345"/>
      <filter dst_ip="211.90.155.246" dst_port="1863" src_ip="138.186.218.69" src_port="1029"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,002,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="96.152.153.70"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1302{
style=filled;
color=gray75;
3972[label="197.62.210.71;149pkt 149fpkt", shape=pentagon, color=darkviolet];
6028[label="197.62.210.71;150pkt 150fpkt", shape=invtriangle, color=brown];
7364[label="197.62.210.71;149pkt 149fpkt", shape=invhouse, color=bisque];
stat1302[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.62.210.71:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3972--6028[label="1;149pkt 149fpkt"];
3972--7364[label="1;149pkt 149fpkt"];
6028--7364[label="1;149pkt 149fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.62.210.71" src_port="1027"/>
    </slice>
    <from sec="1039669806" usec="0"/>
    <to sec="1039669842" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1303{
style=filled;
color=gray75;
3973[label="214.177.217.71;209pkt 209fpkt", shape=pentagon, color=darkviolet];
6029[label="214.177.217.71;210pkt 210fpkt", shape=invtriangle, color=brown];
stat1303[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.177.217.71:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3973--6029[label="1;209pkt 209fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.177.217.71" src_port="1026"/>
    </slice>
    <from sec="1039669391" usec="0"/>
    <to sec="1039669424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1304{
style=filled;
color=gray75;
3977[label="202.37.38.72;238pkt 238fpkt", shape=pentagon, color=darkviolet];
6031[label="202.37.38.72;238pkt 238fpkt", shape=invtriangle, color=brown];
stat1304[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.37.38.72:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3977--6031[label="1;238pkt 238fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.37.38.72" src_port="1025"/>
    </slice>
    <from sec="1039669400" usec="0"/>
    <to sec="1039669441" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645838,1.80177,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1305{
style=filled;
color=gray75;
1943[label="138.49.94.72;s;25pkt 25fpkt", shape=diamond, color=yellow];
3978[label="138.49.94.72;26pkt 26fpkt", shape=pentagon, color=darkviolet];
6032[label="138.49.94.72;27pkt 27fpkt", shape=invtriangle, color=brown];
stat1305[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.49.94.72:80, 38.226.203.122:*}[51.8519%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37942: (1.92308%)&lt;BR/&gt; 37614: (1.92308%)&lt;BR/&gt; 37613: (1.92308%)&lt;BR/&gt; 37612: (1.92308%)&gt;];
}
1943--3978[label="0.96;24pkt 24fpkt"];
1943--6032[label="1;25pkt 25fpkt"];
3978--6032[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="38.226.203.122" src_ip="138.49.94.72" src_port="80"/>
    </slice>
    <from sec="1039669321" usec="0"/>
    <to sec="1039669890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1306{
style=filled;
color=gray75;
3980[label="197.109.167.72;171pkt 171fpkt", shape=pentagon, color=darkviolet];
6033[label="197.109.167.72;171pkt 171fpkt", shape=invtriangle, color=brown];
7366[label="197.109.167.72;171pkt 171fpkt", shape=invhouse, color=bisque];
stat1306[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.109.167.72:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3980--6033[label="1;171pkt 171fpkt"];
3980--7366[label="1;171pkt 171fpkt"];
6033--7366[label="1;171pkt 171fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.109.167.72" src_port="1026"/>
    </slice>
    <from sec="1039669566" usec="0"/>
    <to sec="1039669604" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1307{
style=filled;
color=gray75;
3981[label="201.100.213.72;19pkt 19fpkt", shape=pentagon, color=darkviolet];
6034[label="201.100.213.72;18pkt 18fpkt", shape=invtriangle, color=brown];
7367[label="201.100.213.72;18pkt 18fpkt", shape=invhouse, color=bisque];
stat1307[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.100.213.72:80, 140.3.213.230:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1247: (2.72727%)&lt;BR/&gt; 1246: (2.72727%)&lt;BR/&gt; 1245: (2.72727%)&lt;BR/&gt; 1244: (2.72727%)&gt;];
}
3981--6034[label="1;18pkt 18fpkt"];
3981--7367[label="1;18pkt 18fpkt"];
6034--7367[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.213.230" src_ip="201.100.213.72" src_port="80"/>
    </slice>
    <from sec="1039669702" usec="0"/>
    <to sec="1039669776" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1308{
style=filled;
color=gray75;
3994[label="36.244.170.74;19pkt 19fpkt", shape=pentagon, color=darkviolet];
6043[label="36.244.170.74;20pkt 20fpkt", shape=invtriangle, color=brown];
stat1308[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.244.170.74:80, 140.3.250.51:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3047: (2.5641%)&lt;BR/&gt; 3046: (2.5641%)&lt;BR/&gt; 3045: (2.5641%)&lt;BR/&gt; 3044: (2.5641%)&gt;];
}
3994--6043[label="1;19pkt 19fpkt"];
3994--7375[label="1;19pkt 19fpkt"];
6043--7375[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.250.51" src_ip="36.244.170.74" src_port="80"/>
    </slice>
    <from sec="1039669282" usec="0"/>
    <to sec="1039669299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1309{
style=filled;
color=gray75;
4002[label="140.3.244.74;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6049[label="140.3.244.74;8pkt 8fpkt", shape=invtriangle, color=brown];
stat1309[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.244.74:*, 208.166.197.28:80}[87.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.75%)&lt;BR/&gt; 5190: (6.25%)&lt;BR/&gt; 1964: (6.25%)&lt;BR/&gt; 1963: (6.25%)&lt;BR/&gt; 1962: (6.25%)&gt;];
}
4002--6049[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="208.166.197.28" dst_port="80" src_ip="140.3.244.74"/>
    </slice>
    <from sec="1039669226" usec="0"/>
    <to sec="1039669653" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1310{
style=filled;
color=gray75;
173[label="38.145.99.75s;66pkt 66fpkt", shape=rectangle, color=red];
4008[label="38.145.99.75;117pkt 117fpkt", shape=pentagon, color=darkviolet];
6053[label="38.145.99.75;116pkt 116fpkt", shape=invtriangle, color=brown];
7382[label="38.145.99.75;117pkt 117fpkt", shape=invhouse, color=bisque];
stat1310[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.145.99.75:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
173--4008[label="1;66pkt 66fpkt"];
173--6053[label="1;66pkt 66fpkt"];
173--7382[label="1;66pkt 66fpkt"];
4008--6053[label="1;116pkt 116fpkt"];
4008--7382[label="1;117pkt 117fpkt"];
6053--7382[label="1;116pkt 116fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="38.145.99.75" src_port="1027"/>
    </slice>
    <from sec="1039669414" usec="0"/>
    <to sec="1039669434" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.983876,1.77655,999,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1311{
style=filled;
color=gray75;
348[label="36.21.115.1s;1pkt 1fpkt", shape=rectangle, color=red];
1404[label="215.90.87.225;d;25pkt 25fpkt", shape=diamond, color=yellow];
2403[label="192.192.134.120;s;1pkt 1fpkt", shape=diamond, color=yellow];
2457[label="64.175.193.22;s;1pkt 1fpkt", shape=diamond, color=yellow];
3248[label="162.127.76.4;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3494[label="64.175.193.22;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5345[label="33.110.91.230;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5720[label="64.175.193.22;1pkt 1fpkt", shape=invtriangle, color=brown];
6054[label="162.81.128.75;1pkt 1fpkt", shape=invtriangle, color=brown];
7383[label="162.81.128.75;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1311[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6699, 215.90.87.225:*}[92%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (45.5882%)&lt;BR/&gt; 3425: (5.88235%)&lt;BR/&gt; 3349: (4.41176%)&lt;BR/&gt; 16699: (2.94118%)&lt;BR/&gt; 3416: (2.94118%)&gt;];
}
348--1404[label="1;1pkt 1fpkt"];
1404--1769[label="1;1pkt 1fpkt"];
1404--1905[label="0.5;1pkt 1fpkt"];
1404--2403[label="1;1pkt 1fpkt"];
1404--2457[label="1;1pkt 1fpkt"];
1404--2737[label="1;1pkt 1fpkt"];
1404--3248[label="1;1pkt 1fpkt"];
1404--3494[label="1;1pkt 1fpkt"];
1404--4289[label="1;1pkt 1fpkt"];
1404--5345[label="1;1pkt 1fpkt"];
1404--5720[label="1;1pkt 1fpkt"];
1404--6054[label="1;1pkt 1fpkt"];
1404--6234[label="1;1pkt 1fpkt"];
1404--7383[label="1;1pkt 1fpkt"];
1404--7489[label="1;1pkt 1fpkt"];
2457--3494[label="1;1pkt 1fpkt"];
2457--5720[label="1;1pkt 1fpkt"];
3494--5720[label="1;1pkt 1fpkt"];
6054--7383[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.87.225" src_port="6699"/>
    </slice>
    <from sec="1039669209" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1312{
style=filled;
color=gray75;
4015[label="197.111.25.76;110pkt 110fpkt", shape=pentagon, color=darkviolet];
6056[label="197.111.25.76;111pkt 111fpkt", shape=invtriangle, color=brown];
7384[label="197.111.25.76;110pkt 110fpkt", shape=invhouse, color=bisque];
stat1312[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.111.25.76:1088, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1088: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4015--6056[label="1;110pkt 110fpkt"];
4015--7384[label="1;110pkt 110fpkt"];
6056--7384[label="1;110pkt 110fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.111.25.76" src_port="1088"/>
    </slice>
    <from sec="1039669793" usec="0"/>
    <to sec="1039669821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1313{
style=filled;
color=gray75;
4018[label="201.160.124.76;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6058[label="201.160.124.76;2pkt 2fpkt", shape=invtriangle, color=brown];
7385[label="201.160.124.76;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1313[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.160.124.76:80, 140.3.244.69:3557}[50%]&lt;BR/&gt;{201.160.124.76:80, 215.87.64.183:31395}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 31395: (25%)&lt;BR/&gt; 3557: (25%)&gt;];
}
4018--6058[label="1;2pkt 2fpkt"];
4018--7385[label="1;2pkt 2fpkt"];
6058--7385[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.87.64.183" dst_port="31395" src_ip="201.160.124.76" src_port="80"/>
      <filter dst_ip="140.3.244.69" dst_port="3557" src_ip="201.160.124.76" src_port="80"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1314{
style=filled;
color=gray75;
4027[label="201.161.90.77;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6063[label="201.161.90.77;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1314[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.161.90.77:80, 140.3.211.144:1762}[33.3333%]&lt;BR/&gt;{201.161.90.77:80, 140.3.211.144:1766}[33.3333%]&lt;BR/&gt;{201.161.90.77:80, 140.3.211.144:1774}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1774: (20%)&lt;BR/&gt; 1766: (20%)&lt;BR/&gt; 1762: (10%)&gt;];
}
4027--6063[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.211.144" dst_port="1774" src_ip="201.161.90.77" src_port="80"/>
      <filter dst_ip="140.3.211.144" dst_port="1766" src_ip="201.161.90.77" src_port="80"/>
      <filter dst_ip="140.3.211.144" dst_port="1762" src_ip="201.161.90.77" src_port="80"/>
    </slice>
    <from sec="1039669423" usec="0"/>
    <to sec="1039669430" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.727288,1.86745,999,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_1315{
style=filled;
color=gray75;
1399[label="148.110.90.21;d;2pkt 2fpkt", shape=diamond, color=yellow];
1898[label="202.65.69.221;s;2pkt 2fpkt", shape=diamond, color=yellow];
6064[label="92.199.97.77;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1315[shape=component, label=&lt;Rules:&lt;BR/&gt;{92.199.97.77:6699, 148.110.90.21:1423}[33.3333%]&lt;BR/&gt;{202.65.69.221:6257, 138.186.54.0:6257}[33.3333%]&lt;BR/&gt;{202.65.69.221:2913, 148.110.90.21:6699}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (40%)&lt;BR/&gt; 6257: (20%)&lt;BR/&gt; 2913: (20%)&lt;BR/&gt; 1423: (20%)&gt;];
}
1399--1898[label="0.5;1pkt 1fpkt"];
1399--6064[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.90.21" dst_port="6699" src_ip="202.65.69.221" src_port="2913"/>
      <filter dst_ip="138.186.54.0" dst_port="6257" src_ip="202.65.69.221" src_port="6257"/>
      <filter dst_ip="148.110.90.21" dst_port="1423" src_ip="92.199.97.77" src_port="6699"/>
    </slice>
    <from sec="1039669207" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1316{
style=filled;
color=gray75;
4039[label="140.3.201.78;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6070[label="140.3.201.78;12pkt 12fpkt", shape=invtriangle, color=brown];
7390[label="140.3.201.78;13pkt 13fpkt", shape=invhouse, color=bisque];
stat1316[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.201.78:*, 201.37.163.181:80}[30.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1197: (3.94737%)&lt;BR/&gt; 1196: (3.94737%)&lt;BR/&gt; 1195: (3.94737%)&lt;BR/&gt; 1193: (3.94737%)&gt;];
}
4039--6070[label="1;12pkt 12fpkt"];
4039--7390[label="1;13pkt 13fpkt"];
6070--7390[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="201.37.163.181" dst_port="80" src_ip="140.3.201.78"/>
    </slice>
    <from sec="1039669869" usec="0"/>
    <to sec="1039669893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.937874,1.83478,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1317{
style=filled;
color=gray75;
473[label="138.186.54.96;d;334pkt 334fpkt", shape=diamond, color=yellow];
871[label="64.4.33.219;s;1pkt 1fpkt", shape=diamond, color=yellow];
989[label="37.100.208.78;s;2pkt 2fpkt", shape=diamond, color=yellow];
1291[label="64.164.18.44;s;1pkt 1fpkt", shape=diamond, color=yellow];
1905[label="208.196.220.48;s;2pkt 2fpkt", shape=diamond, color=yellow];
2060[label="64.232.126.14;s;2pkt 2fpkt", shape=diamond, color=yellow];
2680[label="37.100.208.78;s;2pkt 2fpkt", shape=hexagon, color=black];
2872[label="138.186.54.96;d;334pkt 334fpkt", shape=hexagon, color=black];
2883[label="64.4.33.219;s;1pkt 1fpkt", shape=hexagon, color=black];
4040[label="37.100.208.78;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6071[label="37.100.208.78;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1317[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6257, 138.186.54.96:6257}[93.4718%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (94.7214%)&lt;BR/&gt; 6699: (1.6129%)&lt;BR/&gt; 0: (0.58651%)&lt;BR/&gt; 2115: (0.366569%)&lt;BR/&gt; 3234: (0.293255%)&gt;];
}
473--871[label="1;1pkt 1fpkt"];
473--989[label="0.5;1pkt 1fpkt"];
473--1291[label="1;1pkt 1fpkt"];
473--1905[label="0.5;1pkt 1fpkt"];
473--2060[label="0.5;1pkt 1fpkt"];
473--2680[label="0.5;1pkt 1fpkt"];
473--2872[label="1;334pkt 334fpkt"];
473--2883[label="1;1pkt 1fpkt"];
473--6071[label="0.5;1pkt 1fpkt"];
871--2872[label="1;1pkt 1fpkt"];
871--2883[label="1;1pkt 1fpkt"];
989--1213[label="0.5;1pkt 1fpkt"];
989--2680[label="1;2pkt 2fpkt"];
989--2872[label="0.5;1pkt 1fpkt"];
989--4040[label="1;1pkt 1fpkt"];
989--6071[label="1;2pkt 2fpkt"];
1291--2872[label="1;1pkt 1fpkt"];
1905--2872[label="0.5;1pkt 1fpkt"];
2060--2872[label="0.5;1pkt 1fpkt"];
2680--2872[label="0.5;1pkt 1fpkt"];
2680--4040[label="1;1pkt 1fpkt"];
2680--6071[label="1;2pkt 2fpkt"];
2872--2883[label="1;1pkt 1fpkt"];
2872--6071[label="0.5;1pkt 1fpkt"];
4040--6071[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.54.96" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1318{
style=filled;
color=gray75;
4046[label="96.59.98.79;198pkt 198fpkt", shape=pentagon, color=darkviolet];
6075[label="96.59.98.79;197pkt 197fpkt", shape=invtriangle, color=brown];
7393[label="96.59.98.79;198pkt 198fpkt", shape=invhouse, color=bisque];
stat1318[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.59.98.79:1033, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1033: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4046--6075[label="1;197pkt 197fpkt"];
4046--7393[label="1;198pkt 198fpkt"];
6075--7393[label="1;197pkt 197fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.59.98.79" src_port="1033"/>
    </slice>
    <from sec="1039669651" usec="0"/>
    <to sec="1039669682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="145.19.180.80"/>
    </slice>
    <from sec="1039669276" usec="0"/>
    <to sec="1039669585" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1320{
style=filled;
color=gray75;
4066[label="172.93.25.81;32pkt 32fpkt", shape=pentagon, color=darkviolet];
6090[label="172.93.25.81;32pkt 32fpkt", shape=invtriangle, color=brown];
7404[label="172.93.25.81;31pkt 31fpkt", shape=invhouse, color=bisque];
stat1320[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.93.25.81:*, 36.161.192.84:80}[21.875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1669: (1.57895%)&lt;BR/&gt; 1668: (1.57895%)&lt;BR/&gt; 1666: (1.57895%)&lt;BR/&gt; 1664: (1.57895%)&gt;];
}
4066--6090[label="1;32pkt 32fpkt"];
4066--7404[label="1;31pkt 31fpkt"];
6090--7404[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="36.161.192.84" dst_port="80" src_ip="172.93.25.81"/>
    </slice>
    <from sec="1039669871" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1321{
style=filled;
color=gray75;
4069[label="96.1.101.81;197pkt 197fpkt", shape=pentagon, color=darkviolet];
6091[label="96.1.101.81;198pkt 198fpkt", shape=invtriangle, color=brown];
stat1321[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.1.101.81:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4069--6091[label="1;197pkt 197fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.1.101.81" src_port="1026"/>
    </slice>
    <from sec="1039669891" usec="0"/>
    <to sec="1039669922" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1322{
style=filled;
color=gray75;
4083[label="138.186.234.82;28pkt 28fpkt", shape=pentagon, color=darkviolet];
6096[label="138.186.234.82;29pkt 29fpkt", shape=invtriangle, color=brown];
7407[label="138.186.234.82;28pkt 28fpkt", shape=invhouse, color=bisque];
stat1322[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.234.82:*, *:25}[65.5172%]&lt;BR/&gt;{138.186.234.82:1026, *:53}[34.4828%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (32.3529%)&lt;BR/&gt; 1026: (17.6471%)&lt;BR/&gt; 53: (17.6471%)&lt;BR/&gt; 4031: (1.76471%)&lt;BR/&gt; 4030: (1.76471%)&gt;];
}
4083--6096[label="1;28pkt 28fpkt"];
4083--7407[label="1;28pkt 28fpkt"];
6096--7407[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="138.186.234.82"/>
      <filter dst_port="53" src_ip="138.186.234.82" src_port="1026"/>
    </slice>
    <from sec="1039669714" usec="0"/>
    <to sec="1039669926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1323{
style=filled;
color=gray75;
4084[label="140.3.244.82;14pkt 14fpkt", shape=pentagon, color=darkviolet];
6097[label="140.3.244.82;15pkt 15fpkt", shape=invtriangle, color=brown];
7408[label="140.3.244.82;15pkt 15fpkt", shape=invhouse, color=bisque];
stat1323[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.244.82:*, 38.15.73.7:80}[40%]&lt;BR/&gt;{140.3.244.82:*, 36.253.15.130:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1717: (3.40909%)&lt;BR/&gt; 1716: (3.40909%)&lt;BR/&gt; 1715: (3.40909%)&lt;BR/&gt; 1714: (3.40909%)&gt;];
}
4084--6097[label="1;14pkt 14fpkt"];
4084--7408[label="1;14pkt 14fpkt"];
6097--7408[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="38.15.73.7" dst_port="80" src_ip="140.3.244.82"/>
      <filter dst_ip="36.253.15.130" dst_port="80" src_ip="140.3.244.82"/>
    </slice>
    <from sec="1039669663" usec="0"/>
    <to sec="1039669680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.55.76.83"/>
    </slice>
    <from sec="1039669394" usec="0"/>
    <to sec="1039669423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.823349,1.91861,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1325{
style=filled;
color=gray75;
246[label="140.3.243.151s;4pkt 4fpkt", shape=rectangle, color=red];
stat1325[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.231.171.151:80, 140.3.201.90:1079}[25%]&lt;BR/&gt;{197.231.171.151:80, 140.3.201.90:1080}[25%]&lt;BR/&gt;{140.3.243.151:1519, 211.45.250.37:80}[25%]&lt;BR/&gt;{140.3.243.151:1520, 211.45.250.37:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1520: (12.5%)&lt;BR/&gt; 1519: (12.5%)&lt;BR/&gt; 1080: (12.5%)&lt;BR/&gt; 1079: (12.5%)&gt;];
}
246--1120[label="0.5;2pkt 2fpkt"];
246--1151[label="0.5;2pkt 2fpkt"];
246--4684[label="0.5;2pkt 2fpkt"];
246--6497[label="0.5;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="211.45.250.37" dst_port="80" src_ip="140.3.243.151" src_port="1520"/>
      <filter dst_ip="211.45.250.37" dst_port="80" src_ip="140.3.243.151" src_port="1519"/>
      <filter dst_ip="140.3.201.90" dst_port="1080" src_ip="197.231.171.151" src_port="80"/>
      <filter dst_ip="140.3.201.90" dst_port="1079" src_ip="197.231.171.151" src_port="80"/>
    </slice>
    <from sec="1039669495" usec="0"/>
    <to sec="1039669501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1326{
style=filled;
color=gray75;
4094[label="140.3.210.83;15pkt 15fpkt", shape=pentagon, color=darkviolet];
6102[label="140.3.210.83;14pkt 14fpkt", shape=invtriangle, color=brown];
7412[label="140.3.210.83;14pkt 14fpkt", shape=invhouse, color=bisque];
stat1326[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.210.83:*, 151.37.144.212:80}[93.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1361: (3.48837%)&lt;BR/&gt; 1360: (3.48837%)&lt;BR/&gt; 1359: (3.48837%)&lt;BR/&gt; 1358: (3.48837%)&gt;];
}
4094--6102[label="1;14pkt 14fpkt"];
4094--7412[label="1;14pkt 14fpkt"];
6102--7412[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="151.37.144.212" dst_port="80" src_ip="140.3.210.83"/>
    </slice>
    <from sec="1039669384" usec="0"/>
    <to sec="1039669459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1327{
style=filled;
color=gray75;
4099[label="39.111.131.84;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6107[label="39.111.131.84;1pkt 1fpkt", shape=invtriangle, color=brown];
7416[label="39.111.131.84;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1327[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.111.131.84:80, 138.186.4.6:1081}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1081: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4099--6107[label="1;1pkt 1fpkt"];
4099--7416[label="1;1pkt 1fpkt"];
6107--7416[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.4.6" dst_port="1081" src_ip="39.111.131.84" src_port="80"/>
    </slice>
    <from sec="1039669703" usec="0"/>
    <to sec="1039669713" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1328{
style=filled;
color=gray75;
4103[label="140.3.210.84;22pkt 22fpkt", shape=pentagon, color=darkviolet];
6109[label="140.3.210.84;21pkt 21fpkt", shape=invtriangle, color=brown];
stat1328[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.210.84:*, 201.160.98.40:80}[72.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1364: (2.32558%)&lt;BR/&gt; 1363: (2.32558%)&lt;BR/&gt; 1362: (2.32558%)&lt;BR/&gt; 1361: (2.32558%)&gt;];
}
4103--6109[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="201.160.98.40" dst_port="80" src_ip="140.3.210.84"/>
    </slice>
    <from sec="1039669672" usec="0"/>
    <to sec="1039669838" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1329{
style=filled;
color=gray75;
4104[label="140.3.211.84;22pkt 22fpkt", shape=pentagon, color=darkviolet];
6110[label="140.3.211.84;21pkt 21fpkt", shape=invtriangle, color=brown];
7417[label="140.3.211.84;22pkt 22fpkt", shape=invhouse, color=bisque];
stat1329[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.211.84:*, 38.20.167.85:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2302: (2.30769%)&lt;BR/&gt; 2301: (2.30769%)&lt;BR/&gt; 2300: (2.30769%)&lt;BR/&gt; 2299: (2.30769%)&gt;];
}
4104--6110[label="1;21pkt 21fpkt"];
4104--7417[label="1;22pkt 22fpkt"];
6110--7417[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="38.20.167.85" dst_port="80" src_ip="140.3.211.84"/>
    </slice>
    <from sec="1039669570" usec="0"/>
    <to sec="1039669588" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1330{
style=filled;
color=gray75;
4115[label="140.3.142.85;57pkt 57fpkt", shape=pentagon, color=darkviolet];
6118[label="140.3.142.85;56pkt 56fpkt", shape=invtriangle, color=brown];
stat1330[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.142.85:*, 217.96.218.202:80}[82.4561%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1255: (0.884956%)&lt;BR/&gt; 1254: (0.884956%)&lt;BR/&gt; 1253: (0.884956%)&lt;BR/&gt; 1252: (0.884956%)&gt;];
}
4115--6118[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_ip="217.96.218.202" dst_port="80" src_ip="140.3.142.85"/>
    </slice>
    <from sec="1039669251" usec="0"/>
    <to sec="1039669331" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1331{
style=filled;
color=gray75;
4119[label="197.70.196.85;158pkt 158fpkt", shape=pentagon, color=darkviolet];
6120[label="197.70.196.85;158pkt 158fpkt", shape=invtriangle, color=brown];
stat1331[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.70.196.85:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4119--6120[label="1;158pkt 158fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.70.196.85" src_port="1026"/>
    </slice>
    <from sec="1039669409" usec="0"/>
    <to sec="1039669446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1332{
style=filled;
color=gray75;
4123[label="197.181.128.86;111pkt 111fpkt", shape=pentagon, color=darkviolet];
6122[label="197.181.128.86;112pkt 112fpkt", shape=invtriangle, color=brown];
7423[label="197.181.128.86;112pkt 112fpkt", shape=invhouse, color=bisque];
stat1332[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.181.128.86:21024, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21024: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4123--6122[label="1;111pkt 111fpkt"];
4123--7423[label="1;111pkt 111fpkt"];
6122--7423[label="1;112pkt 112fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.181.128.86" src_port="21024"/>
    </slice>
    <from sec="1039669582" usec="0"/>
    <to sec="1039669606" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1333{
style=filled;
color=gray75;
4135[label="174.41.5.88;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6129[label="174.41.5.88;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1333[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.41.5.88:80, 140.3.255.198:1907}[33.3333%]&lt;BR/&gt;{174.41.5.88:80, 140.3.255.198:1908}[33.3333%]&lt;BR/&gt;{174.41.5.88:80, 140.3.255.198:1909}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1909: (16.6667%)&lt;BR/&gt; 1908: (16.6667%)&lt;BR/&gt; 1907: (16.6667%)&gt;];
}
4135--6129[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.255.198" dst_port="1909" src_ip="174.41.5.88" src_port="80"/>
      <filter dst_ip="140.3.255.198" dst_port="1908" src_ip="174.41.5.88" src_port="80"/>
      <filter dst_ip="140.3.255.198" dst_port="1907" src_ip="174.41.5.88" src_port="80"/>
    </slice>
    <from sec="1039669557" usec="0"/>
    <to sec="1039669636" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1334{
style=filled;
color=gray75;
4136[label="172.93.9.88;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6130[label="172.93.9.88;13pkt 13fpkt", shape=invtriangle, color=brown];
7429[label="172.93.9.88;12pkt 12fpkt", shape=invhouse, color=bisque];
stat1334[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.93.9.88:*, 201.193.21.151:80}[46.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2120: (3.94737%)&lt;BR/&gt; 2119: (3.94737%)&lt;BR/&gt; 2118: (3.94737%)&lt;BR/&gt; 2117: (3.94737%)&gt;];
}
4136--6130[label="1;13pkt 13fpkt"];
4136--7429[label="1;12pkt 12fpkt"];
6130--7429[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="201.193.21.151" dst_port="80" src_ip="172.93.9.88"/>
    </slice>
    <from sec="1039669423" usec="0"/>
    <to sec="1039669545" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1335{
style=filled;
color=gray75;
4138[label="150.32.12.88;129pkt 129fpkt", shape=pentagon, color=darkviolet];
6131[label="150.32.12.88;129pkt 129fpkt", shape=invtriangle, color=brown];
7430[label="150.32.12.88;130pkt 130fpkt", shape=invhouse, color=bisque];
stat1335[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.32.12.88:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4138--6131[label="1;129pkt 129fpkt"];
4138--7430[label="1;129pkt 129fpkt"];
6131--7430[label="1;129pkt 129fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="150.32.12.88" src_port="1027"/>
    </slice>
    <from sec="1039669520" usec="0"/>
    <to sec="1039669544" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1336{
style=filled;
color=gray75;
4139[label="198.196.48.88;158pkt 158fpkt", shape=pentagon, color=darkviolet];
6132[label="198.196.48.88;158pkt 158fpkt", shape=invtriangle, color=brown];
7431[label="198.196.48.88;159pkt 159fpkt", shape=invhouse, color=bisque];
stat1336[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.196.48.88:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4139--6132[label="1;158pkt 158fpkt"];
4139--7431[label="1;158pkt 158fpkt"];
6132--7431[label="1;158pkt 158fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="198.196.48.88" src_port="1029"/>
    </slice>
    <from sec="1039669280" usec="0"/>
    <to sec="1039669306" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1337{
style=filled;
color=gray75;
4151[label="61.181.116.89;188pkt 188fpkt", shape=pentagon, color=darkviolet];
6138[label="61.181.116.89;189pkt 189fpkt", shape=invtriangle, color=brown];
7435[label="61.181.116.89;188pkt 188fpkt", shape=invhouse, color=bisque];
stat1337[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.181.116.89:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4151--6138[label="1;188pkt 188fpkt"];
4151--7435[label="1;188pkt 188fpkt"];
6138--7435[label="1;188pkt 188fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="61.181.116.89" src_port="1031"/>
    </slice>
    <from sec="1039669206" usec="0"/>
    <to sec="1039669236" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1338{
style=filled;
color=gray75;
4153[label="61.165.193.89;234pkt 234fpkt", shape=pentagon, color=darkviolet];
6139[label="61.165.193.89;233pkt 233fpkt", shape=invtriangle, color=brown];
7436[label="61.165.193.89;233pkt 233fpkt", shape=invhouse, color=bisque];
stat1338[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.165.193.89:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 61650: (0.214286%)&lt;BR/&gt; 61648: (0.214286%)&lt;BR/&gt; 61646: (0.214286%)&lt;BR/&gt; 61644: (0.214286%)&gt;];
}
4153--6139[label="1;233pkt 233fpkt"];
4153--7436[label="1;233pkt 233fpkt"];
6139--7436[label="1;233pkt 233fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="61.165.193.89"/>
    </slice>
    <from sec="1039669227" usec="0"/>
    <to sec="1039669264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1339{
style=filled;
color=gray75;
4156[label="211.45.233.89;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6141[label="211.45.233.89;1pkt 1fpkt", shape=invtriangle, color=brown];
7438[label="211.45.233.89;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1339[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.45.233.89:80, 214.231.185.25:43206}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43206: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4156--6141[label="1;1pkt 1fpkt"];
4156--7438[label="1;1pkt 1fpkt"];
6141--7438[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.231.185.25" dst_port="43206" src_ip="211.45.233.89" src_port="80"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.76.85.90"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1341{
style=filled;
color=gray75;
4163[label="215.87.93.90;44pkt 44fpkt", shape=pentagon, color=darkviolet];
6146[label="215.87.93.90;44pkt 44fpkt", shape=invtriangle, color=brown];
stat1341[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.87.93.90:1026, *:53}[88.6364%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (44.3182%)&lt;BR/&gt; 53: (44.3182%)&lt;BR/&gt; 0: (11.3636%)&gt;];
}
4163--6146[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="215.87.93.90" src_port="1026"/>
    </slice>
    <from sec="1039669206" usec="0"/>
    <to sec="1039669898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1342{
style=filled;
color=gray75;
4174[label="197.69.198.91;149pkt 149fpkt", shape=pentagon, color=darkviolet];
6154[label="197.69.198.91;148pkt 148fpkt", shape=invtriangle, color=brown];
7443[label="197.69.198.91;148pkt 148fpkt", shape=invhouse, color=bisque];
stat1342[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.69.198.91:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4174--6154[label="1;148pkt 148fpkt"];
4174--7443[label="1;148pkt 148fpkt"];
6154--7443[label="1;148pkt 148fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.69.198.91" src_port="1026"/>
    </slice>
    <from sec="1039669777" usec="0"/>
    <to sec="1039669814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1343{
style=filled;
color=gray75;
4178[label="150.32.89.92;132pkt 132fpkt", shape=pentagon, color=darkviolet];
6158[label="150.32.89.92;132pkt 132fpkt", shape=invtriangle, color=brown];
7446[label="150.32.89.92;131pkt 131fpkt", shape=invhouse, color=bisque];
stat1343[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.32.89.92:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4178--6158[label="1;132pkt 132fpkt"];
4178--7446[label="1;131pkt 131fpkt"];
6158--7446[label="1;131pkt 131fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="150.32.89.92" src_port="1028"/>
    </slice>
    <from sec="1039669690" usec="0"/>
    <to sec="1039669717" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1344{
style=filled;
color=gray75;
4180[label="96.194.101.92;171pkt 171fpkt", shape=pentagon, color=darkviolet];
6160[label="96.194.101.92;170pkt 170fpkt", shape=invtriangle, color=brown];
7448[label="96.194.101.92;170pkt 170fpkt", shape=invhouse, color=bisque];
stat1344[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.194.101.92:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4180--6160[label="1;170pkt 170fpkt"];
4180--7448[label="1;170pkt 170fpkt"];
6160--7448[label="1;170pkt 170fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.194.101.92" src_port="1026"/>
    </slice>
    <from sec="1039669699" usec="0"/>
    <to sec="1039669733" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1345{
style=filled;
color=gray75;
4181[label="197.111.123.92;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6161[label="197.111.123.92;2pkt 2fpkt", shape=invtriangle, color=brown];
7449[label="197.111.123.92;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1345[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.111.123.92:1431, 172.66.102.230:137}[50%]&lt;BR/&gt;{197.111.123.92:1431, 172.66.102.231:137}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1431: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4181--6161[label="1;2pkt 2fpkt"];
4181--7449[label="1;2pkt 2fpkt"];
6161--7449[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="172.66.102.231" dst_port="137" src_ip="197.111.123.92" src_port="1431"/>
      <filter dst_ip="172.66.102.230" dst_port="137" src_ip="197.111.123.92" src_port="1431"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1346{
style=filled;
color=gray75;
4184[label="197.231.165.92;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6163[label="197.231.165.92;1pkt 1fpkt", shape=invtriangle, color=brown];
7451[label="197.231.165.92;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1346[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.231.165.92:80, 140.3.211.20:1304}[50%]&lt;BR/&gt;{197.231.165.92:80, 140.3.211.20:1305}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1305: (37.5%)&lt;BR/&gt; 1304: (12.5%)&gt;];
}
4184--6163[label="1;1pkt 1fpkt"];
4184--7451[label="1;1pkt 1fpkt"];
6163--7451[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.211.20" dst_port="1305" src_ip="197.231.165.92" src_port="80"/>
      <filter dst_ip="140.3.211.20" dst_port="1304" src_ip="197.231.165.92" src_port="80"/>
    </slice>
    <from sec="1039669752" usec="0"/>
    <to sec="1039669781" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1347{
style=filled;
color=gray75;
1417[label="138.186.58.93;s;97pkt 97fpkt", shape=diamond, color=yellow];
4195[label="138.186.58.93;100pkt 100fpkt", shape=pentagon, color=darkviolet];
6170[label="138.186.58.93;100pkt 100fpkt", shape=invtriangle, color=brown];
7455[label="138.186.58.93;100pkt 100fpkt", shape=invhouse, color=bisque];
stat1347[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.58.93:*, 36.161.208.153:80}[41%]&lt;BR/&gt;{138.186.58.93:*, 200.161.27.202:80}[24%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.9924%)&lt;BR/&gt; 5190: (1.00756%)&lt;BR/&gt; 1544: (0.503778%)&lt;BR/&gt; 1543: (0.503778%)&lt;BR/&gt; 1542: (0.503778%)&gt;];
}
1417--1637[label="0.247423;24pkt 24fpkt"];
1417--1658[label="0.0412371;4pkt 4fpkt"];
1417--1893[label="0.0927835;9pkt 9fpkt"];
1417--2711[label="0.0547945;4pkt 4fpkt"];
1417--2943[label="0.25;24pkt 24fpkt"];
1417--4195[label="1;97pkt 97fpkt"];
1417--6170[label="1;97pkt 97fpkt"];
1417--7455[label="1;97pkt 97fpkt"];
4195--6170[label="1;100pkt 100fpkt"];
4195--7455[label="1;100pkt 100fpkt"];
6170--7455[label="1;100pkt 100fpkt"];
</description>
    <slice>
      <filter dst_ip="36.161.208.153" dst_port="80" src_ip="138.186.58.93"/>
      <filter dst_ip="200.161.27.202" dst_port="80" src_ip="138.186.58.93"/>
    </slice>
    <from sec="1039669216" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1348{
style=filled;
color=gray75;
4196[label="39.5.64.93;225pkt 225fpkt", shape=pentagon, color=darkviolet];
6171[label="39.5.64.93;224pkt 224fpkt", shape=invtriangle, color=brown];
stat1348[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.5.64.93:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4196--6171[label="1;224pkt 224fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="39.5.64.93" src_port="1028"/>
    </slice>
    <from sec="1039669236" usec="0"/>
    <to sec="1039669276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1349{
style=filled;
color=gray75;
4197[label="215.90.72.93;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6172[label="215.90.72.93;12pkt 12fpkt", shape=invtriangle, color=brown];
stat1349[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.90.72.93:*, 96.22.89.29:80}[61.5385%]&lt;BR/&gt;{215.90.72.93:*, 96.3.74.22:80}[38.4615%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1339: (4%)&lt;BR/&gt; 1338: (4%)&lt;BR/&gt; 1337: (4%)&lt;BR/&gt; 1336: (4%)&gt;];
}
4197--6172[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="96.22.89.29" dst_port="80" src_ip="215.90.72.93"/>
      <filter dst_ip="96.3.74.22" dst_port="80" src_ip="215.90.72.93"/>
    </slice>
    <from sec="1039669229" usec="0"/>
    <to sec="1039669717" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1350{
style=filled;
color=gray75;
4202[label="193.41.116.93;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6175[label="193.41.116.93;1pkt 1fpkt", shape=invtriangle, color=brown];
7457[label="193.41.116.93;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1350[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.41.116.93:80, 215.87.67.142:1255}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1255: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4202--6175[label="1;1pkt 1fpkt"];
4202--7457[label="1;1pkt 1fpkt"];
6175--7457[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.87.67.142" dst_port="1255" src_ip="193.41.116.93" src_port="80"/>
    </slice>
    <from sec="1039669223" usec="0"/>
    <to sec="1039669902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1351{
style=filled;
color=gray75;
4203[label="138.186.137.93;44pkt 44fpkt", shape=pentagon, color=darkviolet];
6176[label="138.186.137.93;44pkt 44fpkt", shape=invtriangle, color=brown];
stat1351[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.137.93:80, *:*}[63.6364%]&lt;BR/&gt;{138.186.137.93:32795, *:53}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.8182%)&lt;BR/&gt; 53: (21.5909%)&lt;BR/&gt; 32795: (12.5%)&lt;BR/&gt; 51591: (1.13636%)&lt;BR/&gt; 49994: (1.13636%)&gt;];
}
4203--6176[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter src_ip="138.186.137.93" src_port="80"/>
      <filter dst_port="53" src_ip="138.186.137.93" src_port="32795"/>
    </slice>
    <from sec="1039669202" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.226.154.94"/>
    </slice>
    <from sec="1039669265" usec="0"/>
    <to sec="1039669431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1353{
style=filled;
color=gray75;
4214[label="202.84.236.94;168pkt 168fpkt", shape=pentagon, color=darkviolet];
6180[label="202.84.236.94;168pkt 168fpkt", shape=invtriangle, color=brown];
stat1353[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.84.236.94:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4214--6180[label="1;168pkt 168fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.84.236.94" src_port="1030"/>
    </slice>
    <from sec="1039669722" usec="0"/>
    <to sec="1039669750" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.242.239.94"/>
    </slice>
    <from sec="1039669219" usec="0"/>
    <to sec="1039669413" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1355{
style=filled;
color=gray75;
4218[label="197.104.42.95;128pkt 128fpkt", shape=pentagon, color=darkviolet];
6183[label="197.104.42.95;128pkt 128fpkt", shape=invtriangle, color=brown];
7460[label="197.104.42.95;127pkt 127fpkt", shape=invhouse, color=bisque];
stat1355[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.104.42.95:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4218--6183[label="1;128pkt 128fpkt"];
4218--7460[label="1;127pkt 127fpkt"];
6183--7460[label="1;127pkt 127fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.104.42.95" src_port="1031"/>
    </slice>
    <from sec="1039669365" usec="0"/>
    <to sec="1039669396" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.30.69.95"/>
    </slice>
    <from sec="1039669594" usec="0"/>
    <to sec="1039669689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1357{
style=filled;
color=gray75;
4221[label="211.90.23.96;27pkt 27fpkt", shape=pentagon, color=darkviolet];
6186[label="211.90.23.96;27pkt 27fpkt", shape=invtriangle, color=brown];
stat1357[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.90.23.96:80, *:*}[70.3704%]&lt;BR/&gt;{211.90.23.96:443, *:*}[29.6296%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.1852%)&lt;BR/&gt; 443: (14.8148%)&lt;BR/&gt; 51553: (1.85185%)&lt;BR/&gt; 51550: (1.85185%)&lt;BR/&gt; 51549: (1.85185%)&gt;];
}
4221--6186[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter src_ip="211.90.23.96" src_port="80"/>
      <filter src_ip="211.90.23.96" src_port="443"/>
    </slice>
    <from sec="1039669267" usec="0"/>
    <to sec="1039669924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="170.103.43.96"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1359{
style=filled;
color=gray75;
4229[label="202.172.99.96;254pkt 254fpkt", shape=pentagon, color=darkviolet];
6192[label="202.172.99.96;255pkt 255fpkt", shape=invtriangle, color=brown];
stat1359[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.172.99.96:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4229--6192[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.172.99.96" src_port="1028"/>
    </slice>
    <from sec="1039669498" usec="0"/>
    <to sec="1039669540" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="92.244.227.96"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1361{
style=filled;
color=gray75;
4237[label="140.3.19.97;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6198[label="140.3.19.97;4pkt 4fpkt", shape=invtriangle, color=brown];
7471[label="140.3.19.97;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1361[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.19.97:0, 202.78.145.169:0}[20%]&lt;BR/&gt;{140.3.19.97:0, 198.154.54.184:0}[20%]&lt;BR/&gt;{140.3.19.97:0, 192.213.177.188:0}[20%]&lt;BR/&gt;{140.3.19.97:0, 61.234.23.189:0}[20%]&lt;BR/&gt;{140.3.19.97:0, 39.30.168.235:0}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4237--6198[label="1;4pkt 4fpkt"];
4237--7471[label="1;4pkt 4fpkt"];
6198--7471[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="39.30.168.235" src_ip="140.3.19.97"/>
      <filter dst_ip="61.234.23.189" src_ip="140.3.19.97"/>
      <filter dst_ip="192.213.177.188" src_ip="140.3.19.97"/>
      <filter dst_ip="198.154.54.184" src_ip="140.3.19.97"/>
      <filter dst_ip="202.78.145.169" src_ip="140.3.19.97"/>
    </slice>
    <from sec="1039669388" usec="0"/>
    <to sec="1039669820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645838,1.80177,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1362{
style=filled;
color=gray75;
1765[label="140.3.95.97;s;19pkt 19fpkt", shape=diamond, color=yellow];
4239[label="140.3.95.97;21pkt 21fpkt", shape=pentagon, color=darkviolet];
6200[label="140.3.95.97;21pkt 21fpkt", shape=invtriangle, color=brown];
stat1362[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.95.97:80, 107.189.86.196:*}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.9016%)&lt;BR/&gt; 0: (3.27869%)&lt;BR/&gt; 60324: (2.45902%)&lt;BR/&gt; 60322: (2.45902%)&lt;BR/&gt; 60305: (2.45902%)&gt;];
}
1765--4239[label="1;19pkt 19fpkt"];
1765--6200[label="1;19pkt 19fpkt"];
4239--6200[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="107.189.86.196" src_ip="140.3.95.97" src_port="80"/>
    </slice>
    <from sec="1039669443" usec="0"/>
    <to sec="1039669856" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1363{
style=filled;
color=gray75;
4241[label="211.179.167.97;245pkt 245fpkt", shape=pentagon, color=darkviolet];
6201[label="211.179.167.97;244pkt 244fpkt", shape=invtriangle, color=brown];
stat1363[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.179.167.97:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4241--6201[label="1;244pkt 244fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="211.179.167.97" src_port="1028"/>
    </slice>
    <from sec="1039669295" usec="0"/>
    <to sec="1039669345" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1364{
style=filled;
color=gray75;
4245[label="202.83.224.97;101pkt 101fpkt", shape=pentagon, color=darkviolet];
6204[label="202.83.224.97;100pkt 100fpkt", shape=invtriangle, color=brown];
7473[label="202.83.224.97;100pkt 100fpkt", shape=invhouse, color=bisque];
stat1364[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.83.224.97:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4245--6204[label="1;100pkt 100fpkt"];
4245--7473[label="1;100pkt 100fpkt"];
6204--7473[label="1;100pkt 100fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.83.224.97" src_port="1028"/>
    </slice>
    <from sec="1039669858" usec="0"/>
    <to sec="1039669876" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1365{
style=filled;
color=gray75;
4247[label="36.239.16.98;245pkt 245fpkt", shape=pentagon, color=darkviolet];
6205[label="36.239.16.98;245pkt 245fpkt", shape=invtriangle, color=brown];
7474[label="36.239.16.98;244pkt 244fpkt", shape=invhouse, color=bisque];
stat1365[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.239.16.98:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4247--6205[label="1;245pkt 245fpkt"];
4247--7474[label="1;244pkt 244fpkt"];
6205--7474[label="1;244pkt 244fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="36.239.16.98" src_port="1027"/>
    </slice>
    <from sec="1039669548" usec="0"/>
    <to sec="1039669602" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.113.0.99"/>
    </slice>
    <from sec="1039669221" usec="0"/>
    <to sec="1039669919" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1367{
style=filled;
color=gray75;
4257[label="197.91.114.99;171pkt 171fpkt", shape=pentagon, color=darkviolet];
6212[label="197.91.114.99;171pkt 171fpkt", shape=invtriangle, color=brown];
7478[label="197.91.114.99;170pkt 170fpkt", shape=invhouse, color=bisque];
stat1367[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.91.114.99:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4257--6212[label="1;171pkt 171fpkt"];
4257--7478[label="1;170pkt 170fpkt"];
6212--7478[label="1;170pkt 170fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.91.114.99" src_port="1026"/>
    </slice>
    <from sec="1039669562" usec="0"/>
    <to sec="1039669597" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="99.76.8.100"/>
    </slice>
    <from sec="1039669212" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1369{
style=filled;
color=gray75;
4264[label="38.44.107.100;11pkt 11fpkt", shape=pentagon, color=darkviolet];
6215[label="38.44.107.100;11pkt 11fpkt", shape=invtriangle, color=brown];
stat1369[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.44.107.100:80, 138.186.170.138:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 32881: (4.54545%)&lt;BR/&gt; 32872: (4.54545%)&lt;BR/&gt; 32871: (4.54545%)&lt;BR/&gt; 32870: (4.54545%)&gt;];
}
4264--6215[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.170.138" src_ip="38.44.107.100" src_port="80"/>
    </slice>
    <from sec="1039669291" usec="0"/>
    <to sec="1039669864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1370{
style=filled;
color=gray75;
4265[label="193.41.116.100;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6216[label="193.41.116.100;10pkt 10fpkt", shape=invtriangle, color=brown];
7481[label="193.41.116.100;10pkt 10fpkt", shape=invhouse, color=bisque];
stat1370[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.41.116.100:80, 140.3.255.198:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1933: (5%)&lt;BR/&gt; 1932: (5%)&lt;BR/&gt; 1931: (5%)&lt;BR/&gt; 1930: (5%)&gt;];
}
4265--6216[label="1;10pkt 10fpkt"];
4265--7481[label="1;10pkt 10fpkt"];
6216--7481[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.255.198" src_ip="193.41.116.100" src_port="80"/>
    </slice>
    <from sec="1039669241" usec="0"/>
    <to sec="1039669670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1371{
style=filled;
color=gray75;
4268[label="221.97.137.100;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6218[label="221.97.137.100;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1371[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.97.137.100:53, 138.7.9.225:57040}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57040: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
4268--6218[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.7.9.225" dst_port="57040" src_ip="221.97.137.100" src_port="53"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1372{
style=filled;
color=gray75;
4269[label="202.169.145.100;185pkt 185fpkt", shape=pentagon, color=darkviolet];
6219[label="202.169.145.100;185pkt 185fpkt", shape=invtriangle, color=brown];
7482[label="202.169.145.100;184pkt 184fpkt", shape=invhouse, color=bisque];
stat1372[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.169.145.100:63013, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63013: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4269--6219[label="1;185pkt 185fpkt"];
4269--7482[label="1;184pkt 184fpkt"];
6219--7482[label="1;184pkt 184fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.169.145.100" src_port="63013"/>
    </slice>
    <from sec="1039669267" usec="0"/>
    <to sec="1039669302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.166.163.100"/>
    </slice>
    <from sec="1039669295" usec="0"/>
    <to sec="1039669308" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1374{
style=filled;
color=gray75;
4271[label="140.3.206.100;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6221[label="140.3.206.100;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1374[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.206.100:1058, 129.113.207.135:80}[50%]&lt;BR/&gt;{140.3.206.100:1059, 129.113.207.135:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1059: (33.3333%)&lt;BR/&gt; 1058: (16.6667%)&gt;];
}
4271--6221[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="129.113.207.135" dst_port="80" src_ip="140.3.206.100" src_port="1059"/>
      <filter dst_ip="129.113.207.135" dst_port="80" src_ip="140.3.206.100" src_port="1058"/>
    </slice>
    <from sec="1039669667" usec="0"/>
    <to sec="1039669681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1375{
style=filled;
color=gray75;
4276[label="197.90.14.102;174pkt 174fpkt", shape=pentagon, color=darkviolet];
6224[label="197.90.14.102;175pkt 175fpkt", shape=invtriangle, color=brown];
stat1375[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.90.14.102:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4276--6224[label="1;174pkt 174fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.90.14.102" src_port="1029"/>
    </slice>
    <from sec="1039669538" usec="0"/>
    <to sec="1039669577" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.8.27.102"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669921" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="166.144.157.102"/>
    </slice>
    <from sec="1039669344" usec="0"/>
    <to sec="1039669358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1378{
style=filled;
color=gray75;
4285[label="196.217.118.103;164pkt 164fpkt", shape=pentagon, color=darkviolet];
6230[label="196.217.118.103;165pkt 165fpkt", shape=invtriangle, color=brown];
7487[label="196.217.118.103;165pkt 165fpkt", shape=invhouse, color=bisque];
stat1378[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.217.118.103:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4285--6230[label="1;164pkt 164fpkt"];
4285--7487[label="1;164pkt 164fpkt"];
6230--7487[label="1;165pkt 165fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.217.118.103" src_port="1025"/>
    </slice>
    <from sec="1039669891" usec="0"/>
    <to sec="1039669918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1379{
style=filled;
color=gray75;
4290[label="96.146.41.104;104pkt 104fpkt", shape=pentagon, color=darkviolet];
6235[label="96.146.41.104;104pkt 104fpkt", shape=invtriangle, color=brown];
7490[label="96.146.41.104;103pkt 103fpkt", shape=invhouse, color=bisque];
stat1379[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.146.41.104:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4290--6235[label="1;104pkt 104fpkt"];
4290--7490[label="1;103pkt 103fpkt"];
6235--7490[label="1;103pkt 103fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.146.41.104" src_port="1026"/>
    </slice>
    <from sec="1039669863" usec="0"/>
    <to sec="1039669879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1380{
style=filled;
color=gray75;
4299[label="202.34.44.105;156pkt 156fpkt", shape=pentagon, color=darkviolet];
6240[label="202.34.44.105;157pkt 157fpkt", shape=invtriangle, color=brown];
7494[label="202.34.44.105;156pkt 156fpkt", shape=invhouse, color=bisque];
stat1380[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.34.44.105:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4299--6240[label="1;156pkt 156fpkt"];
4299--7494[label="1;156pkt 156fpkt"];
6240--7494[label="1;156pkt 156fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.34.44.105" src_port="1027"/>
    </slice>
    <from sec="1039669461" usec="0"/>
    <to sec="1039669487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.937874,1.83478,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1381{
style=filled;
color=gray75;
1496[label="211.45.250.105;s;136pkt 136fpkt", shape=diamond, color=yellow];
2373[label="140.3.201.85;d;17pkt 17fpkt", shape=diamond, color=yellow];
2878[label="211.45.250.105;s;118pkt 118fpkt", shape=hexagon, color=black];
4304[label="211.45.250.105;147pkt 147fpkt", shape=pentagon, color=darkviolet];
6244[label="211.45.250.105;147pkt 147fpkt", shape=invtriangle, color=brown];
stat1381[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.45.250.105:80, 148.29.24.129:*}[25.3086%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1380: (0.707965%)&lt;BR/&gt; 1358: (0.707965%)&lt;BR/&gt; 1149: (0.707965%)&lt;BR/&gt; 1667: (0.442478%)&gt;];
}
1496--2142[label="0.0526316;3pkt 3fpkt"];
1496--2315[label="0.122449;6pkt 6fpkt"];
1496--2373[label="0.117647;2pkt 2fpkt"];
1496--2470[label="0.0661765;9pkt 9fpkt"];
1496--2505[label="0.00735294;1pkt 1fpkt"];
1496--2673[label="0.00735294;1pkt 1fpkt"];
1496--2740[label="0.00735294;1pkt 1fpkt"];
1496--2871[label="0.0367647;5pkt 5fpkt"];
1496--2878[label="1;118pkt 118fpkt"];
1496--3154[label="0.00735294;1pkt 1fpkt"];
1496--4304[label="1;136pkt 136fpkt"];
1496--6244[label="1;136pkt 136fpkt"];
2373--2397[label="0.714286;10pkt 10fpkt"];
2373--2878[label="0.117647;2pkt 2fpkt"];
2373--3792[label="0.117647;2pkt 2fpkt"];
2373--4304[label="0.117647;2pkt 2fpkt"];
2373--5268[label="0.588235;10pkt 10fpkt"];
2373--6244[label="0.117647;2pkt 2fpkt"];
2373--6876[label="0.529412;9pkt 9fpkt"];
2373--7909[label="0.588235;10pkt 10fpkt"];
2878--3154[label="0.00847458;1pkt 1fpkt"];
2878--4304[label="1;118pkt 118fpkt"];
2878--6244[label="1;118pkt 118fpkt"];
4304--6244[label="1;147pkt 147fpkt"];
</description>
    <slice>
      <filter dst_ip="148.29.24.129" src_ip="211.45.250.105" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1382{
style=filled;
color=gray75;
1429[label="138.186.177.107;d;18pkt 18fpkt", shape=diamond, color=yellow];
stat1382[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.128.0.106:80, 138.186.177.107:*}[50%]&lt;BR/&gt;{38.72.234.72:80, 138.186.177.107:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.6667%)&lt;BR/&gt; 110: (5.55556%)&lt;BR/&gt; 3264: (2.77778%)&lt;BR/&gt; 3263: (2.77778%)&lt;BR/&gt; 3262: (2.77778%)&gt;];
}
1429--1430[label="0.5;9pkt 9fpkt"];
1429--2833[label="1;18pkt 18fpkt"];
1429--4305[label="0.5;9pkt 9fpkt"];
1429--6245[label="0.5;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.177.107" src_ip="198.128.0.106" src_port="80"/>
      <filter dst_ip="138.186.177.107" src_ip="38.72.234.72" src_port="80"/>
    </slice>
    <from sec="1039669240" usec="0"/>
    <to sec="1039669532" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1383{
style=filled;
color=gray75;
4310[label="38.21.64.106;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6248[label="38.21.64.106;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1383[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.21.64.106:80, 148.110.196.148:*}[66.6667%]&lt;BR/&gt;{38.21.64.106:80, 148.110.216.161:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54336: (9.09091%)&lt;BR/&gt; 54335: (9.09091%)&lt;BR/&gt; 54325: (9.09091%)&lt;BR/&gt; 54314: (9.09091%)&gt;];
}
4310--6248[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.196.148" src_ip="38.21.64.106" src_port="80"/>
      <filter dst_ip="148.110.216.161" src_ip="38.21.64.106" src_port="80"/>
    </slice>
    <from sec="1039669295" usec="0"/>
    <to sec="1039669711" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645838,1.80177,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1384{
style=filled;
color=gray75;
1148[label="215.87.70.106;s;17pkt 17fpkt", shape=diamond, color=yellow];
4311[label="215.87.70.106;18pkt 18fpkt", shape=pentagon, color=darkviolet];
6249[label="215.87.70.106;18pkt 18fpkt", shape=invtriangle, color=brown];
stat1384[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.87.70.106:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1148--4311[label="1;17pkt 17fpkt"];
1148--6249[label="1;17pkt 17fpkt"];
4311--6249[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter src_ip="215.87.70.106"/>
    </slice>
    <from sec="1039669212" usec="0"/>
    <to sec="1039669861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1385{
style=filled;
color=gray75;
4317[label="98.180.154.106;141pkt 141fpkt", shape=pentagon, color=darkviolet];
6252[label="98.180.154.106;142pkt 142fpkt", shape=invtriangle, color=brown];
7499[label="98.180.154.106;141pkt 141fpkt", shape=invhouse, color=bisque];
stat1385[shape=component, label=&lt;Rules:&lt;BR/&gt;{98.180.154.106:0, *:1080}[36.6197%]&lt;BR/&gt;{98.180.154.106:0, *:3128}[31.6901%]&lt;BR/&gt;{98.180.154.106:0, *:8080}[31.6901%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (50%)&lt;BR/&gt; 1080: (18.3962%)&lt;BR/&gt; 8080: (15.9198%)&lt;BR/&gt; 3128: (15.684%)&gt;];
}
4317--6252[label="1;141pkt 141fpkt"];
4317--7499[label="1;141pkt 141fpkt"];
6252--7499[label="1;141pkt 141fpkt"];
</description>
    <slice>
      <filter dst_port="1080" src_ip="98.180.154.106"/>
      <filter dst_port="8080" src_ip="98.180.154.106"/>
      <filter dst_port="3128" src_ip="98.180.154.106"/>
    </slice>
    <from sec="1039669209" usec="0"/>
    <to sec="1039669910" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1386{
style=filled;
color=gray75;
4321[label="215.87.75.107;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6254[label="215.87.75.107;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1386[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.87.75.107:80, 131.221.147.27:4432}[25%]&lt;BR/&gt;{215.87.75.107:80, 197.139.177.222:43925}[25%]&lt;BR/&gt;{215.87.75.107:80, 197.139.177.222:43942}[25%]&lt;BR/&gt;{215.87.75.107:80, 197.139.177.222:44053}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 44053: (12.5%)&lt;BR/&gt; 43942: (12.5%)&lt;BR/&gt; 43925: (12.5%)&lt;BR/&gt; 4432: (12.5%)&gt;];
}
4321--6254[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="197.139.177.222" dst_port="44053" src_ip="215.87.75.107" src_port="80"/>
      <filter dst_ip="197.139.177.222" dst_port="43942" src_ip="215.87.75.107" src_port="80"/>
      <filter dst_ip="197.139.177.222" dst_port="43925" src_ip="215.87.75.107" src_port="80"/>
      <filter dst_ip="131.221.147.27" dst_port="4432" src_ip="215.87.75.107" src_port="80"/>
    </slice>
    <from sec="1039669429" usec="0"/>
    <to sec="1039669558" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1387{
style=filled;
color=gray75;
1627[label="215.90.72.16;d;24pkt 24fpkt", shape=diamond, color=yellow];
4327[label="96.24.153.107;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6258[label="96.24.153.107;3pkt 3fpkt", shape=invtriangle, color=brown];
7501[label="96.24.153.107;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1387[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.24.153.81:80, 215.90.72.16:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.9394%)&lt;BR/&gt; 1395: (6.06061%)&lt;BR/&gt; 1394: (6.06061%)&lt;BR/&gt; 1390: (6.06061%)&lt;BR/&gt; 10004: (3.0303%)&gt;];
}
1627--2937[label="0.636364;14pkt 14fpkt"];
1627--3162[label="0.636364;14pkt 14fpkt"];
1627--4327[label="1;3pkt 3fpkt"];
1627--6258[label="1;3pkt 3fpkt"];
1627--7501[label="1;3pkt 3fpkt"];
4327--6258[label="1;3pkt 3fpkt"];
4327--7501[label="1;3pkt 3fpkt"];
6258--7501[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.72.16" src_ip="96.24.153.81" src_port="80"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="172.93.20.108"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1389{
style=filled;
color=gray75;
4336[label="192.66.15.109;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6263[label="192.66.15.109;7pkt 7fpkt", shape=invtriangle, color=brown];
stat1389[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.66.15.109:80, 221.47.8.17:*}[57.1429%]&lt;BR/&gt;{192.66.15.109:80, 221.47.8.65:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1885: (7.69231%)&lt;BR/&gt; 1883: (7.69231%)&lt;BR/&gt; 1116: (7.69231%)&lt;BR/&gt; 1100: (7.69231%)&gt;];
}
4336--6263[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="221.47.8.17" src_ip="192.66.15.109" src_port="80"/>
      <filter dst_ip="221.47.8.65" src_ip="192.66.15.109" src_port="80"/>
    </slice>
    <from sec="1039669314" usec="0"/>
    <to sec="1039669765" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1390{
style=filled;
color=gray75;
4340[label="169.126.142.109;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6264[label="169.126.142.109;9pkt 9fpkt", shape=invtriangle, color=brown];
7503[label="169.126.142.109;9pkt 9fpkt", shape=invhouse, color=bisque];
stat1390[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.126.142.109:80, 64.150.226.159:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2869: (5.55556%)&lt;BR/&gt; 2868: (5.55556%)&lt;BR/&gt; 2867: (5.55556%)&lt;BR/&gt; 2866: (5.55556%)&gt;];
}
4340--6264[label="1;9pkt 9fpkt"];
4340--7503[label="1;9pkt 9fpkt"];
6264--7503[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="64.150.226.159" src_ip="169.126.142.109" src_port="80"/>
    </slice>
    <from sec="1039669406" usec="0"/>
    <to sec="1039669691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1391{
style=filled;
color=gray75;
4347[label="36.0.160.110;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6268[label="36.0.160.110;2pkt 2fpkt", shape=invtriangle, color=brown];
7506[label="36.0.160.110;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1391[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.0.160.110:80, 138.7.64.164:3260}[50%]&lt;BR/&gt;{36.0.160.110:0, 138.7.9.234:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3260: (37.5%)&lt;BR/&gt; 80: (37.5%)&lt;BR/&gt; 0: (25%)&gt;];
}
4347--6268[label="1;1pkt 1fpkt"];
4347--7506[label="1;1pkt 1fpkt"];
6268--7506[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.7.9.234" src_ip="36.0.160.110"/>
      <filter dst_ip="138.7.64.164" dst_port="3260" src_ip="36.0.160.110" src_port="80"/>
    </slice>
    <from sec="1039669390" usec="0"/>
    <to sec="1039669397" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1392{
style=filled;
color=gray75;
4349[label="198.164.1.111;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6269[label="198.164.1.111;6pkt 6fpkt", shape=invtriangle, color=brown];
stat1392[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.164.1.111:80, 215.87.67.142:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2272: (7.69231%)&lt;BR/&gt; 2270: (7.69231%)&lt;BR/&gt; 2269: (7.69231%)&lt;BR/&gt; 1904: (7.69231%)&gt;];
}
4349--6269[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="215.87.67.142" src_ip="198.164.1.111" src_port="80"/>
    </slice>
    <from sec="1039669812" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.66.11.111"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669432" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="128.32.151.111"/>
    </slice>
    <from sec="1039669392" usec="0"/>
    <to sec="1039669459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1395{
style=filled;
color=gray75;
4358[label="169.126.142.112;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6276[label="169.126.142.112;8pkt 8fpkt", shape=invtriangle, color=brown];
stat1395[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.126.142.112:80, 215.37.210.236:*}[50%]&lt;BR/&gt;{169.126.142.112:80, 215.37.208.101:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 35496: (6.25%)&lt;BR/&gt; 1828: (6.25%)&lt;BR/&gt; 1354: (6.25%)&lt;BR/&gt; 1353: (6.25%)&gt;];
}
4358--6276[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="215.37.210.236" src_ip="169.126.142.112" src_port="80"/>
      <filter dst_ip="215.37.208.101" src_ip="169.126.142.112" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669913" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="149.203.97.113"/>
    </slice>
    <from sec="1039669215" usec="0"/>
    <to sec="1039669924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1397{
style=filled;
color=gray75;
4365[label="203.11.100.113;123pkt 123fpkt", shape=pentagon, color=darkviolet];
6281[label="203.11.100.113;122pkt 122fpkt", shape=invtriangle, color=brown];
7516[label="203.11.100.113;122pkt 122fpkt", shape=invhouse, color=bisque];
stat1397[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.11.100.113:15266, *:137}[47.1545%]&lt;BR/&gt;{203.11.100.113:15701, *:137}[28.4553%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 15266: (23.7057%)&lt;BR/&gt; 15701: (14.3052%)&lt;BR/&gt; 14992: (1.63488%)&lt;BR/&gt; 14985: (1.63488%)&gt;];
}
4365--6281[label="1;122pkt 122fpkt"];
4365--7516[label="1;122pkt 122fpkt"];
6281--7516[label="1;122pkt 122fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="203.11.100.113" src_port="15266"/>
      <filter dst_port="137" src_ip="203.11.100.113" src_port="15701"/>
    </slice>
    <from sec="1039669335" usec="0"/>
    <to sec="1039669740" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790471,1.82041,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1398{
style=filled;
color=gray75;
201[label="39.4.152.113s;199pkt 199fpkt", shape=rectangle, color=red];
4367[label="39.4.152.113;255pkt 255fpkt", shape=pentagon, color=darkviolet];
6282[label="39.4.152.113;255pkt 255fpkt", shape=invtriangle, color=brown];
stat1398[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.4.152.113:64614, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64614: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
201--4367[label="1;199pkt 199fpkt"];
201--6282[label="1;199pkt 199fpkt"];
4367--6282[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="39.4.152.113" src_port="64614"/>
    </slice>
    <from sec="1039669722" usec="0"/>
    <to sec="1039669761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1399{
style=filled;
color=gray75;
4377[label="96.196.42.115;138pkt 138fpkt", shape=pentagon, color=darkviolet];
6290[label="96.196.42.115;137pkt 137fpkt", shape=invtriangle, color=brown];
7521[label="96.196.42.115;137pkt 137fpkt", shape=invhouse, color=bisque];
stat1399[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.196.42.115:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4377--6290[label="1;137pkt 137fpkt"];
4377--7521[label="1;137pkt 137fpkt"];
6290--7521[label="1;137pkt 137fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.196.42.115" src_port="1025"/>
    </slice>
    <from sec="1039669441" usec="0"/>
    <to sec="1039669474" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1400{
style=filled;
color=gray75;
4378[label="60.167.89.115;256pkt 256fpkt", shape=pentagon, color=darkviolet];
6291[label="60.167.89.115;255pkt 255fpkt", shape=invtriangle, color=brown];
7522[label="60.167.89.115;256pkt 256fpkt", shape=invhouse, color=bisque];
stat1400[shape=component, label=&lt;Rules:&lt;BR/&gt;{60.167.89.115:1065, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1065: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4378--6291[label="1;255pkt 255fpkt"];
4378--7522[label="1;256pkt 256fpkt"];
6291--7522[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="60.167.89.115" src_port="1065"/>
    </slice>
    <from sec="1039669717" usec="0"/>
    <to sec="1039669732" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1401{
style=filled;
color=gray75;
4383[label="204.79.29.116;160pkt 160fpkt", shape=pentagon, color=darkviolet];
6295[label="204.79.29.116;160pkt 160fpkt", shape=invtriangle, color=brown];
stat1401[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.79.29.116:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4383--6295[label="1;160pkt 160fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="204.79.29.116" src_port="1026"/>
    </slice>
    <from sec="1039669520" usec="0"/>
    <to sec="1039669534" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1402{
style=filled;
color=gray75;
4385[label="202.85.97.116;116pkt 116fpkt", shape=pentagon, color=darkviolet];
6297[label="202.85.97.116;116pkt 116fpkt", shape=invtriangle, color=brown];
7525[label="202.85.97.116;115pkt 115fpkt", shape=invhouse, color=bisque];
stat1402[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.85.97.116:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 61264: (0.864553%)&lt;BR/&gt; 61755: (0.432277%)&lt;BR/&gt; 61750: (0.432277%)&lt;BR/&gt; 61745: (0.432277%)&gt;];
}
4385--6297[label="1;116pkt 116fpkt"];
4385--7525[label="1;115pkt 115fpkt"];
6297--7525[label="1;115pkt 115fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.85.97.116"/>
    </slice>
    <from sec="1039669582" usec="0"/>
    <to sec="1039669602" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="64.171.39.118"/>
    </slice>
    <from sec="1039669362" usec="0"/>
    <to sec="1039669813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.178.36.119"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,501,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1405{
style=filled;
color=gray75;
927[label="140.3.82.119;s;13pkt 13fpkt", shape=diamond, color=yellow];
1800[label="192.98.52.22;d;3pkt 3fpkt", shape=diamond, color=yellow];
4404[label="140.3.82.119;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6308[label="140.3.82.119;13pkt 13fpkt", shape=invtriangle, color=brown];
7529[label="140.3.82.119;13pkt 13fpkt", shape=invhouse, color=bisque];
stat1405[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.82.119:21, *:*}[64.2857%]&lt;BR/&gt;{*:21, 192.98.52.22:*}[21.4286%]&lt;BR/&gt;{140.3.82.119:53, *:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (35.1852%)&lt;BR/&gt; 53: (14.8148%)&lt;BR/&gt; 4613: (4.62963%)&lt;BR/&gt; 1280: (4.62963%)&lt;BR/&gt; 32789: (3.7037%)&gt;];
}
927--1800[label="0.666667;2pkt 2fpkt"];
927--2287[label="0.5;2pkt 2fpkt"];
927--4404[label="1;12pkt 12fpkt"];
927--6308[label="1;13pkt 13fpkt"];
927--7529[label="1;13pkt 13fpkt"];
1800--4404[label="0.666667;2pkt 2fpkt"];
1800--6308[label="0.666667;2pkt 2fpkt"];
1800--7529[label="0.666667;2pkt 2fpkt"];
4404--6308[label="1;12pkt 12fpkt"];
4404--7529[label="1;12pkt 12fpkt"];
6308--7529[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter src_ip="140.3.82.119" src_port="21"/>
      <filter src_ip="140.3.82.119" src_port="53"/>
      <filter dst_ip="192.98.52.22" src_port="21"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1406{
style=filled;
color=gray75;
824[label="140.3.95.119;s;41pkt 41fpkt", shape=diamond, color=yellow];
1490[label="218.35.174.204;d;2pkt 2fpkt", shape=diamond, color=yellow];
1770[label="201.97.13.185;d;2pkt 2fpkt", shape=diamond, color=yellow];
2870[label="140.3.95.119;s;39pkt 39fpkt", shape=hexagon, color=black];
4405[label="140.3.95.119;41pkt 41fpkt", shape=pentagon, color=darkviolet];
6309[label="140.3.95.119;40pkt 40fpkt", shape=invtriangle, color=brown];
7530[label="140.3.95.119;40pkt 40fpkt", shape=invhouse, color=bisque];
stat1406[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.95.119:*, *:80}[80.4878%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.2439%)&lt;BR/&gt; 20730: (2.92683%)&lt;BR/&gt; 5190: (2.43902%)&lt;BR/&gt; 1863: (2.43902%)&lt;BR/&gt; 143: (1.95122%)&gt;];
}
824--1490[label="1;2pkt 2fpkt"];
824--1770[label="1;2pkt 2fpkt"];
824--2870[label="1;39pkt 39fpkt"];
824--3185[label="0.0487805;2pkt 2fpkt"];
824--4405[label="1;41pkt 41fpkt"];
824--6309[label="1;40pkt 40fpkt"];
824--7530[label="1;40pkt 40fpkt"];
1490--2870[label="1;2pkt 2fpkt"];
1490--4405[label="1;2pkt 2fpkt"];
1490--6309[label="1;2pkt 2fpkt"];
1490--7530[label="1;2pkt 2fpkt"];
1770--2870[label="1;2pkt 2fpkt"];
1770--4405[label="1;2pkt 2fpkt"];
1770--6309[label="1;2pkt 2fpkt"];
1770--7530[label="1;2pkt 2fpkt"];
2870--3185[label="0.0512821;2pkt 2fpkt"];
2870--4405[label="1;39pkt 39fpkt"];
2870--6309[label="0.974359;38pkt 38fpkt"];
2870--7530[label="0.974359;38pkt 38fpkt"];
4405--6309[label="1;40pkt 40fpkt"];
4405--7530[label="1;40pkt 40fpkt"];
6309--7530[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="140.3.95.119"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1407{
style=filled;
color=gray75;
4408[label="140.3.243.119;64pkt 64fpkt", shape=pentagon, color=darkviolet];
6312[label="140.3.243.119;64pkt 64fpkt", shape=invtriangle, color=brown];
7532[label="140.3.243.119;64pkt 64fpkt", shape=invhouse, color=bisque];
stat1407[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.243.119:*, 211.45.228.7:80}[46.875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2188%)&lt;BR/&gt; 1148: (0.78125%)&lt;BR/&gt; 1142: (0.78125%)&lt;BR/&gt; 1141: (0.78125%)&lt;BR/&gt; 1140: (0.78125%)&gt;];
}
4408--6312[label="1;64pkt 64fpkt"];
4408--7532[label="1;64pkt 64fpkt"];
6312--7532[label="1;64pkt 64fpkt"];
</description>
    <slice>
      <filter dst_ip="211.45.228.7" dst_port="80" src_ip="140.3.243.119"/>
    </slice>
    <from sec="1039669849" usec="0"/>
    <to sec="1039669907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1408{
style=filled;
color=gray75;
4409[label="197.152.1.120;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6313[label="197.152.1.120;7pkt 7fpkt", shape=invtriangle, color=brown];
7533[label="197.152.1.120;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1408[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.152.1.120:80, 140.3.243.153:*}[42.8571%]&lt;BR/&gt;{197.152.1.120:80, 140.3.244.86:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3833: (7.14286%)&lt;BR/&gt; 2891: (7.14286%)&lt;BR/&gt; 2890: (7.14286%)&lt;BR/&gt; 2376: (7.14286%)&gt;];
}
4409--6313[label="1;7pkt 7fpkt"];
4409--7533[label="1;7pkt 7fpkt"];
6313--7533[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.243.153" src_ip="197.152.1.120" src_port="80"/>
      <filter dst_ip="140.3.244.86" src_ip="197.152.1.120" src_port="80"/>
    </slice>
    <from sec="1039669339" usec="0"/>
    <to sec="1039669629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.192.134.120"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1410{
style=filled;
color=gray75;
1211[label="140.3.201.120;s;38pkt 38fpkt", shape=diamond, color=yellow];
stat1410[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.201.120:*, 38.72.234.140:80}[55.2632%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.0526%)&lt;BR/&gt; 443: (3.94737%)&lt;BR/&gt; 2080: (1.31579%)&lt;BR/&gt; 2079: (1.31579%)&lt;BR/&gt; 2078: (1.31579%)&gt;];
}
1211--1435[label="0.552632;21pkt 21fpkt"];
1211--1639[label="0.0526316;2pkt 2fpkt"];
1211--4415[label="1;38pkt 38fpkt"];
1211--6318[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_ip="38.72.234.140" dst_port="80" src_ip="140.3.201.120"/>
    </slice>
    <from sec="1039669387" usec="0"/>
    <to sec="1039669432" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1411{
style=filled;
color=gray75;
4416[label="96.195.208.120;126pkt 126fpkt", shape=pentagon, color=darkviolet];
6319[label="96.195.208.120;127pkt 127fpkt", shape=invtriangle, color=brown];
7538[label="96.195.208.120;127pkt 127fpkt", shape=invhouse, color=bisque];
stat1411[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.195.208.120:60887, *:137}[81.8898%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 60887: (40.9211%)&lt;BR/&gt; 60885: (5.13158%)&lt;BR/&gt; 60891: (3.94737%)&gt;];
}
4416--6319[label="1;126pkt 126fpkt"];
4416--7538[label="1;126pkt 126fpkt"];
6319--7538[label="1;127pkt 127fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.195.208.120" src_port="60887"/>
    </slice>
    <from sec="1039669452" usec="0"/>
    <to sec="1039669492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="64.139.74.121"/>
    </slice>
    <from sec="1039669221" usec="0"/>
    <to sec="1039669916" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="140.3.211.121"/>
    </slice>
    <from sec="1039669556" usec="0"/>
    <to sec="1039669631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1414{
style=filled;
color=gray75;
4429[label="36.96.2.122;115pkt 115fpkt", shape=pentagon, color=darkviolet];
6326[label="36.96.2.122;115pkt 115fpkt", shape=invtriangle, color=brown];
stat1414[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.96.2.122:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4429--6326[label="1;115pkt 115fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="36.96.2.122" src_port="1026"/>
    </slice>
    <from sec="1039669570" usec="0"/>
    <to sec="1039669590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1415{
style=filled;
color=gray75;
4430[label="96.50.20.122;191pkt 191fpkt", shape=pentagon, color=darkviolet];
6327[label="96.50.20.122;192pkt 192fpkt", shape=invtriangle, color=brown];
7540[label="96.50.20.122;191pkt 191fpkt", shape=invhouse, color=bisque];
stat1415[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.50.20.122:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4430--6327[label="1;191pkt 191fpkt"];
4430--7540[label="1;191pkt 191fpkt"];
6327--7540[label="1;191pkt 191fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.50.20.122" src_port="1025"/>
    </slice>
    <from sec="1039669396" usec="0"/>
    <to sec="1039669433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1416{
style=filled;
color=gray75;
4431[label="198.142.36.122;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6328[label="198.142.36.122;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1416[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.142.36.122:3963, 140.3.237.54:80}[50%]&lt;BR/&gt;{198.142.36.122:3964, 140.3.237.54:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3964: (25%)&lt;BR/&gt; 3963: (25%)&gt;];
}
4431--6328[label="1;2pkt 2fpkt"];
4431--7541[label="1;2pkt 2fpkt"];
6328--7541[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.237.54" dst_port="80" src_ip="198.142.36.122" src_port="3964"/>
      <filter dst_ip="140.3.237.54" dst_port="80" src_ip="198.142.36.122" src_port="3963"/>
    </slice>
    <from sec="1039669566" usec="0"/>
    <to sec="1039669596" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="64.219.128.122"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.93.187.122"/>
    </slice>
    <from sec="1039669395" usec="0"/>
    <to sec="1039669756" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1419{
style=filled;
color=gray75;
4442[label="140.3.84.123;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6333[label="140.3.84.123;1pkt 1fpkt", shape=invtriangle, color=brown];
7544[label="140.3.84.123;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1419[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.84.123:1026, 39.198.50.34:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4442--6333[label="1;1pkt 1fpkt"];
4442--7544[label="1;1pkt 1fpkt"];
6333--7544[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="39.198.50.34" dst_port="80" src_ip="140.3.84.123" src_port="1026"/>
    </slice>
    <from sec="1039669494" usec="0"/>
    <to sec="1039669585" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1420{
style=filled;
color=gray75;
4448[label="150.32.16.124;129pkt 129fpkt", shape=pentagon, color=darkviolet];
6336[label="150.32.16.124;128pkt 128fpkt", shape=invtriangle, color=brown];
7547[label="150.32.16.124;128pkt 128fpkt", shape=invhouse, color=bisque];
stat1420[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.32.16.124:1087, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1087: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4448--6336[label="1;128pkt 128fpkt"];
4448--7547[label="1;128pkt 128fpkt"];
6336--7547[label="1;128pkt 128fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="150.32.16.124" src_port="1087"/>
    </slice>
    <from sec="1039669771" usec="0"/>
    <to sec="1039669801" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1421{
style=filled;
color=gray75;
4450[label="169.126.142.124;22pkt 22fpkt", shape=pentagon, color=darkviolet];
6338[label="169.126.142.124;22pkt 22fpkt", shape=invtriangle, color=brown];
stat1421[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.126.142.124:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4450--6338[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter src_ip="169.126.142.124"/>
    </slice>
    <from sec="1039669207" usec="0"/>
    <to sec="1039669908" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1422{
style=filled;
color=gray75;
4452[label="38.190.235.124;23pkt 23fpkt", shape=pentagon, color=darkviolet];
6340[label="38.190.235.124;24pkt 24fpkt", shape=invtriangle, color=brown];
7549[label="38.190.235.124;23pkt 23fpkt", shape=invhouse, color=bisque];
stat1422[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.190.235.124:80, 140.3.213.230:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1272: (2.14286%)&lt;BR/&gt; 1271: (2.14286%)&lt;BR/&gt; 1270: (2.14286%)&lt;BR/&gt; 1269: (2.14286%)&gt;];
}
4452--6340[label="1;23pkt 23fpkt"];
4452--7549[label="1;23pkt 23fpkt"];
6340--7549[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.213.230" src_ip="38.190.235.124" src_port="80"/>
    </slice>
    <from sec="1039669782" usec="0"/>
    <to sec="1039669794" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1423{
style=filled;
color=gray75;
4453[label="210.25.66.125;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6341[label="210.25.66.125;3pkt 3fpkt", shape=invtriangle, color=brown];
7550[label="210.25.66.125;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1423[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.25.66.125:80, 172.93.136.161:1864}[25%]&lt;BR/&gt;{210.25.66.125:80, 172.93.136.161:1871}[25%]&lt;BR/&gt;{210.25.66.125:80, 172.93.136.161:1899}[25%]&lt;BR/&gt;{210.25.66.125:80, 172.93.136.161:1904}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1904: (15%)&lt;BR/&gt; 1899: (15%)&lt;BR/&gt; 1871: (15%)&lt;BR/&gt; 1864: (5%)&gt;];
}
4453--6341[label="1;3pkt 3fpkt"];
4453--7550[label="1;3pkt 3fpkt"];
6341--7550[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="172.93.136.161" dst_port="1904" src_ip="210.25.66.125" src_port="80"/>
      <filter dst_ip="172.93.136.161" dst_port="1899" src_ip="210.25.66.125" src_port="80"/>
      <filter dst_ip="172.93.136.161" dst_port="1871" src_ip="210.25.66.125" src_port="80"/>
      <filter dst_ip="172.93.136.161" dst_port="1864" src_ip="210.25.66.125" src_port="80"/>
    </slice>
    <from sec="1039669479" usec="0"/>
    <to sec="1039669494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1424{
style=filled;
color=gray75;
4454[label="96.195.114.125;63pkt 63fpkt", shape=pentagon, color=darkviolet];
6342[label="96.195.114.125;63pkt 63fpkt", shape=invtriangle, color=brown];
7551[label="96.195.114.125;63pkt 63fpkt", shape=invhouse, color=bisque];
stat1424[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.195.114.125:80, 140.3.255.33:*}[55.5556%]&lt;BR/&gt;{96.195.114.125:80, 140.3.255.243:*}[44.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1300: (0.793651%)&lt;BR/&gt; 1299: (0.793651%)&lt;BR/&gt; 1298: (0.793651%)&lt;BR/&gt; 1297: (0.793651%)&gt;];
}
4454--6342[label="1;63pkt 63fpkt"];
4454--7551[label="1;63pkt 63fpkt"];
6342--7551[label="1;63pkt 63fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.255.33" src_ip="96.195.114.125" src_port="80"/>
      <filter dst_ip="140.3.255.243" src_ip="96.195.114.125" src_port="80"/>
    </slice>
    <from sec="1039669218" usec="0"/>
    <to sec="1039669926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.36.223.125"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669407" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1426{
style=filled;
color=gray75;
4459[label="197.223.78.126;108pkt 108fpkt", shape=pentagon, color=darkviolet];
6347[label="197.223.78.126;108pkt 108fpkt", shape=invtriangle, color=brown];
stat1426[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.223.78.126:65272, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65272: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4459--6347[label="1;108pkt 108fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.223.78.126" src_port="65272"/>
    </slice>
    <from sec="1039669404" usec="0"/>
    <to sec="1039669421" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1427{
style=filled;
color=gray75;
4460[label="169.126.142.126;31pkt 31fpkt", shape=pentagon, color=darkviolet];
6348[label="169.126.142.126;31pkt 31fpkt", shape=invtriangle, color=brown];
7555[label="169.126.142.126;30pkt 30fpkt", shape=invhouse, color=bisque];
stat1427[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.126.142.126:*, 215.21.25.16:25}[29.0323%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (46.7391%)&lt;BR/&gt; 113: (3.26087%)&lt;BR/&gt; 38969: (1.63043%)&lt;BR/&gt; 37884: (1.63043%)&lt;BR/&gt; 37581: (1.63043%)&gt;];
}
4460--6348[label="1;31pkt 31fpkt"];
4460--7555[label="1;30pkt 30fpkt"];
6348--7555[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="215.21.25.16" dst_port="25" src_ip="169.126.142.126"/>
    </slice>
    <from sec="1039669269" usec="0"/>
    <to sec="1039669914" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1428{
style=filled;
color=gray75;
4467[label="96.209.172.127;164pkt 164fpkt", shape=pentagon, color=darkviolet];
6350[label="96.209.172.127;163pkt 163fpkt", shape=invtriangle, color=brown];
7556[label="96.209.172.127;164pkt 164fpkt", shape=invhouse, color=bisque];
stat1428[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.209.172.127:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4467--6350[label="1;163pkt 163fpkt"];
4467--7556[label="1;164pkt 164fpkt"];
6350--7556[label="1;163pkt 163fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.209.172.127" src_port="1027"/>
    </slice>
    <from sec="1039669820" usec="0"/>
    <to sec="1039669857" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.160.196.127"/>
    </slice>
    <from sec="1039669202" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1430{
style=filled;
color=gray75;
4471[label="203.11.212.127;194pkt 194fpkt", shape=pentagon, color=darkviolet];
6353[label="203.11.212.127;195pkt 195fpkt", shape=invtriangle, color=brown];
7558[label="203.11.212.127;194pkt 194fpkt", shape=invhouse, color=bisque];
stat1430[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.11.212.127:1033, *:137}[99.4872%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50.2573%)&lt;BR/&gt; 1033: (49.7427%)&gt;];
}
4471--6353[label="1;194pkt 194fpkt"];
4471--7558[label="1;194pkt 194fpkt"];
6353--7558[label="1;194pkt 194fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="203.11.212.127" src_port="1033"/>
    </slice>
    <from sec="1039669371" usec="0"/>
    <to sec="1039669490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1431{
style=filled;
color=gray75;
4472[label="96.208.215.127;151pkt 151fpkt", shape=pentagon, color=darkviolet];
6354[label="96.208.215.127;151pkt 151fpkt", shape=invtriangle, color=brown];
7559[label="96.208.215.127;151pkt 151fpkt", shape=invhouse, color=bisque];
stat1431[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.208.215.127:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4472--6354[label="1;151pkt 151fpkt"];
4472--7559[label="1;151pkt 151fpkt"];
6354--7559[label="1;151pkt 151fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.208.215.127" src_port="1025"/>
    </slice>
    <from sec="1039669512" usec="0"/>
    <to sec="1039669547" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="142.150.20.128"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1433{
style=filled;
color=gray75;
4479[label="202.82.120.128;173pkt 173fpkt", shape=pentagon, color=darkviolet];
6358[label="202.82.120.128;172pkt 172fpkt", shape=invtriangle, color=brown];
7563[label="202.82.120.128;173pkt 173fpkt", shape=invhouse, color=bisque];
stat1433[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.82.120.128:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4479--6358[label="1;172pkt 172fpkt"];
4479--7563[label="1;173pkt 173fpkt"];
6358--7563[label="1;172pkt 172fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.82.120.128" src_port="1026"/>
    </slice>
    <from sec="1039669787" usec="0"/>
    <to sec="1039669815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="199.72.191.128"/>
    </slice>
    <from sec="1039669206" usec="0"/>
    <to sec="1039669927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.948246,1.86165,999,1 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_1435{
style=filled;
color=gray75;
223[label="202.75.218.129s;1pkt 1fpkt", shape=rectangle, color=red];
447[label="148.110.158.4;d;513pkt 513fpkt", shape=diamond, color=yellow];
756[label="99.172.126.69;s;1pkt 1fpkt", shape=diamond, color=yellow];
1558[label="61.140.15.201;s;1pkt 1fpkt", shape=diamond, color=yellow];
2118[label="61.165.201.21;s;1pkt 1fpkt", shape=diamond, color=yellow];
6018[label="99.172.126.69;1pkt 1fpkt", shape=invtriangle, color=brown];
6361[label="200.108.2.129;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1435[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 148.110.158.4:4662}[98.0507%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (49.0366%)&lt;BR/&gt; 6257: (1.15607%)&lt;BR/&gt; 3689: (0.385356%)&lt;BR/&gt; 3365: (0.289017%)&lt;BR/&gt; 1580: (0.289017%)&gt;];
}
223--447[label="1;1pkt 1fpkt"];
223--6361[label="1;1pkt 1fpkt"];
447--756[label="1;1pkt 1fpkt"];
447--1037[label="1;1pkt 1fpkt"];
447--1558[label="1;1pkt 1fpkt"];
447--2118[label="1;1pkt 1fpkt"];
447--2121[label="1;1pkt 1fpkt"];
447--2798[label="1;1pkt 1fpkt"];
447--3182[label="0.00194932;1pkt 1fpkt"];
447--4648[label="1;1pkt 1fpkt"];
447--6018[label="1;1pkt 1fpkt"];
447--6361[label="1;1pkt 1fpkt"];
447--6474[label="1;1pkt 1fpkt"];
756--6018[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.158.4" dst_port="4662"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1436{
style=filled;
color=gray75;
222[label="197.90.102.129s;81pkt 81fpkt", shape=rectangle, color=red];
4488[label="197.90.102.129;190pkt 190fpkt", shape=pentagon, color=darkviolet];
6363[label="197.90.102.129;189pkt 189fpkt", shape=invtriangle, color=brown];
7567[label="197.90.102.129;189pkt 189fpkt", shape=invhouse, color=bisque];
stat1436[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.90.102.129:60488, *:137}[42.1053%]&lt;BR/&gt;{197.90.102.129:60530, *:137}[24.7368%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 60488: (18.49%)&lt;BR/&gt; 60530: (13.8675%)&lt;BR/&gt; 60522: (6.77966%)&lt;BR/&gt; 60514: (5.547%)&gt;];
}
222--4488[label="1;81pkt 81fpkt"];
222--6363[label="1;81pkt 81fpkt"];
222--7567[label="1;81pkt 81fpkt"];
4488--6363[label="1;189pkt 189fpkt"];
4488--7567[label="1;189pkt 189fpkt"];
6363--7567[label="1;189pkt 189fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.90.102.129" src_port="60488"/>
      <filter dst_port="137" src_ip="197.90.102.129" src_port="60530"/>
    </slice>
    <from sec="1039669692" usec="0"/>
    <to sec="1039669732" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1437{
style=filled;
color=gray75;
4489[label="193.165.113.129;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6364[label="193.165.113.129;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1437[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.165.113.129:80, 148.110.106.40:50384}[20%]&lt;BR/&gt;{193.165.113.129:80, 148.110.106.40:50385}[20%]&lt;BR/&gt;{193.165.113.129:80, 148.110.106.40:50386}[20%]&lt;BR/&gt;{193.165.113.129:80, 148.110.106.40:50387}[20%]&lt;BR/&gt;{193.165.113.129:80, 148.110.106.40:50395}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50395: (11.1111%)&lt;BR/&gt; 50387: (11.1111%)&lt;BR/&gt; 50386: (11.1111%)&lt;BR/&gt; 50385: (11.1111%)&gt;];
}
4489--6364[label="1;4pkt 4fpkt"];
4489--7568[label="1;4pkt 4fpkt"];
6364--7568[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.106.40" dst_port="50395" src_ip="193.165.113.129" src_port="80"/>
      <filter dst_ip="148.110.106.40" dst_port="50387" src_ip="193.165.113.129" src_port="80"/>
      <filter dst_ip="148.110.106.40" dst_port="50386" src_ip="193.165.113.129" src_port="80"/>
      <filter dst_ip="148.110.106.40" dst_port="50385" src_ip="193.165.113.129" src_port="80"/>
      <filter dst_ip="148.110.106.40" dst_port="50384" src_ip="193.165.113.129" src_port="80"/>
    </slice>
    <from sec="1039669302" usec="0"/>
    <to sec="1039669488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1438{
style=filled;
color=gray75;
4490[label="202.75.218.129;236pkt 236fpkt", shape=pentagon, color=darkviolet];
6365[label="202.75.218.129;235pkt 235fpkt", shape=invtriangle, color=brown];
7569[label="202.75.218.129;236pkt 236fpkt", shape=invhouse, color=bisque];
stat1438[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.75.218.129:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4490--6365[label="1;235pkt 235fpkt"];
4490--7569[label="1;236pkt 236fpkt"];
6365--7569[label="1;235pkt 235fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.75.218.129" src_port="1026"/>
    </slice>
    <from sec="1039669560" usec="0"/>
    <to sec="1039669597" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.172.252.129"/>
    </slice>
    <from sec="1039669203" usec="0"/>
    <to sec="1039669845" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1440{
style=filled;
color=gray75;
1725[label="138.186.49.130;s;88pkt 88fpkt", shape=diamond, color=yellow];
1784[label="215.219.116.169;d;5pkt 5fpkt", shape=diamond, color=yellow];
4495[label="138.186.49.130;91pkt 91fpkt", shape=pentagon, color=darkviolet];
6370[label="138.186.49.130;90pkt 90fpkt", shape=invtriangle, color=brown];
7573[label="138.186.49.130;91pkt 91fpkt", shape=invhouse, color=bisque];
stat1440[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.49.130:*, 208.166.235.32:80}[65.9341%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4521%)&lt;BR/&gt; 1381: (1.09589%)&lt;BR/&gt; 1460: (0.684932%)&lt;BR/&gt; 1459: (0.684932%)&lt;BR/&gt; 1458: (0.684932%)&gt;];
}
1725--1784[label="1;5pkt 5fpkt"];
1725--3185[label="0.0113636;1pkt 1fpkt"];
1725--4495[label="1;88pkt 88fpkt"];
1725--6370[label="0.988636;87pkt 87fpkt"];
1725--7573[label="1;88pkt 88fpkt"];
1784--4495[label="1;5pkt 5fpkt"];
1784--6370[label="0.8;4pkt 4fpkt"];
1784--7573[label="1;5pkt 5fpkt"];
4495--6370[label="1;90pkt 90fpkt"];
4495--7573[label="1;91pkt 91fpkt"];
6370--7573[label="1;90pkt 90fpkt"];
</description>
    <slice>
      <filter dst_ip="208.166.235.32" dst_port="80" src_ip="138.186.49.130"/>
    </slice>
    <from sec="1039669297" usec="0"/>
    <to sec="1039669872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.50.41.131"/>
    </slice>
    <from sec="1039669278" usec="0"/>
    <to sec="1039669395" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1442{
style=filled;
color=gray75;
4511[label="39.1.182.131;236pkt 236fpkt", shape=pentagon, color=darkviolet];
6381[label="39.1.182.131;235pkt 235fpkt", shape=invtriangle, color=brown];
7581[label="39.1.182.131;235pkt 235fpkt", shape=invhouse, color=bisque];
stat1442[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.1.182.131:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4511--6381[label="1;235pkt 235fpkt"];
4511--7581[label="1;235pkt 235fpkt"];
6381--7581[label="1;235pkt 235fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="39.1.182.131" src_port="1027"/>
    </slice>
    <from sec="1039669843" usec="0"/>
    <to sec="1039669883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1443{
style=filled;
color=gray75;
4514[label="143.182.27.132;218pkt 218fpkt", shape=pentagon, color=darkviolet];
6384[label="143.182.27.132;218pkt 218fpkt", shape=invtriangle, color=brown];
7583[label="143.182.27.132;218pkt 218fpkt", shape=invhouse, color=bisque];
stat1443[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.182.27.132:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4514--6384[label="1;218pkt 218fpkt"];
4514--7583[label="1;218pkt 218fpkt"];
6384--7583[label="1;218pkt 218fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="143.182.27.132" src_port="1029"/>
    </slice>
    <from sec="1039669329" usec="0"/>
    <to sec="1039669364" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1444{
style=filled;
color=gray75;
4521[label="140.3.246.132;23pkt 23fpkt", shape=pentagon, color=darkviolet];
6388[label="140.3.246.132;24pkt 24fpkt", shape=invtriangle, color=brown];
7587[label="140.3.246.132;23pkt 23fpkt", shape=invhouse, color=bisque];
stat1444[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.246.132:*, 221.138.143.0:113}[25%]&lt;BR/&gt;{140.3.246.132:25, 221.138.143.0:*}[25%]&lt;BR/&gt;{140.3.246.132:*, 221.138.143.245:113}[25%]&lt;BR/&gt;{140.3.246.132:25, 221.138.143.245:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (25.7143%)&lt;BR/&gt; 25: (24.2857%)&lt;BR/&gt; 56204: (2.14286%)&lt;BR/&gt; 48294: (2.14286%)&lt;BR/&gt; 40632: (2.14286%)&gt;];
}
4521--6388[label="1;23pkt 23fpkt"];
4521--7587[label="1;23pkt 23fpkt"];
6388--7587[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="221.138.143.245" src_ip="140.3.246.132" src_port="25"/>
      <filter dst_ip="221.138.143.245" dst_port="113" src_ip="140.3.246.132"/>
      <filter dst_ip="221.138.143.0" src_ip="140.3.246.132" src_port="25"/>
      <filter dst_ip="221.138.143.0" dst_port="113" src_ip="140.3.246.132"/>
    </slice>
    <from sec="1039669208" usec="0"/>
    <to sec="1039669908" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1445{
style=filled;
color=gray75;
4524[label="38.17.40.133;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6391[label="38.17.40.133;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1445[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.17.40.133:80, 140.3.210.10:1575}[50%]&lt;BR/&gt;{38.17.40.133:80, 140.3.210.10:1577}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1577: (25%)&lt;BR/&gt; 1575: (25%)&gt;];
}
4524--6391[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.210.10" dst_port="1577" src_ip="38.17.40.133" src_port="80"/>
      <filter dst_ip="140.3.210.10" dst_port="1575" src_ip="38.17.40.133" src_port="80"/>
    </slice>
    <from sec="1039669308" usec="0"/>
    <to sec="1039669334" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1446{
style=filled;
color=gray75;
4525[label="169.126.136.133;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6392[label="169.126.136.133;7pkt 7fpkt", shape=invtriangle, color=brown];
7590[label="169.126.136.133;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1446[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.126.136.133:80, 64.150.226.159:*}[71.4286%]&lt;BR/&gt;{169.126.136.133:80, 193.35.3.148:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50827: (7.14286%)&lt;BR/&gt; 50752: (7.14286%)&lt;BR/&gt; 2884: (7.14286%)&lt;BR/&gt; 2883: (7.14286%)&gt;];
}
4525--6392[label="1;7pkt 7fpkt"];
4525--7590[label="1;7pkt 7fpkt"];
6392--7590[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="64.150.226.159" src_ip="169.126.136.133" src_port="80"/>
      <filter dst_ip="193.35.3.148" src_ip="169.126.136.133" src_port="80"/>
    </slice>
    <from sec="1039669475" usec="0"/>
    <to sec="1039669870" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1447{
style=filled;
color=gray75;
4528[label="202.43.184.133;139pkt 139fpkt", shape=pentagon, color=darkviolet];
6394[label="202.43.184.133;139pkt 139fpkt", shape=invtriangle, color=brown];
7591[label="202.43.184.133;139pkt 139fpkt", shape=invhouse, color=bisque];
stat1447[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.43.184.133:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4528--6394[label="1;139pkt 139fpkt"];
4528--7591[label="1;139pkt 139fpkt"];
6394--7591[label="1;139pkt 139fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.43.184.133" src_port="1031"/>
    </slice>
    <from sec="1039669875" usec="0"/>
    <to sec="1039669897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1448{
style=filled;
color=gray75;
4532[label="169.126.1.134;76pkt 76fpkt", shape=pentagon, color=darkviolet];
6396[label="169.126.1.134;75pkt 75fpkt", shape=invtriangle, color=brown];
stat1448[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.126.1.134:53, *:53}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (57.2848%)&lt;BR/&gt; 25: (4.63576%)&lt;BR/&gt; 1024: (1.3245%)&lt;BR/&gt; 63526: (0.662252%)&lt;BR/&gt; 62288: (0.662252%)&gt;];
}
4532--6396[label="1;75pkt 75fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="169.126.1.134" src_port="53"/>
    </slice>
    <from sec="1039669207" usec="0"/>
    <to sec="1039669927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1449{
style=filled;
color=gray75;
4536[label="215.90.87.134;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6399[label="215.90.87.134;4pkt 4fpkt", shape=invtriangle, color=brown];
7593[label="215.90.87.134;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1449[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.90.87.134:3032, 92.254.250.20:6699}[25%]&lt;BR/&gt;{215.90.87.134:3033, 211.90.72.37:80}[25%]&lt;BR/&gt;{215.90.87.134:3016, 61.181.80.68:6699}[25%]&lt;BR/&gt;{215.90.87.134:3010, 211.90.155.139:1863}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (25%)&lt;BR/&gt; 3033: (12.5%)&lt;BR/&gt; 3032: (12.5%)&lt;BR/&gt; 3016: (12.5%)&lt;BR/&gt; 3010: (12.5%)&gt;];
}
4536--6399[label="1;4pkt 4fpkt"];
4536--7593[label="1;4pkt 4fpkt"];
6399--7593[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="211.90.155.139" dst_port="1863" src_ip="215.90.87.134" src_port="3010"/>
      <filter dst_ip="61.181.80.68" dst_port="6699" src_ip="215.90.87.134" src_port="3016"/>
      <filter dst_ip="211.90.72.37" dst_port="80" src_ip="215.90.87.134" src_port="3033"/>
      <filter dst_ip="92.254.250.20" dst_port="6699" src_ip="215.90.87.134" src_port="3032"/>
    </slice>
    <from sec="1039669202" usec="0"/>
    <to sec="1039669924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1450{
style=filled;
color=gray75;
4539[label="203.17.173.134;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6401[label="203.17.173.134;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1450[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.17.173.134:2898, 169.126.131.48:80}[20%]&lt;BR/&gt;{203.17.173.134:2901, 169.126.131.48:80}[20%]&lt;BR/&gt;{203.17.173.134:2902, 169.126.131.48:80}[20%]&lt;BR/&gt;{203.17.173.134:2904, 169.126.131.48:80}[20%]&lt;BR/&gt;{203.17.173.134:2906, 169.126.131.48:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2906: (10%)&lt;BR/&gt; 2904: (10%)&lt;BR/&gt; 2902: (10%)&lt;BR/&gt; 2901: (10%)&gt;];
}
4539--6401[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="169.126.131.48" dst_port="80" src_ip="203.17.173.134" src_port="2906"/>
      <filter dst_ip="169.126.131.48" dst_port="80" src_ip="203.17.173.134" src_port="2904"/>
      <filter dst_ip="169.126.131.48" dst_port="80" src_ip="203.17.173.134" src_port="2902"/>
      <filter dst_ip="169.126.131.48" dst_port="80" src_ip="203.17.173.134" src_port="2901"/>
      <filter dst_ip="169.126.131.48" dst_port="80" src_ip="203.17.173.134" src_port="2898"/>
    </slice>
    <from sec="1039669654" usec="0"/>
    <to sec="1039669877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1451{
style=filled;
color=gray75;
4544[label="38.250.218.134;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6406[label="38.250.218.134;9pkt 9fpkt", shape=invtriangle, color=brown];
stat1451[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.250.218.134:80, 214.231.185.25:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 42417: (5.26316%)&lt;BR/&gt; 42262: (5.26316%)&lt;BR/&gt; 42232: (5.26316%)&lt;BR/&gt; 42231: (5.26316%)&gt;];
}
4544--6406[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="214.231.185.25" src_ip="38.250.218.134" src_port="80"/>
    </slice>
    <from sec="1039669782" usec="0"/>
    <to sec="1039669820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1452{
style=filled;
color=gray75;
4547[label="96.66.72.135;14pkt 14fpkt", shape=pentagon, color=darkviolet];
6409[label="96.66.72.135;15pkt 15fpkt", shape=invtriangle, color=brown];
7598[label="96.66.72.135;14pkt 14fpkt", shape=invhouse, color=bisque];
stat1452[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.66.72.135:80, 138.186.52.170:*}[53.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 42556: (3.48837%)&lt;BR/&gt; 4781: (3.48837%)&lt;BR/&gt; 4780: (3.48837%)&lt;BR/&gt; 4612: (3.48837%)&gt;];
}
4547--6409[label="1;14pkt 14fpkt"];
4547--7598[label="1;14pkt 14fpkt"];
6409--7598[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.52.170" src_ip="96.66.72.135" src_port="80"/>
    </slice>
    <from sec="1039669269" usec="0"/>
    <to sec="1039669665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1453{
style=filled;
color=gray75;
4550[label="197.67.147.135;407pkt 407fpkt", shape=pentagon, color=darkviolet];
6411[label="197.67.147.135;407pkt 407fpkt", shape=invtriangle, color=brown];
7599[label="197.67.147.135;407pkt 407fpkt", shape=invhouse, color=bisque];
stat1453[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.67.147.135:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4550--6411[label="1;407pkt 407fpkt"];
4550--7599[label="1;407pkt 407fpkt"];
6411--7599[label="1;407pkt 407fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.67.147.135" src_port="1031"/>
    </slice>
    <from sec="1039669644" usec="0"/>
    <to sec="1039669744" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.221.19.136"/>
    </slice>
    <from sec="1039669487" usec="0"/>
    <to sec="1039669506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1455{
style=filled;
color=gray75;
4559[label="199.178.59.136;170pkt 170fpkt", shape=pentagon, color=darkviolet];
6417[label="199.178.59.136;169pkt 169fpkt", shape=invtriangle, color=brown];
7602[label="199.178.59.136;169pkt 169fpkt", shape=invhouse, color=bisque];
stat1455[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.178.59.136:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4559--6417[label="1;169pkt 169fpkt"];
4559--7602[label="1;169pkt 169fpkt"];
6417--7602[label="1;169pkt 169fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.178.59.136" src_port="1027"/>
    </slice>
    <from sec="1039669502" usec="0"/>
    <to sec="1039669528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1456{
style=filled;
color=gray75;
4560[label="96.17.65.136;102pkt 102fpkt", shape=pentagon, color=darkviolet];
6418[label="96.17.65.136;101pkt 101fpkt", shape=invtriangle, color=brown];
stat1456[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.17.65.136:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4560--6418[label="1;101pkt 101fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.17.65.136" src_port="1025"/>
    </slice>
    <from sec="1039669361" usec="0"/>
    <to sec="1039669377" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1457{
style=filled;
color=gray75;
4561[label="215.90.88.136;15pkt 15fpkt", shape=pentagon, color=darkviolet];
6419[label="215.90.88.136;16pkt 16fpkt", shape=invtriangle, color=brown];
7603[label="215.90.88.136;16pkt 16fpkt", shape=invhouse, color=bisque];
stat1457[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.90.88.136:*, 220.50.64.134:80}[87.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1437: (3.19149%)&lt;BR/&gt; 1436: (3.19149%)&lt;BR/&gt; 1435: (3.19149%)&lt;BR/&gt; 1434: (3.19149%)&gt;];
}
4561--6419[label="1;15pkt 15fpkt"];
4561--7603[label="1;15pkt 15fpkt"];
6419--7603[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="220.50.64.134" dst_port="80" src_ip="215.90.88.136"/>
    </slice>
    <from sec="1039669258" usec="0"/>
    <to sec="1039669611" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="162.116.108.136"/>
    </slice>
    <from sec="1039669206" usec="0"/>
    <to sec="1039669921" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.97.190.136"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1460{
style=filled;
color=gray75;
2144[label="211.45.231.6;d;10pkt 10fpkt", shape=diamond, color=yellow];
4568[label="140.3.213.136;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6424[label="140.3.213.136;5pkt 5fpkt", shape=invtriangle, color=brown];
7607[label="140.3.213.136;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1460[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.54.45:*, 211.45.231.6:80}[23.0769%]&lt;BR/&gt;{140.3.213.136:*, *:1863}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (32.6087%)&lt;BR/&gt; 1863: (15.2174%)&lt;BR/&gt; 1209: (8.69565%)&lt;BR/&gt; 1207: (8.69565%)&lt;BR/&gt; 1205: (6.52174%)&gt;];
}
2144--2691[label="0.1;1pkt 1fpkt"];
2144--3141[label="0.1;1pkt 1fpkt"];
2144--3941[label="0.1;1pkt 1fpkt"];
2144--4485[label="0.2;2pkt 2fpkt"];
2144--4568[label="0.5;2pkt 2fpkt"];
2144--6424[label="0.4;2pkt 2fpkt"];
2144--7607[label="0.5;2pkt 2fpkt"];
4568--6424[label="1;4pkt 4fpkt"];
4568--7607[label="1;4pkt 4fpkt"];
6424--7607[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_port="1863" src_ip="140.3.213.136"/>
      <filter dst_ip="211.45.231.6" dst_port="80" src_ip="138.186.54.45"/>
    </slice>
    <from sec="1039669209" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.188.1.137"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1462{
style=filled;
color=gray75;
4584[label="197.108.114.139;108pkt 108fpkt", shape=pentagon, color=darkviolet];
6434[label="197.108.114.139;108pkt 108fpkt", shape=invtriangle, color=brown];
7614[label="197.108.114.139;108pkt 108fpkt", shape=invhouse, color=bisque];
stat1462[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.108.114.139:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4584--6434[label="1;108pkt 108fpkt"];
4584--7614[label="1;108pkt 108fpkt"];
6434--7614[label="1;108pkt 108fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.108.114.139" src_port="1027"/>
    </slice>
    <from sec="1039669540" usec="0"/>
    <to sec="1039669567" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1463{
style=filled;
color=gray75;
234[label="36.232.1.141s;46pkt 46fpkt", shape=rectangle, color=red];
4597[label="36.232.1.141;181pkt 181fpkt", shape=pentagon, color=darkviolet];
6439[label="36.232.1.141;182pkt 182fpkt", shape=invtriangle, color=brown];
7618[label="36.232.1.141;181pkt 181fpkt", shape=invhouse, color=bisque];
stat1463[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.232.1.141:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
234--4597[label="1;46pkt 46fpkt"];
234--6439[label="1;46pkt 46fpkt"];
234--7618[label="1;46pkt 46fpkt"];
4597--6439[label="1;181pkt 181fpkt"];
4597--7618[label="1;181pkt 181fpkt"];
6439--7618[label="1;181pkt 181fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="36.232.1.141" src_port="1027"/>
    </slice>
    <from sec="1039669390" usec="0"/>
    <to sec="1039669419" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1464{
style=filled;
color=gray75;
4599[label="138.50.39.141;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6440[label="138.50.39.141;10pkt 10fpkt", shape=invtriangle, color=brown];
stat1464[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.50.39.141:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4599--6440[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="138.50.39.141"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790471,1.82041,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1465{
style=filled;
color=gray75;
238[label="149.153.245.141s;37pkt 37fpkt", shape=rectangle, color=red];
4603[label="149.153.245.141;99pkt 99fpkt", shape=pentagon, color=darkviolet];
6442[label="149.153.245.141;100pkt 100fpkt", shape=invtriangle, color=brown];
stat1465[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.153.245.141:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
238--4603[label="1;37pkt 37fpkt"];
238--6442[label="1;37pkt 37fpkt"];
4603--6442[label="1;99pkt 99fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="149.153.245.141" src_port="1029"/>
    </slice>
    <from sec="1039669584" usec="0"/>
    <to sec="1039669602" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="64.193.1.142"/>
    </slice>
    <from sec="1039669206" usec="0"/>
    <to sec="1039669926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1467{
style=filled;
color=gray75;
4607[label="212.203.62.142;170pkt 170fpkt", shape=pentagon, color=darkviolet];
6444[label="212.203.62.142;169pkt 169fpkt", shape=invtriangle, color=brown];
7620[label="212.203.62.142;170pkt 170fpkt", shape=invhouse, color=bisque];
stat1467[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.203.62.142:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4607--6444[label="1;169pkt 169fpkt"];
4607--7620[label="1;170pkt 170fpkt"];
6444--7620[label="1;169pkt 169fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="212.203.62.142" src_port="1031"/>
    </slice>
    <from sec="1039669246" usec="0"/>
    <to sec="1039669273" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1468{
style=filled;
color=gray75;
4610[label="197.168.140.142;121pkt 121fpkt", shape=pentagon, color=darkviolet];
6447[label="197.168.140.142;121pkt 121fpkt", shape=invtriangle, color=brown];
7623[label="197.168.140.142;121pkt 121fpkt", shape=invhouse, color=bisque];
stat1468[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.168.140.142:64600, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64600: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4610--6447[label="1;121pkt 121fpkt"];
4610--7623[label="1;121pkt 121fpkt"];
6447--7623[label="1;121pkt 121fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.168.140.142" src_port="64600"/>
    </slice>
    <from sec="1039669464" usec="0"/>
    <to sec="1039669493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1469{
style=filled;
color=gray75;
4614[label="172.93.36.143;20pkt 20fpkt", shape=pentagon, color=darkviolet];
6448[label="172.93.36.143;20pkt 20fpkt", shape=invtriangle, color=brown];
7624[label="172.93.36.143;19pkt 19fpkt", shape=invhouse, color=bisque];
stat1469[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.93.36.143:*, 130.83.124.175:443}[70%]&lt;BR/&gt;{172.93.36.143:*, 130.83.124.138:80}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (35.5932%)&lt;BR/&gt; 80: (14.4068%)&lt;BR/&gt; 2813: (2.54237%)&lt;BR/&gt; 2812: (2.54237%)&lt;BR/&gt; 2811: (2.54237%)&gt;];
}
4614--6448[label="1;20pkt 20fpkt"];
4614--7624[label="1;19pkt 19fpkt"];
6448--7624[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="130.83.124.175" dst_port="443" src_ip="172.93.36.143"/>
      <filter dst_ip="130.83.124.138" dst_port="80" src_ip="172.93.36.143"/>
    </slice>
    <from sec="1039669259" usec="0"/>
    <to sec="1039669880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1470{
style=filled;
color=gray75;
4619[label="196.149.4.144;168pkt 168fpkt", shape=pentagon, color=darkviolet];
6453[label="196.149.4.144;168pkt 168fpkt", shape=invtriangle, color=brown];
stat1470[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.149.4.144:1035, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1035: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4619--6453[label="1;168pkt 168fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.149.4.144" src_port="1035"/>
    </slice>
    <from sec="1039669779" usec="0"/>
    <to sec="1039669817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1471{
style=filled;
color=gray75;
4621[label="201.97.65.144;33pkt 33fpkt", shape=pentagon, color=darkviolet];
6454[label="201.97.65.144;33pkt 33fpkt", shape=invtriangle, color=brown];
7629[label="201.97.65.144;33pkt 33fpkt", shape=invhouse, color=bisque];
stat1471[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.97.65.144:80, 148.110.43.32:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49243: (1.51515%)&lt;BR/&gt; 49241: (1.51515%)&lt;BR/&gt; 49240: (1.51515%)&lt;BR/&gt; 49239: (1.51515%)&gt;];
}
4621--6454[label="1;33pkt 33fpkt"];
4621--7629[label="1;33pkt 33fpkt"];
6454--7629[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.43.32" src_ip="201.97.65.144" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669400" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1472{
style=filled;
color=gray75;
4623[label="204.78.101.144;158pkt 158fpkt", shape=pentagon, color=darkviolet];
6456[label="204.78.101.144;157pkt 157fpkt", shape=invtriangle, color=brown];
stat1472[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.78.101.144:1034, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1034: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4623--6456[label="1;157pkt 157fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="204.78.101.144" src_port="1034"/>
    </slice>
    <from sec="1039669527" usec="0"/>
    <to sec="1039669570" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1473{
style=filled;
color=gray75;
4628[label="196.207.36.145;137pkt 137fpkt", shape=pentagon, color=darkviolet];
6458[label="196.207.36.145;136pkt 136fpkt", shape=invtriangle, color=brown];
stat1473[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.207.36.145:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4628--6458[label="1;136pkt 136fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.207.36.145" src_port="1029"/>
    </slice>
    <from sec="1039669467" usec="0"/>
    <to sec="1039669489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1474{
style=filled;
color=gray75;
4630[label="215.87.66.145;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6460[label="215.87.66.145;7pkt 7fpkt", shape=invtriangle, color=brown];
7631[label="215.87.66.145;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1474[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.87.66.145:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 43458: (7.5%)&lt;BR/&gt; 42330: (7.5%)&lt;BR/&gt; 41534: (7.5%)&lt;BR/&gt; 37538: (7.5%)&gt;];
}
4630--6460[label="1;7pkt 7fpkt"];
4630--7631[label="1;6pkt 6fpkt"];
6460--7631[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="215.87.66.145" src_port="25"/>
    </slice>
    <from sec="1039669324" usec="0"/>
    <to sec="1039669866" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1475{
style=filled;
color=gray75;
2109[label="215.90.93.145;s;2pkt 2fpkt", shape=diamond, color=yellow];
2304[label="200.192.68.46;d;1pkt 1fpkt", shape=diamond, color=yellow];
4631[label="215.90.93.145;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6461[label="215.90.93.145;1pkt 1fpkt", shape=invtriangle, color=brown];
7632[label="215.90.93.145;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1475[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.90.93.145:3241, 61.8.33.0:6699}[50%]&lt;BR/&gt;{215.90.93.145:3257, 200.192.68.46:6699}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3241: (28.5714%)&lt;BR/&gt; 3257: (21.4286%)&gt;];
}
2109--2304[label="1;1pkt 1fpkt"];
2109--4631[label="1;2pkt 2fpkt"];
2109--6461[label="1;1pkt 1fpkt"];
2109--7632[label="1;1pkt 1fpkt"];
2304--4631[label="1;1pkt 1fpkt"];
4631--6461[label="1;1pkt 1fpkt"];
4631--7632[label="1;1pkt 1fpkt"];
6461--7632[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.192.68.46" dst_port="6699" src_ip="215.90.93.145" src_port="3257"/>
      <filter dst_ip="61.8.33.0" dst_port="6699" src_ip="215.90.93.145" src_port="3241"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1476{
style=filled;
color=gray75;
4634[label="98.134.161.145;229pkt 229fpkt", shape=pentagon, color=darkviolet];
6464[label="98.134.161.145;229pkt 229fpkt", shape=invtriangle, color=brown];
7634[label="98.134.161.145;230pkt 230fpkt", shape=invhouse, color=bisque];
stat1476[shape=component, label=&lt;Rules:&lt;BR/&gt;{98.134.161.145:63792, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63792: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4634--6464[label="1;229pkt 229fpkt"];
4634--7634[label="1;229pkt 229fpkt"];
6464--7634[label="1;229pkt 229fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="98.134.161.145" src_port="63792"/>
    </slice>
    <from sec="1039669601" usec="0"/>
    <to sec="1039669648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1477{
style=filled;
color=gray75;
4635[label="197.231.171.145;17pkt 17fpkt", shape=pentagon, color=darkviolet];
6465[label="197.231.171.145;16pkt 16fpkt", shape=invtriangle, color=brown];
7635[label="197.231.171.145;16pkt 16fpkt", shape=invhouse, color=bisque];
stat1477[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.231.171.145:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2585: (3.06122%)&lt;BR/&gt; 2584: (3.06122%)&lt;BR/&gt; 1710: (3.06122%)&lt;BR/&gt; 1709: (3.06122%)&gt;];
}
4635--6465[label="1;16pkt 16fpkt"];
4635--7635[label="1;16pkt 16fpkt"];
6465--7635[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter src_ip="197.231.171.145" src_port="80"/>
    </slice>
    <from sec="1039669221" usec="0"/>
    <to sec="1039669906" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1478{
style=filled;
color=gray75;
4639[label="197.174.6.146;141pkt 141fpkt", shape=pentagon, color=darkviolet];
6468[label="197.174.6.146;141pkt 141fpkt", shape=invtriangle, color=brown];
7638[label="197.174.6.146;140pkt 140fpkt", shape=invhouse, color=bisque];
stat1478[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.174.6.146:21026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4639--6468[label="1;141pkt 141fpkt"];
4639--7638[label="1;140pkt 140fpkt"];
6468--7638[label="1;140pkt 140fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.174.6.146" src_port="21026"/>
    </slice>
    <from sec="1039669361" usec="0"/>
    <to sec="1039669396" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1479{
style=filled;
color=gray75;
4647[label="192.170.196.146;214pkt 214fpkt", shape=pentagon, color=darkviolet];
6473[label="192.170.196.146;214pkt 214fpkt", shape=invtriangle, color=brown];
7641[label="192.170.196.146;214pkt 214fpkt", shape=invhouse, color=bisque];
stat1479[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.170.196.146:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4647--6473[label="1;214pkt 214fpkt"];
4647--7641[label="1;214pkt 214fpkt"];
6473--7641[label="1;214pkt 214fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="192.170.196.146" src_port="1025"/>
    </slice>
    <from sec="1039669668" usec="0"/>
    <to sec="1039669703" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790471,1.82041,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1480{
style=filled;
color=gray75;
360[label="202.85.22.147s;134pkt 134fpkt", shape=rectangle, color=red];
4649[label="202.85.22.147;173pkt 173fpkt", shape=pentagon, color=darkviolet];
6475[label="202.85.22.147;173pkt 173fpkt", shape=invtriangle, color=brown];
stat1480[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.85.22.147:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 38515: (0.3125%)&lt;BR/&gt; 38513: (0.3125%)&lt;BR/&gt; 38511: (0.3125%)&lt;BR/&gt; 38509: (0.3125%)&gt;];
}
360--4649[label="1;134pkt 134fpkt"];
360--6475[label="1;134pkt 134fpkt"];
4649--6475[label="1;173pkt 173fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.85.22.147"/>
    </slice>
    <from sec="1039669449" usec="0"/>
    <to sec="1039669476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1481{
style=filled;
color=gray75;
4650[label="148.110.53.147;41pkt 41fpkt", shape=pentagon, color=darkviolet];
6476[label="148.110.53.147;42pkt 42fpkt", shape=invtriangle, color=brown];
stat1481[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.110.53.147:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65290: (1.20482%)&lt;BR/&gt; 56810: (1.20482%)&lt;BR/&gt; 56070: (1.20482%)&lt;BR/&gt; 51393: (1.20482%)&gt;];
}
4650--6476[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter src_ip="148.110.53.147" src_port="80"/>
    </slice>
    <from sec="1039669208" usec="0"/>
    <to sec="1039669923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="223.138.109.147"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669455" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1483{
style=filled;
color=gray75;
4660[label="215.7.27.148;165pkt 165fpkt", shape=pentagon, color=darkviolet];
6482[label="215.7.27.148;164pkt 164fpkt", shape=invtriangle, color=brown];
7647[label="215.7.27.148;165pkt 165fpkt", shape=invhouse, color=bisque];
stat1483[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.7.27.148:1033, *:137}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1033: (16.7004%)&lt;BR/&gt; 26103: (0.303644%)&lt;BR/&gt; 26080: (0.303644%)&lt;BR/&gt; 26057: (0.303644%)&gt;];
}
4660--6482[label="1;164pkt 164fpkt"];
4660--7647[label="1;165pkt 165fpkt"];
6482--7647[label="1;164pkt 164fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.7.27.148" src_port="1033"/>
    </slice>
    <from sec="1039669668" usec="0"/>
    <to sec="1039669707" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1484{
style=filled;
color=gray75;
244[label="197.92.43.148s;42pkt 42fpkt", shape=rectangle, color=red];
4661[label="197.92.43.148;175pkt 175fpkt", shape=pentagon, color=darkviolet];
6483[label="197.92.43.148;175pkt 175fpkt", shape=invtriangle, color=brown];
7648[label="197.92.43.148;174pkt 174fpkt", shape=invhouse, color=bisque];
stat1484[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.92.43.148:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
244--4661[label="1;42pkt 42fpkt"];
244--6483[label="1;42pkt 42fpkt"];
244--7648[label="1;42pkt 42fpkt"];
4661--6483[label="1;175pkt 175fpkt"];
4661--7648[label="1;174pkt 174fpkt"];
6483--7648[label="1;174pkt 174fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.92.43.148" src_port="1029"/>
    </slice>
    <from sec="1039669571" usec="0"/>
    <to sec="1039669605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.180.79.148"/>
    </slice>
    <from sec="1039669213" usec="0"/>
    <to sec="1039669900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1486{
style=filled;
color=gray75;
4665[label="96.146.85.148;196pkt 196fpkt", shape=pentagon, color=darkviolet];
6485[label="96.146.85.148;195pkt 195fpkt", shape=invtriangle, color=brown];
7649[label="96.146.85.148;196pkt 196fpkt", shape=invhouse, color=bisque];
stat1486[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.146.85.148:1132, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1132: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4665--6485[label="1;195pkt 195fpkt"];
4665--7649[label="1;196pkt 196fpkt"];
6485--7649[label="1;195pkt 195fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.146.85.148" src_port="1132"/>
    </slice>
    <from sec="1039669405" usec="0"/>
    <to sec="1039669435" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1487{
style=filled;
color=gray75;
4671[label="140.3.243.148;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6487[label="140.3.243.148;1pkt 1fpkt", shape=invtriangle, color=brown];
7650[label="140.3.243.148;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1487[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.243.148:1411, 36.161.205.34:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1411: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4671--6487[label="1;1pkt 1fpkt"];
4671--7650[label="1;1pkt 1fpkt"];
6487--7650[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="36.161.205.34" dst_port="80" src_ip="140.3.243.148" src_port="1411"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1488{
style=filled;
color=gray75;
4672[label="211.90.5.149;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6488[label="211.90.5.149;4pkt 4fpkt", shape=invtriangle, color=brown];
7651[label="211.90.5.149;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1488[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.90.5.149:80, 215.87.64.183:30425}[25%]&lt;BR/&gt;{211.90.5.149:80, 215.87.64.183:30500}[25%]&lt;BR/&gt;{211.90.5.149:80, 215.87.64.183:30501}[25%]&lt;BR/&gt;{211.90.5.149:80, 215.87.64.183:30568}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 30568: (12.5%)&lt;BR/&gt; 30501: (12.5%)&lt;BR/&gt; 30500: (12.5%)&lt;BR/&gt; 30425: (12.5%)&gt;];
}
4672--6488[label="1;4pkt 4fpkt"];
4672--7651[label="1;4pkt 4fpkt"];
6488--7651[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="215.87.64.183" dst_port="30568" src_ip="211.90.5.149" src_port="80"/>
      <filter dst_ip="215.87.64.183" dst_port="30501" src_ip="211.90.5.149" src_port="80"/>
      <filter dst_ip="215.87.64.183" dst_port="30500" src_ip="211.90.5.149" src_port="80"/>
      <filter dst_ip="215.87.64.183" dst_port="30425" src_ip="211.90.5.149" src_port="80"/>
    </slice>
    <from sec="1039669641" usec="0"/>
    <to sec="1039669919" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1489{
style=filled;
color=gray75;
4673[label="148.110.137.149;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6489[label="148.110.137.149;1pkt 1fpkt", shape=invtriangle, color=brown];
7652[label="148.110.137.149;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1489[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.110.137.149:6970, 214.76.50.210:24266}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24266: (50%)&lt;BR/&gt; 6970: (50%)&gt;];
}
4673--6489[label="1;1pkt 1fpkt"];
4673--7652[label="1;1pkt 1fpkt"];
6489--7652[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.76.50.210" dst_port="24266" src_ip="148.110.137.149" src_port="6970"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1490{
style=filled;
color=gray75;
4674[label="197.231.171.149;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6490[label="197.231.171.149;7pkt 7fpkt", shape=invtriangle, color=brown];
7653[label="197.231.171.149;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1490[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.231.171.149:80, 138.186.1.241:*}[42.8571%]&lt;BR/&gt;{197.231.171.149:80, 140.3.201.26:*}[28.5714%]&lt;BR/&gt;{197.231.171.149:80, 138.186.1.244:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53602: (7.5%)&lt;BR/&gt; 53601: (7.5%)&lt;BR/&gt; 53564: (7.5%)&lt;BR/&gt; 43779: (7.5%)&gt;];
}
4674--6490[label="1;6pkt 6fpkt"];
4674--7653[label="1;6pkt 6fpkt"];
6490--7653[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.1.241" src_ip="197.231.171.149" src_port="80"/>
      <filter dst_ip="138.186.1.244" src_ip="197.231.171.149" src_port="80"/>
      <filter dst_ip="140.3.201.26" src_ip="197.231.171.149" src_port="80"/>
    </slice>
    <from sec="1039669204" usec="0"/>
    <to sec="1039669809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1491{
style=filled;
color=gray75;
4683[label="202.150.151.151;142pkt 142fpkt", shape=pentagon, color=darkviolet];
6496[label="202.150.151.151;143pkt 143fpkt", shape=invtriangle, color=brown];
7655[label="202.150.151.151;143pkt 143fpkt", shape=invhouse, color=bisque];
stat1491[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.150.151.151:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4683--6496[label="1;142pkt 142fpkt"];
4683--7655[label="1;142pkt 142fpkt"];
6496--7655[label="1;143pkt 143fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.150.151.151" src_port="1029"/>
    </slice>
    <from sec="1039669479" usec="0"/>
    <to sec="1039669512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="64.65.214.151"/>
    </slice>
    <from sec="1039669545" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1493{
style=filled;
color=gray75;
4689[label="140.3.0.152;19pkt 19fpkt", shape=pentagon, color=darkviolet];
6499[label="140.3.0.152;19pkt 19fpkt", shape=invtriangle, color=brown];
7657[label="140.3.0.152;19pkt 19fpkt", shape=invhouse, color=bisque];
stat1493[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.0.152:80, 141.114.121.113:*}[42.1053%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63996: (2.63158%)&lt;BR/&gt; 63995: (2.63158%)&lt;BR/&gt; 63994: (2.63158%)&lt;BR/&gt; 63993: (2.63158%)&gt;];
}
4689--6499[label="1;19pkt 19fpkt"];
4689--7657[label="1;19pkt 19fpkt"];
6499--7657[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="141.114.121.113" src_ip="140.3.0.152" src_port="80"/>
    </slice>
    <from sec="1039669206" usec="0"/>
    <to sec="1039669887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1494{
style=filled;
color=gray75;
4691[label="138.7.9.152;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6501[label="138.7.9.152;8pkt 8fpkt", shape=invtriangle, color=brown];
7659[label="138.7.9.152;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1494[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.7.9.152:80, 37.90.32.54:*}[25%]&lt;BR/&gt;{138.7.9.152:80, 64.20.109.65:*}[25%]&lt;BR/&gt;{138.7.9.152:80, 36.187.77.159:*}[25%]&lt;BR/&gt;{138.7.9.152:80, 98.166.136.163:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 35959: (6.81818%)&lt;BR/&gt; 35909: (6.81818%)&lt;BR/&gt; 2996: (6.81818%)&lt;BR/&gt; 1910: (6.81818%)&gt;];
}
4691--6501[label="1;7pkt 7fpkt"];
4691--7659[label="1;7pkt 7fpkt"];
6501--7659[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="98.166.136.163" src_ip="138.7.9.152" src_port="80"/>
      <filter dst_ip="36.187.77.159" src_ip="138.7.9.152" src_port="80"/>
      <filter dst_ip="64.20.109.65" src_ip="138.7.9.152" src_port="80"/>
      <filter dst_ip="37.90.32.54" src_ip="138.7.9.152" src_port="80"/>
    </slice>
    <from sec="1039669284" usec="0"/>
    <to sec="1039669748" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1495{
style=filled;
color=gray75;
4693[label="96.66.72.152;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6502[label="96.66.72.152;2pkt 2fpkt", shape=invtriangle, color=brown];
7660[label="96.66.72.152;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1495[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.66.72.152:80, 140.3.210.56:1450}[50%]&lt;BR/&gt;{96.66.72.152:80, 140.3.210.56:1465}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1465: (30%)&lt;BR/&gt; 1450: (20%)&gt;];
}
4693--6502[label="1;1pkt 1fpkt"];
4693--7660[label="1;1pkt 1fpkt"];
6502--7660[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.210.56" dst_port="1465" src_ip="96.66.72.152" src_port="80"/>
      <filter dst_ip="140.3.210.56" dst_port="1450" src_ip="96.66.72.152" src_port="80"/>
    </slice>
    <from sec="1039669376" usec="0"/>
    <to sec="1039669525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1496{
style=filled;
color=gray75;
4694[label="200.4.100.152;244pkt 244fpkt", shape=pentagon, color=darkviolet];
6503[label="200.4.100.152;243pkt 243fpkt", shape=invtriangle, color=brown];
7661[label="200.4.100.152;243pkt 243fpkt", shape=invhouse, color=bisque];
stat1496[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.4.100.152:64563, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64563: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4694--6503[label="1;243pkt 243fpkt"];
4694--7661[label="1;243pkt 243fpkt"];
6503--7661[label="1;243pkt 243fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.4.100.152" src_port="64563"/>
    </slice>
    <from sec="1039669746" usec="0"/>
    <to sec="1039669787" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1497{
style=filled;
color=gray75;
4695[label="215.111.180.152;35pkt 35fpkt", shape=pentagon, color=darkviolet];
6504[label="215.111.180.152;35pkt 35fpkt", shape=invtriangle, color=brown];
7662[label="215.111.180.152;35pkt 35fpkt", shape=invhouse, color=bisque];
stat1497[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.111.180.152:*, 215.90.68.97:80}[45.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4648: (1.42857%)&lt;BR/&gt; 4612: (1.42857%)&lt;BR/&gt; 4536: (1.42857%)&lt;BR/&gt; 4098: (1.42857%)&gt;];
}
4695--6504[label="1;35pkt 35fpkt"];
4695--7662[label="1;35pkt 35fpkt"];
6504--7662[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.68.97" dst_port="80" src_ip="215.111.180.152"/>
    </slice>
    <from sec="1039669231" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="64.177.230.152"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1499{
style=filled;
color=gray75;
4700[label="200.200.23.153;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6507[label="200.200.23.153;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1499[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.200.23.153:6667, 148.110.20.119:51884}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51884: (50%)&lt;BR/&gt; 6667: (50%)&gt;];
}
4700--6507[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.20.119" dst_port="51884" src_ip="200.200.23.153" src_port="6667"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1500{
style=filled;
color=gray75;
4707[label="148.110.12.154;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6511[label="148.110.12.154;3pkt 3fpkt", shape=invtriangle, color=brown];
7667[label="148.110.12.154;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1500[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.110.12.154:2225, 96.5.149.141:2002}[33.3333%]&lt;BR/&gt;{148.110.12.154:2232, 96.5.149.141:3400}[33.3333%]&lt;BR/&gt;{148.110.12.154:2233, 96.5.149.141:2002}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2002: (33.3333%)&lt;BR/&gt; 3400: (16.6667%)&lt;BR/&gt; 2233: (16.6667%)&lt;BR/&gt; 2232: (16.6667%)&lt;BR/&gt; 2225: (16.6667%)&gt;];
}
4707--6511[label="1;3pkt 3fpkt"];
4707--7667[label="1;3pkt 3fpkt"];
6511--7667[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="96.5.149.141" dst_port="2002" src_ip="148.110.12.154" src_port="2233"/>
      <filter dst_ip="96.5.149.141" dst_port="3400" src_ip="148.110.12.154" src_port="2232"/>
      <filter dst_ip="96.5.149.141" dst_port="2002" src_ip="148.110.12.154" src_port="2225"/>
    </slice>
    <from sec="1039669205" usec="0"/>
    <to sec="1039669622" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1501{
style=filled;
color=gray75;
4708[label="215.129.12.154;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6512[label="215.129.12.154;1pkt 1fpkt", shape=invtriangle, color=brown];
7668[label="215.129.12.154;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1501[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.129.12.154:53, 211.37.175.41:1095}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1095: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
4708--6512[label="1;1pkt 1fpkt"];
4708--7668[label="1;1pkt 1fpkt"];
6512--7668[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.37.175.41" dst_port="1095" src_ip="215.129.12.154" src_port="53"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1502{
style=filled;
color=gray75;
4710[label="197.64.128.154;105pkt 105fpkt", shape=pentagon, color=darkviolet];
6514[label="197.64.128.154;105pkt 105fpkt", shape=invtriangle, color=brown];
stat1502[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.64.128.154:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4710--6514[label="1;105pkt 105fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.64.128.154" src_port="1026"/>
    </slice>
    <from sec="1039669428" usec="0"/>
    <to sec="1039669457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="64.51.6.155"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,011,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1504{
style=filled;
color=gray75;
4719[label="64.83.13.155;111pkt 111fpkt", shape=pentagon, color=darkviolet];
6522[label="64.83.13.155;112pkt 112fpkt", shape=invtriangle, color=brown];
stat1504[shape=component, label=&lt;Rules:&lt;BR/&gt;{64.83.13.155:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8970: (0.896861%)&lt;BR/&gt; 65401: (0.44843%)&lt;BR/&gt; 64803: (0.44843%)&lt;BR/&gt; 64425: (0.44843%)&lt;BR/&gt; 64253: (0.44843%)&gt;];
}
4719--6522[label="1;111pkt 111fpkt"];
</description>
    <slice>
      <filter src_ip="64.83.13.155"/>
    </slice>
    <from sec="1039669226" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1505{
style=filled;
color=gray75;
4721[label="214.37.56.155;162pkt 162fpkt", shape=pentagon, color=darkviolet];
6523[label="214.37.56.155;162pkt 162fpkt", shape=invtriangle, color=brown];
stat1505[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.37.56.155:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4721--6523[label="1;162pkt 162fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.37.56.155" src_port="1029"/>
    </slice>
    <from sec="1039669898" usec="0"/>
    <to sec="1039669923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1506{
style=filled;
color=gray75;
4725[label="196.150.134.155;151pkt 151fpkt", shape=pentagon, color=darkviolet];
6524[label="196.150.134.155;151pkt 151fpkt", shape=invtriangle, color=brown];
7674[label="196.150.134.155;151pkt 151fpkt", shape=invhouse, color=bisque];
stat1506[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.150.134.155:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4725--6524[label="1;151pkt 151fpkt"];
4725--7674[label="1;151pkt 151fpkt"];
6524--7674[label="1;151pkt 151fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.150.134.155" src_port="1026"/>
    </slice>
    <from sec="1039669409" usec="0"/>
    <to sec="1039669444" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1507{
style=filled;
color=gray75;
4729[label="215.245.233.155;104pkt 104fpkt", shape=pentagon, color=darkviolet];
6526[label="215.245.233.155;104pkt 104fpkt", shape=invtriangle, color=brown];
7675[label="215.245.233.155;104pkt 104fpkt", shape=invhouse, color=bisque];
stat1507[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.245.233.155:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4729--6526[label="1;104pkt 104fpkt"];
4729--7675[label="1;104pkt 104fpkt"];
6526--7675[label="1;104pkt 104fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.245.233.155" src_port="1031"/>
    </slice>
    <from sec="1039669757" usec="0"/>
    <to sec="1039669794" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1508{
style=filled;
color=gray75;
4738[label="140.3.243.156;30pkt 30fpkt", shape=pentagon, color=darkviolet];
6533[label="140.3.243.156;29pkt 29fpkt", shape=invtriangle, color=brown];
stat1508[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.243.156:*, 199.186.168.57:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2401: (1.69492%)&lt;BR/&gt; 2400: (1.69492%)&lt;BR/&gt; 2399: (1.69492%)&lt;BR/&gt; 2398: (1.69492%)&gt;];
}
4738--6533[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="199.186.168.57" dst_port="80" src_ip="140.3.243.156"/>
    </slice>
    <from sec="1039669441" usec="0"/>
    <to sec="1039669452" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1509{
style=filled;
color=gray75;
4739[label="39.58.58.157;16pkt 16fpkt", shape=pentagon, color=darkviolet];
6534[label="39.58.58.157;16pkt 16fpkt", shape=invtriangle, color=brown];
stat1509[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.58.58.157:80, 138.186.51.246:*}[93.75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.875%)&lt;BR/&gt; 1351: (3.125%)&lt;BR/&gt; 1350: (3.125%)&lt;BR/&gt; 1347: (3.125%)&lt;BR/&gt; 1345: (3.125%)&gt;];
}
4739--6534[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.51.246" src_ip="39.58.58.157" src_port="80"/>
    </slice>
    <from sec="1039669252" usec="0"/>
    <to sec="1039669667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1510{
style=filled;
color=gray75;
4741[label="172.93.75.157;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6536[label="172.93.75.157;6pkt 6fpkt", shape=invtriangle, color=brown];
7681[label="172.93.75.157;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1510[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.93.75.157:*, *:3128}[28.5714%]&lt;BR/&gt;{172.93.75.157:*, 198.58.186.90:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (15.7895%)&lt;BR/&gt; 0: (15.7895%)&lt;BR/&gt; 8080: (7.89474%)&lt;BR/&gt; 3352: (7.89474%)&lt;BR/&gt; 3307: (7.89474%)&gt;];
}
4741--6536[label="1;6pkt 6fpkt"];
4741--7681[label="1;6pkt 6fpkt"];
6536--7681[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="198.58.186.90" src_ip="172.93.75.157"/>
      <filter dst_port="3128" src_ip="172.93.75.157"/>
    </slice>
    <from sec="1039669315" usec="0"/>
    <to sec="1039669925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1511{
style=filled;
color=gray75;
4753[label="199.110.51.159;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6543[label="199.110.51.159;4pkt 4fpkt", shape=invtriangle, color=brown];
7687[label="199.110.51.159;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1511[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.110.51.159:80, 169.126.142.113:3940}[25%]&lt;BR/&gt;{199.110.51.159:80, 169.126.143.85:3454}[25%]&lt;BR/&gt;{199.110.51.159:80, 169.126.143.85:3455}[25%]&lt;BR/&gt;{199.110.51.159:80, 169.126.143.85:3464}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3940: (12.5%)&lt;BR/&gt; 3464: (12.5%)&lt;BR/&gt; 3455: (12.5%)&lt;BR/&gt; 3454: (12.5%)&gt;];
}
4753--6543[label="1;4pkt 4fpkt"];
4753--7687[label="1;4pkt 4fpkt"];
6543--7687[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="169.126.143.85" dst_port="3464" src_ip="199.110.51.159" src_port="80"/>
      <filter dst_ip="169.126.143.85" dst_port="3455" src_ip="199.110.51.159" src_port="80"/>
      <filter dst_ip="169.126.143.85" dst_port="3454" src_ip="199.110.51.159" src_port="80"/>
      <filter dst_ip="169.126.142.113" dst_port="3940" src_ip="199.110.51.159" src_port="80"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1512{
style=filled;
color=gray75;
4759[label="202.158.246.159;168pkt 168fpkt", shape=pentagon, color=darkviolet];
6546[label="202.158.246.159;168pkt 168fpkt", shape=invtriangle, color=brown];
7689[label="202.158.246.159;167pkt 167fpkt", shape=invhouse, color=bisque];
stat1512[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.158.246.159:63802, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63802: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4759--6546[label="1;168pkt 168fpkt"];
4759--7689[label="1;167pkt 167fpkt"];
6546--7689[label="1;167pkt 167fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.158.246.159" src_port="63802"/>
    </slice>
    <from sec="1039669331" usec="0"/>
    <to sec="1039669370" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1513{
style=filled;
color=gray75;
4768[label="169.126.142.160;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6549[label="169.126.142.160;7pkt 7fpkt", shape=invtriangle, color=brown];
7691[label="169.126.142.160;8pkt 8fpkt", shape=invhouse, color=bisque];
stat1513[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.126.142.160:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 50018: (6.81818%)&lt;BR/&gt; 37510: (6.81818%)&lt;BR/&gt; 30600: (6.81818%)&lt;BR/&gt; 22048: (6.81818%)&gt;];
}
4768--6549[label="1;7pkt 7fpkt"];
4768--7691[label="1;7pkt 7fpkt"];
6549--7691[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter src_ip="169.126.142.160" src_port="25"/>
    </slice>
    <from sec="1039669220" usec="0"/>
    <to sec="1039669850" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.160.16.161"/>
    </slice>
    <from sec="1039669311" usec="0"/>
    <to sec="1039669925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1515{
style=filled;
color=gray75;
4776[label="211.218.24.161;139pkt 139fpkt", shape=pentagon, color=darkviolet];
6552[label="211.218.24.161;140pkt 140fpkt", shape=invtriangle, color=brown];
7693[label="211.218.24.161;140pkt 140fpkt", shape=invhouse, color=bisque];
stat1515[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.218.24.161:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4776--6552[label="1;139pkt 139fpkt"];
4776--7693[label="1;139pkt 139fpkt"];
6552--7693[label="1;140pkt 140fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="211.218.24.161" src_port="1030"/>
    </slice>
    <from sec="1039669329" usec="0"/>
    <to sec="1039669352" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1516{
style=filled;
color=gray75;
4778[label="202.91.89.161;210pkt 210fpkt", shape=pentagon, color=darkviolet];
6553[label="202.91.89.161;209pkt 209fpkt", shape=invtriangle, color=brown];
stat1516[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.91.89.161:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4778--6553[label="1;209pkt 209fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.91.89.161" src_port="1026"/>
    </slice>
    <from sec="1039669834" usec="0"/>
    <to sec="1039669867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.168.165.161"/>
    </slice>
    <from sec="1039669238" usec="0"/>
    <to sec="1039669272" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1518{
style=filled;
color=gray75;
4784[label="96.8.23.162;112pkt 112fpkt", shape=pentagon, color=darkviolet];
6558[label="96.8.23.162;112pkt 112fpkt", shape=invtriangle, color=brown];
7698[label="96.8.23.162;111pkt 111fpkt", shape=invhouse, color=bisque];
stat1518[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.8.23.162:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4784--6558[label="1;112pkt 112fpkt"];
4784--7698[label="1;111pkt 111fpkt"];
6558--7698[label="1;111pkt 111fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.8.23.162" src_port="1028"/>
    </slice>
    <from sec="1039669564" usec="0"/>
    <to sec="1039669583" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1519{
style=filled;
color=gray75;
4785[label="202.75.66.162;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6559[label="202.75.66.162;2pkt 2fpkt", shape=invtriangle, color=brown];
7699[label="202.75.66.162;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1519[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.75.66.162:80, 172.93.147.20:1411}[50%]&lt;BR/&gt;{202.75.66.162:80, 172.93.147.20:1412}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1412: (30%)&lt;BR/&gt; 1411: (20%)&gt;];
}
4785--6559[label="1;2pkt 2fpkt"];
4785--7699[label="1;1pkt 1fpkt"];
6559--7699[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.93.147.20" dst_port="1412" src_ip="202.75.66.162" src_port="80"/>
      <filter dst_ip="172.93.147.20" dst_port="1411" src_ip="202.75.66.162" src_port="80"/>
    </slice>
    <from sec="1039669839" usec="0"/>
    <to sec="1039669854" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1520{
style=filled;
color=gray75;
4787[label="200.137.83.162;165pkt 165fpkt", shape=pentagon, color=darkviolet];
6561[label="200.137.83.162;166pkt 166fpkt", shape=invtriangle, color=brown];
stat1520[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.137.83.162:1074, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1074: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4787--6561[label="1;165pkt 165fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.137.83.162" src_port="1074"/>
    </slice>
    <from sec="1039669676" usec="0"/>
    <to sec="1039669704" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1521{
style=filled;
color=gray75;
4788[label="64.131.88.162;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6562[label="64.131.88.162;2pkt 2fpkt", shape=invtriangle, color=brown];
7701[label="64.131.88.162;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1521[shape=component, label=&lt;Rules:&lt;BR/&gt;{64.131.88.162:80, 138.186.137.115:1172}[33.3333%]&lt;BR/&gt;{64.131.88.162:80, 138.186.137.115:1173}[33.3333%]&lt;BR/&gt;{64.131.88.162:80, 138.186.137.115:1179}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1179: (21.4286%)&lt;BR/&gt; 1173: (21.4286%)&lt;BR/&gt; 1172: (7.14286%)&gt;];
}
4788--6562[label="1;2pkt 2fpkt"];
4788--7701[label="1;2pkt 2fpkt"];
6562--7701[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.137.115" dst_port="1179" src_ip="64.131.88.162" src_port="80"/>
      <filter dst_ip="138.186.137.115" dst_port="1173" src_ip="64.131.88.162" src_port="80"/>
      <filter dst_ip="138.186.137.115" dst_port="1172" src_ip="64.131.88.162" src_port="80"/>
    </slice>
    <from sec="1039669430" usec="0"/>
    <to sec="1039669502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1522{
style=filled;
color=gray75;
4789[label="214.156.88.162;108pkt 108fpkt", shape=pentagon, color=darkviolet];
6563[label="214.156.88.162;107pkt 107fpkt", shape=invtriangle, color=brown];
stat1522[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.156.88.162:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4789--6563[label="1;107pkt 107fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.156.88.162" src_port="1028"/>
    </slice>
    <from sec="1039669273" usec="0"/>
    <to sec="1039669297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1523{
style=filled;
color=gray75;
4798[label="202.151.129.163;106pkt 106fpkt", shape=pentagon, color=darkviolet];
6572[label="202.151.129.163;105pkt 105fpkt", shape=invtriangle, color=brown];
7707[label="202.151.129.163;105pkt 105fpkt", shape=invhouse, color=bisque];
stat1523[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.151.129.163:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4798--6572[label="1;105pkt 105fpkt"];
4798--7707[label="1;105pkt 105fpkt"];
6572--7707[label="1;105pkt 105fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.151.129.163" src_port="1028"/>
    </slice>
    <from sec="1039669213" usec="0"/>
    <to sec="1039669239" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645838,1.80177,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1524{
style=filled;
color=gray75;
1425[label="39.111.170.163;s;46pkt 46fpkt", shape=diamond, color=yellow];
4801[label="39.111.170.163;49pkt 49fpkt", shape=pentagon, color=darkviolet];
6574[label="39.111.170.163;49pkt 49fpkt", shape=invtriangle, color=brown];
stat1524[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.111.170.163:80, 138.186.181.65:*}[32.6531%]&lt;BR/&gt;{39.111.170.163:80, 215.90.84.232:*}[24.4898%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.9722%)&lt;BR/&gt; 443: (9.02778%)&lt;BR/&gt; 3329: (1.04167%)&lt;BR/&gt; 3315: (1.04167%)&lt;BR/&gt; 3314: (1.04167%)&gt;];
}
1425--4801[label="1;46pkt 46fpkt"];
1425--6574[label="1;46pkt 46fpkt"];
4801--6574[label="1;49pkt 49fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.181.65" src_ip="39.111.170.163" src_port="80"/>
      <filter dst_ip="215.90.84.232" src_ip="39.111.170.163" src_port="80"/>
    </slice>
    <from sec="1039669221" usec="0"/>
    <to sec="1039669893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1525{
style=filled;
color=gray75;
4805[label="140.3.16.164;61pkt 61fpkt", shape=pentagon, color=darkviolet];
6577[label="140.3.16.164;60pkt 60fpkt", shape=invtriangle, color=brown];
7709[label="140.3.16.164;61pkt 61fpkt", shape=invhouse, color=bisque];
stat1525[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.16.164:*, 220.202.19.57:80}[45.9016%]&lt;BR/&gt;{140.3.16.164:*, 220.202.18.17:80}[36.0656%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.8791%)&lt;BR/&gt; 443: (4.12088%)&lt;BR/&gt; 1439: (0.824176%)&lt;BR/&gt; 1438: (0.824176%)&lt;BR/&gt; 1437: (0.824176%)&gt;];
}
4805--6577[label="1;60pkt 60fpkt"];
4805--7709[label="1;61pkt 61fpkt"];
6577--7709[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_ip="220.202.19.57" dst_port="80" src_ip="140.3.16.164"/>
      <filter dst_ip="220.202.18.17" dst_port="80" src_ip="140.3.16.164"/>
    </slice>
    <from sec="1039669436" usec="0"/>
    <to sec="1039669475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1526{
style=filled;
color=gray75;
4810[label="197.104.163.164;170pkt 170fpkt", shape=pentagon, color=darkviolet];
6579[label="197.104.163.164;169pkt 169fpkt", shape=invtriangle, color=brown];
stat1526[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.104.163.164:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4810--6579[label="1;169pkt 169fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.104.163.164" src_port="1026"/>
    </slice>
    <from sec="1039669533" usec="0"/>
    <to sec="1039669546" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1527{
style=filled;
color=gray75;
4811[label="96.28.169.164;134pkt 134fpkt", shape=pentagon, color=darkviolet];
6580[label="96.28.169.164;135pkt 135fpkt", shape=invtriangle, color=brown];
stat1527[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.28.169.164:1025, *:137}[97.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (48.8848%)&lt;BR/&gt; 137: (48.8848%)&lt;BR/&gt; 80: (1.11524%)&lt;BR/&gt; 35245: (0.371747%)&lt;BR/&gt; 35053: (0.371747%)&gt;];
}
4811--6580[label="1;134pkt 134fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.28.169.164" src_port="1025"/>
    </slice>
    <from sec="1039669379" usec="0"/>
    <to sec="1039669828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1528{
style=filled;
color=gray75;
4816[label="215.87.64.165;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6583[label="215.87.64.165;3pkt 3fpkt", shape=invtriangle, color=brown];
7712[label="215.87.64.165;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1528[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.87.64.165:0, 202.42.107.104:0}[33.3333%]&lt;BR/&gt;{215.87.64.165:0, 215.215.73.250:0}[33.3333%]&lt;BR/&gt;{215.87.64.165:0, 173.55.200.250:0}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4816--6583[label="1;2pkt 2fpkt"];
4816--7712[label="1;2pkt 2fpkt"];
6583--7712[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="173.55.200.250" src_ip="215.87.64.165"/>
      <filter dst_ip="215.215.73.250" src_ip="215.87.64.165"/>
      <filter dst_ip="202.42.107.104" src_ip="215.87.64.165"/>
    </slice>
    <from sec="1039669351" usec="0"/>
    <to sec="1039669858" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="64.176.115.166"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1530{
style=filled;
color=gray75;
4829[label="138.186.119.166;84pkt 84fpkt", shape=pentagon, color=darkviolet];
6590[label="138.186.119.166;84pkt 84fpkt", shape=invtriangle, color=brown];
7715[label="138.186.119.166;84pkt 84fpkt", shape=invhouse, color=bisque];
stat1530[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.119.166:*, 130.82.82.31:6667}[28.5714%]&lt;BR/&gt;{138.186.119.166:113, 130.82.82.31:*}[28.5714%]&lt;BR/&gt;{138.186.119.166:*, 98.32.96.241:6667}[21.4286%]&lt;BR/&gt;{138.186.119.166:113, 98.32.96.241:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (25%)&lt;BR/&gt; 113: (25%)&lt;BR/&gt; 61659: (0.595238%)&lt;BR/&gt; 61624: (0.595238%)&lt;BR/&gt; 61461: (0.595238%)&gt;];
}
4829--6590[label="1;84pkt 84fpkt"];
4829--7715[label="1;84pkt 84fpkt"];
6590--7715[label="1;84pkt 84fpkt"];
</description>
    <slice>
      <filter dst_ip="130.82.82.31" src_ip="138.186.119.166" src_port="113"/>
      <filter dst_ip="130.82.82.31" dst_port="6667" src_ip="138.186.119.166"/>
      <filter dst_ip="98.32.96.241" src_ip="138.186.119.166" src_port="113"/>
      <filter dst_ip="98.32.96.241" dst_port="6667" src_ip="138.186.119.166"/>
    </slice>
    <from sec="1039669205" usec="0"/>
    <to sec="1039669905" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1531{
style=filled;
color=gray75;
4830[label="215.88.143.166;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6591[label="215.88.143.166;8pkt 8fpkt", shape=invtriangle, color=brown];
stat1531[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.88.143.166:110, 214.216.53.187:*}[66.6667%]&lt;BR/&gt;{215.88.143.166:110, 140.3.148.182:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (44.1176%)&lt;BR/&gt; 63771: (5.88235%)&lt;BR/&gt; 63742: (5.88235%)&lt;BR/&gt; 63729: (5.88235%)&lt;BR/&gt; 63712: (5.88235%)&gt;];
}
4830--6591[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="214.216.53.187" src_ip="215.88.143.166" src_port="110"/>
      <filter dst_ip="140.3.148.182" src_ip="215.88.143.166" src_port="110"/>
    </slice>
    <from sec="1039669231" usec="0"/>
    <to sec="1039669916" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1532{
style=filled;
color=gray75;
4831[label="211.90.155.166;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6592[label="211.90.155.166;7pkt 7fpkt", shape=invtriangle, color=brown];
7716[label="211.90.155.166;8pkt 8fpkt", shape=invhouse, color=bisque];
stat1532[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.90.155.166:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3593: (6.52174%)&lt;BR/&gt; 3012: (6.52174%)&lt;BR/&gt; 1498: (6.52174%)&lt;BR/&gt; 1116: (6.52174%)&gt;];
}
4831--6592[label="1;7pkt 7fpkt"];
4831--7716[label="1;8pkt 8fpkt"];
6592--7716[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter src_ip="211.90.155.166" src_port="1863"/>
    </slice>
    <from sec="1039669212" usec="0"/>
    <to sec="1039669927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1533{
style=filled;
color=gray75;
4832[label="202.151.155.166;157pkt 157fpkt", shape=pentagon, color=darkviolet];
6593[label="202.151.155.166;156pkt 156fpkt", shape=invtriangle, color=brown];
7717[label="202.151.155.166;157pkt 157fpkt", shape=invhouse, color=bisque];
stat1533[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.151.155.166:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4832--6593[label="1;156pkt 156fpkt"];
4832--7717[label="1;157pkt 157fpkt"];
6593--7717[label="1;156pkt 156fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.151.155.166" src_port="1030"/>
    </slice>
    <from sec="1039669308" usec="0"/>
    <to sec="1039669347" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1534{
style=filled;
color=gray75;
4836[label="196.207.217.166;144pkt 144fpkt", shape=pentagon, color=darkviolet];
6595[label="196.207.217.166;145pkt 145fpkt", shape=invtriangle, color=brown];
7718[label="196.207.217.166;145pkt 145fpkt", shape=invhouse, color=bisque];
stat1534[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.207.217.166:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4836--6595[label="1;144pkt 144fpkt"];
4836--7718[label="1;144pkt 144fpkt"];
6595--7718[label="1;145pkt 145fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.207.217.166" src_port="1029"/>
    </slice>
    <from sec="1039669730" usec="0"/>
    <to sec="1039669753" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1535{
style=filled;
color=gray75;
260[label="96.55.32.167s;56pkt 56fpkt", shape=rectangle, color=red];
4838[label="96.55.32.167;133pkt 133fpkt", shape=pentagon, color=darkviolet];
6596[label="96.55.32.167;133pkt 133fpkt", shape=invtriangle, color=brown];
7719[label="96.55.32.167;133pkt 133fpkt", shape=invhouse, color=bisque];
stat1535[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.55.32.167:1036, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1036: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
260--4838[label="1;56pkt 56fpkt"];
260--6596[label="1;56pkt 56fpkt"];
260--7719[label="1;56pkt 56fpkt"];
4838--6596[label="1;133pkt 133fpkt"];
4838--7719[label="1;133pkt 133fpkt"];
6596--7719[label="1;133pkt 133fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.55.32.167" src_port="1036"/>
    </slice>
    <from sec="1039669597" usec="0"/>
    <to sec="1039669620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1536{
style=filled;
color=gray75;
4842[label="140.3.214.167;33pkt 33fpkt", shape=pentagon, color=darkviolet];
6600[label="140.3.214.167;32pkt 32fpkt", shape=invtriangle, color=brown];
7721[label="140.3.214.167;32pkt 32fpkt", shape=invhouse, color=bisque];
stat1536[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.214.167:25, *:*}[66.6667%]&lt;BR/&gt;{140.3.214.167:*, *:25}[30.303%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.4536%)&lt;BR/&gt; 4130: (3.09278%)&lt;BR/&gt; 59848: (1.54639%)&lt;BR/&gt; 58422: (1.54639%)&lt;BR/&gt; 56100: (1.54639%)&gt;];
}
4842--6600[label="1;32pkt 32fpkt"];
4842--7721[label="1;32pkt 32fpkt"];
6600--7721[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter src_ip="140.3.214.167" src_port="25"/>
      <filter dst_port="25" src_ip="140.3.214.167"/>
    </slice>
    <from sec="1039669206" usec="0"/>
    <to sec="1039669906" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1537{
style=filled;
color=gray75;
4845[label="197.71.47.168;169pkt 169fpkt", shape=pentagon, color=darkviolet];
6602[label="197.71.47.168;169pkt 169fpkt", shape=invtriangle, color=brown];
7723[label="197.71.47.168;168pkt 168fpkt", shape=invhouse, color=bisque];
stat1537[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.71.47.168:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4845--6602[label="1;169pkt 169fpkt"];
4845--7723[label="1;168pkt 168fpkt"];
6602--7723[label="1;168pkt 168fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.71.47.168" src_port="1025"/>
    </slice>
    <from sec="1039669266" usec="0"/>
    <to sec="1039669304" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1538{
style=filled;
color=gray75;
4846[label="215.32.48.168;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6603[label="215.32.48.168;2pkt 2fpkt", shape=invtriangle, color=brown];
7724[label="215.32.48.168;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1538[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.32.48.168:1642, 169.126.165.201:80}[50%]&lt;BR/&gt;{215.32.48.168:1645, 169.126.165.201:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1645: (25%)&lt;BR/&gt; 1642: (25%)&gt;];
}
4846--6603[label="1;2pkt 2fpkt"];
4846--7724[label="1;2pkt 2fpkt"];
6603--7724[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="169.126.165.201" dst_port="80" src_ip="215.32.48.168" src_port="1645"/>
      <filter dst_ip="169.126.165.201" dst_port="80" src_ip="215.32.48.168" src_port="1642"/>
    </slice>
    <from sec="1039669556" usec="0"/>
    <to sec="1039669662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.209.95.168"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1540{
style=filled;
color=gray75;
4854[label="140.3.2.169;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6610[label="140.3.2.169;2pkt 2fpkt", shape=invtriangle, color=brown];
7729[label="140.3.2.169;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1540[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.2.169:1203, 214.148.150.130:53}[50%]&lt;BR/&gt;{140.3.2.169:1203, 214.146.93.234:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1203: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
4854--6610[label="1;2pkt 2fpkt"];
4854--7729[label="1;1pkt 1fpkt"];
6610--7729[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.146.93.234" dst_port="53" src_ip="140.3.2.169" src_port="1203"/>
      <filter dst_ip="214.148.150.130" dst_port="53" src_ip="140.3.2.169" src_port="1203"/>
    </slice>
    <from sec="1039669452" usec="0"/>
    <to sec="1039669927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1541{
style=filled;
color=gray75;
4863[label="202.71.168.169;139pkt 139fpkt", shape=pentagon, color=darkviolet];
6616[label="202.71.168.169;139pkt 139fpkt", shape=invtriangle, color=brown];
stat1541[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.71.168.169:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4863--6616[label="1;139pkt 139fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.71.168.169" src_port="1025"/>
    </slice>
    <from sec="1039669461" usec="0"/>
    <to sec="1039669485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="138.186.8.170"/>
    </slice>
    <from sec="1039669283" usec="0"/>
    <to sec="1039669295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1543{
style=filled;
color=gray75;
4865[label="202.158.73.170;173pkt 173fpkt", shape=pentagon, color=darkviolet];
6618[label="202.158.73.170;172pkt 172fpkt", shape=invtriangle, color=brown];
7734[label="202.158.73.170;173pkt 173fpkt", shape=invhouse, color=bisque];
stat1543[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.158.73.170:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4865--6618[label="1;172pkt 172fpkt"];
4865--7734[label="1;173pkt 173fpkt"];
6618--7734[label="1;172pkt 172fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.158.73.170" src_port="1029"/>
    </slice>
    <from sec="1039669579" usec="0"/>
    <to sec="1039669622" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1544{
style=filled;
color=gray75;
4868[label="215.9.184.170;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6620[label="215.9.184.170;1pkt 1fpkt", shape=invtriangle, color=brown];
7736[label="215.9.184.170;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1544[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.9.184.170:1074, 215.87.65.72:80}[50%]&lt;BR/&gt;{215.9.184.170:4308, 215.87.65.74:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4308: (37.5%)&lt;BR/&gt; 1074: (12.5%)&gt;];
}
4868--6620[label="1;1pkt 1fpkt"];
4868--7736[label="1;1pkt 1fpkt"];
6620--7736[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.87.65.74" dst_port="80" src_ip="215.9.184.170" src_port="4308"/>
      <filter dst_ip="215.87.65.72" dst_port="80" src_ip="215.9.184.170" src_port="1074"/>
    </slice>
    <from sec="1039669583" usec="0"/>
    <to sec="1039669919" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1545{
style=filled;
color=gray75;
4870[label="140.3.250.170;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6622[label="140.3.250.170;6pkt 6fpkt", shape=invtriangle, color=brown];
stat1545[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.250.170:*, 201.177.224.220:80}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1071: (8.33333%)&lt;BR/&gt; 1070: (8.33333%)&lt;BR/&gt; 1069: (8.33333%)&lt;BR/&gt; 1068: (8.33333%)&gt;];
}
4870--6622[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="201.177.224.220" dst_port="80" src_ip="140.3.250.170"/>
    </slice>
    <from sec="1039669499" usec="0"/>
    <to sec="1039669770" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="138.186.59.171"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.52.72.171"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669811" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.182.238.171"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1549{
style=filled;
color=gray75;
4881[label="217.48.95.172;51pkt 51fpkt", shape=pentagon, color=darkviolet];
6632[label="217.48.95.172;51pkt 51fpkt", shape=invtriangle, color=brown];
stat1549[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.48.95.172:*, *:1433}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50%)&lt;BR/&gt; 1099: (0.980392%)&lt;BR/&gt; 1098: (0.980392%)&lt;BR/&gt; 1097: (0.980392%)&lt;BR/&gt; 1096: (0.980392%)&gt;];
}
4881--6632[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter dst_port="1433" src_ip="217.48.95.172"/>
    </slice>
    <from sec="1039669873" usec="0"/>
    <to sec="1039669884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1550{
style=filled;
color=gray75;
948[label="140.3.242.45;d;10pkt 10fpkt", shape=diamond, color=yellow];
2847[label="96.28.96.172;s;18pkt 18fpkt", shape=hexagon, color=black];
stat1550[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.28.96.172:*, 140.3.237.54:80}[53.8462%]&lt;BR/&gt;{*:*, 140.3.242.45:80}[38.4615%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3580: (3.57143%)&lt;BR/&gt; 3578: (3.57143%)&lt;BR/&gt; 63446: (1.78571%)&lt;BR/&gt; 41125: (1.78571%)&gt;];
}
948--951[label="1;4pkt 4fpkt"];
948--1949[label="0.2;2pkt 2fpkt"];
948--2847[label="0.2;2pkt 2fpkt"];
948--3185[label="0.4;4pkt 4fpkt"];
948--3770[label="1;4pkt 4fpkt"];
948--4882[label="0.2;2pkt 2fpkt"];
948--6633[label="0.2;2pkt 2fpkt"];
948--7746[label="0.2;2pkt 2fpkt"];
2847--2920[label="0.777778;14pkt 14fpkt"];
2847--4882[label="0.944444;17pkt 17fpkt"];
2847--6633[label="1;18pkt 18fpkt"];
2847--7746[label="0.944444;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.242.45" dst_port="80"/>
      <filter dst_ip="140.3.237.54" dst_port="80" src_ip="96.28.96.172"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1551{
style=filled;
color=gray75;
4888[label="197.240.227.172;133pkt 133fpkt", shape=pentagon, color=darkviolet];
6637[label="197.240.227.172;133pkt 133fpkt", shape=invtriangle, color=brown];
7747[label="197.240.227.172;132pkt 132fpkt", shape=invhouse, color=bisque];
stat1551[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.240.227.172:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4888--6637[label="1;133pkt 133fpkt"];
4888--7747[label="1;132pkt 132fpkt"];
6637--7747[label="1;132pkt 132fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.240.227.172" src_port="1027"/>
    </slice>
    <from sec="1039669293" usec="0"/>
    <to sec="1039669324" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1552{
style=filled;
color=gray75;
4898[label="138.186.5.174;16pkt 16fpkt", shape=pentagon, color=darkviolet];
6641[label="138.186.5.174;16pkt 16fpkt", shape=invtriangle, color=brown];
stat1552[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.5.174:*, 143.188.148.208:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1077: (3.125%)&lt;BR/&gt; 1076: (3.125%)&lt;BR/&gt; 1075: (3.125%)&lt;BR/&gt; 1074: (3.125%)&gt;];
}
4898--6641[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="143.188.148.208" dst_port="80" src_ip="138.186.5.174"/>
    </slice>
    <from sec="1039669571" usec="0"/>
    <to sec="1039669603" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1553{
style=filled;
color=gray75;
4899[label="214.216.48.174;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6642[label="214.216.48.174;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1553[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.216.48.174:53, 175.7.158.47:53}[33.3333%]&lt;BR/&gt;{214.216.48.174:53, 212.22.101.164:61630}[33.3333%]&lt;BR/&gt;{214.216.48.174:53, 64.147.168.254:1025}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (66.6667%)&lt;BR/&gt; 61630: (16.6667%)&lt;BR/&gt; 1025: (16.6667%)&gt;];
}
4899--6642[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="64.147.168.254" dst_port="1025" src_ip="214.216.48.174" src_port="53"/>
      <filter dst_ip="212.22.101.164" dst_port="61630" src_ip="214.216.48.174" src_port="53"/>
      <filter dst_ip="175.7.158.47" dst_port="53" src_ip="214.216.48.174" src_port="53"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1554{
style=filled;
color=gray75;
4912[label="217.210.78.175;23pkt 23fpkt", shape=pentagon, color=darkviolet];
6653[label="217.210.78.175;22pkt 22fpkt", shape=invtriangle, color=brown];
7756[label="217.210.78.175;23pkt 23fpkt", shape=invhouse, color=bisque];
stat1554[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.210.78.175:80, 140.3.24.106:*}[73.913%]&lt;BR/&gt;{217.210.78.175:80, 140.3.81.30:*}[26.087%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2671: (2.20588%)&lt;BR/&gt; 2670: (2.20588%)&lt;BR/&gt; 2669: (2.20588%)&lt;BR/&gt; 2668: (2.20588%)&gt;];
}
4912--6653[label="1;22pkt 22fpkt"];
4912--7756[label="1;23pkt 23fpkt"];
6653--7756[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.24.106" src_ip="217.210.78.175" src_port="80"/>
      <filter dst_ip="140.3.81.30" src_ip="217.210.78.175" src_port="80"/>
    </slice>
    <from sec="1039669610" usec="0"/>
    <to sec="1039669837" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1555{
style=filled;
color=gray75;
4914[label="61.186.137.175;149pkt 149fpkt", shape=pentagon, color=darkviolet];
6654[label="61.186.137.175;149pkt 149fpkt", shape=invtriangle, color=brown];
7757[label="61.186.137.175;149pkt 149fpkt", shape=invhouse, color=bisque];
stat1555[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.186.137.175:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4914--6654[label="1;149pkt 149fpkt"];
4914--7757[label="1;149pkt 149fpkt"];
6654--7757[label="1;149pkt 149fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="61.186.137.175" src_port="1028"/>
    </slice>
    <from sec="1039669561" usec="0"/>
    <to sec="1039669589" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1556{
style=filled;
color=gray75;
4925[label="197.151.219.176;33pkt 33fpkt", shape=pentagon, color=darkviolet];
6658[label="197.151.219.176;33pkt 33fpkt", shape=invtriangle, color=brown];
7759[label="197.151.219.176;32pkt 32fpkt", shape=invhouse, color=bisque];
stat1556[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.151.219.176:80, 140.3.210.30:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1493: (1.53061%)&lt;BR/&gt; 1492: (1.53061%)&lt;BR/&gt; 1491: (1.53061%)&lt;BR/&gt; 1490: (1.53061%)&gt;];
}
4925--6658[label="1;33pkt 33fpkt"];
4925--7759[label="1;32pkt 32fpkt"];
6658--7759[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.210.30" src_ip="197.151.219.176" src_port="80"/>
    </slice>
    <from sec="1039669817" usec="0"/>
    <to sec="1039669821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1557{
style=filled;
color=gray75;
4927[label="38.44.48.177;18pkt 18fpkt", shape=pentagon, color=darkviolet];
6660[label="38.44.48.177;18pkt 18fpkt", shape=invtriangle, color=brown];
stat1557[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.44.48.177:80, 215.90.155.102:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3937: (2.77778%)&lt;BR/&gt; 3934: (2.77778%)&lt;BR/&gt; 3932: (2.77778%)&lt;BR/&gt; 3931: (2.77778%)&gt;];
}
4927--6660[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.155.102" src_ip="38.44.48.177" src_port="80"/>
    </slice>
    <from sec="1039669318" usec="0"/>
    <to sec="1039669326" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="149.203.74.178"/>
    </slice>
    <from sec="1039669831" usec="0"/>
    <to sec="1039669846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1559{
style=filled;
color=gray75;
4938[label="140.3.134.178;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6666[label="140.3.134.178;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1559[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.134.178:2804, 211.90.73.24:80}[33.3333%]&lt;BR/&gt;{140.3.134.178:2806, 211.90.98.69:80}[33.3333%]&lt;BR/&gt;{140.3.134.178:2800, 211.90.73.232:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2806: (16.6667%)&lt;BR/&gt; 2804: (16.6667%)&lt;BR/&gt; 2800: (16.6667%)&gt;];
}
4938--6666[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="211.90.73.232" dst_port="80" src_ip="140.3.134.178" src_port="2800"/>
      <filter dst_ip="211.90.98.69" dst_port="80" src_ip="140.3.134.178" src_port="2806"/>
      <filter dst_ip="211.90.73.24" dst_port="80" src_ip="140.3.134.178" src_port="2804"/>
    </slice>
    <from sec="1039669878" usec="0"/>
    <to sec="1039669917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1560{
style=filled;
color=gray75;
550[label="36.161.192.86;d;220pkt 220fpkt", shape=diamond, color=yellow];
660[label="140.3.248.178;s;606pkt 606fpkt", shape=diamond, color=yellow];
807[label="201.249.96.76;d;337pkt 337fpkt", shape=diamond, color=yellow];
1209[label="141.97.64.17;d;146pkt 146fpkt", shape=diamond, color=yellow];
2526[label="140.3.248.178;s;439pkt 439fpkt", shape=hexagon, color=black];
2846[label="141.97.64.17;d;146pkt 146fpkt", shape=hexagon, color=black];
3343[label="140.3.201.10;38pkt 38fpkt", shape=pentagon, color=darkviolet];
4375[label="140.3.229.114;155pkt 155fpkt", shape=pentagon, color=darkviolet];
4941[label="140.3.248.178;641pkt 641fpkt", shape=pentagon, color=darkviolet];
5101[label="140.3.255.198;59pkt 59fpkt", shape=pentagon, color=darkviolet];
5833[label="148.110.106.40;70pkt 70fpkt", shape=invtriangle, color=brown];
6288[label="140.3.229.114;155pkt 155fpkt", shape=invtriangle, color=brown];
6669[label="140.3.248.178;640pkt 640fpkt", shape=invtriangle, color=brown];
6765[label="140.3.255.198;58pkt 58fpkt", shape=invtriangle, color=brown];
7519[label="140.3.229.114;155pkt 155fpkt", shape=invhouse, color=bisque];
7683[label="140.3.211.157;15pkt 15fpkt", shape=invhouse, color=bisque];
7765[label="140.3.248.178;641pkt 641fpkt", shape=invhouse, color=bisque];
stat1560[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.248.178:*, 201.249.96.76:80}[31.3488%]&lt;BR/&gt;{*:*, 36.161.192.86:80}[20.5581%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.6333%)&lt;BR/&gt; 53: (2.02389%)&lt;BR/&gt; 32904: (1.89117%)&lt;BR/&gt; 0: (0.66357%)&lt;BR/&gt; 4011: (0.088476%)&gt;];
}
550--616[label="0.0136364;3pkt 3fpkt"];
550--660[label="0.227273;50pkt 50fpkt"];
550--680[label="0.0136364;3pkt 3fpkt"];
550--1140[label="0.358209;24pkt 24fpkt"];
550--1432[label="0.0328947;5pkt 5fpkt"];
550--2462[label="0.00909091;2pkt 2fpkt"];
550--2504[label="0.0954545;21pkt 21fpkt"];
550--2511[label="1;128pkt 128fpkt"];
550--2526[label="0.227273;50pkt 50fpkt"];
550--3010[label="0.0136364;3pkt 3fpkt"];
550--3121[label="0.00909091;2pkt 2fpkt"];
550--3132[label="0.0863636;19pkt 19fpkt"];
550--3185[label="0.0409091;9pkt 9fpkt"];
550--3343[label="0.605263;23pkt 23fpkt"];
550--3673[label="0.342857;24pkt 24fpkt"];
550--4375[label="0.0322581;5pkt 5fpkt"];
550--4435[label="0.0135135;1pkt 1fpkt"];
550--4744[label="0.875;14pkt 14fpkt"];
550--4941[label="0.227273;50pkt 50fpkt"];
550--4979[label="0.00909091;2pkt 2fpkt"];
550--5101[label="0.135593;8pkt 8fpkt"];
550--5833[label="0.342857;24pkt 24fpkt"];
550--6288[label="0.0322581;5pkt 5fpkt"];
550--6538[label="0.875;14pkt 14fpkt"];
550--6669[label="0.227273;50pkt 50fpkt"];
550--6696[label="0.00909091;2pkt 2fpkt"];
550--6765[label="0.137931;8pkt 8fpkt"];
550--7519[label="0.0322581;5pkt 5fpkt"];
550--7683[label="0.866667;13pkt 13fpkt"];
550--7765[label="0.227273;50pkt 50fpkt"];
550--7782[label="0.00909091;2pkt 2fpkt"];
660--807[label="1;337pkt 337fpkt"];
660--1209[label="1;146pkt 146fpkt"];
660--2511[label="0.390625;50pkt 50fpkt"];
660--2526[label="1;439pkt 439fpkt"];
660--2846[label="1;146pkt 146fpkt"];
660--3185[label="0.00660066;4pkt 4fpkt"];
660--4941[label="1;606pkt 606fpkt"];
660--6669[label="0.99835;605pkt 605fpkt"];
660--7765[label="1;606pkt 606fpkt"];
807--2526[label="0.676558;228pkt 228fpkt"];
807--4941[label="1;337pkt 337fpkt"];
807--6669[label="1;337pkt 337fpkt"];
807--7765[label="1;337pkt 337fpkt"];
1209--2526[label="0.972603;142pkt 142fpkt"];
1209--2846[label="1;146pkt 146fpkt"];
1209--4941[label="1;146pkt 146fpkt"];
1209--6669[label="1;146pkt 146fpkt"];
1209--7765[label="1;146pkt 146fpkt"];
2526--2846[label="0.972603;142pkt 142fpkt"];
2526--4941[label="1;439pkt 439fpkt"];
2526--6669[label="0.997722;438pkt 438fpkt"];
2526--7765[label="1;439pkt 439fpkt"];
2846--4941[label="1;146pkt 146fpkt"];
2846--6669[label="1;146pkt 146fpkt"];
2846--7765[label="1;146pkt 146fpkt"];
4375--6288[label="1;155pkt 155fpkt"];
4375--7519[label="1;155pkt 155fpkt"];
4941--6669[label="1;640pkt 640fpkt"];
4941--7765[label="1;641pkt 641fpkt"];
5101--6765[label="1;58pkt 58fpkt"];
6288--7519[label="1;155pkt 155fpkt"];
6669--7765[label="1;640pkt 640fpkt"];
</description>
    <slice>
      <filter dst_ip="36.161.192.86" dst_port="80"/>
      <filter dst_ip="201.249.96.76" dst_port="80" src_ip="140.3.248.178"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1561{
style=filled;
color=gray75;
275[label="201.26.5.180s;41pkt 41fpkt", shape=rectangle, color=red];
4945[label="201.26.5.180;230pkt 230fpkt", shape=pentagon, color=darkviolet];
6672[label="201.26.5.180;230pkt 230fpkt", shape=invtriangle, color=brown];
7767[label="201.26.5.180;229pkt 229fpkt", shape=invhouse, color=bisque];
stat1561[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.26.5.180:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
275--4945[label="1;41pkt 41fpkt"];
275--6672[label="1;41pkt 41fpkt"];
275--7767[label="1;41pkt 41fpkt"];
4945--6672[label="1;230pkt 230fpkt"];
4945--7767[label="1;229pkt 229fpkt"];
6672--7767[label="1;229pkt 229fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.26.5.180" src_port="1027"/>
    </slice>
    <from sec="1039669546" usec="0"/>
    <to sec="1039669589" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1562{
style=filled;
color=gray75;
4946[label="38.237.21.180;194pkt 194fpkt", shape=pentagon, color=darkviolet];
6673[label="38.237.21.180;193pkt 193fpkt", shape=invtriangle, color=brown];
7768[label="38.237.21.180;193pkt 193fpkt", shape=invhouse, color=bisque];
stat1562[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.237.21.180:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4946--6673[label="1;193pkt 193fpkt"];
4946--7768[label="1;193pkt 193fpkt"];
6673--7768[label="1;193pkt 193fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="38.237.21.180" src_port="1029"/>
    </slice>
    <from sec="1039669793" usec="0"/>
    <to sec="1039669823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1564{
style=filled;
color=gray75;
4951[label="138.7.77.180;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6676[label="138.7.77.180;1pkt 1fpkt", shape=invtriangle, color=brown];
7771[label="138.7.77.180;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1564[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.7.77.180:1287, 92.145.240.157:80}[50%]&lt;BR/&gt;{138.7.77.180:1288, 92.145.240.157:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1288: (30%)&lt;BR/&gt; 1287: (20%)&gt;];
}
4951--6676[label="1;1pkt 1fpkt"];
4951--7771[label="1;2pkt 2fpkt"];
6676--7771[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="92.145.240.157" dst_port="80" src_ip="138.7.77.180" src_port="1288"/>
      <filter dst_ip="92.145.240.157" dst_port="80" src_ip="138.7.77.180" src_port="1287"/>
    </slice>
    <from sec="1039669542" usec="0"/>
    <to sec="1039669578" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1565{
style=filled;
color=gray75;
4952[label="96.192.102.180;101pkt 101fpkt", shape=pentagon, color=darkviolet];
6677[label="96.192.102.180;101pkt 101fpkt", shape=invtriangle, color=brown];
7772[label="96.192.102.180;101pkt 101fpkt", shape=invhouse, color=bisque];
stat1565[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.192.102.180:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4952--6677[label="1;101pkt 101fpkt"];
4952--7772[label="1;101pkt 101fpkt"];
6677--7772[label="1;101pkt 101fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.192.102.180" src_port="1029"/>
    </slice>
    <from sec="1039669475" usec="0"/>
    <to sec="1039669498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1566{
style=filled;
color=gray75;
4954[label="197.231.171.180;14pkt 14fpkt", shape=pentagon, color=darkviolet];
6678[label="197.231.171.180;13pkt 13fpkt", shape=invtriangle, color=brown];
7773[label="197.231.171.180;13pkt 13fpkt", shape=invhouse, color=bisque];
stat1566[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.231.171.180:80, 215.90.152.114:*}[64.2857%]&lt;BR/&gt;{197.231.171.180:80, 172.93.75.208:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2375: (3.75%)&lt;BR/&gt; 2374: (3.75%)&lt;BR/&gt; 2373: (3.75%)&lt;BR/&gt; 2372: (3.75%)&gt;];
}
4954--6678[label="1;13pkt 13fpkt"];
4954--7773[label="1;13pkt 13fpkt"];
6678--7773[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.152.114" src_ip="197.231.171.180" src_port="80"/>
      <filter dst_ip="172.93.75.208" src_ip="197.231.171.180" src_port="80"/>
    </slice>
    <from sec="1039669232" usec="0"/>
    <to sec="1039669925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645838,1.80177,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1567{
style=filled;
color=gray75;
2452[label="140.3.209.180;s;99pkt 99fpkt", shape=diamond, color=yellow];
4955[label="140.3.209.180;99pkt 99fpkt", shape=pentagon, color=darkviolet];
6679[label="140.3.209.180;99pkt 99fpkt", shape=invtriangle, color=brown];
stat1567[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.209.180:80, 167.135.14.255:*}[71.7172%]&lt;BR/&gt;{140.3.209.180:80, 167.135.14.254:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 42791: (0.505051%)&lt;BR/&gt; 42783: (0.505051%)&lt;BR/&gt; 42780: (0.505051%)&lt;BR/&gt; 42776: (0.505051%)&gt;];
}
2452--4955[label="1;99pkt 99fpkt"];
2452--6679[label="1;99pkt 99fpkt"];
4955--6679[label="1;99pkt 99fpkt"];
</description>
    <slice>
      <filter dst_ip="167.135.14.255" src_ip="140.3.209.180" src_port="80"/>
      <filter dst_ip="167.135.14.254" src_ip="140.3.209.180" src_port="80"/>
    </slice>
    <from sec="1039669279" usec="0"/>
    <to sec="1039669820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1568{
style=filled;
color=gray75;
4958[label="138.186.58.181;19pkt 19fpkt", shape=pentagon, color=darkviolet];
6682[label="138.186.58.181;19pkt 19fpkt", shape=invtriangle, color=brown];
7775[label="138.186.58.181;19pkt 19fpkt", shape=invhouse, color=bisque];
stat1568[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.58.181:*, 199.186.78.52:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1215: (2.63158%)&lt;BR/&gt; 1214: (2.63158%)&lt;BR/&gt; 1213: (2.63158%)&lt;BR/&gt; 1212: (2.63158%)&gt;];
}
4958--6682[label="1;19pkt 19fpkt"];
4958--7775[label="1;19pkt 19fpkt"];
6682--7775[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="199.186.78.52" dst_port="80" src_ip="138.186.58.181"/>
    </slice>
    <from sec="1039669430" usec="0"/>
    <to sec="1039669456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1569{
style=filled;
color=gray75;
279[label="96.77.84.181s;47pkt 47fpkt", shape=rectangle, color=red];
4959[label="96.77.84.181;122pkt 122fpkt", shape=pentagon, color=darkviolet];
6683[label="96.77.84.181;121pkt 121fpkt", shape=invtriangle, color=brown];
7776[label="96.77.84.181;122pkt 122fpkt", shape=invhouse, color=bisque];
stat1569[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.77.84.181:1084, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1084: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
279--4959[label="1;47pkt 47fpkt"];
279--6683[label="1;47pkt 47fpkt"];
279--7776[label="1;47pkt 47fpkt"];
4959--6683[label="1;121pkt 121fpkt"];
4959--7776[label="1;122pkt 122fpkt"];
6683--7776[label="1;121pkt 121fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.77.84.181" src_port="1084"/>
    </slice>
    <from sec="1039669376" usec="0"/>
    <to sec="1039669395" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.937874,1.83478,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1570{
style=filled;
color=gray75;
892[label="211.90.23.182;s;90pkt 90fpkt", shape=diamond, color=yellow];
1928[label="138.7.34.8;d;51pkt 51fpkt", shape=diamond, color=yellow];
2220[label="172.93.147.108;d;8pkt 8fpkt", shape=diamond, color=yellow];
2961[label="138.7.34.8;d;51pkt 51fpkt", shape=hexagon, color=black];
3621[label="201.100.9.36;54pkt 54fpkt", shape=pentagon, color=darkviolet];
4967[label="211.90.23.182;95pkt 95fpkt", shape=pentagon, color=darkviolet];
6689[label="211.90.23.182;96pkt 96fpkt", shape=invtriangle, color=brown];
stat1570[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.100.9.36:80, *:*}[34.1772%]&lt;BR/&gt;{211.90.23.182:80, 138.7.34.8:*}[31.0127%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8876%)&lt;BR/&gt; 57216: (0.561798%)&lt;BR/&gt; 57215: (0.561798%)&lt;BR/&gt; 57214: (0.561798%)&lt;BR/&gt; 57213: (0.561798%)&gt;];
}
892--1401[label="0.0222222;2pkt 2fpkt"];
892--1505[label="0.0222222;2pkt 2fpkt"];
892--1928[label="0.941176;48pkt 48fpkt"];
892--2220[label="0.25;2pkt 2fpkt"];
892--2482[label="0.0111111;1pkt 1fpkt"];
892--2656[label="1;65pkt 65fpkt"];
892--2740[label="0.0111111;1pkt 1fpkt"];
892--2875[label="0.0333333;3pkt 3fpkt"];
892--2951[label="0.0222222;2pkt 2fpkt"];
892--2961[label="0.941176;48pkt 48fpkt"];
892--3154[label="0.0111111;1pkt 1fpkt"];
892--4967[label="0.988889;89pkt 89fpkt"];
892--6689[label="1;90pkt 90fpkt"];
1928--2656[label="0.764706;39pkt 39fpkt"];
1928--2961[label="1;51pkt 51fpkt"];
1928--3621[label="0.0196078;1pkt 1fpkt"];
1928--4967[label="0.941176;48pkt 48fpkt"];
1928--6689[label="0.941176;48pkt 48fpkt"];
2220--2820[label="0.25;2pkt 2fpkt"];
2220--3649[label="0.25;2pkt 2fpkt"];
2220--4967[label="0.25;2pkt 2fpkt"];
2220--5817[label="0.375;3pkt 3fpkt"];
2220--6689[label="0.25;2pkt 2fpkt"];
2961--3621[label="0.0196078;1pkt 1fpkt"];
2961--4967[label="0.941176;48pkt 48fpkt"];
2961--6689[label="0.941176;48pkt 48fpkt"];
4967--6689[label="1;95pkt 95fpkt"];
</description>
    <slice>
      <filter src_ip="201.100.9.36" src_port="80"/>
      <filter dst_ip="138.7.34.8" src_ip="211.90.23.182" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1571{
style=filled;
color=gray75;
4968[label="202.81.30.182;157pkt 157fpkt", shape=pentagon, color=darkviolet];
6690[label="202.81.30.182;156pkt 156fpkt", shape=invtriangle, color=brown];
stat1571[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.81.30.182:1024, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1024: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4968--6690[label="1;156pkt 156fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.81.30.182" src_port="1024"/>
    </slice>
    <from sec="1039669792" usec="0"/>
    <to sec="1039669816" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1572{
style=filled;
color=gray75;
4972[label="215.90.68.182;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6692[label="215.90.68.182;10pkt 10fpkt", shape=invtriangle, color=brown];
7779[label="215.90.68.182;10pkt 10fpkt", shape=invhouse, color=bisque];
stat1572[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.90.68.182:*, 199.108.34.198:80}[30%]&lt;BR/&gt;{215.90.68.182:*, 199.108.34.2:80}[20%]&lt;BR/&gt;{215.90.68.182:*, 199.108.34.223:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1106: (5%)&lt;BR/&gt; 1105: (5%)&lt;BR/&gt; 1104: (5%)&lt;BR/&gt; 1100: (5%)&gt;];
}
4972--6692[label="1;10pkt 10fpkt"];
4972--7779[label="1;10pkt 10fpkt"];
6692--7779[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="199.108.34.198" dst_port="80" src_ip="215.90.68.182"/>
      <filter dst_ip="199.108.34.223" dst_port="80" src_ip="215.90.68.182"/>
      <filter dst_ip="199.108.34.2" dst_port="80" src_ip="215.90.68.182"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="96.40.74.183"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1574{
style=filled;
color=gray75;
4981[label="215.87.96.183;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6698[label="215.87.96.183;3pkt 3fpkt", shape=invtriangle, color=brown];
7784[label="215.87.96.183;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1574[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.87.96.183:80, 133.56.234.22:1695}[25%]&lt;BR/&gt;{215.87.96.183:80, 214.205.90.28:50356}[25%]&lt;BR/&gt;{215.87.96.183:80, 214.205.90.28:50421}[25%]&lt;BR/&gt;{215.87.96.183:80, 214.205.90.28:50422}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50422: (13.6364%)&lt;BR/&gt; 50421: (13.6364%)&lt;BR/&gt; 50356: (13.6364%)&lt;BR/&gt; 1695: (9.09091%)&gt;];
}
4981--6698[label="1;3pkt 3fpkt"];
4981--7784[label="1;4pkt 4fpkt"];
6698--7784[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="214.205.90.28" dst_port="50422" src_ip="215.87.96.183" src_port="80"/>
      <filter dst_ip="214.205.90.28" dst_port="50421" src_ip="215.87.96.183" src_port="80"/>
      <filter dst_ip="214.205.90.28" dst_port="50356" src_ip="215.87.96.183" src_port="80"/>
      <filter dst_ip="133.56.234.22" dst_port="1695" src_ip="215.87.96.183" src_port="80"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1575{
style=filled;
color=gray75;
4982[label="197.240.137.183;152pkt 152fpkt", shape=pentagon, color=darkviolet];
6699[label="197.240.137.183;153pkt 153fpkt", shape=invtriangle, color=brown];
7785[label="197.240.137.183;153pkt 153fpkt", shape=invhouse, color=bisque];
stat1575[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.240.137.183:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4982--6699[label="1;152pkt 152fpkt"];
4982--7785[label="1;152pkt 152fpkt"];
6699--7785[label="1;153pkt 153fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.240.137.183" src_port="1029"/>
    </slice>
    <from sec="1039669564" usec="0"/>
    <to sec="1039669595" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1576{
style=filled;
color=gray75;
4993[label="96.194.134.184;116pkt 116fpkt", shape=pentagon, color=darkviolet];
6703[label="96.194.134.184;117pkt 117fpkt", shape=invtriangle, color=brown];
7788[label="96.194.134.184;116pkt 116fpkt", shape=invhouse, color=bisque];
stat1576[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.194.134.184:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4993--6703[label="1;116pkt 116fpkt"];
4993--7788[label="1;116pkt 116fpkt"];
6703--7788[label="1;116pkt 116fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.194.134.184" src_port="1026"/>
    </slice>
    <from sec="1039669643" usec="0"/>
    <to sec="1039669669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1577{
style=filled;
color=gray75;
5003[label="215.87.120.185;33pkt 33fpkt", shape=pentagon, color=darkviolet];
6709[label="215.87.120.185;34pkt 34fpkt", shape=invtriangle, color=brown];
stat1577[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.87.120.185:*, 211.168.177.74:53}[58.8235%]&lt;BR/&gt;{215.87.120.185:*, 215.170.196.60:80}[35.2941%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (29.8507%)&lt;BR/&gt; 80: (17.9104%)&lt;BR/&gt; 6699: (1.49254%)&lt;BR/&gt; 3868: (1.49254%)&lt;BR/&gt; 3867: (1.49254%)&gt;];
}
5003--6709[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="211.168.177.74" dst_port="53" src_ip="215.87.120.185"/>
      <filter dst_ip="215.170.196.60" dst_port="80" src_ip="215.87.120.185"/>
    </slice>
    <from sec="1039669229" usec="0"/>
    <to sec="1039669924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="64.185.43.186"/>
    </slice>
    <from sec="1039669461" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1579{
style=filled;
color=gray75;
5023[label="197.240.44.188;134pkt 134fpkt", shape=pentagon, color=darkviolet];
6720[label="197.240.44.188;133pkt 133fpkt", shape=invtriangle, color=brown];
stat1579[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.240.44.188:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5023--6720[label="1;133pkt 133fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.240.44.188" src_port="1025"/>
    </slice>
    <from sec="1039669536" usec="0"/>
    <to sec="1039669567" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1580{
style=filled;
color=gray75;
1452[label="138.186.24.212;d;59pkt 59fpkt", shape=diamond, color=yellow];
2845[label="138.186.24.212;d;59pkt 59fpkt", shape=hexagon, color=black];
stat1580[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.98.45.176:80, 138.186.24.212:*}[47.4576%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1525%)&lt;BR/&gt; 1356: (0.847458%)&lt;BR/&gt; 1355: (0.847458%)&lt;BR/&gt; 1354: (0.847458%)&lt;BR/&gt; 1352: (0.847458%)&gt;];
}
1452--1469[label="0.30303;10pkt 10fpkt"];
1452--1703[label="0.0677966;4pkt 4fpkt"];
1452--1836[label="0.0338983;2pkt 2fpkt"];
1452--2141[label="0.0169492;1pkt 1fpkt"];
1452--2155[label="0.0677966;4pkt 4fpkt"];
1452--2845[label="1;59pkt 59fpkt"];
1452--2962[label="0.0677966;4pkt 4fpkt"];
1452--3209[label="0.0169492;1pkt 1fpkt"];
1452--4357[label="0.0508475;3pkt 3fpkt"];
1452--4699[label="0.02;1pkt 1fpkt"];
1452--4920[label="0.474576;28pkt 28fpkt"];
1452--5024[label="0.263158;10pkt 10fpkt"];
1452--6275[label="0.0677966;4pkt 4fpkt"];
1452--6506[label="0.02;1pkt 1fpkt"];
1452--6656[label="0.457627;27pkt 27fpkt"];
1452--6721[label="0.263158;10pkt 10fpkt"];
1452--7511[label="0.0677966;4pkt 4fpkt"];
1452--7664[label="0.0204082;1pkt 1fpkt"];
1452--7758[label="0.457627;27pkt 27fpkt"];
1452--7800[label="0.263158;10pkt 10fpkt"];
2845--2962[label="0.0677966;4pkt 4fpkt"];
2845--3209[label="0.0169492;1pkt 1fpkt"];
2845--4357[label="0.0508475;3pkt 3fpkt"];
2845--4699[label="0.02;1pkt 1fpkt"];
2845--4920[label="0.474576;28pkt 28fpkt"];
2845--5024[label="0.263158;10pkt 10fpkt"];
2845--6275[label="0.0677966;4pkt 4fpkt"];
2845--6506[label="0.02;1pkt 1fpkt"];
2845--6656[label="0.457627;27pkt 27fpkt"];
2845--6721[label="0.263158;10pkt 10fpkt"];
2845--7511[label="0.0677966;4pkt 4fpkt"];
2845--7664[label="0.0204082;1pkt 1fpkt"];
2845--7758[label="0.457627;27pkt 27fpkt"];
2845--7800[label="0.263158;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.24.212" src_ip="198.98.45.176" src_port="80"/>
    </slice>
    <from sec="1039669329" usec="0"/>
    <to sec="1039669522" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1581{
style=filled;
color=gray75;
5033[label="201.96.81.189;143pkt 143fpkt", shape=pentagon, color=darkviolet];
6726[label="201.96.81.189;143pkt 143fpkt", shape=invtriangle, color=brown];
7804[label="201.96.81.189;144pkt 144fpkt", shape=invhouse, color=bisque];
stat1581[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.96.81.189:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5033--6726[label="1;143pkt 143fpkt"];
5033--7804[label="1;143pkt 143fpkt"];
6726--7804[label="1;143pkt 143fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.96.81.189" src_port="1028"/>
    </slice>
    <from sec="1039669635" usec="0"/>
    <to sec="1039669658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="172.93.183.192"/>
    </slice>
    <from sec="1039669429" usec="0"/>
    <to sec="1039669759" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="148.110.218.192"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1584{
style=filled;
color=gray75;
5070[label="197.231.171.195;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6741[label="197.231.171.195;1pkt 1fpkt", shape=invtriangle, color=brown];
7814[label="197.231.171.195;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1584[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.231.171.195:80, 140.3.213.230:1296}[50%]&lt;BR/&gt;{197.231.171.195:80, 140.3.213.230:1297}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1297: (30%)&lt;BR/&gt; 1296: (20%)&gt;];
}
5070--6741[label="1;1pkt 1fpkt"];
5070--7814[label="1;2pkt 2fpkt"];
6741--7814[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.213.230" dst_port="1297" src_ip="197.231.171.195" src_port="80"/>
      <filter dst_ip="140.3.213.230" dst_port="1296" src_ip="197.231.171.195" src_port="80"/>
    </slice>
    <from sec="1039669876" usec="0"/>
    <to sec="1039669896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1585{
style=filled;
color=gray75;
5072[label="38.72.198.195;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6743[label="38.72.198.195;1pkt 1fpkt", shape=invtriangle, color=brown];
7815[label="38.72.198.195;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1585[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.72.198.195:80, 138.186.55.125:1746}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1746: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5072--6743[label="1;1pkt 1fpkt"];
5072--7815[label="1;1pkt 1fpkt"];
6743--7815[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.55.125" dst_port="1746" src_ip="38.72.198.195" src_port="80"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1586{
style=filled;
color=gray75;
5075[label="64.192.83.196;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6745[label="64.192.83.196;2pkt 2fpkt", shape=invtriangle, color=brown];
7816[label="64.192.83.196;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1586[shape=component, label=&lt;Rules:&lt;BR/&gt;{64.192.83.196:4172, 172.93.52.133:7656}[50%]&lt;BR/&gt;{64.192.83.196:7743, 172.93.52.133:2649}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7743: (25%)&lt;BR/&gt; 7656: (25%)&lt;BR/&gt; 4172: (25%)&lt;BR/&gt; 2649: (25%)&gt;];
}
5075--6745[label="1;2pkt 2fpkt"];
5075--7816[label="1;2pkt 2fpkt"];
6745--7816[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="172.93.52.133" dst_port="2649" src_ip="64.192.83.196" src_port="7743"/>
      <filter dst_ip="172.93.52.133" dst_port="7656" src_ip="64.192.83.196" src_port="4172"/>
    </slice>
    <from sec="1039669665" usec="0"/>
    <to sec="1039669698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1587{
style=filled;
color=gray75;
5076[label="140.3.110.196;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6746[label="140.3.110.196;10pkt 10fpkt", shape=invtriangle, color=brown];
7817[label="140.3.110.196;10pkt 10fpkt", shape=invhouse, color=bisque];
stat1587[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.110.196:*, 198.5.128.163:80}[50%]&lt;BR/&gt;{140.3.110.196:*, 198.5.128.162:21}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 21: (10%)&lt;BR/&gt; 2797: (5%)&lt;BR/&gt; 2785: (5%)&lt;BR/&gt; 1863: (5%)&gt;];
}
5076--6746[label="1;10pkt 10fpkt"];
5076--7817[label="1;10pkt 10fpkt"];
6746--7817[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="198.5.128.163" dst_port="80" src_ip="140.3.110.196"/>
      <filter dst_ip="198.5.128.162" dst_port="21" src_ip="140.3.110.196"/>
    </slice>
    <from sec="1039669288" usec="0"/>
    <to sec="1039669881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1588{
style=filled;
color=gray75;
5079[label="38.177.233.196;216pkt 216fpkt", shape=pentagon, color=darkviolet];
6748[label="38.177.233.196;215pkt 215fpkt", shape=invtriangle, color=brown];
7819[label="38.177.233.196;216pkt 216fpkt", shape=invhouse, color=bisque];
stat1588[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.177.233.196:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5079--6748[label="1;215pkt 215fpkt"];
5079--7819[label="1;216pkt 216fpkt"];
6748--7819[label="1;215pkt 215fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="38.177.233.196" src_port="1028"/>
    </slice>
    <from sec="1039669612" usec="0"/>
    <to sec="1039669652" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1589{
style=filled;
color=gray75;
5082[label="201.57.64.197;34pkt 34fpkt", shape=pentagon, color=darkviolet];
6750[label="201.57.64.197;34pkt 34fpkt", shape=invtriangle, color=brown];
stat1589[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.57.64.197:80, 138.186.8.154:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 35203: (1.47059%)&lt;BR/&gt; 34452: (1.47059%)&lt;BR/&gt; 34450: (1.47059%)&lt;BR/&gt; 34449: (1.47059%)&gt;];
}
5082--6750[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.8.154" src_ip="201.57.64.197" src_port="80"/>
    </slice>
    <from sec="1039669482" usec="0"/>
    <to sec="1039669515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645838,1.80177,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1590{
style=filled;
color=gray75;
2001[label="140.3.137.197;s;76pkt 76fpkt", shape=diamond, color=yellow];
5085[label="140.3.137.197;75pkt 75fpkt", shape=pentagon, color=darkviolet];
6753[label="140.3.137.197;75pkt 75fpkt", shape=invtriangle, color=brown];
stat1590[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.137.197:*, 211.152.237.78:80}[67.1053%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1323: (0.663717%)&lt;BR/&gt; 1321: (0.663717%)&lt;BR/&gt; 1319: (0.663717%)&lt;BR/&gt; 1317: (0.663717%)&gt;];
}
2001--2179[label="0.809524;51pkt 51fpkt"];
2001--5085[label="1;75pkt 75fpkt"];
2001--6753[label="1;75pkt 75fpkt"];
5085--6753[label="1;75pkt 75fpkt"];
</description>
    <slice>
      <filter dst_ip="211.152.237.78" dst_port="80" src_ip="140.3.137.197"/>
    </slice>
    <from sec="1039669566" usec="0"/>
    <to sec="1039669626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1591{
style=filled;
color=gray75;
5091[label="197.91.5.198;117pkt 117fpkt", shape=pentagon, color=darkviolet];
6757[label="197.91.5.198;117pkt 117fpkt", shape=invtriangle, color=brown];
7825[label="197.91.5.198;117pkt 117fpkt", shape=invhouse, color=bisque];
stat1591[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.91.5.198:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5091--6757[label="1;117pkt 117fpkt"];
5091--7825[label="1;117pkt 117fpkt"];
6757--7825[label="1;117pkt 117fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.91.5.198" src_port="1026"/>
    </slice>
    <from sec="1039669560" usec="0"/>
    <to sec="1039669590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.13.80.198"/>
    </slice>
    <from sec="1039669283" usec="0"/>
    <to sec="1039669295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1593{
style=filled;
color=gray75;
5096[label="202.152.195.198;104pkt 104fpkt", shape=pentagon, color=darkviolet];
6760[label="202.152.195.198;105pkt 105fpkt", shape=invtriangle, color=brown];
stat1593[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.152.195.198:64913, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64913: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5096--6760[label="1;104pkt 104fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.152.195.198" src_port="64913"/>
    </slice>
    <from sec="1039669278" usec="0"/>
    <to sec="1039669302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1594{
style=filled;
color=gray75;
5103[label="202.147.203.199;159pkt 159fpkt", shape=pentagon, color=darkviolet];
6766[label="202.147.203.199;159pkt 159fpkt", shape=invtriangle, color=brown];
7830[label="202.147.203.199;158pkt 158fpkt", shape=invhouse, color=bisque];
stat1594[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.147.203.199:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5103--6766[label="1;159pkt 159fpkt"];
5103--7830[label="1;158pkt 158fpkt"];
6766--7830[label="1;158pkt 158fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.147.203.199" src_port="1025"/>
    </slice>
    <from sec="1039669315" usec="0"/>
    <to sec="1039669358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1595{
style=filled;
color=gray75;
5105[label="202.155.34.200;237pkt 237fpkt", shape=pentagon, color=darkviolet];
6767[label="202.155.34.200;237pkt 237fpkt", shape=invtriangle, color=brown];
7831[label="202.155.34.200;236pkt 236fpkt", shape=invhouse, color=bisque];
stat1595[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.155.34.200:1030, *:137}[66.2447%]&lt;BR/&gt;{202.155.34.200:1028, *:137}[33.7553%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1030: (33.169%)&lt;BR/&gt; 1028: (16.831%)&gt;];
}
5105--6767[label="1;237pkt 237fpkt"];
5105--7831[label="1;236pkt 236fpkt"];
6767--7831[label="1;236pkt 236fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.155.34.200" src_port="1030"/>
      <filter dst_port="137" src_ip="202.155.34.200" src_port="1028"/>
    </slice>
    <from sec="1039669417" usec="0"/>
    <to sec="1039669876" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1596{
style=filled;
color=gray75;
5108[label="201.76.82.200;165pkt 165fpkt", shape=pentagon, color=darkviolet];
6770[label="201.76.82.200;166pkt 166fpkt", shape=invtriangle, color=brown];
7832[label="201.76.82.200;165pkt 165fpkt", shape=invhouse, color=bisque];
stat1596[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.76.82.200:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5108--6770[label="1;165pkt 165fpkt"];
5108--7832[label="1;165pkt 165fpkt"];
6770--7832[label="1;165pkt 165fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.76.82.200" src_port="1025"/>
    </slice>
    <from sec="1039669395" usec="0"/>
    <to sec="1039669426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1597{
style=filled;
color=gray75;
5110[label="215.17.113.200;11pkt 11fpkt", shape=pentagon, color=darkviolet];
6772[label="215.17.113.200;11pkt 11fpkt", shape=invtriangle, color=brown];
7834[label="215.17.113.200;11pkt 11fpkt", shape=invhouse, color=bisque];
stat1597[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.17.113.200:*, 169.126.152.33:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 11399: (4.54545%)&lt;BR/&gt; 11388: (4.54545%)&lt;BR/&gt; 11373: (4.54545%)&lt;BR/&gt; 11351: (4.54545%)&gt;];
}
5110--6772[label="1;11pkt 11fpkt"];
5110--7834[label="1;11pkt 11fpkt"];
6772--7834[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="169.126.152.33" dst_port="80" src_ip="215.17.113.200"/>
    </slice>
    <from sec="1039669217" usec="0"/>
    <to sec="1039669599" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1598{
style=filled;
color=gray75;
5120[label="169.126.165.201;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6778[label="169.126.165.201;8pkt 8fpkt", shape=invtriangle, color=brown];
stat1598[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.126.165.201:25, 211.134.15.173:*}[22.2222%]&lt;BR/&gt;{169.126.165.201:25, 215.23.5.180:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 51400: (5.88235%)&lt;BR/&gt; 43656: (5.88235%)&lt;BR/&gt; 4845: (5.88235%)&lt;BR/&gt; 4312: (5.88235%)&gt;];
}
5120--6778[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="215.23.5.180" src_ip="169.126.165.201" src_port="25"/>
      <filter dst_ip="211.134.15.173" src_ip="169.126.165.201" src_port="25"/>
    </slice>
    <from sec="1039669363" usec="0"/>
    <to sec="1039669799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1599{
style=filled;
color=gray75;
5127[label="148.110.12.203;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6782[label="148.110.12.203;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1599[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.110.12.203:2836, 64.233.199.217:21564}[50%]&lt;BR/&gt;{148.110.12.203:8992, 64.233.199.217:4119}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8992: (33.3333%)&lt;BR/&gt; 4119: (33.3333%)&lt;BR/&gt; 21564: (16.6667%)&lt;BR/&gt; 2836: (16.6667%)&gt;];
}
5127--6782[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="64.233.199.217" dst_port="4119" src_ip="148.110.12.203" src_port="8992"/>
      <filter dst_ip="64.233.199.217" dst_port="21564" src_ip="148.110.12.203" src_port="2836"/>
    </slice>
    <from sec="1039669262" usec="0"/>
    <to sec="1039669357" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1600{
style=filled;
color=gray75;
5128[label="197.243.35.203;140pkt 140fpkt", shape=pentagon, color=darkviolet];
6783[label="197.243.35.203;139pkt 139fpkt", shape=invtriangle, color=brown];
7840[label="197.243.35.203;140pkt 140fpkt", shape=invhouse, color=bisque];
stat1600[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.243.35.203:1034, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1034: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5128--6783[label="1;139pkt 139fpkt"];
5128--7840[label="1;140pkt 140fpkt"];
6783--7840[label="1;139pkt 139fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.243.35.203" src_port="1034"/>
    </slice>
    <from sec="1039669689" usec="0"/>
    <to sec="1039669719" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1601{
style=filled;
color=gray75;
5130[label="96.0.58.203;121pkt 121fpkt", shape=pentagon, color=darkviolet];
6785[label="96.0.58.203;121pkt 121fpkt", shape=invtriangle, color=brown];
7842[label="96.0.58.203;121pkt 121fpkt", shape=invhouse, color=bisque];
stat1601[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.0.58.203:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5130--6785[label="1;121pkt 121fpkt"];
5130--7842[label="1;121pkt 121fpkt"];
6785--7842[label="1;121pkt 121fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.0.58.203" src_port="1030"/>
    </slice>
    <from sec="1039669778" usec="0"/>
    <to sec="1039669799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1602{
style=filled;
color=gray75;
5132[label="215.90.69.203;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6787[label="215.90.69.203;7pkt 7fpkt", shape=invtriangle, color=brown];
stat1602[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.90.69.203:*, *:25}[28.5714%]&lt;BR/&gt;{215.90.69.203:*, *:113}[28.5714%]&lt;BR/&gt;{215.90.69.203:25, *:*}[28.5714%]&lt;BR/&gt;{215.90.69.203:*, 166.23.48.65:*}[28.5714%]&lt;BR/&gt;{215.90.69.203:*, 204.76.27.156:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (28.5714%)&lt;BR/&gt; 113: (14.2857%)&lt;BR/&gt; 4600: (7.14286%)&lt;BR/&gt; 2946: (7.14286%)&lt;BR/&gt; 1885: (7.14286%)&gt;];
}
5132--6787[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="204.76.27.156" src_ip="215.90.69.203"/>
      <filter dst_ip="166.23.48.65" src_ip="215.90.69.203"/>
      <filter src_ip="215.90.69.203" src_port="25"/>
      <filter dst_port="113" src_ip="215.90.69.203"/>
      <filter dst_port="25" src_ip="215.90.69.203"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1603{
style=filled;
color=gray75;
5134[label="215.90.155.203;18pkt 18fpkt", shape=pentagon, color=darkviolet];
6788[label="215.90.155.203;19pkt 19fpkt", shape=invtriangle, color=brown];
stat1603[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.90.155.203:*, 198.53.5.148:80}[63.1579%]&lt;BR/&gt;{215.90.155.203:*, 211.196.1.30:80}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4979: (2.7027%)&lt;BR/&gt; 4974: (2.7027%)&lt;BR/&gt; 4973: (2.7027%)&lt;BR/&gt; 4730: (2.7027%)&gt;];
}
5134--6788[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="198.53.5.148" dst_port="80" src_ip="215.90.155.203"/>
      <filter dst_ip="211.196.1.30" dst_port="80" src_ip="215.90.155.203"/>
    </slice>
    <from sec="1039669328" usec="0"/>
    <to sec="1039669872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1604{
style=filled;
color=gray75;
5140[label="214.216.54.204;53pkt 53fpkt", shape=pentagon, color=darkviolet];
6792[label="214.216.54.204;53pkt 53fpkt", shape=invtriangle, color=brown];
7847[label="214.216.54.204;53pkt 53fpkt", shape=invhouse, color=bisque];
stat1604[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.216.54.204:*, *:80}[33.9623%]&lt;BR/&gt;{214.216.54.204:0, *:0}[26.4151%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (26.4151%)&lt;BR/&gt; 80: (16.9811%)&lt;BR/&gt; 21: (8.49057%)&lt;BR/&gt; 25: (7.54717%)&lt;BR/&gt; 110: (3.77358%)&gt;];
}
5140--6792[label="1;53pkt 53fpkt"];
5140--7847[label="1;53pkt 53fpkt"];
6792--7847[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="214.216.54.204"/>
      <filter src_ip="214.216.54.204"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669922" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="138.177.139.204"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1606{
style=filled;
color=gray75;
5144[label="204.74.207.204;115pkt 115fpkt", shape=pentagon, color=darkviolet];
6795[label="204.74.207.204;114pkt 114fpkt", shape=invtriangle, color=brown];
7850[label="204.74.207.204;114pkt 114fpkt", shape=invhouse, color=bisque];
stat1606[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.74.207.204:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5144--6795[label="1;114pkt 114fpkt"];
5144--7850[label="1;114pkt 114fpkt"];
6795--7850[label="1;114pkt 114fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="204.74.207.204" src_port="1026"/>
    </slice>
    <from sec="1039669340" usec="0"/>
    <to sec="1039669368" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,501,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1607{
style=filled;
color=gray75;
302[label="197.69.193.205s;1pkt 1fpkt", shape=rectangle, color=red];
5147[label="199.76.45.205;49pkt 49fpkt", shape=pentagon, color=darkviolet];
6796[label="199.76.45.205;49pkt 49fpkt", shape=invtriangle, color=brown];
7851[label="199.76.45.205;50pkt 50fpkt", shape=invhouse, color=bisque];
stat1607[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.76.45.205:21, 148.29.24.129:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (24.8322%)&lt;BR/&gt; 23599: (1.34228%)&lt;BR/&gt; 23977: (1.00671%)&lt;BR/&gt; 23950: (1.00671%)&lt;BR/&gt; 23935: (1.00671%)&gt;];
}
302--507[label="1;1pkt 1fpkt"];
302--5147[label="1;1pkt 1fpkt"];
302--6796[label="1;1pkt 1fpkt"];
302--7851[label="1;1pkt 1fpkt"];
5147--6796[label="1;49pkt 49fpkt"];
5147--7851[label="1;49pkt 49fpkt"];
6796--7851[label="1;49pkt 49fpkt"];
</description>
    <slice>
      <filter dst_ip="148.29.24.129" src_ip="199.76.45.205" src_port="21"/>
    </slice>
    <from sec="1039669383" usec="0"/>
    <to sec="1039669450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1608{
style=filled;
color=gray75;
5149[label="202.92.78.205;169pkt 169fpkt", shape=pentagon, color=darkviolet];
6798[label="202.92.78.205;170pkt 170fpkt", shape=invtriangle, color=brown];
7853[label="202.92.78.205;169pkt 169fpkt", shape=invhouse, color=bisque];
stat1608[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.92.78.205:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5149--6798[label="1;169pkt 169fpkt"];
5149--7853[label="1;169pkt 169fpkt"];
6798--7853[label="1;169pkt 169fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.92.78.205" src_port="1028"/>
    </slice>
    <from sec="1039669607" usec="0"/>
    <to sec="1039669637" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1609{
style=filled;
color=gray75;
5150[label="203.11.83.205;116pkt 116fpkt", shape=pentagon, color=darkviolet];
6799[label="203.11.83.205;116pkt 116fpkt", shape=invtriangle, color=brown];
stat1609[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.11.83.205:1161, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1161: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5150--6799[label="1;116pkt 116fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="203.11.83.205" src_port="1161"/>
    </slice>
    <from sec="1039669680" usec="0"/>
    <to sec="1039669726" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1610{
style=filled;
color=gray75;
5152[label="197.69.193.205;123pkt 123fpkt", shape=pentagon, color=darkviolet];
6801[label="197.69.193.205;123pkt 123fpkt", shape=invtriangle, color=brown];
7855[label="197.69.193.205;123pkt 123fpkt", shape=invhouse, color=bisque];
stat1610[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.69.193.205:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5152--6801[label="1;123pkt 123fpkt"];
5152--7855[label="1;123pkt 123fpkt"];
6801--7855[label="1;123pkt 123fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.69.193.205" src_port="1025"/>
    </slice>
    <from sec="1039669409" usec="0"/>
    <to sec="1039669435" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1611{
style=filled;
color=gray75;
5153[label="148.110.196.205;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6802[label="148.110.196.205;5pkt 5fpkt", shape=invtriangle, color=brown];
7856[label="148.110.196.205;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1611[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.110.196.205:*, 131.209.168.124:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49184: (9.375%)&lt;BR/&gt; 49183: (9.375%)&lt;BR/&gt; 49182: (9.375%)&lt;BR/&gt; 49181: (9.375%)&gt;];
}
5153--6802[label="1;5pkt 5fpkt"];
5153--7856[label="1;5pkt 5fpkt"];
6802--7856[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="131.209.168.124" dst_port="80" src_ip="148.110.196.205"/>
    </slice>
    <from sec="1039669792" usec="0"/>
    <to sec="1039669832" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790471,1.82041,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1612{
style=filled;
color=gray75;
303[label="96.79.167.206s;98pkt 98fpkt", shape=rectangle, color=red];
5160[label="96.79.167.206;153pkt 153fpkt", shape=pentagon, color=darkviolet];
6804[label="96.79.167.206;152pkt 152fpkt", shape=invtriangle, color=brown];
stat1612[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.79.167.206:64963, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64963: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
303--5160[label="1;98pkt 98fpkt"];
303--6804[label="1;98pkt 98fpkt"];
5160--6804[label="1;152pkt 152fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.79.167.206" src_port="64963"/>
    </slice>
    <from sec="1039669639" usec="0"/>
    <to sec="1039669663" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1613{
style=filled;
color=gray75;
5161[label="140.3.240.206;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6805[label="140.3.240.206;1pkt 1fpkt", shape=invtriangle, color=brown];
7858[label="140.3.240.206;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1613[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.240.206:4248, 201.100.13.240:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4248: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5161--6805[label="1;1pkt 1fpkt"];
5161--7858[label="1;1pkt 1fpkt"];
6805--7858[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.100.13.240" dst_port="80" src_ip="140.3.240.206" src_port="4248"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1614{
style=filled;
color=gray75;
5163[label="212.193.21.207;199pkt 199fpkt", shape=pentagon, color=darkviolet];
6807[label="212.193.21.207;198pkt 198fpkt", shape=invtriangle, color=brown];
7859[label="212.193.21.207;198pkt 198fpkt", shape=invhouse, color=bisque];
stat1614[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.193.21.207:1033, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1033: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5163--6807[label="1;198pkt 198fpkt"];
5163--7859[label="1;198pkt 198fpkt"];
6807--7859[label="1;198pkt 198fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="212.193.21.207" src_port="1033"/>
    </slice>
    <from sec="1039669316" usec="0"/>
    <to sec="1039669349" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1615{
style=filled;
color=gray75;
5165[label="96.104.154.207;185pkt 185fpkt", shape=pentagon, color=darkviolet];
6809[label="96.104.154.207;185pkt 185fpkt", shape=invtriangle, color=brown];
7861[label="96.104.154.207;186pkt 186fpkt", shape=invhouse, color=bisque];
stat1615[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.104.154.207:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5165--6809[label="1;185pkt 185fpkt"];
5165--7861[label="1;185pkt 185fpkt"];
6809--7861[label="1;185pkt 185fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.104.154.207" src_port="1029"/>
    </slice>
    <from sec="1039669564" usec="0"/>
    <to sec="1039669593" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1616{
style=filled;
color=gray75;
5166[label="202.172.162.207;116pkt 116fpkt", shape=pentagon, color=darkviolet];
6810[label="202.172.162.207;117pkt 117fpkt", shape=invtriangle, color=brown];
stat1616[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.172.162.207:64984, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64984: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5166--6810[label="1;116pkt 116fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.172.162.207" src_port="64984"/>
    </slice>
    <from sec="1039669786" usec="0"/>
    <to sec="1039669806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="92.255.211.207"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669785" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1618{
style=filled;
color=gray75;
5169[label="131.151.23.208;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6812[label="131.151.23.208;1pkt 1fpkt", shape=invtriangle, color=brown];
7863[label="131.151.23.208;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1618[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.151.23.208:7595, 138.49.94.68:3140}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7595: (50%)&lt;BR/&gt; 3140: (50%)&gt;];
}
5169--6812[label="1;1pkt 1fpkt"];
5169--7863[label="1;1pkt 1fpkt"];
6812--7863[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.49.94.68" dst_port="3140" src_ip="131.151.23.208" src_port="7595"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669260" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1619{
style=filled;
color=gray75;
5172[label="215.90.69.208;66pkt 66fpkt", shape=pentagon, color=darkviolet];
6814[label="215.90.69.208;67pkt 67fpkt", shape=invtriangle, color=brown];
stat1619[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.90.69.208:2399, *:53}[83.5821%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (43.2331%)&lt;BR/&gt; 2399: (41.7293%)&lt;BR/&gt; 0: (13.5338%)&lt;BR/&gt; 16121: (0.75188%)&lt;BR/&gt; 15451: (0.75188%)&gt;];
}
5172--6814[label="1;66pkt 66fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="215.90.69.208" src_port="2399"/>
    </slice>
    <from sec="1039669229" usec="0"/>
    <to sec="1039669921" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1620{
style=filled;
color=gray75;
5174[label="39.38.158.208;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6816[label="39.38.158.208;8pkt 8fpkt", shape=invtriangle, color=brown];
7866[label="39.38.158.208;8pkt 8fpkt", shape=invhouse, color=bisque];
stat1620[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.38.158.208:80, 140.3.213.154:*}[50%]&lt;BR/&gt;{39.38.158.208:80, 138.186.49.108:*}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1647: (6.25%)&lt;BR/&gt; 1642: (6.25%)&lt;BR/&gt; 1641: (6.25%)&lt;BR/&gt; 1265: (6.25%)&gt;];
}
5174--6816[label="1;8pkt 8fpkt"];
5174--7866[label="1;8pkt 8fpkt"];
6816--7866[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.213.154" src_ip="39.38.158.208" src_port="80"/>
      <filter dst_ip="138.186.49.108" src_ip="39.38.158.208" src_port="80"/>
    </slice>
    <from sec="1039669276" usec="0"/>
    <to sec="1039669572" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1621{
style=filled;
color=gray75;
5180[label="96.50.210.208;205pkt 205fpkt", shape=pentagon, color=darkviolet];
6820[label="96.50.210.208;205pkt 205fpkt", shape=invtriangle, color=brown];
7869[label="96.50.210.208;205pkt 205fpkt", shape=invhouse, color=bisque];
stat1621[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.50.210.208:10018, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10018: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5180--6820[label="1;205pkt 205fpkt"];
5180--7869[label="1;205pkt 205fpkt"];
6820--7869[label="1;205pkt 205fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.50.210.208" src_port="10018"/>
    </slice>
    <from sec="1039669317" usec="0"/>
    <to sec="1039669351" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1622{
style=filled;
color=gray75;
5183[label="202.75.82.209;157pkt 157fpkt", shape=pentagon, color=darkviolet];
6822[label="202.75.82.209;156pkt 156fpkt", shape=invtriangle, color=brown];
7870[label="202.75.82.209;156pkt 156fpkt", shape=invhouse, color=bisque];
stat1622[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.75.82.209:1024, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1024: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5183--6822[label="1;156pkt 156fpkt"];
5183--7870[label="1;156pkt 156fpkt"];
6822--7870[label="1;156pkt 156fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.75.82.209" src_port="1024"/>
    </slice>
    <from sec="1039669533" usec="0"/>
    <to sec="1039669557" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.131.86.209"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1624{
style=filled;
color=gray75;
5188[label="197.242.180.209;150pkt 150fpkt", shape=pentagon, color=darkviolet];
6826[label="197.242.180.209;151pkt 151fpkt", shape=invtriangle, color=brown];
7874[label="197.242.180.209;150pkt 150fpkt", shape=invhouse, color=bisque];
stat1624[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.242.180.209:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 63362: (0.332594%)&lt;BR/&gt; 63357: (0.332594%)&lt;BR/&gt; 63340: (0.332594%)&lt;BR/&gt; 63334: (0.332594%)&gt;];
}
5188--6826[label="1;150pkt 150fpkt"];
5188--7874[label="1;150pkt 150fpkt"];
6826--7874[label="1;150pkt 150fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.242.180.209"/>
    </slice>
    <from sec="1039669725" usec="0"/>
    <to sec="1039669761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.70.50.210"/>
    </slice>
    <from sec="1039669462" usec="0"/>
    <to sec="1039669747" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1626{
style=filled;
color=gray75;
5206[label="214.162.200.211;123pkt 123fpkt", shape=pentagon, color=darkviolet];
6836[label="214.162.200.211;123pkt 123fpkt", shape=invtriangle, color=brown];
stat1626[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.162.200.211:21079, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21079: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5206--6836[label="1;123pkt 123fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.162.200.211" src_port="21079"/>
    </slice>
    <from sec="1039669392" usec="0"/>
    <to sec="1039669412" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1627{
style=filled;
color=gray75;
5209[label="214.216.52.212;38pkt 38fpkt", shape=pentagon, color=darkviolet];
6838[label="214.216.52.212;37pkt 37fpkt", shape=invtriangle, color=brown];
7881[label="214.216.52.212;38pkt 38fpkt", shape=invhouse, color=bisque];
stat1627[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.216.52.212:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5209--6838[label="1;37pkt 37fpkt"];
5209--7881[label="1;38pkt 38fpkt"];
6838--7881[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter src_ip="214.216.52.212"/>
    </slice>
    <from sec="1039669206" usec="0"/>
    <to sec="1039669922" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1628{
style=filled;
color=gray75;
1347[label="215.87.66.212;s;428pkt 428fpkt", shape=diamond, color=yellow];
5210[label="215.87.66.212;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6839[label="215.87.66.212;1pkt 1fpkt", shape=invtriangle, color=brown];
7882[label="215.87.66.212;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1628[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.87.66.212:1146, *:53}[92.5234%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (47.9118%)&lt;BR/&gt; 1146: (46.2877%)&lt;BR/&gt; 0: (3.24826%)&lt;BR/&gt; 80: (0.696056%)&lt;BR/&gt; 55555: (0.232019%)&gt;];
}
1347--1608[label="0.0169492;1pkt 1fpkt"];
1347--1883[label="0.0243902;1pkt 1fpkt"];
1347--2431[label="0.010989;1pkt 1fpkt"];
1347--3115[label="0.010989;1pkt 1fpkt"];
1347--5210[label="1;1pkt 1fpkt"];
1347--6839[label="1;1pkt 1fpkt"];
1347--7882[label="1;1pkt 1fpkt"];
5210--6839[label="1;1pkt 1fpkt"];
5210--7882[label="1;1pkt 1fpkt"];
6839--7882[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="215.87.66.212" src_port="1146"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.119.141.212"/>
    </slice>
    <from sec="1039669205" usec="0"/>
    <to sec="1039669923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1630{
style=filled;
color=gray75;
5214[label="96.211.196.212;128pkt 128fpkt", shape=pentagon, color=darkviolet];
6842[label="96.211.196.212;127pkt 127fpkt", shape=invtriangle, color=brown];
7885[label="96.211.196.212;127pkt 127fpkt", shape=invhouse, color=bisque];
stat1630[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.211.196.212:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5214--6842[label="1;127pkt 127fpkt"];
5214--7885[label="1;127pkt 127fpkt"];
6842--7885[label="1;127pkt 127fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.211.196.212" src_port="1025"/>
    </slice>
    <from sec="1039669249" usec="0"/>
    <to sec="1039669280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1631{
style=filled;
color=gray75;
5215[label="61.101.197.212;484pkt 484fpkt", shape=pentagon, color=darkviolet];
6843[label="61.101.197.212;484pkt 484fpkt", shape=invtriangle, color=brown];
7886[label="61.101.197.212;483pkt 483fpkt", shape=invhouse, color=bisque];
stat1631[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.101.197.212:1024, *:137}[52.686%]&lt;BR/&gt;{61.101.197.212:1026, *:137}[47.314%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1024: (26.3267%)&lt;BR/&gt; 1026: (23.6733%)&gt;];
}
5215--6843[label="1;484pkt 484fpkt"];
5215--7886[label="1;483pkt 483fpkt"];
6843--7886[label="1;483pkt 483fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="61.101.197.212" src_port="1024"/>
      <filter dst_port="137" src_ip="61.101.197.212" src_port="1026"/>
    </slice>
    <from sec="1039669628" usec="0"/>
    <to sec="1039669710" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1632{
style=filled;
color=gray75;
5220[label="202.155.52.213;167pkt 167fpkt", shape=pentagon, color=darkviolet];
6846[label="202.155.52.213;167pkt 167fpkt", shape=invtriangle, color=brown];
7888[label="202.155.52.213;167pkt 167fpkt", shape=invhouse, color=bisque];
stat1632[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.155.52.213:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5220--6846[label="1;167pkt 167fpkt"];
5220--7888[label="1;167pkt 167fpkt"];
6846--7888[label="1;167pkt 167fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.155.52.213" src_port="1025"/>
    </slice>
    <from sec="1039669265" usec="0"/>
    <to sec="1039669303" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1633{
style=filled;
color=gray75;
5223[label="96.194.198.213;117pkt 117fpkt", shape=pentagon, color=darkviolet];
6847[label="96.194.198.213;117pkt 117fpkt", shape=invtriangle, color=brown];
7889[label="96.194.198.213;118pkt 118fpkt", shape=invhouse, color=bisque];
stat1633[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.194.198.213:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5223--6847[label="1;117pkt 117fpkt"];
5223--7889[label="1;117pkt 117fpkt"];
6847--7889[label="1;117pkt 117fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.194.198.213" src_port="1025"/>
    </slice>
    <from sec="1039669360" usec="0"/>
    <to sec="1039669389" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.30.250.214"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1635{
style=filled;
color=gray75;
5229[label="37.26.253.214;130pkt 130fpkt", shape=pentagon, color=darkviolet];
6852[label="37.26.253.214;129pkt 129fpkt", shape=invtriangle, color=brown];
7893[label="37.26.253.214;130pkt 130fpkt", shape=invhouse, color=bisque];
stat1635[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.26.253.214:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5229--6852[label="1;129pkt 129fpkt"];
5229--7893[label="1;130pkt 130fpkt"];
6852--7893[label="1;129pkt 129fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="37.26.253.214" src_port="1028"/>
    </slice>
    <from sec="1039669244" usec="0"/>
    <to sec="1039669265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.150.6.215"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="99.117.24.215"/>
    </slice>
    <from sec="1039669460" usec="0"/>
    <to sec="1039669926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1638{
style=filled;
color=gray75;
5235[label="202.150.180.215;264pkt 264fpkt", shape=pentagon, color=darkviolet];
6856[label="202.150.180.215;263pkt 263fpkt", shape=invtriangle, color=brown];
stat1638[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.150.180.215:51364, *:137}[63.6364%]&lt;BR/&gt;{202.150.180.215:7712, *:137}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 51364: (31.8786%)&lt;BR/&gt; 7712: (18.1214%)&gt;];
}
5235--6856[label="1;263pkt 263fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.150.180.215" src_port="51364"/>
      <filter dst_port="137" src_ip="202.150.180.215" src_port="7712"/>
    </slice>
    <from sec="1039669619" usec="0"/>
    <to sec="1039669798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1639{
style=filled;
color=gray75;
366[label="172.157.34.218s;119pkt 119fpkt", shape=rectangle, color=red];
5249[label="172.157.34.218;229pkt 229fpkt", shape=pentagon, color=darkviolet];
6865[label="172.157.34.218;228pkt 228fpkt", shape=invtriangle, color=brown];
7902[label="172.157.34.218;228pkt 228fpkt", shape=invhouse, color=bisque];
stat1639[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.157.34.218:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 65170: (0.248756%)&lt;BR/&gt; 64691: (0.248756%)&lt;BR/&gt; 63304: (0.248756%)&lt;BR/&gt; 62233: (0.248756%)&gt;];
}
366--5249[label="1;119pkt 119fpkt"];
366--6865[label="1;119pkt 119fpkt"];
366--7902[label="1;119pkt 119fpkt"];
5249--6865[label="1;228pkt 228fpkt"];
5249--7902[label="1;228pkt 228fpkt"];
6865--7902[label="1;228pkt 228fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="172.157.34.218"/>
    </slice>
    <from sec="1039669618" usec="0"/>
    <to sec="1039669653" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1640{
style=filled;
color=gray75;
1775[label="138.186.48.218;s;109pkt 109fpkt", shape=diamond, color=yellow];
1991[label="138.186.49.218;s;186pkt 186fpkt", shape=diamond, color=yellow];
2009[label="38.119.146.248;d;135pkt 135fpkt", shape=diamond, color=yellow];
stat1640[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.49.218:*, 38.119.146.248:80}[45.7627%]&lt;BR/&gt;{138.186.48.218:*, 211.45.228.7:80}[23.3898%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7674%)&lt;BR/&gt; 3202: (0.232558%)&lt;BR/&gt; 3201: (0.232558%)&lt;BR/&gt; 3200: (0.232558%)&lt;BR/&gt; 3199: (0.232558%)&gt;];
}
1775--1798[label="0.0458716;5pkt 5fpkt"];
1775--1987[label="0.633028;69pkt 69fpkt"];
1775--2035[label="0.0458716;5pkt 5fpkt"];
1775--2065[label="0.011236;1pkt 1fpkt"];
1775--2294[label="0.015625;1pkt 1fpkt"];
1775--2308[label="0.0412371;4pkt 4fpkt"];
1775--2738[label="1;101pkt 101fpkt"];
1775--2981[label="0.633028;69pkt 69fpkt"];
1775--5253[label="1;109pkt 109fpkt"];
1991--2009[label="1;135pkt 135fpkt"];
1991--2053[label="0.0223464;4pkt 4fpkt"];
1991--2065[label="0.011236;1pkt 1fpkt"];
1991--2316[label="0.0384615;4pkt 4fpkt"];
1991--2981[label="0.111111;16pkt 16fpkt"];
1991--3185[label="0.150538;28pkt 28fpkt"];
1991--5254[label="1;186pkt 186fpkt"];
1991--6866[label="1;186pkt 186fpkt"];
2009--3185[label="0.177778;24pkt 24fpkt"];
2009--5254[label="1;135pkt 135fpkt"];
2009--6866[label="1;135pkt 135fpkt"];
</description>
    <slice>
      <filter dst_ip="38.119.146.248" dst_port="80" src_ip="138.186.49.218"/>
      <filter dst_ip="211.45.228.7" dst_port="80" src_ip="138.186.48.218"/>
    </slice>
    <from sec="1039669482" usec="0"/>
    <to sec="1039669839" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1641{
style=filled;
color=gray75;
5255[label="138.186.51.218;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6867[label="138.186.51.218;6pkt 6fpkt", shape=invtriangle, color=brown];
7903[label="138.186.51.218;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1641[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.51.218:*, *:1863}[33.3333%]&lt;BR/&gt;{138.186.51.218:6699, *:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (25%)&lt;BR/&gt; 1863: (16.6667%)&lt;BR/&gt; 11750: (8.33333%)&lt;BR/&gt; 3672: (8.33333%)&lt;BR/&gt; 1087: (8.33333%)&gt;];
}
5255--6867[label="1;6pkt 6fpkt"];
5255--7903[label="1;6pkt 6fpkt"];
6867--7903[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="138.186.51.218" src_port="6699"/>
      <filter dst_port="1863" src_ip="138.186.51.218"/>
    </slice>
    <from sec="1039669214" usec="0"/>
    <to sec="1039669498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="64.162.160.218"/>
    </slice>
    <from sec="1039669207" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1643{
style=filled;
color=gray75;
5260[label="140.3.211.218;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6871[label="140.3.211.218;8pkt 8fpkt", shape=invtriangle, color=brown];
7905[label="140.3.211.218;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1643[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.211.218:*, 96.48.105.235:80}[50%]&lt;BR/&gt;{140.3.211.218:*, 202.107.153.98:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2579: (6.81818%)&lt;BR/&gt; 2577: (6.81818%)&lt;BR/&gt; 2576: (6.81818%)&lt;BR/&gt; 2573: (6.81818%)&gt;];
}
5260--6871[label="1;7pkt 7fpkt"];
5260--7905[label="1;7pkt 7fpkt"];
6871--7905[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="96.48.105.235" dst_port="80" src_ip="140.3.211.218"/>
      <filter dst_ip="202.107.153.98" dst_port="80" src_ip="140.3.211.218"/>
    </slice>
    <from sec="1039669560" usec="0"/>
    <to sec="1039669915" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="64.4.33.219"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1645{
style=filled;
color=gray75;
5267[label="201.37.169.219;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6875[label="201.37.169.219;7pkt 7fpkt", shape=invtriangle, color=brown];
stat1645[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.37.169.219:80, 138.186.218.171:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4051: (7.14286%)&lt;BR/&gt; 4049: (7.14286%)&lt;BR/&gt; 4047: (7.14286%)&lt;BR/&gt; 4045: (7.14286%)&gt;];
}
5267--6875[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.218.171" src_ip="201.37.169.219" src_port="80"/>
    </slice>
    <from sec="1039669682" usec="0"/>
    <to sec="1039669710" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1646{
style=filled;
color=gray75;
5270[label="197.107.205.219;137pkt 137fpkt", shape=pentagon, color=darkviolet];
6877[label="197.107.205.219;136pkt 136fpkt", shape=invtriangle, color=brown];
7910[label="197.107.205.219;136pkt 136fpkt", shape=invhouse, color=bisque];
stat1646[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.107.205.219:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5270--6877[label="1;136pkt 136fpkt"];
5270--7910[label="1;136pkt 136fpkt"];
6877--7910[label="1;136pkt 136fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.107.205.219" src_port="1027"/>
    </slice>
    <from sec="1039669517" usec="0"/>
    <to sec="1039669548" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1647{
style=filled;
color=gray75;
5273[label="197.68.77.220;161pkt 161fpkt", shape=pentagon, color=darkviolet];
6880[label="197.68.77.220;161pkt 161fpkt", shape=invtriangle, color=brown];
7912[label="197.68.77.220;161pkt 161fpkt", shape=invhouse, color=bisque];
stat1647[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.68.77.220:61660, *:137}[80.1242%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 61660: (40.0621%)&lt;BR/&gt; 61665: (9.93789%)&gt;];
}
5273--6880[label="1;161pkt 161fpkt"];
5273--7912[label="1;161pkt 161fpkt"];
6880--7912[label="1;161pkt 161fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.68.77.220" src_port="61660"/>
    </slice>
    <from sec="1039669261" usec="0"/>
    <to sec="1039669299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1648{
style=filled;
color=gray75;
5276[label="223.204.205.221;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6883[label="223.204.205.221;4pkt 4fpkt", shape=invtriangle, color=brown];
7915[label="223.204.205.221;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1648[shape=component, label=&lt;Rules:&lt;BR/&gt;{223.204.205.221:0, 138.165.205.65:0}[25%]&lt;BR/&gt;{223.204.205.221:0, 221.47.94.88:0}[25%]&lt;BR/&gt;{223.204.205.221:0, 221.50.5.168:0}[25%]&lt;BR/&gt;{223.204.205.221:0, 221.50.51.220:0}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5276--6883[label="1;3pkt 3fpkt"];
5276--7915[label="1;3pkt 3fpkt"];
6883--7915[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="221.50.51.220" src_ip="223.204.205.221"/>
      <filter dst_ip="221.50.5.168" src_ip="223.204.205.221"/>
      <filter dst_ip="221.47.94.88" src_ip="223.204.205.221"/>
      <filter dst_ip="138.165.205.65" src_ip="223.204.205.221"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1649{
style=filled;
color=gray75;
5277[label="140.3.212.221;35pkt 35fpkt", shape=pentagon, color=darkviolet];
6884[label="140.3.212.221;36pkt 36fpkt", shape=invtriangle, color=brown];
7916[label="140.3.212.221;35pkt 35fpkt", shape=invhouse, color=bisque];
stat1649[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.212.221:*, 38.67.86.94:80}[77.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1690: (1.41509%)&lt;BR/&gt; 1689: (1.41509%)&lt;BR/&gt; 1688: (1.41509%)&lt;BR/&gt; 1687: (1.41509%)&gt;];
}
5277--6884[label="1;35pkt 35fpkt"];
5277--7916[label="1;35pkt 35fpkt"];
6884--7916[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="38.67.86.94" dst_port="80" src_ip="140.3.212.221"/>
    </slice>
    <from sec="1039669525" usec="0"/>
    <to sec="1039669641" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1650{
style=filled;
color=gray75;
5287[label="140.3.158.223;18pkt 18fpkt", shape=pentagon, color=darkviolet];
6888[label="140.3.158.223;17pkt 17fpkt", shape=invtriangle, color=brown];
7919[label="140.3.158.223;17pkt 17fpkt", shape=invhouse, color=bisque];
stat1650[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.158.223:*, *:1863}[33.3333%]&lt;BR/&gt;{140.3.158.223:*, 39.111.182.124:80}[27.7778%]&lt;BR/&gt;{140.3.158.223:*, 38.72.234.72:80}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.7308%)&lt;BR/&gt; 1863: (15.3846%)&lt;BR/&gt; 49209: (2.88462%)&lt;BR/&gt; 49208: (2.88462%)&lt;BR/&gt; 49207: (2.88462%)&gt;];
}
5287--6888[label="1;17pkt 17fpkt"];
5287--7919[label="1;17pkt 17fpkt"];
6888--7919[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_port="1863" src_ip="140.3.158.223"/>
      <filter dst_ip="39.111.182.124" dst_port="80" src_ip="140.3.158.223"/>
      <filter dst_ip="38.72.234.72" dst_port="80" src_ip="140.3.158.223"/>
    </slice>
    <from sec="1039669225" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1651{
style=filled;
color=gray75;
5289[label="202.40.226.223;216pkt 216fpkt", shape=pentagon, color=darkviolet];
6890[label="202.40.226.223;216pkt 216fpkt", shape=invtriangle, color=brown];
7921[label="202.40.226.223;217pkt 217fpkt", shape=invhouse, color=bisque];
stat1651[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.40.226.223:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5289--6890[label="1;216pkt 216fpkt"];
5289--7921[label="1;216pkt 216fpkt"];
6890--7921[label="1;216pkt 216fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.40.226.223" src_port="1026"/>
    </slice>
    <from sec="1039669617" usec="0"/>
    <to sec="1039669650" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1652{
style=filled;
color=gray75;
1263[label="138.7.9.224;s;184pkt 184fpkt", shape=diamond, color=yellow];
2303[label="143.33.87.134;d;15pkt 15fpkt", shape=diamond, color=yellow];
3337[label="215.87.117.10;67pkt 67fpkt", shape=pentagon, color=darkviolet];
5290[label="138.7.9.224;215pkt 215fpkt", shape=pentagon, color=darkviolet];
6891[label="138.7.9.224;215pkt 215fpkt", shape=invtriangle, color=brown];
7922[label="138.7.9.224;215pkt 215fpkt", shape=invhouse, color=bisque];
stat1652[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.7.9.224:32962, *:53}[57.2881%]&lt;BR/&gt;{215.87.117.10:*, *:*}[22.7119%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (45.8288%)&lt;BR/&gt; 32962: (35.8946%)&lt;BR/&gt; 25: (3.12843%)&lt;BR/&gt; 80: (1.48189%)&lt;BR/&gt; 49995: (0.987925%)&gt;];
}
1263--1303[label="0.0285714;1pkt 1fpkt"];
1263--1883[label="0.0243902;1pkt 1fpkt"];
1263--2303[label="0.0666667;1pkt 1fpkt"];
1263--5290[label="1;184pkt 184fpkt"];
1263--6891[label="1;184pkt 184fpkt"];
1263--7922[label="1;184pkt 184fpkt"];
2303--2697[label="0.0666667;1pkt 1fpkt"];
2303--2995[label="0.0833333;1pkt 1fpkt"];
2303--3337[label="0.0666667;1pkt 1fpkt"];
2303--4885[label="0.0666667;1pkt 1fpkt"];
2303--5290[label="0.0666667;1pkt 1fpkt"];
2303--6635[label="0.0666667;1pkt 1fpkt"];
2303--6889[label="0.0833333;1pkt 1fpkt"];
2303--6891[label="0.0666667;1pkt 1fpkt"];
2303--7922[label="0.0666667;1pkt 1fpkt"];
5290--6891[label="1;215pkt 215fpkt"];
5290--7922[label="1;215pkt 215fpkt"];
6891--7922[label="1;215pkt 215fpkt"];
</description>
    <slice>
      <filter src_ip="215.87.117.10"/>
      <filter dst_port="53" src_ip="138.7.9.224" src_port="32962"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1653{
style=filled;
color=gray75;
5295[label="140.3.128.224;48pkt 48fpkt", shape=pentagon, color=darkviolet];
6894[label="140.3.128.224;49pkt 49fpkt", shape=invtriangle, color=brown];
7923[label="140.3.128.224;49pkt 49fpkt", shape=invhouse, color=bisque];
stat1653[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.128.224:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5295--6894[label="1;48pkt 48fpkt"];
5295--7923[label="1;48pkt 48fpkt"];
6894--7923[label="1;49pkt 49fpkt"];
</description>
    <slice>
      <filter src_ip="140.3.128.224"/>
    </slice>
    <from sec="1039669256" usec="0"/>
    <to sec="1039669867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1654{
style=filled;
color=gray75;
2361[label="140.3.252.224;s;25pkt 25fpkt", shape=diamond, color=yellow];
5298[label="140.3.252.224;24pkt 24fpkt", shape=pentagon, color=darkviolet];
6895[label="140.3.252.224;24pkt 24fpkt", shape=invtriangle, color=brown];
7924[label="140.3.252.224;24pkt 24fpkt", shape=invhouse, color=bisque];
stat1654[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.252.224:*, 210.234.26.15:25}[44%]&lt;BR/&gt;{140.3.252.224:*, 222.189.30.129:25}[20%]&lt;BR/&gt;{140.3.252.224:*, 214.111.17.145:25}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 2329: (2.06186%)&lt;BR/&gt; 2326: (2.06186%)&lt;BR/&gt; 2314: (2.06186%)&lt;BR/&gt; 2313: (2.06186%)&gt;];
}
2361--5298[label="1;24pkt 24fpkt"];
2361--6895[label="1;24pkt 24fpkt"];
2361--7924[label="1;24pkt 24fpkt"];
5298--6895[label="1;24pkt 24fpkt"];
5298--7924[label="1;24pkt 24fpkt"];
6895--7924[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="210.234.26.15" dst_port="25" src_ip="140.3.252.224"/>
      <filter dst_ip="214.111.17.145" dst_port="25" src_ip="140.3.252.224"/>
      <filter dst_ip="222.189.30.129" dst_port="25" src_ip="140.3.252.224"/>
    </slice>
    <from sec="1039669289" usec="0"/>
    <to sec="1039669846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.137.97.225"/>
    </slice>
    <from sec="1039669690" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.773168,1.78262,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1656{
style=filled;
color=gray75;
1704[label="148.110.93.226;s;96pkt 96fpkt", shape=diamond, color=yellow];
5308[label="148.110.93.226;97pkt 97fpkt", shape=pentagon, color=darkviolet];
6897[label="148.110.93.226;96pkt 96fpkt", shape=invtriangle, color=brown];
7926[label="148.110.93.226;97pkt 97fpkt", shape=invhouse, color=bisque];
stat1656[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.110.93.226:*, 198.24.133.61:80}[55.6701%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1607: (0.518135%)&lt;BR/&gt; 1605: (0.518135%)&lt;BR/&gt; 1604: (0.518135%)&lt;BR/&gt; 1603: (0.518135%)&gt;];
}
1704--2182[label="0.371429;26pkt 26fpkt"];
1704--2973[label="0.371429;26pkt 26fpkt"];
1704--5308[label="1;96pkt 96fpkt"];
1704--6897[label="0.989583;95pkt 95fpkt"];
1704--7926[label="1;96pkt 96fpkt"];
5308--6897[label="1;96pkt 96fpkt"];
5308--7926[label="1;97pkt 97fpkt"];
6897--7926[label="1;96pkt 96fpkt"];
</description>
    <slice>
      <filter dst_ip="198.24.133.61" dst_port="80" src_ip="148.110.93.226"/>
    </slice>
    <from sec="1039669257" usec="0"/>
    <to sec="1039669766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1657{
style=filled;
color=gray75;
5310[label="197.231.172.226;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6899[label="197.231.172.226;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1657[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.231.172.226:80, 140.3.206.206:51136}[50%]&lt;BR/&gt;{197.231.172.226:80, 140.3.206.206:51137}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51137: (33.3333%)&lt;BR/&gt; 51136: (16.6667%)&gt;];
}
5310--6899[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.206.206" dst_port="51137" src_ip="197.231.172.226" src_port="80"/>
      <filter dst_ip="140.3.206.206" dst_port="51136" src_ip="197.231.172.226" src_port="80"/>
    </slice>
    <from sec="1039669903" usec="0"/>
    <to sec="1039669920" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645838,1.80177,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1658{
style=filled;
color=gray75;
1866[label="217.150.40.227;s;426pkt 426fpkt", shape=diamond, color=yellow];
5313[label="217.150.40.227;477pkt 477fpkt", shape=pentagon, color=darkviolet];
6901[label="217.150.40.227;476pkt 476fpkt", shape=invtriangle, color=brown];
stat1658[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.150.40.227:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 1585: (0.108774%)&lt;BR/&gt; 1584: (0.108774%)&lt;BR/&gt; 1583: (0.108774%)&lt;BR/&gt; 1582: (0.108774%)&gt;];
}
1866--5313[label="1;426pkt 426fpkt"];
1866--6901[label="0.997653;425pkt 425fpkt"];
5313--6901[label="1;476pkt 476fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="217.150.40.227"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="64.84.48.227"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645838,1.80177,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1660{
style=filled;
color=gray75;
2133[label="214.216.54.227;s;71pkt 71fpkt", shape=diamond, color=yellow];
5315[label="214.216.54.227;70pkt 70fpkt", shape=pentagon, color=darkviolet];
6903[label="214.216.54.227;70pkt 70fpkt", shape=invtriangle, color=brown];
stat1660[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.216.54.227:*, 211.217.180.183:80}[67.6056%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 21445: (0.7109%)&lt;BR/&gt; 4163: (0.7109%)&lt;BR/&gt; 4162: (0.7109%)&lt;BR/&gt; 4134: (0.7109%)&gt;];
}
2133--3185[label="0.0140845;1pkt 1fpkt"];
2133--5315[label="1;70pkt 70fpkt"];
2133--6903[label="1;70pkt 70fpkt"];
5315--6903[label="1;70pkt 70fpkt"];
</description>
    <slice>
      <filter dst_ip="211.217.180.183" dst_port="80" src_ip="214.216.54.227"/>
    </slice>
    <from sec="1039669205" usec="0"/>
    <to sec="1039669741" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1661{
style=filled;
color=gray75;
5316[label="197.53.119.227;207pkt 207fpkt", shape=pentagon, color=darkviolet];
6904[label="197.53.119.227;206pkt 206fpkt", shape=invtriangle, color=brown];
7929[label="197.53.119.227;207pkt 207fpkt", shape=invhouse, color=bisque];
stat1661[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.53.119.227:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 49176: (0.241935%)&lt;BR/&gt; 49175: (0.241935%)&lt;BR/&gt; 49174: (0.241935%)&lt;BR/&gt; 49173: (0.241935%)&gt;];
}
5316--6904[label="1;206pkt 206fpkt"];
5316--7929[label="1;207pkt 207fpkt"];
6904--7929[label="1;206pkt 206fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.53.119.227"/>
    </slice>
    <from sec="1039669772" usec="0"/>
    <to sec="1039669804" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1662{
style=filled;
color=gray75;
5318[label="169.126.164.227;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6905[label="169.126.164.227;7pkt 7fpkt", shape=invtriangle, color=brown];
stat1662[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.126.164.227:*, 198.241.2.174:110}[71.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (35.7143%)&lt;BR/&gt; 10294: (7.14286%)&lt;BR/&gt; 10282: (7.14286%)&lt;BR/&gt; 10275: (7.14286%)&lt;BR/&gt; 10273: (7.14286%)&gt;];
}
5318--6905[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="198.241.2.174" dst_port="110" src_ip="169.126.164.227"/>
    </slice>
    <from sec="1039669329" usec="0"/>
    <to sec="1039669891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1663{
style=filled;
color=gray75;
5321[label="196.169.15.228;47pkt 47fpkt", shape=pentagon, color=darkviolet];
6906[label="196.169.15.228;47pkt 47fpkt", shape=invtriangle, color=brown];
stat1663[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.169.15.228:*, 143.38.31.149:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 49331: (1.06383%)&lt;BR/&gt; 49330: (1.06383%)&lt;BR/&gt; 49328: (1.06383%)&lt;BR/&gt; 49327: (1.06383%)&gt;];
}
5321--6906[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_ip="143.38.31.149" dst_port="443" src_ip="196.169.15.228"/>
    </slice>
    <from sec="1039669280" usec="0"/>
    <to sec="1039669433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="138.186.48.228"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1665{
style=filled;
color=gray75;
5325[label="197.17.150.228;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6909[label="197.17.150.228;5pkt 5fpkt", shape=invtriangle, color=brown];
7930[label="197.17.150.228;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1665[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.17.150.228:80, 138.186.49.232:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1415: (9.375%)&lt;BR/&gt; 1414: (9.375%)&lt;BR/&gt; 1413: (9.375%)&lt;BR/&gt; 1411: (9.375%)&gt;];
}
5325--6909[label="1;5pkt 5fpkt"];
5325--7930[label="1;5pkt 5fpkt"];
6909--7930[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.49.232" src_ip="197.17.150.228" src_port="80"/>
    </slice>
    <from sec="1039669863" usec="0"/>
    <to sec="1039669922" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.252.219.228"/>
    </slice>
    <from sec="1039669286" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1667{
style=filled;
color=gray75;
5330[label="38.176.25.229;172pkt 172fpkt", shape=pentagon, color=darkviolet];
6913[label="38.176.25.229;171pkt 171fpkt", shape=invtriangle, color=brown];
7932[label="38.176.25.229;172pkt 172fpkt", shape=invhouse, color=bisque];
stat1667[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.176.25.229:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5330--6913[label="1;171pkt 171fpkt"];
5330--7932[label="1;172pkt 172fpkt"];
6913--7932[label="1;171pkt 171fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="38.176.25.229" src_port="1025"/>
    </slice>
    <from sec="1039669795" usec="0"/>
    <to sec="1039669822" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1668{
style=filled;
color=gray75;
5337[label="197.17.150.229;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6918[label="197.17.150.229;2pkt 2fpkt", shape=invtriangle, color=brown];
7936[label="197.17.150.229;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1668[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.17.150.229:80, 140.3.150.43:2026}[33.3333%]&lt;BR/&gt;{197.17.150.229:80, 138.186.49.232:1404}[33.3333%]&lt;BR/&gt;{197.17.150.229:80, 138.186.49.232:1405}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2026: (21.4286%)&lt;BR/&gt; 1405: (21.4286%)&lt;BR/&gt; 1404: (7.14286%)&gt;];
}
5337--6918[label="1;2pkt 2fpkt"];
5337--7936[label="1;2pkt 2fpkt"];
6918--7936[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.49.232" dst_port="1405" src_ip="197.17.150.229" src_port="80"/>
      <filter dst_ip="138.186.49.232" dst_port="1404" src_ip="197.17.150.229" src_port="80"/>
      <filter dst_ip="140.3.150.43" dst_port="2026" src_ip="197.17.150.229" src_port="80"/>
    </slice>
    <from sec="1039669391" usec="0"/>
    <to sec="1039669866" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1669{
style=filled;
color=gray75;
5338[label="197.231.187.229;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6919[label="197.231.187.229;7pkt 7fpkt", shape=invtriangle, color=brown];
7937[label="197.231.187.229;8pkt 8fpkt", shape=invhouse, color=bisque];
stat1669[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.231.187.229:80, 215.160.138.181:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 43828: (6.52174%)&lt;BR/&gt; 43826: (6.52174%)&lt;BR/&gt; 43825: (6.52174%)&lt;BR/&gt; 43824: (6.52174%)&gt;];
}
5338--6919[label="1;7pkt 7fpkt"];
5338--7937[label="1;8pkt 8fpkt"];
6919--7937[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="215.160.138.181" src_ip="197.231.187.229" src_port="80"/>
    </slice>
    <from sec="1039669868" usec="0"/>
    <to sec="1039669887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,011,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1670{
style=filled;
color=gray75;
5339[label="64.160.209.229;75pkt 75fpkt", shape=pentagon, color=darkviolet];
6920[label="64.160.209.229;76pkt 76fpkt", shape=invtriangle, color=brown];
stat1670[shape=component, label=&lt;Rules:&lt;BR/&gt;{64.160.209.229:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1137: (9.27152%)&lt;BR/&gt; 1147: (8.60927%)&lt;BR/&gt; 1258: (7.61589%)&lt;BR/&gt; 1478: (5.96026%)&lt;BR/&gt; 1976: (3.97351%)&gt;];
}
5339--6920[label="1;75pkt 75fpkt"];
</description>
    <slice>
      <filter src_ip="64.160.209.229"/>
    </slice>
    <from sec="1039669208" usec="0"/>
    <to sec="1039669925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.200.216.229"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="60.153.19.230"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1673{
style=filled;
color=gray75;
5346[label="196.12.95.230;186pkt 186fpkt", shape=pentagon, color=darkviolet];
6924[label="196.12.95.230;186pkt 186fpkt", shape=invtriangle, color=brown];
7940[label="196.12.95.230;186pkt 186fpkt", shape=invhouse, color=bisque];
stat1673[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.12.95.230:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5346--6924[label="1;186pkt 186fpkt"];
5346--7940[label="1;186pkt 186fpkt"];
6924--7940[label="1;186pkt 186fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.12.95.230" src_port="1026"/>
    </slice>
    <from sec="1039669798" usec="0"/>
    <to sec="1039669830" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1674{
style=filled;
color=gray75;
5351[label="197.67.40.231;127pkt 127fpkt", shape=pentagon, color=darkviolet];
6926[label="197.67.40.231;126pkt 126fpkt", shape=invtriangle, color=brown];
stat1674[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.67.40.231:62756, *:137}[77.9528%]&lt;BR/&gt;{197.67.40.231:63342, *:137}[22.0472%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 62756: (38.9328%)&lt;BR/&gt; 63342: (11.0672%)&gt;];
}
5351--6926[label="1;126pkt 126fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.67.40.231" src_port="62756"/>
      <filter dst_port="137" src_ip="197.67.40.231" src_port="63342"/>
    </slice>
    <from sec="1039669453" usec="0"/>
    <to sec="1039669919" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="64.172.28.232"/>
    </slice>
    <from sec="1039669203" usec="0"/>
    <to sec="1039669926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1676{
style=filled;
color=gray75;
320[label="158.73.71.232s;244pkt 244fpkt", shape=rectangle, color=red];
5356[label="158.73.71.232;256pkt 256fpkt", shape=pentagon, color=darkviolet];
6930[label="158.73.71.232;255pkt 255fpkt", shape=invtriangle, color=brown];
7943[label="158.73.71.232;255pkt 255fpkt", shape=invhouse, color=bisque];
stat1676[shape=component, label=&lt;Rules:&lt;BR/&gt;{158.73.71.232:1047, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1047: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
320--5356[label="1;244pkt 244fpkt"];
320--6930[label="0.995902;243pkt 243fpkt"];
320--7943[label="0.995902;243pkt 243fpkt"];
5356--6930[label="1;255pkt 255fpkt"];
5356--7943[label="1;255pkt 255fpkt"];
6930--7943[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="158.73.71.232" src_port="1047"/>
    </slice>
    <from sec="1039669209" usec="0"/>
    <to sec="1039669225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1677{
style=filled;
color=gray75;
5362[label="204.84.198.232;176pkt 176fpkt", shape=pentagon, color=darkviolet];
6934[label="204.84.198.232;176pkt 176fpkt", shape=invtriangle, color=brown];
7947[label="204.84.198.232;176pkt 176fpkt", shape=invhouse, color=bisque];
stat1677[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.84.198.232:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5362--6934[label="1;176pkt 176fpkt"];
5362--7947[label="1;176pkt 176fpkt"];
6934--7947[label="1;176pkt 176fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="204.84.198.232" src_port="1025"/>
    </slice>
    <from sec="1039669574" usec="0"/>
    <to sec="1039669606" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1678{
style=filled;
color=gray75;
5363[label="140.3.217.232;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6935[label="140.3.217.232;2pkt 2fpkt", shape=invtriangle, color=brown];
7948[label="140.3.217.232;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1678[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.217.232:80, 39.4.106.36:4045}[50%]&lt;BR/&gt;{140.3.217.232:80, 61.56.170.73:3460}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4045: (25%)&lt;BR/&gt; 3460: (25%)&gt;];
}
5363--6935[label="1;2pkt 2fpkt"];
5363--7948[label="1;2pkt 2fpkt"];
6935--7948[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="61.56.170.73" dst_port="3460" src_ip="140.3.217.232" src_port="80"/>
      <filter dst_ip="39.4.106.36" dst_port="4045" src_ip="140.3.217.232" src_port="80"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1679{
style=filled;
color=gray75;
5366[label="202.175.46.233;149pkt 149fpkt", shape=pentagon, color=darkviolet];
6937[label="202.175.46.233;149pkt 149fpkt", shape=invtriangle, color=brown];
7949[label="202.175.46.233;148pkt 148fpkt", shape=invhouse, color=bisque];
stat1679[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.175.46.233:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5366--6937[label="1;149pkt 149fpkt"];
5366--7949[label="1;148pkt 148fpkt"];
6937--7949[label="1;148pkt 148fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.175.46.233" src_port="1027"/>
    </slice>
    <from sec="1039669352" usec="0"/>
    <to sec="1039669376" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11796,1.82888,999,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1680{
style=filled;
color=gray75;
322[label="96.0.12.233s;69pkt 69fpkt", shape=rectangle, color=red];
1883[label="221.28.240.124;d;41pkt 41fpkt", shape=diamond, color=yellow];
2270[label="214.216.48.15;s;111pkt 111fpkt", shape=diamond, color=yellow];
2539[label="138.186.8.79;s;148pkt 148fpkt", shape=hexagon, color=black];
2800[label="140.3.59.50;s;687pkt 687fpkt", shape=hexagon, color=black];
2931[label="169.126.158.204;s;47pkt 47fpkt", shape=hexagon, color=black];
3396[label="214.216.48.15;114pkt 114fpkt", shape=pentagon, color=darkviolet];
5181[label="140.3.246.208;566pkt 566fpkt", shape=pentagon, color=darkviolet];
5373[label="138.165.208.233;692pkt 692fpkt", shape=pentagon, color=darkviolet];
5462[label="215.90.154.246;39pkt 39fpkt", shape=pentagon, color=darkviolet];
6940[label="138.165.208.233;693pkt 693fpkt", shape=invtriangle, color=brown];
7008[label="215.90.154.246;38pkt 38fpkt", shape=invtriangle, color=brown];
stat1680[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.59.50:53, *:*}[27.9325%]&lt;BR/&gt;{138.165.208.233:1289, *:53}[24.4304%]&lt;BR/&gt;{140.3.246.208:53949, *:53}[21.1392%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (54.9923%)&lt;BR/&gt; 1289: (18.2589%)&lt;BR/&gt; 53949: (7.73498%)&lt;BR/&gt; 65534: (3.40524%)&lt;BR/&gt; 0: (3.38983%)&gt;];
}
322--974[label="0.391304;27pkt 27fpkt"];
322--1883[label="0.0243902;1pkt 1fpkt"];
322--3181[label="0.608696;42pkt 42fpkt"];
322--5373[label="0.391304;27pkt 27fpkt"];
322--6940[label="0.391304;27pkt 27fpkt"];
1883--2127[label="0.0243902;1pkt 1fpkt"];
1883--2270[label="0.0243902;1pkt 1fpkt"];
1883--2343[label="0.0243902;1pkt 1fpkt"];
1883--2529[label="0.0384615;1pkt 1fpkt"];
1883--2539[label="0.0243902;1pkt 1fpkt"];
1883--2549[label="0.0243902;1pkt 1fpkt"];
1883--2697[label="0.0243902;1pkt 1fpkt"];
1883--2703[label="0.0243902;1pkt 1fpkt"];
1883--2800[label="0.0243902;1pkt 1fpkt"];
1883--2914[label="0.0243902;1pkt 1fpkt"];
1883--2931[label="0.0243902;1pkt 1fpkt"];
1883--3077[label="0.0243902;1pkt 1fpkt"];
1883--3183[label="0.0243902;1pkt 1fpkt"];
1883--3396[label="0.0243902;1pkt 1fpkt"];
1883--3417[label="0.0243902;1pkt 1fpkt"];
1883--3931[label="0.0243902;1pkt 1fpkt"];
1883--4044[label="0.0243902;1pkt 1fpkt"];
1883--4055[label="0.0243902;1pkt 1fpkt"];
1883--4422[label="0.0243902;1pkt 1fpkt"];
1883--4743[label="0.0243902;1pkt 1fpkt"];
1883--4814[label="0.0243902;1pkt 1fpkt"];
1883--4885[label="0.0243902;1pkt 1fpkt"];
1883--4891[label="0.0243902;1pkt 1fpkt"];
1883--5143[label="0.0243902;1pkt 1fpkt"];
1883--5181[label="0.0243902;1pkt 1fpkt"];
1883--5290[label="0.0243902;1pkt 1fpkt"];
1883--5373[label="0.0243902;1pkt 1fpkt"];
1883--5384[label="0.0243902;1pkt 1fpkt"];
1883--5410[label="0.0243902;1pkt 1fpkt"];
1883--5462[label="0.025641;1pkt 1fpkt"];
1883--5669[label="0.0243902;1pkt 1fpkt"];
1883--6004[label="0.0243902;1pkt 1fpkt"];
1883--6322[label="0.0243902;1pkt 1fpkt"];
1883--6537[label="0.0243902;1pkt 1fpkt"];
1883--6581[label="0.0243902;1pkt 1fpkt"];
1883--6635[label="0.0243902;1pkt 1fpkt"];
1883--6891[label="0.0243902;1pkt 1fpkt"];
1883--6940[label="0.0243902;1pkt 1fpkt"];
1883--6950[label="0.0243902;1pkt 1fpkt"];
1883--6966[label="0.0243902;1pkt 1fpkt"];
1883--7008[label="0.0263158;1pkt 1fpkt"];
1883--7136[label="0.0243902;1pkt 1fpkt"];
1883--7682[label="0.0243902;1pkt 1fpkt"];
1883--7922[label="0.0243902;1pkt 1fpkt"];
1883--7957[label="0.0243902;1pkt 1fpkt"];
2270--3396[label="1;111pkt 111fpkt"];
2539--4044[label="1;148pkt 148fpkt"];
2931--3020[label="0.111111;1pkt 1fpkt"];
2931--5143[label="1;46pkt 46fpkt"];
5373--6940[label="1;692pkt 692fpkt"];
5462--7008[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter src_ip="140.3.59.50" src_port="53"/>
      <filter dst_port="53" src_ip="138.165.208.233" src_port="1289"/>
      <filter dst_port="53" src_ip="140.3.246.208" src_port="53949"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1681{
style=filled;
color=gray75;
5375[label="210.72.230.233;150pkt 150fpkt", shape=pentagon, color=darkviolet];
6942[label="210.72.230.233;149pkt 149fpkt", shape=invtriangle, color=brown];
stat1681[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.72.230.233:1033, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1033: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5375--6942[label="1;149pkt 149fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="210.72.230.233" src_port="1033"/>
    </slice>
    <from sec="1039669721" usec="0"/>
    <to sec="1039669752" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1682{
style=filled;
color=gray75;
5376[label="201.98.230.233;168pkt 168fpkt", shape=pentagon, color=darkviolet];
6943[label="201.98.230.233;168pkt 168fpkt", shape=invtriangle, color=brown];
7952[label="201.98.230.233;168pkt 168fpkt", shape=invhouse, color=bisque];
stat1682[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.98.230.233:1035, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1035: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5376--6943[label="1;168pkt 168fpkt"];
5376--7952[label="1;168pkt 168fpkt"];
6943--7952[label="1;168pkt 168fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.98.230.233" src_port="1035"/>
    </slice>
    <from sec="1039669439" usec="0"/>
    <to sec="1039669466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1683{
style=filled;
color=gray75;
5386[label="197.68.19.235;142pkt 142fpkt", shape=pentagon, color=darkviolet];
6951[label="197.68.19.235;141pkt 141fpkt", shape=invtriangle, color=brown];
7958[label="197.68.19.235;142pkt 142fpkt", shape=invhouse, color=bisque];
stat1683[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.68.19.235:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5386--6951[label="1;141pkt 141fpkt"];
5386--7958[label="1;142pkt 142fpkt"];
6951--7958[label="1;141pkt 141fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.68.19.235" src_port="1031"/>
    </slice>
    <from sec="1039669745" usec="0"/>
    <to sec="1039669779" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1684{
style=filled;
color=gray75;
5395[label="96.146.37.236;207pkt 207fpkt", shape=pentagon, color=darkviolet];
6955[label="96.146.37.236;206pkt 206fpkt", shape=invtriangle, color=brown];
7961[label="96.146.37.236;207pkt 207fpkt", shape=invhouse, color=bisque];
stat1684[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.146.37.236:10076, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10076: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5395--6955[label="1;206pkt 206fpkt"];
5395--7961[label="1;207pkt 207fpkt"];
6955--7961[label="1;206pkt 206fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.146.37.236" src_port="10076"/>
    </slice>
    <from sec="1039669696" usec="0"/>
    <to sec="1039669730" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1685{
style=filled;
color=gray75;
327[label="197.163.56.236s;95pkt 95fpkt", shape=rectangle, color=red];
5397[label="197.163.56.236;118pkt 118fpkt", shape=pentagon, color=darkviolet];
6956[label="197.163.56.236;118pkt 118fpkt", shape=invtriangle, color=brown];
7962[label="197.163.56.236;118pkt 118fpkt", shape=invhouse, color=bisque];
stat1685[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.163.56.236:1026, *:137}[81.9444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (47.1047%)&lt;BR/&gt; 137: (47.1047%)&lt;BR/&gt; 37380: (2.89532%)&lt;BR/&gt; 53: (2.89532%)&gt;];
}
327--1883[label="0.0243902;1pkt 1fpkt"];
327--2127[label="0.273684;26pkt 26fpkt"];
327--5397[label="0.726316;69pkt 69fpkt"];
327--6956[label="0.726316;69pkt 69fpkt"];
327--7962[label="0.726316;69pkt 69fpkt"];
5397--6956[label="1;118pkt 118fpkt"];
5397--7962[label="1;118pkt 118fpkt"];
6956--7962[label="1;118pkt 118fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.163.56.236" src_port="1026"/>
    </slice>
    <from sec="1039669470" usec="0"/>
    <to sec="1039669491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645838,1.80177,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1686{
style=filled;
color=gray75;
2127[label="140.3.128.236;s;164pkt 164fpkt", shape=diamond, color=yellow];
5399[label="140.3.128.236;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6958[label="140.3.128.236;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1686[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.128.236:37380, *:53}[79.878%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (46.6867%)&lt;BR/&gt; 37380: (40.0602%)&lt;BR/&gt; 0: (3.01205%)&lt;BR/&gt; 113: (1.50602%)&lt;BR/&gt; 25: (1.50602%)&gt;];
}
2127--5399[label="1;1pkt 1fpkt"];
2127--6958[label="1;1pkt 1fpkt"];
5399--6958[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="140.3.128.236" src_port="37380"/>
    </slice>
    <from sec="1039669203" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1687{
style=filled;
color=gray75;
5402[label="96.53.202.236;145pkt 145fpkt", shape=pentagon, color=darkviolet];
6960[label="96.53.202.236;144pkt 144fpkt", shape=invtriangle, color=brown];
7963[label="96.53.202.236;145pkt 145fpkt", shape=invhouse, color=bisque];
stat1687[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.53.202.236:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5402--6960[label="1;144pkt 144fpkt"];
5402--7963[label="1;145pkt 145fpkt"];
6960--7963[label="1;144pkt 144fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.53.202.236" src_port="1028"/>
    </slice>
    <from sec="1039669649" usec="0"/>
    <to sec="1039669673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1688{
style=filled;
color=gray75;
5403[label="197.70.218.236;122pkt 122fpkt", shape=pentagon, color=darkviolet];
6961[label="197.70.218.236;121pkt 121fpkt", shape=invtriangle, color=brown];
7964[label="197.70.218.236;122pkt 122fpkt", shape=invhouse, color=bisque];
stat1688[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.70.218.236:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5403--6961[label="1;121pkt 121fpkt"];
5403--7964[label="1;122pkt 122fpkt"];
6961--7964[label="1;121pkt 121fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.70.218.236" src_port="1026"/>
    </slice>
    <from sec="1039669511" usec="0"/>
    <to sec="1039669541" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1689{
style=filled;
color=gray75;
5404[label="192.210.0.237;248pkt 248fpkt", shape=pentagon, color=darkviolet];
6962[label="192.210.0.237;249pkt 249fpkt", shape=invtriangle, color=brown];
7965[label="192.210.0.237;248pkt 248fpkt", shape=invhouse, color=bisque];
stat1689[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.210.0.237:1024, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1024: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5404--6962[label="1;248pkt 248fpkt"];
5404--7965[label="1;248pkt 248fpkt"];
6962--7965[label="1;248pkt 248fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="192.210.0.237" src_port="1024"/>
    </slice>
    <from sec="1039669665" usec="0"/>
    <to sec="1039669703" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1690{
style=filled;
color=gray75;
5407[label="38.4.140.237;22pkt 22fpkt", shape=pentagon, color=darkviolet];
6964[label="38.4.140.237;23pkt 23fpkt", shape=invtriangle, color=brown];
7967[label="38.4.140.237;22pkt 22fpkt", shape=invhouse, color=bisque];
stat1690[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.4.140.237:80, 138.186.54.88:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1662: (2.23881%)&lt;BR/&gt; 1661: (2.23881%)&lt;BR/&gt; 1660: (2.23881%)&lt;BR/&gt; 1659: (2.23881%)&gt;];
}
5407--6964[label="1;22pkt 22fpkt"];
5407--7967[label="1;22pkt 22fpkt"];
6964--7967[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.54.88" src_ip="38.4.140.237" src_port="80"/>
    </slice>
    <from sec="1039669877" usec="0"/>
    <to sec="1039669925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.100.163.237"/>
    </slice>
    <from sec="1039669767" usec="0"/>
    <to sec="1039669819" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1692{
style=filled;
color=gray75;
1964[label="140.3.14.8;d;5pkt 5fpkt", shape=diamond, color=yellow];
1965[label="38.44.84.217;s;3pkt 3fpkt", shape=diamond, color=yellow];
stat1692[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.57.121.230:80, 140.3.14.8:4920}[20%]&lt;BR/&gt;{198.57.121.230:80, 140.3.14.8:4921}[20%]&lt;BR/&gt;{38.44.84.217:80, 140.3.14.8:4919}[20%]&lt;BR/&gt;{38.44.84.217:80, 140.3.14.8:4922}[20%]&lt;BR/&gt;{38.44.84.217:80, 140.3.14.8:4923}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4923: (12.5%)&lt;BR/&gt; 4922: (12.5%)&lt;BR/&gt; 4919: (12.5%)&lt;BR/&gt; 4921: (6.25%)&gt;];
}
1964--1965[label="1;3pkt 3fpkt"];
1964--2712[label="0.4;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.14.8" dst_port="4923" src_ip="38.44.84.217" src_port="80"/>
      <filter dst_ip="140.3.14.8" dst_port="4922" src_ip="38.44.84.217" src_port="80"/>
      <filter dst_ip="140.3.14.8" dst_port="4919" src_ip="38.44.84.217" src_port="80"/>
      <filter dst_ip="140.3.14.8" dst_port="4921" src_ip="198.57.121.230" src_port="80"/>
      <filter dst_ip="140.3.14.8" dst_port="4920" src_ip="198.57.121.230" src_port="80"/>
    </slice>
    <from sec="1039669433" usec="0"/>
    <to sec="1039669674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1693{
style=filled;
color=gray75;
5418[label="33.45.46.240;61pkt 61fpkt", shape=pentagon, color=darkviolet];
6972[label="33.45.46.240;61pkt 61fpkt", shape=invtriangle, color=brown];
stat1693[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.45.46.240:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4964: (0.819672%)&lt;BR/&gt; 4953: (0.819672%)&lt;BR/&gt; 4937: (0.819672%)&lt;BR/&gt; 4899: (0.819672%)&gt;];
}
5418--6972[label="1;61pkt 61fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="33.45.46.240"/>
    </slice>
    <from sec="1039669358" usec="0"/>
    <to sec="1039669926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1694{
style=filled;
color=gray75;
5420[label="214.69.210.240;168pkt 168fpkt", shape=pentagon, color=darkviolet];
6974[label="214.69.210.240;168pkt 168fpkt", shape=invtriangle, color=brown];
7972[label="214.69.210.240;168pkt 168fpkt", shape=invhouse, color=bisque];
stat1694[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.69.210.240:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5420--6974[label="1;168pkt 168fpkt"];
5420--7972[label="1;168pkt 168fpkt"];
6974--7972[label="1;168pkt 168fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.69.210.240" src_port="1025"/>
    </slice>
    <from sec="1039669405" usec="0"/>
    <to sec="1039669433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1695{
style=filled;
color=gray75;
5421[label="140.3.243.240;44pkt 44fpkt", shape=pentagon, color=darkviolet];
6975[label="140.3.243.240;44pkt 44fpkt", shape=invtriangle, color=brown];
7973[label="140.3.243.240;45pkt 45fpkt", shape=invhouse, color=bisque];
stat1695[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.243.240:*, 38.72.226.226:80}[53.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.8722%)&lt;BR/&gt; 1775: (1.12782%)&lt;BR/&gt; 1774: (1.12782%)&lt;BR/&gt; 1773: (1.12782%)&lt;BR/&gt; 1772: (1.12782%)&gt;];
}
5421--6975[label="1;44pkt 44fpkt"];
5421--7973[label="1;44pkt 44fpkt"];
6975--7973[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="38.72.226.226" dst_port="80" src_ip="140.3.243.240"/>
    </slice>
    <from sec="1039669321" usec="0"/>
    <to sec="1039669920" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1696{
style=filled;
color=gray75;
5422[label="215.218.3.241;246pkt 246fpkt", shape=pentagon, color=darkviolet];
6976[label="215.218.3.241;247pkt 247fpkt", shape=invtriangle, color=brown];
7974[label="215.218.3.241;247pkt 247fpkt", shape=invhouse, color=bisque];
stat1696[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.218.3.241:18001, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 18001: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5422--6976[label="1;246pkt 246fpkt"];
5422--7974[label="1;246pkt 246fpkt"];
6976--7974[label="1;247pkt 247fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.218.3.241" src_port="18001"/>
    </slice>
    <from sec="1039669205" usec="0"/>
    <to sec="1039669249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1697{
style=filled;
color=gray75;
5423[label="197.252.58.241;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6977[label="197.252.58.241;1pkt 1fpkt", shape=invtriangle, color=brown];
7975[label="197.252.58.241;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1697[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.252.58.241:80, 148.110.12.217:1584}[50%]&lt;BR/&gt;{197.252.58.241:80, 148.110.12.217:1595}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1595: (37.5%)&lt;BR/&gt; 1584: (12.5%)&gt;];
}
5423--6977[label="1;1pkt 1fpkt"];
5423--7975[label="1;1pkt 1fpkt"];
6977--7975[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.110.12.217" dst_port="1595" src_ip="197.252.58.241" src_port="80"/>
      <filter dst_ip="148.110.12.217" dst_port="1584" src_ip="197.252.58.241" src_port="80"/>
    </slice>
    <from sec="1039669716" usec="0"/>
    <to sec="1039669750" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1698{
style=filled;
color=gray75;
5426[label="202.68.77.241;21pkt 21fpkt", shape=pentagon, color=darkviolet];
6980[label="202.68.77.241;22pkt 22fpkt", shape=invtriangle, color=brown];
stat1698[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.68.77.241:80, 148.29.24.129:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 31500: (2.32558%)&lt;BR/&gt; 25304: (2.32558%)&lt;BR/&gt; 25274: (2.32558%)&lt;BR/&gt; 25213: (2.32558%)&gt;];
}
5426--6980[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="148.29.24.129" src_ip="202.68.77.241" src_port="80"/>
    </slice>
    <from sec="1039669435" usec="0"/>
    <to sec="1039669817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1699{
style=filled;
color=gray75;
5430[label="197.106.31.242;147pkt 147fpkt", shape=pentagon, color=darkviolet];
6982[label="197.106.31.242;148pkt 148fpkt", shape=invtriangle, color=brown];
7978[label="197.106.31.242;148pkt 148fpkt", shape=invhouse, color=bisque];
stat1699[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.106.31.242:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5430--6982[label="1;147pkt 147fpkt"];
5430--7978[label="1;147pkt 147fpkt"];
6982--7978[label="1;148pkt 148fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.106.31.242" src_port="1026"/>
    </slice>
    <from sec="1039669444" usec="0"/>
    <to sec="1039669477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1700{
style=filled;
color=gray75;
5431[label="138.186.48.242;30pkt 30fpkt", shape=pentagon, color=darkviolet];
6983[label="138.186.48.242;30pkt 30fpkt", shape=invtriangle, color=brown];
stat1700[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.186.48.242:*, *:80}[93.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.6667%)&lt;BR/&gt; 1863: (3.33333%)&lt;BR/&gt; 1546: (1.66667%)&lt;BR/&gt; 1545: (1.66667%)&lt;BR/&gt; 1544: (1.66667%)&gt;];
}
5431--6983[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="138.186.48.242"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669380" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.85.164.242"/>
    </slice>
    <from sec="1039669237" usec="0"/>
    <to sec="1039669907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="64.213.62.243"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1703{
style=filled;
color=gray75;
5438[label="36.238.65.243;125pkt 125fpkt", shape=pentagon, color=darkviolet];
6989[label="36.238.65.243;124pkt 124fpkt", shape=invtriangle, color=brown];
stat1703[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.238.65.243:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 9306: (0.401606%)&lt;BR/&gt; 9282: (0.401606%)&lt;BR/&gt; 9280: (0.401606%)&lt;BR/&gt; 9278: (0.401606%)&gt;];
}
5438--6989[label="1;124pkt 124fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="36.238.65.243"/>
    </slice>
    <from sec="1039669454" usec="0"/>
    <to sec="1039669486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1704{
style=filled;
color=gray75;
5440[label="174.235.125.243;69pkt 69fpkt", shape=pentagon, color=darkviolet];
6991[label="174.235.125.243;70pkt 70fpkt", shape=invtriangle, color=brown];
7983[label="174.235.125.243;69pkt 69fpkt", shape=invhouse, color=bisque];
stat1704[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.235.125.243:53, *:53}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (56.4904%)&lt;BR/&gt; 32772: (1.44231%)&lt;BR/&gt; 32769: (1.44231%)&lt;BR/&gt; 9052: (1.44231%)&lt;BR/&gt; 4927: (1.44231%)&gt;];
}
5440--6991[label="1;69pkt 69fpkt"];
5440--7983[label="1;69pkt 69fpkt"];
6991--7983[label="1;69pkt 69fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="174.235.125.243" src_port="53"/>
    </slice>
    <from sec="1039669213" usec="0"/>
    <to sec="1039669902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1705{
style=filled;
color=gray75;
5442[label="215.209.130.243;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6993[label="215.209.130.243;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1705[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.209.130.243:80, 215.87.67.219:23994}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23994: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5442--6993[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.87.67.219" dst_port="23994" src_ip="215.209.130.243" src_port="80"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1706{
style=filled;
color=gray75;
5443[label="217.226.174.243;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6994[label="217.226.174.243;6pkt 6fpkt", shape=invtriangle, color=brown];
7985[label="217.226.174.243;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1706[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.226.174.243:*, 140.3.15.53:25}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (41.1765%)&lt;BR/&gt; 0: (17.6471%)&lt;BR/&gt; 41221: (8.82353%)&lt;BR/&gt; 41219: (8.82353%)&lt;BR/&gt; 41216: (8.82353%)&gt;];
}
5443--6994[label="1;6pkt 6fpkt"];
5443--7985[label="1;5pkt 5fpkt"];
6994--7985[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.15.53" dst_port="25" src_ip="217.226.174.243"/>
    </slice>
    <from sec="1039669315" usec="0"/>
    <to sec="1039669324" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.213.194.243"/>
    </slice>
    <from sec="1039669285" usec="0"/>
    <to sec="1039669317" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1708{
style=filled;
color=gray75;
5446[label="36.161.205.243;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6997[label="36.161.205.243;7pkt 7fpkt", shape=invtriangle, color=brown];
stat1708[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.161.205.243:*, 169.126.164.156:25}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 35485: (7.14286%)&lt;BR/&gt; 34965: (7.14286%)&lt;BR/&gt; 34962: (7.14286%)&lt;BR/&gt; 34891: (7.14286%)&gt;];
}
5446--6997[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="169.126.164.156" dst_port="25" src_ip="36.161.205.243"/>
    </slice>
    <from sec="1039669364" usec="0"/>
    <to sec="1039669871" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1709{
style=filled;
color=gray75;
5454[label="140.3.213.245;14pkt 14fpkt", shape=pentagon, color=darkviolet];
7002[label="140.3.213.245;14pkt 14fpkt", shape=invtriangle, color=brown];
stat1709[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.213.245:*, 199.37.47.250:80}[64.2857%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1276: (3.57143%)&lt;BR/&gt; 1274: (3.57143%)&lt;BR/&gt; 1239: (3.57143%)&lt;BR/&gt; 1238: (3.57143%)&gt;];
}
5454--7002[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="199.37.47.250" dst_port="80" src_ip="140.3.213.245"/>
    </slice>
    <from sec="1039669227" usec="0"/>
    <to sec="1039669366" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.61.224.245"/>
    </slice>
    <from sec="1039669224" usec="0"/>
    <to sec="1039669905" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1711{
style=filled;
color=gray75;
5458[label="209.236.20.246;179pkt 179fpkt", shape=pentagon, color=darkviolet];
7005[label="209.236.20.246;178pkt 178fpkt", shape=invtriangle, color=brown];
7990[label="209.236.20.246;179pkt 179fpkt", shape=invhouse, color=bisque];
stat1711[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.236.20.246:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5458--7005[label="1;178pkt 178fpkt"];
5458--7990[label="1;179pkt 179fpkt"];
7005--7990[label="1;178pkt 178fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="209.236.20.246" src_port="1030"/>
    </slice>
    <from sec="1039669428" usec="0"/>
    <to sec="1039669459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1712{
style=filled;
color=gray75;
5460[label="202.173.111.246;167pkt 167fpkt", shape=pentagon, color=darkviolet];
7007[label="202.173.111.246;167pkt 167fpkt", shape=invtriangle, color=brown];
stat1712[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.173.111.246:62851, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62851: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5460--7007[label="1;167pkt 167fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.173.111.246" src_port="62851"/>
    </slice>
    <from sec="1039669372" usec="0"/>
    <to sec="1039669398" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.166.165.246"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1714{
style=filled;
color=gray75;
5470[label="96.11.171.247;116pkt 116fpkt", shape=pentagon, color=darkviolet];
7014[label="96.11.171.247;117pkt 117fpkt", shape=invtriangle, color=brown];
stat1714[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.11.171.247:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5470--7014[label="1;116pkt 116fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.11.171.247" src_port="1028"/>
    </slice>
    <from sec="1039669676" usec="0"/>
    <to sec="1039669699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1715{
style=filled;
color=gray75;
5475[label="36.215.56.248;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7017[label="36.215.56.248;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1715[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.215.56.248:80, 215.87.64.183:31414}[50%]&lt;BR/&gt;{36.215.56.248:80, 215.87.64.183:31423}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 31423: (25%)&lt;BR/&gt; 31414: (25%)&gt;];
}
5475--7017[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.87.64.183" dst_port="31423" src_ip="36.215.56.248" src_port="80"/>
      <filter dst_ip="215.87.64.183" dst_port="31414" src_ip="36.215.56.248" src_port="80"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="162.122.195.248"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1717{
style=filled;
color=gray75;
339[label="37.116.75.249s;45pkt 45fpkt", shape=rectangle, color=red];
5484[label="37.116.75.249;127pkt 127fpkt", shape=pentagon, color=darkviolet];
7022[label="37.116.75.249;126pkt 126fpkt", shape=invtriangle, color=brown];
7996[label="37.116.75.249;126pkt 126fpkt", shape=invhouse, color=bisque];
stat1717[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.116.75.249:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
339--5484[label="1;45pkt 45fpkt"];
339--7022[label="0.977778;44pkt 44fpkt"];
339--7996[label="0.977778;44pkt 44fpkt"];
5484--7022[label="1;126pkt 126fpkt"];
5484--7996[label="1;126pkt 126fpkt"];
7022--7996[label="1;126pkt 126fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="37.116.75.249" src_port="1026"/>
    </slice>
    <from sec="1039669893" usec="0"/>
    <to sec="1039669914" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="98.168.90.249"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1719{
style=filled;
color=gray75;
5486[label="38.64.134.249;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7024[label="38.64.134.249;5pkt 5fpkt", shape=invtriangle, color=brown];
7998[label="38.64.134.249;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1719[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.64.134.249:80, 215.90.153.133:1126}[20%]&lt;BR/&gt;{38.64.134.249:80, 215.90.153.133:1134}[20%]&lt;BR/&gt;{38.64.134.249:80, 215.90.153.133:1151}[20%]&lt;BR/&gt;{38.64.134.249:80, 215.90.153.133:1174}[20%]&lt;BR/&gt;{38.64.134.249:80, 215.90.153.133:1184}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1184: (10.7143%)&lt;BR/&gt; 1174: (10.7143%)&lt;BR/&gt; 1151: (10.7143%)&lt;BR/&gt; 1134: (10.7143%)&gt;];
}
5486--7024[label="1;5pkt 5fpkt"];
5486--7998[label="1;4pkt 4fpkt"];
7024--7998[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.153.133" dst_port="1184" src_ip="38.64.134.249" src_port="80"/>
      <filter dst_ip="215.90.153.133" dst_port="1174" src_ip="38.64.134.249" src_port="80"/>
      <filter dst_ip="215.90.153.133" dst_port="1151" src_ip="38.64.134.249" src_port="80"/>
      <filter dst_ip="215.90.153.133" dst_port="1134" src_ip="38.64.134.249" src_port="80"/>
      <filter dst_ip="215.90.153.133" dst_port="1126" src_ip="38.64.134.249" src_port="80"/>
    </slice>
    <from sec="1039669498" usec="0"/>
    <to sec="1039669838" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1720{
style=filled;
color=gray75;
340[label="96.79.204.249s;52pkt 52fpkt", shape=rectangle, color=red];
5487[label="96.79.204.249;160pkt 160fpkt", shape=pentagon, color=darkviolet];
7025[label="96.79.204.249;159pkt 159fpkt", shape=invtriangle, color=brown];
7999[label="96.79.204.249;160pkt 160fpkt", shape=invhouse, color=bisque];
stat1720[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.79.204.249:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
340--5487[label="1;52pkt 52fpkt"];
340--7025[label="1;52pkt 52fpkt"];
340--7999[label="1;52pkt 52fpkt"];
5487--7025[label="1;159pkt 159fpkt"];
5487--7999[label="1;160pkt 160fpkt"];
7025--7999[label="1;159pkt 159fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.79.204.249" src_port="1025"/>
    </slice>
    <from sec="1039669438" usec="0"/>
    <to sec="1039669463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="223.244.137.250"/>
    </slice>
    <from sec="1039669371" usec="0"/>
    <to sec="1039669772" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0297,1.81598,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1722{
style=filled;
color=gray75;
1720[label="202.68.77.251;s;164pkt 164fpkt", shape=diamond, color=yellow];
2726[label="202.68.77.251;s;123pkt 123fpkt", shape=hexagon, color=black];
5495[label="202.68.77.251;163pkt 163fpkt", shape=pentagon, color=darkviolet];
7032[label="202.68.77.251;164pkt 164fpkt", shape=invtriangle, color=brown];
8004[label="202.68.77.251;163pkt 163fpkt", shape=invhouse, color=bisque];
stat1722[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.68.77.251:80, 215.90.72.24:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2653: (0.32175%)&lt;BR/&gt; 2651: (0.32175%)&lt;BR/&gt; 2650: (0.32175%)&lt;BR/&gt; 2649: (0.32175%)&gt;];
}
1720--2726[label="1;123pkt 123fpkt"];
1720--2754[label="0.865854;142pkt 142fpkt"];
1720--5495[label="1;163pkt 163fpkt"];
1720--7032[label="1;164pkt 164fpkt"];
1720--8004[label="1;163pkt 163fpkt"];
2726--2754[label="1;123pkt 123fpkt"];
2726--5495[label="0.99187;122pkt 122fpkt"];
2726--7032[label="1;123pkt 123fpkt"];
2726--8004[label="0.99187;122pkt 122fpkt"];
5495--7032[label="1;163pkt 163fpkt"];
5495--8004[label="1;163pkt 163fpkt"];
7032--8004[label="1;163pkt 163fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.72.24" src_ip="202.68.77.251" src_port="80"/>
    </slice>
    <from sec="1039669273" usec="0"/>
    <to sec="1039669766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1723{
style=filled;
color=gray75;
5500[label="197.70.210.251;149pkt 149fpkt", shape=pentagon, color=darkviolet];
7036[label="197.70.210.251;148pkt 148fpkt", shape=invtriangle, color=brown];
stat1723[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.70.210.251:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5500--7036[label="1;148pkt 148fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.70.210.251" src_port="1026"/>
    </slice>
    <from sec="1039669227" usec="0"/>
    <to sec="1039669262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1724{
style=filled;
color=gray75;
5501[label="197.173.216.251;150pkt 150fpkt", shape=pentagon, color=darkviolet];
7037[label="197.173.216.251;151pkt 151fpkt", shape=invtriangle, color=brown];
stat1724[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.173.216.251:1098, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1098: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5501--7037[label="1;150pkt 150fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.173.216.251" src_port="1098"/>
    </slice>
    <from sec="1039669277" usec="0"/>
    <to sec="1039669312" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1725{
style=filled;
color=gray75;
5504[label="215.142.54.252;135pkt 135fpkt", shape=pentagon, color=darkviolet];
7040[label="215.142.54.252;135pkt 135fpkt", shape=invtriangle, color=brown];
8008[label="215.142.54.252;135pkt 135fpkt", shape=invhouse, color=bisque];
stat1725[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.142.54.252:1104, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1104: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5504--7040[label="1;135pkt 135fpkt"];
5504--8008[label="1;135pkt 135fpkt"];
7040--8008[label="1;135pkt 135fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.142.54.252" src_port="1104"/>
    </slice>
    <from sec="1039669577" usec="0"/>
    <to sec="1039669598" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1726{
style=filled;
color=gray75;
5506[label="64.187.85.252;27pkt 27fpkt", shape=pentagon, color=darkviolet];
7042[label="64.187.85.252;26pkt 26fpkt", shape=invtriangle, color=brown];
8010[label="64.187.85.252;26pkt 26fpkt", shape=invhouse, color=bisque];
stat1726[shape=component, label=&lt;Rules:&lt;BR/&gt;{64.187.85.252:*, 138.165.30.113:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4855: (1.89873%)&lt;BR/&gt; 4853: (1.89873%)&lt;BR/&gt; 4851: (1.89873%)&lt;BR/&gt; 4849: (1.89873%)&gt;];
}
5506--7042[label="1;26pkt 26fpkt"];
5506--8010[label="1;26pkt 26fpkt"];
7042--8010[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="138.165.30.113" dst_port="80" src_ip="64.187.85.252"/>
    </slice>
    <from sec="1039669847" usec="0"/>
    <to sec="1039669924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5046,1.82634,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1727{
style=filled;
color=gray75;
5514[label="215.156.58.253;103pkt 103fpkt", shape=pentagon, color=darkviolet];
7047[label="215.156.58.253;103pkt 103fpkt", shape=invtriangle, color=brown];
stat1727[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.156.58.253:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5514--7047[label="1;103pkt 103fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.156.58.253" src_port="1028"/>
    </slice>
    <from sec="1039669474" usec="0"/>
    <to sec="1039669494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1728{
style=filled;
color=gray75;
5516[label="215.38.155.253;123pkt 123fpkt", shape=pentagon, color=darkviolet];
7048[label="215.38.155.253;123pkt 123fpkt", shape=invtriangle, color=brown];
8014[label="215.38.155.253;124pkt 124fpkt", shape=invhouse, color=bisque];
stat1728[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.38.155.253:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5516--7048[label="1;123pkt 123fpkt"];
5516--8014[label="1;123pkt 123fpkt"];
7048--8014[label="1;123pkt 123fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.38.155.253" src_port="1031"/>
    </slice>
    <from sec="1039669296" usec="0"/>
    <to sec="1039669333" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="162.20.3.254"/>
    </slice>
    <from sec="1039669469" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.605361,1.89117,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="64.192.32.255"/>
    </slice>
    <from sec="1039669212" usec="0"/>
    <to sec="1039669910" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="162.127.76.4"/>
    </slice>
    <from sec="1039669456" usec="0"/>
    <to sec="1039669757" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.100.35.7"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="96.66.76.8"/>
    </slice>
    <from sec="1039669377" usec="0"/>
    <to sec="1039669667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="198.98.47.14"/>
    </slice>
    <from sec="1039669518" usec="0"/>
    <to sec="1039669523" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1735{
style=filled;
color=gray75;
1855[label="140.3.26.212;d;149pkt 149fpkt", shape=diamond, color=yellow];
stat1735[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.92.233.170:80, 140.3.26.212:*}[66.443%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.604%)&lt;BR/&gt; 53: (7.71812%)&lt;BR/&gt; 1863: (1.34228%)&lt;BR/&gt; 65525: (0.33557%)&lt;BR/&gt; 62596: (0.33557%)&gt;];
}
1855--2247[label="0.00757576;1pkt 1fpkt"];
1855--2486[label="0.0659341;6pkt 6fpkt"];
1855--2688[label="0.00671141;1pkt 1fpkt"];
1855--2930[label="1;130pkt 130fpkt"];
1855--3450[label="0.111111;1pkt 1fpkt"];
1855--3587[label="0.138889;5pkt 5fpkt"];
1855--3648[label="0.0201342;3pkt 3fpkt"];
1855--4567[label="0.025;1pkt 1fpkt"];
1855--4688[label="0.00680272;1pkt 1fpkt"];
1855--5092[label="0.0434783;1pkt 1fpkt"];
1855--5098[label="0.107143;3pkt 3fpkt"];
1855--5240[label="0.0175439;1pkt 1fpkt"];
1855--5513[label="0.00671141;1pkt 1fpkt"];
1855--5692[label="0.1;1pkt 1fpkt"];
1855--5781[label="0.135135;5pkt 5fpkt"];
1855--6762[label="0.107143;3pkt 3fpkt"];
1855--6859[label="0.0175439;1pkt 1fpkt"];
1855--7046[label="0.00671141;1pkt 1fpkt"];
1855--7151[label="0.111111;1pkt 1fpkt"];
1855--7828[label="0.111111;3pkt 3fpkt"];
1855--7897[label="0.0175439;1pkt 1fpkt"];
1855--8013[label="0.00671141;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.26.212" src_ip="199.92.233.170" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.194.225.19"/>
    </slice>
    <from sec="1039669235" usec="0"/>
    <to sec="1039669892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.141.150.20"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.123.90.22"/>
    </slice>
    <from sec="1039669203" usec="0"/>
    <to sec="1039669924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="64.175.193.22"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="172.93.208.26"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.897511,1.80147,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1741{
style=filled;
color=gray75;
123[label="214.109.50.36s;52pkt 52fpkt", shape=rectangle, color=red];
3627[label="214.109.50.36;164pkt 164fpkt", shape=pentagon, color=darkviolet];
5802[label="214.109.50.36;165pkt 165fpkt", shape=invtriangle, color=brown];
7220[label="214.109.50.36;164pkt 164fpkt", shape=invhouse, color=bisque];
stat1741[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.109.50.36:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
123--3627[label="0.980769;51pkt 51fpkt"];
123--5802[label="1;52pkt 52fpkt"];
123--7220[label="0.980769;51pkt 51fpkt"];
3627--5802[label="1;164pkt 164fpkt"];
3627--7220[label="1;164pkt 164fpkt"];
5802--7220[label="1;164pkt 164fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.109.50.36" src_port="1026"/>
    </slice>
    <from sec="1039669597" usec="0"/>
    <to sec="1039669623" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659775,1.80745,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1742{
style=filled;
color=gray75;
3638[label="149.208.70.37;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5809[label="149.208.70.37;2pkt 2fpkt", shape=invtriangle, color=brown];
7224[label="149.208.70.37;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1742[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.208.70.37:80, 140.3.201.114:1682}[50%]&lt;BR/&gt;{149.208.70.37:80, 140.3.201.114:1781}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1781: (37.5%)&lt;BR/&gt; 1682: (12.5%)&gt;];
}
3638--5809[label="1;1pkt 1fpkt"];
3638--7224[label="1;1pkt 1fpkt"];
5809--7224[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="140.3.201.114" dst_port="1781" src_ip="149.208.70.37" src_port="80"/>
      <filter dst_ip="140.3.201.114" dst_port="1682" src_ip="149.208.70.37" src_port="80"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1743{
style=filled;
color=gray75;
3644[label="36.161.205.37;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat1743[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.161.205.37:80, 215.87.67.142:4759}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4759: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3644--5813[label="1;1pkt 1fpkt"];
3644--7228[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.87.67.142" dst_port="4759" src_ip="36.161.205.37" src_port="80"/>
    </slice>
    <from sec="1039669632" usec="0"/>
    <to sec="1039669849" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.151.229.37"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1745{
style=filled;
color=gray75;
3655[label="211.90.157.38;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat1745[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.90.157.38:80, 138.186.176.140:10009}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10009: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3655--5820[label="1;1pkt 1fpkt"];
3655--7233[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.176.140" dst_port="10009" src_ip="211.90.157.38" src_port="80"/>
    </slice>
    <from sec="1039669219" usec="0"/>
    <to sec="1039669924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="140.3.210.40"/>
    </slice>
    <from sec="1039669815" usec="0"/>
    <to sec="1039669889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.76.19.42"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="37.115.72.45"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="64.196.202.46"/>
    </slice>
    <from sec="1039669237" usec="0"/>
    <to sec="1039669926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="39.29.130.47"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="33.112.54.48"/>
    </slice>
    <from sec="1039669207" usec="0"/>
    <to sec="1039669925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613613,1.84203,901,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1752{
style=filled;
color=gray75;
3758[label="214.203.233.49;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7273[label="214.203.233.49;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1752[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.203.233.49:80, 215.87.64.183:2102}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2102: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3758--5889[label="1;1pkt 1fpkt"];
3758--7273[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.87.64.183" dst_port="2102" src_ip="214.203.233.49" src_port="80"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1753{
style=filled;
color=gray75;
1170[label="215.219.101.58;s;6pkt 6fpkt", shape=diamond, color=yellow];
stat1753[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.219.101.58:80, 215.90.72.24:*}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.6667%)&lt;BR/&gt; 2374: (8.33333%)&lt;BR/&gt; 2349: (8.33333%)&lt;BR/&gt; 2345: (8.33333%)&lt;BR/&gt; 2334: (8.33333%)&gt;];
}
1170--2754[label="0.833333;5pkt 5fpkt"];
1170--3837[label="1;6pkt 6fpkt"];
1170--5940[label="0.833333;5pkt 5fpkt"];
1170--7306[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.72.24" src_ip="215.219.101.58" src_port="80"/>
    </slice>
    <from sec="1039669229" usec="0"/>
    <to sec="1039669407" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="128.61.212.58"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,002,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="10.10.40.59"/>
    </slice>
    <from sec="1039669239" usec="0"/>
    <to sec="1039669909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.87.75.63"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="39.24.111.64"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="140.3.129.64"/>
    </slice>
    <from sec="1039669390" usec="0"/>
    <to sec="1039669587" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="64.196.181.65"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613613,1.84203,901,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1760{
style=filled;
color=gray75;
3937[label="140.3.243.67;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7351[label="140.3.243.67;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1760[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.243.67:1871, 211.196.4.31:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1871: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3937--6009[label="1;1pkt 1fpkt"];
3937--7351[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.196.4.31" dst_port="80" src_ip="140.3.243.67" src_port="1871"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.111.92.69"/>
    </slice>
    <from sec="1039669216" usec="0"/>
    <to sec="1039669916" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,002,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="96.152.153.70"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.442537,1.86056,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1763{
style=filled;
color=gray75;
3996[label="36.161.206.74;11pkt 11fpkt", shape=pentagon, color=darkviolet];
stat1763[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.161.206.74:80, 215.87.66.161:*}[81.8182%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 10199: (4.54545%)&lt;BR/&gt; 10196: (4.54545%)&lt;BR/&gt; 4024: (4.54545%)&lt;BR/&gt; 4023: (4.54545%)&gt;];
}
3996--6045[label="1;11pkt 11fpkt"];
3996--7377[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="215.87.66.161" src_ip="36.161.206.74" src_port="80"/>
    </slice>
    <from sec="1039669271" usec="0"/>
    <to sec="1039669709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="92.199.97.77"/>
    </slice>
    <from sec="1039669214" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="145.19.180.80"/>
    </slice>
    <from sec="1039669276" usec="0"/>
    <to sec="1039669585" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.965747,1.93225,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1766{
style=filled;
color=gray75;
1431[label="39.111.183.56;d;41pkt 41fpkt", shape=diamond, color=yellow];
1701[label="148.110.249.83;s;96pkt 96fpkt", shape=diamond, color=yellow];
2722[label="39.111.183.56;d;32pkt 32fpkt", shape=hexagon, color=black];
stat1766[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.110.249.83:*, *:80}[62.9921%]&lt;BR/&gt;{215.87.96.170:*, 39.111.183.56:*}[23.622%]&lt;BR/&gt;{*:*, *:443}[21.2598%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.0947%)&lt;BR/&gt; 443: (13.6095%)&lt;BR/&gt; 2772: (0.887574%)&lt;BR/&gt; 2771: (0.887574%)&lt;BR/&gt; 2759: (0.887574%)&gt;];
}
1431--1701[label="0.243902;10pkt 10fpkt"];
1431--2722[label="1;32pkt 32fpkt"];
1431--4095[label="0.243902;10pkt 10fpkt"];
1431--4706[label="0.0243902;1pkt 1fpkt"];
1431--6103[label="0.243902;10pkt 10fpkt"];
1431--7413[label="0.243902;10pkt 10fpkt"];
1701--1746[label="0.125;12pkt 12fpkt"];
1701--2147[label="0.0208333;2pkt 2fpkt"];
1701--2308[label="0.0520833;5pkt 5fpkt"];
1701--2722[label="0.28125;9pkt 9fpkt"];
1701--2793[label="0.0104167;1pkt 1fpkt"];
1701--2876[label="0.0277778;2pkt 2fpkt"];
1701--2971[label="0.125;12pkt 12fpkt"];
1701--3185[label="0.229167;22pkt 22fpkt"];
1701--4095[label="1;96pkt 96fpkt"];
1701--6103[label="1;95pkt 95fpkt"];
1701--7413[label="1;96pkt 96fpkt"];
2722--4095[label="0.28125;9pkt 9fpkt"];
2722--6103[label="0.28125;9pkt 9fpkt"];
2722--7413[label="0.28125;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_port="443"/>
      <filter dst_port="80" src_ip="148.110.249.83"/>
      <filter dst_ip="39.111.183.56" src_ip="215.87.96.170"/>
    </slice>
    <from sec="1039669248" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.37.236.88"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="39.31.100.92"/>
    </slice>
    <from sec="1039669213" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="170.103.43.96"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="166.178.50.96"/>
    </slice>
    <from sec="1039669267" usec="0"/>
    <to sec="1039669923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="92.244.227.96"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="33.113.0.99"/>
    </slice>
    <from sec="1039669221" usec="0"/>
    <to sec="1039669919" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="99.76.8.100"/>
    </slice>
    <from sec="1039669212" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.166.163.100"/>
    </slice>
    <from sec="1039669295" usec="0"/>
    <to sec="1039669308" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="166.144.157.102"/>
    </slice>
    <from sec="1039669344" usec="0"/>
    <to sec="1039669358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.66.11.111"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669432" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="128.32.151.111"/>
    </slice>
    <from sec="1039669392" usec="0"/>
    <to sec="1039669459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="149.203.97.113"/>
    </slice>
    <from sec="1039669215" usec="0"/>
    <to sec="1039669924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.192.134.120"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="64.219.128.122"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="211.93.187.122"/>
    </slice>
    <from sec="1039669395" usec="0"/>
    <to sec="1039669756" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.36.223.125"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669407" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="142.150.20.128"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="199.72.191.128"/>
    </slice>
    <from sec="1039669206" usec="0"/>
    <to sec="1039669927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="198.172.252.129"/>
    </slice>
    <from sec="1039669203" usec="0"/>
    <to sec="1039669845" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685687,1.90093,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1786{
style=filled;
color=gray75;
599[label="199.94.177.185;d;252pkt 252fpkt", shape=diamond, color=yellow];
stat1786[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.3.208.204:*, 199.94.177.185:80}[50%]&lt;BR/&gt;{138.186.217.64:*, 199.94.177.185:80}[28.1746%]&lt;BR/&gt;{214.216.50.132:*, 199.94.177.185:80}[21.8254%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33032: (0.198413%)&lt;BR/&gt; 4937: (0.198413%)&lt;BR/&gt; 4936: (0.198413%)&lt;BR/&gt; 4935: (0.198413%)&gt;];
}
599--1183[label="1;71pkt 71fpkt"];
599--2123[label="0.743243;55pkt 55fpkt"];
599--2886[label="1;226pkt 226fpkt"];
599--2946[label="0.698413;44pkt 44fpkt"];
599--3185[label="0.0515873;13pkt 13fpkt"];
599--4516[label="0.743243;55pkt 55fpkt"];
599--6385[label="0.733333;55pkt 55fpkt"];
599--7584[label="0.733333;55pkt 55fpkt"];
</description>
    <slice>
      <filter dst_ip="199.94.177.185" dst_port="80" src_ip="140.3.208.204"/>
      <filter dst_ip="199.94.177.185" dst_port="80" src_ip="138.186.217.64"/>
      <filter dst_ip="199.94.177.185" dst_port="80" src_ip="214.216.50.132"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.739691,1.87294,503,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_1787{
style=filled;
color=gray75;
6390[label="138.7.9.133;1pkt 1fpkt", shape=invtriangle, color=brown];
7589[label="138.7.9.133;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1787[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.7.9.133:80, 150.247.157.9:45132}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 45132: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6390--7589[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="150.247.157.9" dst_port="45132" src_ip="138.7.9.133" src_port="80"/>
    </slice>
    <from sec="1039669694" usec="0"/>
    <to sec="1039669722" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.221.19.136"/>
    </slice>
    <from sec="1039669487" usec="0"/>
    <to sec="1039669506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="61.188.1.137"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="138.186.176.140"/>
    </slice>
    <from sec="1039669219" usec="0"/>
    <to sec="1039669924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="61.139.233.146"/>
    </slice>
    <from sec="1039669203" usec="0"/>
    <to sec="1039669927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="138.177.155.147"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669353" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="64.65.214.151"/>
    </slice>
    <from sec="1039669545" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="64.177.230.152"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.160.16.161"/>
    </slice>
    <from sec="1039669311" usec="0"/>
    <to sec="1039669925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="211.168.165.161"/>
    </slice>
    <from sec="1039669238" usec="0"/>
    <to sec="1039669272" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="64.176.115.166"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.209.95.168"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="138.186.59.171"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="203.52.72.171"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669811" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="149.203.74.178"/>
    </slice>
    <from sec="1039669831" usec="0"/>
    <to sec="1039669846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="96.40.74.183"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="64.23.79.189"/>
    </slice>
    <from sec="1039669201" usec="0"/>
    <to sec="1039669499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="172.93.183.192"/>
    </slice>
    <from sec="1039669429" usec="0"/>
    <to sec="1039669759" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="148.110.218.192"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.613613,1.84203,503,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1806{
style=filled;
color=gray75;
5093[label="36.13.80.198;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7826[label="36.13.80.198;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1806[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.13.80.198:80, 138.186.8.170:49990}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49990: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5093--7826[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.186.8.170" dst_port="49990" src_ip="36.13.80.198" src_port="80"/>
    </slice>
    <from sec="1039669283" usec="0"/>
    <to sec="1039669295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.983876,1.77655,503,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1807{
style=filled;
color=gray75;
380[label="215.87.67.219d;1pkt 1fpkt", shape=rectangle, color=red];
696[label="148.110.154.123;d;20pkt 20fpkt", shape=diamond, color=yellow];
1392[label="38.96.129.201;s;89pkt 89fpkt", shape=diamond, color=yellow];
1953[label="201.37.169.186;s;17pkt 17fpkt", shape=diamond, color=yellow];
2381[label="140.3.211.209;d;22pkt 22fpkt", shape=diamond, color=yellow];
3351[label="211.90.157.11;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4054[label="38.174.34.80;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4294[label="197.65.213.104;171pkt 171fpkt", shape=pentagon, color=darkviolet];
4940[label="201.37.199.178;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5012[label="201.37.169.186;19pkt 19fpkt", shape=pentagon, color=darkviolet];
6081[label="38.174.34.80;8pkt 8fpkt", shape=invtriangle, color=brown];
6236[label="197.65.213.104;171pkt 171fpkt", shape=invtriangle, color=brown];
7300[label="38.3.106.56;15pkt 15fpkt", shape=invhouse, color=bisque];
7491[label="197.65.213.104;172pkt 172fpkt", shape=invhouse, color=bisque];
stat1807[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.65.213.104:*, *:137}[50.1458%]&lt;BR/&gt;{38.96.129.201:80, *:*}[25.3644%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (35.1296%)&lt;BR/&gt; 80: (14.0518%)&lt;BR/&gt; 39044: (0.272851%)&lt;BR/&gt; 39227: (0.204638%)&lt;BR/&gt; 39226: (0.204638%)&gt;];
}
380--1505[label="1;1pkt 1fpkt"];
380--1953[label="1;1pkt 1fpkt"];
380--5012[label="1;1pkt 1fpkt"];
696--697[label="0.666667;2pkt 2fpkt"];
696--1392[label="0.4;8pkt 8fpkt"];
696--3017[label="0.666667;2pkt 2fpkt"];
696--4102[label="0.2;4pkt 4fpkt"];
696--4294[label="0.05;1pkt 1fpkt"];
696--4512[label="0.2;4pkt 4fpkt"];
696--5008[label="1;2pkt 2fpkt"];
696--5118[label="0.4;8pkt 8fpkt"];
696--6108[label="0.2;4pkt 4fpkt"];
696--6236[label="0.05;1pkt 1fpkt"];
696--6382[label="0.2;4pkt 4fpkt"];
696--6713[label="0.666667;2pkt 2fpkt"];
696--6777[label="0.4;8pkt 8fpkt"];
696--7491[label="0.05;1pkt 1fpkt"];
696--7794[label="0.666667;2pkt 2fpkt"];
696--7837[label="0.4;8pkt 8fpkt"];
1392--1505[label="0.0674157;6pkt 6fpkt"];
1392--2145[label="0.0116279;1pkt 1fpkt"];
1392--2482[label="0.0337079;3pkt 3fpkt"];
1392--2679[label="0.123596;11pkt 11fpkt"];
1392--2740[label="0.505618;45pkt 45fpkt"];
1392--3075[label="0.0116279;1pkt 1fpkt"];
1392--3154[label="0.505618;45pkt 45fpkt"];
1392--5118[label="0.988764;88pkt 88fpkt"];
1392--6777[label="1;89pkt 89fpkt"];
1392--7837[label="0.988764;88pkt 88fpkt"];
1953--5012[label="1;17pkt 17fpkt"];
2381--3797[label="0.538462;7pkt 7fpkt"];
2381--3814[label="0.9375;15pkt 15fpkt"];
2381--5915[label="0.538462;7pkt 7fpkt"];
2381--5928[label="0.933333;14pkt 14fpkt"];
2381--7289[label="0.5;7pkt 7fpkt"];
2381--7300[label="0.933333;14pkt 14fpkt"];
3351--5629[label="1;14pkt 14fpkt"];
4054--6081[label="1;7pkt 7fpkt"];
4054--7397[label="1;7pkt 7fpkt"];
4294--6236[label="1;171pkt 171fpkt"];
4294--7491[label="1;171pkt 171fpkt"];
4940--6668[label="1;7pkt 7fpkt"];
4940--7764[label="1;7pkt 7fpkt"];
6081--7397[label="1;8pkt 8fpkt"];
6236--7491[label="1;171pkt 171fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.65.213.104"/>
      <filter src_ip="38.96.129.201" src_port="80"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="138.177.139.204"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="92.255.211.207"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669785" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.133.179.210"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669441" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="64.210.53.211"/>
    </slice>
    <from sec="1039669202" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.119.141.212"/>
    </slice>
    <from sec="1039669205" usec="0"/>
    <to sec="1039669923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.30.250.214"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.150.6.215"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="64.162.160.218"/>
    </slice>
    <from sec="1039669207" usec="0"/>
    <to sec="1039669928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="64.4.33.219"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="61.137.97.225"/>
    </slice>
    <from sec="1039669690" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="61.200.216.229"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.100.163.237"/>
    </slice>
    <from sec="1039669767" usec="0"/>
    <to sec="1039669819" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806751,1.8828,999,0 0 0 1 0 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_1820{
style=filled;
color=gray75;
2046[label="215.90.75.185;d;2pkt 2fpkt", shape=diamond, color=yellow];
7979[label="222.85.164.242;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1820[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.115.72.45:6699, 215.90.75.185:4878}[50%]&lt;BR/&gt;{222.85.164.242:8888, 215.90.75.185:4880}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (33.3333%)&lt;BR/&gt; 4880: (33.3333%)&lt;BR/&gt; 6699: (16.6667%)&lt;BR/&gt; 4878: (16.6667%)&gt;];
}
2046--7979[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.90.75.185" dst_port="4880" src_ip="222.85.164.242" src_port="8888"/>
      <filter dst_ip="215.90.75.185" dst_port="4878" src_ip="37.115.72.45" src_port="6699"/>
    </slice>
    <from sec="1039669200" usec="0"/>
    <to sec="1039669907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.213.194.243"/>
    </slice>
    <from sec="1039669285" usec="0"/>
    <to sec="1039669317" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="162.122.195.248"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="98.168.90.249"/>
    </slice>
    <from sec="1039669928" usec="0"/>
    <to sec="1039669929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698829,1.90632,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="223.244.137.250"/>
    </slice>
    <from sec="1039669371" usec="0"/>
    <to sec="1039669772" usec="0"/>
  </anomaly>

</admd:annotation>
