<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="0.604013,1.67707,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="199.104.100.111" proto="icmp" src_ip="199.31.206.51"/>
      <filter dst_ip="199.104.100.111" src_ip="199.31.206.51"/>
      <from sec="1054876205" usec="0"/>
      <to sec="1054876500" usec="0"/>
    </slice>
    <from sec="1054876205" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="200.88.66.65" dst_port="1434" proto="tcp" src_ip="176.107.15.55" src_port="1039"/>
      <filter dst_ip="200.88.66.65" dst_port="1434" proto="udp" src_ip="176.107.15.55" src_port="1039"/>
      <filter dst_ip="200.88.66.65" dst_port="80" proto="tcp" src_ip="176.107.15.55" src_port="1039"/>
      <filter dst_ip="200.88.66.65" dst_port="80" proto="udp" src_ip="176.107.15.55" src_port="1039"/>
      <filter dst_ip="200.88.66.65" dst_port="137" proto="tcp" src_ip="176.107.15.55" src_port="1039"/>
      <filter dst_ip="200.88.66.65" dst_port="137" proto="udp" src_ip="176.107.15.55" src_port="1039"/>
      <filter dst_ip="200.88.66.65" dst_port="1434" proto="tcp" src_ip="176.107.15.55" src_port="1030"/>
      <filter dst_ip="200.88.66.65" dst_port="1434" proto="udp" src_ip="176.107.15.55" src_port="1030"/>
      <filter dst_ip="200.88.66.65" dst_port="80" proto="tcp" src_ip="176.107.15.55" src_port="1030"/>
      <filter dst_ip="200.88.66.65" dst_port="80" proto="udp" src_ip="176.107.15.55" src_port="1030"/>
      <filter dst_ip="200.88.66.65" dst_port="137" proto="tcp" src_ip="176.107.15.55" src_port="1030"/>
      <filter dst_ip="200.88.66.65" dst_port="137" proto="udp" src_ip="176.107.15.55" src_port="1030"/>
      <from sec="1054876272" usec="0"/>
      <to sec="1054876297" usec="0"/>
    </slice>
    <from sec="1054876272" usec="0"/>
    <to sec="1054876297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="169.189.227.252" dst_port="137" proto="tcp" src_ip="84.22.86.55" src_port="1026"/>
      <filter dst_ip="169.189.227.252" dst_port="137" proto="udp" src_ip="84.22.86.55" src_port="1026"/>
      <filter dst_ip="169.189.227.252" dst_port="137" proto="tcp" src_ip="84.22.86.55" src_port="80"/>
      <filter dst_ip="169.189.227.252" dst_port="137" proto="udp" src_ip="84.22.86.55" src_port="80"/>
      <from sec="1054875823" usec="0"/>
      <to sec="1054875845" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="169.189.227.252" dst_port="137" proto="tcp" src_ip="210.6.154.55" src_port="1026"/>
      <filter dst_ip="169.189.227.252" dst_port="137" proto="udp" src_ip="210.6.154.55" src_port="1026"/>
      <filter dst_ip="169.189.227.252" dst_port="137" proto="tcp" src_ip="210.6.154.55" src_port="80"/>
      <filter dst_ip="169.189.227.252" dst_port="137" proto="udp" src_ip="210.6.154.55" src_port="80"/>
      <from sec="1054875822" usec="0"/>
      <to sec="1054875845" usec="0"/>
    </slice>
    <from sec="1054875822" usec="0"/>
    <to sec="1054875845" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="1433" proto="tcp" src_ip="51.94.146.71" src_port="80"/>
      <filter dst_port="1433" proto="udp" src_ip="51.94.146.71" src_port="80"/>
      <filter dst_port="1434" proto="tcp" src_ip="51.94.146.71" src_port="80"/>
      <filter dst_port="1434" proto="udp" src_ip="51.94.146.71" src_port="80"/>
      <from sec="1054875601" usec="0"/>
      <to sec="1054876485" usec="0"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054876485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="175.85.61.8" dst_port="80" proto="tcp" src_ip="51.33.0.72"/>
      <filter dst_ip="175.85.61.8" dst_port="80" proto="udp" src_ip="51.33.0.72"/>
      <filter dst_ip="175.85.61.8" dst_port="139" proto="tcp" src_ip="51.33.0.72"/>
      <filter dst_ip="175.85.61.8" dst_port="139" proto="udp" src_ip="51.33.0.72"/>
      <filter dst_ip="175.85.61.8" dst_port="137" proto="tcp" src_ip="51.33.0.72"/>
      <filter dst_ip="175.85.61.8" dst_port="137" proto="udp" src_ip="51.33.0.72"/>
      <from sec="1054875742" usec="0"/>
      <to sec="1054876109" usec="0"/>
    </slice>
    <from sec="1054875742" usec="0"/>
    <to sec="1054876109" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="1434" proto="tcp" src_ip="217.37.140.91" src_port="80"/>
      <filter dst_port="1434" proto="udp" src_ip="217.37.140.91" src_port="80"/>
      <from sec="1054875616" usec="0"/>
      <to sec="1054876214" usec="0"/>
    </slice>
    <from sec="1054875616" usec="0"/>
    <to sec="1054876214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="176.107.25.39" dst_port="139" proto="tcp" src_ip="199.196.0.136" src_port="80"/>
      <from sec="1054875717" usec="0"/>
      <to sec="1054875742" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="176.107.25.39" dst_port="139" proto="tcp" src_ip="50.164.196.136" src_port="80"/>
      <from sec="1054875721" usec="0"/>
      <to sec="1054875742" usec="0"/>
    </slice>
    <from sec="1054875717" usec="0"/>
    <to sec="1054875742" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="198.160.56.163" dst_port="4422" proto="tcp" src_ip="192.42.4.169" src_port="1863"/>
      <filter dst_ip="198.160.56.163" dst_port="4422" proto="udp" src_ip="192.42.4.169" src_port="1863"/>
      <filter dst_ip="198.160.56.163" dst_port="137" proto="tcp" src_ip="192.42.4.169" src_port="1863"/>
      <filter dst_ip="198.160.56.163" dst_port="137" proto="udp" src_ip="192.42.4.169" src_port="1863"/>
      <filter dst_ip="198.160.56.163" dst_port="4422" proto="tcp" src_ip="192.42.4.169" src_port="1029"/>
      <filter dst_ip="198.160.56.163" dst_port="4422" proto="udp" src_ip="192.42.4.169" src_port="1029"/>
      <filter dst_ip="198.160.56.163" dst_port="137" proto="tcp" src_ip="192.42.4.169" src_port="1029"/>
      <filter dst_ip="198.160.56.163" dst_port="137" proto="udp" src_ip="192.42.4.169" src_port="1029"/>
      <from sec="1054876444" usec="0"/>
      <to sec="1054876447" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="198.160.56.163" dst_port="4422" proto="tcp" src_ip="198.36.108.169" src_port="1863"/>
      <filter dst_ip="198.160.56.163" dst_port="4422" proto="udp" src_ip="198.36.108.169" src_port="1863"/>
      <filter dst_ip="198.160.56.163" dst_port="137" proto="tcp" src_ip="198.36.108.169" src_port="1863"/>
      <filter dst_ip="198.160.56.163" dst_port="137" proto="udp" src_ip="198.36.108.169" src_port="1863"/>
      <filter dst_ip="198.160.56.163" dst_port="4422" proto="tcp" src_ip="198.36.108.169" src_port="1029"/>
      <filter dst_ip="198.160.56.163" dst_port="4422" proto="udp" src_ip="198.36.108.169" src_port="1029"/>
      <filter dst_ip="198.160.56.163" dst_port="137" proto="tcp" src_ip="198.36.108.169" src_port="1029"/>
      <filter dst_ip="198.160.56.163" dst_port="137" proto="udp" src_ip="198.36.108.169" src_port="1029"/>
      <from sec="1054876444" usec="0"/>
      <to sec="1054876450" usec="0"/>
    </slice>
    <from sec="1054876444" usec="0"/>
    <to sec="1054876450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="176.107.107.170" dst_port="46971" proto="tcp" src_ip="163.182.235.197" src_port="80"/>
      <filter dst_ip="176.107.107.170" dst_port="46964" proto="tcp" src_ip="163.182.235.197" src_port="80"/>
      <from sec="1054875635" usec="0"/>
      <to sec="1054876202" usec="0"/>
    </slice>
    <from sec="1054875635" usec="0"/>
    <to sec="1054876204" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="175.84.22.5" dst_port="1434" proto="tcp" src_ip="51.158.69.200" src_port="80"/>
      <filter dst_ip="175.84.22.5" dst_port="1434" proto="udp" src_ip="51.158.69.200" src_port="80"/>
      <filter dst_ip="175.84.22.5" dst_port="1434" proto="tcp" src_ip="51.158.69.200" src_port="80"/>
      <filter dst_ip="175.84.22.5" dst_port="1434" proto="udp" src_ip="51.158.69.200" src_port="80"/>
      <filter dst_ip="175.84.22.5" dst_port="1434" proto="tcp" src_ip="51.158.69.200" src_port="80"/>
      <filter dst_ip="175.84.22.5" dst_port="1434" proto="udp" src_ip="51.158.69.200" src_port="80"/>
      <filter dst_ip="175.84.22.5" dst_port="1434" proto="tcp" src_ip="51.158.69.200" src_port="80"/>
      <filter dst_ip="175.84.22.5" dst_port="1434" proto="udp" src_ip="51.158.69.200" src_port="80"/>
      <filter dst_ip="175.84.22.5" dst_port="1434" proto="tcp" src_ip="51.158.69.200" src_port="1033"/>
      <filter dst_ip="175.84.22.5" dst_port="1434" proto="udp" src_ip="51.158.69.200" src_port="1033"/>
      <filter dst_ip="175.84.22.5" dst_port="1434" proto="tcp" src_ip="51.158.69.200" src_port="1033"/>
      <filter dst_ip="175.84.22.5" dst_port="1434" proto="udp" src_ip="51.158.69.200" src_port="1033"/>
      <filter dst_ip="175.84.22.5" dst_port="1434" proto="tcp" src_ip="51.158.69.200" src_port="1033"/>
      <filter dst_ip="175.84.22.5" dst_port="1434" proto="udp" src_ip="51.158.69.200" src_port="1033"/>
      <filter dst_ip="175.84.22.5" dst_port="1434" proto="tcp" src_ip="51.158.69.200" src_port="1033"/>
      <filter dst_ip="175.84.22.5" dst_port="1434" proto="udp" src_ip="51.158.69.200" src_port="1033"/>
      <from sec="1054875610" usec="0"/>
      <to sec="1054875620" usec="0"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054875620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="175.84.17.103" dst_port="1434" proto="tcp" src_ip="51.158.64.202" src_port="80"/>
      <filter dst_ip="175.84.17.103" dst_port="1434" proto="udp" src_ip="51.158.64.202" src_port="80"/>
      <filter dst_ip="175.84.17.103" dst_port="1434" proto="tcp" src_ip="51.158.64.202" src_port="80"/>
      <filter dst_ip="175.84.17.103" dst_port="1434" proto="udp" src_ip="51.158.64.202" src_port="80"/>
      <filter dst_ip="175.84.17.103" dst_port="1434" proto="tcp" src_ip="51.158.64.202" src_port="80"/>
      <filter dst_ip="175.84.17.103" dst_port="1434" proto="udp" src_ip="51.158.64.202" src_port="80"/>
      <filter dst_ip="175.84.17.103" dst_port="1434" proto="tcp" src_ip="51.158.64.202" src_port="80"/>
      <filter dst_ip="175.84.17.103" dst_port="1434" proto="udp" src_ip="51.158.64.202" src_port="80"/>
      <from sec="1054876326" usec="0"/>
      <to sec="1054876345" usec="0"/>
    </slice>
    <from sec="1054876326" usec="0"/>
    <to sec="1054876345" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="199.174.147.170" dst_port="137" proto="tcp" src_ip="210.157.78.121" src_port="80"/>
      <filter dst_ip="199.174.147.170" dst_port="137" proto="udp" src_ip="210.157.78.121" src_port="80"/>
      <filter dst_ip="199.174.147.170" dst_port="137" proto="tcp" src_ip="210.157.78.121" src_port="1476"/>
      <filter dst_ip="199.174.147.170" dst_port="137" proto="udp" src_ip="210.157.78.121" src_port="1476"/>
      <filter dst_ip="169.189.243.140" dst_port="137" proto="tcp" src_ip="210.157.78.121" src_port="80"/>
      <filter dst_ip="169.189.243.140" dst_port="137" proto="udp" src_ip="210.157.78.121" src_port="80"/>
      <filter dst_ip="169.189.243.140" dst_port="137" proto="tcp" src_ip="210.157.78.121" src_port="1476"/>
      <filter dst_ip="169.189.243.140" dst_port="137" proto="udp" src_ip="210.157.78.121" src_port="1476"/>
      <from sec="1054875929" usec="0"/>
      <to sec="1054876195" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="199.174.147.170" dst_port="137" proto="tcp" src_ip="36.193.10.121" src_port="80"/>
      <filter dst_ip="199.174.147.170" dst_port="137" proto="udp" src_ip="36.193.10.121" src_port="80"/>
      <filter dst_ip="199.174.147.170" dst_port="137" proto="tcp" src_ip="36.193.10.121" src_port="1476"/>
      <filter dst_ip="199.174.147.170" dst_port="137" proto="udp" src_ip="36.193.10.121" src_port="1476"/>
      <filter dst_ip="169.189.243.140" dst_port="137" proto="tcp" src_ip="36.193.10.121" src_port="80"/>
      <filter dst_ip="169.189.243.140" dst_port="137" proto="udp" src_ip="36.193.10.121" src_port="80"/>
      <filter dst_ip="169.189.243.140" dst_port="137" proto="tcp" src_ip="36.193.10.121" src_port="1476"/>
      <filter dst_ip="169.189.243.140" dst_port="137" proto="udp" src_ip="36.193.10.121" src_port="1476"/>
      <from sec="1054876159" usec="0"/>
      <to sec="1054876166" usec="0"/>
    </slice>
    <from sec="1054875929" usec="0"/>
    <to sec="1054876195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="139" proto="tcp" src_ip="51.35.128.193" src_port="80"/>
      <from sec="1054875868" usec="0"/>
      <to sec="1054875906" usec="0"/>
    </slice>
    <from sec="1054875868" usec="0"/>
    <to sec="1054875906" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="198.7.36.0" src_port="63962"/>
      <filter dst_port="137" proto="udp" src_ip="198.7.36.0" src_port="63962"/>
      <filter dst_port="80" proto="tcp" src_ip="198.7.36.0" src_port="63962"/>
      <filter dst_port="80" proto="udp" src_ip="198.7.36.0" src_port="63962"/>
      <from sec="1054876270" usec="0"/>
      <to sec="1054876279" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="208.88.68.0" src_port="63962"/>
      <filter dst_port="137" proto="udp" src_ip="208.88.68.0" src_port="63962"/>
      <filter dst_port="80" proto="tcp" src_ip="208.88.68.0" src_port="63962"/>
      <filter dst_port="80" proto="udp" src_ip="208.88.68.0" src_port="63962"/>
      <from sec="1054876270" usec="0"/>
      <to sec="1054876279" usec="0"/>
    </slice>
    <from sec="1054876270" usec="0"/>
    <to sec="1054876279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="142.202.2.3" src_port="1028"/>
      <from sec="1054875967" usec="0"/>
      <to sec="1054875974" usec="0"/>
    </slice>
    <from sec="1054875967" usec="0"/>
    <to sec="1054875975" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="84.169.230.7" src_port="1026"/>
      <from sec="1054876338" usec="0"/>
      <to sec="1054876345" usec="0"/>
    </slice>
    <from sec="1054876338" usec="0"/>
    <to sec="1054876345" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="134.66.64.49" dst_port="137" proto="tcp" src_ip="160.59.168.22" src_port="1029"/>
      <filter dst_ip="134.66.64.49" dst_port="137" proto="udp" src_ip="160.59.168.22" src_port="1029"/>
      <filter dst_ip="134.66.64.49" dst_port="3714" proto="tcp" src_ip="160.59.168.22" src_port="1029"/>
      <filter dst_ip="134.66.64.49" dst_port="3714" proto="udp" src_ip="160.59.168.22" src_port="1029"/>
      <filter dst_ip="134.66.64.49" dst_port="137" proto="tcp" src_ip="160.59.168.22" src_port="1863"/>
      <filter dst_ip="134.66.64.49" dst_port="137" proto="udp" src_ip="160.59.168.22" src_port="1863"/>
      <filter dst_ip="134.66.64.49" dst_port="3714" proto="tcp" src_ip="160.59.168.22" src_port="1863"/>
      <filter dst_ip="134.66.64.49" dst_port="3714" proto="udp" src_ip="160.59.168.22" src_port="1863"/>
      <filter dst_ip="134.66.64.49" dst_port="137" proto="tcp" src_ip="160.59.168.22" src_port="80"/>
      <filter dst_ip="134.66.64.49" dst_port="137" proto="udp" src_ip="160.59.168.22" src_port="80"/>
      <filter dst_ip="134.66.64.49" dst_port="3714" proto="tcp" src_ip="160.59.168.22" src_port="80"/>
      <filter dst_ip="134.66.64.49" dst_port="3714" proto="udp" src_ip="160.59.168.22" src_port="80"/>
      <from sec="1054876167" usec="0"/>
      <to sec="1054876174" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="134.66.64.49" dst_port="137" proto="tcp" src_ip="192.42.4.22" src_port="1029"/>
      <filter dst_ip="134.66.64.49" dst_port="137" proto="udp" src_ip="192.42.4.22" src_port="1029"/>
      <filter dst_ip="134.66.64.49" dst_port="3714" proto="tcp" src_ip="192.42.4.22" src_port="1029"/>
      <filter dst_ip="134.66.64.49" dst_port="3714" proto="udp" src_ip="192.42.4.22" src_port="1029"/>
      <filter dst_ip="134.66.64.49" dst_port="137" proto="tcp" src_ip="192.42.4.22" src_port="1863"/>
      <filter dst_ip="134.66.64.49" dst_port="137" proto="udp" src_ip="192.42.4.22" src_port="1863"/>
      <filter dst_ip="134.66.64.49" dst_port="3714" proto="tcp" src_ip="192.42.4.22" src_port="1863"/>
      <filter dst_ip="134.66.64.49" dst_port="3714" proto="udp" src_ip="192.42.4.22" src_port="1863"/>
      <filter dst_ip="134.66.64.49" dst_port="137" proto="tcp" src_ip="192.42.4.22" src_port="80"/>
      <filter dst_ip="134.66.64.49" dst_port="137" proto="udp" src_ip="192.42.4.22" src_port="80"/>
      <filter dst_ip="134.66.64.49" dst_port="3714" proto="tcp" src_ip="192.42.4.22" src_port="80"/>
      <filter dst_ip="134.66.64.49" dst_port="3714" proto="udp" src_ip="192.42.4.22" src_port="80"/>
      <from sec="1054876166" usec="0"/>
      <to sec="1054876172" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="134.66.64.49" dst_port="137" proto="tcp" src_ip="50.85.180.22" src_port="1029"/>
      <filter dst_ip="134.66.64.49" dst_port="137" proto="udp" src_ip="50.85.180.22" src_port="1029"/>
      <filter dst_ip="134.66.64.49" dst_port="3714" proto="tcp" src_ip="50.85.180.22" src_port="1029"/>
      <filter dst_ip="134.66.64.49" dst_port="3714" proto="udp" src_ip="50.85.180.22" src_port="1029"/>
      <filter dst_ip="134.66.64.49" dst_port="137" proto="tcp" src_ip="50.85.180.22" src_port="1863"/>
      <filter dst_ip="134.66.64.49" dst_port="137" proto="udp" src_ip="50.85.180.22" src_port="1863"/>
      <filter dst_ip="134.66.64.49" dst_port="3714" proto="tcp" src_ip="50.85.180.22" src_port="1863"/>
      <filter dst_ip="134.66.64.49" dst_port="3714" proto="udp" src_ip="50.85.180.22" src_port="1863"/>
      <filter dst_ip="134.66.64.49" dst_port="137" proto="tcp" src_ip="50.85.180.22" src_port="80"/>
      <filter dst_ip="134.66.64.49" dst_port="137" proto="udp" src_ip="50.85.180.22" src_port="80"/>
      <filter dst_ip="134.66.64.49" dst_port="3714" proto="tcp" src_ip="50.85.180.22" src_port="80"/>
      <filter dst_ip="134.66.64.49" dst_port="3714" proto="udp" src_ip="50.85.180.22" src_port="80"/>
      <from sec="1054876168" usec="0"/>
      <to sec="1054876170" usec="0"/>
    </slice>
    <from sec="1054876166" usec="0"/>
    <to sec="1054876174" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="198.160.55.175" dst_port="137" proto="tcp" src_ip="221.9.10.29" src_port="1025"/>
      <filter dst_ip="198.160.55.175" dst_port="137" proto="udp" src_ip="221.9.10.29" src_port="1025"/>
      <filter dst_ip="198.160.55.175" dst_port="137" proto="tcp" src_ip="221.9.10.29" src_port="80"/>
      <filter dst_ip="198.160.55.175" dst_port="137" proto="udp" src_ip="221.9.10.29" src_port="80"/>
      <from sec="1054876397" usec="0"/>
      <to sec="1054876406" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="198.160.55.175" dst_port="137" proto="tcp" src_ip="221.150.150.29" src_port="1025"/>
      <filter dst_ip="198.160.55.175" dst_port="137" proto="udp" src_ip="221.150.150.29" src_port="1025"/>
      <filter dst_ip="198.160.55.175" dst_port="137" proto="tcp" src_ip="221.150.150.29" src_port="80"/>
      <filter dst_ip="198.160.55.175" dst_port="137" proto="udp" src_ip="221.150.150.29" src_port="80"/>
      <from sec="1054876398" usec="0"/>
      <to sec="1054876400" usec="0"/>
    </slice>
    <from sec="1054876397" usec="0"/>
    <to sec="1054876406" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="177.141.23.30" src_port="1026"/>
      <from sec="1054875764" usec="0"/>
      <to sec="1054875771" usec="0"/>
    </slice>
    <from sec="1054875764" usec="0"/>
    <to sec="1054875771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="36.85.89.33" src_port="10007"/>
      <filter dst_port="137" proto="udp" src_ip="36.85.89.33" src_port="10007"/>
      <filter dst_port="137" proto="tcp" src_ip="36.85.89.33" src_port="80"/>
      <filter dst_port="137" proto="udp" src_ip="36.85.89.33" src_port="80"/>
      <from sec="1054876026" usec="0"/>
      <to sec="1054876054" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="192.77.37.33" src_port="10007"/>
      <filter dst_port="137" proto="udp" src_ip="192.77.37.33" src_port="10007"/>
      <filter dst_port="137" proto="tcp" src_ip="192.77.37.33" src_port="80"/>
      <filter dst_port="137" proto="udp" src_ip="192.77.37.33" src_port="80"/>
      <from sec="1054876032" usec="0"/>
      <to sec="1054876046" usec="0"/>
    </slice>
    <from sec="1054876026" usec="0"/>
    <to sec="1054876054" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="199.200.8.35" src_port="15776"/>
      <from sec="1054875897" usec="0"/>
      <to sec="1054875928" usec="0"/>
    </slice>
    <from sec="1054875897" usec="0"/>
    <to sec="1054875929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="175.84.193.232" dst_port="137" proto="tcp" src_ip="37.227.98.37" src_port="1025"/>
      <filter dst_ip="175.84.193.232" dst_port="137" proto="udp" src_ip="37.227.98.37" src_port="1025"/>
      <filter dst_ip="175.84.193.232" dst_port="137" proto="tcp" src_ip="37.227.98.37" src_port="80"/>
      <filter dst_ip="175.84.193.232" dst_port="137" proto="udp" src_ip="37.227.98.37" src_port="80"/>
      <from sec="1054876056" usec="0"/>
      <to sec="1054876062" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="175.84.193.232" dst_port="137" proto="tcp" src_ip="192.182.118.45" src_port="1025"/>
      <filter dst_ip="175.84.193.232" dst_port="137" proto="udp" src_ip="192.182.118.45" src_port="1025"/>
      <filter dst_ip="175.84.193.232" dst_port="137" proto="tcp" src_ip="192.182.118.45" src_port="80"/>
      <filter dst_ip="175.84.193.232" dst_port="137" proto="udp" src_ip="192.182.118.45" src_port="80"/>
      <from sec="1054876056" usec="0"/>
      <to sec="1054876060" usec="0"/>
    </slice>
    <from sec="1054876056" usec="0"/>
    <to sec="1054876062" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="48.134.66.43" src_port="1032"/>
      <filter dst_port="137" proto="udp" src_ip="48.134.66.43" src_port="1032"/>
      <from sec="1054875844" usec="0"/>
      <to sec="1054875853" usec="0"/>
    </slice>
    <from sec="1054875844" usec="0"/>
    <to sec="1054875853" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="199.200.8.45" src_port="56674"/>
      <from sec="1054876366" usec="0"/>
      <to sec="1054876390" usec="0"/>
    </slice>
    <from sec="1054876366" usec="0"/>
    <to sec="1054876390" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="218.213.32.46" src_port="1025"/>
      <from sec="1054875742" usec="0"/>
      <to sec="1054875749" usec="0"/>
    </slice>
    <from sec="1054875742" usec="0"/>
    <to sec="1054875749" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="198.128.180.150" dst_port="137" proto="udp" src_ip="49.39.131.47" src_port="32830"/>
      <filter dst_ip="198.128.180.150" dst_port="53" proto="udp" src_ip="49.39.131.47" src_port="32830"/>
      <from sec="1054875891" usec="0"/>
      <to sec="1054875906" usec="0"/>
    </slice>
    <from sec="1054875891" usec="0"/>
    <to sec="1054875909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="84.14.130.50" src_port="1027"/>
      <from sec="1054876127" usec="0"/>
      <to sec="1054876134" usec="0"/>
    </slice>
    <from sec="1054876127" usec="0"/>
    <to sec="1054876134" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="84.132.9.53" src_port="1031"/>
      <filter dst_port="137" proto="udp" src_ip="84.132.9.53" src_port="1031"/>
      <from sec="1054875988" usec="0"/>
      <to sec="1054876001" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="84.146.53.53" src_port="1031"/>
      <filter dst_port="137" proto="udp" src_ip="84.146.53.53" src_port="1031"/>
      <from sec="1054875989" usec="0"/>
      <to sec="1054875996" usec="0"/>
    </slice>
    <from sec="1054875988" usec="0"/>
    <to sec="1054876001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="208.41.137.60" src_port="1025"/>
      <filter dst_port="137" proto="udp" src_ip="208.41.137.60" src_port="1025"/>
      <filter dst_port="137" proto="tcp" src_ip="208.41.137.60" src_port="80"/>
      <filter dst_port="137" proto="udp" src_ip="208.41.137.60" src_port="80"/>
      <from sec="1054876072" usec="0"/>
      <to sec="1054876079" usec="0"/>
    </slice>
    <from sec="1054876072" usec="0"/>
    <to sec="1054876079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="84.19.91.62" src_port="1027"/>
      <filter dst_port="137" proto="udp" src_ip="84.19.91.62" src_port="1027"/>
      <from sec="1054875929" usec="0"/>
      <to sec="1054875937" usec="0"/>
    </slice>
    <from sec="1054875929" usec="0"/>
    <to sec="1054875937" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="84.75.152.65" src_port="1028"/>
      <filter dst_port="137" proto="udp" src_ip="84.75.152.65" src_port="1028"/>
      <filter dst_port="80" proto="tcp" src_ip="84.75.152.65" src_port="1028"/>
      <filter dst_port="80" proto="udp" src_ip="84.75.152.65" src_port="1028"/>
      <from sec="1054876011" usec="0"/>
      <to sec="1054876042" usec="0"/>
    </slice>
    <from sec="1054876011" usec="0"/>
    <to sec="1054876042" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="208.48.97.69" src_port="1027"/>
      <from sec="1054876366" usec="0"/>
      <to sec="1054876375" usec="0"/>
    </slice>
    <from sec="1054876366" usec="0"/>
    <to sec="1054876375" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="211.255.92.73" src_port="1029"/>
      <from sec="1054876151" usec="0"/>
      <to sec="1054876159" usec="0"/>
    </slice>
    <from sec="1054876151" usec="0"/>
    <to sec="1054876159" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="86.44.139.78" src_port="21921"/>
      <from sec="1054875822" usec="0"/>
      <to sec="1054875831" usec="0"/>
    </slice>
    <from sec="1054875822" usec="0"/>
    <to sec="1054875831" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="169.189.143.94" dst_port="137" proto="tcp" src_ip="52.94.42.79" src_port="1025"/>
      <filter dst_ip="169.189.143.94" dst_port="137" proto="udp" src_ip="52.94.42.79" src_port="1025"/>
      <from sec="1054876203" usec="0"/>
      <to sec="1054876229" usec="0"/>
    </slice>
    <from sec="1054876203" usec="0"/>
    <to sec="1054876229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="208.48.34.82" src_port="43282"/>
      <filter dst_port="137" proto="udp" src_ip="208.48.34.82" src_port="43282"/>
      <filter dst_port="137" proto="tcp" src_ip="208.48.34.82" src_port="43281"/>
      <filter dst_port="137" proto="udp" src_ip="208.48.34.82" src_port="43281"/>
      <filter dst_port="137" proto="tcp" src_ip="208.48.34.82" src_port="43286"/>
      <filter dst_port="137" proto="udp" src_ip="208.48.34.82" src_port="43286"/>
      <filter dst_port="137" proto="tcp" src_ip="208.48.34.82" src_port="80"/>
      <filter dst_port="137" proto="udp" src_ip="208.48.34.82" src_port="80"/>
      <filter dst_port="137" proto="tcp" src_ip="208.48.34.82" src_port="43283"/>
      <filter dst_port="137" proto="udp" src_ip="208.48.34.82" src_port="43283"/>
      <from sec="1054876405" usec="0"/>
      <to sec="1054876427" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="51.158.106.82" src_port="43282"/>
      <filter dst_port="137" proto="udp" src_ip="51.158.106.82" src_port="43282"/>
      <filter dst_port="137" proto="tcp" src_ip="51.158.106.82" src_port="43281"/>
      <filter dst_port="137" proto="udp" src_ip="51.158.106.82" src_port="43281"/>
      <filter dst_port="137" proto="tcp" src_ip="51.158.106.82" src_port="43286"/>
      <filter dst_port="137" proto="udp" src_ip="51.158.106.82" src_port="43286"/>
      <filter dst_port="137" proto="tcp" src_ip="51.158.106.82" src_port="80"/>
      <filter dst_port="137" proto="udp" src_ip="51.158.106.82" src_port="80"/>
      <filter dst_port="137" proto="tcp" src_ip="51.158.106.82" src_port="43283"/>
      <filter dst_port="137" proto="udp" src_ip="51.158.106.82" src_port="43283"/>
      <from sec="1054876409" usec="0"/>
      <to sec="1054876429" usec="0"/>
    </slice>
    <from sec="1054876405" usec="0"/>
    <to sec="1054876429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="87.34.203.84" src_port="1025"/>
      <from sec="1054876064" usec="0"/>
      <to sec="1054876073" usec="0"/>
    </slice>
    <from sec="1054876064" usec="0"/>
    <to sec="1054876073" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="175.85.122.37" dst_port="137" proto="tcp" src_ip="50.7.166.86" src_port="63698"/>
      <filter dst_ip="175.85.122.37" dst_port="137" proto="udp" src_ip="50.7.166.86" src_port="63698"/>
      <filter dst_ip="175.85.122.37" dst_port="137" proto="tcp" src_ip="50.7.166.86" src_port="80"/>
      <filter dst_ip="175.85.122.37" dst_port="137" proto="udp" src_ip="50.7.166.86" src_port="80"/>
      <from sec="1054876305" usec="0"/>
      <to sec="1054876321" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="175.85.122.37" dst_port="137" proto="tcp" src_ip="165.139.6.86" src_port="63698"/>
      <filter dst_ip="175.85.122.37" dst_port="137" proto="udp" src_ip="165.139.6.86" src_port="63698"/>
      <filter dst_ip="175.85.122.37" dst_port="137" proto="tcp" src_ip="165.139.6.86" src_port="80"/>
      <filter dst_ip="175.85.122.37" dst_port="137" proto="udp" src_ip="165.139.6.86" src_port="80"/>
      <from sec="1054876309" usec="0"/>
      <to sec="1054876320" usec="0"/>
    </slice>
    <from sec="1054876305" usec="0"/>
    <to sec="1054876321" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="84.29.119.89" src_port="1025"/>
      <from sec="1054876114" usec="0"/>
      <to sec="1054876127" usec="0"/>
    </slice>
    <from sec="1054876114" usec="0"/>
    <to sec="1054876127" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="84.105.195.89" src_port="1026"/>
      <from sec="1054876095" usec="0"/>
      <to sec="1054876101" usec="0"/>
    </slice>
    <from sec="1054876095" usec="0"/>
    <to sec="1054876101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="209.185.141.93" src_port="60242"/>
      <from sec="1054875757" usec="0"/>
      <to sec="1054875771" usec="0"/>
    </slice>
    <from sec="1054875757" usec="0"/>
    <to sec="1054875771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="198.128.180.150" dst_port="137" proto="udp" src_ip="209.162.246.94" src_port="1110"/>
      <filter dst_ip="198.128.180.150" dst_port="53" proto="udp" src_ip="209.162.246.94" src_port="1110"/>
      <from sec="1054875995" usec="0"/>
      <to sec="1054876004" usec="0"/>
    </slice>
    <from sec="1054875995" usec="0"/>
    <to sec="1054876004" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="175.85.37.236" dst_port="137" proto="tcp" src_ip="208.72.98.96" src_port="1028"/>
      <filter dst_ip="175.85.37.236" dst_port="137" proto="udp" src_ip="208.72.98.96" src_port="1028"/>
      <filter dst_ip="175.85.37.236" dst_port="137" proto="tcp" src_ip="208.72.98.96" src_port="80"/>
      <filter dst_ip="175.85.37.236" dst_port="137" proto="udp" src_ip="208.72.98.96" src_port="80"/>
      <from sec="1054876004" usec="0"/>
      <to sec="1054876012" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="175.85.37.236" dst_port="137" proto="tcp" src_ip="211.228.250.104" src_port="1028"/>
      <filter dst_ip="175.85.37.236" dst_port="137" proto="udp" src_ip="211.228.250.104" src_port="1028"/>
      <filter dst_ip="175.85.37.236" dst_port="137" proto="tcp" src_ip="211.228.250.104" src_port="80"/>
      <filter dst_ip="175.85.37.236" dst_port="137" proto="udp" src_ip="211.228.250.104" src_port="80"/>
      <from sec="1054876009" usec="0"/>
      <to sec="1054876012" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="175.85.37.236" dst_port="137" proto="tcp" src_ip="192.42.222.96" src_port="1028"/>
      <filter dst_ip="175.85.37.236" dst_port="137" proto="udp" src_ip="192.42.222.96" src_port="1028"/>
      <filter dst_ip="175.85.37.236" dst_port="137" proto="tcp" src_ip="192.42.222.96" src_port="80"/>
      <filter dst_ip="175.85.37.236" dst_port="137" proto="udp" src_ip="192.42.222.96" src_port="80"/>
      <from sec="1054876004" usec="0"/>
      <to sec="1054876010" usec="0"/>
    </slice>
    <from sec="1054876004" usec="0"/>
    <to sec="1054876012" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="199.104.102.191" dst_port="137" proto="tcp" src_ip="84.12.170.97" src_port="29706"/>
      <filter dst_ip="199.104.102.191" dst_port="137" proto="udp" src_ip="84.12.170.97" src_port="29706"/>
      <filter dst_ip="199.104.102.191" dst_port="137" proto="tcp" src_ip="84.12.170.97" src_port="80"/>
      <filter dst_ip="199.104.102.191" dst_port="137" proto="udp" src_ip="84.12.170.97" src_port="80"/>
      <from sec="1054875764" usec="0"/>
      <to sec="1054875792" usec="0"/>
    </slice>
    <from sec="1054875764" usec="0"/>
    <to sec="1054875792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="208.67.72.99" src_port="1028"/>
      <from sec="1054875951" usec="0"/>
      <to sec="1054875959" usec="0"/>
    </slice>
    <from sec="1054875951" usec="0"/>
    <to sec="1054875959" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="191.89.198.111" src_port="1037"/>
      <from sec="1054875750" usec="0"/>
      <to sec="1054875758" usec="0"/>
    </slice>
    <from sec="1054875750" usec="0"/>
    <to sec="1054875758" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="198.4.235.112" src_port="1025"/>
      <filter dst_port="137" proto="udp" src_ip="198.4.235.112" src_port="1025"/>
      <filter dst_port="137" proto="tcp" src_ip="198.4.235.112" src_port="80"/>
      <filter dst_port="137" proto="udp" src_ip="198.4.235.112" src_port="80"/>
      <from sec="1054876312" usec="0"/>
      <to sec="1054876321" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="192.77.55.112" src_port="1025"/>
      <filter dst_port="137" proto="udp" src_ip="192.77.55.112" src_port="1025"/>
      <filter dst_port="137" proto="tcp" src_ip="192.77.55.112" src_port="80"/>
      <filter dst_port="137" proto="udp" src_ip="192.77.55.112" src_port="80"/>
      <from sec="1054876314" usec="0"/>
      <to sec="1054876321" usec="0"/>
    </slice>
    <from sec="1054876312" usec="0"/>
    <to sec="1054876321" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="169.189.243.90" dst_port="137" proto="tcp" src_ip="50.85.130.117" src_port="25"/>
      <filter dst_ip="169.189.243.90" dst_port="137" proto="udp" src_ip="50.85.130.117" src_port="25"/>
      <filter dst_ip="169.189.243.90" dst_port="44308" proto="tcp" src_ip="50.85.130.117" src_port="25"/>
      <filter dst_ip="169.189.243.90" dst_port="44308" proto="udp" src_ip="50.85.130.117" src_port="25"/>
      <filter dst_ip="169.189.243.90" dst_port="3249" proto="tcp" src_ip="50.85.130.117" src_port="25"/>
      <filter dst_ip="169.189.243.90" dst_port="3249" proto="udp" src_ip="50.85.130.117" src_port="25"/>
      <filter dst_ip="169.189.243.90" dst_port="62615" proto="tcp" src_ip="50.85.130.117" src_port="25"/>
      <filter dst_ip="169.189.243.90" dst_port="62615" proto="udp" src_ip="50.85.130.117" src_port="25"/>
      <filter dst_ip="169.189.243.90" dst_port="137" proto="tcp" src_ip="50.85.130.117" src_port="1028"/>
      <filter dst_ip="169.189.243.90" dst_port="137" proto="udp" src_ip="50.85.130.117" src_port="1028"/>
      <filter dst_ip="169.189.243.90" dst_port="44308" proto="tcp" src_ip="50.85.130.117" src_port="1028"/>
      <filter dst_ip="169.189.243.90" dst_port="44308" proto="udp" src_ip="50.85.130.117" src_port="1028"/>
      <filter dst_ip="169.189.243.90" dst_port="3249" proto="tcp" src_ip="50.85.130.117" src_port="1028"/>
      <filter dst_ip="169.189.243.90" dst_port="3249" proto="udp" src_ip="50.85.130.117" src_port="1028"/>
      <filter dst_ip="169.189.243.90" dst_port="62615" proto="tcp" src_ip="50.85.130.117" src_port="1028"/>
      <filter dst_ip="169.189.243.90" dst_port="62615" proto="udp" src_ip="50.85.130.117" src_port="1028"/>
      <filter dst_ip="129.24.69.217" dst_port="137" proto="tcp" src_ip="50.85.130.117" src_port="25"/>
      <filter dst_ip="129.24.69.217" dst_port="137" proto="udp" src_ip="50.85.130.117" src_port="25"/>
      <filter dst_ip="129.24.69.217" dst_port="44308" proto="tcp" src_ip="50.85.130.117" src_port="25"/>
      <filter dst_ip="129.24.69.217" dst_port="44308" proto="udp" src_ip="50.85.130.117" src_port="25"/>
      <filter dst_ip="129.24.69.217" dst_port="3249" proto="tcp" src_ip="50.85.130.117" src_port="25"/>
      <filter dst_ip="129.24.69.217" dst_port="3249" proto="udp" src_ip="50.85.130.117" src_port="25"/>
      <filter dst_ip="129.24.69.217" dst_port="62615" proto="tcp" src_ip="50.85.130.117" src_port="25"/>
      <filter dst_ip="129.24.69.217" dst_port="62615" proto="udp" src_ip="50.85.130.117" src_port="25"/>
      <filter dst_ip="129.24.69.217" dst_port="137" proto="tcp" src_ip="50.85.130.117" src_port="1028"/>
      <filter dst_ip="129.24.69.217" dst_port="137" proto="udp" src_ip="50.85.130.117" src_port="1028"/>
      <filter dst_ip="129.24.69.217" dst_port="44308" proto="tcp" src_ip="50.85.130.117" src_port="1028"/>
      <filter dst_ip="129.24.69.217" dst_port="44308" proto="udp" src_ip="50.85.130.117" src_port="1028"/>
      <filter dst_ip="129.24.69.217" dst_port="3249" proto="tcp" src_ip="50.85.130.117" src_port="1028"/>
      <filter dst_ip="129.24.69.217" dst_port="3249" proto="udp" src_ip="50.85.130.117" src_port="1028"/>
      <filter dst_ip="129.24.69.217" dst_port="62615" proto="tcp" src_ip="50.85.130.117" src_port="1028"/>
      <filter dst_ip="129.24.69.217" dst_port="62615" proto="udp" src_ip="50.85.130.117" src_port="1028"/>
      <filter dst_ip="169.46.2.208" dst_port="137" proto="tcp" src_ip="50.85.130.117" src_port="25"/>
      <filter dst_ip="169.46.2.208" dst_port="137" proto="udp" src_ip="50.85.130.117" src_port="25"/>
      <filter dst_ip="169.46.2.208" dst_port="44308" proto="tcp" src_ip="50.85.130.117" src_port="25"/>
      <filter dst_ip="169.46.2.208" dst_port="44308" proto="udp" src_ip="50.85.130.117" src_port="25"/>
      <filter dst_ip="169.46.2.208" dst_port="3249" proto="tcp" src_ip="50.85.130.117" src_port="25"/>
      <filter dst_ip="169.46.2.208" dst_port="3249" proto="udp" src_ip="50.85.130.117" src_port="25"/>
      <filter dst_ip="169.46.2.208" dst_port="62615" proto="tcp" src_ip="50.85.130.117" src_port="25"/>
      <filter dst_ip="169.46.2.208" dst_port="62615" proto="udp" src_ip="50.85.130.117" src_port="25"/>
      <filter dst_ip="169.46.2.208" dst_port="137" proto="tcp" src_ip="50.85.130.117" src_port="1028"/>
      <filter dst_ip="169.46.2.208" dst_port="137" proto="udp" src_ip="50.85.130.117" src_port="1028"/>
      <filter dst_ip="169.46.2.208" dst_port="44308" proto="tcp" src_ip="50.85.130.117" src_port="1028"/>
      <filter dst_ip="169.46.2.208" dst_port="44308" proto="udp" src_ip="50.85.130.117" src_port="1028"/>
      <filter dst_ip="169.46.2.208" dst_port="3249" proto="tcp" src_ip="50.85.130.117" src_port="1028"/>
      <filter dst_ip="169.46.2.208" dst_port="3249" proto="udp" src_ip="50.85.130.117" src_port="1028"/>
      <filter dst_ip="169.46.2.208" dst_port="62615" proto="tcp" src_ip="50.85.130.117" src_port="1028"/>
      <filter dst_ip="169.46.2.208" dst_port="62615" proto="udp" src_ip="50.85.130.117" src_port="1028"/>
      <from sec="1054876468" usec="0"/>
      <to sec="1054876477" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="169.189.243.90" dst_port="137" proto="tcp" src_ip="208.50.42.117" src_port="25"/>
      <filter dst_ip="169.189.243.90" dst_port="137" proto="udp" src_ip="208.50.42.117" src_port="25"/>
      <filter dst_ip="169.189.243.90" dst_port="44308" proto="tcp" src_ip="208.50.42.117" src_port="25"/>
      <filter dst_ip="169.189.243.90" dst_port="44308" proto="udp" src_ip="208.50.42.117" src_port="25"/>
      <filter dst_ip="169.189.243.90" dst_port="3249" proto="tcp" src_ip="208.50.42.117" src_port="25"/>
      <filter dst_ip="169.189.243.90" dst_port="3249" proto="udp" src_ip="208.50.42.117" src_port="25"/>
      <filter dst_ip="169.189.243.90" dst_port="62615" proto="tcp" src_ip="208.50.42.117" src_port="25"/>
      <filter dst_ip="169.189.243.90" dst_port="62615" proto="udp" src_ip="208.50.42.117" src_port="25"/>
      <filter dst_ip="169.189.243.90" dst_port="137" proto="tcp" src_ip="208.50.42.117" src_port="1028"/>
      <filter dst_ip="169.189.243.90" dst_port="137" proto="udp" src_ip="208.50.42.117" src_port="1028"/>
      <filter dst_ip="169.189.243.90" dst_port="44308" proto="tcp" src_ip="208.50.42.117" src_port="1028"/>
      <filter dst_ip="169.189.243.90" dst_port="44308" proto="udp" src_ip="208.50.42.117" src_port="1028"/>
      <filter dst_ip="169.189.243.90" dst_port="3249" proto="tcp" src_ip="208.50.42.117" src_port="1028"/>
      <filter dst_ip="169.189.243.90" dst_port="3249" proto="udp" src_ip="208.50.42.117" src_port="1028"/>
      <filter dst_ip="169.189.243.90" dst_port="62615" proto="tcp" src_ip="208.50.42.117" src_port="1028"/>
      <filter dst_ip="169.189.243.90" dst_port="62615" proto="udp" src_ip="208.50.42.117" src_port="1028"/>
      <filter dst_ip="129.24.69.217" dst_port="137" proto="tcp" src_ip="208.50.42.117" src_port="25"/>
      <filter dst_ip="129.24.69.217" dst_port="137" proto="udp" src_ip="208.50.42.117" src_port="25"/>
      <filter dst_ip="129.24.69.217" dst_port="44308" proto="tcp" src_ip="208.50.42.117" src_port="25"/>
      <filter dst_ip="129.24.69.217" dst_port="44308" proto="udp" src_ip="208.50.42.117" src_port="25"/>
      <filter dst_ip="129.24.69.217" dst_port="3249" proto="tcp" src_ip="208.50.42.117" src_port="25"/>
      <filter dst_ip="129.24.69.217" dst_port="3249" proto="udp" src_ip="208.50.42.117" src_port="25"/>
      <filter dst_ip="129.24.69.217" dst_port="62615" proto="tcp" src_ip="208.50.42.117" src_port="25"/>
      <filter dst_ip="129.24.69.217" dst_port="62615" proto="udp" src_ip="208.50.42.117" src_port="25"/>
      <filter dst_ip="129.24.69.217" dst_port="137" proto="tcp" src_ip="208.50.42.117" src_port="1028"/>
      <filter dst_ip="129.24.69.217" dst_port="137" proto="udp" src_ip="208.50.42.117" src_port="1028"/>
      <filter dst_ip="129.24.69.217" dst_port="44308" proto="tcp" src_ip="208.50.42.117" src_port="1028"/>
      <filter dst_ip="129.24.69.217" dst_port="44308" proto="udp" src_ip="208.50.42.117" src_port="1028"/>
      <filter dst_ip="129.24.69.217" dst_port="3249" proto="tcp" src_ip="208.50.42.117" src_port="1028"/>
      <filter dst_ip="129.24.69.217" dst_port="3249" proto="udp" src_ip="208.50.42.117" src_port="1028"/>
      <filter dst_ip="129.24.69.217" dst_port="62615" proto="tcp" src_ip="208.50.42.117" src_port="1028"/>
      <filter dst_ip="129.24.69.217" dst_port="62615" proto="udp" src_ip="208.50.42.117" src_port="1028"/>
      <filter dst_ip="169.46.2.208" dst_port="137" proto="tcp" src_ip="208.50.42.117" src_port="25"/>
      <filter dst_ip="169.46.2.208" dst_port="137" proto="udp" src_ip="208.50.42.117" src_port="25"/>
      <filter dst_ip="169.46.2.208" dst_port="44308" proto="tcp" src_ip="208.50.42.117" src_port="25"/>
      <filter dst_ip="169.46.2.208" dst_port="44308" proto="udp" src_ip="208.50.42.117" src_port="25"/>
      <filter dst_ip="169.46.2.208" dst_port="3249" proto="tcp" src_ip="208.50.42.117" src_port="25"/>
      <filter dst_ip="169.46.2.208" dst_port="3249" proto="udp" src_ip="208.50.42.117" src_port="25"/>
      <filter dst_ip="169.46.2.208" dst_port="62615" proto="tcp" src_ip="208.50.42.117" src_port="25"/>
      <filter dst_ip="169.46.2.208" dst_port="62615" proto="udp" src_ip="208.50.42.117" src_port="25"/>
      <filter dst_ip="169.46.2.208" dst_port="137" proto="tcp" src_ip="208.50.42.117" src_port="1028"/>
      <filter dst_ip="169.46.2.208" dst_port="137" proto="udp" src_ip="208.50.42.117" src_port="1028"/>
      <filter dst_ip="169.46.2.208" dst_port="44308" proto="tcp" src_ip="208.50.42.117" src_port="1028"/>
      <filter dst_ip="169.46.2.208" dst_port="44308" proto="udp" src_ip="208.50.42.117" src_port="1028"/>
      <filter dst_ip="169.46.2.208" dst_port="3249" proto="tcp" src_ip="208.50.42.117" src_port="1028"/>
      <filter dst_ip="169.46.2.208" dst_port="3249" proto="udp" src_ip="208.50.42.117" src_port="1028"/>
      <filter dst_ip="169.46.2.208" dst_port="62615" proto="tcp" src_ip="208.50.42.117" src_port="1028"/>
      <filter dst_ip="169.46.2.208" dst_port="62615" proto="udp" src_ip="208.50.42.117" src_port="1028"/>
      <from sec="1054876468" usec="0"/>
      <to sec="1054876477" usec="0"/>
    </slice>
    <from sec="1054876468" usec="0"/>
    <to sec="1054876477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="198.160.55.175" dst_port="137" proto="tcp" src_ip="99.227.10.118" src_port="1027"/>
      <filter dst_ip="198.160.55.175" dst_port="137" proto="udp" src_ip="99.227.10.118" src_port="1027"/>
      <filter dst_ip="198.160.55.175" dst_port="137" proto="tcp" src_ip="99.227.10.118" src_port="80"/>
      <filter dst_ip="198.160.55.175" dst_port="137" proto="udp" src_ip="99.227.10.118" src_port="80"/>
      <from sec="1054875897" usec="0"/>
      <to sec="1054875913" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="198.160.55.175" dst_port="137" proto="tcp" src_ip="51.158.70.118" src_port="1027"/>
      <filter dst_ip="198.160.55.175" dst_port="137" proto="udp" src_ip="51.158.70.118" src_port="1027"/>
      <filter dst_ip="198.160.55.175" dst_port="137" proto="tcp" src_ip="51.158.70.118" src_port="80"/>
      <filter dst_ip="198.160.55.175" dst_port="137" proto="udp" src_ip="51.158.70.118" src_port="80"/>
      <from sec="1054875906" usec="0"/>
      <to sec="1054875911" usec="0"/>
    </slice>
    <from sec="1054875897" usec="0"/>
    <to sec="1054875913" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="209.126.49.119" src_port="64683"/>
      <from sec="1054876431" usec="0"/>
      <to sec="1054876451" usec="0"/>
    </slice>
    <from sec="1054876431" usec="0"/>
    <to sec="1054876451" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="208.67.128.120" src_port="3685"/>
      <from sec="1054875860" usec="0"/>
      <to sec="1054875868" usec="0"/>
    </slice>
    <from sec="1054875860" usec="0"/>
    <to sec="1054875869" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="193.154.78.121" src_port="1064"/>
      <filter dst_port="137" proto="udp" src_ip="193.154.78.121" src_port="1064"/>
      <from sec="1054875929" usec="0"/>
      <to sec="1054875943" usec="0"/>
    </slice>
    <from sec="1054875929" usec="0"/>
    <to sec="1054875943" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="208.77.220.121" src_port="1025"/>
      <filter dst_port="1434" proto="udp" src_ip="208.77.220.121" src_port="1025"/>
      <filter dst_port="137" proto="udp" src_ip="208.77.220.121" src_port="1033"/>
      <filter dst_port="1434" proto="udp" src_ip="208.77.220.121" src_port="1033"/>
      <from sec="1054875998" usec="0"/>
      <to sec="1054876010" usec="0"/>
    </slice>
    <from sec="1054875997" usec="0"/>
    <to sec="1054876010" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="208.163.18.122" src_port="1086"/>
      <from sec="1054876026" usec="0"/>
      <to sec="1054876040" usec="0"/>
    </slice>
    <from sec="1054876026" usec="0"/>
    <to sec="1054876040" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="169.189.202.186" dst_port="137" proto="tcp" src_ip="84.3.227.131" src_port="1025"/>
      <filter dst_ip="169.189.202.186" dst_port="137" proto="udp" src_ip="84.3.227.131" src_port="1025"/>
      <filter dst_ip="169.189.202.186" dst_port="137" proto="tcp" src_ip="84.3.227.131" src_port="80"/>
      <filter dst_ip="169.189.202.186" dst_port="137" proto="udp" src_ip="84.3.227.131" src_port="80"/>
      <from sec="1054876405" usec="0"/>
      <to sec="1054876422" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="169.189.202.186" dst_port="137" proto="tcp" src_ip="216.10.131.131" src_port="1025"/>
      <filter dst_ip="169.189.202.186" dst_port="137" proto="udp" src_ip="216.10.131.131" src_port="1025"/>
      <filter dst_ip="169.189.202.186" dst_port="137" proto="tcp" src_ip="216.10.131.131" src_port="80"/>
      <filter dst_ip="169.189.202.186" dst_port="137" proto="udp" src_ip="216.10.131.131" src_port="80"/>
      <from sec="1054876405" usec="0"/>
      <to sec="1054876421" usec="0"/>
    </slice>
    <from sec="1054876405" usec="0"/>
    <to sec="1054876422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="196.160.38.133" src_port="1028"/>
      <from sec="1054876087" usec="0"/>
      <to sec="1054876104" usec="0"/>
    </slice>
    <from sec="1054876087" usec="0"/>
    <to sec="1054876104" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="210.101.139.135" src_port="1026"/>
      <from sec="1054876161" usec="0"/>
      <to sec="1054876174" usec="0"/>
    </slice>
    <from sec="1054876161" usec="0"/>
    <to sec="1054876174" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="208.36.233.138" src_port="1026"/>
      <from sec="1054876064" usec="0"/>
      <to sec="1054876073" usec="0"/>
    </slice>
    <from sec="1054876064" usec="0"/>
    <to sec="1054876073" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="199.180.133.141" src_port="1025"/>
      <from sec="1054875943" usec="0"/>
      <to sec="1054875951" usec="0"/>
    </slice>
    <from sec="1054875943" usec="0"/>
    <to sec="1054875951" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="209.124.175.141" src_port="63797"/>
      <from sec="1054875647" usec="0"/>
      <to sec="1054875671" usec="0"/>
    </slice>
    <from sec="1054875647" usec="0"/>
    <to sec="1054875671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="209.126.29.144" src_port="63451"/>
      <from sec="1054876377" usec="0"/>
      <to sec="1054876391" usec="0"/>
    </slice>
    <from sec="1054876377" usec="0"/>
    <to sec="1054876391" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="175.84.219.70" dst_port="137" proto="tcp" src_ip="198.179.107.145" src_port="1123"/>
      <filter dst_ip="175.84.219.70" dst_port="137" proto="udp" src_ip="198.179.107.145" src_port="1123"/>
      <filter dst_ip="175.84.219.70" dst_port="1434" proto="tcp" src_ip="198.179.107.145" src_port="1123"/>
      <filter dst_ip="175.84.219.70" dst_port="1434" proto="udp" src_ip="198.179.107.145" src_port="1123"/>
      <filter dst_ip="175.84.219.70" dst_port="25" proto="tcp" src_ip="198.179.107.145" src_port="1123"/>
      <filter dst_ip="175.84.219.70" dst_port="25" proto="udp" src_ip="198.179.107.145" src_port="1123"/>
      <filter dst_ip="175.84.219.70" dst_port="137" proto="tcp" src_ip="198.179.107.145" src_port="2800"/>
      <filter dst_ip="175.84.219.70" dst_port="137" proto="udp" src_ip="198.179.107.145" src_port="2800"/>
      <filter dst_ip="175.84.219.70" dst_port="1434" proto="tcp" src_ip="198.179.107.145" src_port="2800"/>
      <filter dst_ip="175.84.219.70" dst_port="1434" proto="udp" src_ip="198.179.107.145" src_port="2800"/>
      <filter dst_ip="175.84.219.70" dst_port="25" proto="tcp" src_ip="198.179.107.145" src_port="2800"/>
      <filter dst_ip="175.84.219.70" dst_port="25" proto="udp" src_ip="198.179.107.145" src_port="2800"/>
      <from sec="1054875823" usec="0"/>
      <to sec="1054875840" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="175.84.219.70" dst_port="137" proto="tcp" src_ip="84.20.118.145" src_port="1123"/>
      <filter dst_ip="175.84.219.70" dst_port="137" proto="udp" src_ip="84.20.118.145" src_port="1123"/>
      <filter dst_ip="175.84.219.70" dst_port="1434" proto="tcp" src_ip="84.20.118.145" src_port="1123"/>
      <filter dst_ip="175.84.219.70" dst_port="1434" proto="udp" src_ip="84.20.118.145" src_port="1123"/>
      <filter dst_ip="175.84.219.70" dst_port="25" proto="tcp" src_ip="84.20.118.145" src_port="1123"/>
      <filter dst_ip="175.84.219.70" dst_port="25" proto="udp" src_ip="84.20.118.145" src_port="1123"/>
      <filter dst_ip="175.84.219.70" dst_port="137" proto="tcp" src_ip="84.20.118.145" src_port="2800"/>
      <filter dst_ip="175.84.219.70" dst_port="137" proto="udp" src_ip="84.20.118.145" src_port="2800"/>
      <filter dst_ip="175.84.219.70" dst_port="1434" proto="tcp" src_ip="84.20.118.145" src_port="2800"/>
      <filter dst_ip="175.84.219.70" dst_port="1434" proto="udp" src_ip="84.20.118.145" src_port="2800"/>
      <filter dst_ip="175.84.219.70" dst_port="25" proto="tcp" src_ip="84.20.118.145" src_port="2800"/>
      <filter dst_ip="175.84.219.70" dst_port="25" proto="udp" src_ip="84.20.118.145" src_port="2800"/>
      <from sec="1054875818" usec="0"/>
      <to sec="1054875825" usec="0"/>
    </slice>
    <from sec="1054875818" usec="0"/>
    <to sec="1054875840" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="48.38.134.147" src_port="1026"/>
      <from sec="1054875785" usec="0"/>
      <to sec="1054875809" usec="0"/>
    </slice>
    <from sec="1054875785" usec="0"/>
    <to sec="1054875809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="84.28.105.150" src_port="1027"/>
      <filter dst_port="137" proto="udp" src_ip="84.28.105.150" src_port="1027"/>
      <from sec="1054875951" usec="0"/>
      <to sec="1054875976" usec="0"/>
    </slice>
    <from sec="1054875951" usec="0"/>
    <to sec="1054875976" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="198.36.214.157" src_port="10003"/>
      <filter dst_port="137" proto="udp" src_ip="198.36.214.157" src_port="10003"/>
      <from sec="1054876428" usec="0"/>
      <to sec="1054876437" usec="0"/>
    </slice>
    <from sec="1054876428" usec="0"/>
    <to sec="1054876437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="198.128.180.150" dst_port="137" proto="udp" src_ip="37.108.2.167" src_port="63415"/>
      <filter dst_ip="198.128.180.150" dst_port="53" proto="udp" src_ip="37.108.2.167" src_port="63415"/>
      <from sec="1054876398" usec="0"/>
      <to sec="1054876406" usec="0"/>
    </slice>
    <from sec="1054876397" usec="0"/>
    <to sec="1054876406" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="209.127.43.176" src_port="63747"/>
      <from sec="1054875652" usec="0"/>
      <to sec="1054875664" usec="0"/>
    </slice>
    <from sec="1054875652" usec="0"/>
    <to sec="1054875664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="129.24.225.122" dst_port="137" proto="tcp" src_ip="198.142.176.177" src_port="1030"/>
      <filter dst_ip="129.24.225.122" dst_port="137" proto="udp" src_ip="198.142.176.177" src_port="1030"/>
      <filter dst_ip="129.24.225.122" dst_port="1056" proto="tcp" src_ip="198.142.176.177" src_port="1030"/>
      <filter dst_ip="129.24.225.122" dst_port="1056" proto="udp" src_ip="198.142.176.177" src_port="1030"/>
      <filter dst_ip="129.24.225.122" dst_port="137" proto="tcp" src_ip="198.142.176.177" src_port="5190"/>
      <filter dst_ip="129.24.225.122" dst_port="137" proto="udp" src_ip="198.142.176.177" src_port="5190"/>
      <filter dst_ip="129.24.225.122" dst_port="1056" proto="tcp" src_ip="198.142.176.177" src_port="5190"/>
      <filter dst_ip="129.24.225.122" dst_port="1056" proto="udp" src_ip="198.142.176.177" src_port="5190"/>
      <from sec="1054876281" usec="0"/>
      <to sec="1054876287" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="129.24.225.122" dst_port="137" proto="tcp" src_ip="51.147.28.177" src_port="1030"/>
      <filter dst_ip="129.24.225.122" dst_port="137" proto="udp" src_ip="51.147.28.177" src_port="1030"/>
      <filter dst_ip="129.24.225.122" dst_port="1056" proto="tcp" src_ip="51.147.28.177" src_port="1030"/>
      <filter dst_ip="129.24.225.122" dst_port="1056" proto="udp" src_ip="51.147.28.177" src_port="1030"/>
      <filter dst_ip="129.24.225.122" dst_port="137" proto="tcp" src_ip="51.147.28.177" src_port="5190"/>
      <filter dst_ip="129.24.225.122" dst_port="137" proto="udp" src_ip="51.147.28.177" src_port="5190"/>
      <filter dst_ip="129.24.225.122" dst_port="1056" proto="tcp" src_ip="51.147.28.177" src_port="5190"/>
      <filter dst_ip="129.24.225.122" dst_port="1056" proto="udp" src_ip="51.147.28.177" src_port="5190"/>
      <from sec="1054876278" usec="0"/>
      <to sec="1054876283" usec="0"/>
    </slice>
    <from sec="1054876278" usec="0"/>
    <to sec="1054876287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="208.89.96.180" src_port="1026"/>
      <filter dst_port="137" proto="udp" src_ip="208.89.96.180" src_port="1026"/>
      <from sec="1054876127" usec="0"/>
      <to sec="1054876140" usec="0"/>
    </slice>
    <from sec="1054876127" usec="0"/>
    <to sec="1054876140" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="208.35.234.182" src_port="1027"/>
      <filter dst_port="137" proto="udp" src_ip="208.35.234.182" src_port="1027"/>
      <from sec="1054876383" usec="0"/>
      <to sec="1054876391" usec="0"/>
    </slice>
    <from sec="1054876383" usec="0"/>
    <to sec="1054876391" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="221.41.185.183" src_port="1653"/>
      <from sec="1054875647" usec="0"/>
      <to sec="1054875656" usec="0"/>
    </slice>
    <from sec="1054875647" usec="0"/>
    <to sec="1054875656" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="37.119.100.184" src_port="14114"/>
      <filter dst_port="137" proto="udp" src_ip="37.119.100.184" src_port="14152"/>
      <filter dst_port="137" proto="udp" src_ip="37.119.100.184" src_port="14137"/>
      <filter dst_port="137" proto="udp" src_ip="37.119.100.184" src_port="14124"/>
      <from sec="1054875837" usec="0"/>
      <to sec="1054875868" usec="0"/>
    </slice>
    <from sec="1054875837" usec="0"/>
    <to sec="1054875868" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="199.98.139.231" dst_port="137" proto="tcp" src_ip="221.8.194.185" src_port="1027"/>
      <filter dst_ip="199.98.139.231" dst_port="137" proto="udp" src_ip="221.8.194.185" src_port="1027"/>
      <filter dst_ip="199.98.139.231" dst_port="1644" proto="tcp" src_ip="221.8.194.185" src_port="1027"/>
      <filter dst_ip="199.98.139.231" dst_port="1644" proto="udp" src_ip="221.8.194.185" src_port="1027"/>
      <filter dst_ip="199.98.139.231" dst_port="137" proto="tcp" src_ip="221.8.194.185" src_port="1863"/>
      <filter dst_ip="199.98.139.231" dst_port="137" proto="udp" src_ip="221.8.194.185" src_port="1863"/>
      <filter dst_ip="199.98.139.231" dst_port="1644" proto="tcp" src_ip="221.8.194.185" src_port="1863"/>
      <filter dst_ip="199.98.139.231" dst_port="1644" proto="udp" src_ip="221.8.194.185" src_port="1863"/>
      <from sec="1054875913" usec="0"/>
      <to sec="1054875922" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="199.98.139.231" dst_port="137" proto="tcp" src_ip="192.42.2.185" src_port="1027"/>
      <filter dst_ip="199.98.139.231" dst_port="137" proto="udp" src_ip="192.42.2.185" src_port="1027"/>
      <filter dst_ip="199.98.139.231" dst_port="1644" proto="tcp" src_ip="192.42.2.185" src_port="1027"/>
      <filter dst_ip="199.98.139.231" dst_port="1644" proto="udp" src_ip="192.42.2.185" src_port="1027"/>
      <filter dst_ip="199.98.139.231" dst_port="137" proto="tcp" src_ip="192.42.2.185" src_port="1863"/>
      <filter dst_ip="199.98.139.231" dst_port="137" proto="udp" src_ip="192.42.2.185" src_port="1863"/>
      <filter dst_ip="199.98.139.231" dst_port="1644" proto="tcp" src_ip="192.42.2.185" src_port="1863"/>
      <filter dst_ip="199.98.139.231" dst_port="1644" proto="udp" src_ip="192.42.2.185" src_port="1863"/>
      <from sec="1054875913" usec="0"/>
      <to sec="1054875920" usec="0"/>
    </slice>
    <from sec="1054875913" usec="0"/>
    <to sec="1054875922" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="51.66.38.186" src_port="1031"/>
      <from sec="1054875656" usec="0"/>
      <to sec="1054875681" usec="0"/>
    </slice>
    <from sec="1054875656" usec="0"/>
    <to sec="1054875681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="195.1.152.200" src_port="1028"/>
      <from sec="1054875921" usec="0"/>
      <to sec="1054875929" usec="0"/>
    </slice>
    <from sec="1054875921" usec="0"/>
    <to sec="1054875929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="213.18.135.202" src_port="1167"/>
      <from sec="1054876004" usec="0"/>
      <to sec="1054876010" usec="0"/>
    </slice>
    <from sec="1054876004" usec="0"/>
    <to sec="1054876010" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="51.115.50.67" dst_port="137" proto="tcp" src_ip="208.68.40.206" src_port="65026"/>
      <filter dst_ip="51.115.50.67" dst_port="137" proto="udp" src_ip="208.68.40.206" src_port="65026"/>
      <filter dst_ip="51.115.50.67" dst_port="80" proto="tcp" src_ip="208.68.40.206" src_port="65026"/>
      <filter dst_ip="51.115.50.67" dst_port="80" proto="udp" src_ip="208.68.40.206" src_port="65026"/>
      <from sec="1054876204" usec="0"/>
      <to sec="1054876217" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="51.115.50.67" dst_port="137" proto="tcp" src_ip="176.107.176.65" src_port="65026"/>
      <filter dst_ip="51.115.50.67" dst_port="137" proto="udp" src_ip="176.107.176.65" src_port="65026"/>
      <filter dst_ip="51.115.50.67" dst_port="80" proto="tcp" src_ip="176.107.176.65" src_port="65026"/>
      <filter dst_ip="51.115.50.67" dst_port="80" proto="udp" src_ip="176.107.176.65" src_port="65026"/>
      <from sec="1054876205" usec="0"/>
      <to sec="1054876211" usec="0"/>
    </slice>
    <from sec="1054876204" usec="0"/>
    <to sec="1054876217" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="199.104.102.191" dst_port="137" proto="tcp" src_ip="208.32.174.216" src_port="1176"/>
      <filter dst_ip="199.104.102.191" dst_port="137" proto="udp" src_ip="208.32.174.216" src_port="1176"/>
      <filter dst_ip="199.104.102.191" dst_port="137" proto="tcp" src_ip="208.32.174.216" src_port="80"/>
      <filter dst_ip="199.104.102.191" dst_port="137" proto="udp" src_ip="208.32.174.216" src_port="80"/>
      <filter dst_ip="198.160.55.168" dst_port="137" proto="tcp" src_ip="208.32.174.216" src_port="1176"/>
      <filter dst_ip="198.160.55.168" dst_port="137" proto="udp" src_ip="208.32.174.216" src_port="1176"/>
      <filter dst_ip="198.160.55.168" dst_port="137" proto="tcp" src_ip="208.32.174.216" src_port="80"/>
      <filter dst_ip="198.160.55.168" dst_port="137" proto="udp" src_ip="208.32.174.216" src_port="80"/>
      <from sec="1054876320" usec="0"/>
      <to sec="1054876334" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="199.104.102.191" dst_port="137" proto="tcp" src_ip="216.213.206.216" src_port="1176"/>
      <filter dst_ip="199.104.102.191" dst_port="137" proto="udp" src_ip="216.213.206.216" src_port="1176"/>
      <filter dst_ip="199.104.102.191" dst_port="137" proto="tcp" src_ip="216.213.206.216" src_port="80"/>
      <filter dst_ip="199.104.102.191" dst_port="137" proto="udp" src_ip="216.213.206.216" src_port="80"/>
      <filter dst_ip="198.160.55.168" dst_port="137" proto="tcp" src_ip="216.213.206.216" src_port="1176"/>
      <filter dst_ip="198.160.55.168" dst_port="137" proto="udp" src_ip="216.213.206.216" src_port="1176"/>
      <filter dst_ip="198.160.55.168" dst_port="137" proto="tcp" src_ip="216.213.206.216" src_port="80"/>
      <filter dst_ip="198.160.55.168" dst_port="137" proto="udp" src_ip="216.213.206.216" src_port="80"/>
      <from sec="1054876320" usec="0"/>
      <to sec="1054876329" usec="0"/>
    </slice>
    <from sec="1054876320" usec="0"/>
    <to sec="1054876334" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="208.160.35.219" src_port="1026"/>
      <from sec="1054876026" usec="0"/>
      <to sec="1054876034" usec="0"/>
    </slice>
    <from sec="1054876026" usec="0"/>
    <to sec="1054876034" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="36.106.71.221" src_port="1026"/>
      <from sec="1054875678" usec="0"/>
      <to sec="1054875687" usec="0"/>
    </slice>
    <from sec="1054875678" usec="0"/>
    <to sec="1054875687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="213.22.232.221" src_port="12479"/>
      <from sec="1054875783" usec="0"/>
      <to sec="1054875801" usec="0"/>
    </slice>
    <from sec="1054875783" usec="0"/>
    <to sec="1054875801" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="208.88.93.235" src_port="1028"/>
      <from sec="1054876158" usec="0"/>
      <to sec="1054876167" usec="0"/>
    </slice>
    <from sec="1054876158" usec="0"/>
    <to sec="1054876167" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="14.215.138.237" src_port="1027"/>
      <from sec="1054876152" usec="0"/>
      <to sec="1054876159" usec="0"/>
    </slice>
    <from sec="1054876152" usec="0"/>
    <to sec="1054876159" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="175.85.107.100" dst_port="137" proto="udp" src_ip="196.254.48.241" src_port="1026"/>
      <filter dst_ip="175.85.107.100" dst_port="53" proto="udp" src_ip="196.254.48.241" src_port="1026"/>
      <filter dst_ip="175.85.107.100" dst_port="137" proto="udp" src_ip="196.254.48.241" src_port="53"/>
      <filter dst_ip="175.85.107.100" dst_port="53" proto="udp" src_ip="196.254.48.241" src_port="53"/>
      <from sec="1054876034" usec="0"/>
      <to sec="1054876039" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="175.85.107.100" dst_port="137" proto="udp" src_ip="51.144.132.241" src_port="1026"/>
      <filter dst_ip="175.85.107.100" dst_port="53" proto="udp" src_ip="51.144.132.241" src_port="1026"/>
      <filter dst_ip="175.85.107.100" dst_port="137" proto="udp" src_ip="51.144.132.241" src_port="53"/>
      <filter dst_ip="175.85.107.100" dst_port="53" proto="udp" src_ip="51.144.132.241" src_port="53"/>
      <from sec="1054876036" usec="0"/>
      <to sec="1054876038" usec="0"/>
    </slice>
    <from sec="1054876034" usec="0"/>
    <to sec="1054876039" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="196.68.244.244" src_port="1032"/>
      <from sec="1054875786" usec="0"/>
      <to sec="1054875809" usec="0"/>
    </slice>
    <from sec="1054875786" usec="0"/>
    <to sec="1054875809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="53.0.165.246" src_port="1026"/>
      <from sec="1054875800" usec="0"/>
      <to sec="1054875823" usec="0"/>
    </slice>
    <from sec="1054875800" usec="0"/>
    <to sec="1054875823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="198.128.180.150" dst_port="137" proto="udp" src_ip="99.75.164.248" src_port="32771"/>
      <filter dst_ip="198.128.180.150" dst_port="53" proto="udp" src_ip="99.75.164.248" src_port="32771"/>
      <from sec="1054875874" usec="0"/>
      <to sec="1054875887" usec="0"/>
    </slice>
    <from sec="1054875874" usec="0"/>
    <to sec="1054875891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="48.253.164.255" src_port="20763"/>
      <from sec="1054876026" usec="0"/>
      <to sec="1054876034" usec="0"/>
    </slice>
    <from sec="1054876026" usec="0"/>
    <to sec="1054876034" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="129.24.202.193" dst_port="137" proto="tcp" src_ip="213.24.226.2" src_port="6667"/>
      <filter dst_ip="129.24.202.193" dst_port="137" proto="udp" src_ip="213.24.226.2" src_port="6667"/>
      <from sec="1054876167" usec="0"/>
      <to sec="1054876189" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="129.24.202.193" dst_port="137" proto="tcp" src_ip="200.133.174.2" src_port="6667"/>
      <filter dst_ip="129.24.202.193" dst_port="137" proto="udp" src_ip="200.133.174.2" src_port="6667"/>
      <from sec="1054876166" usec="0"/>
      <to sec="1054876190" usec="0"/>
    </slice>
    <from sec="1054876166" usec="0"/>
    <to sec="1054876190" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="87.142.241.6"/>
      <from sec="1054876111" usec="0"/>
      <to sec="1054876120" usec="0"/>
    </slice>
    <from sec="1054876111" usec="0"/>
    <to sec="1054876120" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="210.47.20.9" src_port="80"/>
      <filter dst_port="137" proto="udp" src_ip="210.47.20.9" src_port="80"/>
      <from sec="1054875686" usec="0"/>
      <to sec="1054875699" usec="0"/>
    </slice>
    <from sec="1054875686" usec="0"/>
    <to sec="1054875699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="139" proto="tcp" src_ip="219.113.130.14"/>
      <from sec="1054875800" usec="0"/>
      <to sec="1054875827" usec="0"/>
    </slice>
    <from sec="1054875800" usec="0"/>
    <to sec="1054875827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="213.24.243.23"/>
      <from sec="1054876351" usec="0"/>
      <to sec="1054876364" usec="0"/>
    </slice>
    <from sec="1054876351" usec="0"/>
    <to sec="1054876367" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="139" proto="tcp" src_ip="194.19.236.38" src_port="80"/>
      <from sec="1054875600" usec="0"/>
      <to sec="1054875624" usec="0"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054875625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="175.84.22.118" dst_port="137" proto="tcp" src_ip="221.106.144.57" src_port="80"/>
      <filter dst_ip="175.84.22.118" dst_port="137" proto="udp" src_ip="221.106.144.57" src_port="80"/>
      <from sec="1054875975" usec="0"/>
      <to sec="1054876004" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="175.84.22.118" dst_port="137" proto="tcp" src_ip="192.77.56.57" src_port="80"/>
      <filter dst_ip="175.84.22.118" dst_port="137" proto="udp" src_ip="192.77.56.57" src_port="80"/>
      <from sec="1054875977" usec="0"/>
      <to sec="1054876003" usec="0"/>
    </slice>
    <from sec="1054875975" usec="0"/>
    <to sec="1054876004" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="198.160.55.168" dst_port="139" proto="tcp" src_ip="196.216.36.113" src_port="80"/>
      <from sec="1054876231" usec="0"/>
      <to sec="1054876262" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="198.160.55.168" dst_port="139" proto="tcp" src_ip="210.202.152.113" src_port="80"/>
      <from sec="1054876231" usec="0"/>
      <to sec="1054876257" usec="0"/>
    </slice>
    <from sec="1054876231" usec="0"/>
    <to sec="1054876262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="139" proto="tcp" src_ip="208.166.105.146" src_port="80"/>
      <from sec="1054875663" usec="0"/>
      <to sec="1054875687" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="139" proto="tcp" src_ip="210.157.85.146" src_port="80"/>
      <from sec="1054875663" usec="0"/>
      <to sec="1054875687" usec="0"/>
    </slice>
    <from sec="1054875663" usec="0"/>
    <to sec="1054875687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="48.50.161.235"/>
      <from sec="1054875905" usec="0"/>
      <to sec="1054875936" usec="0"/>
    </slice>
    <from sec="1054875905" usec="0"/>
    <to sec="1054875936" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.910624,1.7407,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="175.85.61.8" dst_port="80" proto="tcp" src_ip="219.178.82.25"/>
      <filter dst_ip="175.85.61.8" dst_port="80" proto="udp" src_ip="219.178.82.25"/>
      <filter dst_ip="175.85.61.8" dst_port="139" proto="tcp" src_ip="219.178.82.25"/>
      <filter dst_ip="175.85.61.8" dst_port="139" proto="udp" src_ip="219.178.82.25"/>
      <filter dst_ip="175.85.61.8" dst_port="137" proto="tcp" src_ip="219.178.82.25"/>
      <filter dst_ip="175.85.61.8" dst_port="137" proto="udp" src_ip="219.178.82.25"/>
      <from sec="1054875975" usec="0"/>
      <to sec="1054875990" usec="0"/>
    </slice>
    <from sec="1054875972" usec="0"/>
    <to sec="1054875990" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.910624,1.7407,999,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="199.104.100.111" proto="icmp" src_ip="199.31.206.51"/>
      <filter dst_ip="199.104.100.111" src_ip="199.31.206.51"/>
      <from sec="1054876251" usec="0"/>
      <to sec="1054876487" usec="0"/>
    </slice>
    <from sec="1054876251" usec="0"/>
    <to sec="1054876487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.910624,1.7407,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="1434" proto="tcp" src_ip="51.94.146.71" src_port="80"/>
      <filter dst_port="1434" proto="udp" src_ip="51.94.146.71" src_port="80"/>
      <filter dst_port="1433" proto="tcp" src_ip="51.94.146.71" src_port="80"/>
      <filter dst_port="1433" proto="udp" src_ip="51.94.146.71" src_port="80"/>
      <from sec="1054875601" usec="0"/>
      <to sec="1054876485" usec="0"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054876485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.910624,1.7407,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="175.85.61.8" dst_port="80" proto="tcp" src_ip="51.33.0.72"/>
      <filter dst_ip="175.85.61.8" dst_port="80" proto="udp" src_ip="51.33.0.72"/>
      <filter dst_ip="175.85.61.8" dst_port="139" proto="tcp" src_ip="51.33.0.72"/>
      <filter dst_ip="175.85.61.8" dst_port="139" proto="udp" src_ip="51.33.0.72"/>
      <filter dst_ip="175.85.61.8" dst_port="137" proto="tcp" src_ip="51.33.0.72"/>
      <filter dst_ip="175.85.61.8" dst_port="137" proto="udp" src_ip="51.33.0.72"/>
      <from sec="1054875747" usec="0"/>
      <to sec="1054875765" usec="0"/>
    </slice>
    <from sec="1054875747" usec="0"/>
    <to sec="1054875765" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.910624,1.7407,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="1434" proto="tcp" src_ip="217.37.140.91" src_port="80"/>
      <filter dst_port="1434" proto="udp" src_ip="217.37.140.91" src_port="80"/>
      <from sec="1054875693" usec="0"/>
      <to sec="1054875765" usec="0"/>
    </slice>
    <from sec="1054875693" usec="0"/>
    <to sec="1054875765" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.910624,1.7407,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="134.66.64.59" dst_port="137" proto="tcp" src_ip="50.196.52.1" src_port="10615"/>
      <filter dst_ip="134.66.64.59" dst_port="137" proto="udp" src_ip="50.196.52.1" src_port="10615"/>
      <filter dst_ip="134.66.64.59" dst_port="137" proto="tcp" src_ip="50.196.52.1" src_port="80"/>
      <filter dst_ip="134.66.64.59" dst_port="137" proto="udp" src_ip="50.196.52.1" src_port="80"/>
      <from sec="1054875601" usec="0"/>
      <to sec="1054875617" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="134.66.64.59" dst_port="137" proto="tcp" src_ip="48.75.252.1" src_port="10615"/>
      <filter dst_ip="134.66.64.59" dst_port="137" proto="udp" src_ip="48.75.252.1" src_port="10615"/>
      <filter dst_ip="134.66.64.59" dst_port="137" proto="tcp" src_ip="48.75.252.1" src_port="80"/>
      <filter dst_ip="134.66.64.59" dst_port="137" proto="udp" src_ip="48.75.252.1" src_port="80"/>
      <from sec="1054875600" usec="0"/>
      <to sec="1054875615" usec="0"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054875617" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.910624,1.7407,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="169.167.213.199" dst_port="137" proto="tcp" src_ip="196.84.127.2" src_port="1031"/>
      <filter dst_ip="169.167.213.199" dst_port="137" proto="udp" src_ip="196.84.127.2" src_port="1031"/>
      <filter dst_ip="169.167.213.199" dst_port="80" proto="tcp" src_ip="196.84.127.2" src_port="1031"/>
      <filter dst_ip="169.167.213.199" dst_port="80" proto="udp" src_ip="196.84.127.2" src_port="1031"/>
      <filter dst_ip="169.167.213.199" dst_port="137" proto="tcp" src_ip="196.84.127.2" src_port="2833"/>
      <filter dst_ip="169.167.213.199" dst_port="137" proto="udp" src_ip="196.84.127.2" src_port="2833"/>
      <filter dst_ip="169.167.213.199" dst_port="80" proto="tcp" src_ip="196.84.127.2" src_port="2833"/>
      <filter dst_ip="169.167.213.199" dst_port="80" proto="udp" src_ip="196.84.127.2" src_port="2833"/>
      <from sec="1054875709" usec="0"/>
      <to sec="1054875718" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="169.167.213.199" dst_port="137" proto="tcp" src_ip="48.194.83.2" src_port="1031"/>
      <filter dst_ip="169.167.213.199" dst_port="137" proto="udp" src_ip="48.194.83.2" src_port="1031"/>
      <filter dst_ip="169.167.213.199" dst_port="80" proto="tcp" src_ip="48.194.83.2" src_port="1031"/>
      <filter dst_ip="169.167.213.199" dst_port="80" proto="udp" src_ip="48.194.83.2" src_port="1031"/>
      <filter dst_ip="169.167.213.199" dst_port="137" proto="tcp" src_ip="48.194.83.2" src_port="2833"/>
      <filter dst_ip="169.167.213.199" dst_port="137" proto="udp" src_ip="48.194.83.2" src_port="2833"/>
      <filter dst_ip="169.167.213.199" dst_port="80" proto="tcp" src_ip="48.194.83.2" src_port="2833"/>
      <filter dst_ip="169.167.213.199" dst_port="80" proto="udp" src_ip="48.194.83.2" src_port="2833"/>
      <from sec="1054875713" usec="0"/>
      <to sec="1054875717" usec="0"/>
    </slice>
    <from sec="1054875709" usec="0"/>
    <to sec="1054875718" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04984,1.61909,002,1 1 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_113{
style=filled;
color=gray75;
144[label="86.187.132.2s;175pkt 175fpkt", shape=rectangle, color=red];
520[label="86.187.132.2s;175pkt 175fpkt", shape=ellipse, color=green];
2730[label="86.187.132.2;225pkt 225fpkt", shape=pentagon, color=darkviolet];
4190[label="86.187.132.2;224pkt 224fpkt", shape=invtriangle, color=brown];
stat113[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.187.132.2:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
144--520[label="1;175pkt 175fpkt"];
144--2730[label="1;175pkt 175fpkt"];
144--4190[label="0.994286;174pkt 174fpkt"];
520--2730[label="1;175pkt 175fpkt"];
520--4190[label="0.994286;174pkt 174fpkt"];
2730--4190[label="1;224pkt 224fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="86.187.132.2" src_port="1025"/>
    </slice>
    <from sec="1054876239" usec="0"/>
    <to sec="1054876274" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.970355,1.7084,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_114{
style=filled;
color=gray75;
151[label="208.57.74.9s;97pkt 97fpkt", shape=rectangle, color=red];
523[label="208.57.74.9s;97pkt 97fpkt", shape=ellipse, color=green];
stat114[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.57.74.9:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
151--523[label="1;97pkt 97fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.57.74.9" src_port="1027"/>
    </slice>
    <from sec="1054876136" usec="0"/>
    <to sec="1054876151" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.970355,1.7084,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_115{
style=filled;
color=gray75;
158[label="221.8.83.16s;167pkt 167fpkt", shape=rectangle, color=red];
528[label="221.8.83.16s;113pkt 113fpkt", shape=ellipse, color=green];
stat115[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.8.83.16:1069, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1069: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
158--528[label="1;113pkt 113fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="221.8.83.16" src_port="1069"/>
    </slice>
    <from sec="1054876358" usec="0"/>
    <to sec="1054876384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.970355,1.7084,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_116{
style=filled;
color=gray75;
170[label="199.224.37.25s;160pkt 160fpkt", shape=rectangle, color=red];
530[label="199.224.37.25s;160pkt 160fpkt", shape=ellipse, color=green];
stat116[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.224.37.25:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
170--530[label="1;160pkt 160fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.224.37.25" src_port="1029"/>
    </slice>
    <from sec="1054876260" usec="0"/>
    <to sec="1054876287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.970355,1.7084,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_117{
style=filled;
color=gray75;
184[label="196.132.211.34s;75pkt 75fpkt", shape=rectangle, color=red];
189[label="49.78.37.38s;251pkt 251fpkt", shape=rectangle, color=red];
533[label="213.20.5.32s;209pkt 209fpkt", shape=ellipse, color=green];
stat117[shape=component, label=&lt;Rules:&lt;BR/&gt;{49.78.37.38:1029, *:137}[61.9753%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1029: (29.7196%)&lt;BR/&gt; 1026: (12.8972%)&lt;BR/&gt; 1025: (7.38318%)&gt;];
}
184--533[label="0.84;63pkt 63fpkt"];
189--533[label="0.320574;67pkt 67fpkt"];
533--2939[label="0.37799;79pkt 79fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="49.78.37.38" src_port="1029"/>
    </slice>
    <from sec="1054875966" usec="0"/>
    <to sec="1054876003" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.910624,1.7407,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="169.189.203.228" dst_port="137" proto="tcp" src_ip="36.85.89.33" src_port="10007"/>
      <filter dst_ip="169.189.203.228" dst_port="137" proto="udp" src_ip="36.85.89.33" src_port="10007"/>
      <filter dst_ip="169.189.203.228" dst_port="137" proto="tcp" src_ip="36.85.89.33" src_port="80"/>
      <filter dst_ip="169.189.203.228" dst_port="137" proto="udp" src_ip="36.85.89.33" src_port="80"/>
      <from sec="1054876034" usec="0"/>
      <to sec="1054876042" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="169.189.203.228" dst_port="137" proto="tcp" src_ip="192.77.37.33" src_port="10007"/>
      <filter dst_ip="169.189.203.228" dst_port="137" proto="udp" src_ip="192.77.37.33" src_port="10007"/>
      <filter dst_ip="169.189.203.228" dst_port="137" proto="tcp" src_ip="192.77.37.33" src_port="80"/>
      <filter dst_ip="169.189.203.228" dst_port="137" proto="udp" src_ip="192.77.37.33" src_port="80"/>
      <from sec="1054876037" usec="0"/>
      <to sec="1054876042" usec="0"/>
    </slice>
    <from sec="1054876034" usec="0"/>
    <to sec="1054876042" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.970355,1.7084,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_120{
style=filled;
color=gray75;
204[label="125.218.147.54s;176pkt 176fpkt", shape=rectangle, color=red];
540[label="125.218.147.54s;54pkt 54fpkt", shape=ellipse, color=green];
stat120[shape=component, label=&lt;Rules:&lt;BR/&gt;{125.218.147.54:32969, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32969: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
204--540[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="125.218.147.54" src_port="32969"/>
    </slice>
    <from sec="1054876134" usec="0"/>
    <to sec="1054876165" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.970355,1.7084,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_121{
style=filled;
color=gray75;
207[label="213.13.150.56s;157pkt 157fpkt", shape=rectangle, color=red];
541[label="213.13.150.56s;59pkt 59fpkt", shape=ellipse, color=green];
stat121[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.13.150.56:1070, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1070: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
207--541[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="213.13.150.56" src_port="1070"/>
    </slice>
    <from sec="1054876056" usec="0"/>
    <to sec="1054876080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.970355,1.7084,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_123{
style=filled;
color=gray75;
210[label="198.17.105.61s;62pkt 62fpkt", shape=rectangle, color=red];
543[label="198.17.105.61s;62pkt 62fpkt", shape=ellipse, color=green];
stat123[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.17.105.61:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
210--543[label="1;62pkt 62fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="198.17.105.61" src_port="1025"/>
    </slice>
    <from sec="1054875967" usec="0"/>
    <to sec="1054875976" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945936,1.64668,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_124{
style=filled;
color=gray75;
212[label="84.20.214.62s;86pkt 86fpkt", shape=rectangle, color=red];
544[label="84.20.214.62s;86pkt 86fpkt", shape=ellipse, color=green];
3124[label="84.20.214.62;178pkt 178fpkt", shape=pentagon, color=darkviolet];
stat124[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.20.214.62:1032, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1032: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
212--544[label="1;86pkt 86fpkt"];
212--3124[label="1;86pkt 86fpkt"];
544--3124[label="1;86pkt 86fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="84.20.214.62" src_port="1032"/>
    </slice>
    <from sec="1054875819" usec="0"/>
    <to sec="1054875847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.970355,1.7084,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_125{
style=filled;
color=gray75;
242[label="84.41.11.91s;46pkt 46fpkt", shape=rectangle, color=red];
548[label="84.41.11.91s;46pkt 46fpkt", shape=ellipse, color=green];
stat125[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.41.11.91:1032, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1032: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
242--548[label="1;46pkt 46fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="84.41.11.91" src_port="1032"/>
    </slice>
    <from sec="1054875655" usec="0"/>
    <to sec="1054875664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.970355,1.7084,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_127{
style=filled;
color=gray75;
255[label="139.69.168.101s;105pkt 105fpkt", shape=rectangle, color=red];
550[label="139.69.168.101s;105pkt 105fpkt", shape=ellipse, color=green];
stat127[shape=component, label=&lt;Rules:&lt;BR/&gt;{139.69.168.101:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
255--550[label="1;105pkt 105fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="139.69.168.101" src_port="1026"/>
    </slice>
    <from sec="1054875750" usec="0"/>
    <to sec="1054875765" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.910624,1.7407,002,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
552[label="36.133.214.106s;66pkt 66fpkt", shape=ellipse, color=green];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.133.214.106:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
552--3413[label="1;66pkt 66fpkt"];
552--4457[label="1;66pkt 66fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="36.133.214.106" src_port="1029"/>
    </slice>
    <from sec="1054875655" usec="0"/>
    <to sec="1054875664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.970355,1.7084,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_130{
style=filled;
color=gray75;
272[label="49.178.63.114s;99pkt 99fpkt", shape=rectangle, color=red];
555[label="49.178.63.114s;57pkt 57fpkt", shape=ellipse, color=green];
stat130[shape=component, label=&lt;Rules:&lt;BR/&gt;{49.178.63.114:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
272--555[label="1;57pkt 57fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="49.178.63.114" src_port="1027"/>
    </slice>
    <from sec="1054876351" usec="0"/>
    <to sec="1054876367" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.970355,1.7084,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_131{
style=filled;
color=gray75;
276[label="220.144.131.117s;193pkt 193fpkt", shape=rectangle, color=red];
556[label="220.144.131.117s;65pkt 65fpkt", shape=ellipse, color=green];
stat131[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.144.131.117:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
276--556[label="1;65pkt 65fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="220.144.131.117" src_port="1029"/>
    </slice>
    <from sec="1054875800" usec="0"/>
    <to sec="1054875830" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.970355,1.7084,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_132{
style=filled;
color=gray75;
279[label="84.37.238.118s;65pkt 65fpkt", shape=rectangle, color=red];
557[label="84.37.238.118s;65pkt 65fpkt", shape=ellipse, color=green];
stat132[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.37.238.118:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
279--557[label="1;65pkt 65fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="84.37.238.118" src_port="1026"/>
    </slice>
    <from sec="1054876397" usec="0"/>
    <to sec="1054876406" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945936,1.64668,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_133{
style=filled;
color=gray75;
291[label="216.34.41.127s;110pkt 110fpkt", shape=rectangle, color=red];
559[label="216.34.41.127s;59pkt 59fpkt", shape=ellipse, color=green];
3514[label="216.34.41.127;131pkt 131fpkt", shape=pentagon, color=darkviolet];
stat133[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.34.41.127:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
291--559[label="1;59pkt 59fpkt"];
291--3514[label="1;110pkt 110fpkt"];
559--3514[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="216.34.41.127" src_port="1025"/>
    </slice>
    <from sec="1054876046" usec="0"/>
    <to sec="1054876067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.970355,1.7084,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_134{
style=filled;
color=gray75;
292[label="200.178.32.128s;110pkt 110fpkt", shape=rectangle, color=red];
560[label="200.178.32.128s;66pkt 66fpkt", shape=ellipse, color=green];
stat134[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.178.32.128:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
292--560[label="1;66pkt 66fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.178.32.128" src_port="1028"/>
    </slice>
    <from sec="1054875967" usec="0"/>
    <to sec="1054875983" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.970355,1.7084,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_135{
style=filled;
color=gray75;
297[label="36.74.107.134s;117pkt 117fpkt", shape=rectangle, color=red];
561[label="36.74.107.134s;117pkt 117fpkt", shape=ellipse, color=green];
stat135[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.74.107.134:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
297--561[label="1;117pkt 117fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="36.74.107.134" src_port="1025"/>
    </slice>
    <from sec="1054875777" usec="0"/>
    <to sec="1054875794" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.910624,1.7407,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="139" proto="tcp" src_ip="208.166.105.146" src_port="80"/>
      <from sec="1054875663" usec="0"/>
      <to sec="1054875687" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="139" proto="tcp" src_ip="210.157.85.146" src_port="80"/>
      <from sec="1054875663" usec="0"/>
      <to sec="1054875687" usec="0"/>
    </slice>
    <from sec="1054875663" usec="0"/>
    <to sec="1054875687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.970355,1.7084,503,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_137{
style=filled;
color=gray75;
311[label="51.105.133.147s;1pkt 1fpkt", shape=rectangle, color=red];
566[label="51.105.133.147s;2pkt 2fpkt", shape=ellipse, color=green];
stat137[shape=component, label=&lt;Rules:&lt;BR/&gt;{51.95.9.147:2278, 132.51.113.96:80}[50%]&lt;BR/&gt;{192.241.61.147:80, 199.104.102.143:29885}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2278: (33.3333%)&lt;BR/&gt; 29885: (16.6667%)&gt;];
}
311--566[label="1;1pkt 1fpkt"];
566--745[label="0.5;1pkt 1fpkt"];
566--1493[label="0.5;1pkt 1fpkt"];
566--3641[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.104.102.143" dst_port="29885" src_ip="192.241.61.147" src_port="80"/>
      <filter dst_ip="132.51.113.96" dst_port="80" src_ip="51.95.9.147" src_port="2278"/>
    </slice>
    <from sec="1054876374" usec="0"/>
    <to sec="1054876384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.970355,1.7084,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_138{
style=filled;
color=gray75;
318[label="37.99.59.152s;88pkt 88fpkt", shape=rectangle, color=red];
568[label="37.99.59.152s;59pkt 59fpkt", shape=ellipse, color=green];
stat138[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.99.59.152:17406, *:137}[65.9091%]&lt;BR/&gt;{37.99.59.152:17405, *:137}[34.0909%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 17406: (34.3537%)&lt;BR/&gt; 17405: (15.6463%)&gt;];
}
318--568[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="37.99.59.152" src_port="17406"/>
      <filter dst_port="137" src_ip="37.99.59.152" src_port="17405"/>
    </slice>
    <from sec="1054876383" usec="0"/>
    <to sec="1054876402" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.970355,1.7084,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_139{
style=filled;
color=gray75;
327[label="36.91.24.162s;347pkt 347fpkt", shape=rectangle, color=red];
570[label="36.91.24.162s;192pkt 192fpkt", shape=ellipse, color=green];
stat139[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.91.24.162:64479, *:137}[64.2651%]&lt;BR/&gt;{199.200.128.162:1059, *:1434}[35.7349%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64479: (32.282%)&lt;BR/&gt; 137: (32.282%)&lt;BR/&gt; 1434: (17.718%)&lt;BR/&gt; 1059: (17.718%)&gt;];
}
327--570[label="1;192pkt 192fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="36.91.24.162" src_port="64479"/>
      <filter dst_port="1434" src_ip="199.200.128.162" src_port="1059"/>
    </slice>
    <from sec="1054876270" usec="0"/>
    <to sec="1054876304" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.910624,1.7407,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="169.9.116.169" dst_port="137" proto="tcp" src_ip="209.124.150.173" src_port="64537"/>
      <filter dst_ip="169.9.116.169" dst_port="137" proto="udp" src_ip="209.124.150.173" src_port="64537"/>
      <filter dst_ip="169.9.116.169" dst_port="137" proto="tcp" src_ip="209.124.150.173" src_port="80"/>
      <filter dst_ip="169.9.116.169" dst_port="137" proto="udp" src_ip="209.124.150.173" src_port="80"/>
      <from sec="1054875967" usec="0"/>
      <to sec="1054875983" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="169.9.116.169" dst_port="137" proto="tcp" src_ip="216.49.134.173" src_port="64537"/>
      <filter dst_ip="169.9.116.169" dst_port="137" proto="udp" src_ip="216.49.134.173" src_port="64537"/>
      <filter dst_ip="169.9.116.169" dst_port="137" proto="tcp" src_ip="216.49.134.173" src_port="80"/>
      <filter dst_ip="169.9.116.169" dst_port="137" proto="udp" src_ip="216.49.134.173" src_port="80"/>
      <from sec="1054875971" usec="0"/>
      <to sec="1054875980" usec="0"/>
    </slice>
    <from sec="1054875967" usec="0"/>
    <to sec="1054875983" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.970355,1.7084,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_142{
style=filled;
color=gray75;
346[label="196.221.217.180s;241pkt 241fpkt", shape=rectangle, color=red];
575[label="196.221.217.180s;119pkt 119fpkt", shape=ellipse, color=green];
stat142[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.221.217.180:1036, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1036: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
346--575[label="1;119pkt 119fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.221.217.180" src_port="1036"/>
    </slice>
    <from sec="1054876392" usec="0"/>
    <to sec="1054876429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.910624,1.7407,002,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_143{
style=filled;
color=gray75;
578[label="84.29.69.186s;252pkt 252fpkt", shape=ellipse, color=green];
stat143[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.29.69.186:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
578--3852[label="1;252pkt 252fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="84.29.69.186" src_port="1028"/>
    </slice>
    <from sec="1054876087" usec="0"/>
    <to sec="1054876104" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945936,1.64668,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_144{
style=filled;
color=gray75;
358[label="217.49.129.189s;111pkt 111fpkt", shape=rectangle, color=red];
579[label="217.49.129.189s;58pkt 58fpkt", shape=ellipse, color=green];
3869[label="217.49.129.189;134pkt 134fpkt", shape=pentagon, color=darkviolet];
stat144[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.49.129.189:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
358--579[label="1;58pkt 58fpkt"];
358--3869[label="1;111pkt 111fpkt"];
579--3869[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="217.49.129.189" src_port="1026"/>
    </slice>
    <from sec="1054876048" usec="0"/>
    <to sec="1054876069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.970355,1.7084,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_145{
style=filled;
color=gray75;
365[label="84.79.160.195s;205pkt 205fpkt", shape=rectangle, color=red];
583[label="84.79.160.195s;58pkt 58fpkt", shape=ellipse, color=green];
stat145[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.79.160.195:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
365--583[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="84.79.160.195" src_port="1028"/>
    </slice>
    <from sec="1054875898" usec="0"/>
    <to sec="1054875929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.970355,1.7084,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_146{
style=filled;
color=gray75;
368[label="48.118.73.197s;157pkt 157fpkt", shape=rectangle, color=red];
585[label="48.118.73.197s;60pkt 60fpkt", shape=ellipse, color=green];
stat146[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.118.73.197:64455, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64455: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
368--585[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="48.118.73.197" src_port="64455"/>
    </slice>
    <from sec="1054876011" usec="0"/>
    <to sec="1054876034" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945936,1.64668,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_150{
style=filled;
color=gray75;
404[label="196.208.144.234s;234pkt 234fpkt", shape=rectangle, color=red];
596[label="196.208.144.234s;231pkt 231fpkt", shape=ellipse, color=green];
4093[label="196.208.144.234;247pkt 247fpkt", shape=pentagon, color=darkviolet];
stat150[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.208.144.234:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
404--596[label="1;231pkt 231fpkt"];
404--4093[label="1;234pkt 234fpkt"];
596--4093[label="1;231pkt 231fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.208.144.234" src_port="1026"/>
    </slice>
    <from sec="1054876364" usec="0"/>
    <to sec="1054876406" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.910624,1.7407,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="198.128.180.150" dst_port="137" proto="udp" src_ip="99.75.164.248" src_port="32771"/>
      <filter dst_ip="198.128.180.150" dst_port="53" proto="udp" src_ip="99.75.164.248" src_port="32771"/>
      <from sec="1054875874" usec="0"/>
      <to sec="1054875886" usec="0"/>
    </slice>
    <from sec="1054875874" usec="0"/>
    <to sec="1054875886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945936,1.64668,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_152{
style=filled;
color=gray75;
425[label="213.29.195.252s;339pkt 339fpkt", shape=rectangle, color=red];
600[label="213.29.195.252s;391pkt 391fpkt", shape=ellipse, color=green];
3327[label="208.65.23.91;242pkt 242fpkt", shape=pentagon, color=darkviolet];
stat152[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.29.195.252:1086, *:137}[42.9553%]&lt;BR/&gt;{208.65.23.91:1025, *:137}[41.7526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1086: (25.0514%)&lt;BR/&gt; 1025: (15.7922%)&lt;BR/&gt; 1029: (9.15638%)&gt;];
}
425--600[label="0.961652;326pkt 326fpkt"];
425--673[label="0.477876;162pkt 162fpkt"];
600--673[label="0.618529;227pkt 227fpkt"];
600--3327[label="0.264463;64pkt 64fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="213.29.195.252" src_port="1086"/>
      <filter dst_port="137" src_ip="208.65.23.91" src_port="1025"/>
    </slice>
    <from sec="1054875831" usec="0"/>
    <to sec="1054875901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04984,1.61909,002,1 1 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_153{
style=filled;
color=gray75;
434[label="201.77.56.2s;100pkt 100fpkt", shape=rectangle, color=red];
603[label="201.77.56.2s;53pkt 53fpkt", shape=ellipse, color=green];
2725[label="201.77.56.2;147pkt 147fpkt", shape=pentagon, color=darkviolet];
4189[label="201.77.56.2;146pkt 146fpkt", shape=invtriangle, color=brown];
stat153[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.77.56.2:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 63193: (0.44843%)&lt;BR/&gt; 63189: (0.44843%)&lt;BR/&gt; 63185: (0.44843%)&lt;BR/&gt; 63181: (0.44843%)&gt;];
}
434--603[label="1;53pkt 53fpkt"];
434--2725[label="1;100pkt 100fpkt"];
434--4189[label="0.99;99pkt 99fpkt"];
603--2725[label="1;53pkt 53fpkt"];
603--4189[label="1;53pkt 53fpkt"];
2725--4189[label="1;146pkt 146fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.77.56.2"/>
    </slice>
    <from sec="1054875752" usec="0"/>
    <to sec="1054875774" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.970355,1.7084,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_154{
style=filled;
color=gray75;
447[label="208.80.20.46s;66pkt 66fpkt", shape=rectangle, color=red];
608[label="208.80.20.46s;66pkt 66fpkt", shape=ellipse, color=green];
stat154[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.80.20.46:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 16126: (0.757576%)&lt;BR/&gt; 8800: (0.757576%)&lt;BR/&gt; 8770: (0.757576%)&lt;BR/&gt; 8768: (0.757576%)&gt;];
}
447--608[label="1;66pkt 66fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.80.20.46"/>
    </slice>
    <from sec="1054875844" usec="0"/>
    <to sec="1054875853" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.970355,1.7084,010,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_155{
style=filled;
color=gray75;
458[label="192.162.151.114s;196pkt 196fpkt", shape=rectangle, color=red];
615[label="192.162.151.114s;196pkt 196fpkt", shape=ellipse, color=green];
stat155[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.162.151.114:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 6892: (1.02041%)&lt;BR/&gt; 8364: (0.765306%)&lt;BR/&gt; 8168: (0.765306%)&lt;BR/&gt; 6354: (0.765306%)&gt;];
}
458--615[label="1;196pkt 196fpkt"];
458--2676[label="0.0306122;6pkt 6fpkt"];
458--2700[label="0.0306122;6pkt 6fpkt"];
615--2676[label="0.0306122;6pkt 6fpkt"];
615--2700[label="0.0306122;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="192.162.151.114"/>
    </slice>
    <from sec="1054875647" usec="0"/>
    <to sec="1054875656" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.910624,1.7407,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="175.84.193.45" dst_port="139" proto="tcp" src_ip="208.50.53.167" src_port="80"/>
      <from sec="1054876003" usec="0"/>
      <to sec="1054876034" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="175.84.193.45" dst_port="139" proto="tcp" src_ip="192.42.161.167" src_port="80"/>
      <from sec="1054876022" usec="0"/>
      <to sec="1054876032" usec="0"/>
    </slice>
    <from sec="1054876003" usec="0"/>
    <to sec="1054876034" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.910624,1.7407,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="139" proto="tcp" src_ip="51.35.128.193" src_port="80"/>
      <from sec="1054875868" usec="0"/>
      <to sec="1054875906" usec="0"/>
    </slice>
    <from sec="1054875868" usec="0"/>
    <to sec="1054875906" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_180{
style=filled;
color=gray75;
395[label="219.130.67.226s;248pkt 248fpkt", shape=rectangle, color=red];
stat180[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.130.67.226:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
395--593[label="1;248pkt 248fpkt"];
395--670[label="1;248pkt 248fpkt"];
395--4049[label="1;248pkt 248fpkt"];
395--4716[label="1;248pkt 248fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="219.130.67.226" src_port="1027"/>
    </slice>
    <from sec="1054875763" usec="0"/>
    <to sec="1054875778" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867864,1.63028,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_189{
style=filled;
color=gray75;
74[label="210.27.195.133s;1pkt 1fpkt", shape=rectangle, color=red];
712[label="210.27.195.133;s;1pkt 1fpkt", shape=diamond, color=yellow];
2168[label="210.27.195.133;s;1pkt 1fpkt", shape=hexagon, color=black];
stat189[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.27.195.133:6881, 175.85.30.175:61380}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61380: (50%)&lt;BR/&gt; 6881: (50%)&gt;];
}
74--711[label="1;1pkt 1fpkt"];
74--712[label="1;1pkt 1fpkt"];
74--2168[label="1;1pkt 1fpkt"];
712--2168[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.85.30.175" dst_port="61380" src_ip="210.27.195.133" src_port="6881"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867864,1.63028,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_190{
style=filled;
color=gray75;
110[label="218.36.145.214s;1pkt 1fpkt", shape=rectangle, color=red];
714[label="218.36.145.214;s;1pkt 1fpkt", shape=diamond, color=yellow];
715[label="176.107.175.141;d;1pkt 1fpkt", shape=diamond, color=yellow];
2169[label="218.36.145.214;s;1pkt 1fpkt", shape=hexagon, color=black];
stat190[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.36.145.214:7000, 176.107.175.141:2180}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (50%)&lt;BR/&gt; 2180: (50%)&gt;];
}
110--714[label="1;1pkt 1fpkt"];
110--715[label="1;1pkt 1fpkt"];
110--2169[label="1;1pkt 1fpkt"];
714--715[label="1;1pkt 1fpkt"];
714--2169[label="1;1pkt 1fpkt"];
715--2169[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="176.107.175.141" dst_port="2180" src_ip="218.36.145.214" src_port="7000"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867864,1.63028,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_191{
style=filled;
color=gray75;
80[label="176.107.175.141s;1pkt 1fpkt", shape=rectangle, color=red];
713[label="218.36.145.214;d;1pkt 1fpkt", shape=diamond, color=yellow];
716[label="176.107.175.141;s;1pkt 1fpkt", shape=diamond, color=yellow];
2011[label="176.107.175.141;s;1pkt 1fpkt", shape=hexagon, color=black];
stat191[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.107.175.141:2180, 218.36.145.214:7000}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (50%)&lt;BR/&gt; 2180: (50%)&gt;];
}
80--713[label="1;1pkt 1fpkt"];
80--716[label="1;1pkt 1fpkt"];
80--2011[label="1;1pkt 1fpkt"];
713--716[label="1;1pkt 1fpkt"];
713--2011[label="1;1pkt 1fpkt"];
716--2011[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="218.36.145.214" dst_port="7000" src_ip="176.107.175.141" src_port="2180"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_193{
style=filled;
color=gray75;
723[label="219.172.68.75;s;4pkt 4fpkt", shape=diamond, color=yellow];
724[label="176.107.80.219;d;4pkt 4fpkt", shape=diamond, color=yellow];
2012[label="176.107.80.219;d;4pkt 4fpkt", shape=hexagon, color=black];
stat193[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.172.68.75:1755, 176.107.80.219:2407}[25%]&lt;BR/&gt;{219.172.68.75:1755, 176.107.80.219:2408}[25%]&lt;BR/&gt;{219.172.68.75:1755, 176.107.80.219:2409}[25%]&lt;BR/&gt;{219.172.68.75:1755, 176.107.80.219:2410}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (50%)&lt;BR/&gt; 2410: (12.5%)&lt;BR/&gt; 2409: (12.5%)&lt;BR/&gt; 2408: (12.5%)&lt;BR/&gt; 2407: (12.5%)&gt;];
}
723--724[label="1;4pkt 4fpkt"];
723--2012[label="1;4pkt 4fpkt"];
724--2012[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="176.107.80.219" dst_port="2410" src_ip="219.172.68.75" src_port="1755"/>
      <filter dst_ip="176.107.80.219" dst_port="2409" src_ip="219.172.68.75" src_port="1755"/>
      <filter dst_ip="176.107.80.219" dst_port="2408" src_ip="219.172.68.75" src_port="1755"/>
      <filter dst_ip="176.107.80.219" dst_port="2407" src_ip="219.172.68.75" src_port="1755"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_195{
style=filled;
color=gray75;
734[label="134.66.13.190;d;1110pkt 1110fpkt", shape=diamond, color=yellow];
stat195[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:4662, 134.66.13.190:*}[91.6216%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (45.8108%)&lt;BR/&gt; 4661: (0.900901%)&lt;BR/&gt; 80: (0.630631%)&lt;BR/&gt; 0: (0.540541%)&lt;BR/&gt; 4665: (0.315315%)&gt;];
}
734--2669[label="0.0018018;2pkt 2fpkt"];
734--2675[label="0.000900901;1pkt 1fpkt"];
734--2699[label="0.000900901;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.66.13.190" src_port="4662"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.571638,1.61542,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_196{
style=filled;
color=gray75;
927[label="51.158.66.93;s;166pkt 166fpkt", shape=diamond, color=yellow];
1613[label="176.107.182.210;d;86pkt 86fpkt", shape=diamond, color=yellow];
1642[label="169.189.200.50;d;100pkt 100fpkt", shape=diamond, color=yellow];
3355[label="200.88.66.96;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat196[shape=component, label=&lt;Rules:&lt;BR/&gt;{51.158.66.93:80, *:*}[47.9769%]&lt;BR/&gt;{*:80, 169.189.200.50:*}[28.3237%]&lt;BR/&gt;{*:80, 176.107.182.210:*}[23.4104%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1549%)&lt;BR/&gt; 443: (0.422535%)&lt;BR/&gt; 4191: (0.28169%)&lt;BR/&gt; 4188: (0.28169%)&lt;BR/&gt; 4175: (0.28169%)&gt;];
}
927--1018[label="0.177215;14pkt 14fpkt"];
927--1145[label="0.10241;17pkt 17fpkt"];
927--1222[label="0.0840336;10pkt 10fpkt"];
927--1226[label="0.0180723;3pkt 3fpkt"];
927--1642[label="0.06;6pkt 6fpkt"];
927--1792[label="0.0133333;2pkt 2fpkt"];
927--1803[label="0.111111;7pkt 7fpkt"];
927--1966[label="0.0060241;1pkt 1fpkt"];
927--1970[label="0.0421687;7pkt 7fpkt"];
927--1973[label="0.0542169;9pkt 9fpkt"];
927--1975[label="0.0180723;3pkt 3fpkt"];
927--1988[label="0.253012;42pkt 42fpkt"];
927--2139[label="1;83pkt 83fpkt"];
927--2172[label="0.060241;10pkt 10fpkt"];
927--2193[label="0.177419;11pkt 11fpkt"];
927--2359[label="0.0689655;8pkt 8fpkt"];
927--2492[label="0.0240964;4pkt 4fpkt"];
927--2520[label="0.0180723;3pkt 3fpkt"];
927--2611[label="0.0301205;5pkt 5fpkt"];
927--2616[label="0.0481928;8pkt 8fpkt"];
927--2619[label="0.0180723;3pkt 3fpkt"];
927--2631[label="1;76pkt 76fpkt"];
927--2669[label="0.0421687;7pkt 7fpkt"];
927--3340[label="1;166pkt 166fpkt"];
1613--1779[label="0.0232558;2pkt 2fpkt"];
1613--2283[label="0.0147059;1pkt 1fpkt"];
1613--2368[label="1;54pkt 54fpkt"];
1613--2439[label="0.0116279;1pkt 1fpkt"];
1613--2509[label="0.0232558;2pkt 2fpkt"];
1613--2567[label="0.0116279;1pkt 1fpkt"];
1613--2643[label="1;51pkt 51fpkt"];
1613--2852[label="0.0116279;1pkt 1fpkt"];
1613--3074[label="0.0116279;1pkt 1fpkt"];
1613--3170[label="0.666667;6pkt 6fpkt"];
1613--3339[label="0.0240964;2pkt 2fpkt"];
1613--3355[label="1;3pkt 3fpkt"];
1613--3504[label="0.0116279;1pkt 1fpkt"];
1613--3695[label="0.0454545;3pkt 3fpkt"];
1613--3753[label="0.0119048;1pkt 1fpkt"];
1613--3799[label="0.0277778;1pkt 1fpkt"];
1613--4497[label="0.0116279;1pkt 1fpkt"];
1613--4593[label="0.0119048;1pkt 1fpkt"];
1613--4607[label="0.0285714;1pkt 1fpkt"];
1642--1675[label="0.02;2pkt 2fpkt"];
1642--1695[label="0.02;2pkt 2fpkt"];
1642--1713[label="0.23;23pkt 23fpkt"];
1642--1882[label="0.0375;3pkt 3fpkt"];
1642--1892[label="0.205128;8pkt 8fpkt"];
1642--2259[label="0.06;6pkt 6fpkt"];
1642--2344[label="0.01;1pkt 1fpkt"];
1642--2362[label="0.03;3pkt 3fpkt"];
1642--2512[label="0.0547945;4pkt 4fpkt"];
1642--2575[label="0.205128;8pkt 8fpkt"];
1642--2889[label="0.028169;2pkt 2fpkt"];
1642--3031[label="0.02;2pkt 2fpkt"];
1642--3034[label="0.0576923;3pkt 3fpkt"];
1642--3093[label="0.190476;8pkt 8fpkt"];
1642--3121[label="0.05;5pkt 5fpkt"];
1642--3269[label="0.0326087;3pkt 3fpkt"];
1642--3284[label="0.18;18pkt 18fpkt"];
1642--3340[label="0.06;6pkt 6fpkt"];
1642--3343[label="0.0465116;4pkt 4fpkt"];
1642--3447[label="0.02;2pkt 2fpkt"];
1642--3584[label="0.23;23pkt 23fpkt"];
1642--3905[label="0.02;2pkt 2fpkt"];
1642--4256[label="0.028169;2pkt 2fpkt"];
1642--4315[label="0.02;2pkt 2fpkt"];
1642--4337[label="0.195122;8pkt 8fpkt"];
1642--4348[label="0.05;5pkt 5fpkt"];
1642--4410[label="0.18;18pkt 18fpkt"];
1642--4471[label="0.02;2pkt 2fpkt"];
1642--4531[label="0.23;23pkt 23fpkt"];
1642--4656[label="0.02;2pkt 2fpkt"];
1642--4814[label="0.02;2pkt 2fpkt"];
1642--4917[label="0.02;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="51.158.66.93" src_port="80"/>
      <filter dst_ip="169.189.200.50" src_port="80"/>
      <filter dst_ip="176.107.182.210" src_port="80"/>
    </slice>
    <from sec="1054875611" usec="0"/>
    <to sec="1054876453" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_198{
style=filled;
color=gray75;
1188[label="37.73.43.3;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat198[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.73.43.3:21167, 199.104.100.203:1214}[50%]&lt;BR/&gt;{37.73.43.3:21410, 199.104.100.203:1214}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 21410: (25%)&lt;BR/&gt; 21167: (25%)&gt;];
}
1188--2741[label="1;1pkt 1fpkt"];
1188--4773[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.104.100.203" dst_port="1214" src_ip="37.73.43.3" src_port="21410"/>
      <filter dst_ip="199.104.100.203" dst_port="1214" src_ip="37.73.43.3" src_port="21167"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_199{
style=filled;
color=gray75;
756[label="213.134.51.41;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat199[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.134.51.41:6881, 175.85.30.175:61672}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61672: (50%)&lt;BR/&gt; 6881: (50%)&gt;];
}
756--2994[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.85.30.175" dst_port="61672" src_ip="213.134.51.41" src_port="6881"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.697078,1.64478,999,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_201{
style=filled;
color=gray75;
14[label="211.188.193.21s;1pkt 1fpkt", shape=rectangle, color=red];
768[label="211.188.193.21;s;1pkt 1fpkt", shape=diamond, color=yellow];
965[label="169.189.206.76;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat201[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.188.193.21:1214, 169.189.206.76:6699}[50%]&lt;BR/&gt;{211.48.12.211:6699, 169.189.206.76:1404}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1214: (37.5%)&lt;BR/&gt; 1404: (12.5%)&gt;];
}
14--768[label="1;1pkt 1fpkt"];
14--965[label="1;1pkt 1fpkt"];
768--965[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.206.76" dst_port="1404" src_ip="211.48.12.211" src_port="6699"/>
      <filter dst_ip="169.189.206.76" dst_port="6699" src_ip="211.188.193.21" src_port="1214"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_204{
style=filled;
color=gray75;
1932[label="175.85.45.23;d;93pkt 93fpkt", shape=diamond, color=yellow];
2593[label="175.85.45.23;d;93pkt 93fpkt", shape=hexagon, color=black];
stat204[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.139.113.200:80, 175.85.45.23:*}[92.4731%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 5037: (0.537634%)&lt;BR/&gt; 5036: (0.537634%)&lt;BR/&gt; 5035: (0.537634%)&lt;BR/&gt; 5034: (0.537634%)&gt;];
}
1932--2593[label="1;93pkt 93fpkt"];
1932--3341[label="0.0752688;7pkt 7fpkt"];
2593--3341[label="0.0752688;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="175.85.45.23" src_ip="161.139.113.200" src_port="80"/>
    </slice>
    <from sec="1054876270" usec="0"/>
    <to sec="1054876427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840471,1.56547,503,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_207{
style=filled;
color=gray75;
55[label="133.108.16.81s;2pkt 2fpkt", shape=rectangle, color=red];
113[label="51.158.73.228s;3pkt 3fpkt", shape=rectangle, color=red];
815[label="48.139.26.79;s;3pkt 3fpkt", shape=diamond, color=yellow];
906[label="51.158.73.228;s;84pkt 84fpkt", shape=diamond, color=yellow];
1394[label="175.84.22.27;d;30pkt 30fpkt", shape=diamond, color=yellow];
1486[label="172.82.144.77;s;50pkt 50fpkt", shape=diamond, color=yellow];
1524[label="175.84.18.109;d;111pkt 111fpkt", shape=diamond, color=yellow];
1602[label="51.158.73.56;s;147pkt 147fpkt", shape=diamond, color=yellow];
1721[label="175.84.40.133;d;31pkt 31fpkt", shape=diamond, color=yellow];
1816[label="133.108.16.81;s;17pkt 17fpkt", shape=diamond, color=yellow];
2029[label="175.84.80.7;d;196pkt 196fpkt", shape=hexagon, color=black];
2243[label="175.84.22.27;d;30pkt 30fpkt", shape=hexagon, color=black];
3229[label="172.82.144.77;49pkt 49fpkt", shape=pentagon, color=darkviolet];
3257[label="133.108.16.81;17pkt 17fpkt", shape=pentagon, color=darkviolet];
stat207[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 175.84.80.7:*}[33.564%]&lt;BR/&gt;{51.158.73.56:80, *:*}[23.7024%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.8312%)&lt;BR/&gt; 443: (0.779221%)&lt;BR/&gt; 0: (0.38961%)&lt;BR/&gt; 33935: (0.25974%)&lt;BR/&gt; 1202: (0.25974%)&gt;];
}
55--814[label="0.5;1pkt 1fpkt"];
55--1486[label="0.5;1pkt 1fpkt"];
55--1721[label="0.5;1pkt 1fpkt"];
55--1816[label="0.5;1pkt 1fpkt"];
55--2029[label="0.5;1pkt 1fpkt"];
55--3229[label="0.5;1pkt 1fpkt"];
55--3257[label="0.5;1pkt 1fpkt"];
113--814[label="0.333333;1pkt 1fpkt"];
113--906[label="1;3pkt 3fpkt"];
113--2000[label="1;3pkt 3fpkt"];
113--2029[label="0.333333;1pkt 1fpkt"];
815--2029[label="1;3pkt 3fpkt"];
815--2669[label="1;3pkt 3fpkt"];
906--945[label="0.21875;7pkt 7fpkt"];
906--1394[label="0.533333;16pkt 16fpkt"];
906--1524[label="0.0714286;6pkt 6fpkt"];
906--1657[label="0.301587;19pkt 19fpkt"];
906--1836[label="0.130952;11pkt 11fpkt"];
906--1973[label="0.0595238;5pkt 5fpkt"];
906--1988[label="0.0119048;1pkt 1fpkt"];
906--2000[label="1;52pkt 52fpkt"];
906--2005[label="0.25;5pkt 5fpkt"];
906--2029[label="0.047619;4pkt 4fpkt"];
906--2243[label="0.533333;16pkt 16fpkt"];
906--2484[label="0.301587;19pkt 19fpkt"];
906--2609[label="1;6pkt 6fpkt"];
906--2611[label="0.0595238;5pkt 5fpkt"];
906--2616[label="0.0119048;1pkt 1fpkt"];
906--2669[label="0.0119048;1pkt 1fpkt"];
1394--1440[label="0.0333333;1pkt 1fpkt"];
1394--1463[label="0.266667;8pkt 8fpkt"];
1394--1602[label="0.166667;5pkt 5fpkt"];
1394--2000[label="0.533333;16pkt 16fpkt"];
1394--2243[label="1;30pkt 30fpkt"];
1394--2433[label="0.266667;8pkt 8fpkt"];
1394--3089[label="0.166667;5pkt 5fpkt"];
1486--2029[label="0.22;11pkt 11fpkt"];
1486--3229[label="1;49pkt 49fpkt"];
1524--1602[label="0.261261;29pkt 29fpkt"];
1524--1675[label="0.00900901;1pkt 1fpkt"];
1524--1694[label="0.0428571;3pkt 3fpkt"];
1524--1695[label="0.018018;2pkt 2fpkt"];
1524--1704[label="0.028169;2pkt 2fpkt"];
1524--1757[label="0.018018;2pkt 2fpkt"];
1524--1758[label="0.00900901;1pkt 1fpkt"];
1524--1882[label="0.05;4pkt 4fpkt"];
1524--2000[label="0.115385;6pkt 6fpkt"];
1524--2344[label="0.00900901;1pkt 1fpkt"];
1524--2496[label="0.018018;2pkt 2fpkt"];
1524--2561[label="0.018018;2pkt 2fpkt"];
1524--2570[label="0.0428571;3pkt 3fpkt"];
1524--2845[label="0.027027;2pkt 2fpkt"];
1524--2986[label="0.0204082;2pkt 2fpkt"];
1524--3031[label="0.00900901;1pkt 1fpkt"];
1524--3089[label="0.261261;29pkt 29fpkt"];
1524--3121[label="0.234234;26pkt 26fpkt"];
1524--3166[label="0.018018;2pkt 2fpkt"];
1524--3269[label="0.0434783;4pkt 4fpkt"];
1524--3439[label="0.0630631;7pkt 7fpkt"];
1524--3878[label="0.0357143;2pkt 2fpkt"];
1524--3905[label="0.018018;2pkt 2fpkt"];
1524--3955[label="0.0384615;3pkt 3fpkt"];
1524--4138[label="0.00900901;1pkt 1fpkt"];
1524--4238[label="0.027027;2pkt 2fpkt"];
1524--4315[label="0.00900901;1pkt 1fpkt"];
1524--4348[label="0.234234;26pkt 26fpkt"];
1524--4466[label="0.0630631;7pkt 7fpkt"];
1524--4656[label="0.018018;2pkt 2fpkt"];
1524--4786[label="0.0266667;2pkt 2fpkt"];
1524--4814[label="0.00900901;1pkt 1fpkt"];
1524--4864[label="0.0630631;7pkt 7fpkt"];
1524--4917[label="0.018018;2pkt 2fpkt"];
1602--1657[label="0.412698;26pkt 26fpkt"];
1602--1792[label="0.0612245;9pkt 9fpkt"];
1602--1836[label="0.14966;22pkt 22fpkt"];
1602--2005[label="0.35;7pkt 7fpkt"];
1602--2089[label="0.00680272;1pkt 1fpkt"];
1602--2243[label="0.166667;5pkt 5fpkt"];
1602--2484[label="0.412698;26pkt 26fpkt"];
1602--3089[label="1;147pkt 147fpkt"];
1721--1816[label="1;17pkt 17fpkt"];
1721--3257[label="1;17pkt 17fpkt"];
1816--3257[label="1;17pkt 17fpkt"];
2029--2145[label="0.0285714;1pkt 1fpkt"];
2029--2150[label="0.0434783;3pkt 3fpkt"];
2029--2185[label="0.0357143;7pkt 7fpkt"];
2029--2259[label="0.0102041;2pkt 2fpkt"];
2029--2356[label="0.05;3pkt 3fpkt"];
2029--2433[label="0.0102041;2pkt 2fpkt"];
2029--2440[label="0.0571429;4pkt 4fpkt"];
2029--2450[label="0.0319149;3pkt 3fpkt"];
2029--2496[label="0.00735294;1pkt 1fpkt"];
2029--2508[label="0.0533333;4pkt 4fpkt"];
2029--2567[label="0.0172414;2pkt 2fpkt"];
2029--2669[label="0.102041;20pkt 20fpkt"];
2029--2678[label="0.00510204;1pkt 1fpkt"];
2029--2765[label="0.00970874;1pkt 1fpkt"];
2029--2852[label="0.0163934;2pkt 2fpkt"];
2029--3009[label="0.0540541;2pkt 2fpkt"];
2029--3034[label="0.0192308;1pkt 1fpkt"];
2029--3143[label="0.583333;7pkt 7fpkt"];
2029--3166[label="0.00662252;1pkt 1fpkt"];
2029--3229[label="0.22449;11pkt 11fpkt"];
2029--3233[label="0.166667;1pkt 1fpkt"];
2029--3269[label="0.0108696;1pkt 1fpkt"];
2029--3272[label="0.00990099;1pkt 1fpkt"];
2029--3273[label="0.0102041;2pkt 2fpkt"];
2029--3284[label="0.0102041;2pkt 2fpkt"];
2029--3330[label="0.00510204;1pkt 1fpkt"];
2029--3350[label="0.416667;5pkt 5fpkt"];
2029--3360[label="0.25;3pkt 3fpkt"];
2029--3439[label="0.0102041;2pkt 2fpkt"];
2029--3452[label="0.0192308;1pkt 1fpkt"];
2029--3467[label="0.0215827;3pkt 3fpkt"];
2029--3487[label="0.181818;2pkt 2fpkt"];
2029--3574[label="0.0493827;4pkt 4fpkt"];
2029--3580[label="0.0361446;3pkt 3fpkt"];
2029--3588[label="0.0232558;1pkt 1fpkt"];
2029--3695[label="0.0454545;3pkt 3fpkt"];
2029--3714[label="0.00510204;1pkt 1fpkt"];
2029--3905[label="0.00571429;1pkt 1fpkt"];
2029--3912[label="0.0144928;1pkt 1fpkt"];
2029--3924[label="1;1pkt 1fpkt"];
2029--3987[label="0.0227273;1pkt 1fpkt"];
2029--4010[label="0.571429;4pkt 4fpkt"];
2029--4085[label="0.0508475;3pkt 3fpkt"];
2029--4151[label="0.00510204;1pkt 1fpkt"];
2029--4207[label="0.00970874;1pkt 1fpkt"];
2029--4358[label="0.583333;7pkt 7fpkt"];
2029--4405[label="0.01;1pkt 1fpkt"];
2029--4410[label="0.0102041;2pkt 2fpkt"];
2029--4428[label="0.00510204;1pkt 1fpkt"];
2029--4466[label="0.0102041;2pkt 2fpkt"];
2029--4474[label="0.0192308;1pkt 1fpkt"];
2029--4482[label="0.0217391;3pkt 3fpkt"];
2029--4525[label="0.0493827;4pkt 4fpkt"];
2029--4534[label="0.0227273;1pkt 1fpkt"];
2029--4656[label="0.00574713;1pkt 1fpkt"];
2029--4660[label="0.0144928;1pkt 1fpkt"];
2029--4665[label="0.5;1pkt 1fpkt"];
2029--4693[label="0.0227273;1pkt 1fpkt"];
2029--4732[label="0.0517241;3pkt 3fpkt"];
2029--4864[label="0.0102041;2pkt 2fpkt"];
2029--4871[label="0.0215827;3pkt 3fpkt"];
2029--4883[label="0.0493827;4pkt 4fpkt"];
2029--4917[label="0.00571429;1pkt 1fpkt"];
2029--4920[label="1;1pkt 1fpkt"];
2029--4943[label="0.0508475;3pkt 3fpkt"];
2243--2433[label="0.266667;8pkt 8fpkt"];
2243--3089[label="0.166667;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="51.158.73.56" src_port="80"/>
      <filter dst_ip="175.84.80.7" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="202.106.1.226"/>
      <from sec="1054875600" usec="0"/>
      <to sec="1054876248" usec="0"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.697078,1.64478,999,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_210{
style=filled;
color=gray75;
84[label="51.208.160.144s;1pkt 1fpkt", shape=rectangle, color=red];
827[label="51.208.160.144;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat210[shape=component, label=&lt;Rules:&lt;BR/&gt;{51.208.160.144:1755, 169.9.112.212:2081}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2081: (50%)&lt;BR/&gt; 1755: (50%)&gt;];
}
84--826[label="1;1pkt 1fpkt"];
84--827[label="1;1pkt 1fpkt"];
84--2325[label="1;1pkt 1fpkt"];
827--2325[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.9.112.212" dst_port="2081" src_ip="51.208.160.144" src_port="1755"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.697078,1.64478,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_211{
style=filled;
color=gray75;
70[label="48.182.62.123s;1pkt 1fpkt", shape=rectangle, color=red];
828[label="48.182.62.123;s;32pkt 32fpkt", shape=diamond, color=yellow];
976[label="175.85.133.31;d;24pkt 24fpkt", shape=diamond, color=yellow];
stat211[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.182.62.123:80, 175.85.133.31:*}[47.3684%]&lt;BR/&gt;{48.182.62.123:80, 175.85.68.191:*}[28.9474%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54772: (2.63158%)&lt;BR/&gt; 54832: (1.75439%)&lt;BR/&gt; 54830: (1.75439%)&lt;BR/&gt; 54826: (1.75439%)&gt;];
}
70--828[label="1;1pkt 1fpkt"];
70--976[label="1;1pkt 1fpkt"];
828--950[label="0.03125;1pkt 1fpkt"];
828--976[label="0.75;18pkt 18fpkt"];
828--2081[label="0.03125;1pkt 1fpkt"];
828--2669[label="0.4375;14pkt 14fpkt"];
976--1980[label="0.125;3pkt 3fpkt"];
976--2669[label="0.25;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="175.85.133.31" src_ip="48.182.62.123" src_port="80"/>
      <filter dst_ip="175.85.68.191" src_ip="48.182.62.123" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054875944" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.662663,1.58056,503,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_212{
style=filled;
color=gray75;
89[label="64.53.64.164s;1pkt 1fpkt", shape=rectangle, color=red];
829[label="175.84.48.40;d;3pkt 3fpkt", shape=diamond, color=yellow];
830[label="64.53.64.164;s;1pkt 1fpkt", shape=diamond, color=yellow];
3739[label="64.53.64.164;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat212[shape=component, label=&lt;Rules:&lt;BR/&gt;{64.53.64.164:80, 175.84.48.40:1621}[33.3333%]&lt;BR/&gt;{195.56.192.152:80, 175.84.48.40:1647}[33.3333%]&lt;BR/&gt;{195.56.192.152:80, 175.84.48.40:1648}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1621: (33.3333%)&lt;BR/&gt; 1648: (8.33333%)&lt;BR/&gt; 1647: (8.33333%)&gt;];
}
89--829[label="1;1pkt 1fpkt"];
89--830[label="1;1pkt 1fpkt"];
89--2669[label="1;1pkt 1fpkt"];
89--3739[label="1;1pkt 1fpkt"];
829--830[label="1;1pkt 1fpkt"];
829--2669[label="0.333333;1pkt 1fpkt"];
829--3739[label="1;1pkt 1fpkt"];
830--2669[label="1;1pkt 1fpkt"];
830--3739[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.48.40" dst_port="1648" src_ip="195.56.192.152" src_port="80"/>
      <filter dst_ip="175.84.48.40" dst_port="1647" src_ip="195.56.192.152" src_port="80"/>
      <filter dst_ip="175.84.48.40" dst_port="1621" src_ip="64.53.64.164" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876015" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.697078,1.64478,999,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_213{
style=filled;
color=gray75;
73[label="195.75.201.129s;1pkt 1fpkt", shape=rectangle, color=red];
831[label="195.75.201.129;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat213[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.75.201.129:6881, 175.85.30.175:61380}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61380: (50%)&lt;BR/&gt; 6881: (50%)&gt;];
}
73--711[label="1;1pkt 1fpkt"];
73--831[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.85.30.175" dst_port="61380" src_ip="195.75.201.129" src_port="6881"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.697078,1.64478,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_214{
style=filled;
color=gray75;
31[label="193.48.69.45s;2pkt 2fpkt", shape=rectangle, color=red];
1519[label="175.84.216.89;d;3pkt 3fpkt", shape=diamond, color=yellow];
stat214[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.48.69.45:80, 199.174.145.33:5046}[25%]&lt;BR/&gt;{193.48.69.45:80, 175.84.216.89:64291}[25%]&lt;BR/&gt;{193.48.69.45:80, 175.84.216.89:64292}[25%]&lt;BR/&gt;{193.48.69.45:80, 175.84.216.89:64302}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64292: (20%)&lt;BR/&gt; 64302: (10%)&lt;BR/&gt; 64291: (10%)&lt;BR/&gt; 5046: (10%)&gt;];
}
31--835[label="0.5;1pkt 1fpkt"];
31--836[label="1;2pkt 2fpkt"];
31--1519[label="0.5;1pkt 1fpkt"];
31--1986[label="0.5;1pkt 1fpkt"];
31--1987[label="0.5;1pkt 1fpkt"];
31--3024[label="1;2pkt 2fpkt"];
31--4312[label="1;2pkt 2fpkt"];
31--4813[label="1;2pkt 2fpkt"];
1519--3024[label="1;3pkt 3fpkt"];
1519--4312[label="1;3pkt 3fpkt"];
1519--4813[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.216.89" dst_port="64302" src_ip="193.48.69.45" src_port="80"/>
      <filter dst_ip="175.84.216.89" dst_port="64292" src_ip="193.48.69.45" src_port="80"/>
      <filter dst_ip="175.84.216.89" dst_port="64291" src_ip="193.48.69.45" src_port="80"/>
      <filter dst_ip="199.174.145.33" dst_port="5046" src_ip="193.48.69.45" src_port="80"/>
    </slice>
    <from sec="1054875898" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840471,1.56547,503,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_215{
style=filled;
color=gray75;
18[label="49.41.89.28s;1pkt 1fpkt", shape=rectangle, color=red];
757[label="193.48.69.28;s;39pkt 39fpkt", shape=diamond, color=yellow];
1136[label="169.189.202.183;d;2pkt 2fpkt", shape=diamond, color=yellow];
1912[label="175.85.9.200;d;28pkt 28fpkt", shape=diamond, color=yellow];
2174[label="169.189.202.183;d;2pkt 2fpkt", shape=hexagon, color=black];
2175[label="193.48.69.28;s;39pkt 39fpkt", shape=hexagon, color=black];
2914[label="193.48.69.28;39pkt 39fpkt", shape=pentagon, color=darkviolet];
stat215[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.48.69.28:80, 175.85.9.200:*}[71.7949%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1403: (1.66667%)&lt;BR/&gt; 1390: (1.66667%)&lt;BR/&gt; 26604: (1.33333%)&lt;BR/&gt; 26545: (1.33333%)&gt;];
}
18--757[label="1;1pkt 1fpkt"];
18--844[label="1;1pkt 1fpkt"];
18--2175[label="1;1pkt 1fpkt"];
18--2914[label="1;1pkt 1fpkt"];
757--759[label="0.0512821;2pkt 2fpkt"];
757--844[label="0.4;4pkt 4fpkt"];
757--845[label="0.0512821;2pkt 2fpkt"];
757--973[label="0.0625;1pkt 1fpkt"];
757--1136[label="1;2pkt 2fpkt"];
757--1912[label="1;28pkt 28fpkt"];
757--2174[label="1;2pkt 2fpkt"];
757--2175[label="1;39pkt 39fpkt"];
757--2669[label="0.128205;5pkt 5fpkt"];
757--2914[label="1;39pkt 39fpkt"];
1136--2174[label="1;2pkt 2fpkt"];
1136--2175[label="1;2pkt 2fpkt"];
1136--2669[label="1;2pkt 2fpkt"];
1136--2914[label="1;2pkt 2fpkt"];
1912--2175[label="1;28pkt 28fpkt"];
1912--2914[label="1;28pkt 28fpkt"];
2174--2175[label="1;2pkt 2fpkt"];
2174--2669[label="1;2pkt 2fpkt"];
2174--2914[label="1;2pkt 2fpkt"];
2175--2669[label="0.128205;5pkt 5fpkt"];
2175--2914[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="175.85.9.200" src_ip="193.48.69.28" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876342" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_216{
style=filled;
color=gray75;
1392[label="50.37.196.238;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat216[shape=component, label=&lt;Rules:&lt;BR/&gt;{50.37.196.238:0, 169.9.2.83:0}[50%]&lt;BR/&gt;{50.37.196.238:3703, 169.9.41.97:3197}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (50%)&lt;BR/&gt; 3703: (25%)&lt;BR/&gt; 3197: (25%)&gt;];
}
1392--2106[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.9.41.97" dst_port="3197" src_ip="50.37.196.238" src_port="3703"/>
      <filter dst_ip="169.9.2.83" src_ip="50.37.196.238"/>
    </slice>
    <from sec="1054875863" usec="0"/>
    <to sec="1054876189" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05661,1.61938,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_217{
style=filled;
color=gray75;
855[label="175.85.133.94;d;13pkt 13fpkt", shape=diamond, color=yellow];
856[label="129.0.99.119;s;13pkt 13fpkt", shape=diamond, color=yellow];
3482[label="129.0.99.119;28pkt 28fpkt", shape=pentagon, color=darkviolet];
4488[label="129.0.99.119;28pkt 28fpkt", shape=invtriangle, color=brown];
4873[label="129.0.99.119;28pkt 28fpkt", shape=invhouse, color=bisque];
stat217[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.99.119:80, 175.85.133.94:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33745: (2.27273%)&lt;BR/&gt; 33667: (2.27273%)&lt;BR/&gt; 33613: (2.27273%)&lt;BR/&gt; 33417: (2.27273%)&gt;];
}
855--856[label="1;13pkt 13fpkt"];
855--3482[label="1;13pkt 13fpkt"];
855--4488[label="1;13pkt 13fpkt"];
855--4873[label="1;13pkt 13fpkt"];
856--3482[label="1;13pkt 13fpkt"];
856--4488[label="1;13pkt 13fpkt"];
856--4873[label="1;13pkt 13fpkt"];
3482--4488[label="1;28pkt 28fpkt"];
3482--4873[label="1;28pkt 28fpkt"];
4488--4873[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="175.85.133.94" src_ip="129.0.99.119" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876166" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867864,1.63028,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_219{
style=filled;
color=gray75;
401[label="210.42.4.230s;1pkt 1fpkt", shape=rectangle, color=red];
879[label="169.9.52.82;d;2pkt 2fpkt", shape=diamond, color=yellow];
880[label="48.181.60.230;s;1pkt 1fpkt", shape=diamond, color=yellow];
2410[label="169.9.52.82;d;2pkt 2fpkt", shape=hexagon, color=black];
stat219[shape=component, label=&lt;Rules:&lt;BR/&gt;{51.147.25.113:5190, 169.9.52.82:59833}[50%]&lt;BR/&gt;{48.181.60.230:10887, 169.9.52.82:33498}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33498: (33.3333%)&lt;BR/&gt; 10887: (33.3333%)&lt;BR/&gt; 59833: (16.6667%)&lt;BR/&gt; 5190: (16.6667%)&gt;];
}
401--879[label="1;1pkt 1fpkt"];
401--880[label="1;1pkt 1fpkt"];
401--2410[label="1;1pkt 1fpkt"];
879--880[label="1;1pkt 1fpkt"];
879--2410[label="1;2pkt 2fpkt"];
880--2410[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.9.52.82" dst_port="33498" src_ip="48.181.60.230" src_port="10887"/>
      <filter dst_ip="169.9.52.82" dst_port="59833" src_ip="51.147.25.113" src_port="5190"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_220{
style=filled;
color=gray75;
6[label="218.192.28.9s;1pkt 1fpkt", shape=rectangle, color=red];
stat220[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.192.28.9:80, 175.85.35.76:10068}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10068: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6--888[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.85.35.76" dst_port="10068" src_ip="218.192.28.9" src_port="80"/>
    </slice>
    <from sec="1054875672" usec="0"/>
    <to sec="1054875679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840471,1.56547,503,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_221{
style=filled;
color=gray75;
117[label="203.74.179.244s;1pkt 1fpkt", shape=rectangle, color=red];
841[label="203.74.179.230;s;1pkt 1fpkt", shape=diamond, color=yellow];
889[label="203.74.179.244;s;1pkt 1fpkt", shape=diamond, color=yellow];
1195[label="199.96.62.13;s;101pkt 101fpkt", shape=diamond, color=yellow];
1742[label="175.84.50.71;d;88pkt 88fpkt", shape=diamond, color=yellow];
2081[label="199.104.123.144;d;64pkt 64fpkt", shape=hexagon, color=black];
2570[label="192.77.36.205;s;70pkt 70fpkt", shape=hexagon, color=black];
4140[label="203.74.179.244;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat221[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.96.62.13:80, *:*}[31.5625%]&lt;BR/&gt;{*:80, 175.84.50.71:*}[27.5%]&lt;BR/&gt;{192.77.36.205:80, *:*}[21.875%]&lt;BR/&gt;{*:*, 199.104.123.144:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.6413%)&lt;BR/&gt; 64675: (0.455927%)&lt;BR/&gt; 62075: (0.303951%)&lt;BR/&gt; 1762: (0.303951%)&lt;BR/&gt; 1759: (0.303951%)&gt;];
}
117--790[label="1;1pkt 1fpkt"];
117--889[label="1;1pkt 1fpkt"];
117--2252[label="1;1pkt 1fpkt"];
117--2669[label="1;1pkt 1fpkt"];
117--4140[label="1;1pkt 1fpkt"];
841--2252[label="1;1pkt 1fpkt"];
841--2669[label="1;1pkt 1fpkt"];
889--2252[label="1;1pkt 1fpkt"];
889--2669[label="1;1pkt 1fpkt"];
889--4140[label="1;1pkt 1fpkt"];
1195--1226[label="0.019802;2pkt 2fpkt"];
1195--1594[label="0.019802;2pkt 2fpkt"];
1195--1742[label="0.0568182;5pkt 5fpkt"];
1195--2081[label="0.015625;1pkt 1fpkt"];
1195--2089[label="0.00990099;1pkt 1fpkt"];
1195--2094[label="0.00990099;1pkt 1fpkt"];
1195--2213[label="1;72pkt 72fpkt"];
1195--2252[label="0.356436;36pkt 36fpkt"];
1195--2492[label="0.039604;4pkt 4fpkt"];
1195--2520[label="0.019802;2pkt 2fpkt"];
1195--2669[label="0.0990099;10pkt 10fpkt"];
1742--1758[label="0.0113636;1pkt 1fpkt"];
1742--1774[label="0.0142857;1pkt 1fpkt"];
1742--1882[label="0.0125;1pkt 1fpkt"];
1742--1893[label="0.0227273;1pkt 1fpkt"];
1742--2259[label="0.0113636;1pkt 1fpkt"];
1742--2429[label="0.0113636;1pkt 1fpkt"];
1742--2552[label="0.0142857;1pkt 1fpkt"];
1742--2570[label="0.0142857;1pkt 1fpkt"];
1742--2845[label="0.0135135;1pkt 1fpkt"];
1742--3034[label="0.0384615;2pkt 2fpkt"];
1742--3081[label="0.0208333;1pkt 1fpkt"];
1742--3233[label="0.166667;1pkt 1fpkt"];
1742--3269[label="0.0113636;1pkt 1fpkt"];
1742--3291[label="0.0357143;1pkt 1fpkt"];
1742--3307[label="0.0140845;1pkt 1fpkt"];
1742--3439[label="0.0113636;1pkt 1fpkt"];
1742--3447[label="0.0113636;1pkt 1fpkt"];
1742--3452[label="0.0192308;1pkt 1fpkt"];
1742--3464[label="0.075;6pkt 6fpkt"];
1742--3503[label="0.0322581;1pkt 1fpkt"];
1742--3511[label="0.0113636;1pkt 1fpkt"];
1742--3623[label="0.025;1pkt 1fpkt"];
1742--3905[label="0.0227273;2pkt 2fpkt"];
1742--3912[label="0.0144928;1pkt 1fpkt"];
1742--3955[label="0.0128205;1pkt 1fpkt"];
1742--4044[label="0.115385;3pkt 3fpkt"];
1742--4138[label="0.0113636;1pkt 1fpkt"];
1742--4238[label="0.0135135;1pkt 1fpkt"];
1742--4332[label="0.0208333;1pkt 1fpkt"];
1742--4466[label="0.0113636;1pkt 1fpkt"];
1742--4471[label="0.0113636;1pkt 1fpkt"];
1742--4474[label="0.0192308;1pkt 1fpkt"];
1742--4480[label="0.075;6pkt 6fpkt"];
1742--4499[label="0.0113636;1pkt 1fpkt"];
1742--4547[label="0.025641;1pkt 1fpkt"];
1742--4656[label="0.0227273;2pkt 2fpkt"];
1742--4660[label="0.0144928;1pkt 1fpkt"];
1742--4786[label="0.0133333;1pkt 1fpkt"];
1742--4823[label="0.0208333;1pkt 1fpkt"];
1742--4864[label="0.0113636;1pkt 1fpkt"];
1742--4917[label="0.0227273;2pkt 2fpkt"];
2081--2213[label="0.015625;1pkt 1fpkt"];
2081--2669[label="0.03125;2pkt 2fpkt"];
2081--3714[label="0.015625;1pkt 1fpkt"];
2081--3775[label="0.015625;1pkt 1fpkt"];
2570--2571[label="0.0142857;1pkt 1fpkt"];
2570--2589[label="0.0204082;1pkt 1fpkt"];
2570--2611[label="0.0142857;1pkt 1fpkt"];
2570--2616[label="0.0285714;2pkt 2fpkt"];
2570--2619[label="0.0142857;1pkt 1fpkt"];
2570--2650[label="0.0285714;2pkt 2fpkt"];
2570--2669[label="0.0142857;1pkt 1fpkt"];
2570--3955[label="1;70pkt 70fpkt"];
</description>
    <slice>
      <filter dst_ip="199.104.123.144"/>
      <filter src_ip="199.96.62.13" src_port="80"/>
      <filter src_ip="192.77.36.205" src_port="80"/>
      <filter dst_ip="175.84.50.71" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_222{
style=filled;
color=gray75;
890[label="51.104.246.25;s;1924pkt 1924fpkt", shape=diamond, color=yellow];
stat222[shape=component, label=&lt;Rules:&lt;BR/&gt;{51.104.246.25:0, *:0}[99.7921%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.7921%)&lt;BR/&gt; 445: (0.0519751%)&lt;BR/&gt; 139: (0.0519751%)&lt;BR/&gt; 2132: (0.0259875%)&lt;BR/&gt; 2131: (0.0259875%)&gt;];
}
890--1998[label="1;1715pkt 1715fpkt"];
890--2656[label="1;1715pkt 1715fpkt"];
</description>
    <slice>
      <filter src_ip="51.104.246.25"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03086,1.67671,010,1 1 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_223{
style=filled;
color=gray75;
439[label="139.237.3.12s;5832pkt 5832fpkt", shape=rectangle, color=red];
605[label="139.237.3.12s;2919pkt 2919fpkt", shape=ellipse, color=green];
902[label="139.237.3.12;s;6212pkt 6212fpkt", shape=diamond, color=yellow];
stat223[shape=component, label=&lt;Rules:&lt;BR/&gt;{139.237.3.12:*, *:17300}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 17300: (50%)&lt;BR/&gt; 1681: (0.0701731%)&lt;BR/&gt; 1679: (0.0701731%)&lt;BR/&gt; 1678: (0.0701731%)&lt;BR/&gt; 1675: (0.0701731%)&gt;];
}
439--605[label="1;2919pkt 2919fpkt"];
439--902[label="0.980281;5717pkt 5717fpkt"];
605--902[label="1;2919pkt 2919fpkt"];
</description>
    <slice>
      <filter dst_port="17300" src_ip="139.237.3.12"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.697078,1.64478,999,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_225{
style=filled;
color=gray75;
10[label="52.86.70.11s;1pkt 1fpkt", shape=rectangle, color=red];
964[label="52.86.70.11;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat225[shape=component, label=&lt;Rules:&lt;BR/&gt;{52.86.70.11:6699, 169.189.200.36:1106}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1106: (50%)&gt;];
}
10--740[label="1;1pkt 1fpkt"];
10--964[label="1;1pkt 1fpkt"];
10--2015[label="1;1pkt 1fpkt"];
964--2015[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.200.36" dst_port="1106" src_ip="52.86.70.11" src_port="6699"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_226{
style=filled;
color=gray75;
775[label="219.44.48.16;s;2pkt 2fpkt", shape=diamond, color=yellow];
967[label="175.85.9.213;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat226[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.44.48.16:37989, 175.85.9.213:25}[50%]&lt;BR/&gt;{219.44.48.16:37998, 175.85.9.213:25}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 37998: (25%)&lt;BR/&gt; 37989: (25%)&gt;];
}
775--967[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="175.85.9.213" dst_port="25" src_ip="219.44.48.16" src_port="37998"/>
      <filter dst_ip="175.85.9.213" dst_port="25" src_ip="219.44.48.16" src_port="37989"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054875802" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_228{
style=filled;
color=gray75;
9[label="162.81.234.10s;1pkt 1fpkt", shape=rectangle, color=red];
stat228[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.81.234.10:64868, 198.128.176.101:1755}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64868: (50%)&lt;BR/&gt; 1755: (50%)&gt;];
}
9--780[label="1;1pkt 1fpkt"];
9--977[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.128.176.101" dst_port="1755" src_ip="162.81.234.10" src_port="64868"/>
    </slice>
    <from sec="1054875975" usec="0"/>
    <to sec="1054875983" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_231{
style=filled;
color=gray75;
818[label="51.147.159.68;s;1pkt 1fpkt", shape=diamond, color=yellow];
988[label="169.189.14.134;d;1pkt 1fpkt", shape=diamond, color=yellow];
2101[label="169.189.14.134;d;1pkt 1fpkt", shape=hexagon, color=black];
stat231[shape=component, label=&lt;Rules:&lt;BR/&gt;{51.147.159.68:80, 169.189.14.134:1845}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1845: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
818--988[label="1;1pkt 1fpkt"];
818--2101[label="1;1pkt 1fpkt"];
818--2669[label="1;1pkt 1fpkt"];
988--2101[label="1;1pkt 1fpkt"];
988--2669[label="1;1pkt 1fpkt"];
2101--2669[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.14.134" dst_port="1845" src_ip="51.147.159.68" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770739,1.60066,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_232{
style=filled;
color=gray75;
995[label="37.16.210.141;s;1pkt 1fpkt", shape=diamond, color=yellow];
1029[label="99.43.46.143;s;1pkt 1fpkt", shape=diamond, color=yellow];
2032[label="37.16.210.141;s;1pkt 1fpkt", shape=hexagon, color=black];
2324[label="169.189.200.48;d;4pkt 4fpkt", shape=hexagon, color=black];
3604[label="37.16.210.141;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat232[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.42.4.12:1863, 169.189.200.48:1035}[25%]&lt;BR/&gt;{37.16.210.141:6699, 169.189.200.48:1110}[25%]&lt;BR/&gt;{99.43.46.143:6699, 169.189.200.48:1234}[25%]&lt;BR/&gt;{192.42.2.147:1863, 169.189.200.48:1217}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (37.5%)&lt;BR/&gt; 1110: (25%)&lt;BR/&gt; 1863: (12.5%)&lt;BR/&gt; 1234: (12.5%)&lt;BR/&gt; 1217: (6.25%)&gt;];
}
995--2032[label="1;1pkt 1fpkt"];
995--2324[label="1;1pkt 1fpkt"];
995--3604[label="1;1pkt 1fpkt"];
1029--2324[label="1;1pkt 1fpkt"];
1029--4886[label="1;1pkt 1fpkt"];
2032--2324[label="1;1pkt 1fpkt"];
2032--3604[label="1;1pkt 1fpkt"];
2324--3604[label="1;1pkt 1fpkt"];
2324--4886[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.200.48" dst_port="1217" src_ip="192.42.2.147" src_port="1863"/>
      <filter dst_ip="169.189.200.48" dst_port="1234" src_ip="99.43.46.143" src_port="6699"/>
      <filter dst_ip="169.189.200.48" dst_port="1110" src_ip="37.16.210.141" src_port="6699"/>
      <filter dst_ip="169.189.200.48" dst_port="1035" src_ip="192.42.4.12" src_port="1863"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.955904,1.53643,503,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_233{
style=filled;
color=gray75;
387[label="84.60.0.215s;1pkt 1fpkt", shape=rectangle, color=red];
837[label="199.98.97.112;d;26pkt 26fpkt", shape=diamond, color=yellow];
1003[label="52.12.124.215;s;1pkt 1fpkt", shape=diamond, color=yellow];
1420[label="139.208.67.121;s;1pkt 1fpkt", shape=diamond, color=yellow];
1498[label="219.105.132.126;s;290pkt 290fpkt", shape=diamond, color=yellow];
2258[label="52.12.124.215;s;1pkt 1fpkt", shape=hexagon, color=black];
2299[label="219.105.132.126;s;289pkt 289fpkt", shape=hexagon, color=black];
3429[label="139.197.54.109;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3510[label="219.105.132.126;291pkt 291fpkt", shape=pentagon, color=darkviolet];
4006[label="52.12.124.215;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4700[label="52.12.124.215;1pkt 1fpkt", shape=invtriangle, color=brown];
stat233[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.105.132.126:80, 202.145.67.148:*}[89.1892%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3355%)&lt;BR/&gt; 6699: (0.609081%)&lt;BR/&gt; 2424: (0.332226%)&lt;BR/&gt; 1631: (0.332226%)&lt;BR/&gt; 1700: (0.221484%)&gt;];
}
387--837[label="1;1pkt 1fpkt"];
387--1003[label="1;1pkt 1fpkt"];
387--2258[label="1;1pkt 1fpkt"];
387--4006[label="1;1pkt 1fpkt"];
387--4700[label="1;1pkt 1fpkt"];
837--1003[label="1;1pkt 1fpkt"];
837--1420[label="1;1pkt 1fpkt"];
837--1498[label="0.807692;21pkt 21fpkt"];
837--1587[label="1;1pkt 1fpkt"];
837--2258[label="1;1pkt 1fpkt"];
837--2299[label="0.769231;20pkt 20fpkt"];
837--3045[label="1;1pkt 1fpkt"];
837--3429[label="1;1pkt 1fpkt"];
837--3510[label="0.807692;21pkt 21fpkt"];
837--4006[label="1;1pkt 1fpkt"];
837--4700[label="1;1pkt 1fpkt"];
1003--2258[label="1;1pkt 1fpkt"];
1003--4006[label="1;1pkt 1fpkt"];
1003--4700[label="1;1pkt 1fpkt"];
1498--1988[label="0.0103448;3pkt 3fpkt"];
1498--2202[label="0.0102041;1pkt 1fpkt"];
1498--2299[label="1;289pkt 289fpkt"];
1498--3510[label="1;290pkt 290fpkt"];
2258--4006[label="1;1pkt 1fpkt"];
2258--4700[label="1;1pkt 1fpkt"];
2299--3510[label="1;289pkt 289fpkt"];
4006--4700[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="202.145.67.148" src_ip="219.105.132.126" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.571638,1.61542,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_235{
style=filled;
color=gray75;
853[label="175.85.30.131;d;50pkt 50fpkt", shape=diamond, color=yellow];
1011[label="52.106.131.115;s;2pkt 2fpkt", shape=diamond, color=yellow];
3388[label="49.36.172.102;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat235[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 175.85.30.131:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2234: (11.3208%)&lt;BR/&gt; 2855: (3.77358%)&lt;BR/&gt; 2304: (3.77358%)&lt;BR/&gt; 1886: (3.77358%)&lt;BR/&gt; 3412: (2.83019%)&gt;];
}
853--1011[label="1;2pkt 2fpkt"];
853--3388[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.85.30.131"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_240{
style=filled;
color=gray75;
325[label="200.213.106.161s;1pkt 1fpkt", shape=rectangle, color=red];
stat240[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.31.206.161:25, 129.24.203.13:1388}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1388: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
325--1092[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="129.24.203.13" dst_port="1388" src_ip="199.31.206.161" src_port="25"/>
    </slice>
    <from sec="1054876166" usec="0"/>
    <to sec="1054876174" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_241{
style=filled;
color=gray75;
943[label="220.24.15.151;s;658pkt 658fpkt", shape=diamond, color=yellow];
1095[label="175.84.32.75;d;173pkt 173fpkt", shape=diamond, color=yellow];
2226[label="175.84.32.69;d;151pkt 151fpkt", shape=hexagon, color=black];
stat241[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.24.15.151:80, *:*}[71.8341%]&lt;BR/&gt;{220.24.15.196:80, *:*}[24.1266%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8982%)&lt;BR/&gt; 1490: (0.305499%)&lt;BR/&gt; 1489: (0.305499%)&lt;BR/&gt; 1488: (0.305499%)&lt;BR/&gt; 1487: (0.305499%)&gt;];
}
943--1093[label="0.533742;87pkt 87fpkt"];
943--1095[label="0.0231214;4pkt 4fpkt"];
943--1102[label="0.419643;47pkt 47fpkt"];
943--1106[label="0.0377358;2pkt 2fpkt"];
943--1268[label="0.393443;48pkt 48fpkt"];
943--1387[label="0.0344828;1pkt 1fpkt"];
943--1978[label="0.503401;74pkt 74fpkt"];
943--2069[label="0.4;56pkt 56fpkt"];
943--2073[label="0.410448;55pkt 55fpkt"];
943--2076[label="0.0377358;2pkt 2fpkt"];
943--2159[label="0.393443;48pkt 48fpkt"];
943--2226[label="0.410596;62pkt 62fpkt"];
943--2669[label="0.0106383;7pkt 7fpkt"];
1095--1285[label="0.00578035;1pkt 1fpkt"];
1095--2070[label="0.971098;168pkt 168fpkt"];
1095--2669[label="0.132948;23pkt 23fpkt"];
1095--3167[label="0.00578035;1pkt 1fpkt"];
1095--4367[label="0.00578035;1pkt 1fpkt"];
2226--2669[label="0.178808;27pkt 27fpkt"];
2226--2674[label="0.00662252;1pkt 1fpkt"];
2226--2698[label="0.00662252;1pkt 1fpkt"];
2226--2709[label="0.00662252;1pkt 1fpkt"];
2226--3167[label="0.00662252;1pkt 1fpkt"];
2226--3620[label="0.231788;35pkt 35fpkt"];
2226--4367[label="0.00662252;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="220.24.15.151" src_port="80"/>
      <filter src_ip="220.24.15.196" src_port="80"/>
    </slice>
    <from sec="1054875629" usec="0"/>
    <to sec="1054875922" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="175.85.54.175"/>
      <from sec="1054876060" usec="0"/>
      <to sec="1054876422" usec="0"/>
    </slice>
    <from sec="1054876060" usec="0"/>
    <to sec="1054876422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="51.33.0.72"/>
      <from sec="1054875739" usec="0"/>
      <to sec="1054875772" usec="0"/>
    </slice>
    <from sec="1054875739" usec="0"/>
    <to sec="1054875772" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="169.189.205.107"/>
      <from sec="1054875600" usec="0"/>
      <to sec="1054876234" usec="0"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876234" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.955904,1.53643,999,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_247{
style=filled;
color=gray75;
326[label="52.19.140.161s;1pkt 1fpkt", shape=rectangle, color=red];
703[label="169.9.111.96;d;107pkt 107fpkt", shape=diamond, color=yellow];
989[label="208.141.64.51;s;1pkt 1fpkt", shape=diamond, color=yellow];
1131[label="221.34.82.134;s;1pkt 1fpkt", shape=diamond, color=yellow];
1142[label="217.9.40.161;s;1pkt 1fpkt", shape=diamond, color=yellow];
1243[label="36.75.180.21;s;1pkt 1fpkt", shape=diamond, color=yellow];
2251[label="217.9.40.161;s;1pkt 1fpkt", shape=hexagon, color=black];
2385[label="221.34.82.134;s;1pkt 1fpkt", shape=hexagon, color=black];
3684[label="37.72.107.154;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4517[label="221.34.82.134;1pkt 1fpkt", shape=invtriangle, color=brown];
stat247[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:4662, 169.9.111.96:*}[74.7664%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (35.7759%)&lt;BR/&gt; 2234: (8.62069%)&lt;BR/&gt; 4598: (1.72414%)&lt;BR/&gt; 1889: (1.72414%)&lt;BR/&gt; 1296: (1.72414%)&gt;];
}
326--703[label="1;1pkt 1fpkt"];
326--1142[label="1;1pkt 1fpkt"];
326--2251[label="1;1pkt 1fpkt"];
703--989[label="1;1pkt 1fpkt"];
703--1131[label="1;1pkt 1fpkt"];
703--1142[label="1;1pkt 1fpkt"];
703--1243[label="1;1pkt 1fpkt"];
703--1720[label="1;1pkt 1fpkt"];
703--1726[label="1;1pkt 1fpkt"];
703--2251[label="1;1pkt 1fpkt"];
703--2385[label="1;1pkt 1fpkt"];
703--3204[label="1;1pkt 1fpkt"];
703--3684[label="1;1pkt 1fpkt"];
703--4109[label="1;1pkt 1fpkt"];
703--4517[label="1;1pkt 1fpkt"];
1131--2385[label="1;1pkt 1fpkt"];
1131--4517[label="1;1pkt 1fpkt"];
1142--2251[label="1;1pkt 1fpkt"];
2385--4517[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.9.111.96" src_port="4662"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05661,1.61938,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_248{
style=filled;
color=gray75;
864[label="199.98.139.44;d;160pkt 160fpkt", shape=diamond, color=yellow];
1110[label="51.147.54.78;s;20pkt 20fpkt", shape=diamond, color=yellow];
1627[label="51.83.15.100;s;7pkt 7fpkt", shape=diamond, color=yellow];
3215[label="51.214.153.74;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3234[label="51.147.54.78;20pkt 20fpkt", shape=pentagon, color=darkviolet];
3290[label="219.105.132.85;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3375[label="51.83.15.100;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3469[label="211.136.0.117;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3716[label="219.41.176.160;12pkt 12fpkt", shape=pentagon, color=darkviolet];
4385[label="51.214.153.74;2pkt 2fpkt", shape=invtriangle, color=brown];
4414[label="219.105.132.85;6pkt 6fpkt", shape=invtriangle, color=brown];
4445[label="51.83.15.100;7pkt 7fpkt", shape=invtriangle, color=brown];
4841[label="51.214.153.74;3pkt 3fpkt", shape=invhouse, color=bisque];
4896[label="219.41.176.160;12pkt 12fpkt", shape=invhouse, color=bisque];
stat248[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 199.98.139.44:*}[90.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6255%)&lt;BR/&gt; 2346: (0.749064%)&lt;BR/&gt; 2345: (0.749064%)&lt;BR/&gt; 1420: (0.749064%)&lt;BR/&gt; 1415: (0.749064%)&gt;];
}
864--1110[label="1;20pkt 20fpkt"];
864--1137[label="0.00625;1pkt 1fpkt"];
864--1154[label="0.08125;13pkt 13fpkt"];
864--1202[label="0.0140845;2pkt 2fpkt"];
864--1212[label="0.00892857;1pkt 1fpkt"];
864--1242[label="0.00625;1pkt 1fpkt"];
864--1327[label="0.0125;2pkt 2fpkt"];
864--1334[label="0.0186916;2pkt 2fpkt"];
864--1338[label="0.0392157;2pkt 2fpkt"];
864--1440[label="0.0125;1pkt 1fpkt"];
864--1441[label="0.0540541;6pkt 6fpkt"];
864--1454[label="0.0125;2pkt 2fpkt"];
864--1588[label="0.0125;2pkt 2fpkt"];
864--1627[label="1;7pkt 7fpkt"];
864--1681[label="0.0131579;1pkt 1fpkt"];
864--1700[label="0.0218978;3pkt 3fpkt"];
864--1757[label="0.00735294;1pkt 1fpkt"];
864--1779[label="0.00724638;1pkt 1fpkt"];
864--2150[label="0.0144928;1pkt 1fpkt"];
864--2176[label="0.00625;1pkt 1fpkt"];
864--2192[label="0.109244;13pkt 13fpkt"];
864--2275[label="0.0540541;6pkt 6fpkt"];
864--2281[label="0.0125;2pkt 2fpkt"];
864--2291[label="0.0121951;1pkt 1fpkt"];
864--2329[label="0.00625;1pkt 1fpkt"];
864--2349[label="0.027027;2pkt 2fpkt"];
864--2428[label="0.0147059;1pkt 1fpkt"];
864--2450[label="0.0212766;2pkt 2fpkt"];
864--2496[label="0.00735294;1pkt 1fpkt"];
864--2509[label="0.00847458;1pkt 1fpkt"];
864--2669[label="0.1875;30pkt 30fpkt"];
864--2722[label="0.08125;13pkt 13fpkt"];
864--2756[label="0.0217391;2pkt 2fpkt"];
864--2765[label="0.0194175;2pkt 2fpkt"];
864--2806[label="0.0235294;2pkt 2fpkt"];
864--2835[label="0.075;3pkt 3fpkt"];
864--2889[label="0.0140845;1pkt 1fpkt"];
864--2949[label="0.0277778;1pkt 1fpkt"];
864--3065[label="0.0517241;6pkt 6fpkt"];
864--3083[label="0.0125;2pkt 2fpkt"];
864--3098[label="0.015873;2pkt 2fpkt"];
864--3166[label="0.00662252;1pkt 1fpkt"];
864--3215[label="1;3pkt 3fpkt"];
864--3234[label="1;20pkt 20fpkt"];
864--3290[label="0.166667;1pkt 1fpkt"];
864--3375[label="1;7pkt 7fpkt"];
864--3467[label="0.0215827;3pkt 3fpkt"];
864--3469[label="1;2pkt 2fpkt"];
864--3716[label="0.0833333;1pkt 1fpkt"];
864--3778[label="0.571429;4pkt 4fpkt"];
864--3981[label="0.0666667;1pkt 1fpkt"];
864--4204[label="0.0217391;2pkt 2fpkt"];
864--4207[label="0.0194175;2pkt 2fpkt"];
864--4234[label="0.0769231;3pkt 3fpkt"];
864--4256[label="0.0140845;1pkt 1fpkt"];
864--4334[label="0.0125;2pkt 2fpkt"];
864--4385[label="1;2pkt 2fpkt"];
864--4414[label="0.166667;1pkt 1fpkt"];
864--4445[label="1;7pkt 7fpkt"];
864--4482[label="0.0217391;3pkt 3fpkt"];
864--4690[label="0.0666667;1pkt 1fpkt"];
864--4775[label="0.0215054;2pkt 2fpkt"];
864--4841[label="1;3pkt 3fpkt"];
864--4871[label="0.0215827;3pkt 3fpkt"];
864--4896[label="0.0833333;1pkt 1fpkt"];
1110--3234[label="1;20pkt 20fpkt"];
1627--3375[label="1;7pkt 7fpkt"];
1627--4445[label="1;7pkt 7fpkt"];
3215--4385[label="1;2pkt 2fpkt"];
3215--4841[label="1;3pkt 3fpkt"];
3290--4414[label="1;6pkt 6fpkt"];
3375--4445[label="1;7pkt 7fpkt"];
3716--4582[label="1;11pkt 11fpkt"];
3716--4896[label="1;12pkt 12fpkt"];
4385--4841[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="199.98.139.44" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_249{
style=filled;
color=gray75;
1038[label="134.66.168.3;d;692pkt 692fpkt", shape=diamond, color=yellow];
1176[label="219.196.215.159;s;615pkt 615fpkt", shape=diamond, color=yellow];
2338[label="134.66.168.3;d;550pkt 550fpkt", shape=hexagon, color=black];
stat249[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.196.215.159:80, 134.66.168.3:*}[45.4771%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.1405%)&lt;BR/&gt; 53: (2.58481%)&lt;BR/&gt; 139: (1.53473%)&lt;BR/&gt; 1434: (1.48088%)&lt;BR/&gt; 25: (1.42703%)&gt;];
}
1038--1176[label="0.813008;500pkt 500fpkt"];
1038--2338[label="1;550pkt 550fpkt"];
1038--2669[label="0.0549133;38pkt 38fpkt"];
1038--2670[label="0.00867052;6pkt 6fpkt"];
1038--2671[label="0.00289017;2pkt 2fpkt"];
1038--2672[label="0.00289017;2pkt 2fpkt"];
1038--2673[label="0.00144509;1pkt 1fpkt"];
1038--2674[label="0.00433526;3pkt 3fpkt"];
1038--2675[label="0.00289017;2pkt 2fpkt"];
1038--2676[label="0.00144509;1pkt 1fpkt"];
1038--2677[label="0.00289017;2pkt 2fpkt"];
1038--2678[label="0.00144509;1pkt 1fpkt"];
1038--2681[label="0.00289017;2pkt 2fpkt"];
1038--2683[label="0.00433526;3pkt 3fpkt"];
1038--2685[label="0.00722543;5pkt 5fpkt"];
1038--2692[label="0.00144509;1pkt 1fpkt"];
1038--2693[label="0.00289017;2pkt 2fpkt"];
1038--2695[label="0.00289017;2pkt 2fpkt"];
1038--2696[label="0.00289017;2pkt 2fpkt"];
1038--2697[label="0.00144509;1pkt 1fpkt"];
1038--2698[label="0.00433526;3pkt 3fpkt"];
1038--2699[label="0.00289017;2pkt 2fpkt"];
1038--2700[label="0.00144509;1pkt 1fpkt"];
1038--2701[label="0.00289017;2pkt 2fpkt"];
1038--2703[label="0.00144509;1pkt 1fpkt"];
1038--2704[label="0.00289017;2pkt 2fpkt"];
1038--2706[label="0.00289017;2pkt 2fpkt"];
1038--2707[label="0.00289017;2pkt 2fpkt"];
1038--2708[label="0.00144509;1pkt 1fpkt"];
1038--2709[label="0.00433526;3pkt 3fpkt"];
1038--2711[label="0.00144509;1pkt 1fpkt"];
1176--2338[label="0.650909;358pkt 358fpkt"];
1176--2669[label="0.0113821;7pkt 7fpkt"];
1176--2675[label="0.00162602;1pkt 1fpkt"];
1176--2678[label="0.00162602;1pkt 1fpkt"];
1176--2681[label="0.00325203;2pkt 2fpkt"];
1176--2683[label="0.00487805;3pkt 3fpkt"];
1176--2685[label="0.00813008;5pkt 5fpkt"];
1176--2692[label="0.00162602;1pkt 1fpkt"];
1176--2693[label="0.00325203;2pkt 2fpkt"];
1176--2699[label="0.00162602;1pkt 1fpkt"];
1176--2703[label="0.00162602;1pkt 1fpkt"];
1176--2704[label="0.00325203;2pkt 2fpkt"];
1176--2711[label="0.00162602;1pkt 1fpkt"];
2338--2669[label="0.0690909;38pkt 38fpkt"];
2338--2670[label="0.0109091;6pkt 6fpkt"];
2338--2671[label="0.00363636;2pkt 2fpkt"];
2338--2672[label="0.00363636;2pkt 2fpkt"];
2338--2673[label="0.00181818;1pkt 1fpkt"];
2338--2674[label="0.00545455;3pkt 3fpkt"];
2338--2675[label="0.00363636;2pkt 2fpkt"];
2338--2676[label="0.00181818;1pkt 1fpkt"];
2338--2677[label="0.00363636;2pkt 2fpkt"];
2338--2678[label="0.00181818;1pkt 1fpkt"];
2338--2681[label="0.00363636;2pkt 2fpkt"];
2338--2683[label="0.00545455;3pkt 3fpkt"];
2338--2685[label="0.00909091;5pkt 5fpkt"];
2338--2692[label="0.00181818;1pkt 1fpkt"];
2338--2693[label="0.00363636;2pkt 2fpkt"];
2338--2695[label="0.00363636;2pkt 2fpkt"];
2338--2696[label="0.00363636;2pkt 2fpkt"];
2338--2697[label="0.00181818;1pkt 1fpkt"];
2338--2698[label="0.00545455;3pkt 3fpkt"];
2338--2699[label="0.00363636;2pkt 2fpkt"];
2338--2700[label="0.00181818;1pkt 1fpkt"];
2338--2701[label="0.00363636;2pkt 2fpkt"];
2338--2703[label="0.00181818;1pkt 1fpkt"];
2338--2704[label="0.00363636;2pkt 2fpkt"];
2338--2706[label="0.00363636;2pkt 2fpkt"];
2338--2707[label="0.00363636;2pkt 2fpkt"];
2338--2708[label="0.00181818;1pkt 1fpkt"];
2338--2709[label="0.00545455;3pkt 3fpkt"];
2338--2711[label="0.00181818;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.66.168.3" src_ip="219.196.215.159" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.662663,1.58056,503,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_250{
style=filled;
color=gray75;
336[label="208.166.178.173s;1pkt 1fpkt", shape=rectangle, color=red];
779[label="140.28.84.220;s;2042pkt 2042fpkt", shape=diamond, color=yellow];
1485[label="49.102.117.10;s;92pkt 92fpkt", shape=diamond, color=yellow];
4029[label="140.28.84.220;2306pkt 2306fpkt", shape=pentagon, color=darkviolet];
stat250[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.28.84.220:80, 199.104.100.128:*}[96.1234%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 47511: (0.0337762%)&lt;BR/&gt; 43808: (0.0337762%)&lt;BR/&gt; 31936: (0.0337762%)&lt;BR/&gt; 3767: (0.0337762%)&gt;];
}
336--962[label="1;1pkt 1fpkt"];
336--1204[label="1;1pkt 1fpkt"];
336--2669[label="1;1pkt 1fpkt"];
779--962[label="1;2042pkt 2042fpkt"];
779--1979[label="1;659pkt 659fpkt"];
779--2669[label="0.0822723;168pkt 168fpkt"];
779--4029[label="1;2042pkt 2042fpkt"];
1485--2795[label="1;91pkt 91fpkt"];
1485--4216[label="1;91pkt 91fpkt"];
</description>
    <slice>
      <filter dst_ip="199.104.100.128" src_ip="140.28.84.220" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840471,1.56547,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_251{
style=filled;
color=gray75;
61[label="50.85.130.98s;2pkt 2fpkt", shape=rectangle, color=red];
1235[label="50.85.130.98;s;39pkt 39fpkt", shape=diamond, color=yellow];
1499[label="134.66.118.84;d;31pkt 31fpkt", shape=diamond, color=yellow];
1710[label="175.84.50.107;d;32pkt 32fpkt", shape=diamond, color=yellow];
1879[label="176.107.34.102;d;83pkt 83fpkt", shape=diamond, color=yellow];
2147[label="50.85.130.98;s;39pkt 39fpkt", shape=hexagon, color=black];
2354[label="50.85.130.117;s;41pkt 41fpkt", shape=hexagon, color=black];
3370[label="50.85.130.98;38pkt 38fpkt", shape=pentagon, color=darkviolet];
stat251[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, 176.107.34.102:*}[35.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.3607%)&lt;BR/&gt; 0: (0.983607%)&lt;BR/&gt; 59849: (0.819672%)&lt;BR/&gt; 113: (0.819672%)&lt;BR/&gt; 60376: (0.655738%)&gt;];
}
61--1213[label="1;2pkt 2fpkt"];
61--1235[label="1;2pkt 2fpkt"];
61--2147[label="1;2pkt 2fpkt"];
61--3370[label="1;2pkt 2fpkt"];
61--4442[label="1;2pkt 2fpkt"];
61--4853[label="1;2pkt 2fpkt"];
1235--1340[label="0.0512821;2pkt 2fpkt"];
1235--1499[label="0.0322581;1pkt 1fpkt"];
1235--1710[label="0.03125;1pkt 1fpkt"];
1235--1879[label="0.0512821;2pkt 2fpkt"];
1235--2147[label="1;39pkt 39fpkt"];
1235--2565[label="0.0512821;2pkt 2fpkt"];
1235--3370[label="1;38pkt 38fpkt"];
1235--4442[label="1;39pkt 39fpkt"];
1235--4853[label="1;39pkt 39fpkt"];
1499--1592[label="0.129032;4pkt 4fpkt"];
1499--1605[label="0.0645161;2pkt 2fpkt"];
1499--1682[label="0.0967742;3pkt 3fpkt"];
1499--1689[label="0.0322581;1pkt 1fpkt"];
1499--1725[label="0.0625;1pkt 1fpkt"];
1499--1802[label="0.12;3pkt 3fpkt"];
1499--2147[label="0.0322581;1pkt 1fpkt"];
1499--2354[label="0.0322581;1pkt 1fpkt"];
1499--2420[label="0.0322581;1pkt 1fpkt"];
1499--2446[label="0.129032;4pkt 4fpkt"];
1499--2582[label="0.0625;1pkt 1fpkt"];
1499--3112[label="0.0322581;1pkt 1fpkt"];
1499--3359[label="0.0714286;1pkt 1fpkt"];
1499--3370[label="0.0322581;1pkt 1fpkt"];
1499--3400[label="0.0322581;1pkt 1fpkt"];
1499--3442[label="0.125;3pkt 3fpkt"];
1499--3516[label="0.166667;1pkt 1fpkt"];
1499--3531[label="0.0909091;1pkt 1fpkt"];
1499--3672[label="0.05;1pkt 1fpkt"];
1499--3800[label="0.1;1pkt 1fpkt"];
1499--4148[label="0.0322581;1pkt 1fpkt"];
1499--4438[label="0.0666667;1pkt 1fpkt"];
1499--4442[label="0.0322581;1pkt 1fpkt"];
1499--4468[label="0.125;3pkt 3fpkt"];
1499--4500[label="0.2;1pkt 1fpkt"];
1499--4568[label="0.05;1pkt 1fpkt"];
1499--4853[label="0.0322581;1pkt 1fpkt"];
1499--4865[label="0.12;3pkt 3fpkt"];
1499--4893[label="0.047619;1pkt 1fpkt"];
1710--1725[label="0.0625;1pkt 1fpkt"];
1710--1802[label="0.04;1pkt 1fpkt"];
1710--1881[label="0.03125;1pkt 1fpkt"];
1710--1902[label="0.03125;1pkt 1fpkt"];
1710--2147[label="0.03125;1pkt 1fpkt"];
1710--2582[label="0.0625;1pkt 1fpkt"];
1710--2583[label="0.03125;1pkt 1fpkt"];
1710--3100[label="0.03125;1pkt 1fpkt"];
1710--3162[label="0.03125;1pkt 1fpkt"];
1710--3370[label="0.03125;1pkt 1fpkt"];
1710--3400[label="0.03125;1pkt 1fpkt"];
1710--3442[label="0.0416667;1pkt 1fpkt"];
1710--3754[label="0.142857;1pkt 1fpkt"];
1710--4442[label="0.03125;1pkt 1fpkt"];
1710--4468[label="0.0416667;1pkt 1fpkt"];
1710--4853[label="0.03125;1pkt 1fpkt"];
1710--4865[label="0.04;1pkt 1fpkt"];
1879--2147[label="0.0512821;2pkt 2fpkt"];
1879--2219[label="0.0123457;1pkt 1fpkt"];
1879--2354[label="0.0243902;1pkt 1fpkt"];
1879--2420[label="0.0125;1pkt 1fpkt"];
1879--2446[label="0.0625;3pkt 3fpkt"];
1879--2582[label="0.1875;3pkt 3fpkt"];
1879--3091[label="0.015873;1pkt 1fpkt"];
1879--3112[label="0.0120482;1pkt 1fpkt"];
1879--3359[label="0.0714286;1pkt 1fpkt"];
1879--3370[label="0.0526316;2pkt 2fpkt"];
1879--3442[label="0.0833333;2pkt 2fpkt"];
1879--3800[label="0.2;2pkt 2fpkt"];
1879--4077[label="0.0120482;1pkt 1fpkt"];
1879--4336[label="0.015873;1pkt 1fpkt"];
1879--4438[label="0.0666667;1pkt 1fpkt"];
1879--4442[label="0.0512821;2pkt 2fpkt"];
1879--4468[label="0.0833333;2pkt 2fpkt"];
1879--4853[label="0.0512821;2pkt 2fpkt"];
1879--4865[label="0.08;2pkt 2fpkt"];
2147--2565[label="0.0512821;2pkt 2fpkt"];
2147--3370[label="1;38pkt 38fpkt"];
2147--4442[label="1;39pkt 39fpkt"];
2147--4853[label="1;39pkt 39fpkt"];
2354--2521[label="0.0285714;1pkt 1fpkt"];
2354--2565[label="0.0243902;1pkt 1fpkt"];
3370--4442[label="1;38pkt 38fpkt"];
3370--4853[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_ip="176.107.34.102" src_port="25"/>
    </slice>
    <from sec="1054875604" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_252{
style=filled;
color=gray75;
752[label="176.107.207.107;s;292pkt 292fpkt", shape=diamond, color=yellow];
946[label="198.36.205.58;d;2pkt 2fpkt", shape=diamond, color=yellow];
960[label="52.223.148.26;d;2pkt 2fpkt", shape=diamond, color=yellow];
1241[label="99.138.196.139;d;2pkt 2fpkt", shape=diamond, color=yellow];
1557[label="52.64.97.217;d;1pkt 1fpkt", shape=diamond, color=yellow];
1811[label="139.228.35.7;d;1pkt 1fpkt", shape=diamond, color=yellow];
2364[label="99.138.196.139;d;2pkt 2fpkt", shape=hexagon, color=black];
stat252[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.107.207.107:*, *:1214}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (12.0861%)&lt;BR/&gt; 2773: (2.15232%)&lt;BR/&gt; 3090: (1.82119%)&lt;BR/&gt; 2826: (1.82119%)&lt;BR/&gt; 1514: (1.65563%)&gt;];
}
752--946[label="1;2pkt 2fpkt"];
752--960[label="1;2pkt 2fpkt"];
752--1148[label="1;1pkt 1fpkt"];
752--1241[label="1;2pkt 2fpkt"];
752--1494[label="1;1pkt 1fpkt"];
752--1557[label="1;1pkt 1fpkt"];
752--1811[label="1;1pkt 1fpkt"];
752--2364[label="1;2pkt 2fpkt"];
752--2394[label="1;1pkt 1fpkt"];
752--2464[label="1;1pkt 1fpkt"];
1241--2364[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="1214" src_ip="176.107.207.107"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.662663,1.58056,503,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_256{
style=filled;
color=gray75;
159[label="196.41.91.16s;229pkt 229fpkt", shape=rectangle, color=red];
1403[label="175.84.40.209;d;66pkt 66fpkt", shape=diamond, color=yellow];
1715[label="175.84.40.139;d;37pkt 37fpkt", shape=diamond, color=yellow];
3732[label="161.198.140.163;7pkt 7fpkt", shape=pentagon, color=darkviolet];
stat256[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.41.91.16:1026, *:137}[69.3939%]&lt;BR/&gt;{*:80, *:*}[30%]&lt;BR/&gt;{*:*, 175.84.40.209:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (34.0708%)&lt;BR/&gt; 137: (34.0708%)&lt;BR/&gt; 80: (15.6342%)&lt;BR/&gt; 1480: (0.294985%)&lt;BR/&gt; 1479: (0.294985%)&gt;];
}
159--1266[label="0.142857;1pkt 1fpkt"];
159--1325[label="0.0263158;1pkt 1fpkt"];
159--1379[label="0.0105263;1pkt 1fpkt"];
159--1403[label="0.0151515;1pkt 1fpkt"];
159--1634[label="0.0136986;1pkt 1fpkt"];
159--1715[label="0.027027;1pkt 1fpkt"];
159--1721[label="0.0322581;1pkt 1fpkt"];
159--1908[label="0.0232558;1pkt 1fpkt"];
159--2300[label="0.0105263;1pkt 1fpkt"];
159--2480[label="0.0136986;1pkt 1fpkt"];
159--2650[label="0.0136986;1pkt 1fpkt"];
1403--1458[label="0.030303;2pkt 2fpkt"];
1403--1463[label="0.212121;14pkt 14fpkt"];
1403--1585[label="0.151515;10pkt 10fpkt"];
1403--1620[label="0.378788;25pkt 25fpkt"];
1403--1695[label="0.0151515;1pkt 1fpkt"];
1403--1758[label="0.0151515;1pkt 1fpkt"];
1403--2283[label="0.030303;2pkt 2fpkt"];
1403--2433[label="0.212121;14pkt 14fpkt"];
1403--2469[label="0.378788;25pkt 25fpkt"];
1403--2567[label="0.151515;10pkt 10fpkt"];
1403--2852[label="0.151515;10pkt 10fpkt"];
1403--2960[label="0.378788;25pkt 25fpkt"];
1403--3905[label="0.0151515;1pkt 1fpkt"];
1403--3936[label="0.181818;12pkt 12fpkt"];
1403--4138[label="0.0151515;1pkt 1fpkt"];
1403--4656[label="0.0151515;1pkt 1fpkt"];
1403--4917[label="0.0151515;1pkt 1fpkt"];
1715--1980[label="0.135135;5pkt 5fpkt"];
1715--3732[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.40.209"/>
      <filter src_port="80"/>
      <filter dst_port="137" src_ip="196.41.91.16" src_port="1026"/>
    </slice>
    <from sec="1054875762" usec="0"/>
    <to sec="1054876268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.955904,1.53643,503,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_257{
style=filled;
color=gray75;
53[label="87.66.164.79s;1pkt 1fpkt", shape=rectangle, color=red];
1260[label="169.189.207.212;d;75pkt 75fpkt", shape=diamond, color=yellow];
1273[label="87.66.164.79;s;68pkt 68fpkt", shape=diamond, color=yellow];
2291[label="192.77.54.155;s;82pkt 82fpkt", shape=hexagon, color=black];
3247[label="87.66.164.79;89pkt 89fpkt", shape=pentagon, color=darkviolet];
4397[label="87.66.164.79;89pkt 89fpkt", shape=invtriangle, color=brown];
stat257[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.66.164.79:80, 169.189.207.212:*}[50.8571%]&lt;BR/&gt;{192.77.54.155:80, *:*}[46.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3670: (0.618812%)&lt;BR/&gt; 3680: (0.49505%)&lt;BR/&gt; 3679: (0.49505%)&lt;BR/&gt; 3678: (0.49505%)&gt;];
}
53--1260[label="1;1pkt 1fpkt"];
53--1273[label="1;1pkt 1fpkt"];
53--3247[label="1;1pkt 1fpkt"];
53--4397[label="1;1pkt 1fpkt"];
1260--1273[label="1;68pkt 68fpkt"];
1260--2291[label="0.04;3pkt 3fpkt"];
1260--3247[label="0.906667;68pkt 68fpkt"];
1260--4397[label="0.906667;68pkt 68fpkt"];
1273--3247[label="1;68pkt 68fpkt"];
1273--4397[label="1;68pkt 68fpkt"];
2291--2430[label="0.0121951;1pkt 1fpkt"];
2291--2492[label="0.0121951;1pkt 1fpkt"];
2291--2611[label="0.0121951;1pkt 1fpkt"];
2291--2616[label="0.0365854;3pkt 3fpkt"];
2291--2619[label="0.0243902;2pkt 2fpkt"];
2291--2669[label="0.097561;8pkt 8fpkt"];
2291--2678[label="0.0121951;1pkt 1fpkt"];
3247--4397[label="1;89pkt 89fpkt"];
</description>
    <slice>
      <filter src_ip="192.77.54.155" src_port="80"/>
      <filter dst_ip="169.189.207.212" src_ip="87.66.164.79" src_port="80"/>
    </slice>
    <from sec="1054875609" usec="0"/>
    <to sec="1054876280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770739,1.60066,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_261{
style=filled;
color=gray75;
1118[label="48.139.163.128;s;6pkt 6fpkt", shape=diamond, color=yellow];
1297[label="175.84.0.89;d;14pkt 14fpkt", shape=diamond, color=yellow];
2154[label="48.139.163.128;s;4pkt 4fpkt", shape=hexagon, color=black];
3523[label="48.139.163.128;7pkt 7fpkt", shape=pentagon, color=darkviolet];
stat261[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.139.163.128:80, *:*}[38.8889%]&lt;BR/&gt;{192.42.238.229:80, 175.84.0.89:*}[33.3333%]&lt;BR/&gt;{192.42.238.244:80, 175.84.0.89:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 28700: (6.45161%)&lt;BR/&gt; 61729: (4.83871%)&lt;BR/&gt; 28741: (4.83871%)&lt;BR/&gt; 28716: (4.83871%)&gt;];
}
1118--1297[label="0.5;3pkt 3fpkt"];
1118--2154[label="1;4pkt 4fpkt"];
1118--3523[label="1;6pkt 6fpkt"];
1297--1760[label="0.428571;6pkt 6fpkt"];
1297--2154[label="0.25;1pkt 1fpkt"];
1297--2267[label="0.285714;4pkt 4fpkt"];
1297--2501[label="0.428571;6pkt 6fpkt"];
1297--2669[label="0.428571;6pkt 6fpkt"];
1297--3523[label="0.428571;3pkt 3fpkt"];
1297--4951[label="0.214286;3pkt 3fpkt"];
2154--3523[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="48.139.163.128" src_port="80"/>
      <filter dst_ip="175.84.0.89" src_ip="192.42.238.229" src_port="80"/>
      <filter dst_ip="175.84.0.89" src_ip="192.42.238.244" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876379" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.974845,1.70961,503,0 1 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_262{
style=filled;
color=gray75;
493[label="199.196.0.136s;1pkt 1fpkt", shape=ellipse, color=green];
1171[label="50.164.196.136;s;10pkt 10fpkt", shape=diamond, color=yellow];
1315[label="176.107.25.39;d;39pkt 39fpkt", shape=diamond, color=yellow];
stat262[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 176.107.25.39:6346}[61.5385%]&lt;BR/&gt;{50.164.196.136:80, 176.107.25.39:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 6346: (24%)&lt;BR/&gt; 1794: (3%)&lt;BR/&gt; 1801: (2%)&lt;BR/&gt; 1800: (2%)&gt;];
}
493--1171[label="1;1pkt 1fpkt"];
493--1315[label="1;1pkt 1fpkt"];
1171--1315[label="1;10pkt 10fpkt"];
1171--2669[label="0.1;1pkt 1fpkt"];
1315--2669[label="0.025641;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="176.107.25.39" dst_port="6346"/>
      <filter dst_ip="176.107.25.39" src_ip="50.164.196.136" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876425" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867864,1.63028,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_263{
style=filled;
color=gray75;
169[label="178.55.152.24s;1pkt 1fpkt", shape=rectangle, color=red];
1599[label="50.85.150.113;s;141pkt 141fpkt", shape=diamond, color=yellow];
2515[label="175.84.28.62;d;123pkt 123fpkt", shape=hexagon, color=black];
stat263[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 175.84.28.62:*}[46.5649%]&lt;BR/&gt;{50.85.150.113:443, *:*}[36.6412%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.6981%)&lt;BR/&gt; 443: (18.3019%)&lt;BR/&gt; 1581: (0.566038%)&lt;BR/&gt; 1576: (0.566038%)&lt;BR/&gt; 1757: (0.377358%)&gt;];
}
169--1322[label="1;1pkt 1fpkt"];
169--1686[label="1;1pkt 1fpkt"];
169--2515[label="1;1pkt 1fpkt"];
1599--1624[label="0.283019;30pkt 30fpkt"];
1599--1642[label="0.03;3pkt 3fpkt"];
1599--1686[label="0.0162602;2pkt 2fpkt"];
1599--1742[label="0.0113636;1pkt 1fpkt"];
1599--1792[label="0.0212766;3pkt 3fpkt"];
1599--1836[label="0.0425532;6pkt 6fpkt"];
1599--1846[label="0.0909091;6pkt 6fpkt"];
1599--1966[label="0.0070922;1pkt 1fpkt"];
1599--1975[label="0.0070922;1pkt 1fpkt"];
1599--1988[label="0.0425532;6pkt 6fpkt"];
1599--2078[label="0.0508475;3pkt 3fpkt"];
1599--2088[label="0.035461;5pkt 5fpkt"];
1599--2089[label="0.0070922;1pkt 1fpkt"];
1599--2362[label="1;113pkt 113fpkt"];
1599--2492[label="0.0070922;1pkt 1fpkt"];
1599--2515[label="0.0162602;2pkt 2fpkt"];
1599--2525[label="0.285714;30pkt 30fpkt"];
1599--2527[label="0.740741;40pkt 40fpkt"];
1599--2619[label="0.0070922;1pkt 1fpkt"];
2515--2669[label="0.0406504;5pkt 5fpkt"];
2515--2845[label="0.027027;2pkt 2fpkt"];
2515--2960[label="0.268293;33pkt 33fpkt"];
2515--3031[label="0.0162602;2pkt 2fpkt"];
2515--3262[label="0.0952381;4pkt 4fpkt"];
2515--3298[label="0.0277778;2pkt 2fpkt"];
2515--3423[label="0.0108696;1pkt 1fpkt"];
2515--3905[label="0.0162602;2pkt 2fpkt"];
2515--3936[label="0.0894309;11pkt 11fpkt"];
2515--4238[label="0.027027;2pkt 2fpkt"];
2515--4315[label="0.0162602;2pkt 2fpkt"];
2515--4461[label="0.0108696;1pkt 1fpkt"];
2515--4656[label="0.0162602;2pkt 2fpkt"];
2515--4786[label="0.0266667;2pkt 2fpkt"];
2515--4814[label="0.0162602;2pkt 2fpkt"];
2515--4860[label="0.0107527;1pkt 1fpkt"];
2515--4917[label="0.0162602;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="50.85.150.113" src_port="443"/>
      <filter dst_ip="175.84.28.62" src_port="80"/>
    </slice>
    <from sec="1054875604" usec="0"/>
    <to sec="1054876416" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.895209,1.57226,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_264{
style=filled;
color=gray75;
881[label="175.85.28.152;d;36pkt 36fpkt", shape=diamond, color=yellow];
1311[label="52.2.94.166;s;2pkt 2fpkt", shape=diamond, color=yellow];
2269[label="52.2.94.166;s;1pkt 1fpkt", shape=hexagon, color=black];
3571[label="50.27.122.136;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3585[label="50.27.122.138;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3750[label="52.2.94.166;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4592[label="52.2.94.166;2pkt 2fpkt", shape=invtriangle, color=brown];
stat264[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 175.85.28.152:*}[55.2632%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 3990: (8.69565%)&lt;BR/&gt; 3468: (4.34783%)&lt;BR/&gt; 2645: (4.34783%)&lt;BR/&gt; 2486: (4.34783%)&gt;];
}
881--1040[label="0.0277778;1pkt 1fpkt"];
881--1045[label="1;3pkt 3fpkt"];
881--1184[label="0.111111;4pkt 4fpkt"];
881--1311[label="1;2pkt 2fpkt"];
881--1328[label="0.138889;5pkt 5fpkt"];
881--2196[label="1;23pkt 23fpkt"];
881--2204[label="0.111111;4pkt 4fpkt"];
881--2250[label="0.0555556;2pkt 2fpkt"];
881--2269[label="1;1pkt 1fpkt"];
881--2273[label="1;3pkt 3fpkt"];
881--3341[label="0.0555556;2pkt 2fpkt"];
881--3504[label="0.138889;5pkt 5fpkt"];
881--3571[label="0.5;1pkt 1fpkt"];
881--3585[label="0.5;1pkt 1fpkt"];
881--3750[label="1;1pkt 1fpkt"];
881--3939[label="0.111111;4pkt 4fpkt"];
881--4497[label="0.138889;5pkt 5fpkt"];
881--4532[label="0.333333;1pkt 1fpkt"];
881--4592[label="1;2pkt 2fpkt"];
881--4673[label="0.111111;4pkt 4fpkt"];
1311--2196[label="0.5;1pkt 1fpkt"];
1311--2269[label="1;1pkt 1fpkt"];
1311--3750[label="1;1pkt 1fpkt"];
1311--4592[label="1;2pkt 2fpkt"];
2269--4592[label="1;1pkt 1fpkt"];
3585--4532[label="1;2pkt 2fpkt"];
3750--4592[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.85.28.152" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.895209,1.57226,020,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_267{
style=filled;
color=gray75;
1004[label="169.46.1.221;s;879pkt 879fpkt", shape=diamond, color=yellow];
2188[label="169.46.1.221;s;709pkt 709fpkt", shape=hexagon, color=black];
4031[label="169.46.1.221;942pkt 942fpkt", shape=pentagon, color=darkviolet];
4709[label="169.46.1.221;942pkt 942fpkt", shape=invtriangle, color=brown];
stat267[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.46.1.221:0, *:0}[99.6815%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.7408%)&lt;BR/&gt; 65534: (0.129608%)&lt;BR/&gt; 53: (0.129608%)&gt;];
}
1004--1407[label="0.111111;1pkt 1fpkt"];
1004--2188[label="1;709pkt 709fpkt"];
1004--4031[label="1;879pkt 879fpkt"];
1004--4709[label="1;879pkt 879fpkt"];
2188--4031[label="1;709pkt 709fpkt"];
2188--4709[label="1;709pkt 709fpkt"];
4031--4709[label="1;942pkt 942fpkt"];
</description>
    <slice>
      <filter src_ip="169.46.1.221"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="202.25.164.233"/>
      <from sec="1054875600" usec="0"/>
      <to sec="1054876428" usec="0"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867864,1.63028,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_270{
style=filled;
color=gray75;
111[label="199.98.136.215s;3pkt 3fpkt", shape=rectangle, color=red];
896[label="199.98.136.215;s;221pkt 221fpkt", shape=diamond, color=yellow];
1428[label="208.137.208.103;d;1pkt 1fpkt", shape=diamond, color=yellow];
1650[label="48.75.245.37;d;3pkt 3fpkt", shape=diamond, color=yellow];
1929[label="51.5.115.65;d;20pkt 20fpkt", shape=diamond, color=yellow];
2592[label="51.5.115.65;d;20pkt 20fpkt", shape=hexagon, color=black];
stat270[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.98.136.215:*, *:80}[92.4686%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3156: (0.746269%)&lt;BR/&gt; 4118: (0.559701%)&lt;BR/&gt; 3122: (0.559701%)&lt;BR/&gt; 2768: (0.559701%)&gt;];
}
111--896[label="1;3pkt 3fpkt"];
111--1428[label="1;1pkt 1fpkt"];
111--1929[label="0.333333;1pkt 1fpkt"];
111--2592[label="0.333333;1pkt 1fpkt"];
111--2670[label="0.666667;2pkt 2fpkt"];
111--2691[label="0.333333;1pkt 1fpkt"];
896--1287[label="0.0952381;16pkt 16fpkt"];
896--1428[label="1;1pkt 1fpkt"];
896--1650[label="1;3pkt 3fpkt"];
896--1929[label="0.1;2pkt 2fpkt"];
896--2592[label="0.1;2pkt 2fpkt"];
896--2670[label="0.0723982;16pkt 16fpkt"];
896--2682[label="0.131222;29pkt 29fpkt"];
896--2691[label="0.00904977;2pkt 2fpkt"];
1428--2670[label="1;1pkt 1fpkt"];
1650--2670[label="0.333333;1pkt 1fpkt"];
1929--2592[label="1;20pkt 20fpkt"];
1929--2691[label="0.05;1pkt 1fpkt"];
2592--2691[label="0.05;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="199.98.136.215"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876444" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.765053,1.59937,503,1 0 0 0 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_271{
style=filled;
color=gray75;
71[label="220.63.19.126s;4pkt 4fpkt", shape=rectangle, color=red];
2513[label="175.84.130.190;d;101pkt 101fpkt", shape=hexagon, color=black];
3508[label="220.63.19.126;8pkt 8fpkt", shape=pentagon, color=darkviolet];
stat271[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.227.78.140:80, 175.84.130.190:*}[30.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.3982%)&lt;BR/&gt; 53: (13.2743%)&lt;BR/&gt; 3936: (7.52212%)&lt;BR/&gt; 25: (1.76991%)&lt;BR/&gt; 9253: (1.32743%)&gt;];
}
71--1457[label="0.25;1pkt 1fpkt"];
71--2513[label="0.25;1pkt 1fpkt"];
71--3508[label="0.5;2pkt 2fpkt"];
2513--2670[label="0.00990099;1pkt 1fpkt"];
2513--2845[label="0.0135135;1pkt 1fpkt"];
2513--3025[label="0.012987;1pkt 1fpkt"];
2513--3083[label="0.00990099;1pkt 1fpkt"];
2513--3490[label="0.0125;1pkt 1fpkt"];
2513--3598[label="0.025;1pkt 1fpkt"];
2513--3850[label="0.027027;1pkt 1fpkt"];
2513--4238[label="0.0135135;1pkt 1fpkt"];
2513--4313[label="0.012987;1pkt 1fpkt"];
2513--4334[label="0.00990099;1pkt 1fpkt"];
2513--4786[label="0.0133333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.130.190" src_ip="219.227.78.140" src_port="80"/>
    </slice>
    <from sec="1054875603" usec="0"/>
    <to sec="1054876278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08459,1.63248,999,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_272{
style=filled;
color=gray75;
883[label="169.9.118.34;d;26pkt 26fpkt", shape=diamond, color=yellow];
1031[label="209.126.51.74;s;1pkt 1fpkt", shape=diamond, color=yellow];
1465[label="84.118.227.1;s;1pkt 1fpkt", shape=diamond, color=yellow];
1898[label="209.122.103.254;s;1pkt 1fpkt", shape=diamond, color=yellow];
2043[label="209.126.51.74;s;1pkt 1fpkt", shape=hexagon, color=black];
2197[label="169.9.118.34;d;26pkt 26fpkt", shape=hexagon, color=black];
3539[label="162.66.13.131;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4177[label="209.122.103.254;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4877[label="162.66.13.131;1pkt 1fpkt", shape=invhouse, color=bisque];
stat272[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:1214, 169.9.118.34:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (27.1186%)&lt;BR/&gt; 3997: (6.77966%)&lt;BR/&gt; 2157: (3.38983%)&lt;BR/&gt; 1578: (3.38983%)&lt;BR/&gt; 1474: (3.38983%)&gt;];
}
883--1031[label="1;1pkt 1fpkt"];
883--1465[label="1;1pkt 1fpkt"];
883--1898[label="1;1pkt 1fpkt"];
883--2043[label="1;1pkt 1fpkt"];
883--2197[label="1;26pkt 26fpkt"];
883--3539[label="1;1pkt 1fpkt"];
883--4177[label="1;1pkt 1fpkt"];
883--4877[label="1;1pkt 1fpkt"];
1031--2043[label="1;1pkt 1fpkt"];
1031--2197[label="1;1pkt 1fpkt"];
1465--2197[label="1;1pkt 1fpkt"];
1898--2197[label="1;1pkt 1fpkt"];
1898--4177[label="1;1pkt 1fpkt"];
2043--2197[label="1;1pkt 1fpkt"];
2197--3539[label="1;1pkt 1fpkt"];
2197--4177[label="1;1pkt 1fpkt"];
2197--4877[label="1;1pkt 1fpkt"];
3539--4877[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.9.118.34" src_port="1214"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867864,1.63028,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_275{
style=filled;
color=gray75;
114[label="220.24.15.241s;1pkt 1fpkt", shape=rectangle, color=red];
1495[label="220.24.15.241;s;4pkt 4fpkt", shape=diamond, color=yellow];
2579[label="220.24.15.241;s;4pkt 4fpkt", shape=hexagon, color=black];
stat275[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.24.15.241:16660, 175.84.32.93:6970}[25%]&lt;BR/&gt;{220.24.15.241:16700, 175.84.32.93:6970}[25%]&lt;BR/&gt;{220.24.15.241:554, 175.84.32.93:1820}[25%]&lt;BR/&gt;{220.24.15.241:554, 175.84.32.93:1826}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6970: (27.7778%)&lt;BR/&gt; 554: (22.2222%)&lt;BR/&gt; 16700: (16.6667%)&lt;BR/&gt; 16660: (11.1111%)&lt;BR/&gt; 1826: (11.1111%)&gt;];
}
114--1106[label="1;1pkt 1fpkt"];
114--1495[label="1;1pkt 1fpkt"];
114--2076[label="1;1pkt 1fpkt"];
114--2579[label="1;1pkt 1fpkt"];
1495--2076[label="1;4pkt 4fpkt"];
1495--2579[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.32.93" dst_port="1826" src_ip="220.24.15.241" src_port="554"/>
      <filter dst_ip="175.84.32.93" dst_port="1820" src_ip="220.24.15.241" src_port="554"/>
      <filter dst_ip="175.84.32.93" dst_port="6970" src_ip="220.24.15.241" src_port="16700"/>
      <filter dst_ip="175.84.32.93" dst_port="6970" src_ip="220.24.15.241" src_port="16660"/>
    </slice>
    <from sec="1054875733" usec="0"/>
    <to sec="1054876283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05661,1.61938,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_276{
style=filled;
color=gray75;
1210[label="164.200.68.101;s;28pkt 28fpkt", shape=diamond, color=yellow];
1496[label="169.9.118.36;d;22pkt 22fpkt", shape=diamond, color=yellow];
3862[label="175.70.74.188;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4636[label="175.70.74.188;3pkt 3fpkt", shape=invtriangle, color=brown];
4911[label="175.70.74.188;3pkt 3fpkt", shape=invhouse, color=bisque];
stat276[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.200.68.101:80, 134.66.26.145:*}[46.3415%]&lt;BR/&gt;{164.200.68.101:80, 169.9.118.36:*}[36.5854%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1525%)&lt;BR/&gt; 1700: (3.38983%)&lt;BR/&gt; 1698: (3.38983%)&lt;BR/&gt; 1697: (3.38983%)&lt;BR/&gt; 1695: (1.69492%)&gt;];
}
1210--1496[label="0.409091;9pkt 9fpkt"];
1210--2669[label="0.214286;6pkt 6fpkt"];
1496--3862[label="1;3pkt 3fpkt"];
1496--4636[label="1;3pkt 3fpkt"];
1496--4911[label="1;3pkt 3fpkt"];
3862--4636[label="1;3pkt 3fpkt"];
3862--4911[label="1;3pkt 3fpkt"];
4636--4911[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="169.9.118.36" src_ip="164.200.68.101" src_port="80"/>
      <filter dst_ip="134.66.26.145" src_ip="164.200.68.101" src_port="80"/>
    </slice>
    <from sec="1054875606" usec="0"/>
    <to sec="1054876369" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="51.35.128.193"/>
      <from sec="1054875862" usec="0"/>
      <to sec="1054875908" usec="0"/>
    </slice>
    <from sec="1054875862" usec="0"/>
    <to sec="1054875908" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_278{
style=filled;
color=gray75;
1513[label="48.232.100.151;s;28pkt 28fpkt", shape=diamond, color=yellow];
stat278[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.232.100.151:80, 169.189.85.74:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2616: (1.78571%)&lt;BR/&gt; 2611: (1.78571%)&lt;BR/&gt; 2607: (1.78571%)&lt;BR/&gt; 2602: (1.78571%)&gt;];
}
1513--3663[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.85.74" src_ip="48.232.100.151" src_port="80"/>
    </slice>
    <from sec="1054875910" usec="0"/>
    <to sec="1054876027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03086,1.67671,010,1 1 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_279{
style=filled;
color=gray75;
448[label="210.232.13.48s;254pkt 254fpkt", shape=rectangle, color=red];
609[label="210.232.13.48s;254pkt 254fpkt", shape=ellipse, color=green];
1518[label="210.232.13.48;s;255pkt 255fpkt", shape=diamond, color=yellow];
stat279[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.232.13.48:*, *:139}[99.6078%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (49.9345%)&lt;BR/&gt; 4019: (0.196592%)&lt;BR/&gt; 4018: (0.196592%)&lt;BR/&gt; 4017: (0.196592%)&lt;BR/&gt; 4016: (0.196592%)&gt;];
}
448--609[label="1;254pkt 254fpkt"];
448--1518[label="1;254pkt 254fpkt"];
609--1518[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="210.232.13.48"/>
    </slice>
    <from sec="1054875927" usec="0"/>
    <to sec="1054875960" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.697078,1.64478,010,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_281{
style=filled;
color=gray75;
15[label="219.178.82.25s;254pkt 254fpkt", shape=rectangle, color=red];
1526[label="219.178.82.25;s;256pkt 256fpkt", shape=diamond, color=yellow];
stat281[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.178.82.25:*, *:139}[99.2188%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (49.8039%)&lt;BR/&gt; 0: (0.392157%)&lt;BR/&gt; 4462: (0.196078%)&lt;BR/&gt; 4461: (0.196078%)&lt;BR/&gt; 4460: (0.196078%)&gt;];
}
15--1526[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="219.178.82.25"/>
    </slice>
    <from sec="1054875965" usec="0"/>
    <to sec="1054875997" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_282{
style=filled;
color=gray75;
1504[label="50.82.145.208;s;1pkt 1fpkt", shape=diamond, color=yellow];
1537[label="169.189.203.70;d;3pkt 3fpkt", shape=diamond, color=yellow];
2470[label="50.82.145.208;s;1pkt 1fpkt", shape=hexagon, color=black];
stat282[shape=component, label=&lt;Rules:&lt;BR/&gt;{139.202.6.119:6699, 169.189.203.70:1161}[33.3333%]&lt;BR/&gt;{52.84.232.143:12543, 169.189.203.70:6699}[33.3333%]&lt;BR/&gt;{50.82.145.208:6699, 169.189.203.70:1185}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1185: (30%)&lt;BR/&gt; 12543: (10%)&lt;BR/&gt; 1161: (10%)&gt;];
}
1504--1537[label="1;1pkt 1fpkt"];
1504--2470[label="1;1pkt 1fpkt"];
1537--2470[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.203.70" dst_port="1185" src_ip="50.82.145.208" src_port="6699"/>
      <filter dst_ip="169.189.203.70" dst_port="6699" src_ip="52.84.232.143" src_port="12543"/>
      <filter dst_ip="169.189.203.70" dst_port="1161" src_ip="139.202.6.119" src_port="6699"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876417" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_283{
style=filled;
color=gray75;
1291[label="169.9.154.136;d;188pkt 188fpkt", shape=diamond, color=yellow];
1438[label="202.145.67.148;d;288pkt 288fpkt", shape=diamond, color=yellow];
stat283[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.105.132.126:80, 202.145.67.148:*}[55.4622%]&lt;BR/&gt;{*:53, 169.9.154.136:53}[33.4034%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (38.6555%)&lt;BR/&gt; 80: (28.3613%)&lt;BR/&gt; 0: (1.68067%)&lt;BR/&gt; 64: (0.52521%)&lt;BR/&gt; 62: (0.315126%)&gt;];
}
1291--1683[label="0.0116279;1pkt 1fpkt"];
1291--1849[label="0.0166667;1pkt 1fpkt"];
1291--2681[label="0.117021;22pkt 22fpkt"];
1291--2690[label="0.0319149;6pkt 6fpkt"];
1291--2702[label="0.0319149;6pkt 6fpkt"];
1291--2710[label="0.0319149;6pkt 6fpkt"];
1291--2956[label="0.142857;1pkt 1fpkt"];
1291--3025[label="0.012987;1pkt 1fpkt"];
1291--3368[label="0.0333333;1pkt 1fpkt"];
1291--3408[label="0.0147059;1pkt 1fpkt"];
1291--3451[label="0.0833333;1pkt 1fpkt"];
1291--3490[label="0.0125;1pkt 1fpkt"];
1291--3579[label="0.0333333;1pkt 1fpkt"];
1291--3598[label="0.025;1pkt 1fpkt"];
1291--3607[label="0.0588235;1pkt 1fpkt"];
1291--3744[label="0.0135135;1pkt 1fpkt"];
1291--3840[label="0.0238095;1pkt 1fpkt"];
1291--4083[label="0.0222222;1pkt 1fpkt"];
1291--4128[label="0.0175439;1pkt 1fpkt"];
1291--4284[label="0.142857;1pkt 1fpkt"];
1291--4313[label="0.012987;1pkt 1fpkt"];
1291--4473[label="0.0909091;1pkt 1fpkt"];
1291--4746[label="0.0175439;1pkt 1fpkt"];
1438--1498[label="0.916667;264pkt 264fpkt"];
1438--1849[label="0.0166667;1pkt 1fpkt"];
1438--2038[label="0.0143541;3pkt 3fpkt"];
1438--2299[label="0.916667;264pkt 264fpkt"];
1438--2669[label="0.0208333;6pkt 6fpkt"];
1438--3025[label="0.012987;1pkt 1fpkt"];
1438--3510[label="0.916667;264pkt 264fpkt"];
1438--3775[label="0.0104167;3pkt 3fpkt"];
1438--3889[label="0.0714286;1pkt 1fpkt"];
1438--3947[label="0.0416667;1pkt 1fpkt"];
1438--4313[label="0.012987;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="202.145.67.148" src_ip="219.105.132.126" src_port="80"/>
      <filter dst_ip="169.9.154.136" dst_port="53" src_port="53"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876420" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770739,1.60066,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_285{
style=filled;
color=gray75;
1314[label="175.85.81.138;d;39pkt 39fpkt", shape=diamond, color=yellow];
1523[label="201.140.225.102;s;1pkt 1fpkt", shape=diamond, color=yellow];
2063[label="216.49.138.168;s;91pkt 91fpkt", shape=hexagon, color=black];
3389[label="201.140.225.102;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3613[label="50.17.7.143;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat285[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.49.138.168:80, *:*}[70.5426%]&lt;BR/&gt;{*:80, 175.85.81.138:*}[29.4574%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6296%)&lt;BR/&gt; 10418: (0.740741%)&lt;BR/&gt; 10416: (0.740741%)&lt;BR/&gt; 10127: (0.740741%)&lt;BR/&gt; 10121: (0.740741%)&gt;];
}
1314--1523[label="1;1pkt 1fpkt"];
1314--1588[label="0.153846;6pkt 6fpkt"];
1314--1818[label="0.333333;1pkt 1fpkt"];
1314--2038[label="0.0512821;2pkt 2fpkt"];
1314--2053[label="0.102564;4pkt 4fpkt"];
1314--2063[label="0.025641;1pkt 1fpkt"];
1314--2126[label="0.0285714;1pkt 1fpkt"];
1314--2669[label="0.179487;7pkt 7fpkt"];
1314--3083[label="0.0512821;2pkt 2fpkt"];
1314--3364[label="0.125;1pkt 1fpkt"];
1314--3389[label="1;2pkt 2fpkt"];
1314--3613[label="1;2pkt 2fpkt"];
1314--3636[label="0.128205;5pkt 5fpkt"];
1314--3775[label="0.0512821;2pkt 2fpkt"];
1314--3939[label="0.025641;1pkt 1fpkt"];
1314--4334[label="0.0512821;2pkt 2fpkt"];
1314--4673[label="0.025641;1pkt 1fpkt"];
2063--2315[label="0.010989;1pkt 1fpkt"];
2063--2317[label="0.021978;2pkt 2fpkt"];
2063--2335[label="0.10989;10pkt 10fpkt"];
2063--2611[label="0.0769231;7pkt 7fpkt"];
2063--2669[label="0.252747;23pkt 23fpkt"];
</description>
    <slice>
      <filter src_ip="216.49.138.168" src_port="80"/>
      <filter dst_ip="175.85.81.138" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876444" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.804041,1.5518,999,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_289{
style=filled;
color=gray75;
51[label="219.241.101.73s;1pkt 1fpkt", shape=rectangle, color=red];
1631[label="219.241.101.73;s;1pkt 1fpkt", shape=diamond, color=yellow];
3206[label="219.241.101.73;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4382[label="219.241.101.73;1pkt 1fpkt", shape=invtriangle, color=brown];
stat289[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.241.101.73:4662, 134.66.13.49:3951}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 3951: (50%)&gt;];
}
51--767[label="1;1pkt 1fpkt"];
51--1631[label="1;1pkt 1fpkt"];
51--2091[label="1;1pkt 1fpkt"];
51--3206[label="1;1pkt 1fpkt"];
51--4382[label="1;1pkt 1fpkt"];
1631--2091[label="1;1pkt 1fpkt"];
1631--3206[label="1;1pkt 1fpkt"];
1631--4382[label="1;1pkt 1fpkt"];
3206--4382[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.66.13.49" dst_port="3951" src_ip="219.241.101.73" src_port="4662"/>
    </slice>
    <from sec="1054875986" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_290{
style=filled;
color=gray75;
1636[label="175.84.131.45;d;5pkt 5fpkt", shape=diamond, color=yellow];
1637[label="87.42.46.89;s;5pkt 5fpkt", shape=diamond, color=yellow];
stat290[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.42.46.89:1929, 175.84.131.45:80}[20%]&lt;BR/&gt;{87.42.46.89:1930, 175.84.131.45:80}[20%]&lt;BR/&gt;{87.42.46.89:1931, 175.84.131.45:80}[20%]&lt;BR/&gt;{87.42.46.89:1932, 175.84.131.45:80}[20%]&lt;BR/&gt;{87.42.46.89:1933, 175.84.131.45:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1933: (10%)&lt;BR/&gt; 1932: (10%)&lt;BR/&gt; 1931: (10%)&lt;BR/&gt; 1930: (10%)&gt;];
}
1636--1637[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.131.45" dst_port="80" src_ip="87.42.46.89" src_port="1933"/>
      <filter dst_ip="175.84.131.45" dst_port="80" src_ip="87.42.46.89" src_port="1932"/>
      <filter dst_ip="175.84.131.45" dst_port="80" src_ip="87.42.46.89" src_port="1931"/>
      <filter dst_ip="175.84.131.45" dst_port="80" src_ip="87.42.46.89" src_port="1930"/>
      <filter dst_ip="175.84.131.45" dst_port="80" src_ip="87.42.46.89" src_port="1929"/>
    </slice>
    <from sec="1054876031" usec="0"/>
    <to sec="1054876127" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_291{
style=filled;
color=gray75;
1646[label="198.128.176.237;d;70pkt 70fpkt", shape=diamond, color=yellow];
1647[label="221.166.180.24;s;70pkt 70fpkt", shape=diamond, color=yellow];
stat291[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.166.180.24:*, 198.128.176.237:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2255: (0.714286%)&lt;BR/&gt; 2239: (0.714286%)&lt;BR/&gt; 2223: (0.714286%)&lt;BR/&gt; 2207: (0.714286%)&gt;];
}
1646--1647[label="1;70pkt 70fpkt"];
</description>
    <slice>
      <filter dst_ip="198.128.176.237" dst_port="80" src_ip="221.166.180.24"/>
    </slice>
    <from sec="1054876054" usec="0"/>
    <to sec="1054876100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.571638,1.61542,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_292{
style=filled;
color=gray75;
1556[label="48.232.125.173;s;1pkt 1fpkt", shape=diamond, color=yellow];
1670[label="175.85.153.26;d;1pkt 1fpkt", shape=diamond, color=yellow];
3795[label="48.232.125.173;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat292[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.232.125.173:0, 175.85.153.26:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1556--1670[label="1;1pkt 1fpkt"];
1556--3795[label="1;1pkt 1fpkt"];
1670--3795[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.85.153.26" src_ip="48.232.125.173"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_293{
style=filled;
color=gray75;
1161[label="169.9.111.97;d;325pkt 325fpkt", shape=diamond, color=yellow];
1679[label="37.74.101.181;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat293[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:4662, 169.9.111.97:*}[95.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (47.546%)&lt;BR/&gt; 4664: (0.613497%)&lt;BR/&gt; 4663: (0.613497%)&lt;BR/&gt; 4661: (0.460123%)&lt;BR/&gt; 4415: (0.306748%)&gt;];
}
1161--1679[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.9.111.97" src_port="4662"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.804041,1.5518,999,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_294{
style=filled;
color=gray75;
265[label="218.64.68.109s;1pkt 1fpkt", shape=rectangle, color=red];
449[label="84.12.13.50s;1pkt 1fpkt", shape=rectangle, color=red];
711[label="175.85.30.175;d;46pkt 46fpkt", shape=diamond, color=yellow];
1687[label="52.88.140.109;s;1pkt 1fpkt", shape=diamond, color=yellow];
1883[label="201.140.139.141;s;1pkt 1fpkt", shape=diamond, color=yellow];
3097[label="99.194.231.56;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3435[label="210.232.60.110;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4304[label="36.8.105.44;1pkt 1fpkt", shape=invtriangle, color=brown];
stat294[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6881, 175.85.30.175:*}[39.1304%]&lt;BR/&gt;{*:6882, 175.85.30.175:*}[21.7391%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (25.4717%)&lt;BR/&gt; 6882: (9.43396%)&lt;BR/&gt; 61672: (5.66038%)&lt;BR/&gt; 65056: (4.71698%)&lt;BR/&gt; 61749: (4.71698%)&gt;];
}
265--711[label="1;1pkt 1fpkt"];
265--1687[label="1;1pkt 1fpkt"];
449--711[label="1;1pkt 1fpkt"];
711--712[label="1;1pkt 1fpkt"];
711--756[label="1;1pkt 1fpkt"];
711--831[label="1;1pkt 1fpkt"];
711--859[label="0.108696;5pkt 5fpkt"];
711--1337[label="1;1pkt 1fpkt"];
711--1687[label="1;1pkt 1fpkt"];
711--1788[label="1;1pkt 1fpkt"];
711--1883[label="1;1pkt 1fpkt"];
711--2038[label="0.0869565;4pkt 4fpkt"];
711--2168[label="1;1pkt 1fpkt"];
711--2218[label="1;1pkt 1fpkt"];
711--2514[label="1;1pkt 1fpkt"];
711--2669[label="0.0434783;2pkt 2fpkt"];
711--2994[label="1;1pkt 1fpkt"];
711--3097[label="1;1pkt 1fpkt"];
711--3435[label="1;1pkt 1fpkt"];
711--3775[label="0.108696;5pkt 5fpkt"];
711--4304[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.85.30.175" src_port="6881"/>
      <filter dst_ip="175.85.30.175" src_port="6882"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840471,1.56547,010,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_295{
style=filled;
color=gray75;
424[label="221.250.54.252s;1pkt 1fpkt", shape=rectangle, color=red];
742[label="198.160.10.83;d;67pkt 67fpkt", shape=diamond, color=yellow];
1057[label="133.72.171.121;s;1pkt 1fpkt", shape=diamond, color=yellow];
1447[label="99.19.100.125;s;1pkt 1fpkt", shape=diamond, color=yellow];
1703[label="99.21.10.252;s;1pkt 1fpkt", shape=diamond, color=yellow];
1863[label="36.3.248.113;s;1pkt 1fpkt", shape=diamond, color=yellow];
2017[label="198.160.10.83;d;26pkt 26fpkt", shape=hexagon, color=black];
2423[label="133.72.171.121;s;1pkt 1fpkt", shape=hexagon, color=black];
2427[label="99.19.100.125;s;1pkt 1fpkt", shape=hexagon, color=black];
2453[label="99.21.10.252;s;1pkt 1fpkt", shape=hexagon, color=black];
2929[label="99.18.190.29;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3446[label="36.3.248.113;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat295[shape=component, label=&lt;Rules:&lt;BR/&gt;{52.4.178.81:*, 198.160.10.83:1733}[25.3731%]&lt;BR/&gt;{37.244.242.219:*, 198.160.10.83:1733}[25.3731%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1733: (33.9806%)&lt;BR/&gt; 6881: (8.73786%)&lt;BR/&gt; 6883: (2.91262%)&lt;BR/&gt; 6882: (2.91262%)&lt;BR/&gt; 2990: (2.42718%)&gt;];
}
424--742[label="1;1pkt 1fpkt"];
424--1703[label="1;1pkt 1fpkt"];
424--2017[label="1;1pkt 1fpkt"];
424--2453[label="1;1pkt 1fpkt"];
742--1057[label="1;1pkt 1fpkt"];
742--1447[label="1;1pkt 1fpkt"];
742--1703[label="1;1pkt 1fpkt"];
742--1863[label="1;1pkt 1fpkt"];
742--2017[label="1;26pkt 26fpkt"];
742--2423[label="1;1pkt 1fpkt"];
742--2427[label="1;1pkt 1fpkt"];
742--2453[label="1;1pkt 1fpkt"];
742--2929[label="1;1pkt 1fpkt"];
742--3446[label="1;1pkt 1fpkt"];
1057--2017[label="1;1pkt 1fpkt"];
1057--2423[label="1;1pkt 1fpkt"];
1447--2017[label="1;1pkt 1fpkt"];
1447--2427[label="1;1pkt 1fpkt"];
1703--2017[label="1;1pkt 1fpkt"];
1703--2453[label="1;1pkt 1fpkt"];
1863--2017[label="1;1pkt 1fpkt"];
1863--3446[label="1;1pkt 1fpkt"];
2017--2423[label="1;1pkt 1fpkt"];
2017--2427[label="1;1pkt 1fpkt"];
2017--2453[label="1;1pkt 1fpkt"];
2017--2929[label="1;1pkt 1fpkt"];
2017--3446[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.160.10.83" dst_port="1733" src_ip="37.244.242.219"/>
      <filter dst_ip="198.160.10.83" dst_port="1733" src_ip="52.4.178.81"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770739,1.60066,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_297{
style=filled;
color=gray75;
1729[label="175.85.4.8;d;10pkt 10fpkt", shape=diamond, color=yellow];
1730[label="48.182.37.95;s;10pkt 10fpkt", shape=diamond, color=yellow];
2475[label="48.182.37.95;s;10pkt 10fpkt", shape=hexagon, color=black];
3348[label="48.182.37.95;12pkt 12fpkt", shape=pentagon, color=darkviolet];
stat297[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.182.37.95:80, 175.85.4.8:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1365: (4.7619%)&lt;BR/&gt; 1364: (4.7619%)&lt;BR/&gt; 1363: (4.7619%)&lt;BR/&gt; 1362: (4.7619%)&gt;];
}
1729--1730[label="1;10pkt 10fpkt"];
1729--2475[label="1;10pkt 10fpkt"];
1729--3348[label="1;10pkt 10fpkt"];
1730--2475[label="1;10pkt 10fpkt"];
1730--3348[label="1;10pkt 10fpkt"];
2475--3348[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="175.85.4.8" src_ip="48.182.37.95" src_port="80"/>
    </slice>
    <from sec="1054875602" usec="0"/>
    <to sec="1054876481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_298{
style=filled;
color=gray75;
1765[label="198.160.10.22;d;216pkt 216fpkt", shape=diamond, color=yellow];
stat298[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 198.160.10.22:1733}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1733: (50%)&lt;BR/&gt; 65374: (0.231481%)&lt;BR/&gt; 64735: (0.231481%)&lt;BR/&gt; 64526: (0.231481%)&lt;BR/&gt; 64491: (0.231481%)&gt;];
}
1765--2687[label="0.00462963;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.160.10.22" dst_port="1733"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="175.85.185.86"/>
      <from sec="1054875914" usec="0"/>
      <to sec="1054876427" usec="0"/>
    </slice>
    <from sec="1054875914" usec="0"/>
    <to sec="1054876427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.687716,1.63383,503,0 0 0 0 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_302{
style=filled;
color=gray75;
2132[label="199.98.96.238;d;39pkt 39fpkt", shape=hexagon, color=black];
3635[label="48.100.83.146;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat302[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.139.24.194:80, 199.98.96.238:*}[41.0256%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.3488%)&lt;BR/&gt; 49267: (2.32558%)&lt;BR/&gt; 49266: (2.32558%)&lt;BR/&gt; 49229: (2.32558%)&lt;BR/&gt; 49228: (2.32558%)&gt;];
}
2132--2669[label="0.0512821;2pkt 2fpkt"];
2132--3328[label="0.102564;4pkt 4fpkt"];
2132--3635[label="1;4pkt 4fpkt"];
2132--4426[label="0.102564;4pkt 4fpkt"];
2132--4552[label="1;4pkt 4fpkt"];
3635--4552[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="199.98.96.238" src_ip="48.139.24.194" src_port="80"/>
    </slice>
    <from sec="1054875602" usec="0"/>
    <to sec="1054876110" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.970355,1.7084,010,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_303{
style=filled;
color=gray75;
454[label="208.85.5.103s;254pkt 254fpkt", shape=rectangle, color=red];
611[label="208.85.5.103s;254pkt 254fpkt", shape=ellipse, color=green];
stat303[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.85.5.103:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 2351: (0.19685%)&lt;BR/&gt; 2350: (0.19685%)&lt;BR/&gt; 2349: (0.19685%)&lt;BR/&gt; 2348: (0.19685%)&gt;];
}
454--492[label="0.681102;173pkt 173fpkt"];
454--611[label="1;254pkt 254fpkt"];
454--635[label="0.681102;173pkt 173fpkt"];
454--678[label="1;254pkt 254fpkt"];
454--1832[label="1;254pkt 254fpkt"];
454--2684[label="1;254pkt 254fpkt"];
611--635[label="0.681102;173pkt 173fpkt"];
611--678[label="1;254pkt 254fpkt"];
611--1832[label="1;254pkt 254fpkt"];
611--2684[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="208.85.5.103"/>
    </slice>
    <from sec="1054876190" usec="0"/>
    <to sec="1054876216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="193.208.46.8"/>
      <from sec="1054876227" usec="0"/>
      <to sec="1054876428" usec="0"/>
    </slice>
    <from sec="1054876227" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,011,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_305{
style=filled;
color=gray75;
956[label="129.24.226.12;d;414pkt 414fpkt", shape=diamond, color=yellow];
1048[label="86.225.255.150;s;413pkt 413fpkt", shape=diamond, color=yellow];
1842[label="210.211.170.15;s;2pkt 2fpkt", shape=diamond, color=yellow];
2314[label="129.24.226.12;d;414pkt 414fpkt", shape=hexagon, color=black];
stat305[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.225.255.150:6667, 129.24.226.12:*}[99.5181%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (50%)&lt;BR/&gt; 2865: (0.120676%)&lt;BR/&gt; 2864: (0.120676%)&lt;BR/&gt; 2863: (0.120676%)&lt;BR/&gt; 2862: (0.120676%)&gt;];
}
956--1048[label="1;413pkt 413fpkt"];
956--1842[label="0.5;1pkt 1fpkt"];
956--2314[label="1;414pkt 414fpkt"];
1048--2314[label="1;413pkt 413fpkt"];
1842--2314[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="129.24.226.12" src_ip="86.225.255.150" src_port="6667"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730842,1.58729,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_306{
style=filled;
color=gray75;
1042[label="199.226.249.78;s;9pkt 9fpkt", shape=diamond, color=yellow];
1773[label="129.24.204.207;d;1pkt 1fpkt", shape=diamond, color=yellow];
1857[label="129.24.212.148;d;1pkt 1fpkt", shape=diamond, color=yellow];
1858[label="129.24.212.155;d;1pkt 1fpkt", shape=diamond, color=yellow];
3238[label="199.226.249.78;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4392[label="199.226.249.78;3pkt 3fpkt", shape=invtriangle, color=brown];
stat306[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.226.249.78:6667, 129.24.204.252:*}[22.2222%]&lt;BR/&gt;{199.226.249.78:*, 129.24.204.193:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (26.4706%)&lt;BR/&gt; 6665: (11.7647%)&lt;BR/&gt; 1088: (11.7647%)&lt;BR/&gt; 1047: (11.7647%)&lt;BR/&gt; 6661: (5.88235%)&gt;];
}
1042--1163[label="0.4;2pkt 2fpkt"];
1042--1773[label="1;1pkt 1fpkt"];
1042--1857[label="1;1pkt 1fpkt"];
1042--1858[label="1;1pkt 1fpkt"];
1042--2117[label="0.4;2pkt 2fpkt"];
1042--3238[label="1;2pkt 2fpkt"];
1042--4392[label="1;3pkt 3fpkt"];
1773--3238[label="1;1pkt 1fpkt"];
1773--4392[label="1;1pkt 1fpkt"];
1858--3238[label="1;1pkt 1fpkt"];
1858--4392[label="1;1pkt 1fpkt"];
3238--4392[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="129.24.204.193" src_ip="199.226.249.78"/>
      <filter dst_ip="129.24.204.252" src_ip="199.226.249.78" src_port="6667"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="192.42.2.180"/>
      <from sec="1054875601" usec="0"/>
      <to sec="1054876428" usec="0"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="198.128.177.162"/>
      <from sec="1054875602" usec="0"/>
      <to sec="1054876428" usec="0"/>
    </slice>
    <from sec="1054875602" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_309{
style=filled;
color=gray75;
1874[label="209.170.159.109;s;515pkt 515fpkt", shape=diamond, color=yellow];
stat309[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.170.159.109:3063, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3063: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
1874--2674[label="0.0582524;30pkt 30fpkt"];
1874--2678[label="0.0563107;29pkt 29fpkt"];
1874--2685[label="0.0563107;29pkt 29fpkt"];
1874--2698[label="0.0582524;30pkt 30fpkt"];
1874--2709[label="0.0582524;30pkt 30fpkt"];
1874--3432[label="0.998058;514pkt 514fpkt"];
1874--4863[label="0.996117;513pkt 513fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="209.170.159.109" src_port="3063"/>
    </slice>
    <from sec="1054875602" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770739,1.60066,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_312{
style=filled;
color=gray75;
1740[label="219.105.132.117;s;36pkt 36fpkt", shape=diamond, color=yellow];
1921[label="134.66.200.198;d;37pkt 37fpkt", shape=diamond, color=yellow];
2486[label="219.105.132.117;s;6pkt 6fpkt", shape=hexagon, color=black];
3471[label="219.105.132.117;35pkt 35fpkt", shape=pentagon, color=darkviolet];
stat312[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.105.132.117:80, 134.66.200.198:*}[82.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49812: (1.75439%)&lt;BR/&gt; 49809: (1.75439%)&lt;BR/&gt; 49808: (1.75439%)&lt;BR/&gt; 49845: (1.31579%)&gt;];
}
1740--1921[label="0.916667;33pkt 33fpkt"];
1740--2486[label="1;6pkt 6fpkt"];
1740--3471[label="1;35pkt 35fpkt"];
1921--2486[label="0.5;3pkt 3fpkt"];
1921--3471[label="0.942857;33pkt 33fpkt"];
2486--3471[label="0.833333;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="134.66.200.198" src_ip="219.105.132.117" src_port="80"/>
    </slice>
    <from sec="1054876105" usec="0"/>
    <to sec="1054876398" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03086,1.67671,503,1 1 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_313{
style=filled;
color=gray75;
11[label="134.100.179.16s;1pkt 1fpkt", shape=rectangle, color=red];
476[label="134.100.179.16s;1pkt 1fpkt", shape=ellipse, color=green];
1935[label="134.100.179.16;s;15pkt 15fpkt", shape=diamond, color=yellow];
stat313[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.100.179.16:80, 175.85.35.78:*}[40%]&lt;BR/&gt;{134.100.179.16:80, 175.85.35.79:*}[33.3333%]&lt;BR/&gt;{134.100.179.16:80, 175.85.35.76:*}[26.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 16799: (8.82353%)&lt;BR/&gt; 16800: (2.94118%)&lt;BR/&gt; 16798: (2.94118%)&lt;BR/&gt; 16797: (2.94118%)&gt;];
}
11--476[label="1;1pkt 1fpkt"];
11--888[label="1;1pkt 1fpkt"];
11--1935[label="1;1pkt 1fpkt"];
476--888[label="1;1pkt 1fpkt"];
476--1935[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.85.35.78" src_ip="134.100.179.16" src_port="80"/>
      <filter dst_ip="175.85.35.79" src_ip="134.100.179.16" src_port="80"/>
      <filter dst_ip="175.85.35.76" src_ip="134.100.179.16" src_port="80"/>
    </slice>
    <from sec="1054876297" usec="0"/>
    <to sec="1054876410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_314{
style=filled;
color=gray75;
1936[label="169.189.202.210;d;96pkt 96fpkt", shape=diamond, color=yellow];
1937[label="48.182.62.24;s;93pkt 93fpkt", shape=diamond, color=yellow];
stat314[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.182.62.24:80, 169.189.202.210:*}[96.875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1924: (0.529101%)&lt;BR/&gt; 1923: (0.529101%)&lt;BR/&gt; 1921: (0.529101%)&lt;BR/&gt; 1920: (0.529101%)&gt;];
}
1936--1937[label="1;93pkt 93fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.202.210" src_ip="48.182.62.24" src_port="80"/>
    </slice>
    <from sec="1054876301" usec="0"/>
    <to sec="1054876427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770739,1.60066,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_315{
style=filled;
color=gray75;
1940[label="175.84.53.71;d;78pkt 78fpkt", shape=diamond, color=yellow];
1941[label="174.128.11.132;s;78pkt 78fpkt", shape=diamond, color=yellow];
2596[label="174.128.11.132;s;78pkt 78fpkt", shape=hexagon, color=black];
3549[label="174.128.11.132;131pkt 131fpkt", shape=pentagon, color=darkviolet];
stat315[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.128.11.132:80, 175.84.53.71:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1181: (0.547945%)&lt;BR/&gt; 1180: (0.547945%)&lt;BR/&gt; 1179: (0.547945%)&lt;BR/&gt; 1178: (0.547945%)&gt;];
}
1940--1941[label="1;78pkt 78fpkt"];
1940--2596[label="1;78pkt 78fpkt"];
1940--3549[label="1;78pkt 78fpkt"];
1941--2596[label="1;78pkt 78fpkt"];
1941--3549[label="1;78pkt 78fpkt"];
2596--3549[label="1;78pkt 78fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.53.71" src_ip="174.128.11.132" src_port="80"/>
    </slice>
    <from sec="1054876313" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05661,1.61938,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_317{
style=filled;
color=gray75;
1946[label="199.104.102.216;d;11pkt 11fpkt", shape=diamond, color=yellow];
1947[label="210.4.213.1;s;10pkt 10fpkt", shape=diamond, color=yellow];
2719[label="210.4.213.1;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4188[label="210.4.213.1;2pkt 2fpkt", shape=invtriangle, color=brown];
4769[label="210.4.213.1;2pkt 2fpkt", shape=invhouse, color=bisque];
stat317[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.4.213.1:80, 199.104.102.216:*}[90.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.1481%)&lt;BR/&gt; 53012: (9.25926%)&lt;BR/&gt; 53010: (9.25926%)&lt;BR/&gt; 53013: (3.7037%)&lt;BR/&gt; 53011: (3.7037%)&gt;];
}
1946--1947[label="1;10pkt 10fpkt"];
1946--2719[label="1;2pkt 2fpkt"];
1946--4188[label="1;2pkt 2fpkt"];
1946--4769[label="1;2pkt 2fpkt"];
1947--2719[label="1;2pkt 2fpkt"];
1947--4188[label="1;2pkt 2fpkt"];
1947--4769[label="1;2pkt 2fpkt"];
2719--4188[label="1;2pkt 2fpkt"];
2719--4769[label="1;2pkt 2fpkt"];
4188--4769[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="199.104.102.216" src_ip="210.4.213.1" src_port="80"/>
    </slice>
    <from sec="1054876321" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_321{
style=filled;
color=gray75;
743[label="192.96.249.70;s;1pkt 1fpkt", shape=diamond, color=yellow];
1974[label="192.96.249.70;s;1pkt 1fpkt", shape=hexagon, color=black];
stat321[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.96.249.70:37640, 199.104.100.179:2124}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37640: (50%)&lt;BR/&gt; 2124: (50%)&gt;];
}
743--1974[label="1;1pkt 1fpkt"];
743--2010[label="1;1pkt 1fpkt"];
1974--2010[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.104.100.179" dst_port="2124" src_ip="192.96.249.70" src_port="37640"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_322{
style=filled;
color=gray75;
917[label="211.64.62.107;s;1922pkt 1922fpkt", shape=diamond, color=yellow];
1193[label="192.77.44.204;s;67pkt 67fpkt", shape=diamond, color=yellow];
1564[label="175.84.220.219;d;113pkt 113fpkt", shape=diamond, color=yellow];
2062[label="211.64.62.107;s;482pkt 482fpkt", shape=hexagon, color=black];
stat322[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.64.62.107:0, *:0}[76.4875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (77.5542%)&lt;BR/&gt; 445: (3.54102%)&lt;BR/&gt; 139: (3.52167%)&lt;BR/&gt; 80: (3.21207%)&lt;BR/&gt; 137: (1.47059%)&gt;];
}
917--1076[label="0.0348837;3pkt 3fpkt"];
917--1457[label="0.00980392;1pkt 1fpkt"];
917--1564[label="0.0265487;3pkt 3fpkt"];
917--2062[label="1;482pkt 482fpkt"];
917--2343[label="0.0265487;3pkt 3fpkt"];
917--2671[label="0.00260146;5pkt 5fpkt"];
917--2672[label="0.00165289;2pkt 2fpkt"];
917--2673[label="0.00272109;2pkt 2fpkt"];
917--2675[label="0.00156087;3pkt 3fpkt"];
917--2676[label="0.0112936;11pkt 11fpkt"];
917--2677[label="0.0110497;12pkt 12fpkt"];
917--2683[label="0.00156087;3pkt 3fpkt"];
917--2684[label="0.00455322;8pkt 8fpkt"];
917--2695[label="0.00260146;5pkt 5fpkt"];
917--2696[label="0.00165289;2pkt 2fpkt"];
917--2697[label="0.00272109;2pkt 2fpkt"];
917--2699[label="0.00156087;3pkt 3fpkt"];
917--2700[label="0.0112936;11pkt 11fpkt"];
917--2701[label="0.0110396;12pkt 12fpkt"];
917--2706[label="0.00260146;5pkt 5fpkt"];
917--2707[label="0.00165289;2pkt 2fpkt"];
917--2708[label="0.0027248;2pkt 2fpkt"];
1193--1216[label="0.425926;23pkt 23fpkt"];
1193--1564[label="0.223881;15pkt 15fpkt"];
1193--1973[label="0.0746269;5pkt 5fpkt"];
1193--2120[label="0.0149254;1pkt 1fpkt"];
1193--2211[label="1;60pkt 60fpkt"];
1193--2343[label="0.223881;15pkt 15fpkt"];
1193--2517[label="0.425926;23pkt 23fpkt"];
1193--2611[label="0.0746269;5pkt 5fpkt"];
1193--2669[label="0.208955;14pkt 14fpkt"];
1564--1595[label="0.94382;84pkt 84fpkt"];
1564--2211[label="0.2;12pkt 12fpkt"];
1564--2343[label="1;113pkt 113fpkt"];
1564--2669[label="0.0619469;7pkt 7fpkt"];
1564--2804[label="0.884211;84pkt 84fpkt"];
1564--3677[label="0.0666667;1pkt 1fpkt"];
2062--2671[label="0.0103734;5pkt 5fpkt"];
2062--2672[label="0.00414938;2pkt 2fpkt"];
2062--2673[label="0.00414938;2pkt 2fpkt"];
2062--2675[label="0.00622407;3pkt 3fpkt"];
2062--2676[label="0.0228216;11pkt 11fpkt"];
2062--2677[label="0.0248963;12pkt 12fpkt"];
2062--2695[label="0.0103734;5pkt 5fpkt"];
2062--2696[label="0.00414938;2pkt 2fpkt"];
2062--2697[label="0.00414938;2pkt 2fpkt"];
2062--2699[label="0.00622407;3pkt 3fpkt"];
2062--2700[label="0.0228216;11pkt 11fpkt"];
2062--2701[label="0.0248963;12pkt 12fpkt"];
2062--2706[label="0.0103734;5pkt 5fpkt"];
2062--2707[label="0.00414938;2pkt 2fpkt"];
2062--2708[label="0.00414938;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="211.64.62.107"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054876427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_323{
style=filled;
color=gray75;
885[label="51.94.146.71;s;8216pkt 8216fpkt", shape=diamond, color=yellow];
1997[label="51.94.146.71;s;8216pkt 8216fpkt", shape=hexagon, color=black];
stat323[shape=component, label=&lt;Rules:&lt;BR/&gt;{51.94.146.71:*, *:1433}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50%)&lt;BR/&gt; 4382: (0.0182571%)&lt;BR/&gt; 4381: (0.0182571%)&lt;BR/&gt; 4380: (0.0182571%)&lt;BR/&gt; 4379: (0.0182571%)&gt;];
}
885--1997[label="1;8216pkt 8216fpkt"];
</description>
    <slice>
      <filter dst_port="1433" src_ip="51.94.146.71"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_324{
style=filled;
color=gray75;
1261[label="199.98.97.241;d;12pkt 12fpkt", shape=diamond, color=yellow];
2004[label="210.198.137.64;s;28pkt 28fpkt", shape=hexagon, color=black];
stat324[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.198.137.64:80, 199.104.67.46:*}[41.1765%]&lt;BR/&gt;{210.198.137.64:80, 199.98.97.241:*}[32.3529%]&lt;BR/&gt;{210.198.137.64:80, 176.107.32.66:*}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1613: (2.5%)&lt;BR/&gt; 1612: (2.5%)&lt;BR/&gt; 1611: (2.5%)&lt;BR/&gt; 1610: (2.5%)&gt;];
}
1261--2004[label="0.5;6pkt 6fpkt"];
2004--2088[label="0.5;14pkt 14fpkt"];
2004--2120[label="0.285714;8pkt 8fpkt"];
2004--2669[label="0.321429;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="199.104.67.46" src_ip="210.198.137.64" src_port="80"/>
      <filter dst_ip="199.98.97.241" src_ip="210.198.137.64" src_port="80"/>
      <filter dst_ip="176.107.32.66" src_ip="210.198.137.64" src_port="80"/>
    </slice>
    <from sec="1054875628" usec="0"/>
    <to sec="1054875897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.697078,1.64478,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_327{
style=filled;
color=gray75;
258[label="84.117.1.105s;1pkt 1fpkt", shape=rectangle, color=red];
693[label="48.11.146.53;s;121pkt 121fpkt", shape=diamond, color=yellow];
848[label="48.227.244.226;s;1pkt 1fpkt", shape=diamond, color=yellow];
1052[label="199.20.35.246;s;21pkt 21fpkt", shape=diamond, color=yellow];
1203[label="52.18.201.193;s;16pkt 16fpkt", shape=diamond, color=yellow];
1692[label="211.244.1.83;s;34pkt 34fpkt", shape=diamond, color=yellow];
stat327[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.11.146.53:*, 199.104.123.144:*}[51.5464%]&lt;BR/&gt;{*:80, 199.104.100.179:*}[37.6289%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (18.8144%)&lt;BR/&gt; 21: (3.35052%)&lt;BR/&gt; 20: (2.06186%)&lt;BR/&gt; 62954: (0.257732%)&lt;BR/&gt; 62045: (0.257732%)&gt;];
}
258--708[label="1;1pkt 1fpkt"];
258--2010[label="1;1pkt 1fpkt"];
693--708[label="0.0247934;3pkt 3fpkt"];
693--718[label="0.00826446;1pkt 1fpkt"];
693--950[label="0.884956;100pkt 100fpkt"];
693--1319[label="0.010101;1pkt 1fpkt"];
693--1887[label="0.888889;16pkt 16fpkt"];
693--1970[label="0.00826446;1pkt 1fpkt"];
693--2008[label="1;52pkt 52fpkt"];
693--2010[label="0.0247934;3pkt 3fpkt"];
693--2081[label="0.84375;54pkt 54fpkt"];
848--2010[label="1;1pkt 1fpkt"];
848--2669[label="1;1pkt 1fpkt"];
1052--2010[label="0.47619;10pkt 10fpkt"];
1052--2669[label="0.285714;6pkt 6fpkt"];
1203--2010[label="0.625;10pkt 10fpkt"];
1203--2135[label="1;10pkt 10fpkt"];
1203--2669[label="0.125;2pkt 2fpkt"];
1692--2010[label="0.323529;11pkt 11fpkt"];
1692--2669[label="0.0294118;1pkt 1fpkt"];
1692--3276[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="199.104.123.144" src_ip="48.11.146.53"/>
      <filter dst_ip="199.104.100.179" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_330{
style=filled;
color=gray75;
1808[label="169.189.200.225;d;42pkt 42fpkt", shape=diamond, color=yellow];
stat330[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 169.189.200.225:*}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.8571%)&lt;BR/&gt; 1863: (5.95238%)&lt;BR/&gt; 4995: (1.19048%)&lt;BR/&gt; 4994: (1.19048%)&lt;BR/&gt; 4993: (1.19048%)&gt;];
}
1808--2080[label="0.35;7pkt 7fpkt"];
1808--2433[label="0.119048;5pkt 5fpkt"];
1808--2845[label="0.047619;2pkt 2fpkt"];
1808--3695[label="0.119048;5pkt 5fpkt"];
1808--3798[label="0.222222;4pkt 4fpkt"];
1808--4151[label="0.0238095;1pkt 1fpkt"];
1808--4238[label="0.047619;2pkt 2fpkt"];
1808--4786[label="0.047619;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.200.225" src_port="80"/>
    </slice>
    <from sec="1054875928" usec="0"/>
    <to sec="1054876426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.977683,1.70868,999,0 0 0 1 0 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_331{
style=filled;
color=gray75;
823[label="169.189.200.48;d;4pkt 4fpkt", shape=diamond, color=yellow];
4886[label="99.43.46.143;1pkt 1fpkt", shape=invhouse, color=bisque];
stat331[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.42.4.12:1863, 169.189.200.48:1035}[25%]&lt;BR/&gt;{37.16.210.141:6699, 169.189.200.48:1110}[25%]&lt;BR/&gt;{99.43.46.143:6699, 169.189.200.48:1234}[25%]&lt;BR/&gt;{192.42.2.147:1863, 169.189.200.48:1217}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (30%)&lt;BR/&gt; 1863: (20%)&lt;BR/&gt; 1234: (20%)&lt;BR/&gt; 1217: (10%)&lt;BR/&gt; 1110: (10%)&gt;];
}
823--995[label="1;1pkt 1fpkt"];
823--1029[label="1;1pkt 1fpkt"];
823--2032[label="1;1pkt 1fpkt"];
823--2324[label="1;4pkt 4fpkt"];
823--3604[label="1;1pkt 1fpkt"];
823--4886[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.200.48" dst_port="1217" src_ip="192.42.2.147" src_port="1863"/>
      <filter dst_ip="169.189.200.48" dst_port="1234" src_ip="99.43.46.143" src_port="6699"/>
      <filter dst_ip="169.189.200.48" dst_port="1110" src_ip="37.16.210.141" src_port="6699"/>
      <filter dst_ip="169.189.200.48" dst_port="1035" src_ip="192.42.4.12" src_port="1863"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_332{
style=filled;
color=gray75;
1953[label="139.234.161.150;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat332[shape=component, label=&lt;Rules:&lt;BR/&gt;{139.234.161.150:3366, 199.98.114.167:2545}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3366: (50%)&lt;BR/&gt; 2545: (50%)&gt;];
}
1953--2584[label="1;1pkt 1fpkt"];
1953--3657[label="1;1pkt 1fpkt"];
1953--4891[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.98.114.167" dst_port="2545" src_ip="139.234.161.150" src_port="3366"/>
    </slice>
    <from sec="1054876353" usec="0"/>
    <to sec="1054876421" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_333{
style=filled;
color=gray75;
869[label="99.69.41.24;s;1pkt 1fpkt", shape=diamond, color=yellow];
878[label="49.78.231.123;s;1pkt 1fpkt", shape=diamond, color=yellow];
1025[label="169.189.201.17;d;36pkt 36fpkt", shape=diamond, color=yellow];
1643[label="52.97.187.18;s;1pkt 1fpkt", shape=diamond, color=yellow];
1644[label="160.62.60.134;s;1pkt 1fpkt", shape=diamond, color=yellow];
1645[label="99.99.114.252;s;1pkt 1fpkt", shape=diamond, color=yellow];
2042[label="99.69.41.24;s;1pkt 1fpkt", shape=hexagon, color=black];
2381[label="99.99.114.252;s;1pkt 1fpkt", shape=hexagon, color=black];
stat333[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6699, 169.189.201.17:*}[36.1111%]&lt;BR/&gt;{220.72.93.7:80, 169.189.201.17:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (24.4186%)&lt;BR/&gt; 6699: (23.2558%)&lt;BR/&gt; 3674: (3.48837%)&lt;BR/&gt; 3570: (3.48837%)&lt;BR/&gt; 3673: (2.32558%)&gt;];
}
869--1025[label="1;1pkt 1fpkt"];
869--2042[label="1;1pkt 1fpkt"];
878--1025[label="1;1pkt 1fpkt"];
1025--1091[label="0.0277778;1pkt 1fpkt"];
1025--1643[label="1;1pkt 1fpkt"];
1025--1644[label="1;1pkt 1fpkt"];
1025--1645[label="1;1pkt 1fpkt"];
1025--2042[label="1;1pkt 1fpkt"];
1025--2145[label="0.0285714;1pkt 1fpkt"];
1025--2381[label="1;1pkt 1fpkt"];
1025--2669[label="0.305556;11pkt 11fpkt"];
1025--3328[label="0.0555556;2pkt 2fpkt"];
1025--4085[label="0.0277778;1pkt 1fpkt"];
1025--4426[label="0.0555556;2pkt 2fpkt"];
1025--4732[label="0.0277778;1pkt 1fpkt"];
1025--4943[label="0.0277778;1pkt 1fpkt"];
1645--2381[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.201.17" src_port="6699"/>
      <filter dst_ip="169.189.201.17" src_ip="220.72.93.7" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_334{
style=filled;
color=gray75;
887[label="84.45.85.106;s;4pkt 4fpkt", shape=diamond, color=yellow];
2044[label="84.45.85.106;s;4pkt 4fpkt", shape=hexagon, color=black];
stat334[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.45.85.106:80, 175.85.101.99:64113}[25%]&lt;BR/&gt;{84.45.85.106:80, 175.85.101.99:64114}[25%]&lt;BR/&gt;{84.45.85.106:80, 175.85.101.99:64123}[25%]&lt;BR/&gt;{84.45.85.106:80, 175.85.101.99:64128}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64128: (12.5%)&lt;BR/&gt; 64123: (12.5%)&lt;BR/&gt; 64114: (12.5%)&lt;BR/&gt; 64113: (12.5%)&gt;];
}
887--2044[label="1;4pkt 4fpkt"];
887--2669[label="0.75;3pkt 3fpkt"];
887--3411[label="1;4pkt 4fpkt"];
2044--2669[label="0.75;3pkt 3fpkt"];
2044--3411[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="175.85.101.99" dst_port="64128" src_ip="84.45.85.106" src_port="80"/>
      <filter dst_ip="175.85.101.99" dst_port="64123" src_ip="84.45.85.106" src_port="80"/>
      <filter dst_ip="175.85.101.99" dst_port="64114" src_ip="84.45.85.106" src_port="80"/>
      <filter dst_ip="175.85.101.99" dst_port="64113" src_ip="84.45.85.106" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054875768" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_335{
style=filled;
color=gray75;
1050[label="200.133.54.22;s;3019pkt 3019fpkt", shape=diamond, color=yellow];
stat335[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.133.54.22:1062, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1062: (50%)&gt;];
}
1050--2050[label="1;2288pkt 2288fpkt"];
1050--2674[label="0.0635972;192pkt 192fpkt"];
1050--2678[label="0.0626035;189pkt 189fpkt"];
1050--2685[label="0.061941;187pkt 187fpkt"];
1050--2698[label="0.0635972;192pkt 192fpkt"];
1050--2709[label="0.0635972;192pkt 192fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="200.133.54.22" src_port="1062"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770739,1.60066,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_336{
style=filled;
color=gray75;
1070[label="175.84.22.91;d;26pkt 26fpkt", shape=diamond, color=yellow];
1071[label="203.65.168.97;s;26pkt 26fpkt", shape=diamond, color=yellow];
2058[label="175.84.22.91;d;26pkt 26fpkt", shape=hexagon, color=black];
3365[label="203.65.168.97;25pkt 25fpkt", shape=pentagon, color=darkviolet];
stat336[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.65.168.97:80, 175.84.22.91:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2085: (1.94175%)&lt;BR/&gt; 2084: (1.94175%)&lt;BR/&gt; 2083: (1.94175%)&lt;BR/&gt; 2082: (1.94175%)&gt;];
}
1070--1071[label="1;26pkt 26fpkt"];
1070--2058[label="1;26pkt 26fpkt"];
1070--2669[label="0.269231;7pkt 7fpkt"];
1070--3365[label="1;25pkt 25fpkt"];
1071--2058[label="1;26pkt 26fpkt"];
1071--2669[label="0.269231;7pkt 7fpkt"];
1071--3365[label="1;25pkt 25fpkt"];
2058--2669[label="0.269231;7pkt 7fpkt"];
2058--3365[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.22.91" src_ip="203.65.168.97" src_port="80"/>
    </slice>
    <from sec="1054875603" usec="0"/>
    <to sec="1054875825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_337{
style=filled;
color=gray75;
1074[label="176.107.52.220;s;60pkt 60fpkt", shape=diamond, color=yellow];
1224[label="51.159.213.206;d;30pkt 30fpkt", shape=diamond, color=yellow];
2059[label="176.107.52.220;s;60pkt 60fpkt", shape=hexagon, color=black];
stat337[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.107.52.220:*, 51.159.213.206:80}[50%]&lt;BR/&gt;{176.107.52.220:*, 10.0.1.1:192}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36%)&lt;BR/&gt; 192: (12%)&lt;BR/&gt; 995: (1.33333%)&lt;BR/&gt; 51395: (1%)&lt;BR/&gt; 51394: (1%)&gt;];
}
1074--1224[label="1;30pkt 30fpkt"];
1074--2059[label="1;60pkt 60fpkt"];
1074--2670[label="0.166667;10pkt 10fpkt"];
1224--2059[label="1;30pkt 30fpkt"];
1224--2670[label="0.266667;8pkt 8fpkt"];
2059--2670[label="0.166667;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="51.159.213.206" dst_port="80" src_ip="176.107.52.220"/>
      <filter dst_ip="10.0.1.1" dst_port="192" src_ip="176.107.52.220"/>
    </slice>
    <from sec="1054875604" usec="0"/>
    <to sec="1054876406" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867864,1.63028,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_338{
style=filled;
color=gray75;
108[label="221.167.24.211s;5pkt 5fpkt", shape=rectangle, color=red];
1116[label="221.167.24.211;s;11pkt 11fpkt", shape=diamond, color=yellow];
2061[label="175.84.220.44;d;11pkt 11fpkt", shape=hexagon, color=black];
stat338[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.167.24.211:80, 175.84.220.44:*}[84.6154%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.2963%)&lt;BR/&gt; 1849: (5.55556%)&lt;BR/&gt; 1848: (5.55556%)&lt;BR/&gt; 1847: (5.55556%)&lt;BR/&gt; 1846: (5.55556%)&gt;];
}
108--1076[label="1;5pkt 5fpkt"];
108--1116[label="1;5pkt 5fpkt"];
108--2061[label="0.8;4pkt 4fpkt"];
1116--2061[label="0.818182;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.220.44" src_ip="221.167.24.211" src_port="80"/>
    </slice>
    <from sec="1054875604" usec="0"/>
    <to sec="1054875966" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.571638,1.61542,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_339{
style=filled;
color=gray75;
1608[label="134.66.202.93;d;18pkt 18fpkt", shape=diamond, color=yellow];
1617[label="199.31.204.28;s;24pkt 24fpkt", shape=diamond, color=yellow];
2922[label="199.31.204.28;24pkt 24fpkt", shape=pentagon, color=darkviolet];
2977[label="210.154.141.38;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat339[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.31.204.28:80, 134.66.202.93:*}[40.625%]&lt;BR/&gt;{199.31.204.28:80, 175.85.25.5:*}[21.875%]&lt;BR/&gt;{*:80, 199.104.102.221:*}[21.875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1728: (2.17391%)&lt;BR/&gt; 1727: (2.17391%)&lt;BR/&gt; 1726: (2.17391%)&lt;BR/&gt; 1724: (2.17391%)&gt;];
}
1608--1617[label="0.722222;13pkt 13fpkt"];
1608--2922[label="0.722222;13pkt 13fpkt"];
1608--4270[label="0.722222;13pkt 13fpkt"];
1608--4796[label="0.722222;13pkt 13fpkt"];
1617--2030[label="0.166667;4pkt 4fpkt"];
1617--2425[label="0.291667;7pkt 7fpkt"];
1617--2922[label="1;24pkt 24fpkt"];
1617--4270[label="1;24pkt 24fpkt"];
1617--4796[label="1;24pkt 24fpkt"];
2922--4270[label="1;24pkt 24fpkt"];
2922--4796[label="1;24pkt 24fpkt"];
2977--4293[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="199.104.102.221" src_port="80"/>
      <filter dst_ip="134.66.202.93" src_ip="199.31.204.28" src_port="80"/>
      <filter dst_ip="175.85.25.5" src_ip="199.31.204.28" src_port="80"/>
    </slice>
    <from sec="1054875696" usec="0"/>
    <to sec="1054876414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.895209,1.57226,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_341{
style=filled;
color=gray75;
1096[label="64.52.182.174;s;4pkt 4fpkt", shape=diamond, color=yellow];
2071[label="64.52.182.174;s;4pkt 4fpkt", shape=hexagon, color=black];
3802[label="64.52.182.174;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4609[label="64.52.182.174;4pkt 4fpkt", shape=invtriangle, color=brown];
stat341[shape=component, label=&lt;Rules:&lt;BR/&gt;{64.52.182.174:80, 175.84.235.228:1180}[25%]&lt;BR/&gt;{64.52.182.174:80, 175.84.235.228:1183}[25%]&lt;BR/&gt;{64.52.182.174:80, 175.84.235.228:1186}[25%]&lt;BR/&gt;{64.52.182.174:80, 175.84.235.228:1194}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1194: (12.5%)&lt;BR/&gt; 1186: (12.5%)&lt;BR/&gt; 1183: (12.5%)&lt;BR/&gt; 1180: (12.5%)&gt;];
}
1096--2071[label="1;4pkt 4fpkt"];
1096--2136[label="1;4pkt 4fpkt"];
1096--2669[label="0.75;3pkt 3fpkt"];
1096--3802[label="1;4pkt 4fpkt"];
1096--4609[label="1;4pkt 4fpkt"];
2071--2136[label="1;4pkt 4fpkt"];
2071--2669[label="0.75;3pkt 3fpkt"];
2071--3802[label="1;4pkt 4fpkt"];
2071--4609[label="1;4pkt 4fpkt"];
3802--4609[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.235.228" dst_port="1194" src_ip="64.52.182.174" src_port="80"/>
      <filter dst_ip="175.84.235.228" dst_port="1186" src_ip="64.52.182.174" src_port="80"/>
      <filter dst_ip="175.84.235.228" dst_port="1183" src_ip="64.52.182.174" src_port="80"/>
      <filter dst_ip="175.84.235.228" dst_port="1180" src_ip="64.52.182.174" src_port="80"/>
    </slice>
    <from sec="1054875631" usec="0"/>
    <to sec="1054875881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_342{
style=filled;
color=gray75;
944[label="220.24.15.144;s;348pkt 348fpkt", shape=diamond, color=yellow];
1093[label="175.84.32.74;d;163pkt 163fpkt", shape=diamond, color=yellow];
2149[label="220.24.15.144;s;322pkt 322fpkt", shape=hexagon, color=black];
stat342[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 175.84.32.74:*}[34.322%]&lt;BR/&gt;{220.24.15.144:80, 175.84.32.84:*}[24.1525%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.94%)&lt;BR/&gt; 1398: (0.540216%)&lt;BR/&gt; 1405: (0.420168%)&lt;BR/&gt; 1404: (0.420168%)&lt;BR/&gt; 1401: (0.420168%)&gt;];
}
944--1093[label="0.239264;39pkt 39fpkt"];
944--1102[label="0.0803571;9pkt 9fpkt"];
944--1106[label="0.0754717;4pkt 4fpkt"];
944--1234[label="0.145833;14pkt 14fpkt"];
944--1268[label="0.122951;15pkt 15fpkt"];
944--1387[label="0.896552;26pkt 26fpkt"];
944--2069[label="0.25;35pkt 35fpkt"];
944--2073[label="0.156716;21pkt 21fpkt"];
944--2076[label="0.0754717;4pkt 4fpkt"];
944--2149[label="1;322pkt 322fpkt"];
944--2159[label="0.122951;15pkt 15fpkt"];
944--2226[label="0.231788;35pkt 35fpkt"];
944--2526[label="0.145833;14pkt 14fpkt"];
944--2669[label="0.00574713;2pkt 2fpkt"];
944--3620[label="1;348pkt 348fpkt"];
1093--1285[label="0.00613497;1pkt 1fpkt"];
1093--2070[label="0.220859;36pkt 36fpkt"];
1093--2149[label="0.239264;39pkt 39fpkt"];
1093--2669[label="0.104294;17pkt 17fpkt"];
1093--3167[label="0.00613497;1pkt 1fpkt"];
1093--3620[label="0.239264;39pkt 39fpkt"];
1093--4367[label="0.00613497;1pkt 1fpkt"];
2149--2159[label="0.122951;15pkt 15fpkt"];
2149--2226[label="0.231788;35pkt 35fpkt"];
2149--2526[label="0.145833;14pkt 14fpkt"];
2149--2669[label="0.00621118;2pkt 2fpkt"];
2149--3620[label="1;322pkt 322fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.32.74" src_port="80"/>
      <filter dst_ip="175.84.32.84" src_ip="220.24.15.144" src_port="80"/>
    </slice>
    <from sec="1054875628" usec="0"/>
    <to sec="1054876294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_343{
style=filled;
color=gray75;
42[label="170.158.28.63s;2pkt 2fpkt", shape=rectangle, color=red];
stat343[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.158.28.63:210, 175.85.185.86:32992}[50%]&lt;BR/&gt;{170.158.28.63:210, 175.85.54.175:49322}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 210: (50%)&lt;BR/&gt; 49322: (25%)&lt;BR/&gt; 32992: (25%)&gt;];
}
42--1058[label="1;2pkt 2fpkt"];
42--2052[label="1;2pkt 2fpkt"];
42--2074[label="1;1pkt 1fpkt"];
42--3126[label="1;2pkt 2fpkt"];
42--4350[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="175.85.54.175" dst_port="49322" src_ip="170.158.28.63" src_port="210"/>
      <filter dst_ip="175.85.185.86" dst_port="32992" src_ip="170.158.28.63" src_port="210"/>
    </slice>
    <from sec="1054875757" usec="0"/>
    <to sec="1054876398" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770739,1.60066,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_344{
style=filled;
color=gray75;
802[label="175.84.162.180;d;14pkt 14fpkt", shape=diamond, color=yellow];
803[label="84.34.231.163;s;3pkt 3fpkt", shape=diamond, color=yellow];
2026[label="175.84.162.180;d;13pkt 13fpkt", shape=hexagon, color=black];
2320[label="84.34.231.163;s;3pkt 3fpkt", shape=hexagon, color=black];
3261[label="48.11.146.81;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat344[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.11.146.81:443, 198.160.35.124:*}[22.2222%]&lt;BR/&gt;{*:80, 175.84.162.180:*}[22.2222%]&lt;BR/&gt;{*:443, 175.84.162.180:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (17.1053%)&lt;BR/&gt; 80: (17.1053%)&lt;BR/&gt; 6969: (7.89474%)&lt;BR/&gt; 6454: (5.26316%)&lt;BR/&gt; 5190: (5.26316%)&gt;];
}
802--803[label="1;3pkt 3fpkt"];
802--1104[label="0.214286;3pkt 3fpkt"];
802--2026[label="1;13pkt 13fpkt"];
802--2075[label="0.214286;3pkt 3fpkt"];
802--2320[label="1;3pkt 3fpkt"];
802--2669[label="0.214286;3pkt 3fpkt"];
802--3261[label="0.2;1pkt 1fpkt"];
803--2026[label="1;3pkt 3fpkt"];
803--2320[label="1;3pkt 3fpkt"];
803--2669[label="1;3pkt 3fpkt"];
2026--2075[label="0.230769;3pkt 3fpkt"];
2026--2320[label="1;3pkt 3fpkt"];
2026--2669[label="0.230769;3pkt 3fpkt"];
2026--3261[label="0.2;1pkt 1fpkt"];
2320--2669[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.162.180" src_port="443"/>
      <filter dst_ip="175.84.162.180" src_port="80"/>
      <filter dst_ip="198.160.35.124" src_ip="48.11.146.81" src_port="443"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_345{
style=filled;
color=gray75;
1950[label="52.98.170.59;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat345[shape=component, label=&lt;Rules:&lt;BR/&gt;{52.98.170.59:2873, 199.98.114.167:2534}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2873: (50%)&lt;BR/&gt; 2534: (50%)&gt;];
}
1950--2584[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.98.114.167" dst_port="2534" src_ip="52.98.170.59" src_port="2873"/>
    </slice>
    <from sec="1054876333" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_346{
style=filled;
color=gray75;
704[label="219.12.159.174;s;1pkt 1fpkt", shape=diamond, color=yellow];
951[label="175.85.17.35;d;1pkt 1fpkt", shape=diamond, color=yellow];
2082[label="219.12.159.174;s;1pkt 1fpkt", shape=hexagon, color=black];
2539[label="175.85.17.35;d;1pkt 1fpkt", shape=hexagon, color=black];
stat346[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.12.159.174:1755, 175.85.17.35:2683}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2683: (50%)&lt;BR/&gt; 1755: (50%)&gt;];
}
704--951[label="1;1pkt 1fpkt"];
704--2082[label="1;1pkt 1fpkt"];
704--2539[label="1;1pkt 1fpkt"];
951--2082[label="1;1pkt 1fpkt"];
951--2539[label="1;1pkt 1fpkt"];
2082--2539[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.85.17.35" dst_port="2683" src_ip="219.12.159.174" src_port="1755"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_347{
style=filled;
color=gray75;
722[label="219.172.68.75;d;4pkt 4fpkt", shape=diamond, color=yellow];
725[label="176.107.80.219;s;4pkt 4fpkt", shape=diamond, color=yellow];
2084[label="219.172.68.75;d;4pkt 4fpkt", shape=hexagon, color=black];
2171[label="176.107.80.219;s;4pkt 4fpkt", shape=hexagon, color=black];
stat347[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.107.80.219:2407, 219.172.68.75:1755}[25%]&lt;BR/&gt;{176.107.80.219:2408, 219.172.68.75:1755}[25%]&lt;BR/&gt;{176.107.80.219:2409, 219.172.68.75:1755}[25%]&lt;BR/&gt;{176.107.80.219:2410, 219.172.68.75:1755}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (50%)&lt;BR/&gt; 2410: (12.5%)&lt;BR/&gt; 2409: (12.5%)&lt;BR/&gt; 2408: (12.5%)&lt;BR/&gt; 2407: (12.5%)&gt;];
}
722--725[label="1;4pkt 4fpkt"];
722--2084[label="1;4pkt 4fpkt"];
722--2171[label="1;4pkt 4fpkt"];
725--2084[label="1;4pkt 4fpkt"];
725--2171[label="1;4pkt 4fpkt"];
2084--2171[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="219.172.68.75" dst_port="1755" src_ip="176.107.80.219" src_port="2410"/>
      <filter dst_ip="219.172.68.75" dst_port="1755" src_ip="176.107.80.219" src_port="2409"/>
      <filter dst_ip="219.172.68.75" dst_port="1755" src_ip="176.107.80.219" src_port="2408"/>
      <filter dst_ip="219.172.68.75" dst_port="1755" src_ip="176.107.80.219" src_port="2407"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_348{
style=filled;
color=gray75;
747[label="201.0.226.227;s;1pkt 1fpkt", shape=diamond, color=yellow];
1134[label="176.107.182.188;d;1pkt 1fpkt", shape=diamond, color=yellow];
2086[label="176.107.182.188;d;1pkt 1fpkt", shape=hexagon, color=black];
2087[label="201.0.226.227;s;1pkt 1fpkt", shape=hexagon, color=black];
stat348[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.0.226.227:80, 176.107.182.188:47106}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47106: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
747--1134[label="1;1pkt 1fpkt"];
747--2086[label="1;1pkt 1fpkt"];
747--2087[label="1;1pkt 1fpkt"];
747--2669[label="1;1pkt 1fpkt"];
1134--2086[label="1;1pkt 1fpkt"];
1134--2087[label="1;1pkt 1fpkt"];
1134--2669[label="1;1pkt 1fpkt"];
2086--2087[label="1;1pkt 1fpkt"];
2086--2669[label="1;1pkt 1fpkt"];
2087--2669[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="176.107.182.188" dst_port="47106" src_ip="201.0.226.227" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840471,1.56547,503,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_349{
style=filled;
color=gray75;
134[label="48.188.106.24s;2pkt 2fpkt", shape=rectangle, color=red];
1077[label="216.49.138.168;s;464pkt 464fpkt", shape=diamond, color=yellow];
1324[label="198.128.181.142;d;19pkt 19fpkt", shape=diamond, color=yellow];
1488[label="134.66.106.74;d;118pkt 118fpkt", shape=diamond, color=yellow];
1688[label="169.9.60.164;d;86pkt 86fpkt", shape=diamond, color=yellow];
2030[label="199.104.102.221;d;262pkt 262fpkt", shape=hexagon, color=black];
2089[label="175.84.1.52;d;272pkt 272fpkt", shape=hexagon, color=black];
2978[label="50.85.224.38;21pkt 21fpkt", shape=pentagon, color=darkviolet];
stat349[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.49.138.168:80, *:*}[38.8423%]&lt;BR/&gt;{*:*, 175.84.1.52:*}[22.9866%]&lt;BR/&gt;{*:80, 199.104.102.221:*}[22.651%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.2219%)&lt;BR/&gt; 443: (1.80868%)&lt;BR/&gt; 25: (1.16559%)&lt;BR/&gt; 113: (0.241158%)&lt;BR/&gt; 21: (0.160772%)&gt;];
}
134--1488[label="1;2pkt 2fpkt"];
1077--1196[label="0.0162602;2pkt 2fpkt"];
1077--1231[label="0.0384615;1pkt 1fpkt"];
1077--1314[label="0.025641;1pkt 1fpkt"];
1077--1363[label="0.1;1pkt 1fpkt"];
1077--1384[label="0.032;4pkt 4fpkt"];
1077--1390[label="0.0882353;3pkt 3fpkt"];
1077--1488[label="0.237288;28pkt 28fpkt"];
1077--1590[label="0.0135747;3pkt 3fpkt"];
1077--1688[label="0.0232558;2pkt 2fpkt"];
1077--1767[label="0.0138889;1pkt 1fpkt"];
1077--1966[label="0.014218;3pkt 3fpkt"];
1077--1973[label="0.0797414;37pkt 37fpkt"];
1077--2010[label="0.0560345;26pkt 26fpkt"];
1077--2030[label="0.0458015;12pkt 12fpkt"];
1077--2037[label="0.00431034;2pkt 2fpkt"];
1077--2063[label="1;91pkt 91fpkt"];
1077--2089[label="0.0257353;7pkt 7fpkt"];
1077--2120[label="0.00271739;1pkt 1fpkt"];
1077--2315[label="0.00431034;2pkt 2fpkt"];
1077--2317[label="0.0107759;5pkt 5fpkt"];
1077--2335[label="0.0905172;42pkt 42fpkt"];
1077--2492[label="0.00215517;1pkt 1fpkt"];
1077--2548[label="0.05;1pkt 1fpkt"];
1077--2611[label="0.0689655;32pkt 32fpkt"];
1077--2669[label="0.049569;23pkt 23fpkt"];
1324--1464[label="0.0526316;1pkt 1fpkt"];
1324--2669[label="0.263158;5pkt 5fpkt"];
1324--2843[label="0.0526316;1pkt 1fpkt"];
1324--3161[label="0.0714286;1pkt 1fpkt"];
1324--3227[label="0.25;2pkt 2fpkt"];
1324--3733[label="0.384615;5pkt 5fpkt"];
1324--4363[label="0.0714286;1pkt 1fpkt"];
1488--1690[label="0.144068;17pkt 17fpkt"];
1488--1716[label="0.133333;2pkt 2fpkt"];
1488--2434[label="0.144068;17pkt 17fpkt"];
1488--2466[label="0.142857;2pkt 2fpkt"];
1488--2791[label="0.133333;2pkt 2fpkt"];
1488--3303[label="0.117647;2pkt 2fpkt"];
1488--3723[label="0.181818;12pkt 12fpkt"];
1688--1845[label="0.0116279;1pkt 1fpkt"];
1688--1886[label="0.0232558;2pkt 2fpkt"];
1688--1888[label="0.0348837;3pkt 3fpkt"];
1688--2351[label="0.0348837;3pkt 3fpkt"];
1688--2399[label="0.0232558;2pkt 2fpkt"];
1688--2669[label="0.0465116;4pkt 4fpkt"];
1688--3117[label="0.0810811;3pkt 3fpkt"];
1688--3134[label="0.0588235;5pkt 5fpkt"];
1688--3279[label="0.0357143;1pkt 1fpkt"];
1688--3310[label="0.0348837;3pkt 3fpkt"];
1688--3321[label="0.0232558;2pkt 2fpkt"];
1688--3331[label="0.0116279;1pkt 1fpkt"];
1688--3394[label="0.0232558;2pkt 2fpkt"];
1688--3495[label="0.0833333;2pkt 2fpkt"];
1688--3529[label="0.139535;6pkt 6fpkt"];
1688--3934[label="0.0116279;1pkt 1fpkt"];
1688--4013[label="0.152174;7pkt 7fpkt"];
1688--4141[label="0.0416667;1pkt 1fpkt"];
1688--4172[label="0.0540541;4pkt 4fpkt"];
1688--4353[label="0.0588235;5pkt 5fpkt"];
1688--4408[label="0.037037;1pkt 1fpkt"];
1688--4451[label="0.0232558;2pkt 2fpkt"];
1688--4507[label="0.136364;6pkt 6fpkt"];
1688--4670[label="0.0116279;1pkt 1fpkt"];
1688--4761[label="0.0540541;4pkt 4fpkt"];
1688--4950[label="0.0416667;1pkt 1fpkt"];
2030--2063[label="0.0769231;7pkt 7fpkt"];
2030--2192[label="0.159664;19pkt 19fpkt"];
2030--2217[label="0.00381679;1pkt 1fpkt"];
2030--2256[label="0.00534759;1pkt 1fpkt"];
2030--2291[label="0.0243902;2pkt 2fpkt"];
2030--2340[label="0.037037;4pkt 4fpkt"];
2030--2351[label="0.0272109;4pkt 4fpkt"];
2030--2433[label="0.00478469;1pkt 1fpkt"];
2030--2434[label="0.0138889;2pkt 2fpkt"];
2030--2511[label="0.0384615;5pkt 5fpkt"];
2030--2669[label="0.263359;69pkt 69fpkt"];
2030--2673[label="0.00381679;1pkt 1fpkt"];
2030--2697[label="0.00381679;1pkt 1fpkt"];
2030--2708[label="0.00381679;1pkt 1fpkt"];
2030--2722[label="0.0725191;19pkt 19fpkt"];
2030--2734[label="0.0666667;4pkt 4fpkt"];
2030--2746[label="0.0655738;4pkt 4fpkt"];
2030--2756[label="0.0217391;2pkt 2fpkt"];
2030--2791[label="0.0666667;1pkt 1fpkt"];
2030--2806[label="0.0235294;2pkt 2fpkt"];
2030--2835[label="0.05;2pkt 2fpkt"];
2030--2842[label="0.0714286;2pkt 2fpkt"];
2030--2848[label="0.0277778;1pkt 1fpkt"];
2030--2922[label="0.166667;4pkt 4fpkt"];
2030--3085[label="0.00492611;1pkt 1fpkt"];
2030--3192[label="0.0408163;2pkt 2fpkt"];
2030--3284[label="0.00398406;1pkt 1fpkt"];
2030--3311[label="0.117647;2pkt 2fpkt"];
2030--3323[label="0.08;4pkt 4fpkt"];
2030--3332[label="0.102564;4pkt 4fpkt"];
2030--3427[label="0.0909091;1pkt 1fpkt"];
2030--3595[label="0.00862069;1pkt 1fpkt"];
2030--3623[label="0.275;11pkt 11fpkt"];
2030--3707[label="0.205128;8pkt 8fpkt"];
2030--3779[label="0.0337838;5pkt 5fpkt"];
2030--3820[label="0.0277778;1pkt 1fpkt"];
2030--4002[label="0.00381679;1pkt 1fpkt"];
2030--4173[label="0.0277778;1pkt 1fpkt"];
2030--4193[label="0.0677966;4pkt 4fpkt"];
2030--4198[label="0.0645161;4pkt 4fpkt"];
2030--4204[label="0.0217391;2pkt 2fpkt"];
2030--4234[label="0.0512821;2pkt 2fpkt"];
2030--4240[label="0.0277778;1pkt 1fpkt"];
2030--4270[label="0.166667;4pkt 4fpkt"];
2030--4410[label="0.00398406;1pkt 1fpkt"];
2030--4538[label="0.00869565;1pkt 1fpkt"];
2030--4547[label="0.282051;11pkt 11fpkt"];
2030--4699[label="0.00381679;1pkt 1fpkt"];
2030--4775[label="0.0215054;2pkt 2fpkt"];
2030--4787[label="0.0277778;1pkt 1fpkt"];
2030--4796[label="0.166667;4pkt 4fpkt"];
2089--2213[label="0.0138889;1pkt 1fpkt"];
2089--2225[label="0.0497512;10pkt 10fpkt"];
2089--2259[label="0.0110294;3pkt 3fpkt"];
2089--2260[label="0.0687831;13pkt 13fpkt"];
2089--2283[label="0.0147059;1pkt 1fpkt"];
2089--2291[label="0.0243902;2pkt 2fpkt"];
2089--2344[label="0.00367647;1pkt 1fpkt"];
2089--2349[label="0.0135135;1pkt 1fpkt"];
2089--2354[label="0.0243902;1pkt 1fpkt"];
2089--2357[label="0.00666667;1pkt 1fpkt"];
2089--2362[label="0.00884956;1pkt 1fpkt"];
2089--2428[label="0.0147059;1pkt 1fpkt"];
2089--2433[label="0.0143541;3pkt 3fpkt"];
2089--2434[label="0.0138889;2pkt 2fpkt"];
2089--2496[label="0.0220588;3pkt 3fpkt"];
2089--2501[label="0.0186916;2pkt 2fpkt"];
2089--2552[label="0.0142857;1pkt 1fpkt"];
2089--2561[label="0.00588235;1pkt 1fpkt"];
2089--2567[label="0.00862069;1pkt 1fpkt"];
2089--2575[label="0.025641;1pkt 1fpkt"];
2089--2669[label="0.209559;57pkt 57fpkt"];
2089--2793[label="0.027027;1pkt 1fpkt"];
2089--2843[label="0.016129;1pkt 1fpkt"];
2089--2845[label="0.0135135;1pkt 1fpkt"];
2089--2852[label="0.00819672;1pkt 1fpkt"];
2089--2889[label="0.0140845;1pkt 1fpkt"];
2089--2928[label="0.205479;30pkt 30fpkt"];
2089--2978[label="0.047619;1pkt 1fpkt"];
2089--2986[label="0.0102041;1pkt 1fpkt"];
2089--2989[label="0.004329;1pkt 1fpkt"];
2089--3031[label="0.0540541;8pkt 8fpkt"];
2089--3034[label="0.0192308;1pkt 1fpkt"];
2089--3081[label="0.0208333;1pkt 1fpkt"];
2089--3089[label="0.00680272;1pkt 1fpkt"];
2089--3093[label="0.0238095;1pkt 1fpkt"];
2089--3098[label="0.00793651;1pkt 1fpkt"];
2089--3122[label="0.222222;2pkt 2fpkt"];
2089--3166[label="0.0198675;3pkt 3fpkt"];
2089--3262[label="0.0238095;1pkt 1fpkt"];
2089--3269[label="0.0108696;1pkt 1fpkt"];
2089--3270[label="0.25;7pkt 7fpkt"];
2089--3273[label="0.00483092;1pkt 1fpkt"];
2089--3282[label="0.103448;3pkt 3fpkt"];
2089--3284[label="0.00398406;1pkt 1fpkt"];
2089--3291[label="0.0357143;1pkt 1fpkt"];
2089--3298[label="0.0277778;2pkt 2fpkt"];
2089--3307[label="0.0140845;1pkt 1fpkt"];
2089--3336[label="0.103448;3pkt 3fpkt"];
2089--3439[label="0.0110294;3pkt 3fpkt"];
2089--3447[label="0.0163934;2pkt 2fpkt"];
2089--3595[label="0.232759;27pkt 27fpkt"];
2089--3723[label="0.121212;8pkt 8fpkt"];
2089--3766[label="0.625;5pkt 5fpkt"];
2089--3785[label="0.0833333;1pkt 1fpkt"];
2089--3838[label="0.166667;1pkt 1fpkt"];
2089--3878[label="0.0357143;2pkt 2fpkt"];
2089--3905[label="0.00571429;1pkt 1fpkt"];
2089--3912[label="0.0144928;1pkt 1fpkt"];
2089--3981[label="0.0666667;1pkt 1fpkt"];
2089--4138[label="0.00787402;1pkt 1fpkt"];
2089--4238[label="0.0135135;1pkt 1fpkt"];
2089--4256[label="0.0140845;1pkt 1fpkt"];
2089--4298[label="0.00434783;1pkt 1fpkt"];
2089--4315[label="0.0536913;8pkt 8fpkt"];
2089--4332[label="0.0208333;1pkt 1fpkt"];
2089--4337[label="0.0243902;1pkt 1fpkt"];
2089--4410[label="0.00398406;1pkt 1fpkt"];
2089--4466[label="0.0110294;3pkt 3fpkt"];
2089--4471[label="0.0163934;2pkt 2fpkt"];
2089--4538[label="0.234783;27pkt 27fpkt"];
2089--4626[label="0.166667;1pkt 1fpkt"];
2089--4656[label="0.00574713;1pkt 1fpkt"];
2089--4660[label="0.0144928;1pkt 1fpkt"];
2089--4690[label="0.0666667;1pkt 1fpkt"];
2089--4786[label="0.0133333;1pkt 1fpkt"];
2089--4806[label="0.004329;1pkt 1fpkt"];
2089--4814[label="0.0540541;8pkt 8fpkt"];
2089--4823[label="0.0208333;1pkt 1fpkt"];
2089--4864[label="0.0110294;3pkt 3fpkt"];
2089--4917[label="0.00571429;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.1.52"/>
      <filter src_ip="216.49.138.168" src_port="80"/>
      <filter dst_ip="199.104.102.221" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.804041,1.5518,504,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_350{
style=filled;
color=gray75;
92[label="192.42.161.167s;3pkt 3fpkt", shape=rectangle, color=red];
1487[label="192.42.161.167;s;32pkt 32fpkt", shape=diamond, color=yellow];
3761[label="192.42.161.167;33pkt 33fpkt", shape=pentagon, color=darkviolet];
4595[label="192.42.161.167;32pkt 32fpkt", shape=invtriangle, color=brown];
stat350[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.42.161.167:80, 175.84.193.45:*}[30.303%]&lt;BR/&gt;{192.42.161.167:80, 198.160.55.168:*}[24.2424%]&lt;BR/&gt;{192.42.161.167:443, *:*}[21.2121%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.5%)&lt;BR/&gt; 443: (10.5%)&lt;BR/&gt; 2050: (2%)&lt;BR/&gt; 1611: (2%)&lt;BR/&gt; 1607: (2%)&gt;];
}
92--759[label="1;3pkt 3fpkt"];
92--1487[label="1;3pkt 3fpkt"];
92--2090[label="1;3pkt 3fpkt"];
92--3761[label="1;3pkt 3fpkt"];
92--4595[label="1;3pkt 3fpkt"];
1487--1516[label="0.05;1pkt 1fpkt"];
1487--1593[label="0.09375;3pkt 3fpkt"];
1487--1949[label="0.03125;1pkt 1fpkt"];
1487--1973[label="0.1875;6pkt 6fpkt"];
1487--2090[label="0.125;4pkt 4fpkt"];
1487--2288[label="0.09375;3pkt 3fpkt"];
1487--2611[label="0.1875;6pkt 6fpkt"];
1487--3761[label="1;32pkt 32fpkt"];
1487--4595[label="0.96875;31pkt 31fpkt"];
3761--4595[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter src_ip="192.42.161.167" src_port="443"/>
      <filter dst_ip="175.84.193.45" src_ip="192.42.161.167" src_port="80"/>
      <filter dst_ip="198.160.55.168" src_ip="192.42.161.167" src_port="80"/>
    </slice>
    <from sec="1054875673" usec="0"/>
    <to sec="1054876474" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770739,1.60066,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_351{
style=filled;
color=gray75;
774[label="134.66.32.18;d;1pkt 1fpkt", shape=diamond, color=yellow];
966[label="194.186.136.154;s;1pkt 1fpkt", shape=diamond, color=yellow];
2093[label="134.66.32.18;d;1pkt 1fpkt", shape=hexagon, color=black];
2391[label="194.186.136.154;s;1pkt 1fpkt", shape=hexagon, color=black];
3685[label="194.186.136.154;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat351[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.186.136.154:873, 134.66.32.18:1320}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1320: (50%)&lt;BR/&gt; 873: (50%)&gt;];
}
774--966[label="1;1pkt 1fpkt"];
774--2093[label="1;1pkt 1fpkt"];
774--2391[label="1;1pkt 1fpkt"];
774--3685[label="1;1pkt 1fpkt"];
966--2093[label="1;1pkt 1fpkt"];
966--2391[label="1;1pkt 1fpkt"];
966--3685[label="1;1pkt 1fpkt"];
2093--2391[label="1;1pkt 1fpkt"];
2093--3685[label="1;1pkt 1fpkt"];
2391--3685[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.66.32.18" dst_port="1320" src_ip="194.186.136.154" src_port="873"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840471,1.56547,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_352{
style=filled;
color=gray75;
96[label="208.162.80.170s;1pkt 1fpkt", shape=rectangle, color=red];
780[label="198.128.176.101;d;2pkt 2fpkt", shape=diamond, color=yellow];
781[label="208.162.80.170;s;1pkt 1fpkt", shape=diamond, color=yellow];
977[label="162.81.234.10;s;1pkt 1fpkt", shape=diamond, color=yellow];
2096[label="208.162.80.170;s;1pkt 1fpkt", shape=hexagon, color=black];
3774[label="208.162.80.170;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat352[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.81.234.10:64868, 198.128.176.101:1755}[50%]&lt;BR/&gt;{208.162.80.170:4495, 198.128.176.101:1755}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (50%)&lt;BR/&gt; 4495: (35.7143%)&lt;BR/&gt; 64868: (14.2857%)&gt;];
}
96--780[label="1;1pkt 1fpkt"];
96--781[label="1;1pkt 1fpkt"];
96--2096[label="1;1pkt 1fpkt"];
96--3774[label="1;1pkt 1fpkt"];
780--781[label="1;1pkt 1fpkt"];
780--977[label="1;1pkt 1fpkt"];
780--2096[label="1;1pkt 1fpkt"];
780--3774[label="1;1pkt 1fpkt"];
781--2096[label="1;1pkt 1fpkt"];
781--3774[label="1;1pkt 1fpkt"];
2096--3774[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.128.176.101" dst_port="1755" src_ip="208.162.80.170" src_port="4495"/>
      <filter dst_ip="198.128.176.101" dst_port="1755" src_ip="162.81.234.10" src_port="64868"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.895209,1.57226,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_353{
style=filled;
color=gray75;
981[label="48.75.240.10;s;13pkt 13fpkt", shape=diamond, color=yellow];
1410[label="175.84.49.168;d;8pkt 8fpkt", shape=diamond, color=yellow];
1445[label="175.84.49.170;d;7pkt 7fpkt", shape=diamond, color=yellow];
2098[label="48.75.240.10;s;4pkt 4fpkt", shape=hexagon, color=black];
2556[label="175.84.49.170;d;7pkt 7fpkt", shape=hexagon, color=black];
2796[label="48.75.240.10;12pkt 12fpkt", shape=pentagon, color=darkviolet];
4217[label="48.75.240.10;13pkt 13fpkt", shape=invtriangle, color=brown];
stat353[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.75.240.10:80, 175.84.49.168:*}[40%]&lt;BR/&gt;{48.75.240.10:80, 175.84.49.170:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.1875%)&lt;BR/&gt; 11999: (7.8125%)&lt;BR/&gt; 1648: (4.6875%)&lt;BR/&gt; 1652: (3.90625%)&lt;BR/&gt; 1651: (3.90625%)&gt;];
}
981--1410[label="0.875;7pkt 7fpkt"];
981--1445[label="0.857143;6pkt 6fpkt"];
981--2098[label="1;4pkt 4fpkt"];
981--2556[label="0.857143;6pkt 6fpkt"];
981--2669[label="0.153846;2pkt 2fpkt"];
981--2796[label="1;12pkt 12fpkt"];
981--4217[label="1;13pkt 13fpkt"];
1410--2098[label="0.5;2pkt 2fpkt"];
1410--2669[label="0.125;1pkt 1fpkt"];
1410--2796[label="0.875;7pkt 7fpkt"];
1410--4217[label="0.875;7pkt 7fpkt"];
1445--2098[label="0.5;2pkt 2fpkt"];
1445--2556[label="1;7pkt 7fpkt"];
1445--2669[label="0.142857;1pkt 1fpkt"];
1445--2796[label="0.714286;5pkt 5fpkt"];
1445--4217[label="0.857143;6pkt 6fpkt"];
2098--2556[label="0.5;2pkt 2fpkt"];
2098--2669[label="0.5;2pkt 2fpkt"];
2098--2796[label="0.75;3pkt 3fpkt"];
2098--4217[label="1;4pkt 4fpkt"];
2556--2669[label="0.142857;1pkt 1fpkt"];
2556--2796[label="0.714286;5pkt 5fpkt"];
2556--4217[label="0.857143;6pkt 6fpkt"];
2796--4217[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.49.168" src_ip="48.75.240.10" src_port="80"/>
      <filter dst_ip="175.84.49.170" src_ip="48.75.240.10" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.955904,1.53643,503,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_354{
style=filled;
color=gray75;
86[label="48.179.225.150s;2pkt 2fpkt", shape=rectangle, color=red];
821[label="175.85.93.235;d;158pkt 158fpkt", shape=diamond, color=yellow];
957[label="48.179.225.150;s;2pkt 2fpkt", shape=diamond, color=yellow];
1080[label="208.132.2.160;s;128pkt 128fpkt", shape=diamond, color=yellow];
2065[label="208.132.2.160;s;103pkt 103fpkt", shape=hexagon, color=black];
2104[label="175.85.93.235;d;117pkt 117fpkt", shape=hexagon, color=black];
2361[label="175.85.45.49;d;16pkt 16fpkt", shape=hexagon, color=black];
2387[label="48.179.225.150;s;2pkt 2fpkt", shape=hexagon, color=black];
3630[label="208.132.2.145;39pkt 39fpkt", shape=pentagon, color=darkviolet];
3658[label="48.179.225.150;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3711[label="208.132.2.160;128pkt 128fpkt", shape=pentagon, color=darkviolet];
4147[label="213.135.40.246;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4581[label="208.132.2.160;127pkt 127fpkt", shape=invtriangle, color=brown];
stat354[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.132.2.160:80, 175.85.93.235:*}[31.3559%]&lt;BR/&gt;{208.132.2.160:80, 175.85.133.131:*}[22.8814%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.1949%)&lt;BR/&gt; 8080: (1.74489%)&lt;BR/&gt; 3984: (0.361011%)&lt;BR/&gt; 3983: (0.361011%)&lt;BR/&gt; 3982: (0.361011%)&gt;];
}
86--736[label="0.5;1pkt 1fpkt"];
86--821[label="0.5;1pkt 1fpkt"];
86--957[label="1;2pkt 2fpkt"];
86--2104[label="0.5;1pkt 1fpkt"];
86--2387[label="1;2pkt 2fpkt"];
86--2669[label="1;2pkt 2fpkt"];
86--3658[label="1;1pkt 1fpkt"];
821--957[label="0.5;1pkt 1fpkt"];
821--1059[label="0.00632911;1pkt 1fpkt"];
821--1080[label="0.578125;74pkt 74fpkt"];
821--1084[label="0.0285714;2pkt 2fpkt"];
821--1184[label="0.00943396;1pkt 1fpkt"];
821--1313[label="0.011236;1pkt 1fpkt"];
821--1869[label="0.0119048;1pkt 1fpkt"];
821--2065[label="0.475728;49pkt 49fpkt"];
821--2104[label="1;117pkt 117fpkt"];
821--2204[label="0.0181818;1pkt 1fpkt"];
821--2387[label="0.5;1pkt 1fpkt"];
821--2442[label="0.0285714;2pkt 2fpkt"];
821--2510[label="0.00632911;1pkt 1fpkt"];
821--2669[label="0.208861;33pkt 33fpkt"];
821--3109[label="0.00961538;1pkt 1fpkt"];
821--3630[label="0.897436;35pkt 35fpkt"];
821--3711[label="0.578125;74pkt 74fpkt"];
821--4147[label="0.25;2pkt 2fpkt"];
821--4343[label="0.00952381;1pkt 1fpkt"];
821--4581[label="0.582677;74pkt 74fpkt"];
957--2104[label="0.5;1pkt 1fpkt"];
957--2387[label="1;2pkt 2fpkt"];
957--2669[label="1;2pkt 2fpkt"];
957--3658[label="1;1pkt 1fpkt"];
1080--2065[label="1;103pkt 103fpkt"];
1080--2067[label="0.421875;54pkt 54fpkt"];
1080--2104[label="0.555556;65pkt 65fpkt"];
1080--2635[label="0.421875;54pkt 54fpkt"];
1080--2669[label="0.117188;15pkt 15fpkt"];
1080--3711[label="1;128pkt 128fpkt"];
1080--4581[label="1;127pkt 127fpkt"];
2065--2067[label="0.524272;54pkt 54fpkt"];
2065--2104[label="0.475728;49pkt 49fpkt"];
2065--2635[label="0.524272;54pkt 54fpkt"];
2065--2669[label="0.145631;15pkt 15fpkt"];
2065--3711[label="1;103pkt 103fpkt"];
2065--4581[label="0.990291;102pkt 102fpkt"];
2104--2387[label="0.5;1pkt 1fpkt"];
2104--2510[label="0.00854701;1pkt 1fpkt"];
2104--2669[label="0.282051;33pkt 33fpkt"];
2104--3630[label="0.846154;33pkt 33fpkt"];
2104--3711[label="0.555556;65pkt 65fpkt"];
2104--4147[label="0.25;2pkt 2fpkt"];
2104--4581[label="0.555556;65pkt 65fpkt"];
2361--4147[label="0.375;3pkt 3fpkt"];
2387--2669[label="1;2pkt 2fpkt"];
2387--3658[label="1;1pkt 1fpkt"];
3711--4581[label="1;127pkt 127fpkt"];
</description>
    <slice>
      <filter dst_ip="175.85.93.235" src_ip="208.132.2.160" src_port="80"/>
      <filter dst_ip="175.85.133.131" src_ip="208.132.2.160" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_356{
style=filled;
color=gray75;
1151[label="48.232.102.43;s;120pkt 120fpkt", shape=diamond, color=yellow];
2107[label="48.232.102.43;s;120pkt 120fpkt", shape=hexagon, color=black];
stat356[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.232.102.43:80, 198.160.55.175:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54694: (0.416667%)&lt;BR/&gt; 54681: (0.416667%)&lt;BR/&gt; 53989: (0.416667%)&lt;BR/&gt; 53886: (0.416667%)&gt;];
}
1151--2107[label="1;120pkt 120fpkt"];
1151--2669[label="0.208333;25pkt 25fpkt"];
2107--2669[label="0.208333;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="198.160.55.175" src_ip="48.232.102.43" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770739,1.60066,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_357{
style=filled;
color=gray75;
1037[label="216.142.24.170;s;6pkt 6fpkt", shape=diamond, color=yellow];
1163[label="129.24.204.252;d;5pkt 5fpkt", shape=diamond, color=yellow];
1326[label="129.24.192.37;d;17pkt 17fpkt", shape=diamond, color=yellow];
1894[label="129.24.208.151;d;8pkt 8fpkt", shape=diamond, color=yellow];
2048[label="216.142.24.170;s;6pkt 6fpkt", shape=hexagon, color=black];
2117[label="129.24.204.252;d;5pkt 5fpkt", shape=hexagon, color=black];
2206[label="129.24.192.37;d;16pkt 16fpkt", shape=hexagon, color=black];
3773[label="216.142.24.170;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat357[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:5001, 129.24.192.37:*}[35.4839%]&lt;BR/&gt;{*:*, 129.24.208.151:*}[25.8065%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (15.942%)&lt;BR/&gt; 6667: (10.1449%)&lt;BR/&gt; 6665: (5.7971%)&lt;BR/&gt; 5190: (4.34783%)&lt;BR/&gt; 4613: (3.62319%)&gt;];
}
1037--1163[label="0.4;2pkt 2fpkt"];
1037--1326[label="0.166667;1pkt 1fpkt"];
1037--1894[label="0.333333;2pkt 2fpkt"];
1037--2048[label="1;6pkt 6fpkt"];
1037--2117[label="0.4;2pkt 2fpkt"];
1037--2206[label="0.166667;1pkt 1fpkt"];
1037--3773[label="1;6pkt 6fpkt"];
1163--1550[label="0.333333;1pkt 1fpkt"];
1163--2048[label="0.4;2pkt 2fpkt"];
1163--2117[label="1;5pkt 5fpkt"];
1163--3773[label="0.4;2pkt 2fpkt"];
1326--2048[label="0.166667;1pkt 1fpkt"];
1326--2206[label="1;16pkt 16fpkt"];
1326--3773[label="0.166667;1pkt 1fpkt"];
1894--2048[label="0.333333;2pkt 2fpkt"];
1894--3773[label="0.333333;2pkt 2fpkt"];
2048--2117[label="0.4;2pkt 2fpkt"];
2048--2206[label="0.166667;1pkt 1fpkt"];
2048--3773[label="1;6pkt 6fpkt"];
2117--3773[label="0.4;2pkt 2fpkt"];
2206--3773[label="0.166667;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="129.24.208.151"/>
      <filter dst_ip="129.24.192.37" src_port="5001"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770739,1.60066,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_358{
style=filled;
color=gray75;
1166[label="166.248.91.186;s;1pkt 1fpkt", shape=diamond, color=yellow];
2118[label="166.248.91.186;s;1pkt 1fpkt", shape=hexagon, color=black];
3855[label="166.248.91.186;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat358[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.248.91.186:4094, 169.189.200.36:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 4094: (50%)&gt;];
}
1166--2015[label="1;1pkt 1fpkt"];
1166--2118[label="1;1pkt 1fpkt"];
1166--3855[label="1;1pkt 1fpkt"];
2118--3855[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.200.36" dst_port="6699" src_ip="166.248.91.186" src_port="4094"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_359{
style=filled;
color=gray75;
1443[label="48.17.205.4;s;349pkt 349fpkt", shape=diamond, color=yellow];
stat359[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.17.205.4:80, 199.104.102.143:*}[35.2436%]&lt;BR/&gt;{48.17.205.4:80, 129.24.202.215:*}[24.0688%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7135%)&lt;BR/&gt; 0: (0.573066%)&lt;BR/&gt; 63427: (0.143266%)&lt;BR/&gt; 63112: (0.143266%)&lt;BR/&gt; 62983: (0.143266%)&gt;];
}
1443--1562[label="0.025641;1pkt 1fpkt"];
1443--1970[label="0.126074;44pkt 44fpkt"];
1443--1975[label="0.318052;111pkt 111fpkt"];
1443--2172[label="0.025788;9pkt 9fpkt"];
1443--2193[label="0.016129;1pkt 1fpkt"];
1443--2252[label="0.00859599;3pkt 3fpkt"];
1443--2317[label="0.00286533;1pkt 1fpkt"];
1443--2350[label="0.0119048;1pkt 1fpkt"];
1443--2424[label="1;299pkt 299fpkt"];
1443--2507[label="0.025641;1pkt 1fpkt"];
1443--2619[label="0.234957;82pkt 82fpkt"];
1443--2669[label="0.0487106;17pkt 17fpkt"];
1443--2754[label="1;349pkt 349fpkt"];
</description>
    <slice>
      <filter dst_ip="199.104.102.143" src_ip="48.17.205.4" src_port="80"/>
      <filter dst_ip="129.24.202.215" src_ip="48.17.205.4" src_port="80"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770739,1.60066,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_360{
style=filled;
color=gray75;
1177[label="99.70.120.41;s;1pkt 1fpkt", shape=diamond, color=yellow];
2122[label="99.70.120.41;s;1pkt 1fpkt", shape=hexagon, color=black];
2996[label="99.70.120.41;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat360[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.70.120.41:3879, 199.104.100.203:1214}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3879: (50%)&lt;BR/&gt; 1214: (50%)&gt;];
}
1177--2122[label="1;1pkt 1fpkt"];
1177--2996[label="1;1pkt 1fpkt"];
2122--2996[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.104.100.203" dst_port="1214" src_ip="99.70.120.41" src_port="3879"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770739,1.60066,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_361{
style=filled;
color=gray75;
1419[label="175.85.178.140;d;68pkt 68fpkt", shape=diamond, color=yellow];
2330[label="175.85.178.140;d;64pkt 64fpkt", shape=hexagon, color=black];
3671[label="84.5.145.152;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat361[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.107.185.83:80, 175.85.178.140:*}[22.0588%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1856: (1.1194%)&lt;BR/&gt; 1831: (1.1194%)&lt;BR/&gt; 1901: (0.746269%)&lt;BR/&gt; 1899: (0.746269%)&gt;];
}
1419--2330[label="1;64pkt 64fpkt"];
1419--2669[label="0.0441176;3pkt 3fpkt"];
1419--3671[label="1;2pkt 2fpkt"];
1419--4018[label="0.285714;4pkt 4fpkt"];
2330--2669[label="0.046875;3pkt 3fpkt"];
2330--3671[label="1;2pkt 2fpkt"];
2330--4018[label="0.142857;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="175.85.178.140" src_ip="84.107.185.83" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876382" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_362{
style=filled;
color=gray75;
921[label="193.48.69.144;s;24pkt 24fpkt", shape=diamond, color=yellow];
1926[label="169.189.40.43;d;10pkt 10fpkt", shape=diamond, color=yellow];
stat362[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.48.69.144:80, 175.84.94.73:*}[32.2581%]&lt;BR/&gt;{*:80, 169.189.40.43:*}[29.0323%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.0588%)&lt;BR/&gt; 1050: (4.41176%)&lt;BR/&gt; 1051: (2.94118%)&lt;BR/&gt; 1049: (2.94118%)&lt;BR/&gt; 0: (2.94118%)&gt;];
}
921--1192[label="0.416667;10pkt 10fpkt"];
921--1926[label="0.3;3pkt 3fpkt"];
921--2064[label="1;23pkt 23fpkt"];
921--2128[label="0.0416667;1pkt 1fpkt"];
921--2252[label="0.0416667;1pkt 1fpkt"];
921--2669[label="0.0416667;1pkt 1fpkt"];
921--3624[label="0.958333;23pkt 23fpkt"];
1926--2064[label="0.3;3pkt 3fpkt"];
1926--3624[label="0.3;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.40.43" src_port="80"/>
      <filter dst_ip="175.84.94.73" src_ip="193.48.69.144" src_port="80"/>
    </slice>
    <from sec="1054876235" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770739,1.60066,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_364{
style=filled;
color=gray75;
937[label="175.84.32.70;d;141pkt 141fpkt", shape=diamond, color=yellow];
938[label="220.24.15.196;s;711pkt 711fpkt", shape=diamond, color=yellow];
1234[label="175.84.32.71;d;96pkt 96fpkt", shape=diamond, color=yellow];
1268[label="175.84.32.95;d;122pkt 122fpkt", shape=diamond, color=yellow];
2069[label="175.84.32.70;d;140pkt 140fpkt", shape=hexagon, color=black];
2070[label="220.24.15.196;s;711pkt 711fpkt", shape=hexagon, color=black];
2073[label="175.84.32.6;d;134pkt 134fpkt", shape=hexagon, color=black];
2159[label="175.84.32.95;d;122pkt 122fpkt", shape=hexagon, color=black];
2526[label="175.84.32.71;d;96pkt 96fpkt", shape=hexagon, color=black];
3620[label="220.24.15.144;365pkt 365fpkt", shape=pentagon, color=darkviolet];
stat364[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.24.15.196:80, *:*}[53.9045%]&lt;BR/&gt;{220.24.15.144:80, *:*}[27.6725%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9431%)&lt;BR/&gt; 1422: (0.30326%)&lt;BR/&gt; 1420: (0.30326%)&lt;BR/&gt; 1416: (0.30326%)&lt;BR/&gt; 1421: (0.284306%)&gt;];
}
937--938[label="0.304965;43pkt 43fpkt"];
937--943[label="0.397163;56pkt 56fpkt"];
937--944[label="0.248227;35pkt 35fpkt"];
937--1285[label="0.0070922;1pkt 1fpkt"];
937--2069[label="1;140pkt 140fpkt"];
937--2070[label="0.304965;43pkt 43fpkt"];
937--2149[label="0.248227;35pkt 35fpkt"];
937--2669[label="0.0496454;7pkt 7fpkt"];
937--2826[label="0.0285714;1pkt 1fpkt"];
937--3167[label="0.0070922;1pkt 1fpkt"];
937--3620[label="0.248227;35pkt 35fpkt"];
937--4231[label="0.0294118;1pkt 1fpkt"];
937--4367[label="0.0070922;1pkt 1fpkt"];
938--941[label="0.350993;53pkt 53fpkt"];
938--942[label="0.432836;58pkt 58fpkt"];
938--1093[label="0.220859;36pkt 36fpkt"];
938--1095[label="0.971098;168pkt 168fpkt"];
938--1102[label="0.491071;55pkt 55fpkt"];
938--1106[label="0.716981;38pkt 38fpkt"];
938--1120[label="0.165746;30pkt 30fpkt"];
938--1234[label="0.333333;32pkt 32fpkt"];
938--1268[label="0.262295;32pkt 32fpkt"];
938--2069[label="0.307143;43pkt 43fpkt"];
938--2070[label="1;711pkt 711fpkt"];
938--2073[label="0.432836;58pkt 58fpkt"];
938--2076[label="0.716981;38pkt 38fpkt"];
938--2128[label="0.0441176;3pkt 3fpkt"];
938--2159[label="0.262295;32pkt 32fpkt"];
938--2226[label="0.350993;53pkt 53fpkt"];
938--2526[label="0.333333;32pkt 32fpkt"];
938--2577[label="0.165746;30pkt 30fpkt"];
938--2669[label="0.154712;110pkt 110fpkt"];
938--2674[label="0.00140647;1pkt 1fpkt"];
938--2698[label="0.00140647;1pkt 1fpkt"];
938--2709[label="0.00140647;1pkt 1fpkt"];
1234--2070[label="0.333333;32pkt 32fpkt"];
1234--2149[label="0.145833;14pkt 14fpkt"];
1234--2526[label="1;96pkt 96fpkt"];
1234--3620[label="0.145833;14pkt 14fpkt"];
1268--1285[label="0.00819672;1pkt 1fpkt"];
1268--2070[label="0.262295;32pkt 32fpkt"];
1268--2149[label="0.122951;15pkt 15fpkt"];
1268--2159[label="1;122pkt 122fpkt"];
1268--3167[label="0.00819672;1pkt 1fpkt"];
1268--3620[label="0.122951;15pkt 15fpkt"];
1268--4367[label="0.00819672;1pkt 1fpkt"];
2069--2070[label="0.307143;43pkt 43fpkt"];
2069--2149[label="0.25;35pkt 35fpkt"];
2069--2669[label="0.05;7pkt 7fpkt"];
2069--2826[label="0.0285714;1pkt 1fpkt"];
2069--3620[label="0.25;35pkt 35fpkt"];
2069--4231[label="0.0294118;1pkt 1fpkt"];
2070--2073[label="0.432836;58pkt 58fpkt"];
2070--2076[label="0.716981;38pkt 38fpkt"];
2070--2128[label="0.0441176;3pkt 3fpkt"];
2070--2159[label="0.262295;32pkt 32fpkt"];
2070--2226[label="0.350993;53pkt 53fpkt"];
2070--2526[label="0.333333;32pkt 32fpkt"];
2070--2577[label="0.165746;30pkt 30fpkt"];
2070--2669[label="0.154712;110pkt 110fpkt"];
2070--2674[label="0.00140647;1pkt 1fpkt"];
2070--2698[label="0.00140647;1pkt 1fpkt"];
2070--2709[label="0.00140647;1pkt 1fpkt"];
2073--2149[label="0.156716;21pkt 21fpkt"];
2073--2669[label="0.0671642;9pkt 9fpkt"];
2073--3620[label="0.156716;21pkt 21fpkt"];
2159--3167[label="0.00819672;1pkt 1fpkt"];
2159--3620[label="0.122951;15pkt 15fpkt"];
2159--4367[label="0.00819672;1pkt 1fpkt"];
2526--3620[label="0.145833;14pkt 14fpkt"];
</description>
    <slice>
      <filter src_ip="220.24.15.196" src_port="80"/>
      <filter src_ip="220.24.15.144" src_port="80"/>
    </slice>
    <from sec="1054875627" usec="0"/>
    <to sec="1054876465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770739,1.60066,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_365{
style=filled;
color=gray75;
1107[label="169.189.85.128;d;15pkt 15fpkt", shape=diamond, color=yellow];
1108[label="210.30.4.142;s;5pkt 5fpkt", shape=diamond, color=yellow];
2151[label="169.189.85.128;d;15pkt 15fpkt", shape=hexagon, color=black];
2152[label="210.30.4.142;s;5pkt 5fpkt", shape=hexagon, color=black];
3606[label="210.30.4.142;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat365[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.144.175.108:80, 169.189.85.128:*}[53.3333%]&lt;BR/&gt;{210.30.4.142:80, 169.189.85.128:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1984: (5.68182%)&lt;BR/&gt; 1981: (5.68182%)&lt;BR/&gt; 1977: (5.68182%)&lt;BR/&gt; 1974: (5.68182%)&gt;];
}
1107--1108[label="1;5pkt 5fpkt"];
1107--1353[label="0.0666667;1pkt 1fpkt"];
1107--2151[label="1;15pkt 15fpkt"];
1107--2152[label="1;5pkt 5fpkt"];
1107--2356[label="0.0666667;1pkt 1fpkt"];
1107--3580[label="0.0666667;1pkt 1fpkt"];
1107--3606[label="1;4pkt 4fpkt"];
1108--2151[label="1;5pkt 5fpkt"];
1108--2152[label="1;5pkt 5fpkt"];
1108--3606[label="1;4pkt 4fpkt"];
2151--2152[label="1;5pkt 5fpkt"];
2151--2356[label="0.0666667;1pkt 1fpkt"];
2151--3580[label="0.0666667;1pkt 1fpkt"];
2151--3606[label="1;4pkt 4fpkt"];
2152--3606[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.85.128" src_ip="199.144.175.108" src_port="80"/>
      <filter dst_ip="169.189.85.128" src_ip="210.30.4.142" src_port="80"/>
    </slice>
    <from sec="1054875661" usec="0"/>
    <to sec="1054875809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_367{
style=filled;
color=gray75;
942[label="175.84.32.6;d;134pkt 134fpkt", shape=diamond, color=yellow];
1102[label="175.84.32.94;d;112pkt 112fpkt", shape=diamond, color=yellow];
stat367[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.24.15.196:80, 175.84.32.6:*}[23.5772%]&lt;BR/&gt;{220.24.15.151:80, 175.84.32.6:*}[22.3577%]&lt;BR/&gt;{220.24.15.196:80, 175.84.32.94:*}[22.3577%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7967%)&lt;BR/&gt; 1296: (0.406504%)&lt;BR/&gt; 1295: (0.406504%)&lt;BR/&gt; 1294: (0.406504%)&lt;BR/&gt; 1293: (0.406504%)&gt;];
}
942--943[label="0.410448;55pkt 55fpkt"];
942--944[label="0.156716;21pkt 21fpkt"];
942--2070[label="0.432836;58pkt 58fpkt"];
942--2073[label="1;134pkt 134fpkt"];
942--2149[label="0.156716;21pkt 21fpkt"];
942--2669[label="0.0671642;9pkt 9fpkt"];
942--3620[label="0.156716;21pkt 21fpkt"];
1102--1285[label="0.00892857;1pkt 1fpkt"];
1102--2070[label="0.491071;55pkt 55fpkt"];
1102--2149[label="0.0803571;9pkt 9fpkt"];
1102--2669[label="0.0178571;2pkt 2fpkt"];
1102--3167[label="0.00892857;1pkt 1fpkt"];
1102--3620[label="0.0803571;9pkt 9fpkt"];
1102--4367[label="0.00892857;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.32.6" src_ip="220.24.15.196" src_port="80"/>
      <filter dst_ip="175.84.32.94" src_ip="220.24.15.196" src_port="80"/>
      <filter dst_ip="175.84.32.6" src_ip="220.24.15.151" src_port="80"/>
    </slice>
    <from sec="1054875634" usec="0"/>
    <to sec="1054875859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_369{
style=filled;
color=gray75;
958[label="52.14.165.221;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat369[shape=component, label=&lt;Rules:&lt;BR/&gt;{52.14.165.221:4488, 169.189.200.36:6699}[50%]&lt;BR/&gt;{52.14.165.221:6257, 169.189.200.36:6257}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (50%)&lt;BR/&gt; 6699: (25%)&lt;BR/&gt; 4488: (25%)&gt;];
}
958--2015[label="1;2pkt 2fpkt"];
958--2173[label="1;2pkt 2fpkt"];
958--4935[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.200.36" dst_port="6257" src_ip="52.14.165.221" src_port="6257"/>
      <filter dst_ip="169.189.200.36" dst_port="6699" src_ip="52.14.165.221" src_port="4488"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_372{
style=filled;
color=gray75;
1140[label="200.216.45.70;s;1pkt 1fpkt", shape=diamond, color=yellow];
1293[label="176.107.85.177;d;31pkt 31fpkt", shape=diamond, color=yellow];
2180[label="200.216.45.70;s;1pkt 1fpkt", shape=hexagon, color=black];
stat372[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:2234, 176.107.85.177:*}[45.1613%]&lt;BR/&gt;{*:*, 176.107.85.177:2234}[41.9355%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2234: (43.9394%)&lt;BR/&gt; 3522: (4.54545%)&lt;BR/&gt; 137: (3.0303%)&lt;BR/&gt; 37811: (1.51515%)&lt;BR/&gt; 35587: (1.51515%)&gt;];
}
1140--1293[label="1;1pkt 1fpkt"];
1140--2180[label="1;1pkt 1fpkt"];
1293--2180[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="176.107.85.177" src_port="2234"/>
      <filter dst_ip="176.107.85.177" dst_port="2234"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867864,1.63028,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_373{
style=filled;
color=gray75;
32[label="210.6.144.45s;2pkt 2fpkt", shape=rectangle, color=red];
801[label="210.6.144.45;s;436pkt 436fpkt", shape=diamond, color=yellow];
2185[label="210.6.144.45;s;427pkt 427fpkt", shape=hexagon, color=black];
2288[label="169.189.227.225;d;90pkt 90fpkt", shape=hexagon, color=black];
stat373[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.6.144.45:80, 175.84.94.73:*}[49.8069%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.3298%)&lt;BR/&gt; 53: (1.67539%)&lt;BR/&gt; 0: (0.942408%)&lt;BR/&gt; 1863: (0.26178%)&lt;BR/&gt; 33436: (0.209424%)&gt;];
}
32--801[label="1;2pkt 2fpkt"];
32--2185[label="0.5;1pkt 1fpkt"];
801--814[label="0.0357143;7pkt 7fpkt"];
801--888[label="0.0963303;42pkt 42fpkt"];
801--1192[label="0.756598;258pkt 258fpkt"];
801--1208[label="0.0869565;8pkt 8fpkt"];
801--2014[label="0.0165289;6pkt 6fpkt"];
801--2029[label="0.0357143;7pkt 7fpkt"];
801--2185[label="1;427pkt 427fpkt"];
801--2288[label="0.0888889;8pkt 8fpkt"];
801--2317[label="0.0504587;22pkt 22fpkt"];
801--2669[label="0.00917431;4pkt 4fpkt"];
2185--2288[label="0.0888889;8pkt 8fpkt"];
2185--2317[label="0.0515222;22pkt 22fpkt"];
2185--2669[label="0.00936768;4pkt 4fpkt"];
2288--2508[label="0.0266667;2pkt 2fpkt"];
2288--2509[label="0.0111111;1pkt 1fpkt"];
2288--2681[label="0.0555556;5pkt 5fpkt"];
2288--2690[label="0.0555556;5pkt 5fpkt"];
2288--2702[label="0.0555556;5pkt 5fpkt"];
2288--2710[label="0.0555556;5pkt 5fpkt"];
2288--2790[label="0.166667;1pkt 1fpkt"];
2288--2871[label="0.0232558;1pkt 1fpkt"];
2288--3021[label="0.0588235;3pkt 3fpkt"];
2288--3408[label="0.0147059;1pkt 1fpkt"];
2288--3744[label="0.0135135;1pkt 1fpkt"];
2288--3761[label="0.0909091;3pkt 3fpkt"];
2288--3775[label="0.0222222;2pkt 2fpkt"];
2288--4251[label="0.0227273;1pkt 1fpkt"];
2288--4595[label="0.09375;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.94.73" src_ip="210.6.144.45" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876419" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05661,1.61938,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_374{
style=filled;
color=gray75;
1407[label="84.33.60.62;d;9pkt 9fpkt", shape=diamond, color=yellow];
3367[label="198.128.179.97;55pkt 55fpkt", shape=pentagon, color=darkviolet];
4441[label="198.128.179.97;55pkt 55fpkt", shape=invtriangle, color=brown];
4852[label="198.128.179.97;54pkt 54fpkt", shape=invhouse, color=bisque];
stat374[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.128.179.97:0, *:0}[87.3016%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1407--2188[label="0.111111;1pkt 1fpkt"];
1407--3367[label="0.111111;1pkt 1fpkt"];
1407--4031[label="0.111111;1pkt 1fpkt"];
1407--4441[label="0.111111;1pkt 1fpkt"];
1407--4709[label="0.111111;1pkt 1fpkt"];
1407--4852[label="0.111111;1pkt 1fpkt"];
3367--4441[label="1;55pkt 55fpkt"];
3367--4852[label="1;54pkt 54fpkt"];
4441--4852[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter src_ip="198.128.179.97"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_376{
style=filled;
color=gray75;
1809[label="175.84.252.169;d;37pkt 37fpkt", shape=diamond, color=yellow];
stat376[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.111.194.103:80, 175.84.252.169:*}[72.973%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.6486%)&lt;BR/&gt; 1296: (1.35135%)&lt;BR/&gt; 1295: (1.35135%)&lt;BR/&gt; 1293: (1.35135%)&lt;BR/&gt; 1089: (1.35135%)&gt;];
}
1809--2052[label="0.1;1pkt 1fpkt"];
1809--2386[label="0.0540541;2pkt 2fpkt"];
1809--3004[label="0.0540541;2pkt 2fpkt"];
1809--3126[label="0.0434783;1pkt 1fpkt"];
1809--3386[label="0.0357143;1pkt 1fpkt"];
1809--3395[label="0.72973;27pkt 27fpkt"];
1809--3412[label="0.0810811;3pkt 3fpkt"];
1809--4350[label="0.0434783;1pkt 1fpkt"];
1809--4456[label="0.0810811;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.252.169" src_ip="130.111.194.103" src_port="80"/>
    </slice>
    <from sec="1054875942" usec="0"/>
    <to sec="1054876390" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_377{
style=filled;
color=gray75;
1337[label="36.0.1.128;s;1pkt 1fpkt", shape=diamond, color=yellow];
2218[label="36.0.1.128;s;1pkt 1fpkt", shape=hexagon, color=black];
stat377[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.0.1.128:6883, 175.85.30.175:61672}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61672: (50%)&lt;BR/&gt; 6883: (50%)&gt;];
}
1337--2218[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.85.30.175" dst_port="61672" src_ip="36.0.1.128" src_port="6883"/>
    </slice>
    <from sec="1054875604" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_378{
style=filled;
color=gray75;
919[label="48.139.164.28;s;7pkt 7fpkt", shape=diamond, color=yellow];
2220[label="175.84.206.143;d;25pkt 25fpkt", shape=hexagon, color=black];
stat378[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.139.164.28:80, 175.84.206.143:*}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.25%)&lt;BR/&gt; 0: (15.625%)&lt;BR/&gt; 53: (9.375%)&lt;BR/&gt; 1082: (4.6875%)&lt;BR/&gt; 2251: (3.125%)&gt;];
}
919--2220[label="0.857143;6pkt 6fpkt"];
919--2669[label="0.571429;4pkt 4fpkt"];
2220--2567[label="0.04;1pkt 1fpkt"];
2220--2669[label="0.16;4pkt 4fpkt"];
2220--2793[label="0.08;2pkt 2fpkt"];
2220--2841[label="0.04;1pkt 1fpkt"];
2220--2852[label="0.04;1pkt 1fpkt"];
2220--3021[label="0.04;1pkt 1fpkt"];
2220--3031[label="0.04;1pkt 1fpkt"];
2220--4315[label="0.04;1pkt 1fpkt"];
2220--4814[label="0.04;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.206.143" src_ip="48.139.164.28" src_port="80"/>
    </slice>
    <from sec="1054875605" usec="0"/>
    <to sec="1054875828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.895209,1.57226,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_379{
style=filled;
color=gray75;
1073[label="176.107.52.220;d;73pkt 73fpkt", shape=diamond, color=yellow];
1088[label="51.159.213.206;s;30pkt 30fpkt", shape=diamond, color=yellow];
2224[label="51.159.213.206;s;30pkt 30fpkt", shape=hexagon, color=black];
2284[label="176.107.52.220;d;73pkt 73fpkt", shape=hexagon, color=black];
4152[label="84.188.163.247;234pkt 234fpkt", shape=pentagon, color=darkviolet];
4756[label="84.188.163.247;233pkt 233fpkt", shape=invtriangle, color=brown];
stat379[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.188.163.247:1028, *:137}[76.4706%]&lt;BR/&gt;{*:80, 176.107.52.220:*}[23.2026%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (34.844%)&lt;BR/&gt; 137: (34.844%)&lt;BR/&gt; 80: (15.0074%)&lt;BR/&gt; 51395: (0.297177%)&lt;BR/&gt; 51394: (0.297177%)&gt;];
}
1073--1088[label="1;30pkt 30fpkt"];
1073--1343[label="0.438356;32pkt 32fpkt"];
1073--2224[label="1;30pkt 30fpkt"];
1073--2284[label="1;73pkt 73fpkt"];
1073--2669[label="0.178082;13pkt 13fpkt"];
1073--3701[label="0.438356;32pkt 32fpkt"];
1073--4152[label="0.0136986;1pkt 1fpkt"];
1073--4578[label="0.438356;32pkt 32fpkt"];
1073--4756[label="0.0136986;1pkt 1fpkt"];
1088--2224[label="1;30pkt 30fpkt"];
1088--2284[label="1;30pkt 30fpkt"];
1088--2669[label="0.266667;8pkt 8fpkt"];
2224--2284[label="1;30pkt 30fpkt"];
2224--2669[label="0.266667;8pkt 8fpkt"];
2284--2669[label="0.178082;13pkt 13fpkt"];
2284--3701[label="0.438356;32pkt 32fpkt"];
2284--4152[label="0.0136986;1pkt 1fpkt"];
2284--4578[label="0.438356;32pkt 32fpkt"];
2284--4756[label="0.0136986;1pkt 1fpkt"];
4152--4756[label="1;233pkt 233fpkt"];
</description>
    <slice>
      <filter dst_ip="176.107.52.220" src_port="80"/>
      <filter dst_port="137" src_ip="84.188.163.247" src_port="1028"/>
    </slice>
    <from sec="1054875604" usec="0"/>
    <to sec="1054876406" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_380{
style=filled;
color=gray75;
1361[label="216.212.152.25;s;13pkt 13fpkt", shape=diamond, color=yellow];
2230[label="216.212.152.25;s;9pkt 9fpkt", shape=hexagon, color=black];
stat380[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.212.152.25:80, 175.85.86.99:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 21279: (4.54545%)&lt;BR/&gt; 20902: (4.54545%)&lt;BR/&gt; 20650: (4.54545%)&lt;BR/&gt; 19992: (4.54545%)&gt;];
}
1361--2230[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="175.85.86.99" src_ip="216.212.152.25" src_port="80"/>
    </slice>
    <from sec="1054875692" usec="0"/>
    <to sec="1054876093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.955904,1.53643,503,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_381{
style=filled;
color=gray75;
60[label="87.6.52.96s;2pkt 2fpkt", shape=rectangle, color=red];
1097[label="87.6.52.96;s;880pkt 880fpkt", shape=diamond, color=yellow];
1125[label="169.189.232.222;d;391pkt 391fpkt", shape=diamond, color=yellow];
2072[label="87.6.52.96;s;550pkt 550fpkt", shape=hexagon, color=black];
2234[label="169.189.232.222;d;322pkt 322fpkt", shape=hexagon, color=black];
3354[label="87.6.52.96;879pkt 879fpkt", shape=pentagon, color=darkviolet];
4437[label="87.6.52.96;880pkt 880fpkt", shape=invtriangle, color=brown];
stat381[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.6.52.96:80, 169.189.232.222:*}[43.2955%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25.1409%)&lt;BR/&gt; 53: (3.11219%)&lt;BR/&gt; 25: (1.88268%)&lt;BR/&gt; 1434: (1.79303%)&lt;BR/&gt; 1755: (1.58811%)&gt;];
}
60--1097[label="1;2pkt 2fpkt"];
60--2072[label="1;2pkt 2fpkt"];
60--2234[label="0.5;1pkt 1fpkt"];
60--3354[label="1;2pkt 2fpkt"];
60--4437[label="1;2pkt 2fpkt"];
1097--1125[label="1;391pkt 391fpkt"];
1097--2018[label="0.0416667;2pkt 2fpkt"];
1097--2072[label="1;550pkt 550fpkt"];
1097--2234[label="1;322pkt 322fpkt"];
1097--2317[label="0.00353982;2pkt 2fpkt"];
1097--2679[label="0.00168919;1pkt 1fpkt"];
1097--2681[label="0.00340909;3pkt 3fpkt"];
1097--2683[label="0.00227273;2pkt 2fpkt"];
1097--2685[label="0.00795455;7pkt 7fpkt"];
1097--3354[label="1;879pkt 879fpkt"];
1097--4437[label="1;880pkt 880fpkt"];
1125--2072[label="0.158568;62pkt 62fpkt"];
1125--2234[label="0.13354;43pkt 43fpkt"];
1125--2681[label="0.00767263;3pkt 3fpkt"];
1125--2683[label="0.00511509;2pkt 2fpkt"];
1125--2685[label="0.0179028;7pkt 7fpkt"];
1125--3354[label="1;391pkt 391fpkt"];
1125--4437[label="1;391pkt 391fpkt"];
2072--2234[label="1;322pkt 322fpkt"];
2072--2317[label="0.00363636;2pkt 2fpkt"];
2072--2679[label="0.00181818;1pkt 1fpkt"];
2072--2681[label="0.00545455;3pkt 3fpkt"];
2072--2683[label="0.00363636;2pkt 2fpkt"];
2072--2685[label="0.0127273;7pkt 7fpkt"];
2072--3354[label="0.998182;549pkt 549fpkt"];
2072--4437[label="1;550pkt 550fpkt"];
2234--2679[label="0.00310559;1pkt 1fpkt"];
2234--2681[label="0.00931677;3pkt 3fpkt"];
2234--2683[label="0.00621118;2pkt 2fpkt"];
2234--2685[label="0.0186335;6pkt 6fpkt"];
2234--3354[label="0.996894;321pkt 321fpkt"];
2234--4437[label="1;322pkt 322fpkt"];
3354--4437[label="1;879pkt 879fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.232.222" src_ip="87.6.52.96" src_port="80"/>
    </slice>
    <from sec="1054875632" usec="0"/>
    <to sec="1054876336" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_382{
style=filled;
color=gray75;
1262[label="195.4.126.212;s;1pkt 1fpkt", shape=diamond, color=yellow];
2236[label="195.4.126.212;s;1pkt 1fpkt", shape=hexagon, color=black];
stat382[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.4.126.212:80, 199.104.100.128:5346}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5346: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1262--2236[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.104.100.128" dst_port="5346" src_ip="195.4.126.212" src_port="80"/>
    </slice>
    <from sec="1054875753" usec="0"/>
    <to sec="1054875926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,501,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_384{
style=filled;
color=gray75;
1276[label="51.145.84.224;s;18pkt 18fpkt", shape=diamond, color=yellow];
2241[label="51.145.84.224;s;18pkt 18fpkt", shape=hexagon, color=black];
stat384[shape=component, label=&lt;Rules:&lt;BR/&gt;{51.145.84.224:21, 199.172.98.4:*}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (33.3333%)&lt;BR/&gt; 59265: (2.77778%)&lt;BR/&gt; 59252: (2.77778%)&lt;BR/&gt; 59232: (2.77778%)&lt;BR/&gt; 59214: (2.77778%)&gt;];
}
1276--2241[label="1;18pkt 18fpkt"];
1276--2252[label="0.833333;15pkt 15fpkt"];
2241--2252[label="0.833333;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="199.172.98.4" src_ip="51.145.84.224" src_port="21"/>
    </slice>
    <from sec="1054875784" usec="0"/>
    <to sec="1054876146" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_386{
style=filled;
color=gray75;
1400[label="176.107.245.132;s;10pkt 10fpkt", shape=diamond, color=yellow];
1401[label="208.137.209.134;d;1pkt 1fpkt", shape=diamond, color=yellow];
2246[label="176.107.245.132;s;10pkt 10fpkt", shape=hexagon, color=black];
stat386[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.107.245.132:*, 208.137.210.3:80}[20%]&lt;BR/&gt;{176.107.245.132:*, 208.137.210.41:80}[20%]&lt;BR/&gt;{176.107.245.132:*, 208.137.209.64:53}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (26.1905%)&lt;BR/&gt; 53: (14.2857%)&lt;BR/&gt; 1630: (7.14286%)&lt;BR/&gt; 1863: (4.7619%)&lt;BR/&gt; 1755: (4.7619%)&gt;];
}
1400--1401[label="1;1pkt 1fpkt"];
1400--2246[label="1;10pkt 10fpkt"];
1401--2246[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.137.209.64" dst_port="53" src_ip="176.107.245.132"/>
      <filter dst_ip="208.137.210.41" dst_port="80" src_ip="176.107.245.132"/>
      <filter dst_ip="208.137.210.3" dst_port="80" src_ip="176.107.245.132"/>
    </slice>
    <from sec="1054875906" usec="0"/>
    <to sec="1054875976" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_387{
style=filled;
color=gray75;
859[label="210.157.81.170;s;322pkt 322fpkt", shape=diamond, color=yellow];
1910[label="175.85.28.120;d;38pkt 38fpkt", shape=diamond, color=yellow];
2584[label="199.98.114.167;d;35pkt 35fpkt", shape=hexagon, color=black];
stat387[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.157.81.170:80, *:*}[82.3077%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.6962%)&lt;BR/&gt; 53: (2.1519%)&lt;BR/&gt; 62133: (0.253165%)&lt;BR/&gt; 62094: (0.253165%)&lt;BR/&gt; 62082: (0.253165%)&gt;];
}
859--892[label="0.00310559;1pkt 1fpkt"];
859--900[label="0.0408163;4pkt 4fpkt"];
859--905[label="0.168831;26pkt 26fpkt"];
859--950[label="0.00884956;1pkt 1fpkt"];
859--1067[label="0.0232558;1pkt 1fpkt"];
859--1145[label="0.0403727;13pkt 13fpkt"];
859--1208[label="0.0217391;2pkt 2fpkt"];
859--1215[label="0.0229008;3pkt 3fpkt"];
859--1226[label="0.00431034;1pkt 1fpkt"];
859--1314[label="0.0512821;2pkt 2fpkt"];
859--1366[label="0.0267857;3pkt 3fpkt"];
859--1384[label="0.016;2pkt 2fpkt"];
859--1438[label="0.0104167;3pkt 3fpkt"];
859--1699[label="0.026087;3pkt 3fpkt"];
859--1767[label="0.0138889;1pkt 1fpkt"];
859--1903[label="0.0857143;3pkt 3fpkt"];
859--1910[label="0.0526316;2pkt 2fpkt"];
859--1913[label="0.0204082;1pkt 1fpkt"];
859--1973[label="0.161491;52pkt 52fpkt"];
859--2014[label="0.0248447;8pkt 8fpkt"];
859--2038[label="1;209pkt 209fpkt"];
859--2081[label="0.015625;1pkt 1fpkt"];
859--2120[label="0.00310559;1pkt 1fpkt"];
859--2202[label="0.0408163;4pkt 4fpkt"];
859--2209[label="0.218487;26pkt 26fpkt"];
859--2288[label="0.0222222;2pkt 2fpkt"];
859--2520[label="0.00456621;1pkt 1fpkt"];
859--2584[label="0.0857143;3pkt 3fpkt"];
859--2589[label="0.0204082;1pkt 1fpkt"];
859--2611[label="0.161491;52pkt 52fpkt"];
859--2669[label="0.139752;45pkt 45fpkt"];
859--3775[label="1;322pkt 322fpkt"];
1910--2176[label="0.0263158;1pkt 1fpkt"];
1910--2722[label="0.157895;6pkt 6fpkt"];
1910--2756[label="0.0263158;1pkt 1fpkt"];
1910--2806[label="0.0263158;1pkt 1fpkt"];
1910--2831[label="0.0263158;1pkt 1fpkt"];
1910--2835[label="0.0263158;1pkt 1fpkt"];
1910--3025[label="0.0263158;1pkt 1fpkt"];
1910--3775[label="0.0526316;2pkt 2fpkt"];
1910--3792[label="0.0526316;1pkt 1fpkt"];
1910--3900[label="0.0263158;1pkt 1fpkt"];
1910--4204[label="0.0263158;1pkt 1fpkt"];
1910--4234[label="0.0263158;1pkt 1fpkt"];
1910--4313[label="0.0263158;1pkt 1fpkt"];
1910--4775[label="0.0263158;1pkt 1fpkt"];
2584--2669[label="0.0285714;1pkt 1fpkt"];
2584--3039[label="0.0571429;2pkt 2fpkt"];
2584--3657[label="1;1pkt 1fpkt"];
2584--3775[label="0.0857143;3pkt 3fpkt"];
2584--4317[label="0.0571429;2pkt 2fpkt"];
2584--4816[label="0.0571429;2pkt 2fpkt"];
2584--4891[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="210.157.81.170" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770739,1.60066,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_388{
style=filled;
color=gray75;
1147[label="52.4.41.184;s;1pkt 1fpkt", shape=diamond, color=yellow];
2257[label="52.4.41.184;s;1pkt 1fpkt", shape=hexagon, color=black];
3845[label="52.4.41.184;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat388[shape=component, label=&lt;Rules:&lt;BR/&gt;{52.4.41.184:1763, 199.104.100.203:1214}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1763: (50%)&lt;BR/&gt; 1214: (50%)&gt;];
}
1147--2257[label="1;1pkt 1fpkt"];
1147--3845[label="1;1pkt 1fpkt"];
2257--3845[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.104.100.203" dst_port="1214" src_ip="52.4.41.184" src_port="1763"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_389{
style=filled;
color=gray75;
1098[label="51.147.54.107;s;9pkt 9fpkt", shape=diamond, color=yellow];
stat389[shape=component, label=&lt;Rules:&lt;BR/&gt;{51.147.54.107:80, 169.189.203.183:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3301: (5.55556%)&lt;BR/&gt; 3269: (5.55556%)&lt;BR/&gt; 3266: (5.55556%)&lt;BR/&gt; 3244: (5.55556%)&gt;];
}
1098--1238[label="1;9pkt 9fpkt"];
1098--2227[label="1;9pkt 9fpkt"];
1098--2669[label="0.222222;2pkt 2fpkt"];
1098--3416[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.203.183" src_ip="51.147.54.107" src_port="80"/>
    </slice>
    <from sec="1054875639" usec="0"/>
    <to sec="1054875843" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.955904,1.53643,503,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_390{
style=filled;
color=gray75;
115[label="194.238.184.243s;2pkt 2fpkt", shape=rectangle, color=red];
847[label="130.86.7.76;s;676pkt 676fpkt", shape=diamond, color=yellow];
1010[label="134.66.210.30;d;677pkt 677fpkt", shape=diamond, color=yellow];
1282[label="194.238.184.243;s;2pkt 2fpkt", shape=diamond, color=yellow];
2106[label="169.9.41.97;d;27pkt 27fpkt", shape=hexagon, color=black];
2165[label="194.238.184.243;s;2pkt 2fpkt", shape=hexagon, color=black];
2261[label="134.66.210.30;d;634pkt 634fpkt", shape=hexagon, color=black];
2398[label="130.86.7.76;s;608pkt 608fpkt", shape=hexagon, color=black];
3221[label="130.86.7.76;709pkt 709fpkt", shape=pentagon, color=darkviolet];
4389[label="130.86.7.76;708pkt 708fpkt", shape=invtriangle, color=brown];
stat390[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.86.7.76:80, 134.66.210.30:*}[40.2439%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (24.9691%)&lt;BR/&gt; 53: (3.1026%)&lt;BR/&gt; 1434: (1.70581%)&lt;BR/&gt; 25: (1.5822%)&lt;BR/&gt; 443: (1.3597%)&gt;];
}
115--847[label="0.5;1pkt 1fpkt"];
115--1006[label="0.5;1pkt 1fpkt"];
115--1010[label="0.5;1pkt 1fpkt"];
115--1282[label="0.5;1pkt 1fpkt"];
115--2106[label="0.5;1pkt 1fpkt"];
115--2165[label="0.5;1pkt 1fpkt"];
115--2261[label="0.5;1pkt 1fpkt"];
115--2398[label="0.5;1pkt 1fpkt"];
115--3221[label="0.5;1pkt 1fpkt"];
847--1010[label="1;676pkt 676fpkt"];
847--2261[label="0.998423;633pkt 633fpkt"];
847--2398[label="1;608pkt 608fpkt"];
847--2669[label="0.0162722;11pkt 11fpkt"];
847--2670[label="0.00147929;1pkt 1fpkt"];
847--2671[label="0.00147929;1pkt 1fpkt"];
847--2672[label="0.00147929;1pkt 1fpkt"];
847--2673[label="0.00147929;1pkt 1fpkt"];
847--2675[label="0.00739645;5pkt 5fpkt"];
847--2676[label="0.00295858;2pkt 2fpkt"];
847--2677[label="0.00591716;4pkt 4fpkt"];
847--2678[label="0.00739645;5pkt 5fpkt"];
847--2679[label="0.00168919;1pkt 1fpkt"];
847--2680[label="0.00147929;1pkt 1fpkt"];
847--2681[label="0.00443787;3pkt 3fpkt"];
847--2682[label="0.00147929;1pkt 1fpkt"];
847--2683[label="0.00443787;3pkt 3fpkt"];
847--2684[label="0.00147929;1pkt 1fpkt"];
847--2685[label="0.0118343;8pkt 8fpkt"];
847--2688[label="0.00164204;1pkt 1fpkt"];
847--2692[label="0.00147929;1pkt 1fpkt"];
847--2695[label="0.00147929;1pkt 1fpkt"];
847--2696[label="0.00147929;1pkt 1fpkt"];
847--2697[label="0.00147929;1pkt 1fpkt"];
847--2699[label="0.00739645;5pkt 5fpkt"];
847--2700[label="0.00295858;2pkt 2fpkt"];
847--2701[label="0.00591716;4pkt 4fpkt"];
847--2703[label="0.00147929;1pkt 1fpkt"];
847--2706[label="0.00147929;1pkt 1fpkt"];
847--2707[label="0.00147929;1pkt 1fpkt"];
847--2708[label="0.00147929;1pkt 1fpkt"];
847--2711[label="0.00147929;1pkt 1fpkt"];
847--3221[label="1;676pkt 676fpkt"];
847--4389[label="0.998521;675pkt 675fpkt"];
1010--2261[label="1;634pkt 634fpkt"];
1010--2398[label="1;608pkt 608fpkt"];
1010--2669[label="0.0162482;11pkt 11fpkt"];
1010--2670[label="0.0014771;1pkt 1fpkt"];
1010--2671[label="0.0014771;1pkt 1fpkt"];
1010--2672[label="0.0014771;1pkt 1fpkt"];
1010--2673[label="0.0014771;1pkt 1fpkt"];
1010--2675[label="0.00738552;5pkt 5fpkt"];
1010--2676[label="0.00295421;2pkt 2fpkt"];
1010--2677[label="0.00590842;4pkt 4fpkt"];
1010--2678[label="0.00738552;5pkt 5fpkt"];
1010--2679[label="0.00168919;1pkt 1fpkt"];
1010--2680[label="0.0014771;1pkt 1fpkt"];
1010--2681[label="0.00443131;3pkt 3fpkt"];
1010--2682[label="0.0014771;1pkt 1fpkt"];
1010--2683[label="0.00443131;3pkt 3fpkt"];
1010--2684[label="0.0014771;1pkt 1fpkt"];
1010--2685[label="0.0118168;8pkt 8fpkt"];
1010--2688[label="0.00164204;1pkt 1fpkt"];
1010--2692[label="0.0014771;1pkt 1fpkt"];
1010--2695[label="0.0014771;1pkt 1fpkt"];
1010--2696[label="0.0014771;1pkt 1fpkt"];
1010--2697[label="0.0014771;1pkt 1fpkt"];
1010--2699[label="0.00738552;5pkt 5fpkt"];
1010--2700[label="0.00295421;2pkt 2fpkt"];
1010--2701[label="0.00590842;4pkt 4fpkt"];
1010--2703[label="0.0014771;1pkt 1fpkt"];
1010--2706[label="0.0014771;1pkt 1fpkt"];
1010--2707[label="0.0014771;1pkt 1fpkt"];
1010--2708[label="0.0014771;1pkt 1fpkt"];
1010--2711[label="0.0014771;1pkt 1fpkt"];
1010--2717[label="0.0014771;1pkt 1fpkt"];
1010--3221[label="0.998523;676pkt 676fpkt"];
1010--4187[label="0.0014771;1pkt 1fpkt"];
1010--4389[label="0.997046;675pkt 675fpkt"];
1010--4768[label="0.0014771;1pkt 1fpkt"];
1282--2106[label="0.5;1pkt 1fpkt"];
1282--2165[label="1;2pkt 2fpkt"];
2106--2165[label="0.5;1pkt 1fpkt"];
2106--2406[label="1;1pkt 1fpkt"];
2106--3612[label="0.62963;17pkt 17fpkt"];
2261--2398[label="1;608pkt 608fpkt"];
2261--2669[label="0.0173502;11pkt 11fpkt"];
2261--2670[label="0.00157729;1pkt 1fpkt"];
2261--2671[label="0.00157729;1pkt 1fpkt"];
2261--2672[label="0.00157729;1pkt 1fpkt"];
2261--2673[label="0.00157729;1pkt 1fpkt"];
2261--2675[label="0.00788644;5pkt 5fpkt"];
2261--2676[label="0.00315457;2pkt 2fpkt"];
2261--2677[label="0.00630915;4pkt 4fpkt"];
2261--2678[label="0.00788644;5pkt 5fpkt"];
2261--2679[label="0.00168919;1pkt 1fpkt"];
2261--2680[label="0.00157729;1pkt 1fpkt"];
2261--2681[label="0.00473186;3pkt 3fpkt"];
2261--2682[label="0.00157729;1pkt 1fpkt"];
2261--2683[label="0.00473186;3pkt 3fpkt"];
2261--2684[label="0.00157729;1pkt 1fpkt"];
2261--2685[label="0.0126183;8pkt 8fpkt"];
2261--2688[label="0.00164204;1pkt 1fpkt"];
2261--2692[label="0.00157729;1pkt 1fpkt"];
2261--2695[label="0.00157729;1pkt 1fpkt"];
2261--2696[label="0.00157729;1pkt 1fpkt"];
2261--2697[label="0.00157729;1pkt 1fpkt"];
2261--2699[label="0.00788644;5pkt 5fpkt"];
2261--2700[label="0.00315457;2pkt 2fpkt"];
2261--2701[label="0.00630915;4pkt 4fpkt"];
2261--2703[label="0.00157729;1pkt 1fpkt"];
2261--2706[label="0.00157729;1pkt 1fpkt"];
2261--2707[label="0.00157729;1pkt 1fpkt"];
2261--2708[label="0.00157729;1pkt 1fpkt"];
2261--2711[label="0.00157729;1pkt 1fpkt"];
2261--2717[label="0.00157729;1pkt 1fpkt"];
2261--3221[label="0.998423;633pkt 633fpkt"];
2261--4187[label="0.00157729;1pkt 1fpkt"];
2261--4389[label="0.996845;632pkt 632fpkt"];
2261--4768[label="0.00157729;1pkt 1fpkt"];
2398--2669[label="0.0180921;11pkt 11fpkt"];
2398--2670[label="0.00164474;1pkt 1fpkt"];
2398--2671[label="0.00164474;1pkt 1fpkt"];
2398--2672[label="0.00164474;1pkt 1fpkt"];
2398--2673[label="0.00164474;1pkt 1fpkt"];
2398--2675[label="0.00822368;5pkt 5fpkt"];
2398--2676[label="0.00328947;2pkt 2fpkt"];
2398--2677[label="0.00657895;4pkt 4fpkt"];
2398--2678[label="0.00822368;5pkt 5fpkt"];
2398--2679[label="0.00168919;1pkt 1fpkt"];
2398--2680[label="0.00164474;1pkt 1fpkt"];
2398--2681[label="0.00493421;3pkt 3fpkt"];
2398--2682[label="0.00164474;1pkt 1fpkt"];
2398--2683[label="0.00493421;3pkt 3fpkt"];
2398--2684[label="0.00164474;1pkt 1fpkt"];
2398--2685[label="0.0131579;8pkt 8fpkt"];
2398--2688[label="0.00164474;1pkt 1fpkt"];
2398--2692[label="0.00164474;1pkt 1fpkt"];
2398--2695[label="0.00164474;1pkt 1fpkt"];
2398--2696[label="0.00164474;1pkt 1fpkt"];
2398--2697[label="0.00164474;1pkt 1fpkt"];
2398--2699[label="0.00822368;5pkt 5fpkt"];
2398--2700[label="0.00328947;2pkt 2fpkt"];
2398--2701[label="0.00657895;4pkt 4fpkt"];
2398--2703[label="0.00164474;1pkt 1fpkt"];
2398--2706[label="0.00164474;1pkt 1fpkt"];
2398--2707[label="0.00164474;1pkt 1fpkt"];
2398--2708[label="0.00164474;1pkt 1fpkt"];
2398--2711[label="0.00164474;1pkt 1fpkt"];
2398--3221[label="1;608pkt 608fpkt"];
2398--4389[label="0.998355;607pkt 607fpkt"];
3221--4389[label="1;708pkt 708fpkt"];
</description>
    <slice>
      <filter dst_ip="134.66.210.30" src_ip="130.86.7.76" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_391{
style=filled;
color=gray75;
1300[label="209.126.50.169;s;1pkt 1fpkt", shape=diamond, color=yellow];
2262[label="209.126.50.169;s;1pkt 1fpkt", shape=hexagon, color=black];
stat391[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.126.50.169:1214, 199.104.100.203:2796}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2796: (50%)&lt;BR/&gt; 1214: (50%)&gt;];
}
1300--2262[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.104.100.203" dst_port="2796" src_ip="209.126.50.169" src_port="1214"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770739,1.60066,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_392{
style=filled;
color=gray75;
872[label="192.161.10.73;s;59pkt 59fpkt", shape=diamond, color=yellow];
1028[label="198.160.32.24;d;1pkt 1fpkt", shape=diamond, color=yellow];
2116[label="198.160.32.24;d;1pkt 1fpkt", shape=hexagon, color=black];
2268[label="192.161.10.73;s;47pkt 47fpkt", shape=hexagon, color=black];
3202[label="192.161.10.73;61pkt 61fpkt", shape=pentagon, color=darkviolet];
stat392[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.161.10.73:110, 198.160.32.40:*}[48.3871%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (49.7041%)&lt;BR/&gt; 1756: (1.47929%)&lt;BR/&gt; 3097: (0.887574%)&lt;BR/&gt; 3086: (0.887574%)&lt;BR/&gt; 3048: (0.887574%)&gt;];
}
872--1028[label="1;1pkt 1fpkt"];
872--2116[label="1;1pkt 1fpkt"];
872--2268[label="1;47pkt 47fpkt"];
872--3202[label="0.983051;58pkt 58fpkt"];
1028--2116[label="1;1pkt 1fpkt"];
1028--2268[label="1;1pkt 1fpkt"];
1028--3202[label="1;1pkt 1fpkt"];
2116--2268[label="1;1pkt 1fpkt"];
2116--3202[label="1;1pkt 1fpkt"];
2268--3202[label="0.978723;46pkt 46fpkt"];
</description>
    <slice>
      <filter dst_ip="198.160.32.40" src_ip="192.161.10.73" src_port="110"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_393{
style=filled;
color=gray75;
1045[label="162.66.221.40;s;3pkt 3fpkt", shape=diamond, color=yellow];
2273[label="162.66.221.40;s;3pkt 3fpkt", shape=hexagon, color=black];
stat393[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.66.221.40:1612, 175.85.28.152:2375}[33.3333%]&lt;BR/&gt;{162.66.221.40:1612, 175.85.28.152:2384}[33.3333%]&lt;BR/&gt;{162.66.221.40:1612, 175.85.28.152:2577}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1612: (50%)&lt;BR/&gt; 2577: (16.6667%)&lt;BR/&gt; 2384: (16.6667%)&lt;BR/&gt; 2375: (16.6667%)&gt;];
}
1045--2196[label="1;3pkt 3fpkt"];
1045--2273[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="175.85.28.152" dst_port="2577" src_ip="162.66.221.40" src_port="1612"/>
      <filter dst_ip="175.85.28.152" dst_port="2384" src_ip="162.66.221.40" src_port="1612"/>
      <filter dst_ip="175.85.28.152" dst_port="2375" src_ip="162.66.221.40" src_port="1612"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920975,1.6368,999,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_394{
style=filled;
color=gray75;
870[label="199.174.154.131;d;28pkt 28fpkt", shape=diamond, color=yellow];
1209[label="99.205.133.223;s;1pkt 1fpkt", shape=diamond, color=yellow];
1455[label="99.123.159.226;s;1pkt 1fpkt", shape=diamond, color=yellow];
2282[label="99.123.159.226;s;1pkt 1fpkt", shape=hexagon, color=black];
4433[label="99.148.212.93;1pkt 1fpkt", shape=invtriangle, color=brown];
stat394[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6881, 199.174.154.131:*}[28.5714%]&lt;BR/&gt;{*:6882, 199.174.154.131:*}[25%]&lt;BR/&gt;{*:*, 199.174.154.131:6883}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (18.75%)&lt;BR/&gt; 6882: (14.0625%)&lt;BR/&gt; 6883: (12.5%)&lt;BR/&gt; 4184: (4.6875%)&lt;BR/&gt; 4324: (3.125%)&gt;];
}
870--1209[label="1;1pkt 1fpkt"];
870--1455[label="1;1pkt 1fpkt"];
870--2282[label="1;1pkt 1fpkt"];
870--4433[label="1;1pkt 1fpkt"];
1455--2282[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.174.154.131" src_port="6881"/>
      <filter dst_ip="199.174.154.131" src_port="6882"/>
      <filter dst_ip="199.174.154.131" dst_port="6883"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_395{
style=filled;
color=gray75;
1459[label="175.84.46.7;d;28pkt 28fpkt", shape=diamond, color=yellow];
1460[label="48.81.105.97;s;28pkt 28fpkt", shape=diamond, color=yellow];
2285[label="48.81.105.97;s;22pkt 22fpkt", shape=hexagon, color=black];
stat395[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.81.105.97:443, 175.84.46.7:*}[92.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (46.1538%)&lt;BR/&gt; 80: (3.84615%)&lt;BR/&gt; 1162: (1.92308%)&lt;BR/&gt; 1161: (1.92308%)&lt;BR/&gt; 1160: (1.92308%)&gt;];
}
1459--1460[label="1;28pkt 28fpkt"];
1459--2285[label="1;22pkt 22fpkt"];
1459--2669[label="0.0714286;2pkt 2fpkt"];
1460--2285[label="1;22pkt 22fpkt"];
1460--2669[label="0.0714286;2pkt 2fpkt"];
2285--2669[label="0.0909091;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.46.7" src_ip="48.81.105.97" src_port="443"/>
    </slice>
    <from sec="1054875604" usec="0"/>
    <to sec="1054876365" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.571638,1.61542,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_396{
style=filled;
color=gray75;
1619[label="192.129.16.232;s;97pkt 97fpkt", shape=diamond, color=yellow];
1722[label="175.84.193.232;d;101pkt 101fpkt", shape=diamond, color=yellow];
3027[label="192.182.118.45;25pkt 25fpkt", shape=pentagon, color=darkviolet];
3594[label="192.182.122.140;17pkt 17fpkt", shape=pentagon, color=darkviolet];
stat396[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 175.84.193.232:*}[49.7462%]&lt;BR/&gt;{192.129.16.232:80, 199.172.98.4:*}[28.4264%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.75%)&lt;BR/&gt; 81: (1.04167%)&lt;BR/&gt; 1125: (0.625%)&lt;BR/&gt; 1118: (0.625%)&lt;BR/&gt; 1182: (0.416667%)&gt;];
}
1619--1698[label="0.0103093;1pkt 1fpkt"];
1619--1722[label="0.0412371;4pkt 4fpkt"];
1619--1961[label="0.0515464;5pkt 5fpkt"];
1619--1988[label="0.185567;18pkt 18fpkt"];
1619--2252[label="0.0103093;1pkt 1fpkt"];
1619--2580[label="1;97pkt 97fpkt"];
1619--4075[label="1;97pkt 97fpkt"];
1722--2580[label="0.0412371;4pkt 4fpkt"];
1722--3027[label="0.88;22pkt 22fpkt"];
1722--3594[label="1;17pkt 17fpkt"];
1722--4075[label="0.039604;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.193.232" src_port="80"/>
      <filter dst_ip="199.172.98.4" src_ip="192.129.16.232" src_port="80"/>
    </slice>
    <from sec="1054875803" usec="0"/>
    <to sec="1054876496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770739,1.60066,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_400{
style=filled;
color=gray75;
1380[label="220.36.97.6;s;18pkt 18fpkt", shape=diamond, color=yellow];
2302[label="220.36.97.6;s;8pkt 8fpkt", shape=hexagon, color=black];
2762[label="220.36.97.6;21pkt 21fpkt", shape=pentagon, color=darkviolet];
stat400[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.36.97.6:80, 169.189.41.40:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1121: (3.19149%)&lt;BR/&gt; 1119: (3.19149%)&lt;BR/&gt; 1118: (3.19149%)&lt;BR/&gt; 1116: (3.19149%)&gt;];
}
1380--2302[label="1;8pkt 8fpkt"];
1380--2762[label="1;18pkt 18fpkt"];
2302--2762[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.41.40" src_ip="220.36.97.6" src_port="80"/>
    </slice>
    <from sec="1054875800" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_401{
style=filled;
color=gray75;
1507[label="134.66.228.225;d;9pkt 9fpkt", shape=diamond, color=yellow];
1508[label="209.66.192.102;s;4pkt 4fpkt", shape=diamond, color=yellow];
2304[label="209.66.192.102;s;4pkt 4fpkt", shape=hexagon, color=black];
stat401[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.66.142.87:16542, 134.66.228.225:*}[22.2222%]&lt;BR/&gt;{209.66.192.102:*, 134.66.228.225:26320}[22.2222%]&lt;BR/&gt;{209.66.192.102:21192, 134.66.228.225:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 26320: (17.6471%)&lt;BR/&gt; 21192: (17.6471%)&lt;BR/&gt; 4317: (8.82353%)&lt;BR/&gt; 4262: (8.82353%)&lt;BR/&gt; 1756: (8.82353%)&gt;];
}
1507--1508[label="1;4pkt 4fpkt"];
1507--2304[label="1;4pkt 4fpkt"];
1508--2304[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="134.66.228.225" src_ip="209.66.192.102" src_port="21192"/>
      <filter dst_ip="134.66.228.225" dst_port="26320" src_ip="209.66.192.102"/>
      <filter dst_ip="134.66.228.225" src_ip="84.66.142.87" src_port="16542"/>
    </slice>
    <from sec="1054875872" usec="0"/>
    <to sec="1054876367" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_402{
style=filled;
color=gray75;
771[label="175.84.32.85;d;47pkt 47fpkt", shape=diamond, color=yellow];
stat402[shape=component, label=&lt;Rules:&lt;BR/&gt;{51.158.70.137:80, 175.84.32.85:*}[51.0638%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.9362%)&lt;BR/&gt; 1629: (1.06383%)&lt;BR/&gt; 1628: (1.06383%)&lt;BR/&gt; 1627: (1.06383%)&lt;BR/&gt; 1626: (1.06383%)&gt;];
}
771--1086[label="0.191489;9pkt 9fpkt"];
771--1354[label="0.510638;24pkt 24fpkt"];
771--1416[label="0.12766;6pkt 6fpkt"];
771--1681[label="0.0425532;2pkt 2fpkt"];
771--1695[label="0.0212766;1pkt 1fpkt"];
771--1758[label="0.0212766;1pkt 1fpkt"];
771--1774[label="0.0425532;2pkt 2fpkt"];
771--1795[label="0.0212766;1pkt 1fpkt"];
771--2259[label="0.12766;6pkt 6fpkt"];
771--2428[label="0.0425532;2pkt 2fpkt"];
771--2445[label="0.191489;9pkt 9fpkt"];
771--2552[label="0.0425532;2pkt 2fpkt"];
771--3307[label="0.0425532;2pkt 2fpkt"];
771--3423[label="0.0212766;1pkt 1fpkt"];
771--3905[label="0.0212766;1pkt 1fpkt"];
771--4138[label="0.0212766;1pkt 1fpkt"];
771--4461[label="0.0212766;1pkt 1fpkt"];
771--4656[label="0.0212766;1pkt 1fpkt"];
771--4860[label="0.0212766;1pkt 1fpkt"];
771--4917[label="0.0212766;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.32.85" src_ip="51.158.70.137" src_port="80"/>
    </slice>
    <from sec="1054876217" usec="0"/>
    <to sec="1054876309" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770739,1.60066,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_403{
style=filled;
color=gray75;
1075[label="51.6.70.232;s;97pkt 97fpkt", shape=diamond, color=yellow];
1213[label="175.84.59.224;d;106pkt 106fpkt", shape=diamond, color=yellow];
1717[label="199.31.232.35;s;35pkt 35fpkt", shape=diamond, color=yellow];
1801[label="175.85.153.4;d;40pkt 40fpkt", shape=diamond, color=yellow];
1881[label="50.85.128.57;s;34pkt 34fpkt", shape=diamond, color=yellow];
1902[label="218.171.161.113;s;47pkt 47fpkt", shape=diamond, color=yellow];
2467[label="199.31.232.35;s;30pkt 30fpkt", shape=hexagon, color=black];
3453[label="218.171.161.114;8pkt 8fpkt", shape=pentagon, color=darkviolet];
stat403[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:25}[34.384%]&lt;BR/&gt;{*:*, 175.84.59.224:*}[30.3725%]&lt;BR/&gt;{51.6.70.232:25, *:*}[27.7937%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.2443%)&lt;BR/&gt; 113: (0.629723%)&lt;BR/&gt; 3076: (0.377834%)&lt;BR/&gt; 3056: (0.377834%)&lt;BR/&gt; 2823: (0.377834%)&gt;];
}
1075--1092[label="0.0515464;5pkt 5fpkt"];
1075--1213[label="0.0206186;2pkt 2fpkt"];
1075--1340[label="0.195876;19pkt 19fpkt"];
1075--1566[label="0.0188679;1pkt 1fpkt"];
1075--1572[label="0.0930233;8pkt 8fpkt"];
1075--1603[label="0.0967742;6pkt 6fpkt"];
1075--1801[label="0.075;3pkt 3fpkt"];
1075--1847[label="0.0566038;3pkt 3fpkt"];
1075--1879[label="0.0120482;1pkt 1fpkt"];
1075--1993[label="0.0103093;1pkt 1fpkt"];
1075--2219[label="1;81pkt 81fpkt"];
1075--2316[label="0.0515464;5pkt 5fpkt"];
1075--2425[label="0.0192308;1pkt 1fpkt"];
1075--2562[label="0.0930233;8pkt 8fpkt"];
1075--2565[label="0.195876;19pkt 19fpkt"];
1075--2574[label="0.0967742;6pkt 6fpkt"];
1075--4077[label="1;97pkt 97fpkt"];
1213--1235[label="0.102564;4pkt 4fpkt"];
1213--1321[label="0.0333333;3pkt 3fpkt"];
1213--1367[label="0.00943396;1pkt 1fpkt"];
1213--1467[label="0.05;3pkt 3fpkt"];
1213--1532[label="0.00943396;1pkt 1fpkt"];
1213--1592[label="0.0208333;1pkt 1fpkt"];
1213--1605[label="0.0434783;2pkt 2fpkt"];
1213--1802[label="0.08;2pkt 2fpkt"];
1213--1881[label="0.0588235;2pkt 2fpkt"];
1213--1902[label="0.12766;6pkt 6fpkt"];
1213--2147[label="0.102564;4pkt 4fpkt"];
1213--2219[label="0.0246914;2pkt 2fpkt"];
1213--2354[label="0.0487805;2pkt 2fpkt"];
1213--2420[label="0.025;2pkt 2fpkt"];
1213--2446[label="0.0208333;1pkt 1fpkt"];
1213--2583[label="0.12766;6pkt 6fpkt"];
1213--2867[label="0.00943396;1pkt 1fpkt"];
1213--3100[label="0.0588235;2pkt 2fpkt"];
1213--3112[label="0.0322581;3pkt 3fpkt"];
1213--3370[label="0.105263;4pkt 4fpkt"];
1213--3400[label="0.0810811;3pkt 3fpkt"];
1213--3442[label="0.0833333;2pkt 2fpkt"];
1213--3453[label="0.625;5pkt 5fpkt"];
1213--3754[label="0.142857;1pkt 1fpkt"];
1213--3800[label="0.1;1pkt 1fpkt"];
1213--3838[label="0.166667;1pkt 1fpkt"];
1213--4077[label="0.0196078;2pkt 2fpkt"];
1213--4247[label="0.00943396;1pkt 1fpkt"];
1213--4442[label="0.102564;4pkt 4fpkt"];
1213--4468[label="0.0833333;2pkt 2fpkt"];
1213--4626[label="0.166667;1pkt 1fpkt"];
1213--4791[label="0.00943396;1pkt 1fpkt"];
1213--4853[label="0.102564;4pkt 4fpkt"];
1213--4865[label="0.08;2pkt 2fpkt"];
1717--2467[label="1;30pkt 30fpkt"];
1717--2565[label="0.142857;5pkt 5fpkt"];
1717--2957[label="1;35pkt 35fpkt"];
1801--2219[label="0.05;2pkt 2fpkt"];
1801--2420[label="0.075;3pkt 3fpkt"];
1801--3091[label="0.025;1pkt 1fpkt"];
1801--3112[label="0.075;3pkt 3fpkt"];
1801--4077[label="0.075;3pkt 3fpkt"];
1801--4090[label="0.0909091;1pkt 1fpkt"];
1801--4148[label="0.05;2pkt 2fpkt"];
1801--4336[label="0.025;1pkt 1fpkt"];
1881--2549[label="0.0294118;1pkt 1fpkt"];
1881--2565[label="0.0294118;1pkt 1fpkt"];
1881--3100[label="0.970588;33pkt 33fpkt"];
1902--2316[label="0.0425532;2pkt 2fpkt"];
1902--2583[label="1;47pkt 47fpkt"];
2467--2565[label="0.133333;4pkt 4fpkt"];
2467--2957[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.59.224"/>
      <filter dst_port="25"/>
      <filter src_ip="51.6.70.232" src_port="25"/>
    </slice>
    <from sec="1054875604" usec="0"/>
    <to sec="1054876438" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_404{
style=filled;
color=gray75;
1539[label="169.189.227.145;d;2pkt 2fpkt", shape=diamond, color=yellow];
1672[label="49.85.167.180;s;1pkt 1fpkt", shape=diamond, color=yellow];
2321[label="169.189.227.145;d;2pkt 2fpkt", shape=hexagon, color=black];
2419[label="49.85.167.180;s;1pkt 1fpkt", shape=hexagon, color=black];
stat404[shape=component, label=&lt;Rules:&lt;BR/&gt;{49.85.167.180:6346, 169.189.227.145:50136}[50%]&lt;BR/&gt;{99.106.194.204:6346, 169.189.227.145:50081}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (50%)&lt;BR/&gt; 50136: (33.3333%)&lt;BR/&gt; 50081: (16.6667%)&gt;];
}
1539--1672[label="1;1pkt 1fpkt"];
1539--2321[label="1;2pkt 2fpkt"];
1539--2419[label="1;1pkt 1fpkt"];
1672--2321[label="1;1pkt 1fpkt"];
1672--2419[label="1;1pkt 1fpkt"];
2321--2419[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.227.145" dst_port="50081" src_ip="99.106.194.204" src_port="6346"/>
      <filter dst_ip="169.189.227.145" dst_port="50136" src_ip="49.85.167.180" src_port="6346"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_405{
style=filled;
color=gray75;
1413[label="49.76.170.180;s;1pkt 1fpkt", shape=diamond, color=yellow];
2323[label="49.76.170.180;s;1pkt 1fpkt", shape=hexagon, color=black];
stat405[shape=component, label=&lt;Rules:&lt;BR/&gt;{49.76.170.180:3309, 199.104.100.203:1214}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3309: (50%)&lt;BR/&gt; 1214: (50%)&gt;];
}
1413--2323[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.104.100.203" dst_port="1214" src_ip="49.76.170.180" src_port="3309"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_406{
style=filled;
color=gray75;
1543[label="202.129.165.134;d;36pkt 36fpkt", shape=diamond, color=yellow];
1914[label="205.209.126.169;s;33pkt 33fpkt", shape=diamond, color=yellow];
2327[label="202.129.165.134;d;34pkt 34fpkt", shape=hexagon, color=black];
stat406[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.209.126.169:80, 176.107.181.76:*}[33.3333%]&lt;BR/&gt;{205.209.126.22:80, 202.129.165.134:*}[27.7778%]&lt;BR/&gt;{205.209.126.169:80, 202.129.165.134:*}[27.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3479: (1.45631%)&lt;BR/&gt; 3478: (1.45631%)&lt;BR/&gt; 3477: (1.45631%)&lt;BR/&gt; 3476: (1.45631%)&gt;];
}
1543--1914[label="0.454545;15pkt 15fpkt"];
1543--2327[label="1;34pkt 34fpkt"];
1543--2669[label="0.0277778;1pkt 1fpkt"];
1914--2327[label="0.454545;15pkt 15fpkt"];
2327--2669[label="0.0294118;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="202.129.165.134" src_ip="205.209.126.169" src_port="80"/>
      <filter dst_ip="176.107.181.76" src_ip="205.209.126.169" src_port="80"/>
      <filter dst_ip="202.129.165.134" src_ip="205.209.126.22" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.895209,1.57226,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_407{
style=filled;
color=gray75;
719[label="52.65.234.57;s;1pkt 1fpkt", shape=diamond, color=yellow];
746[label="169.189.227.252;d;1692pkt 1692fpkt", shape=diamond, color=yellow];
849[label="210.6.154.55;s;1587pkt 1587fpkt", shape=diamond, color=yellow];
861[label="175.84.183.212;d;17pkt 17fpkt", shape=diamond, color=yellow];
1242[label="218.138.185.58;s;223pkt 223fpkt", shape=diamond, color=yellow];
1288[label="175.85.3.0;d;103pkt 103fpkt", shape=diamond, color=yellow];
1351[label="175.84.183.216;d;50pkt 50fpkt", shape=diamond, color=yellow];
1433[label="129.24.216.85;d;84pkt 84fpkt", shape=diamond, color=yellow];
1529[label="175.85.9.243;d;234pkt 234fpkt", shape=diamond, color=yellow];
1566[label="175.85.25.5;d;53pkt 53fpkt", shape=diamond, color=yellow];
1671[label="175.85.34.77;d;109pkt 109fpkt", shape=diamond, color=yellow];
1716[label="219.105.132.44;s;15pkt 15fpkt", shape=diamond, color=yellow];
1733[label="175.84.52.17;d;22pkt 22fpkt", shape=diamond, color=yellow];
1807[label="169.189.203.52;d;66pkt 66fpkt", shape=diamond, color=yellow];
2150[label="218.138.185.58;s;69pkt 69fpkt", shape=hexagon, color=black];
2315[label="169.189.227.252;d;1176pkt 1176fpkt", shape=hexagon, color=black];
2329[label="210.6.154.55;s;1259pkt 1259fpkt", shape=hexagon, color=black];
2339[label="129.24.216.85;d;78pkt 78fpkt", shape=hexagon, color=black];
2340[label="210.193.188.168;s;108pkt 108fpkt", shape=hexagon, color=black];
2425[label="175.85.25.5;d;52pkt 52fpkt", shape=hexagon, color=black];
2466[label="219.105.132.44;s;14pkt 14fpkt", shape=hexagon, color=black];
2478[label="175.84.52.17;d;16pkt 16fpkt", shape=hexagon, color=black];
2912[label="192.42.4.28;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3000[label="192.42.4.42;16pkt 16fpkt", shape=pentagon, color=darkviolet];
3083[label="210.6.154.55;1930pkt 1930fpkt", shape=pentagon, color=darkviolet];
3532[label="192.42.4.130;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3598[label="189.183.215.140;40pkt 40fpkt", shape=pentagon, color=darkviolet];
3660[label="192.42.4.151;16pkt 16fpkt", shape=pentagon, color=darkviolet];
3780[label="192.42.4.171;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4103[label="51.212.191.237;13pkt 13fpkt", shape=pentagon, color=darkviolet];
4334[label="210.6.154.55;1930pkt 1930fpkt", shape=invtriangle, color=brown];
4508[label="192.42.4.130;12pkt 12fpkt", shape=invtriangle, color=brown];
4563[label="192.42.4.151;15pkt 15fpkt", shape=invtriangle, color=brown];
4599[label="192.42.4.171;8pkt 8fpkt", shape=invtriangle, color=brown];
stat407[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.6.154.55:80, 169.189.227.252:*}[49.7868%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.9013%)&lt;BR/&gt; 53: (1.33641%)&lt;BR/&gt; 1863: (0.874332%)&lt;BR/&gt; 32782: (0.770137%)&lt;BR/&gt; 0: (0.21745%)&gt;];
}
719--1288[label="1;1pkt 1fpkt"];
746--764[label="0.0172414;7pkt 7fpkt"];
746--849[label="0.771267;1224pkt 1224fpkt"];
746--913[label="0.0109589;4pkt 4fpkt"];
746--1059[label="0.00465116;2pkt 2fpkt"];
746--1065[label="0.0195312;10pkt 10fpkt"];
746--1077[label="0.00431034;2pkt 2fpkt"];
746--1150[label="0.0181818;4pkt 4fpkt"];
746--1223[label="0.00892857;1pkt 1fpkt"];
746--1242[label="0.183857;41pkt 41fpkt"];
746--1327[label="0.0309278;6pkt 6fpkt"];
746--1332[label="0.00518135;1pkt 1fpkt"];
746--1406[label="0.0344828;7pkt 7fpkt"];
746--1440[label="0.025;2pkt 2fpkt"];
746--1441[label="0.00900901;1pkt 1fpkt"];
746--1454[label="0.0315789;6pkt 6fpkt"];
746--1480[label="0.0222222;1pkt 1fpkt"];
746--1569[label="0.0128205;1pkt 1fpkt"];
746--1570[label="0.00684932;1pkt 1fpkt"];
746--1578[label="0.056338;4pkt 4fpkt"];
746--1579[label="0.207317;17pkt 17fpkt"];
746--1585[label="0.00862069;1pkt 1fpkt"];
746--1704[label="0.0422535;3pkt 3fpkt"];
746--1706[label="0.0107527;1pkt 1fpkt"];
746--1716[label="0.0666667;1pkt 1fpkt"];
746--1774[label="0.0142857;1pkt 1fpkt"];
746--1779[label="0.0144928;2pkt 2fpkt"];
746--1794[label="0.257143;9pkt 9fpkt"];
746--1843[label="0.192982;11pkt 11fpkt"];
746--2019[label="0.0172414;7pkt 7fpkt"];
746--2063[label="0.010989;1pkt 1fpkt"];
746--2131[label="0.027972;4pkt 4fpkt"];
746--2150[label="0.594203;41pkt 41fpkt"];
746--2260[label="0.015873;3pkt 3fpkt"];
746--2275[label="0.00900901;1pkt 1fpkt"];
746--2281[label="0.0289017;5pkt 5fpkt"];
746--2315[label="1;1176pkt 1176fpkt"];
746--2329[label="0.731533;921pkt 921fpkt"];
746--2346[label="0.0106383;1pkt 1fpkt"];
746--2360[label="0.0105263;1pkt 1fpkt"];
746--2432[label="0.0701754;4pkt 4fpkt"];
746--2466[label="0.0714286;1pkt 1fpkt"];
746--2509[label="0.00847458;1pkt 1fpkt"];
746--2510[label="0.00552486;2pkt 2fpkt"];
746--2542[label="0.192982;11pkt 11fpkt"];
746--2552[label="0.0142857;1pkt 1fpkt"];
746--2567[label="0.00862069;1pkt 1fpkt"];
746--2642[label="0.0105263;1pkt 1fpkt"];
746--2669[label="0.0419622;71pkt 71fpkt"];
746--2765[label="0.0582524;6pkt 6fpkt"];
746--2845[label="0.0405405;3pkt 3fpkt"];
746--2852[label="0.00819672;1pkt 1fpkt"];
746--2912[label="0.111111;1pkt 1fpkt"];
746--2956[label="0.142857;1pkt 1fpkt"];
746--3000[label="0.0625;1pkt 1fpkt"];
746--3065[label="0.00862069;1pkt 1fpkt"];
746--3083[label="0.817376;1383pkt 1383fpkt"];
746--3307[label="0.0140845;1pkt 1fpkt"];
746--3330[label="0.00473934;1pkt 1fpkt"];
746--3343[label="0.0116279;1pkt 1fpkt"];
746--3511[label="0.00833333;1pkt 1fpkt"];
746--3532[label="0.0909091;1pkt 1fpkt"];
746--3598[label="0.025;1pkt 1fpkt"];
746--3660[label="0.125;2pkt 2fpkt"];
746--3714[label="0.0160183;7pkt 7fpkt"];
746--3744[label="0.0135135;1pkt 1fpkt"];
746--3780[label="0.111111;1pkt 1fpkt"];
746--3840[label="0.0238095;1pkt 1fpkt"];
746--3850[label="0.027027;1pkt 1fpkt"];
746--3889[label="0.0714286;1pkt 1fpkt"];
746--3969[label="0.157143;11pkt 11fpkt"];
746--4083[label="0.0222222;1pkt 1fpkt"];
746--4116[label="0.00429185;1pkt 1fpkt"];
746--4142[label="0.209302;9pkt 9fpkt"];
746--4207[label="0.0582524;6pkt 6fpkt"];
746--4238[label="0.0405405;3pkt 3fpkt"];
746--4284[label="0.142857;1pkt 1fpkt"];
746--4334[label="0.817376;1383pkt 1383fpkt"];
746--4428[label="0.00473934;1pkt 1fpkt"];
746--4499[label="0.00840336;1pkt 1fpkt"];
746--4508[label="0.0833333;1pkt 1fpkt"];
746--4563[label="0.133333;2pkt 2fpkt"];
746--4599[label="0.125;1pkt 1fpkt"];
746--4684[label="0.15942;11pkt 11fpkt"];
746--4741[label="0.00431034;1pkt 1fpkt"];
746--4752[label="0.219512;9pkt 9fpkt"];
746--4786[label="0.04;3pkt 3fpkt"];
746--4925[label="0.15942;11pkt 11fpkt"];
849--861[label="0.0588235;1pkt 1fpkt"];
849--864[label="0.0125;2pkt 2fpkt"];
849--907[label="0.00309598;1pkt 1fpkt"];
849--1009[label="0.00167504;1pkt 1fpkt"];
849--1013[label="0.00647249;4pkt 4fpkt"];
849--1196[label="0.0243902;3pkt 3fpkt"];
849--1207[label="0.00359712;1pkt 1fpkt"];
849--1226[label="0.00431034;1pkt 1fpkt"];
849--1288[label="0.0485437;5pkt 5fpkt"];
849--1314[label="0.0512821;2pkt 2fpkt"];
849--1351[label="0.02;1pkt 1fpkt"];
849--1457[label="0.00980392;1pkt 1fpkt"];
849--1529[label="1;234pkt 234fpkt"];
849--1566[label="0.0188679;1pkt 1fpkt"];
849--1581[label="0.0416667;3pkt 3fpkt"];
849--1671[label="0.110092;12pkt 12fpkt"];
849--1988[label="0.00063012;1pkt 1fpkt"];
849--2014[label="0.0165289;6pkt 6fpkt"];
849--2037[label="0.00167504;1pkt 1fpkt"];
849--2088[label="0.00117786;1pkt 1fpkt"];
849--2191[label="0.0714286;1pkt 1fpkt"];
849--2315[label="0.783163;921pkt 921fpkt"];
849--2329[label="1;1259pkt 1259fpkt"];
849--2347[label="0.00309598;1pkt 1fpkt"];
849--2425[label="0.0192308;1pkt 1fpkt"];
849--2492[label="0.00276498;3pkt 3fpkt"];
849--2513[label="0.00990099;1pkt 1fpkt"];
849--2520[label="0.00456621;1pkt 1fpkt"];
849--2669[label="0.0415879;66pkt 66fpkt"];
849--3083[label="1;1587pkt 1587fpkt"];
849--4334[label="1;1587pkt 1587fpkt"];
861--1480[label="0.0588235;1pkt 1fpkt"];
861--1580[label="0.0588235;1pkt 1fpkt"];
861--1969[label="0.294118;5pkt 5fpkt"];
861--1980[label="0.0588235;1pkt 1fpkt"];
861--2191[label="1;14pkt 14fpkt"];
861--2329[label="0.0588235;1pkt 1fpkt"];
861--2606[label="0.117647;2pkt 2fpkt"];
861--2669[label="0.117647;2pkt 2fpkt"];
861--2841[label="0.0588235;1pkt 1fpkt"];
861--3083[label="0.0588235;1pkt 1fpkt"];
861--3329[label="0.529412;9pkt 9fpkt"];
861--4334[label="0.0588235;1pkt 1fpkt"];
861--4427[label="0.529412;9pkt 9fpkt"];
1242--1341[label="0.4;42pkt 42fpkt"];
1242--1590[label="0.104072;23pkt 23fpkt"];
1242--1594[label="0.0134529;3pkt 3fpkt"];
1242--1807[label="0.909091;60pkt 60fpkt"];
1242--1988[label="0.00896861;2pkt 2fpkt"];
1242--2029[label="0.0153061;3pkt 3fpkt"];
1242--2150[label="1;69pkt 69fpkt"];
1242--2315[label="0.183857;41pkt 41fpkt"];
1242--2347[label="0.103139;23pkt 23fpkt"];
1242--2443[label="0.130682;23pkt 23fpkt"];
1242--2516[label="0.403846;42pkt 42fpkt"];
1288--1588[label="0.038835;4pkt 4fpkt"];
1288--2126[label="0.0857143;3pkt 3fpkt"];
1288--2329[label="0.0485437;5pkt 5fpkt"];
1288--3083[label="0.0485437;5pkt 5fpkt"];
1288--3939[label="0.0776699;8pkt 8fpkt"];
1288--4103[label="0.923077;12pkt 12fpkt"];
1288--4334[label="0.0485437;5pkt 5fpkt"];
1288--4673[label="0.0776699;8pkt 8fpkt"];
1351--1449[label="0.02;1pkt 1fpkt"];
1351--1497[label="0.42;21pkt 21fpkt"];
1351--1570[label="0.22;11pkt 11fpkt"];
1351--1706[label="0.16;8pkt 8fpkt"];
1351--2329[label="0.02;1pkt 1fpkt"];
1351--2346[label="0.22;11pkt 11fpkt"];
1351--2669[label="0.02;1pkt 1fpkt"];
1351--2986[label="0.12;6pkt 6fpkt"];
1351--3083[label="0.02;1pkt 1fpkt"];
1351--3273[label="0.02;1pkt 1fpkt"];
1351--3312[label="0.42;21pkt 21fpkt"];
1351--4334[label="0.02;1pkt 1fpkt"];
1351--4420[label="0.42;21pkt 21fpkt"];
1433--2339[label="1;78pkt 78fpkt"];
1433--2679[label="0.0119048;1pkt 1fpkt"];
1433--2687[label="0.0119048;1pkt 1fpkt"];
1433--2856[label="0.777778;7pkt 7fpkt"];
1433--3430[label="0.0119048;1pkt 1fpkt"];
1433--3660[label="0.0625;1pkt 1fpkt"];
1433--3699[label="0.4;4pkt 4fpkt"];
1433--4463[label="0.0119048;1pkt 1fpkt"];
1433--4563[label="0.0666667;1pkt 1fpkt"];
1433--4861[label="0.0119048;1pkt 1fpkt"];
1529--2329[label="1;234pkt 234fpkt"];
1529--3083[label="1;234pkt 234fpkt"];
1529--4334[label="1;234pkt 234fpkt"];
1566--1617[label="0.291667;7pkt 7fpkt"];
1566--1673[label="0.0377358;2pkt 2fpkt"];
1566--1849[label="0.0188679;1pkt 1fpkt"];
1566--1869[label="0.0566038;3pkt 3fpkt"];
1566--2053[label="0.0754717;4pkt 4fpkt"];
1566--2219[label="0.0188679;1pkt 1fpkt"];
1566--2329[label="0.0188679;1pkt 1fpkt"];
1566--2421[label="0.0377358;2pkt 2fpkt"];
1566--2425[label="1;52pkt 52fpkt"];
1566--2871[label="0.0232558;1pkt 1fpkt"];
1566--2922[label="0.291667;7pkt 7fpkt"];
1566--3083[label="0.0188679;1pkt 1fpkt"];
1566--3218[label="0.030303;1pkt 1fpkt"];
1566--3579[label="0.0333333;1pkt 1fpkt"];
1566--3636[label="0.188679;10pkt 10fpkt"];
1566--3840[label="0.0238095;1pkt 1fpkt"];
1566--4077[label="0.0188679;1pkt 1fpkt"];
1566--4251[label="0.0227273;1pkt 1fpkt"];
1566--4270[label="0.291667;7pkt 7fpkt"];
1566--4334[label="0.0188679;1pkt 1fpkt"];
1566--4387[label="0.03125;1pkt 1fpkt"];
1566--4796[label="0.291667;7pkt 7fpkt"];
1671--2053[label="0.110092;12pkt 12fpkt"];
1671--2329[label="0.110092;12pkt 12fpkt"];
1671--2340[label="0.0185185;2pkt 2fpkt"];
1671--2351[label="0.0183486;2pkt 2fpkt"];
1671--2669[label="0.0183486;2pkt 2fpkt"];
1671--2746[label="0.0327869;2pkt 2fpkt"];
1671--3083[label="0.110092;12pkt 12fpkt"];
1671--3135[label="0.738462;48pkt 48fpkt"];
1671--3323[label="0.04;2pkt 2fpkt"];
1671--3332[label="0.0512821;2pkt 2fpkt"];
1671--3472[label="0.00917431;1pkt 1fpkt"];
1671--3504[label="0.00961538;1pkt 1fpkt"];
1671--3636[label="0.119266;13pkt 13fpkt"];
1671--3779[label="0.00917431;1pkt 1fpkt"];
1671--4002[label="0.0183486;2pkt 2fpkt"];
1671--4198[label="0.0322581;2pkt 2fpkt"];
1671--4334[label="0.110092;12pkt 12fpkt"];
1671--4483[label="0.00917431;1pkt 1fpkt"];
1671--4497[label="0.00961538;1pkt 1fpkt"];
1671--4699[label="0.0183486;2pkt 2fpkt"];
1716--1733[label="0.733333;11pkt 11fpkt"];
1716--2315[label="0.0666667;1pkt 1fpkt"];
1716--2466[label="1;14pkt 14fpkt"];
1716--2478[label="0.666667;10pkt 10fpkt"];
1733--2466[label="0.714286;10pkt 10fpkt"];
1733--2478[label="1;16pkt 16fpkt"];
1807--3203[label="0.25;1pkt 1fpkt"];
1807--3379[label="0.111111;2pkt 2fpkt"];
1807--4447[label="0.111111;2pkt 2fpkt"];
2150--2315[label="0.594203;41pkt 41fpkt"];
2150--2347[label="0.26087;18pkt 18fpkt"];
2315--2329[label="0.783163;921pkt 921fpkt"];
2315--2346[label="0.0106383;1pkt 1fpkt"];
2315--2360[label="0.0105263;1pkt 1fpkt"];
2315--2432[label="0.0701754;4pkt 4fpkt"];
2315--2466[label="0.0714286;1pkt 1fpkt"];
2315--2509[label="0.00847458;1pkt 1fpkt"];
2315--2510[label="0.00552486;2pkt 2fpkt"];
2315--2542[label="0.192982;11pkt 11fpkt"];
2315--2552[label="0.0142857;1pkt 1fpkt"];
2315--2567[label="0.00862069;1pkt 1fpkt"];
2315--2642[label="0.0105263;1pkt 1fpkt"];
2315--2669[label="0.0603741;71pkt 71fpkt"];
2315--2765[label="0.0291262;3pkt 3fpkt"];
2315--2845[label="0.027027;2pkt 2fpkt"];
2315--2852[label="0.00819672;1pkt 1fpkt"];
2315--2912[label="0.111111;1pkt 1fpkt"];
2315--2956[label="0.142857;1pkt 1fpkt"];
2315--3000[label="0.0625;1pkt 1fpkt"];
2315--3065[label="0.00862069;1pkt 1fpkt"];
2315--3083[label="0.783163;921pkt 921fpkt"];
2315--3307[label="0.0140845;1pkt 1fpkt"];
2315--3511[label="0.00833333;1pkt 1fpkt"];
2315--3532[label="0.0909091;1pkt 1fpkt"];
2315--3598[label="0.025;1pkt 1fpkt"];
2315--3660[label="0.125;2pkt 2fpkt"];
2315--3714[label="0.01373;6pkt 6fpkt"];
2315--3744[label="0.0135135;1pkt 1fpkt"];
2315--3780[label="0.111111;1pkt 1fpkt"];
2315--3840[label="0.0238095;1pkt 1fpkt"];
2315--3889[label="0.0714286;1pkt 1fpkt"];
2315--3969[label="0.157143;11pkt 11fpkt"];
2315--4083[label="0.0222222;1pkt 1fpkt"];
2315--4116[label="0.00429185;1pkt 1fpkt"];
2315--4207[label="0.0291262;3pkt 3fpkt"];
2315--4238[label="0.027027;2pkt 2fpkt"];
2315--4284[label="0.142857;1pkt 1fpkt"];
2315--4334[label="0.783163;921pkt 921fpkt"];
2315--4499[label="0.00840336;1pkt 1fpkt"];
2315--4508[label="0.0833333;1pkt 1fpkt"];
2315--4563[label="0.133333;2pkt 2fpkt"];
2315--4599[label="0.125;1pkt 1fpkt"];
2315--4684[label="0.15942;11pkt 11fpkt"];
2315--4741[label="0.00431034;1pkt 1fpkt"];
2315--4786[label="0.0266667;2pkt 2fpkt"];
2315--4925[label="0.15942;11pkt 11fpkt"];
2329--2347[label="0.00309598;1pkt 1fpkt"];
2329--2425[label="0.0192308;1pkt 1fpkt"];
2329--2492[label="0.00276498;3pkt 3fpkt"];
2329--2513[label="0.00990099;1pkt 1fpkt"];
2329--2669[label="0.0524226;66pkt 66fpkt"];
2329--3083[label="1;1259pkt 1259fpkt"];
2329--4334[label="1;1259pkt 1259fpkt"];
2339--2679[label="0.0128205;1pkt 1fpkt"];
2339--2856[label="0.777778;7pkt 7fpkt"];
2339--3430[label="0.0128205;1pkt 1fpkt"];
2339--3660[label="0.0625;1pkt 1fpkt"];
2339--3699[label="0.4;4pkt 4fpkt"];
2339--4463[label="0.0128205;1pkt 1fpkt"];
2339--4563[label="0.0666667;1pkt 1fpkt"];
2339--4861[label="0.0128205;1pkt 1fpkt"];
2340--2520[label="0.0185185;2pkt 2fpkt"];
2340--2619[label="0.546296;59pkt 59fpkt"];
2340--2669[label="0.0648148;7pkt 7fpkt"];
2425--2871[label="0.0232558;1pkt 1fpkt"];
2425--2922[label="0.291667;7pkt 7fpkt"];
2425--3083[label="0.0192308;1pkt 1fpkt"];
2425--3218[label="0.030303;1pkt 1fpkt"];
2425--3579[label="0.0333333;1pkt 1fpkt"];
2425--3636[label="0.173077;9pkt 9fpkt"];
2425--3840[label="0.0238095;1pkt 1fpkt"];
2425--4077[label="0.0192308;1pkt 1fpkt"];
2425--4251[label="0.0227273;1pkt 1fpkt"];
2425--4270[label="0.291667;7pkt 7fpkt"];
2425--4334[label="0.0192308;1pkt 1fpkt"];
2425--4387[label="0.03125;1pkt 1fpkt"];
2425--4796[label="0.291667;7pkt 7fpkt"];
2466--2478[label="0.714286;10pkt 10fpkt"];
3083--4334[label="1;1930pkt 1930fpkt"];
3532--4508[label="1;11pkt 11fpkt"];
3660--4563[label="1;15pkt 15fpkt"];
3780--4599[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.227.252" src_ip="210.6.154.55" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_409{
style=filled;
color=gray75;
1423[label="208.138.186.123;s;1pkt 1fpkt", shape=diamond, color=yellow];
1489[label="52.19.18.215;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat409[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.138.186.123:1050, 169.189.200.36:6699}[33.3333%]&lt;BR/&gt;{52.19.18.215:3551, 169.189.200.36:6699}[33.3333%]&lt;BR/&gt;{52.19.18.215:6257, 169.189.200.36:6257}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (33.3333%)&lt;BR/&gt; 6257: (33.3333%)&lt;BR/&gt; 3551: (16.6667%)&lt;BR/&gt; 1050: (16.6667%)&gt;];
}
1423--2015[label="1;1pkt 1fpkt"];
1423--2334[label="1;1pkt 1fpkt"];
1489--2015[label="1;2pkt 2fpkt"];
1489--4005[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.200.36" dst_port="6257" src_ip="52.19.18.215" src_port="6257"/>
      <filter dst_ip="169.189.200.36" dst_port="6699" src_ip="52.19.18.215" src_port="3551"/>
      <filter dst_ip="169.189.200.36" dst_port="6699" src_ip="208.138.186.123" src_port="1050"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.955904,1.53643,999,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_410{
style=filled;
color=gray75;
46[label="200.149.48.71s;3pkt 3fpkt", shape=rectangle, color=red];
1061[label="200.149.48.71;s;7pkt 7fpkt", shape=diamond, color=yellow];
1301[label="129.24.215.163;d;24pkt 24fpkt", shape=diamond, color=yellow];
2345[label="200.149.48.71;s;7pkt 7fpkt", shape=hexagon, color=black];
3185[label="200.149.48.71;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3919[label="49.16.158.197;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4374[label="200.149.48.71;6pkt 6fpkt", shape=invtriangle, color=brown];
stat410[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:21, 129.24.215.163:*}[41.6667%]&lt;BR/&gt;{200.149.48.71:20, 129.24.215.163:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (35.9649%)&lt;BR/&gt; 21: (13.1579%)&lt;BR/&gt; 4671: (5.26316%)&lt;BR/&gt; 4665: (5.26316%)&lt;BR/&gt; 4698: (4.38596%)&gt;];
}
46--1061[label="1;3pkt 3fpkt"];
46--1301[label="1;3pkt 3fpkt"];
46--2345[label="1;3pkt 3fpkt"];
46--3185[label="1;3pkt 3fpkt"];
46--4374[label="0.666667;2pkt 2fpkt"];
1061--1301[label="1;7pkt 7fpkt"];
1061--2345[label="1;7pkt 7fpkt"];
1061--3185[label="1;7pkt 7fpkt"];
1061--4374[label="1;6pkt 6fpkt"];
1301--2345[label="1;7pkt 7fpkt"];
1301--3185[label="1;7pkt 7fpkt"];
1301--3919[label="1;3pkt 3fpkt"];
1301--4374[label="1;6pkt 6fpkt"];
2345--3185[label="1;7pkt 7fpkt"];
2345--4374[label="1;6pkt 6fpkt"];
3185--4374[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="129.24.215.163" src_port="21"/>
      <filter dst_ip="129.24.215.163" src_ip="200.149.48.71" src_port="20"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.895209,1.57226,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_411{
style=filled;
color=gray75;
1422[label="48.75.243.20;s;58pkt 58fpkt", shape=diamond, color=yellow];
2264[label="48.75.243.20;s;34pkt 34fpkt", shape=hexagon, color=black];
2350[label="175.85.186.224;d;84pkt 84fpkt", shape=hexagon, color=black];
2869[label="48.75.243.20;58pkt 58fpkt", shape=pentagon, color=darkviolet];
4249[label="48.75.243.20;58pkt 58fpkt", shape=invtriangle, color=brown];
stat411[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 175.85.186.224:*}[47.5177%]&lt;BR/&gt;{48.75.243.20:80, *:*}[40.4255%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.4041%)&lt;BR/&gt; 0: (7.19178%)&lt;BR/&gt; 4687: (0.856164%)&lt;BR/&gt; 57196: (0.684932%)&lt;BR/&gt; 57036: (0.684932%)&gt;];
}
1422--1665[label="0.5;1pkt 1fpkt"];
1422--1975[label="0.413793;24pkt 24fpkt"];
1422--2010[label="0.137931;8pkt 8fpkt"];
1422--2172[label="0.0172414;1pkt 1fpkt"];
1422--2264[label="1;34pkt 34fpkt"];
1422--2350[label="0.0344828;2pkt 2fpkt"];
1422--2619[label="0.293103;17pkt 17fpkt"];
1422--2669[label="0.0517241;3pkt 3fpkt"];
1422--2869[label="0.982759;57pkt 57fpkt"];
1422--4249[label="0.982759;57pkt 57fpkt"];
2264--2350[label="0.0588235;2pkt 2fpkt"];
2264--2619[label="0.411765;14pkt 14fpkt"];
2264--2669[label="0.0882353;3pkt 3fpkt"];
2264--2869[label="1;34pkt 34fpkt"];
2264--4249[label="1;34pkt 34fpkt"];
2350--2421[label="0.047619;4pkt 4fpkt"];
2350--2424[label="0.0119048;1pkt 1fpkt"];
2350--2510[label="0.0238095;2pkt 2fpkt"];
2350--2669[label="0.0952381;8pkt 8fpkt"];
2350--2754[label="0.0119048;1pkt 1fpkt"];
2350--2869[label="0.0344828;2pkt 2fpkt"];
2350--2935[label="0.142857;6pkt 6fpkt"];
2350--3714[label="0.0595238;5pkt 5fpkt"];
2350--3798[label="0.0555556;1pkt 1fpkt"];
2350--3893[label="0.0178571;1pkt 1fpkt"];
2350--3920[label="0.5;7pkt 7fpkt"];
2350--3960[label="0.0163934;1pkt 1fpkt"];
2350--4119[label="0.015873;1pkt 1fpkt"];
2350--4249[label="0.0344828;2pkt 2fpkt"];
2350--4651[label="0.0178571;1pkt 1fpkt"];
2350--4679[label="0.0166667;1pkt 1fpkt"];
2350--4743[label="0.015873;1pkt 1fpkt"];
2869--4249[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter src_ip="48.75.243.20" src_port="80"/>
      <filter dst_ip="175.85.186.224" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_413{
style=filled;
color=gray75;
1570[label="51.158.99.95;s;146pkt 146fpkt", shape=diamond, color=yellow];
1954[label="175.84.183.220;d;11pkt 11fpkt", shape=diamond, color=yellow];
stat413[shape=component, label=&lt;Rules:&lt;BR/&gt;{51.158.99.95:80, 198.160.55.175:*}[24.5161%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.0446%)&lt;BR/&gt; 1863: (0.955414%)&lt;BR/&gt; 1656: (0.636943%)&lt;BR/&gt; 1447: (0.636943%)&lt;BR/&gt; 1446: (0.636943%)&gt;];
}
1570--1581[label="0.0833333;6pkt 6fpkt"];
1570--1954[label="0.181818;2pkt 2fpkt"];
1570--1973[label="0.0342466;5pkt 5fpkt"];
1570--1975[label="0.0410959;6pkt 6fpkt"];
1570--2120[label="0.0410959;6pkt 6fpkt"];
1570--2315[label="0.00684932;1pkt 1fpkt"];
1570--2346[label="1;94pkt 94fpkt"];
1570--2517[label="0.0925926;5pkt 5fpkt"];
1570--2611[label="0.00684932;1pkt 1fpkt"];
1570--2619[label="0.0342466;5pkt 5fpkt"];
1570--2669[label="0.0684932;10pkt 10fpkt"];
1954--2986[label="0.0909091;1pkt 1fpkt"];
1954--3581[label="0.1;1pkt 1fpkt"];
1954--4529[label="0.1;1pkt 1fpkt"];
1954--4884[label="0.0909091;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.160.55.175" src_ip="51.158.99.95" src_port="80"/>
    </slice>
    <from sec="1054875602" usec="0"/>
    <to sec="1054876399" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_414{
style=filled;
color=gray75;
1358[label="198.128.180.136;d;6pkt 6fpkt", shape=diamond, color=yellow];
1359[label="48.204.160.86;s;6pkt 6fpkt", shape=diamond, color=yellow];
2363[label="198.128.180.136;d;5pkt 5fpkt", shape=hexagon, color=black];
stat414[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.204.160.86:*, 198.128.180.136:119}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 119: (50%)&lt;BR/&gt; 4838: (8.82353%)&lt;BR/&gt; 4823: (8.82353%)&lt;BR/&gt; 4693: (8.82353%)&lt;BR/&gt; 4665: (8.82353%)&gt;];
}
1358--1359[label="1;6pkt 6fpkt"];
1358--2363[label="1;5pkt 5fpkt"];
1359--2363[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="198.128.180.136" dst_port="119" src_ip="48.204.160.86"/>
    </slice>
    <from sec="1054875638" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_415{
style=filled;
color=gray75;
1371[label="218.116.56.32;d;1pkt 1fpkt", shape=diamond, color=yellow];
2370[label="218.116.56.32;d;1pkt 1fpkt", shape=hexagon, color=black];
stat415[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.104.120.101:4338, 218.116.56.32:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4338: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1371--2370[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="218.116.56.32" dst_port="80" src_ip="199.104.120.101" src_port="4338"/>
    </slice>
    <from sec="1054875759" usec="0"/>
    <to sec="1054876160" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770739,1.60066,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_416{
style=filled;
color=gray75;
1622[label="169.9.116.12;d;93pkt 93fpkt", shape=diamond, color=yellow];
1623[label="220.24.15.150;s;92pkt 92fpkt", shape=diamond, color=yellow];
2375[label="169.9.116.12;d;85pkt 85fpkt", shape=hexagon, color=black];
2376[label="220.24.15.150;s;77pkt 77fpkt", shape=hexagon, color=black];
3654[label="220.24.15.150;105pkt 105fpkt", shape=pentagon, color=darkviolet];
stat416[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.24.15.150:80, 169.9.116.12:*}[86.7925%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7788%)&lt;BR/&gt; 1762: (0.553097%)&lt;BR/&gt; 1761: (0.553097%)&lt;BR/&gt; 1760: (0.553097%)&lt;BR/&gt; 1759: (0.553097%)&gt;];
}
1622--1623[label="1;92pkt 92fpkt"];
1622--2375[label="1;85pkt 85fpkt"];
1622--2376[label="1;77pkt 77fpkt"];
1622--3654[label="0.989247;92pkt 92fpkt"];
1623--2375[label="0.988235;84pkt 84fpkt"];
1623--2376[label="1;77pkt 77fpkt"];
1623--3654[label="1;92pkt 92fpkt"];
2375--2376[label="1;77pkt 77fpkt"];
2375--3654[label="0.988235;84pkt 84fpkt"];
2376--3654[label="1;77pkt 77fpkt"];
</description>
    <slice>
      <filter dst_ip="169.9.116.12" src_ip="220.24.15.150" src_port="80"/>
    </slice>
    <from sec="1054875688" usec="0"/>
    <to sec="1054876393" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.895209,1.57226,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_417{
style=filled;
color=gray75;
1633[label="175.84.61.134;d;32pkt 32fpkt", shape=diamond, color=yellow];
2378[label="175.84.61.134;d;32pkt 32fpkt", shape=hexagon, color=black];
2755[label="179.192.209.4;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4203[label="179.192.209.4;15pkt 15fpkt", shape=invtriangle, color=brown];
stat417[shape=component, label=&lt;Rules:&lt;BR/&gt;{179.192.209.8:*, 175.84.61.134:*}[51.1628%]&lt;BR/&gt;{179.192.209.4:80, 175.85.38.17:*}[25.5814%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (22.3404%)&lt;BR/&gt; 21: (5.31915%)&lt;BR/&gt; 32769: (4.25532%)&lt;BR/&gt; 53: (4.25532%)&lt;BR/&gt; 55669: (2.12766%)&gt;];
}
1633--2378[label="1;32pkt 32fpkt"];
1633--2755[label="0.266667;4pkt 4fpkt"];
1633--2780[label="0.814815;22pkt 22fpkt"];
1633--4203[label="0.266667;4pkt 4fpkt"];
2378--2755[label="0.266667;4pkt 4fpkt"];
2378--2780[label="0.814815;22pkt 22fpkt"];
2378--4203[label="0.266667;4pkt 4fpkt"];
2755--4203[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.61.134" src_ip="179.192.209.8"/>
      <filter dst_ip="175.85.38.17" src_ip="179.192.209.4" src_port="80"/>
    </slice>
    <from sec="1054876006" usec="0"/>
    <to sec="1054876156" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_418{
style=filled;
color=gray75;
991[label="198.137.12.157;s;39pkt 39fpkt", shape=diamond, color=yellow];
992[label="176.107.161.7;d;39pkt 39fpkt", shape=diamond, color=yellow];
2103[label="176.107.161.7;d;20pkt 20fpkt", shape=hexagon, color=black];
2393[label="198.137.12.157;s;35pkt 35fpkt", shape=hexagon, color=black];
stat418[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.137.12.157:80, 176.107.161.7:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1835: (1.50376%)&lt;BR/&gt; 1834: (1.50376%)&lt;BR/&gt; 1833: (1.50376%)&lt;BR/&gt; 1782: (1.50376%)&gt;];
}
991--992[label="1;39pkt 39fpkt"];
991--2103[label="1;20pkt 20fpkt"];
991--2393[label="1;35pkt 35fpkt"];
991--2669[label="0.179487;7pkt 7fpkt"];
992--2103[label="1;20pkt 20fpkt"];
992--2393[label="1;35pkt 35fpkt"];
992--2669[label="0.179487;7pkt 7fpkt"];
2103--2393[label="1;20pkt 20fpkt"];
2103--2669[label="0.35;7pkt 7fpkt"];
2393--2669[label="0.2;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="176.107.161.7" src_ip="198.137.12.157" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_419{
style=filled;
color=gray75;
1148[label="208.128.60.187;d;1pkt 1fpkt", shape=diamond, color=yellow];
2394[label="208.128.60.187;d;1pkt 1fpkt", shape=hexagon, color=black];
stat419[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.107.207.107:4161, 208.128.60.187:1760}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4161: (50%)&lt;BR/&gt; 1760: (50%)&gt;];
}
1148--2394[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.128.60.187" dst_port="1760" src_ip="176.107.207.107" src_port="4161"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876419" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_420{
style=filled;
color=gray75;
1541[label="134.5.183.4;d;1pkt 1fpkt", shape=diamond, color=yellow];
1542[label="211.160.163.116;s;1pkt 1fpkt", shape=diamond, color=yellow];
2395[label="134.5.183.4;d;1pkt 1fpkt", shape=hexagon, color=black];
stat420[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.160.163.116:49842, 134.5.183.4:1615}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49842: (50%)&lt;BR/&gt; 1615: (50%)&gt;];
}
1541--1542[label="1;1pkt 1fpkt"];
1541--2395[label="1;1pkt 1fpkt"];
1542--2395[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.5.183.4" dst_port="1615" src_ip="211.160.163.116" src_port="49842"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08459,1.63248,999,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_421{
style=filled;
color=gray75;
1661[label="52.55.170.57;s;2pkt 2fpkt", shape=diamond, color=yellow];
2397[label="52.55.170.57;s;2pkt 2fpkt", shape=hexagon, color=black];
3103[label="52.55.170.57;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4827[label="52.55.170.57;1pkt 1fpkt", shape=invhouse, color=bisque];
stat421[shape=component, label=&lt;Rules:&lt;BR/&gt;{52.55.170.57:64457, 199.104.100.203:1214}[50%]&lt;BR/&gt;{52.55.170.57:64794, 199.104.100.203:1214}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 64457: (33.3333%)&lt;BR/&gt; 64794: (16.6667%)&gt;];
}
1661--2397[label="1;2pkt 2fpkt"];
1661--3103[label="1;1pkt 1fpkt"];
1661--4827[label="1;1pkt 1fpkt"];
2397--3103[label="1;1pkt 1fpkt"];
2397--4827[label="1;1pkt 1fpkt"];
3103--4827[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.104.100.203" dst_port="1214" src_ip="52.55.170.57" src_port="64794"/>
      <filter dst_ip="199.104.100.203" dst_port="1214" src_ip="52.55.170.57" src_port="64457"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_422{
style=filled;
color=gray75;
1664[label="219.35.200.103;s;1pkt 1fpkt", shape=diamond, color=yellow];
2400[label="219.35.200.103;s;1pkt 1fpkt", shape=hexagon, color=black];
stat422[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.35.200.103:4300, 199.104.100.203:1214}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4300: (50%)&lt;BR/&gt; 1214: (50%)&gt;];
}
1664--2400[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.104.100.203" dst_port="1214" src_ip="219.35.200.103" src_port="4300"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08459,1.63248,999,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_423{
style=filled;
color=gray75;
975[label="199.98.106.103;d;5pkt 5fpkt", shape=diamond, color=yellow];
1017[label="37.145.72.186;s;3pkt 3fpkt", shape=diamond, color=yellow];
1538[label="36.61.101.236;s;1pkt 1fpkt", shape=diamond, color=yellow];
2402[label="37.145.72.186;s;3pkt 3fpkt", shape=hexagon, color=black];
3559[label="192.42.4.134;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3853[label="37.145.72.186;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4909[label="37.145.72.186;2pkt 2fpkt", shape=invhouse, color=bisque];
stat423[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.42.4.134:1863, *:*}[70.5882%]&lt;BR/&gt;{*:*, 199.98.106.103:*}[29.4118%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (27.5862%)&lt;BR/&gt; 1863: (22.4138%)&lt;BR/&gt; 6699: (13.7931%)&lt;BR/&gt; 2320: (8.62069%)&lt;BR/&gt; 1291: (3.44828%)&gt;];
}
975--1017[label="0.666667;2pkt 2fpkt"];
975--1538[label="1;1pkt 1fpkt"];
975--2402[label="0.666667;2pkt 2fpkt"];
975--3559[label="0.2;1pkt 1fpkt"];
975--3853[label="0.666667;2pkt 2fpkt"];
975--4909[label="1;2pkt 2fpkt"];
1017--2402[label="1;3pkt 3fpkt"];
1017--3853[label="1;3pkt 3fpkt"];
1017--4909[label="1;2pkt 2fpkt"];
2402--3853[label="1;3pkt 3fpkt"];
2402--4909[label="1;2pkt 2fpkt"];
3853--4909[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="199.98.106.103"/>
      <filter src_ip="192.42.4.134" src_port="1863"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_424{
style=filled;
color=gray75;
1549[label="99.205.15.115;s;1pkt 1fpkt", shape=diamond, color=yellow];
2406[label="99.205.15.115;s;1pkt 1fpkt", shape=hexagon, color=black];
stat424[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.205.15.115:3362, 169.9.41.97:2863}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3362: (50%)&lt;BR/&gt; 2863: (50%)&gt;];
}
1549--2106[label="1;1pkt 1fpkt"];
1549--2406[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.9.41.97" dst_port="2863" src_ip="99.205.15.115" src_port="3362"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_425{
style=filled;
color=gray75;
1669[label="129.24.204.129;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat425[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.142.24.167:6667, 129.24.204.129:18585}[50%]&lt;BR/&gt;{51.147.25.211:5190, 129.24.204.129:1638}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 18585: (25%)&lt;BR/&gt; 6667: (25%)&lt;BR/&gt; 5190: (25%)&lt;BR/&gt; 1638: (25%)&gt;];
}
1669--1770[label="1;1pkt 1fpkt"];
1669--2413[label="1;2pkt 2fpkt"];
1669--2655[label="1;2pkt 2fpkt"];
1669--3758[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="129.24.204.129" dst_port="1638" src_ip="51.147.25.211" src_port="5190"/>
      <filter dst_ip="129.24.204.129" dst_port="18585" src_ip="216.142.24.167" src_port="6667"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.895209,1.57226,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_426{
style=filled;
color=gray75;
1170[label="162.81.29.83;s;4pkt 4fpkt", shape=diamond, color=yellow];
2415[label="162.81.29.83;s;4pkt 4fpkt", shape=hexagon, color=black];
3278[label="162.81.29.83;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4407[label="162.81.29.83;4pkt 4fpkt", shape=invtriangle, color=brown];
stat426[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.81.29.83:1391, 199.104.100.203:1214}[25%]&lt;BR/&gt;{162.81.29.83:1392, 199.104.100.203:1214}[25%]&lt;BR/&gt;{162.81.29.83:1394, 199.104.100.203:1214}[25%]&lt;BR/&gt;{162.81.29.83:65492, 199.104.100.203:1214}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 1394: (13.3333%)&lt;BR/&gt; 1392: (13.3333%)&lt;BR/&gt; 1391: (13.3333%)&lt;BR/&gt; 65492: (10%)&gt;];
}
1170--2415[label="1;4pkt 4fpkt"];
1170--3278[label="1;3pkt 3fpkt"];
1170--4407[label="1;4pkt 4fpkt"];
2415--3278[label="1;3pkt 3fpkt"];
2415--4407[label="1;4pkt 4fpkt"];
3278--4407[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="199.104.100.203" dst_port="1214" src_ip="162.81.29.83" src_port="65492"/>
      <filter dst_ip="199.104.100.203" dst_port="1214" src_ip="162.81.29.83" src_port="1394"/>
      <filter dst_ip="199.104.100.203" dst_port="1214" src_ip="162.81.29.83" src_port="1392"/>
      <filter dst_ip="199.104.100.203" dst_port="1214" src_ip="162.81.29.83" src_port="1391"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876403" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_427{
style=filled;
color=gray75;
1034[label="199.174.144.100;d;6pkt 6fpkt", shape=diamond, color=yellow];
1035[label="211.38.175.7;s;1pkt 1fpkt", shape=diamond, color=yellow];
1776[label="220.148.107.72;s;1pkt 1fpkt", shape=diamond, color=yellow];
2046[label="199.174.144.100;d;3pkt 3fpkt", shape=hexagon, color=black];
2416[label="211.38.175.7;s;1pkt 1fpkt", shape=hexagon, color=black];
stat427[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6699, 199.174.144.100:*}[50%]&lt;BR/&gt;{87.7.89.28:80, 199.174.144.100:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (25%)&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 4421: (16.6667%)&lt;BR/&gt; 3691: (12.5%)&lt;BR/&gt; 1242: (8.33333%)&gt;];
}
1034--1035[label="1;1pkt 1fpkt"];
1034--1776[label="1;1pkt 1fpkt"];
1034--2046[label="1;3pkt 3fpkt"];
1034--2416[label="1;1pkt 1fpkt"];
1034--2669[label="0.166667;1pkt 1fpkt"];
1035--2046[label="1;1pkt 1fpkt"];
1035--2416[label="1;1pkt 1fpkt"];
1035--2669[label="1;1pkt 1fpkt"];
1776--2046[label="1;1pkt 1fpkt"];
2046--2416[label="1;1pkt 1fpkt"];
2046--2669[label="0.333333;1pkt 1fpkt"];
2416--2669[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.174.144.100" src_port="6699"/>
      <filter dst_ip="199.174.144.100" src_ip="87.7.89.28" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770739,1.60066,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_428{
style=filled;
color=gray75;
1190[label="199.200.16.242;s;3pkt 3fpkt", shape=diamond, color=yellow];
1303[label="199.98.117.75;d;59pkt 59fpkt", shape=diamond, color=yellow];
1567[label="199.98.117.65;d;2pkt 2fpkt", shape=diamond, color=yellow];
1885[label="199.98.117.74;d;1pkt 1fpkt", shape=diamond, color=yellow];
2210[label="199.200.16.242;s;3pkt 3fpkt", shape=hexagon, color=black];
2426[label="199.98.117.65;d;2pkt 2fpkt", shape=hexagon, color=black];
4126[label="199.200.16.242;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat428[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.17.196.161:80, 199.98.117.75:*}[29.0323%]&lt;BR/&gt;{208.32.126.164:80, 199.98.117.75:*}[24.1935%]&lt;BR/&gt;{208.32.126.166:80, 199.98.117.75:*}[24.1935%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.6712%)&lt;BR/&gt; 9013: (8.90411%)&lt;BR/&gt; 1059: (3.42466%)&lt;BR/&gt; 2531: (2.73973%)&lt;BR/&gt; 1144: (2.73973%)&gt;];
}
1190--1303[label="0.333333;1pkt 1fpkt"];
1190--1567[label="0.5;1pkt 1fpkt"];
1190--1885[label="1;1pkt 1fpkt"];
1190--2210[label="1;3pkt 3fpkt"];
1190--2426[label="0.5;1pkt 1fpkt"];
1190--4126[label="1;3pkt 3fpkt"];
1303--1804[label="0.305085;18pkt 18fpkt"];
1303--2210[label="0.333333;1pkt 1fpkt"];
1303--2669[label="0.0847458;5pkt 5fpkt"];
1303--3728[label="0.047619;2pkt 2fpkt"];
1303--3752[label="0.3;15pkt 15fpkt"];
1303--4126[label="0.333333;1pkt 1fpkt"];
1303--4588[label="0.047619;2pkt 2fpkt"];
1303--4898[label="0.047619;2pkt 2fpkt"];
1567--2210[label="0.5;1pkt 1fpkt"];
1567--2426[label="1;2pkt 2fpkt"];
1567--4126[label="0.5;1pkt 1fpkt"];
1885--2210[label="1;1pkt 1fpkt"];
1885--4126[label="1;1pkt 1fpkt"];
2210--2426[label="0.5;1pkt 1fpkt"];
2210--4126[label="1;3pkt 3fpkt"];
2426--4126[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.98.117.75" src_ip="84.17.196.161" src_port="80"/>
      <filter dst_ip="199.98.117.75" src_ip="208.32.126.166" src_port="80"/>
      <filter dst_ip="199.98.117.75" src_ip="208.32.126.164" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_429{
style=filled;
color=gray75;
918[label="175.84.206.143;d;25pkt 25fpkt", shape=diamond, color=yellow];
2368[label="176.107.182.210;d;54pkt 54fpkt", shape=hexagon, color=black];
stat429[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 176.107.182.210:*}[62.0253%]&lt;BR/&gt;{*:*, 175.84.206.143:*}[31.6456%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.8734%)&lt;BR/&gt; 0: (6.32911%)&lt;BR/&gt; 53: (3.79747%)&lt;BR/&gt; 1863: (1.89873%)&lt;BR/&gt; 1082: (1.89873%)&gt;];
}
918--919[label="0.857143;6pkt 6fpkt"];
918--1580[label="0.04;1pkt 1fpkt"];
918--1585[label="0.04;1pkt 1fpkt"];
918--1675[label="0.04;1pkt 1fpkt"];
918--2220[label="1;25pkt 25fpkt"];
918--2567[label="0.04;1pkt 1fpkt"];
918--2669[label="0.16;4pkt 4fpkt"];
918--2793[label="0.08;2pkt 2fpkt"];
918--2841[label="0.04;1pkt 1fpkt"];
918--2852[label="0.04;1pkt 1fpkt"];
918--3021[label="0.04;1pkt 1fpkt"];
918--3031[label="0.04;1pkt 1fpkt"];
918--4315[label="0.04;1pkt 1fpkt"];
918--4814[label="0.04;1pkt 1fpkt"];
2368--2439[label="0.0185185;1pkt 1fpkt"];
2368--2509[label="0.037037;2pkt 2fpkt"];
2368--2567[label="0.0185185;1pkt 1fpkt"];
2368--2643[label="1;51pkt 51fpkt"];
2368--2852[label="0.0185185;1pkt 1fpkt"];
2368--3074[label="0.0185185;1pkt 1fpkt"];
2368--3339[label="0.037037;2pkt 2fpkt"];
2368--3504[label="0.0185185;1pkt 1fpkt"];
2368--3753[label="0.0185185;1pkt 1fpkt"];
2368--3799[label="0.0277778;1pkt 1fpkt"];
2368--4497[label="0.0185185;1pkt 1fpkt"];
2368--4593[label="0.0185185;1pkt 1fpkt"];
2368--4607[label="0.0285714;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.206.143"/>
      <filter dst_ip="176.107.182.210" src_port="80"/>
    </slice>
    <from sec="1054875605" usec="0"/>
    <to sec="1054876241" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_432{
style=filled;
color=gray75;
932[label="175.85.176.112;d;18pkt 18fpkt", shape=diamond, color=yellow];
933[label="210.153.135.56;s;1pkt 1fpkt", shape=diamond, color=yellow];
2003[label="175.85.176.112;d;11pkt 11fpkt", shape=hexagon, color=black];
2448[label="210.153.135.56;s;1pkt 1fpkt", shape=hexagon, color=black];
stat432[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.157.72.202:80, 175.85.176.112:*}[72.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.3226%)&lt;BR/&gt; 62770: (6.45161%)&lt;BR/&gt; 20072: (6.45161%)&lt;BR/&gt; 63959: (3.22581%)&lt;BR/&gt; 62832: (3.22581%)&gt;];
}
932--933[label="1;1pkt 1fpkt"];
932--1130[label="0.388889;7pkt 7fpkt"];
932--2003[label="1;11pkt 11fpkt"];
932--2448[label="1;1pkt 1fpkt"];
932--2669[label="0.222222;4pkt 4fpkt"];
932--3266[label="0.0555556;1pkt 1fpkt"];
932--4287[label="0.0555556;1pkt 1fpkt"];
932--4402[label="0.0555556;1pkt 1fpkt"];
933--2003[label="1;1pkt 1fpkt"];
933--2448[label="1;1pkt 1fpkt"];
2003--2448[label="1;1pkt 1fpkt"];
2003--2669[label="0.363636;4pkt 4fpkt"];
2003--4287[label="0.0909091;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.85.176.112" src_ip="210.157.72.202" src_port="80"/>
    </slice>
    <from sec="1054875619" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_433{
style=filled;
color=gray75;
1126[label="209.180.230.137;s;9232pkt 9232fpkt", shape=diamond, color=yellow];
stat433[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.180.230.137:2322, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2322: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
1126--1708[label="0.0142857;1pkt 1fpkt"];
1126--2157[label="1;6833pkt 6833fpkt"];
1126--2456[label="0.0142857;1pkt 1fpkt"];
1126--2665[label="0.0142857;1pkt 1fpkt"];
1126--2678[label="0.0170396;99pkt 99fpkt"];
1126--2685[label="0.0932292;621pkt 621fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="209.180.230.137" src_port="2322"/>
    </slice>
    <from sec="1054875729" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_435{
style=filled;
color=gray75;
1494[label="198.208.61.8;d;1pkt 1fpkt", shape=diamond, color=yellow];
2464[label="198.208.61.8;d;1pkt 1fpkt", shape=hexagon, color=black];
stat435[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.107.207.107:4635, 198.208.61.8:1214}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4635: (50%)&lt;BR/&gt; 1214: (50%)&gt;];
}
1494--2464[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.208.61.8" dst_port="1214" src_ip="176.107.207.107" src_port="4635"/>
    </slice>
    <from sec="1054875731" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_437{
style=filled;
color=gray75;
13[label="200.88.66.20s;1pkt 1fpkt", shape=rectangle, color=red];
stat437[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.88.66.20:80, 199.98.139.199:3674}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3674: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
13--737[label="1;1pkt 1fpkt"];
13--1738[label="1;1pkt 1fpkt"];
13--2485[label="1;1pkt 1fpkt"];
13--2492[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.98.139.199" dst_port="3674" src_ip="200.88.66.20" src_port="80"/>
    </slice>
    <from sec="1054876143" usec="0"/>
    <to sec="1054876151" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840471,1.56547,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_440{
style=filled;
color=gray75;
50[label="213.137.71.73s;2pkt 2fpkt", shape=rectangle, color=red];
758[label="213.137.71.73;s;1pkt 1fpkt", shape=diamond, color=yellow];
788[label="213.162.226.41;s;2pkt 2fpkt", shape=diamond, color=yellow];
961[label="169.9.105.14;d;70pkt 70fpkt", shape=diamond, color=yellow];
1674[label="221.132.139.68;s;1pkt 1fpkt", shape=diamond, color=yellow];
1726[label="39.8.35.73;s;1pkt 1fpkt", shape=diamond, color=yellow];
1784[label="221.43.29.54;s;1pkt 1fpkt", shape=diamond, color=yellow];
2422[label="221.132.139.68;s;1pkt 1fpkt", shape=hexagon, color=black];
2494[label="169.9.105.14;d;68pkt 68fpkt", shape=hexagon, color=black];
3164[label="221.132.139.68;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3204[label="39.8.35.73;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat440[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:4662, 169.9.105.14:*}[50.7042%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (27.8523%)&lt;BR/&gt; 2234: (14.094%)&lt;BR/&gt; 3094: (3.3557%)&lt;BR/&gt; 8880: (2.01342%)&lt;BR/&gt; 3982: (1.67785%)&gt;];
}
50--703[label="0.5;1pkt 1fpkt"];
50--758[label="1;1pkt 1fpkt"];
50--961[label="0.5;1pkt 1fpkt"];
50--1726[label="1;1pkt 1fpkt"];
50--2494[label="0.5;1pkt 1fpkt"];
50--3204[label="1;1pkt 1fpkt"];
758--961[label="1;1pkt 1fpkt"];
758--2494[label="1;1pkt 1fpkt"];
788--961[label="1;2pkt 2fpkt"];
788--2494[label="1;2pkt 2fpkt"];
961--1674[label="1;1pkt 1fpkt"];
961--1784[label="1;1pkt 1fpkt"];
961--2422[label="1;1pkt 1fpkt"];
961--2494[label="1;68pkt 68fpkt"];
961--3164[label="1;1pkt 1fpkt"];
1674--2422[label="1;1pkt 1fpkt"];
1674--2494[label="1;1pkt 1fpkt"];
1674--3164[label="1;1pkt 1fpkt"];
1726--3204[label="1;1pkt 1fpkt"];
1784--2494[label="1;1pkt 1fpkt"];
2422--2494[label="1;1pkt 1fpkt"];
2422--3164[label="1;1pkt 1fpkt"];
2494--3164[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.9.105.14" src_port="4662"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_441{
style=filled;
color=gray75;
1959[label="53.1.125.92;s;46pkt 46fpkt", shape=diamond, color=yellow];
stat441[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.1.125.92:80, 169.189.85.74:*}[97.8261%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.913%)&lt;BR/&gt; 32833: (1.08696%)&lt;BR/&gt; 3909: (1.08696%)&lt;BR/&gt; 3905: (1.08696%)&lt;BR/&gt; 3900: (1.08696%)&gt;];
}
1959--3334[label="1;45pkt 45fpkt"];
1959--4430[label="1;46pkt 46fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.85.74" src_ip="53.1.125.92" src_port="80"/>
    </slice>
    <from sec="1054876399" usec="0"/>
    <to sec="1054876426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_442{
style=filled;
color=gray75;
1208[label="169.189.227.225;d;92pkt 92fpkt", shape=diamond, color=yellow];
stat442[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 169.189.227.225:*}[43.4783%]&lt;BR/&gt;{*:53, 169.189.227.225:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (21.7391%)&lt;BR/&gt; 53: (17.3913%)&lt;BR/&gt; 0: (9.78261%)&lt;BR/&gt; 1863: (2.71739%)&lt;BR/&gt; 33436: (2.17391%)&gt;];
}
1208--1440[label="0.0125;1pkt 1fpkt"];
1208--1454[label="0.0108696;1pkt 1fpkt"];
1208--1487[label="0.09375;3pkt 3fpkt"];
1208--1779[label="0.0108696;1pkt 1fpkt"];
1208--2038[label="0.0108696;1pkt 1fpkt"];
1208--2185[label="0.0869565;8pkt 8fpkt"];
1208--2281[label="0.0108696;1pkt 1fpkt"];
1208--2288[label="1;90pkt 90fpkt"];
1208--2508[label="0.0266667;2pkt 2fpkt"];
1208--2509[label="0.0108696;1pkt 1fpkt"];
1208--2681[label="0.0543478;5pkt 5fpkt"];
1208--2690[label="0.0543478;5pkt 5fpkt"];
1208--2702[label="0.0543478;5pkt 5fpkt"];
1208--2710[label="0.0543478;5pkt 5fpkt"];
1208--2790[label="0.166667;1pkt 1fpkt"];
1208--2871[label="0.0232558;1pkt 1fpkt"];
1208--3021[label="0.0588235;3pkt 3fpkt"];
1208--3408[label="0.0147059;1pkt 1fpkt"];
1208--3744[label="0.0135135;1pkt 1fpkt"];
1208--3761[label="0.0909091;3pkt 3fpkt"];
1208--3775[label="0.0217391;2pkt 2fpkt"];
1208--4251[label="0.0227273;1pkt 1fpkt"];
1208--4595[label="0.09375;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.227.225" src_port="80"/>
      <filter dst_ip="169.189.227.225" src_port="53"/>
    </slice>
    <from sec="1054875606" usec="0"/>
    <to sec="1054876409" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887684,1.67921,901,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_443{
style=filled;
color=gray75;
3113[label="50.85.144.59;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4829[label="50.85.144.59;1pkt 1fpkt", shape=invhouse, color=bisque];
stat443[shape=component, label=&lt;Rules:&lt;BR/&gt;{50.85.144.59:443, 169.189.205.148:3057}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3057: (50%)&lt;BR/&gt; 443: (50%)&gt;];
}
3113--4344[label="1;1pkt 1fpkt"];
3113--4829[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.205.148" dst_port="3057" src_ip="50.85.144.59" src_port="443"/>
    </slice>
    <from sec="1054876500" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_444{
style=filled;
color=gray75;
1788[label="196.228.174.4;s;1pkt 1fpkt", shape=diamond, color=yellow];
2514[label="196.228.174.4;s;1pkt 1fpkt", shape=hexagon, color=black];
stat444[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.228.174.4:6881, 175.85.30.175:61749}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61749: (50%)&lt;BR/&gt; 6881: (50%)&gt;];
}
1788--2514[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.85.30.175" dst_port="61749" src_ip="196.228.174.4" src_port="6881"/>
    </slice>
    <from sec="1054875604" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.895209,1.57226,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_445{
style=filled;
color=gray75;
1471[label="192.42.6.54;s;138pkt 138fpkt", shape=diamond, color=yellow];
1685[label="199.98.139.15;d;51pkt 51fpkt", shape=diamond, color=yellow];
1785[label="192.42.2.152;s;10pkt 10fpkt", shape=diamond, color=yellow];
2560[label="192.42.2.152;s;10pkt 10fpkt", shape=hexagon, color=black];
3515[label="192.42.2.128;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3653[label="192.42.2.150;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3793[label="192.42.2.173;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3985[label="192.42.2.211;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4560[label="192.42.2.150;10pkt 10fpkt", shape=invtriangle, color=brown];
stat445[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.42.6.54:1863, *:*}[48.2609%]&lt;BR/&gt;{*:1863, 199.98.139.15:*}[22.1739%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (44.8276%)&lt;BR/&gt; 80: (5.17241%)&lt;BR/&gt; 1036: (0.766284%)&lt;BR/&gt; 1035: (0.766284%)&lt;BR/&gt; 1485: (0.574713%)&gt;];
}
1471--1530[label="0.025641;1pkt 1fpkt"];
1471--1593[label="0.00990099;1pkt 1fpkt"];
1471--1613[label="0.0116279;1pkt 1fpkt"];
1471--1616[label="0.00934579;1pkt 1fpkt"];
1471--1624[label="0.00943396;1pkt 1fpkt"];
1471--1685[label="0.0196078;1pkt 1fpkt"];
1471--1973[label="0.0144928;2pkt 2fpkt"];
1471--1975[label="0.00724638;1pkt 1fpkt"];
1471--1988[label="0.0144928;2pkt 2fpkt"];
1471--2056[label="0.0144928;2pkt 2fpkt"];
1471--2128[label="0.0147059;1pkt 1fpkt"];
1471--2142[label="0.0169492;1pkt 1fpkt"];
1471--2252[label="0.0507246;7pkt 7fpkt"];
1471--2308[label="0.025641;1pkt 1fpkt"];
1471--2358[label="0.0140845;1pkt 1fpkt"];
1471--2368[label="0.0185185;1pkt 1fpkt"];
1471--2439[label="1;119pkt 119fpkt"];
1471--2519[label="0.0434783;1pkt 1fpkt"];
1471--2525[label="0.00952381;1pkt 1fpkt"];
1471--2611[label="0.0144928;2pkt 2fpkt"];
1471--2619[label="0.00724638;1pkt 1fpkt"];
1471--2643[label="0.0196078;1pkt 1fpkt"];
1471--2669[label="0.0289855;4pkt 4fpkt"];
1471--3074[label="0.992754;137pkt 137fpkt"];
1685--1785[label="0.1;1pkt 1fpkt"];
1685--2439[label="0.0196078;1pkt 1fpkt"];
1685--2560[label="0.1;1pkt 1fpkt"];
1685--3074[label="0.0196078;1pkt 1fpkt"];
1685--3515[label="0.333333;3pkt 3fpkt"];
1685--3605[label="0.0769231;1pkt 1fpkt"];
1685--3611[label="0.111111;1pkt 1fpkt"];
1685--3653[label="0.0909091;1pkt 1fpkt"];
1685--3793[label="0.235294;4pkt 4fpkt"];
1685--3848[label="0.0909091;1pkt 1fpkt"];
1685--3973[label="0.166667;1pkt 1fpkt"];
1685--3985[label="0.2;1pkt 1fpkt"];
1685--4542[label="0.0769231;1pkt 1fpkt"];
1685--4543[label="0.125;1pkt 1fpkt"];
1685--4560[label="0.1;1pkt 1fpkt"];
1785--1846[label="0.1;1pkt 1fpkt"];
1785--2560[label="1;10pkt 10fpkt"];
3653--4560[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="192.42.6.54" src_port="1863"/>
      <filter dst_ip="199.98.139.15" src_port="1863"/>
    </slice>
    <from sec="1054875602" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.895209,1.57226,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_446{
style=filled;
color=gray75;
1714[label="210.200.144.133;s;25pkt 25fpkt", shape=diamond, color=yellow];
2522[label="210.200.144.133;s;25pkt 25fpkt", shape=hexagon, color=black];
3554[label="210.200.144.133;24pkt 24fpkt", shape=pentagon, color=darkviolet];
4516[label="210.200.144.133;25pkt 25fpkt", shape=invtriangle, color=brown];
stat446[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.200.144.133:80, 199.141.223.211:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58224: (2.0202%)&lt;BR/&gt; 58074: (2.0202%)&lt;BR/&gt; 58066: (2.0202%)&lt;BR/&gt; 57282: (2.0202%)&gt;];
}
1714--2522[label="1;25pkt 25fpkt"];
1714--3554[label="1;24pkt 24fpkt"];
1714--4516[label="1;25pkt 25fpkt"];
2522--3554[label="1;24pkt 24fpkt"];
2522--4516[label="1;25pkt 25fpkt"];
3554--4516[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="199.141.223.211" src_ip="210.200.144.133" src_port="80"/>
    </slice>
    <from sec="1054875703" usec="0"/>
    <to sec="1054876214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.955904,1.53643,503,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_447{
style=filled;
color=gray75;
130[label="129.24.202.215d;1pkt 1fpkt", shape=rectangle, color=red];
1821[label="199.174.154.15;d;78pkt 78fpkt", shape=diamond, color=yellow];
2529[label="199.174.154.15;d;78pkt 78fpkt", shape=hexagon, color=black];
3328[label="220.72.93.91;81pkt 81fpkt", shape=pentagon, color=darkviolet];
4426[label="220.72.93.91;81pkt 81fpkt", shape=invtriangle, color=brown];
stat447[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.72.93.91:80, *:*}[51.2658%]&lt;BR/&gt;{201.158.223.153:80, 199.174.154.15:*}[25.3165%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1434: (0.783699%)&lt;BR/&gt; 50824: (0.31348%)&lt;BR/&gt; 50823: (0.31348%)&lt;BR/&gt; 50822: (0.31348%)&gt;];
}
130--1821[label="1;1pkt 1fpkt"];
130--2529[label="1;1pkt 1fpkt"];
130--2685[label="1;1pkt 1fpkt"];
130--3328[label="1;1pkt 1fpkt"];
130--4426[label="1;1pkt 1fpkt"];
1821--2529[label="1;78pkt 78fpkt"];
1821--2685[label="0.0128205;1pkt 1fpkt"];
1821--3328[label="0.0128205;1pkt 1fpkt"];
1821--4426[label="0.0128205;1pkt 1fpkt"];
2529--2685[label="0.0128205;1pkt 1fpkt"];
2529--3328[label="0.0128205;1pkt 1fpkt"];
2529--4426[label="0.0128205;1pkt 1fpkt"];
3328--4426[label="1;81pkt 81fpkt"];
</description>
    <slice>
      <filter src_ip="220.72.93.91" src_port="80"/>
      <filter dst_ip="199.174.154.15" src_ip="201.158.223.153" src_port="80"/>
    </slice>
    <from sec="1054875608" usec="0"/>
    <to sec="1054876499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770739,1.60066,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_448{
style=filled;
color=gray75;
1266[label="175.84.40.245;d;7pkt 7fpkt", shape=diamond, color=yellow];
1271[label="220.36.97.7;s;4pkt 4fpkt", shape=diamond, color=yellow];
1824[label="175.84.46.109;d;3pkt 3fpkt", shape=diamond, color=yellow];
2240[label="220.36.97.7;s;4pkt 4fpkt", shape=hexagon, color=black];
2532[label="175.84.46.109;d;3pkt 3fpkt", shape=hexagon, color=black];
2769[label="220.36.97.7;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat448[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.36.97.216:80, 175.84.40.245:*}[40%]&lt;BR/&gt;{220.36.97.7:554, 175.84.46.109:*}[20%]&lt;BR/&gt;{220.36.97.7:554, 175.84.40.245:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 554: (36%)&lt;BR/&gt; 80: (12%)&lt;BR/&gt; 1274: (10%)&lt;BR/&gt; 1272: (10%)&lt;BR/&gt; 1798: (8%)&gt;];
}
1266--1271[label="0.5;2pkt 2fpkt"];
1266--2240[label="0.5;2pkt 2fpkt"];
1266--2769[label="0.5;2pkt 2fpkt"];
1271--1824[label="0.666667;2pkt 2fpkt"];
1271--2240[label="1;4pkt 4fpkt"];
1271--2532[label="0.666667;2pkt 2fpkt"];
1271--2769[label="1;4pkt 4fpkt"];
1824--2240[label="0.666667;2pkt 2fpkt"];
1824--2532[label="1;3pkt 3fpkt"];
1824--2769[label="0.666667;2pkt 2fpkt"];
2240--2532[label="0.666667;2pkt 2fpkt"];
2240--2769[label="1;4pkt 4fpkt"];
2532--2769[label="0.666667;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.40.245" src_ip="220.36.97.216" src_port="80"/>
      <filter dst_ip="175.84.40.245" src_ip="220.36.97.7" src_port="554"/>
      <filter dst_ip="175.84.46.109" src_ip="220.36.97.7" src_port="554"/>
    </slice>
    <from sec="1054875764" usec="0"/>
    <to sec="1054876322" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770739,1.60066,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_449{
style=filled;
color=gray75;
707[label="50.85.134.43;s;53pkt 53fpkt", shape=diamond, color=yellow];
2540[label="175.84.91.12;d;16pkt 16fpkt", shape=hexagon, color=black];
3004[label="50.85.134.43;56pkt 56fpkt", shape=pentagon, color=darkviolet];
stat449[shape=component, label=&lt;Rules:&lt;BR/&gt;{50.85.134.43:80, 175.84.240.133:*}[21.1268%]&lt;BR/&gt;{*:80, 175.84.91.12:*}[21.1268%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.2%)&lt;BR/&gt; 443: (8.8%)&lt;BR/&gt; 1055: (1.2%)&lt;BR/&gt; 63959: (0.8%)&lt;BR/&gt; 63955: (0.8%)&gt;];
}
707--708[label="0.0188679;1pkt 1fpkt"];
707--745[label="0.0188679;1pkt 1fpkt"];
707--748[label="0.188679;10pkt 10fpkt"];
707--925[label="0.615385;8pkt 8fpkt"];
707--952[label="0.0625;1pkt 1fpkt"];
707--1013[label="0.320755;17pkt 17fpkt"];
707--1809[label="0.0540541;2pkt 2fpkt"];
707--1975[label="0.0188679;1pkt 1fpkt"];
707--2002[label="0.555556;5pkt 5fpkt"];
707--2010[label="0.0188679;1pkt 1fpkt"];
707--2088[label="0.188679;10pkt 10fpkt"];
707--2386[label="1;42pkt 42fpkt"];
707--2540[label="0.0625;1pkt 1fpkt"];
707--2619[label="0.0188679;1pkt 1fpkt"];
707--2669[label="0.0566038;3pkt 3fpkt"];
707--3004[label="1;53pkt 53fpkt"];
2540--2606[label="0.25;4pkt 4fpkt"];
2540--2669[label="0.1875;3pkt 3fpkt"];
2540--3004[label="0.0625;1pkt 1fpkt"];
2540--3329[label="0.875;14pkt 14fpkt"];
2540--4427[label="0.875;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.91.12" src_port="80"/>
      <filter dst_ip="175.84.240.133" src_ip="50.85.134.43" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_451{
style=filled;
color=gray75;
1417[label="202.25.164.239;s;386pkt 386fpkt", shape=diamond, color=yellow];
2547[label="202.25.164.239;s;386pkt 386fpkt", shape=hexagon, color=black];
stat451[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.25.164.239:53, *:*}[99.7409%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.8705%)&lt;BR/&gt; 2765: (0.388601%)&lt;BR/&gt; 1073: (0.388601%)&lt;BR/&gt; 4160: (0.259067%)&lt;BR/&gt; 3757: (0.259067%)&gt;];
}
1417--2547[label="1;386pkt 386fpkt"];
1417--2674[label="0.00259067;1pkt 1fpkt"];
1417--2698[label="0.00259067;1pkt 1fpkt"];
1417--2709[label="0.00259067;1pkt 1fpkt"];
2547--2674[label="0.00259067;1pkt 1fpkt"];
2547--2698[label="0.00259067;1pkt 1fpkt"];
2547--2709[label="0.00259067;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="202.25.164.239" src_port="53"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.895209,1.57226,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_452{
style=filled;
color=gray75;
1429[label="175.84.226.166;d;11pkt 11fpkt", shape=diamond, color=yellow];
1430[label="218.140.62.36;s;11pkt 11fpkt", shape=diamond, color=yellow];
2418[label="175.84.226.166;d;7pkt 7fpkt", shape=hexagon, color=black];
2551[label="218.140.62.36;s;11pkt 11fpkt", shape=hexagon, color=black];
2961[label="218.140.62.36;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4285[label="218.140.62.36;10pkt 10fpkt", shape=invtriangle, color=brown];
stat452[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.140.62.36:*, 175.84.226.166:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64733: (5%)&lt;BR/&gt; 64723: (5%)&lt;BR/&gt; 64701: (5%)&lt;BR/&gt; 64695: (5%)&lt;BR/&gt; 64530: (5%)&gt;];
}
1429--1430[label="1;11pkt 11fpkt"];
1429--2418[label="1;7pkt 7fpkt"];
1429--2551[label="1;11pkt 11fpkt"];
1429--2961[label="1;10pkt 10fpkt"];
1429--4285[label="1;10pkt 10fpkt"];
1430--2418[label="1;7pkt 7fpkt"];
1430--2551[label="1;11pkt 11fpkt"];
1430--2961[label="1;10pkt 10fpkt"];
1430--4285[label="1;10pkt 10fpkt"];
2418--2551[label="1;7pkt 7fpkt"];
2418--2961[label="0.857143;6pkt 6fpkt"];
2418--4285[label="0.857143;6pkt 6fpkt"];
2551--2961[label="1;10pkt 10fpkt"];
2551--4285[label="1;10pkt 10fpkt"];
2961--4285[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.226.166" src_ip="218.140.62.36"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770739,1.60066,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_453{
style=filled;
color=gray75;
1867[label="198.160.1.91;d;2pkt 2fpkt", shape=diamond, color=yellow];
1868[label="52.225.206.195;s;2pkt 2fpkt", shape=diamond, color=yellow];
2555[label="52.225.206.195;s;2pkt 2fpkt", shape=hexagon, color=black];
3907[label="52.225.206.195;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat453[shape=component, label=&lt;Rules:&lt;BR/&gt;{52.225.206.195:3902, 198.160.1.91:1178}[50%]&lt;BR/&gt;{52.225.206.195:3903, 198.160.1.91:1178}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1178: (50%)&lt;BR/&gt; 3903: (25%)&lt;BR/&gt; 3902: (25%)&gt;];
}
1867--1868[label="1;2pkt 2fpkt"];
1867--2555[label="1;2pkt 2fpkt"];
1867--3907[label="1;2pkt 2fpkt"];
1868--2555[label="1;2pkt 2fpkt"];
1868--3907[label="1;2pkt 2fpkt"];
2555--3907[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="198.160.1.91" dst_port="1178" src_ip="52.225.206.195" src_port="3903"/>
      <filter dst_ip="198.160.1.91" dst_port="1178" src_ip="52.225.206.195" src_port="3902"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_454{
style=filled;
color=gray75;
1872[label="218.136.36.234;s;2pkt 2fpkt", shape=diamond, color=yellow];
2557[label="175.85.170.78;d;8pkt 8fpkt", shape=hexagon, color=black];
2558[label="218.136.36.234;s;2pkt 2fpkt", shape=hexagon, color=black];
stat454[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 175.85.170.78:1036}[25%]&lt;BR/&gt;{51.194.219.156:*, 175.85.170.78:80}[25%]&lt;BR/&gt;{218.136.36.234:80, 175.85.170.78:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.5%)&lt;BR/&gt; 65085: (12.5%)&lt;BR/&gt; 62313: (12.5%)&lt;BR/&gt; 1036: (8.33333%)&lt;BR/&gt; 53: (8.33333%)&gt;];
}
1872--2557[label="1;2pkt 2fpkt"];
1872--2558[label="1;2pkt 2fpkt"];
1872--2669[label="1;2pkt 2fpkt"];
2557--2558[label="1;2pkt 2fpkt"];
2557--2669[label="0.25;2pkt 2fpkt"];
2557--2682[label="0.25;2pkt 2fpkt"];
2558--2669[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="175.85.170.78" src_ip="218.136.36.234" src_port="80"/>
      <filter dst_ip="175.85.170.78" dst_port="80" src_ip="51.194.219.156"/>
      <filter dst_ip="175.85.170.78" dst_port="1036" src_port="53"/>
    </slice>
    <from sec="1054875602" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_455{
style=filled;
color=gray75;
1560[label="199.98.108.8;d;85pkt 85fpkt", shape=diamond, color=yellow];
1875[label="198.198.70.70;s;2pkt 2fpkt", shape=diamond, color=yellow];
2559[label="198.198.70.70;s;2pkt 2fpkt", shape=hexagon, color=black];
stat455[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:1214, 199.98.108.8:*}[30.5882%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (14.6067%)&lt;BR/&gt; 2330: (7.86517%)&lt;BR/&gt; 3561: (3.93258%)&lt;BR/&gt; 3308: (3.37079%)&lt;BR/&gt; 1911: (2.80899%)&gt;];
}
1560--1875[label="1;2pkt 2fpkt"];
1560--2559[label="1;2pkt 2fpkt"];
1560--4082[label="0.0117647;1pkt 1fpkt"];
1875--2559[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="199.98.108.8" src_port="1214"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770739,1.60066,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_456{
style=filled;
color=gray75;
1562[label="169.189.233.105;d;39pkt 39fpkt", shape=diamond, color=yellow];
2563[label="210.193.200.43;s;48pkt 48fpkt", shape=hexagon, color=black];
3378[label="208.57.32.101;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat456[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.193.200.43:80, *:*}[64%]&lt;BR/&gt;{*:80, 169.189.233.105:*}[46.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.1591%)&lt;BR/&gt; 8000: (1.70455%)&lt;BR/&gt; 5001: (1.70455%)&lt;BR/&gt; 10684: (1.13636%)&lt;BR/&gt; 5000: (1.13636%)&gt;];
}
1562--2021[label="0.128205;5pkt 5fpkt"];
1562--2424[label="0.025641;1pkt 1fpkt"];
1562--2507[label="1;39pkt 39fpkt"];
1562--2563[label="0.307692;12pkt 12fpkt"];
1562--2754[label="0.025641;1pkt 1fpkt"];
1562--2797[label="0.0526316;1pkt 1fpkt"];
1562--3005[label="0.307692;12pkt 12fpkt"];
1562--3378[label="1;1pkt 1fpkt"];
2563--2619[label="0.1875;9pkt 9fpkt"];
2563--2669[label="0.0208333;1pkt 1fpkt"];
2563--3005[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter src_ip="210.193.200.43" src_port="80"/>
      <filter dst_ip="169.189.233.105" src_port="80"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054876499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770739,1.60066,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_457{
style=filled;
color=gray75;
950[label="199.104.123.144;d;113pkt 113fpkt", shape=diamond, color=yellow];
1218[label="51.158.94.116;s;42pkt 42fpkt", shape=diamond, color=yellow];
1231[label="175.85.152.138;d;26pkt 26fpkt", shape=diamond, color=yellow];
1238[label="169.189.203.183;d;11pkt 11fpkt", shape=diamond, color=yellow];
1376[label="163.47.113.164;s;13pkt 13fpkt", shape=diamond, color=yellow];
2227[label="169.189.203.183;d;11pkt 11fpkt", shape=hexagon, color=black];
3416[label="51.147.54.107;9pkt 9fpkt", shape=pentagon, color=darkviolet];
stat457[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.11.146.53:*, 199.104.123.144:*}[52.0833%]&lt;BR/&gt;{51.158.94.116:80, *:*}[21.875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.3333%)&lt;BR/&gt; 3301: (0.666667%)&lt;BR/&gt; 3269: (0.666667%)&lt;BR/&gt; 3266: (0.666667%)&lt;BR/&gt; 3244: (0.666667%)&gt;];
}
950--1065[label="0.0176991;2pkt 2fpkt"];
950--1195[label="0.00990099;1pkt 1fpkt"];
950--2008[label="0.788462;41pkt 41fpkt"];
950--2019[label="0.0176991;2pkt 2fpkt"];
950--2038[label="0.00884956;1pkt 1fpkt"];
950--2081[label="1;64pkt 64fpkt"];
950--2213[label="0.0138889;1pkt 1fpkt"];
950--2669[label="0.0176991;2pkt 2fpkt"];
950--3714[label="0.0176991;2pkt 2fpkt"];
950--3775[label="0.00884956;1pkt 1fpkt"];
1218--1226[label="0.0952381;4pkt 4fpkt"];
1218--1530[label="0.179487;7pkt 7fpkt"];
1218--1742[label="0.142857;6pkt 6fpkt"];
1218--2308[label="0.179487;7pkt 7fpkt"];
1218--2520[label="0.0952381;4pkt 4fpkt"];
1218--2577[label="0.214286;9pkt 9fpkt"];
1218--2669[label="0.119048;5pkt 5fpkt"];
1218--3464[label="1;42pkt 42fpkt"];
1218--4480[label="1;42pkt 42fpkt"];
1231--1376[label="1;13pkt 13fpkt"];
1231--2260[label="0.0384615;1pkt 1fpkt"];
1231--2669[label="0.0769231;2pkt 2fpkt"];
1231--3939[label="0.115385;3pkt 3fpkt"];
1231--4673[label="0.115385;3pkt 3fpkt"];
1238--2227[label="1;11pkt 11fpkt"];
1238--2260[label="0.0909091;1pkt 1fpkt"];
1238--2669[label="0.181818;2pkt 2fpkt"];
1238--3416[label="1;9pkt 9fpkt"];
2227--2260[label="0.0909091;1pkt 1fpkt"];
2227--2669[label="0.181818;2pkt 2fpkt"];
2227--3416[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="199.104.123.144" src_ip="48.11.146.53"/>
      <filter src_ip="51.158.94.116" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.697078,1.64478,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_458{
style=filled;
color=gray75;
63[label="200.20.48.102s;1pkt 1fpkt", shape=rectangle, color=red];
1368[label="200.20.48.102;s;41pkt 41fpkt", shape=diamond, color=yellow];
1618[label="134.66.214.64;d;30pkt 30fpkt", shape=diamond, color=yellow];
stat458[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.20.48.102:80, 134.66.214.64:*}[29.0909%]&lt;BR/&gt;{130.111.194.0:80, 134.66.214.64:*}[25.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2827: (2.08333%)&lt;BR/&gt; 2826: (1.38889%)&lt;BR/&gt; 2825: (1.38889%)&lt;BR/&gt; 2824: (1.38889%)&gt;];
}
63--1368[label="1;1pkt 1fpkt"];
63--1618[label="1;1pkt 1fpkt"];
63--2578[label="1;1pkt 1fpkt"];
1368--1581[label="0.195122;8pkt 8fpkt"];
1368--1618[label="0.533333;16pkt 16fpkt"];
1368--2578[label="1;41pkt 41fpkt"];
1618--2298[label="0.466667;14pkt 14fpkt"];
1618--2578[label="0.533333;16pkt 16fpkt"];
1618--2714[label="0.466667;14pkt 14fpkt"];
1618--4186[label="0.466667;14pkt 14fpkt"];
1618--4767[label="0.466667;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="134.66.214.64" src_ip="200.20.48.102" src_port="80"/>
      <filter dst_ip="134.66.214.64" src_ip="130.111.194.0" src_port="80"/>
    </slice>
    <from sec="1054875731" usec="0"/>
    <to sec="1054876345" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_459{
style=filled;
color=gray75;
1739[label="210.153.135.53;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat459[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.153.135.53:20098, 175.84.138.134:49158}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49158: (50%)&lt;BR/&gt; 20098: (50%)&gt;];
}
1739--2588[label="1;1pkt 1fpkt"];
1739--3072[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.138.134" dst_port="49158" src_ip="210.153.135.53" src_port="20098"/>
    </slice>
    <from sec="1054876101" usec="0"/>
    <to sec="1054876335" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_460{
style=filled;
color=gray75;
1385[label="175.84.28.40;d;25pkt 25fpkt", shape=diamond, color=yellow];
1386[label="172.210.153.42;s;3pkt 3fpkt", shape=diamond, color=yellow];
2591[label="175.84.28.40;d;25pkt 25fpkt", shape=hexagon, color=black];
stat460[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.165.49.196:80, 175.84.28.40:*}[80.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1994: (2.83019%)&lt;BR/&gt; 1993: (2.83019%)&lt;BR/&gt; 2045: (1.88679%)&lt;BR/&gt; 2044: (1.88679%)&gt;];
}
1385--1386[label="0.666667;2pkt 2fpkt"];
1385--2591[label="1;25pkt 25fpkt"];
1386--2591[label="0.666667;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.28.40" src_ip="194.165.49.196" src_port="80"/>
    </slice>
    <from sec="1054875847" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,501,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_462{
style=filled;
color=gray75;
1957[label="51.145.84.232;s;50pkt 50fpkt", shape=diamond, color=yellow];
2599[label="51.145.84.232;s;50pkt 50fpkt", shape=hexagon, color=black];
stat462[shape=component, label=&lt;Rules:&lt;BR/&gt;{51.145.84.232:21, 199.172.98.4:*}[64%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (32%)&lt;BR/&gt; 59907: (1%)&lt;BR/&gt; 59215: (1%)&lt;BR/&gt; 58864: (1%)&lt;BR/&gt; 57930: (1%)&gt;];
}
1957--2599[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter dst_ip="199.172.98.4" src_ip="51.145.84.232" src_port="21"/>
    </slice>
    <from sec="1054876369" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770739,1.60066,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_463{
style=filled;
color=gray75;
1214[label="176.107.14.31;d;58pkt 58fpkt", shape=diamond, color=yellow];
1259[label="198.6.66.2;s;21pkt 21fpkt", shape=diamond, color=yellow];
1449[label="50.85.165.82;s;190pkt 190fpkt", shape=diamond, color=yellow];
1568[label="176.107.38.154;d;397pkt 397fpkt", shape=diamond, color=yellow];
1699[label="199.98.138.219;d;115pkt 115fpkt", shape=diamond, color=yellow];
1864[label="176.107.37.153;d;217pkt 217fpkt", shape=diamond, color=yellow];
2138[label="176.107.14.31;d;58pkt 58fpkt", shape=hexagon, color=black];
2158[label="198.6.66.2;s;12pkt 12fpkt", shape=hexagon, color=black];
2726[label="198.6.66.2;21pkt 21fpkt", shape=pentagon, color=darkviolet];
stat463[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, *:*}[33.1963%]&lt;BR/&gt;{*:53, 176.107.38.154:32807}[32.7852%]&lt;BR/&gt;{*:*, 176.107.37.153:*}[22.3022%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (28.4665%)&lt;BR/&gt; 80: (18.5032%)&lt;BR/&gt; 32807: (14.6465%)&lt;BR/&gt; 32773: (6.84114%)&lt;BR/&gt; 0: (3.30579%)&gt;];
}
1214--1259[label="0.809524;17pkt 17fpkt"];
1214--1449[label="0.0172414;1pkt 1fpkt"];
1214--2138[label="1;58pkt 58fpkt"];
1214--2158[label="0.666667;8pkt 8fpkt"];
1214--2250[label="0.0172414;1pkt 1fpkt"];
1214--2726[label="0.809524;17pkt 17fpkt"];
1214--3273[label="0.0172414;1pkt 1fpkt"];
1214--3341[label="0.0172414;1pkt 1fpkt"];
1214--3660[label="0.0625;1pkt 1fpkt"];
1214--4563[label="0.0666667;1pkt 1fpkt"];
1259--1568[label="0.047619;1pkt 1fpkt"];
1259--1864[label="0.0952381;2pkt 2fpkt"];
1259--1960[label="0.047619;1pkt 1fpkt"];
1259--2138[label="0.809524;17pkt 17fpkt"];
1259--2158[label="1;12pkt 12fpkt"];
1259--2600[label="0.047619;1pkt 1fpkt"];
1259--2681[label="0.047619;1pkt 1fpkt"];
1259--2686[label="0.047619;1pkt 1fpkt"];
1259--2690[label="0.047619;1pkt 1fpkt"];
1259--2702[label="0.047619;1pkt 1fpkt"];
1259--2710[label="0.047619;1pkt 1fpkt"];
1259--2726[label="1;21pkt 21fpkt"];
1449--1516[label="0.1;2pkt 2fpkt"];
1449--1658[label="0.0886076;7pkt 7fpkt"];
1449--1699[label="0.0347826;4pkt 4fpkt"];
1449--1836[label="0.121053;23pkt 23fpkt"];
1449--1961[label="0.00549451;1pkt 1fpkt"];
1449--1973[label="0.00526316;1pkt 1fpkt"];
1449--1988[label="0.257895;49pkt 49fpkt"];
1449--2029[label="0.0105263;2pkt 2fpkt"];
1449--2088[label="0.0473684;9pkt 9fpkt"];
1449--2089[label="0.00526316;1pkt 1fpkt"];
1449--2110[label="0.2;1pkt 1fpkt"];
1449--2138[label="0.0172414;1pkt 1fpkt"];
1449--2142[label="0.101695;6pkt 6fpkt"];
1449--2172[label="0.00526316;1pkt 1fpkt"];
1449--2252[label="0.00526316;1pkt 1fpkt"];
1449--2347[label="0.00526316;1pkt 1fpkt"];
1449--2359[label="0.0603448;7pkt 7fpkt"];
1449--2611[label="0.00526316;1pkt 1fpkt"];
1449--2616[label="0.0736842;14pkt 14fpkt"];
1449--2669[label="0.0421053;8pkt 8fpkt"];
1449--3273[label="1;190pkt 190fpkt"];
1568--1577[label="0.0142857;1pkt 1fpkt"];
1568--1683[label="0.0116279;1pkt 1fpkt"];
1568--1775[label="0.0153846;1pkt 1fpkt"];
1568--1849[label="0.0166667;1pkt 1fpkt"];
1568--1884[label="0.0166667;1pkt 1fpkt"];
1568--2158[label="0.0833333;1pkt 1fpkt"];
1568--2681[label="0.0100756;4pkt 4fpkt"];
1568--2726[label="0.047619;1pkt 1fpkt"];
1568--2831[label="0.025;1pkt 1fpkt"];
1568--2871[label="0.0232558;1pkt 1fpkt"];
1568--3018[label="0.0416667;1pkt 1fpkt"];
1568--3021[label="0.0196078;1pkt 1fpkt"];
1568--3025[label="0.012987;1pkt 1fpkt"];
1568--3162[label="0.00357143;1pkt 1fpkt"];
1568--3225[label="0.0144928;1pkt 1fpkt"];
1568--3368[label="0.0333333;1pkt 1fpkt"];
1568--3408[label="0.0147059;1pkt 1fpkt"];
1568--3490[label="0.0125;1pkt 1fpkt"];
1568--3579[label="0.0333333;1pkt 1fpkt"];
1568--3598[label="0.025;1pkt 1fpkt"];
1568--3607[label="0.0588235;1pkt 1fpkt"];
1568--3744[label="0.0135135;1pkt 1fpkt"];
1568--3840[label="0.0238095;1pkt 1fpkt"];
1568--3850[label="0.027027;1pkt 1fpkt"];
1568--3900[label="0.016129;1pkt 1fpkt"];
1568--4128[label="0.0175439;1pkt 1fpkt"];
1568--4251[label="0.0227273;1pkt 1fpkt"];
1568--4309[label="0.0416667;1pkt 1fpkt"];
1568--4313[label="0.012987;1pkt 1fpkt"];
1568--4746[label="0.0175439;1pkt 1fpkt"];
1568--4811[label="0.0416667;1pkt 1fpkt"];
1699--1758[label="0.0347826;4pkt 4fpkt"];
1699--1999[label="0.165217;19pkt 19fpkt"];
1699--2038[label="0.026087;3pkt 3fpkt"];
1699--2344[label="0.26087;30pkt 30fpkt"];
1699--2433[label="0.0347826;4pkt 4fpkt"];
1699--2440[label="0.0428571;3pkt 3fpkt"];
1699--2512[label="0.0547945;4pkt 4fpkt"];
1699--3273[label="0.0347826;4pkt 4fpkt"];
1699--3322[label="0.00869565;1pkt 1fpkt"];
1699--3343[label="0.0465116;4pkt 4fpkt"];
1699--3574[label="0.037037;3pkt 3fpkt"];
1699--3588[label="0.0697674;3pkt 3fpkt"];
1699--3605[label="0.0769231;1pkt 1fpkt"];
1699--3775[label="0.026087;3pkt 3fpkt"];
1699--3985[label="0.2;1pkt 1fpkt"];
1699--4138[label="0.0347826;4pkt 4fpkt"];
1699--4525[label="0.037037;3pkt 3fpkt"];
1699--4534[label="0.0681818;3pkt 3fpkt"];
1699--4542[label="0.0769231;1pkt 1fpkt"];
1699--4883[label="0.037037;3pkt 3fpkt"];
1864--1878[label="0.0123457;1pkt 1fpkt"];
1864--1884[label="0.0166667;1pkt 1fpkt"];
1864--2158[label="0.166667;2pkt 2fpkt"];
1864--2564[label="0.0123457;1pkt 1fpkt"];
1864--2663[label="0.0123457;1pkt 1fpkt"];
1864--2681[label="0.0230415;5pkt 5fpkt"];
1864--2726[label="0.0952381;2pkt 2fpkt"];
1864--2831[label="0.025;1pkt 1fpkt"];
1864--3021[label="0.0196078;1pkt 1fpkt"];
1864--3025[label="0.012987;1pkt 1fpkt"];
1864--3225[label="0.0144928;1pkt 1fpkt"];
1864--3363[label="0.0434783;1pkt 1fpkt"];
1864--3408[label="0.0147059;1pkt 1fpkt"];
1864--3569[label="0.0120482;1pkt 1fpkt"];
1864--3598[label="0.025;1pkt 1fpkt"];
1864--3744[label="0.027027;2pkt 2fpkt"];
1864--3840[label="0.0238095;1pkt 1fpkt"];
1864--3850[label="0.027027;1pkt 1fpkt"];
1864--3900[label="0.016129;1pkt 1fpkt"];
1864--4313[label="0.012987;1pkt 1fpkt"];
1864--4521[label="0.0121951;1pkt 1fpkt"];
2138--2158[label="0.666667;8pkt 8fpkt"];
2138--2250[label="0.0172414;1pkt 1fpkt"];
2138--2726[label="0.809524;17pkt 17fpkt"];
2138--3273[label="0.0172414;1pkt 1fpkt"];
2138--3341[label="0.0172414;1pkt 1fpkt"];
2138--3660[label="0.0625;1pkt 1fpkt"];
2138--4563[label="0.0666667;1pkt 1fpkt"];
2158--2600[label="0.0833333;1pkt 1fpkt"];
2158--2681[label="0.0833333;1pkt 1fpkt"];
2158--2686[label="0.0833333;1pkt 1fpkt"];
2158--2690[label="0.0833333;1pkt 1fpkt"];
2158--2702[label="0.0833333;1pkt 1fpkt"];
2158--2710[label="0.0833333;1pkt 1fpkt"];
2158--2726[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="176.107.37.153"/>
      <filter src_port="80"/>
      <filter dst_ip="176.107.38.154" dst_port="32807" src_port="53"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770739,1.60066,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_466{
style=filled;
color=gray75;
1207[label="175.85.101.150;d;278pkt 278fpkt", shape=diamond, color=yellow];
1908[label="175.84.40.158;d;43pkt 43fpkt", shape=diamond, color=yellow];
1909[label="51.147.50.63;s;21pkt 21fpkt", shape=diamond, color=yellow];
2204[label="210.157.72.195;s;55pkt 55fpkt", shape=hexagon, color=black];
3478[label="87.24.19.119;88pkt 88fpkt", shape=pentagon, color=darkviolet];
stat466[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.24.19.119:80, 175.85.101.150:*}[22.8117%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.4227%)&lt;BR/&gt; 0: (3.91753%)&lt;BR/&gt; 3343: (0.309278%)&lt;BR/&gt; 53: (0.309278%)&lt;BR/&gt; 3353: (0.206186%)&gt;];
}
1207--1313[label="0.0224719;2pkt 2fpkt"];
1207--1328[label="0.00961538;1pkt 1fpkt"];
1207--1398[label="0.0277778;3pkt 3fpkt"];
1207--1462[label="0.833333;5pkt 5fpkt"];
1207--1588[label="0.00555556;1pkt 1fpkt"];
1207--1653[label="0.00359712;1pkt 1fpkt"];
1207--1850[label="0.966292;86pkt 86fpkt"];
1207--2019[label="0.0179856;5pkt 5fpkt"];
1207--2126[label="0.0571429;2pkt 2fpkt"];
1207--2131[label="0.00699301;1pkt 1fpkt"];
1207--2204[label="0.0363636;2pkt 2fpkt"];
1207--2244[label="0.0277778;3pkt 3fpkt"];
1207--2329[label="0.00359712;1pkt 1fpkt"];
1207--2510[label="0.00719424;2pkt 2fpkt"];
1207--2669[label="0.0143885;4pkt 4fpkt"];
1207--2723[label="0.0275229;3pkt 3fpkt"];
1207--2758[label="0.0107914;3pkt 3fpkt"];
1207--2789[label="0.0132743;3pkt 3fpkt"];
1207--3083[label="0.00359712;1pkt 1fpkt"];
1207--3109[label="0.00961538;1pkt 1fpkt"];
1207--3408[label="0.0147059;1pkt 1fpkt"];
1207--3478[label="0.965909;85pkt 85fpkt"];
1207--3491[label="0.25;1pkt 1fpkt"];
1207--3623[label="0.1;4pkt 4fpkt"];
1207--3714[label="0.0179856;5pkt 5fpkt"];
1207--3939[label="0.0763889;11pkt 11fpkt"];
1207--4164[label="0.833333;5pkt 5fpkt"];
1207--4173[label="0.0277778;1pkt 1fpkt"];
1207--4205[label="0.0107914;3pkt 3fpkt"];
1207--4215[label="0.0132743;3pkt 3fpkt"];
1207--4334[label="0.00359712;1pkt 1fpkt"];
1207--4343[label="0.0190476;2pkt 2fpkt"];
1207--4547[label="0.0769231;3pkt 3fpkt"];
1207--4673[label="0.0763889;11pkt 11fpkt"];
1207--4778[label="0.0132743;3pkt 3fpkt"];
1908--1909[label="1;21pkt 21fpkt"];
1908--3977[label="0.7;21pkt 21fpkt"];
1908--4688[label="0.7;21pkt 21fpkt"];
2204--2317[label="0.0363636;2pkt 2fpkt"];
2204--2611[label="0.0545455;3pkt 3fpkt"];
2204--2669[label="0.109091;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="175.85.101.150" src_ip="87.24.19.119" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.697078,1.64478,010,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_475{
style=filled;
color=gray75;
462[label="208.50.53.167s;254pkt 254fpkt", shape=rectangle, color=red];
1532[label="208.50.53.167;s;255pkt 255fpkt", shape=diamond, color=yellow];
1540[label="175.84.11.15;d;93pkt 93fpkt", shape=diamond, color=yellow];
stat475[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.50.53.167:*, *:139}[72.9885%]&lt;BR/&gt;{198.82.164.153:*, 175.84.11.15:80}[22.9885%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (42.1927%)&lt;BR/&gt; 80: (7.6412%)&lt;BR/&gt; 2300: (0.166113%)&lt;BR/&gt; 2299: (0.166113%)&lt;BR/&gt; 2298: (0.166113%)&gt;];
}
462--916[label="0.0135135;1pkt 1fpkt"];
462--1200[label="0.00393701;1pkt 1fpkt"];
462--1213[label="0.00943396;1pkt 1fpkt"];
462--1532[label="1;254pkt 254fpkt"];
462--2430[label="0.00393701;1pkt 1fpkt"];
1532--2430[label="0.00392157;1pkt 1fpkt"];
1540--2545[label="1;93pkt 93fpkt"];
1540--2670[label="0.0215054;2pkt 2fpkt"];
1540--2682[label="0.0107527;1pkt 1fpkt"];
1540--2685[label="0.0107527;1pkt 1fpkt"];
1540--2691[label="0.0107527;1pkt 1fpkt"];
1540--2717[label="0.0107527;1pkt 1fpkt"];
1540--3964[label="0.666667;4pkt 4fpkt"];
1540--4187[label="0.0107527;1pkt 1fpkt"];
1540--4681[label="0.666667;4pkt 4fpkt"];
1540--4768[label="0.0107527;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="208.50.53.167"/>
      <filter dst_ip="175.84.11.15" dst_port="80" src_ip="198.82.164.153"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_477{
style=filled;
color=gray75;
185[label="209.124.214.34s;51pkt 51fpkt", shape=rectangle, color=red];
306[label="221.29.14.144s;786pkt 786fpkt", shape=rectangle, color=red];
stat477[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.23.94.144:1163, *:1434}[67.9809%]&lt;BR/&gt;{221.29.14.144:*, *:137}[25.9259%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (34.7073%)&lt;BR/&gt; 1163: (33.9904%)&lt;BR/&gt; 137: (15.2927%)&lt;BR/&gt; 1025: (6.51135%)&lt;BR/&gt; 1027: (6.45161%)&gt;];
}
185--1317[label="0.235294;12pkt 12fpkt"];
185--2272[label="0.235294;12pkt 12fpkt"];
185--2953[label="0.235294;12pkt 12fpkt"];
306--1316[label="0.723919;569pkt 569fpkt"];
306--2675[label="0.0216285;17pkt 17fpkt"];
306--2678[label="0.00508906;4pkt 4fpkt"];
306--2699[label="0.0216285;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="221.29.14.144"/>
      <filter dst_port="1434" src_ip="205.23.94.144" src_port="1163"/>
    </slice>
    <from sec="1054875734" usec="0"/>
    <to sec="1054876159" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.18.181.1"/>
    </slice>
    <from sec="1054875996" usec="0"/>
    <to sec="1054876087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.118.227.1"/>
    </slice>
    <from sec="1054875607" usec="0"/>
    <to sec="1054876483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770739,1.60066,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_484{
style=filled;
color=gray75;
1398[label="220.46.3.2;s;108pkt 108fpkt", shape=diamond, color=yellow];
1466[label="169.189.200.37;d;137pkt 137fpkt", shape=diamond, color=yellow];
2244[label="220.46.3.2;s;108pkt 108fpkt", shape=hexagon, color=black];
2566[label="169.189.200.37;d;137pkt 137fpkt", shape=hexagon, color=black];
2723[label="220.46.3.2;109pkt 109fpkt", shape=pentagon, color=darkviolet];
stat484[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.46.3.2:80, 169.189.200.37:*}[74.4681%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8331%)&lt;BR/&gt; 33104: (0.417362%)&lt;BR/&gt; 33103: (0.417362%)&lt;BR/&gt; 33102: (0.417362%)&lt;BR/&gt; 33101: (0.417362%)&gt;];
}
1398--1466[label="0.972222;105pkt 105fpkt"];
1398--2244[label="1;108pkt 108fpkt"];
1398--2566[label="0.972222;105pkt 105fpkt"];
1398--2723[label="1;108pkt 108fpkt"];
1466--1707[label="0.0814815;11pkt 11fpkt"];
1466--2244[label="0.972222;105pkt 105fpkt"];
1466--2566[label="1;137pkt 137fpkt"];
1466--2723[label="0.963303;105pkt 105fpkt"];
2244--2566[label="0.972222;105pkt 105fpkt"];
2244--2723[label="1;108pkt 108fpkt"];
2566--2723[label="0.963303;105pkt 105fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.200.37" src_ip="220.46.3.2" src_port="80"/>
    </slice>
    <from sec="1054875608" usec="0"/>
    <to sec="1054876389" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.170.91.2"/>
    </slice>
    <from sec="1054875734" usec="0"/>
    <to sec="1054876494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.185.152.2"/>
    </slice>
    <from sec="1054875604" usec="0"/>
    <to sec="1054876498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.107.32.3"/>
    </slice>
    <from sec="1054876048" usec="0"/>
    <to sec="1054876427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770739,1.60066,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_488{
style=filled;
color=gray75;
1160[label="169.167.48.237;d;149pkt 149fpkt", shape=diamond, color=yellow];
2336[label="169.167.48.237;d;105pkt 105fpkt", shape=hexagon, color=black];
2745[label="99.204.182.3;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat488[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:1214, 169.167.48.237:*}[26.1745%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (13.5659%)&lt;BR/&gt; 3323: (4.26357%)&lt;BR/&gt; 3730: (3.87597%)&lt;BR/&gt; 2155: (3.29457%)&lt;BR/&gt; 1491: (2.90698%)&gt;];
}
1160--2336[label="1;105pkt 105fpkt"];
1160--2745[label="1;4pkt 4fpkt"];
2336--2745[label="0.25;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.167.48.237" src_port="1214"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_489{
style=filled;
color=gray75;
1084[label="210.106.28.85;s;70pkt 70fpkt", shape=diamond, color=yellow];
1569[label="50.85.149.93;s;78pkt 78fpkt", shape=diamond, color=yellow];
stat489[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.106.28.85:80, *:*}[47.2973%]&lt;BR/&gt;{50.85.149.93:443, *:*}[36.4865%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.7568%)&lt;BR/&gt; 443: (18.2432%)&lt;BR/&gt; 65332: (0.337838%)&lt;BR/&gt; 64580: (0.337838%)&lt;BR/&gt; 49687: (0.337838%)&gt;];
}
1084--1226[label="0.0142857;1pkt 1fpkt"];
1084--2014[label="0.0142857;1pkt 1fpkt"];
1084--2120[label="0.1;7pkt 7fpkt"];
1084--2317[label="0.371429;26pkt 26fpkt"];
1084--2442[label="1;70pkt 70fpkt"];
1084--2520[label="0.0142857;1pkt 1fpkt"];
1084--2669[label="0.0857143;6pkt 6fpkt"];
1569--1635[label="0.0512821;4pkt 4fpkt"];
1569--1642[label="0.0512821;4pkt 4fpkt"];
1569--1699[label="0.0512821;4pkt 4fpkt"];
1569--1752[label="0.037037;2pkt 2fpkt"];
1569--1792[label="0.0128205;1pkt 1fpkt"];
1569--1961[label="0.0128205;1pkt 1fpkt"];
1569--1970[label="0.0128205;1pkt 1fpkt"];
1569--1973[label="0.0128205;1pkt 1fpkt"];
1569--1975[label="0.0128205;1pkt 1fpkt"];
1569--1988[label="0.115385;9pkt 9fpkt"];
1569--2056[label="0.025641;2pkt 2fpkt"];
1569--2172[label="0.025641;2pkt 2fpkt"];
1569--2489[label="0.037037;2pkt 2fpkt"];
1569--2512[label="1;73pkt 73fpkt"];
1569--2520[label="0.025641;2pkt 2fpkt"];
1569--2527[label="0.0555556;3pkt 3fpkt"];
1569--2611[label="0.0128205;1pkt 1fpkt"];
1569--2616[label="0.0128205;1pkt 1fpkt"];
1569--2619[label="0.0128205;1pkt 1fpkt"];
1569--3343[label="1;78pkt 78fpkt"];
</description>
    <slice>
      <filter src_ip="50.85.149.93" src_port="443"/>
      <filter src_ip="210.106.28.85" src_port="80"/>
    </slice>
    <from sec="1054875602" usec="0"/>
    <to sec="1054876415" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.563947,1.61415,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_490{
style=filled;
color=gray75;
148[label="84.59.0.4s;171pkt 171fpkt", shape=rectangle, color=red];
2748[label="84.59.0.4;184pkt 184fpkt", shape=pentagon, color=darkviolet];
stat490[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.59.0.4:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
148--2748[label="1;171pkt 171fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="84.59.0.4" src_port="1031"/>
    </slice>
    <from sec="1054876341" usec="0"/>
    <to sec="1054876374" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.4.73.4"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.104.1.5"/>
    </slice>
    <from sec="1054875607" usec="0"/>
    <to sec="1054876498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.42.4.6"/>
    </slice>
    <from sec="1054875644" usec="0"/>
    <to sec="1054876431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_494{
style=filled;
color=gray75;
1461[label="51.80.138.6;s;32pkt 32fpkt", shape=diamond, color=yellow];
stat494[shape=component, label=&lt;Rules:&lt;BR/&gt;{51.80.138.6:110, *:*}[96.875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (48.4375%)&lt;BR/&gt; 50681: (1.5625%)&lt;BR/&gt; 3426: (1.5625%)&lt;BR/&gt; 3116: (1.5625%)&lt;BR/&gt; 3115: (1.5625%)&gt;];
}
1461--1492[label="0.5;1pkt 1fpkt"];
1461--2287[label="1;22pkt 22fpkt"];
1461--2463[label="0.5;1pkt 1fpkt"];
1461--2669[label="0.03125;1pkt 1fpkt"];
1461--2764[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter src_ip="51.80.138.6" src_port="110"/>
    </slice>
    <from sec="1054875605" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.120.43.7"/>
    </slice>
    <from sec="1054875897" usec="0"/>
    <to sec="1054876499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.38.175.7"/>
    </slice>
    <from sec="1054876500" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.42.4.8"/>
    </slice>
    <from sec="1054875613" usec="0"/>
    <to sec="1054876358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.235.130.8"/>
    </slice>
    <from sec="1054875954" usec="0"/>
    <to sec="1054876110" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.563947,1.61415,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_499{
style=filled;
color=gray75;
150[label="216.132.10.9s;42pkt 42fpkt", shape=rectangle, color=red];
2782[label="216.132.10.9;146pkt 146fpkt", shape=pentagon, color=darkviolet];
stat499[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.132.10.9:1024, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1024: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
150--2782[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="216.132.10.9" src_port="1024"/>
    </slice>
    <from sec="1054876310" usec="0"/>
    <to sec="1054876336" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.190.79.10"/>
    </slice>
    <from sec="1054876349" usec="0"/>
    <to sec="1054876415" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.196.46.11"/>
    </slice>
    <from sec="1054876103" usec="0"/>
    <to sec="1054876132" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.124.78.11"/>
    </slice>
    <from sec="1054875606" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.6.57.12"/>
    </slice>
    <from sec="1054876500" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724842,1.586,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_504{
style=filled;
color=gray75;
154[label="208.53.71.12s;103pkt 103fpkt", shape=rectangle, color=red];
2813[label="208.53.71.12;153pkt 153fpkt", shape=pentagon, color=darkviolet];
4223[label="208.53.71.12;154pkt 154fpkt", shape=invtriangle, color=brown];
stat504[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.53.71.12:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
154--2813[label="0.990291;102pkt 102fpkt"];
154--4223[label="1;103pkt 103fpkt"];
2813--4223[label="1;153pkt 153fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.53.71.12" src_port="1026"/>
    </slice>
    <from sec="1054875799" usec="0"/>
    <to sec="1054875824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.5.173.12"/>
    </slice>
    <from sec="1054875831" usec="0"/>
    <to sec="1054876483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.563947,1.61415,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_506{
style=filled;
color=gray75;
155[label="208.49.7.13s;148pkt 148fpkt", shape=rectangle, color=red];
2821[label="208.49.7.13;233pkt 233fpkt", shape=pentagon, color=darkviolet];
stat506[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.49.7.13:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
155--2821[label="1;148pkt 148fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.49.7.13" src_port="1025"/>
    </slice>
    <from sec="1054875924" usec="0"/>
    <to sec="1054875961" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.72.79.17"/>
    </slice>
    <from sec="1054876009" usec="0"/>
    <to sec="1054876273" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.563947,1.61415,503,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_508{
style=filled;
color=gray75;
161[label="84.27.139.17s;1pkt 1fpkt", shape=rectangle, color=red];
2842[label="199.31.175.17;28pkt 28fpkt", shape=pentagon, color=darkviolet];
stat508[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.31.175.17:80, 129.24.202.214:*}[35.7143%]&lt;BR/&gt;{199.31.175.17:80, 129.24.202.215:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62968: (3.44828%)&lt;BR/&gt; 3053: (3.44828%)&lt;BR/&gt; 62939: (1.72414%)&lt;BR/&gt; 62392: (1.72414%)&gt;];
}
161--762[label="1;1pkt 1fpkt"];
161--2842[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="129.24.202.214" src_ip="199.31.175.17" src_port="80"/>
      <filter dst_ip="129.24.202.215" src_ip="199.31.175.17" src_port="80"/>
    </slice>
    <from sec="1054875606" usec="0"/>
    <to sec="1054876497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.104.118.18"/>
    </slice>
    <from sec="1054875857" usec="0"/>
    <to sec="1054876277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.107.200.19"/>
    </slice>
    <from sec="1054875677" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.88.66.20"/>
    </slice>
    <from sec="1054876102" usec="0"/>
    <to sec="1054876281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.85.140.20"/>
    </slice>
    <from sec="1054875668" usec="0"/>
    <to sec="1054876451" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724842,1.586,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_513{
style=filled;
color=gray75;
165[label="84.12.22.21s;64pkt 64fpkt", shape=rectangle, color=red];
2870[label="84.12.22.21;121pkt 121fpkt", shape=pentagon, color=darkviolet];
4250[label="84.12.22.21;121pkt 121fpkt", shape=invtriangle, color=brown];
stat513[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.12.22.21:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
165--2870[label="0.984375;63pkt 63fpkt"];
165--4250[label="0.984375;63pkt 63fpkt"];
2870--4250[label="1;121pkt 121fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="84.12.22.21" src_port="1028"/>
    </slice>
    <from sec="1054875880" usec="0"/>
    <to sec="1054875901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.563947,1.61415,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_514{
style=filled;
color=gray75;
166[label="208.48.75.21s;59pkt 59fpkt", shape=rectangle, color=red];
2872[label="208.48.75.21;173pkt 173fpkt", shape=pentagon, color=darkviolet];
stat514[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.48.75.21:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
166--2872[label="0.983051;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.48.75.21" src_port="1026"/>
    </slice>
    <from sec="1054876377" usec="0"/>
    <to sec="1054876405" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.85.180.22"/>
    </slice>
    <from sec="1054876500" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.563947,1.61415,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_516{
style=filled;
color=gray75;
441[label="208.32.33.23s;41pkt 41fpkt", shape=rectangle, color=red];
2878[label="208.32.33.23;108pkt 108fpkt", shape=pentagon, color=darkviolet];
stat516[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.32.33.23:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 64988: (0.671141%)&lt;BR/&gt; 63175: (0.671141%)&lt;BR/&gt; 62286: (0.671141%)&lt;BR/&gt; 62183: (0.671141%)&gt;];
}
441--2878[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.32.33.23"/>
    </slice>
    <from sec="1054876347" usec="0"/>
    <to sec="1054876365" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.571638,1.61542,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_517{
style=filled;
color=gray75;
1606[label="198.128.176.196;d;313pkt 313fpkt", shape=diamond, color=yellow];
2880[label="37.43.16.24;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat517[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 198.128.176.196:1024}[59.3651%]&lt;BR/&gt;{*:*, 198.128.176.196:53}[26.0317%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (46.519%)&lt;BR/&gt; 1024: (30.3797%)&lt;BR/&gt; 25: (3.79747%)&lt;BR/&gt; 113: (1.89873%)&lt;BR/&gt; 0: (1.58228%)&gt;];
}
1606--1683[label="0.0116279;1pkt 1fpkt"];
1606--1775[label="0.0153846;1pkt 1fpkt"];
1606--1849[label="0.0166667;1pkt 1fpkt"];
1606--1884[label="0.0166667;1pkt 1fpkt"];
1606--2681[label="0.00638978;2pkt 2fpkt"];
1606--2682[label="0.00319489;1pkt 1fpkt"];
1606--2766[label="0.45;9pkt 9fpkt"];
1606--2880[label="0.333333;1pkt 1fpkt"];
1606--3188[label="0.0714286;1pkt 1fpkt"];
1606--3225[label="0.0144928;1pkt 1fpkt"];
1606--3408[label="0.0147059;1pkt 1fpkt"];
1606--3744[label="0.0135135;1pkt 1fpkt"];
1606--3900[label="0.016129;1pkt 1fpkt"];
1606--4376[label="0.0714286;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.128.176.196" dst_port="53"/>
      <filter dst_ip="198.128.176.196" dst_port="1024" src_port="53"/>
    </slice>
    <from sec="1054875657" usec="0"/>
    <to sec="1054876426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.107.36.24"/>
    </slice>
    <from sec="1054876050" usec="0"/>
    <to sec="1054876405" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.205.68.24"/>
    </slice>
    <from sec="1054875740" usec="0"/>
    <to sec="1054875869" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.12.153.24"/>
    </slice>
    <from sec="1054876181" usec="0"/>
    <to sec="1054876247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.11.85.26"/>
    </slice>
    <from sec="1054875611" usec="0"/>
    <to sec="1054876465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945936,1.64668,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_522{
style=filled;
color=gray75;
173[label="84.77.106.27s;162pkt 162fpkt", shape=rectangle, color=red];
531[label="84.77.106.27s;64pkt 64fpkt", shape=ellipse, color=green];
2903[label="84.77.106.27;230pkt 230fpkt", shape=pentagon, color=darkviolet];
stat522[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.77.106.27:65443, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65443: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
173--531[label="1;64pkt 64fpkt"];
173--2903[label="0.993827;161pkt 161fpkt"];
531--2903[label="1;64pkt 64fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="84.77.106.27" src_port="65443"/>
    </slice>
    <from sec="1054876070" usec="0"/>
    <to sec="1054876107" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.210.148.27"/>
    </slice>
    <from sec="1054876123" usec="0"/>
    <to sec="1054876141" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.955904,1.53643,503,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_524{
style=filled;
color=gray75;
17[label="84.48.164.27s;2pkt 2fpkt", shape=rectangle, color=red];
692[label="175.85.29.54;d;133pkt 133fpkt", shape=diamond, color=yellow];
949[label="208.52.73.253;s;1pkt 1fpkt", shape=diamond, color=yellow];
1167[label="84.48.164.27;s;3pkt 3fpkt", shape=diamond, color=yellow];
1479[label="218.46.49.130;s;40pkt 40fpkt", shape=diamond, color=yellow];
1775[label="202.130.218.76;s;65pkt 65fpkt", shape=diamond, color=yellow];
1848[label="169.167.55.143;d;115pkt 115fpkt", shape=diamond, color=yellow];
2119[label="84.48.164.27;s;2pkt 2fpkt", shape=hexagon, color=black];
2505[label="198.128.176.157;d;234pkt 234fpkt", shape=hexagon, color=black];
2831[label="202.136.232.15;40pkt 40fpkt", shape=pentagon, color=darkviolet];
2909[label="84.48.164.27;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3225[label="202.130.218.76;69pkt 69fpkt", shape=pentagon, color=darkviolet];
3339[label="199.185.47.93;83pkt 83fpkt", shape=pentagon, color=darkviolet];
3526[label="218.46.49.129;127pkt 127fpkt", shape=pentagon, color=darkviolet];
3534[label="218.46.49.130;45pkt 45fpkt", shape=pentagon, color=darkviolet];
3799[label="199.185.46.174;36pkt 36fpkt", shape=pentagon, color=darkviolet];
4170[label="208.52.73.253;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4505[label="218.46.49.129;127pkt 127fpkt", shape=invtriangle, color=brown];
4509[label="218.46.49.130;44pkt 44fpkt", shape=invtriangle, color=brown];
4607[label="199.185.46.174;35pkt 35fpkt", shape=invtriangle, color=brown];
stat524[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, *:*}[43.2763%]&lt;BR/&gt;{*:53, *:*}[39.1198%]&lt;BR/&gt;{*:*, 198.128.176.157:*}[28.6064%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.8239%)&lt;BR/&gt; 53: (20.1827%)&lt;BR/&gt; 1518: (4.23588%)&lt;BR/&gt; 4930: (4.02824%)&lt;BR/&gt; 25: (1.99336%)&gt;];
}
17--692[label="1;2pkt 2fpkt"];
17--1167[label="1;2pkt 2fpkt"];
17--2119[label="1;2pkt 2fpkt"];
17--2669[label="1;2pkt 2fpkt"];
17--2909[label="0.5;1pkt 1fpkt"];
692--949[label="1;1pkt 1fpkt"];
692--1089[label="0.213333;16pkt 16fpkt"];
692--1130[label="0.120301;16pkt 16fpkt"];
692--1167[label="1;3pkt 3fpkt"];
692--1479[label="0.175;7pkt 7fpkt"];
692--1683[label="0.0232558;2pkt 2fpkt"];
692--1775[label="0.0153846;1pkt 1fpkt"];
692--2119[label="1;2pkt 2fpkt"];
692--2143[label="0.213333;16pkt 16fpkt"];
692--2625[label="0.5;10pkt 10fpkt"];
692--2669[label="0.0451128;6pkt 6fpkt"];
692--2831[label="0.025;1pkt 1fpkt"];
692--2909[label="1;2pkt 2fpkt"];
692--3225[label="0.0144928;1pkt 1fpkt"];
692--3339[label="0.0963855;8pkt 8fpkt"];
692--3526[label="0.141732;18pkt 18fpkt"];
692--3534[label="0.155556;7pkt 7fpkt"];
692--3560[label="0.197531;16pkt 16fpkt"];
692--3799[label="0.722222;26pkt 26fpkt"];
692--4170[label="1;1pkt 1fpkt"];
692--4505[label="0.141732;18pkt 18fpkt"];
692--4509[label="0.159091;7pkt 7fpkt"];
692--4607[label="0.742857;26pkt 26fpkt"];
949--2669[label="1;1pkt 1fpkt"];
949--4170[label="1;1pkt 1fpkt"];
1167--2119[label="1;2pkt 2fpkt"];
1167--2669[label="0.666667;2pkt 2fpkt"];
1167--2909[label="1;2pkt 2fpkt"];
1479--2572[label="0.825;33pkt 33fpkt"];
1479--2669[label="0.05;2pkt 2fpkt"];
1479--3534[label="1;40pkt 40fpkt"];
1479--4509[label="0.975;39pkt 39fpkt"];
1775--1848[label="0.0153846;1pkt 1fpkt"];
1775--1852[label="0.0153846;1pkt 1fpkt"];
1775--1854[label="0.0153846;1pkt 1fpkt"];
1775--1864[label="0.0153846;1pkt 1fpkt"];
1775--2088[label="0.0461538;3pkt 3fpkt"];
1775--2097[label="0.0153846;1pkt 1fpkt"];
1775--2112[label="0.0153846;1pkt 1fpkt"];
1775--2179[label="0.0153846;1pkt 1fpkt"];
1775--2182[label="0.0153846;1pkt 1fpkt"];
1775--2189[label="0.0153846;1pkt 1fpkt"];
1775--2201[label="0.0153846;1pkt 1fpkt"];
1775--2207[label="0.0153846;1pkt 1fpkt"];
1775--2252[label="0.0153846;1pkt 1fpkt"];
1775--2270[label="0.0153846;1pkt 1fpkt"];
1775--2278[label="0.0153846;1pkt 1fpkt"];
1775--2396[label="0.0461538;3pkt 3fpkt"];
1775--2498[label="0.0153846;1pkt 1fpkt"];
1775--2503[label="0.0153846;1pkt 1fpkt"];
1775--2505[label="0.0153846;1pkt 1fpkt"];
1775--2544[label="0.0153846;1pkt 1fpkt"];
1775--2549[label="0.0153846;1pkt 1fpkt"];
1775--2633[label="0.0153846;1pkt 1fpkt"];
1775--2662[label="0.0153846;1pkt 1fpkt"];
1775--2681[label="0.0307692;2pkt 2fpkt"];
1775--2690[label="0.0153846;1pkt 1fpkt"];
1775--2702[label="0.0153846;1pkt 1fpkt"];
1775--2710[label="0.0153846;1pkt 1fpkt"];
1775--3225[label="1;65pkt 65fpkt"];
1848--1849[label="0.0166667;1pkt 1fpkt"];
1848--1884[label="0.0166667;1pkt 1fpkt"];
1848--2544[label="1;115pkt 115fpkt"];
1848--2831[label="0.025;1pkt 1fpkt"];
1848--3018[label="0.0416667;1pkt 1fpkt"];
1848--3218[label="0.030303;1pkt 1fpkt"];
1848--3225[label="0.0144928;1pkt 1fpkt"];
1848--3408[label="0.0147059;1pkt 1fpkt"];
1848--3598[label="0.025;1pkt 1fpkt"];
1848--3607[label="0.0588235;1pkt 1fpkt"];
1848--3900[label="0.016129;1pkt 1fpkt"];
1848--4128[label="0.0175439;1pkt 1fpkt"];
1848--4151[label="0.00869565;1pkt 1fpkt"];
1848--4309[label="0.0416667;1pkt 1fpkt"];
1848--4387[label="0.03125;1pkt 1fpkt"];
1848--4746[label="0.0175439;1pkt 1fpkt"];
1848--4811[label="0.0416667;1pkt 1fpkt"];
2119--2669[label="1;2pkt 2fpkt"];
2119--2909[label="0.5;1pkt 1fpkt"];
2505--2681[label="0.0213675;5pkt 5fpkt"];
2505--2766[label="0.15;3pkt 3fpkt"];
2505--2871[label="0.0232558;1pkt 1fpkt"];
2505--3018[label="0.0416667;1pkt 1fpkt"];
2505--3025[label="0.012987;1pkt 1fpkt"];
2505--3114[label="0.142857;1pkt 1fpkt"];
2505--3140[label="0.0042735;1pkt 1fpkt"];
2505--3162[label="0.0042735;1pkt 1fpkt"];
2505--3181[label="0.0042735;1pkt 1fpkt"];
2505--3188[label="0.0714286;1pkt 1fpkt"];
2505--3225[label="0.0144928;1pkt 1fpkt"];
2505--3368[label="0.0333333;1pkt 1fpkt"];
2505--3490[label="0.0125;1pkt 1fpkt"];
2505--3579[label="0.0333333;1pkt 1fpkt"];
2505--3744[label="0.0135135;1pkt 1fpkt"];
2505--3850[label="0.027027;1pkt 1fpkt"];
2505--3900[label="0.016129;1pkt 1fpkt"];
2505--4251[label="0.0227273;1pkt 1fpkt"];
2505--4309[label="0.0416667;1pkt 1fpkt"];
2505--4313[label="0.012987;1pkt 1fpkt"];
2505--4345[label="0.125;1pkt 1fpkt"];
2505--4370[label="0.0042735;1pkt 1fpkt"];
2505--4376[label="0.0714286;1pkt 1fpkt"];
2505--4811[label="0.0416667;1pkt 1fpkt"];
3526--4505[label="1;127pkt 127fpkt"];
3534--4509[label="1;44pkt 44fpkt"];
3799--4607[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="198.128.176.157"/>
      <filter src_port="80"/>
      <filter src_port="53"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.70.229.27"/>
    </slice>
    <from sec="1054876123" usec="0"/>
    <to sec="1054876482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.148.40.28"/>
    </slice>
    <from sec="1054876065" usec="0"/>
    <to sec="1054876452" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.41.89.28"/>
    </slice>
    <from sec="1054875986" usec="0"/>
    <to sec="1054876022" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.563947,1.61415,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_528{
style=filled;
color=gray75;
176[label="84.189.94.30s;60pkt 60fpkt", shape=rectangle, color=red];
2931[label="84.189.94.30;184pkt 184fpkt", shape=pentagon, color=darkviolet];
stat528[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.189.94.30:1044, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1044: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
176--2931[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="84.189.94.30" src_port="1044"/>
    </slice>
    <from sec="1054876414" usec="0"/>
    <to sec="1054876447" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840471,1.56547,503,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_529{
style=filled;
color=gray75;
45[label="200.88.66.69s;2pkt 2fpkt", shape=rectangle, color=red];
1727[label="51.227.80.121;s;90pkt 90fpkt", shape=diamond, color=yellow];
2474[label="51.227.80.121;s;90pkt 90fpkt", shape=hexagon, color=black];
3170[label="200.88.66.69;9pkt 9fpkt", shape=pentagon, color=darkviolet];
stat529[shape=component, label=&lt;Rules:&lt;BR/&gt;{51.227.80.121:80, 199.104.102.143:*}[46.4646%]&lt;BR/&gt;{51.227.80.121:80, 199.104.100.140:*}[40.404%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 27743: (0.52356%)&lt;BR/&gt; 27647: (0.52356%)&lt;BR/&gt; 27645: (0.52356%)&lt;BR/&gt; 27612: (0.52356%)&gt;];
}
45--739[label="0.5;1pkt 1fpkt"];
45--2172[label="0.5;1pkt 1fpkt"];
45--2669[label="0.5;1pkt 1fpkt"];
45--3170[label="1;2pkt 2fpkt"];
1727--1975[label="0.511111;46pkt 46fpkt"];
1727--2172[label="0.433333;39pkt 39fpkt"];
1727--2474[label="1;90pkt 90fpkt"];
1727--2619[label="0.133333;12pkt 12fpkt"];
1727--3492[label="1;89pkt 89fpkt"];
1727--4492[label="1;89pkt 89fpkt"];
1727--4875[label="1;89pkt 89fpkt"];
2474--2619[label="0.133333;12pkt 12fpkt"];
2474--3492[label="1;89pkt 89fpkt"];
2474--4492[label="1;89pkt 89fpkt"];
2474--4875[label="1;89pkt 89fpkt"];
</description>
    <slice>
      <filter dst_ip="199.104.102.143" src_ip="51.227.80.121" src_port="80"/>
      <filter dst_ip="199.104.100.140" src_ip="51.227.80.121" src_port="80"/>
    </slice>
    <from sec="1054875631" usec="0"/>
    <to sec="1054876469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.563947,1.61415,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_530{
style=filled;
color=gray75;
444[label="217.188.194.31s;142pkt 142fpkt", shape=rectangle, color=red];
2937[label="217.188.194.31;166pkt 166fpkt", shape=pentagon, color=darkviolet];
stat530[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.188.194.31:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 11250: (0.324675%)&lt;BR/&gt; 11247: (0.324675%)&lt;BR/&gt; 11245: (0.324675%)&lt;BR/&gt; 11243: (0.324675%)&gt;];
}
444--2937[label="1;142pkt 142fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="217.188.194.31"/>
    </slice>
    <from sec="1054876060" usec="0"/>
    <to sec="1054876087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.563947,1.61415,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_531{
style=filled;
color=gray75;
180[label="213.20.5.32s;119pkt 119fpkt", shape=rectangle, color=red];
2939[label="213.20.5.32;210pkt 210fpkt", shape=pentagon, color=darkviolet];
stat531[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.20.5.32:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
180--533[label="0.663866;79pkt 79fpkt"];
180--2939[label="1;119pkt 119fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="213.20.5.32" src_port="1025"/>
    </slice>
    <from sec="1054875981" usec="0"/>
    <to sec="1054876014" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05661,1.61938,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_532{
style=filled;
color=gray75;
1363[label="175.84.49.235;d;10pkt 10fpkt", shape=diamond, color=yellow];
1387[label="175.84.32.84;d;29pkt 29fpkt", shape=diamond, color=yellow];
1789[label="220.24.15.128;s;5pkt 5fpkt", shape=diamond, color=yellow];
2945[label="220.24.15.33;40pkt 40fpkt", shape=pentagon, color=darkviolet];
4277[label="220.24.15.33;40pkt 40fpkt", shape=invtriangle, color=brown];
4798[label="220.24.15.33;40pkt 40fpkt", shape=invhouse, color=bisque];
stat532[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.24.15.33:80, 175.84.32.85:*}[45.5696%]&lt;BR/&gt;{220.24.15.144:80, 175.84.32.84:*}[32.9114%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.2561%)&lt;BR/&gt; 7070: (1.52439%)&lt;BR/&gt; 6970: (1.21951%)&lt;BR/&gt; 1694: (1.21951%)&lt;BR/&gt; 1920: (0.914634%)&gt;];
}
1363--1789[label="0.4;2pkt 2fpkt"];
1363--2945[label="0.1;1pkt 1fpkt"];
1363--3620[label="0.2;2pkt 2fpkt"];
1363--3701[label="0.1;1pkt 1fpkt"];
1363--3723[label="0.1;1pkt 1fpkt"];
1363--4071[label="0.125;1pkt 1fpkt"];
1363--4277[label="0.1;1pkt 1fpkt"];
1363--4578[label="0.1;1pkt 1fpkt"];
1363--4730[label="0.125;1pkt 1fpkt"];
1363--4798[label="0.1;1pkt 1fpkt"];
1363--4942[label="0.125;1pkt 1fpkt"];
1387--1789[label="0.4;2pkt 2fpkt"];
1387--2669[label="0.0344828;1pkt 1fpkt"];
1387--3620[label="0.896552;26pkt 26fpkt"];
2945--4277[label="1;40pkt 40fpkt"];
2945--4798[label="1;40pkt 40fpkt"];
4277--4798[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.32.85" src_ip="220.24.15.33" src_port="80"/>
      <filter dst_ip="175.84.32.84" src_ip="220.24.15.144" src_port="80"/>
    </slice>
    <from sec="1054875606" usec="0"/>
    <to sec="1054876495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.697078,1.64478,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_533{
style=filled;
color=gray75;
22[label="219.227.76.33s;2pkt 2fpkt", shape=rectangle, color=red];
1648[label="175.85.184.41;d;27pkt 27fpkt", shape=diamond, color=yellow];
1654[label="219.227.76.33;s;4pkt 4fpkt", shape=diamond, color=yellow];
stat533[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.227.76.33:80, 175.85.184.41:*}[38.7097%]&lt;BR/&gt;{*:8080, 175.85.184.41:*}[38.7097%]&lt;BR/&gt;{219.227.170.184:80, 175.85.184.41:*}[22.5806%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.8182%)&lt;BR/&gt; 8080: (18.1818%)&lt;BR/&gt; 1052: (3.0303%)&lt;BR/&gt; 1051: (3.0303%)&lt;BR/&gt; 1131: (1.51515%)&gt;];
}
22--1654[label="1;2pkt 2fpkt"];
22--2948[label="1;2pkt 2fpkt"];
22--4279[label="1;2pkt 2fpkt"];
1648--2948[label="0.347826;8pkt 8fpkt"];
1648--3846[label="0.259259;7pkt 7fpkt"];
1648--3870[label="0.25;6pkt 6fpkt"];
1648--3874[label="0.333333;6pkt 6fpkt"];
1648--4279[label="0.347826;8pkt 8fpkt"];
1648--4631[label="0.259259;7pkt 7fpkt"];
1654--2948[label="1;4pkt 4fpkt"];
1654--4279[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="175.85.184.41" src_port="8080"/>
      <filter dst_ip="175.85.184.41" src_ip="219.227.76.33" src_port="80"/>
      <filter dst_ip="175.85.184.41" src_ip="219.227.170.184" src_port="80"/>
    </slice>
    <from sec="1054876085" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.9.47.34"/>
    </slice>
    <from sec="1054875602" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.4.146.34"/>
    </slice>
    <from sec="1054875639" usec="0"/>
    <to sec="1054875800" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.44.27.37"/>
    </slice>
    <from sec="1054876122" usec="0"/>
    <to sec="1054876152" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.153.135.37"/>
    </slice>
    <from sec="1054875696" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.6.47.38"/>
    </slice>
    <from sec="1054875604" usec="0"/>
    <to sec="1054875774" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.100.3.40"/>
    </slice>
    <from sec="1054876500" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.200.8.40"/>
    </slice>
    <from sec="1054875813" usec="0"/>
    <to sec="1054875845" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.229.41.40"/>
    </slice>
    <from sec="1054876500" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.169.68.40"/>
    </slice>
    <from sec="1054875602" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.563947,1.61415,999,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_543{
style=filled;
color=gray75;
25[label="213.134.51.41s;1pkt 1fpkt", shape=rectangle, color=red];
2994[label="213.134.51.41;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat543[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.134.51.41:6881, 175.85.30.175:61672}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61672: (50%)&lt;BR/&gt; 6881: (50%)&gt;];
}
25--711[label="1;1pkt 1fpkt"];
25--756[label="1;1pkt 1fpkt"];
25--2994[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.85.30.175" dst_port="61672" src_ip="213.134.51.41" src_port="6881"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.66.239.41"/>
    </slice>
    <from sec="1054876147" usec="0"/>
    <to sec="1054876178" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.4.55.44"/>
    </slice>
    <from sec="1054875616" usec="0"/>
    <to sec="1054876400" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.8.105.44"/>
    </slice>
    <from sec="1054875603" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.54.13.45"/>
    </slice>
    <from sec="1054875606" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05247,1.61811,503,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_548{
style=filled;
color=gray75;
30[label="130.151.50.45s;1pkt 1fpkt", shape=rectangle, color=red];
3023[label="130.151.50.45;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4311[label="130.151.50.45;1pkt 1fpkt", shape=invtriangle, color=brown];
4812[label="130.151.50.45;1pkt 1fpkt", shape=invhouse, color=bisque];
stat548[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.151.50.45:80, 199.104.100.179:1186}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1186: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
30--708[label="1;1pkt 1fpkt"];
30--3023[label="1;1pkt 1fpkt"];
30--4311[label="1;1pkt 1fpkt"];
30--4812[label="1;1pkt 1fpkt"];
3023--4311[label="1;1pkt 1fpkt"];
3023--4812[label="1;1pkt 1fpkt"];
4311--4812[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.104.100.179" dst_port="1186" src_ip="130.151.50.45" src_port="80"/>
    </slice>
    <from sec="1054876420" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730842,1.58729,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_549{
style=filled;
color=gray75;
1179[label="175.85.152.128;d;222pkt 222fpkt", shape=diamond, color=yellow];
1180[label="50.27.122.45;s;219pkt 219fpkt", shape=diamond, color=yellow];
3029[label="50.27.122.45;218pkt 218fpkt", shape=pentagon, color=darkviolet];
4314[label="50.27.122.45;219pkt 219fpkt", shape=invtriangle, color=brown];
stat549[shape=component, label=&lt;Rules:&lt;BR/&gt;{50.27.122.45:2064, 175.85.152.128:*}[98.6486%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2064: (49.8292%)&lt;BR/&gt; 2761: (0.22779%)&lt;BR/&gt; 2757: (0.22779%)&lt;BR/&gt; 2755: (0.22779%)&lt;BR/&gt; 2753: (0.22779%)&gt;];
}
1179--1180[label="1;219pkt 219fpkt"];
1179--3029[label="1;218pkt 218fpkt"];
1179--4314[label="1;219pkt 219fpkt"];
1180--3029[label="1;218pkt 218fpkt"];
1180--4314[label="1;219pkt 219fpkt"];
3029--4314[label="1;218pkt 218fpkt"];
</description>
    <slice>
      <filter dst_ip="175.85.152.128" src_ip="50.27.122.45" src_port="2064"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054875992" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945936,1.64668,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_550{
style=filled;
color=gray75;
196[label="199.142.167.45s;151pkt 151fpkt", shape=rectangle, color=red];
537[label="199.142.167.45s;104pkt 104fpkt", shape=ellipse, color=green];
3030[label="199.142.167.45;170pkt 170fpkt", shape=pentagon, color=darkviolet];
stat550[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.142.167.45:1045, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1045: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
196--537[label="1;104pkt 104fpkt"];
196--3030[label="0.993377;150pkt 150fpkt"];
537--3030[label="0.990385;103pkt 103fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.142.167.45" src_port="1045"/>
    </slice>
    <from sec="1054876102" usec="0"/>
    <to sec="1054876131" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.232.136.47"/>
    </slice>
    <from sec="1054876200" usec="0"/>
    <to sec="1054876303" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.571638,1.61542,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_552{
style=filled;
color=gray75;
1587[label="50.110.29.48;s;1pkt 1fpkt", shape=diamond, color=yellow];
3045[label="50.110.29.48;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat552[shape=component, label=&lt;Rules:&lt;BR/&gt;{50.110.29.48:6699, 199.98.97.112:1267}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1267: (50%)&gt;];
}
1587--3045[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.98.97.112" dst_port="1267" src_ip="50.110.29.48" src_port="6699"/>
    </slice>
    <from sec="1054875609" usec="0"/>
    <to sec="1054876497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="142.52.35.48"/>
    </slice>
    <from sec="1054876028" usec="0"/>
    <to sec="1054876044" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.213.169.49"/>
    </slice>
    <from sec="1054875613" usec="0"/>
    <to sec="1054876493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.42.4.50"/>
    </slice>
    <from sec="1054876500" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.91.51.50"/>
    </slice>
    <from sec="1054876247" usec="0"/>
    <to sec="1054876384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.110.225.50"/>
    </slice>
    <from sec="1054875620" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.31.206.51"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.563947,1.61415,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_559{
style=filled;
color=gray75;
201[label="36.89.118.52s;159pkt 159fpkt", shape=rectangle, color=red];
3068[label="36.89.118.52;176pkt 176fpkt", shape=pentagon, color=darkviolet];
stat559[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.89.118.52:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
201--3068[label="1;159pkt 159fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="36.89.118.52" src_port="1026"/>
    </slice>
    <from sec="1054876147" usec="0"/>
    <to sec="1054876177" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.234.202.54"/>
    </slice>
    <from sec="1054876395" usec="0"/>
    <to sec="1054876450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.232.244.55"/>
    </slice>
    <from sec="1054875602" usec="0"/>
    <to sec="1054875726" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.109.141.58"/>
    </slice>
    <from sec="1054875795" usec="0"/>
    <to sec="1054876499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.36.155.58"/>
    </slice>
    <from sec="1054875610" usec="0"/>
    <to sec="1054876499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867864,1.63028,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_564{
style=filled;
color=gray75;
54[label="53.19.146.80s;1pkt 1fpkt", shape=rectangle, color=red];
1065[label="210.157.77.80;s;512pkt 512fpkt", shape=diamond, color=yellow];
1473[label="175.85.13.179;d;104pkt 104fpkt", shape=diamond, color=yellow];
2441[label="175.85.13.179;d;76pkt 76fpkt", shape=hexagon, color=black];
stat564[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.157.77.80:80, *:*}[83.3061%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2063%)&lt;BR/&gt; 0: (0.4329%)&lt;BR/&gt; 5050: (0.2886%)&lt;BR/&gt; 63075: (0.21645%)&lt;BR/&gt; 63060: (0.21645%)&gt;];
}
54--905[label="1;1pkt 1fpkt"];
54--2209[label="1;1pkt 1fpkt"];
1065--1145[label="0.00976562;5pkt 5fpkt"];
1065--1157[label="0.02;1pkt 1fpkt"];
1065--1196[label="0.0325203;4pkt 4fpkt"];
1065--1207[label="0.0179856;5pkt 5fpkt"];
1065--1215[label="0.0152672;2pkt 2fpkt"];
1065--1319[label="0.030303;3pkt 3fpkt"];
1065--1473[label="0.0576923;6pkt 6fpkt"];
1065--1533[label="0.542857;38pkt 38fpkt"];
1065--1593[label="0.029703;3pkt 3fpkt"];
1065--1594[label="0.00308642;1pkt 1fpkt"];
1065--1792[label="0.0266667;4pkt 4fpkt"];
1065--1970[label="0.0214844;11pkt 11fpkt"];
1065--1973[label="0.0136719;7pkt 7fpkt"];
1065--1975[label="0.00390625;2pkt 2fpkt"];
1065--1988[label="0.232422;119pkt 119fpkt"];
1065--2010[label="0.00195312;1pkt 1fpkt"];
1065--2014[label="0.00275482;1pkt 1fpkt"];
1065--2037[label="0.0136719;7pkt 7fpkt"];
1065--2056[label="0.0117647;2pkt 2fpkt"];
1065--2088[label="0.00585938;3pkt 3fpkt"];
1065--2094[label="0.037594;5pkt 5fpkt"];
1065--2120[label="0.0163043;6pkt 6fpkt"];
1065--2128[label="0.117647;8pkt 8fpkt"];
1065--2131[label="1;143pkt 143fpkt"];
1065--2209[label="0.0168067;2pkt 2fpkt"];
1065--2252[label="0.0078125;4pkt 4fpkt"];
1065--2266[label="0.0238095;1pkt 1fpkt"];
1065--2310[label="0.745098;38pkt 38fpkt"];
1065--2315[label="0.015625;8pkt 8fpkt"];
1065--2317[label="0.0117188;6pkt 6fpkt"];
1065--2347[label="0.00619195;2pkt 2fpkt"];
1065--2350[label="0.0238095;2pkt 2fpkt"];
1065--2358[label="0.0422535;3pkt 3fpkt"];
1065--2441[label="0.0789474;6pkt 6fpkt"];
1065--2492[label="0.0117188;6pkt 6fpkt"];
1065--2611[label="0.00976562;5pkt 5fpkt"];
1065--2616[label="0.0120773;5pkt 5fpkt"];
1065--2619[label="0.00390625;2pkt 2fpkt"];
1065--2669[label="0.0390625;20pkt 20fpkt"];
1473--1588[label="0.00961538;1pkt 1fpkt"];
1473--2126[label="0.0285714;1pkt 1fpkt"];
1473--2441[label="1;76pkt 76fpkt"];
1473--3109[label="0.00961538;1pkt 1fpkt"];
1473--3266[label="0.163636;9pkt 9fpkt"];
1473--3438[label="0.285714;4pkt 4fpkt"];
1473--3939[label="0.00961538;1pkt 1fpkt"];
1473--4173[label="0.0833333;3pkt 3fpkt"];
1473--4343[label="0.00961538;1pkt 1fpkt"];
1473--4402[label="0.163636;9pkt 9fpkt"];
1473--4673[label="0.00961538;1pkt 1fpkt"];
2441--3109[label="0.0131579;1pkt 1fpkt"];
2441--3266[label="0.163636;9pkt 9fpkt"];
2441--3438[label="0.285714;4pkt 4fpkt"];
2441--3939[label="0.0131579;1pkt 1fpkt"];
2441--4173[label="0.0555556;2pkt 2fpkt"];
2441--4343[label="0.0131579;1pkt 1fpkt"];
2441--4402[label="0.163636;9pkt 9fpkt"];
2441--4673[label="0.0131579;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="210.157.77.80" src_port="80"/>
    </slice>
    <from sec="1054875602" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.42.242.61"/>
    </slice>
    <from sec="1054875614" usec="0"/>
    <to sec="1054876498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05247,1.61811,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_566{
style=filled;
color=gray75;
451[label="211.162.0.63s;39pkt 39fpkt", shape=rectangle, color=red];
3125[label="211.162.0.63;219pkt 219fpkt", shape=pentagon, color=darkviolet];
4349[label="211.162.0.63;219pkt 219fpkt", shape=invtriangle, color=brown];
4832[label="211.162.0.63;220pkt 220fpkt", shape=invhouse, color=bisque];
stat566[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.162.0.63:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 31545: (6.59971%)&lt;BR/&gt; 31534: (4.5911%)&lt;BR/&gt; 31538: (3.01291%)&lt;BR/&gt; 31543: (2.36729%)&gt;];
}
451--3125[label="1;39pkt 39fpkt"];
451--4349[label="1;39pkt 39fpkt"];
451--4832[label="1;39pkt 39fpkt"];
3125--4349[label="1;219pkt 219fpkt"];
3125--4832[label="1;219pkt 219fpkt"];
4349--4832[label="1;219pkt 219fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="211.162.0.63"/>
    </slice>
    <from sec="1054876378" usec="0"/>
    <to sec="1054876414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.6.35.63"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054875959" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.129.139.63"/>
    </slice>
    <from sec="1054876165" usec="0"/>
    <to sec="1054876345" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.198.137.64"/>
    </slice>
    <from sec="1054876500" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.42.0.65"/>
    </slice>
    <from sec="1054875618" usec="0"/>
    <to sec="1054876498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800521,1.66409,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_571{
style=filled;
color=gray75;
778[label="48.17.205.47;s;565pkt 565fpkt", shape=diamond, color=yellow];
893[label="213.156.59.167;s;1pkt 1fpkt", shape=diamond, color=yellow];
1362[label="176.107.161.65;d;86pkt 86fpkt", shape=diamond, color=yellow];
1366[label="175.85.21.182;d;112pkt 112fpkt", shape=diamond, color=yellow];
2021[label="48.17.205.47;s;351pkt 351fpkt", shape=hexagon, color=black];
2507[label="169.189.233.105;d;39pkt 39fpkt", shape=hexagon, color=black];
stat571[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.17.205.47:80, 199.104.102.143:*}[52.6582%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.9168%)&lt;BR/&gt; 0: (0.606586%)&lt;BR/&gt; 53: (0.389948%)&lt;BR/&gt; 32770: (0.34662%)&lt;BR/&gt; 443: (0.17331%)&gt;];
}
778--790[label="0.00530973;3pkt 3fpkt"];
778--816[label="0.00530973;3pkt 3fpkt"];
778--842[label="0.00353982;2pkt 2fpkt"];
778--892[label="0.0271739;10pkt 10fpkt"];
778--962[label="0.0176991;10pkt 10fpkt"];
778--1013[label="0.0159292;9pkt 9fpkt"];
778--1196[label="0.0569106;7pkt 7fpkt"];
778--1200[label="0.0106195;6pkt 6fpkt"];
778--1362[label="0.0465116;4pkt 4fpkt"];
778--1366[label="0.0357143;4pkt 4fpkt"];
778--1562[label="0.128205;5pkt 5fpkt"];
778--1975[label="0.686726;388pkt 388fpkt"];
778--1988[label="0.00353982;2pkt 2fpkt"];
778--2021[label="1;351pkt 351fpkt"];
778--2030[label="0.00381679;1pkt 1fpkt"];
778--2120[label="0.0271739;10pkt 10fpkt"];
778--2172[label="0.0743363;42pkt 42fpkt"];
778--2350[label="0.047619;4pkt 4fpkt"];
778--2430[label="0.0106195;6pkt 6fpkt"];
778--2507[label="0.128205;5pkt 5fpkt"];
778--2619[label="0.523894;296pkt 296fpkt"];
778--2669[label="0.0424779;24pkt 24fpkt"];
893--2120[label="1;1pkt 1fpkt"];
893--2669[label="1;1pkt 1fpkt"];
893--3759[label="1;1pkt 1fpkt"];
1362--1443[label="0.0813953;7pkt 7fpkt"];
1362--1591[label="0.0930233;8pkt 8fpkt"];
1362--2021[label="0.0465116;4pkt 4fpkt"];
1362--2125[label="0.782609;18pkt 18fpkt"];
1362--2176[label="0.0465116;4pkt 4fpkt"];
1362--2424[label="0.0813953;7pkt 7fpkt"];
1362--2444[label="0.0930233;8pkt 8fpkt"];
1362--2754[label="0.0813953;7pkt 7fpkt"];
1362--3032[label="0.0930233;8pkt 8fpkt"];
1362--3438[label="0.0714286;1pkt 1fpkt"];
1362--3695[label="0.0151515;1pkt 1fpkt"];
1362--3798[label="0.166667;3pkt 3fpkt"];
1366--1369[label="0.708333;17pkt 17fpkt"];
1366--1443[label="0.0178571;2pkt 2fpkt"];
1366--1884[label="0.0166667;1pkt 1fpkt"];
1366--2021[label="0.0267857;3pkt 3fpkt"];
1366--2038[label="0.0178571;2pkt 2fpkt"];
1366--2235[label="0.588235;10pkt 10fpkt"];
1366--2424[label="0.0178571;2pkt 2fpkt"];
1366--2438[label="0.00892857;1pkt 1fpkt"];
1366--2754[label="0.0178571;2pkt 2fpkt"];
1366--3109[label="0.00961538;1pkt 1fpkt"];
1366--3341[label="0.0178571;2pkt 2fpkt"];
1366--3368[label="0.0333333;1pkt 1fpkt"];
1366--3490[label="0.0125;1pkt 1fpkt"];
1366--3775[label="0.0267857;3pkt 3fpkt"];
1366--3900[label="0.016129;1pkt 1fpkt"];
1366--4343[label="0.00952381;1pkt 1fpkt"];
2021--2030[label="0.00381679;1pkt 1fpkt"];
2021--2120[label="0.02849;10pkt 10fpkt"];
2021--2172[label="0.111111;39pkt 39fpkt"];
2021--2350[label="0.047619;4pkt 4fpkt"];
2021--2430[label="0.011396;4pkt 4fpkt"];
2021--2507[label="0.128205;5pkt 5fpkt"];
2021--2619[label="0.726496;255pkt 255fpkt"];
2021--2669[label="0.0683761;24pkt 24fpkt"];
2507--2563[label="0.307692;12pkt 12fpkt"];
2507--2754[label="0.025641;1pkt 1fpkt"];
2507--2797[label="0.0526316;1pkt 1fpkt"];
2507--3005[label="0.307692;12pkt 12fpkt"];
2507--3378[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.104.102.143" src_ip="48.17.205.47" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.101.166.66"/>
    </slice>
    <from sec="1054875609" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.42.0.67"/>
    </slice>
    <from sec="1054875620" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.68.29.67"/>
    </slice>
    <from sec="1054876352" usec="0"/>
    <to sec="1054876400" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.77.47.68"/>
    </slice>
    <from sec="1054875602" usec="0"/>
    <to sec="1054876485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724842,1.586,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_576{
style=filled;
color=gray75;
215[label="192.209.95.69s;131pkt 131fpkt", shape=rectangle, color=red];
3173[label="192.209.95.69;210pkt 210fpkt", shape=pentagon, color=darkviolet];
4368[label="192.209.95.69;210pkt 210fpkt", shape=invtriangle, color=brown];
stat576[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.209.95.69:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
215--3173[label="1;131pkt 131fpkt"];
215--4368[label="1;131pkt 131fpkt"];
3173--4368[label="1;210pkt 210fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="192.209.95.69" src_port="1026"/>
    </slice>
    <from sec="1054875756" usec="0"/>
    <to sec="1054875794" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.159.107.69"/>
    </slice>
    <from sec="1054875838" usec="0"/>
    <to sec="1054875886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.216.45.70"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.563947,1.61415,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_579{
style=filled;
color=gray75;
217[label="196.68.169.71s;151pkt 151fpkt", shape=rectangle, color=red];
3187[label="196.68.169.71;196pkt 196fpkt", shape=pentagon, color=darkviolet];
stat579[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.68.169.71:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
217--3187[label="0.993377;150pkt 150fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.68.169.71" src_port="1027"/>
    </slice>
    <from sec="1054876253" usec="0"/>
    <to sec="1054876286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.56.18.72"/>
    </slice>
    <from sec="1054875792" usec="0"/>
    <to sec="1054876121" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.563947,1.61415,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_581{
style=filled;
color=gray75;
219[label="199.142.98.72s;42pkt 42fpkt", shape=rectangle, color=red];
3196[label="199.142.98.72;121pkt 121fpkt", shape=pentagon, color=darkviolet];
stat581[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.142.98.72:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
219--2683[label="1;42pkt 42fpkt"];
219--3196[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.142.98.72" src_port="1026"/>
    </slice>
    <from sec="1054876190" usec="0"/>
    <to sec="1054876210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.25.234.72"/>
    </slice>
    <from sec="1054876244" usec="0"/>
    <to sec="1054876490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.128.79.73"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.563947,1.61415,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_584{
style=filled;
color=gray75;
223[label="84.3.2.74s;119pkt 119fpkt", shape=rectangle, color=red];
3211[label="84.3.2.74;236pkt 236fpkt", shape=pentagon, color=darkviolet];
stat584[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.3.2.74:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
223--3211[label="1;119pkt 119fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="84.3.2.74" src_port="1025"/>
    </slice>
    <from sec="1054876242" usec="0"/>
    <to sec="1054876296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.55.50.74"/>
    </slice>
    <from sec="1054876456" usec="0"/>
    <to sec="1054876472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.75.243.74"/>
    </slice>
    <from sec="1054876500" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.42.165.77"/>
    </slice>
    <from sec="1054875784" usec="0"/>
    <to sec="1054876033" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.571638,1.61542,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_588{
style=filled;
color=gray75;
1571[label="198.160.5.211;d;276pkt 276fpkt", shape=diamond, color=yellow];
3251[label="99.22.136.80;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat588[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 198.160.5.211:2718}[22.0217%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2718: (10.8156%)&lt;BR/&gt; 1086: (6.91489%)&lt;BR/&gt; 27031: (5.14184%)&lt;BR/&gt; 1282: (4.25532%)&lt;BR/&gt; 1088: (3.7234%)&gt;];
}
1571--3251[label="0.833333;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="198.160.5.211" dst_port="2718"/>
    </slice>
    <from sec="1054875602" usec="0"/>
    <to sec="1054876442" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.217.176.80"/>
    </slice>
    <from sec="1054876415" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.42.0.81"/>
    </slice>
    <from sec="1054875603" usec="0"/>
    <to sec="1054876482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.563947,1.61415,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_591{
style=filled;
color=gray75;
230[label="125.134.12.81s;96pkt 96fpkt", shape=rectangle, color=red];
3254[label="125.134.12.81;120pkt 120fpkt", shape=pentagon, color=darkviolet];
stat591[shape=component, label=&lt;Rules:&lt;BR/&gt;{125.134.12.81:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
230--2687[label="1;96pkt 96fpkt"];
230--3254[label="0.989583;95pkt 95fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="125.134.12.81" src_port="1025"/>
    </slice>
    <from sec="1054876417" usec="0"/>
    <to sec="1054876436" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.107.15.81"/>
    </slice>
    <from sec="1054875978" usec="0"/>
    <to sec="1054876381" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.88.66.81"/>
    </slice>
    <from sec="1054876338" usec="0"/>
    <to sec="1054876408" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770739,1.60066,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_594{
style=filled;
color=gray75;
900[label="134.66.43.111;d;98pkt 98fpkt", shape=diamond, color=yellow];
926[label="48.180.226.55;s;4pkt 4fpkt", shape=diamond, color=yellow];
2038[label="210.157.81.170;s;209pkt 209fpkt", shape=hexagon, color=black];
2202[label="134.66.43.111;d;98pkt 98fpkt", shape=hexagon, color=black];
3067[label="48.180.213.51;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3087[label="48.180.226.55;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat594[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.157.81.170:80, *:*}[68.6469%]&lt;BR/&gt;{*:80, 134.66.43.111:*}[31.3531%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1627%)&lt;BR/&gt; 0: (1.67464%)&lt;BR/&gt; 2542: (0.478469%)&lt;BR/&gt; 2541: (0.478469%)&lt;BR/&gt; 2047: (0.478469%)&gt;];
}
900--926[label="1;4pkt 4fpkt"];
900--1463[label="0.0204082;2pkt 2fpkt"];
900--1464[label="0.0163934;1pkt 1fpkt"];
900--1477[label="0.0102041;1pkt 1fpkt"];
900--1498[label="0.0102041;1pkt 1fpkt"];
900--1675[label="0.0102041;1pkt 1fpkt"];
900--1680[label="0.25;4pkt 4fpkt"];
900--1681[label="0.0394737;3pkt 3fpkt"];
900--1695[label="0.0204082;2pkt 2fpkt"];
900--1757[label="0.0102041;1pkt 1fpkt"];
900--1774[label="0.0285714;2pkt 2fpkt"];
900--1882[label="0.0125;1pkt 1fpkt"];
900--1889[label="0.0263158;1pkt 1fpkt"];
900--1969[label="0.0166667;1pkt 1fpkt"];
900--2038[label="0.0408163;4pkt 4fpkt"];
900--2202[label="1;98pkt 98fpkt"];
900--2250[label="0.0510204;5pkt 5fpkt"];
900--2299[label="0.0102041;1pkt 1fpkt"];
900--2428[label="0.0441176;3pkt 3fpkt"];
900--2433[label="0.0204082;2pkt 2fpkt"];
900--2496[label="0.0102041;1pkt 1fpkt"];
900--2552[label="0.0285714;2pkt 2fpkt"];
900--2606[label="0.0212766;1pkt 1fpkt"];
900--2669[label="0.0714286;7pkt 7fpkt"];
900--2793[label="0.027027;1pkt 1fpkt"];
900--2978[label="0.952381;20pkt 20fpkt"];
900--3067[label="1;5pkt 5fpkt"];
900--3087[label="1;4pkt 4fpkt"];
900--3166[label="0.0102041;1pkt 1fpkt"];
900--3262[label="0.0238095;1pkt 1fpkt"];
900--3269[label="0.0108696;1pkt 1fpkt"];
900--3284[label="0.0102041;1pkt 1fpkt"];
900--3291[label="0.0357143;1pkt 1fpkt"];
900--3307[label="0.0140845;1pkt 1fpkt"];
900--3341[label="0.0510204;5pkt 5fpkt"];
900--3510[label="0.0102041;1pkt 1fpkt"];
900--3520[label="0.0102041;1pkt 1fpkt"];
900--3775[label="0.0408163;4pkt 4fpkt"];
900--3878[label="0.0357143;2pkt 2fpkt"];
900--3905[label="0.0204082;2pkt 2fpkt"];
900--3912[label="0.0434783;3pkt 3fpkt"];
900--4315[label="0.0102041;1pkt 1fpkt"];
900--4410[label="0.0102041;1pkt 1fpkt"];
900--4502[label="0.0102041;1pkt 1fpkt"];
900--4656[label="0.0102041;1pkt 1fpkt"];
900--4660[label="0.0434783;3pkt 3fpkt"];
900--4917[label="0.0204082;2pkt 2fpkt"];
926--2202[label="1;4pkt 4fpkt"];
926--2669[label="0.5;2pkt 2fpkt"];
926--3087[label="1;4pkt 4fpkt"];
2038--2081[label="0.015625;1pkt 1fpkt"];
2038--2120[label="0.00478469;1pkt 1fpkt"];
2038--2202[label="0.0408163;4pkt 4fpkt"];
2038--2209[label="0.218487;26pkt 26fpkt"];
2038--2288[label="0.0111111;1pkt 1fpkt"];
2038--2584[label="0.0285714;1pkt 1fpkt"];
2038--2611[label="0.248804;52pkt 52fpkt"];
2038--2669[label="0.215311;45pkt 45fpkt"];
2038--3775[label="1;209pkt 209fpkt"];
2202--2250[label="0.0510204;5pkt 5fpkt"];
2202--2299[label="0.0102041;1pkt 1fpkt"];
2202--2428[label="0.0441176;3pkt 3fpkt"];
2202--2433[label="0.0204082;2pkt 2fpkt"];
2202--2496[label="0.0102041;1pkt 1fpkt"];
2202--2552[label="0.0285714;2pkt 2fpkt"];
2202--2606[label="0.0212766;1pkt 1fpkt"];
2202--2669[label="0.0714286;7pkt 7fpkt"];
2202--2793[label="0.027027;1pkt 1fpkt"];
2202--2978[label="0.952381;20pkt 20fpkt"];
2202--3067[label="1;5pkt 5fpkt"];
2202--3087[label="1;4pkt 4fpkt"];
2202--3166[label="0.0102041;1pkt 1fpkt"];
2202--3262[label="0.0238095;1pkt 1fpkt"];
2202--3269[label="0.0108696;1pkt 1fpkt"];
2202--3284[label="0.0102041;1pkt 1fpkt"];
2202--3291[label="0.0357143;1pkt 1fpkt"];
2202--3307[label="0.0140845;1pkt 1fpkt"];
2202--3341[label="0.0510204;5pkt 5fpkt"];
2202--3510[label="0.0102041;1pkt 1fpkt"];
2202--3520[label="0.0102041;1pkt 1fpkt"];
2202--3775[label="0.0408163;4pkt 4fpkt"];
2202--3878[label="0.0357143;2pkt 2fpkt"];
2202--3905[label="0.0204082;2pkt 2fpkt"];
2202--3912[label="0.0434783;3pkt 3fpkt"];
2202--4315[label="0.0102041;1pkt 1fpkt"];
2202--4410[label="0.0102041;1pkt 1fpkt"];
2202--4502[label="0.0102041;1pkt 1fpkt"];
2202--4656[label="0.0102041;1pkt 1fpkt"];
2202--4660[label="0.0434783;3pkt 3fpkt"];
2202--4917[label="0.0204082;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="210.157.81.170" src_port="80"/>
      <filter dst_ip="134.66.43.111" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876413" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="174.73.161.81"/>
    </slice>
    <from sec="1054876009" usec="0"/>
    <to sec="1054876185" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.182.197.82"/>
    </slice>
    <from sec="1054875781" usec="0"/>
    <to sec="1054875809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.105.142.83"/>
    </slice>
    <from sec="1054876329" usec="0"/>
    <to sec="1054876366" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.66.65.84"/>
    </slice>
    <from sec="1054875619" usec="0"/>
    <to sec="1054876498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.74.217.85"/>
    </slice>
    <from sec="1054875647" usec="0"/>
    <to sec="1054876250" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.563947,1.61415,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_600{
style=filled;
color=gray75;
237[label="84.72.56.87s;193pkt 193fpkt", shape=rectangle, color=red];
3299[label="84.72.56.87;212pkt 212fpkt", shape=pentagon, color=darkviolet];
stat600[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.72.56.87:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
237--3299[label="1;193pkt 193fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="84.72.56.87" src_port="1026"/>
    </slice>
    <from sec="1054876047" usec="0"/>
    <to sec="1054876083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.72.84.88"/>
    </slice>
    <from sec="1054875638" usec="0"/>
    <to sec="1054875759" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.42.4.90"/>
    </slice>
    <from sec="1054875644" usec="0"/>
    <to sec="1054876464" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.563947,1.61415,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_603{
style=filled;
color=gray75;
241[label="36.18.200.90s;161pkt 161fpkt", shape=rectangle, color=red];
3322[label="36.18.200.90;206pkt 206fpkt", shape=pentagon, color=darkviolet];
stat603[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.18.200.90:1032, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1032: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
241--1699[label="0.00869565;1pkt 1fpkt"];
241--3322[label="1;161pkt 161fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="36.18.200.90" src_port="1032"/>
    </slice>
    <from sec="1054876320" usec="0"/>
    <to sec="1054876353" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.172.100.92"/>
    </slice>
    <from sec="1054875620" usec="0"/>
    <to sec="1054875771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.179.131.92"/>
    </slice>
    <from sec="1054875835" usec="0"/>
    <to sec="1054875858" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_606{
style=filled;
color=gray75;
1826[label="161.139.113.200;s;145pkt 145fpkt", shape=diamond, color=yellow];
stat606[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.139.113.200:80, 175.85.45.23:*}[42.069%]&lt;BR/&gt;{161.139.113.200:80, 175.85.57.125:*}[31.0345%]&lt;BR/&gt;{161.139.113.200:80, 175.84.220.44:*}[26.8966%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62042: (0.344828%)&lt;BR/&gt; 62041: (0.344828%)&lt;BR/&gt; 62040: (0.344828%)&lt;BR/&gt; 62038: (0.344828%)&gt;];
}
1826--1932[label="0.655914;61pkt 61fpkt"];
1826--2593[label="0.655914;61pkt 61fpkt"];
</description>
    <slice>
      <filter dst_ip="175.85.45.23" src_ip="161.139.113.200" src_port="80"/>
      <filter dst_ip="175.85.57.125" src_ip="161.139.113.200" src_port="80"/>
      <filter dst_ip="175.84.220.44" src_ip="161.139.113.200" src_port="80"/>
    </slice>
    <from sec="1054876165" usec="0"/>
    <to sec="1054876338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.563947,1.61415,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_607{
style=filled;
color=gray75;
245[label="49.4.87.93s;99pkt 99fpkt", shape=rectangle, color=red];
3342[label="49.4.87.93;146pkt 146fpkt", shape=pentagon, color=darkviolet];
stat607[shape=component, label=&lt;Rules:&lt;BR/&gt;{49.4.87.93:21042, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21042: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
245--3342[label="1;99pkt 99fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="49.4.87.93" src_port="21042"/>
    </slice>
    <from sec="1054875970" usec="0"/>
    <to sec="1054875993" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.148.212.93"/>
    </slice>
    <from sec="1054875604" usec="0"/>
    <to sec="1054876495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.72.98.96"/>
    </slice>
    <from sec="1054876005" usec="0"/>
    <to sec="1054876026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.12.170.97"/>
    </slice>
    <from sec="1054875760" usec="0"/>
    <to sec="1054875792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.137.116.98"/>
    </slice>
    <from sec="1054875695" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724842,1.586,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_612{
style=filled;
color=gray75;
253[label="209.96.158.100s;120pkt 120fpkt", shape=rectangle, color=red];
3376[label="209.96.158.100;119pkt 119fpkt", shape=pentagon, color=darkviolet];
4446[label="209.96.158.100;120pkt 120fpkt", shape=invtriangle, color=brown];
stat612[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.96.158.100:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
253--3376[label="1;119pkt 119fpkt"];
253--4446[label="1;120pkt 120fpkt"];
3376--4446[label="1;119pkt 119fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="209.96.158.100" src_port="1029"/>
    </slice>
    <from sec="1054875990" usec="0"/>
    <to sec="1054876010" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.697078,1.64478,010,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_613{
style=filled;
color=gray75;
156[label="192.220.137.14s;175pkt 175fpkt", shape=rectangle, color=red];
236[label="49.38.5.87s;52pkt 52fpkt", shape=rectangle, color=red];
1659[label="199.104.123.144;s;65pkt 65fpkt", shape=diamond, color=yellow];
1712[label="134.72.11.51;s;206pkt 206fpkt", shape=diamond, color=yellow];
stat613[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.220.137.14:1025, *:137}[35.1406%]&lt;BR/&gt;{134.72.11.51:*, *:139}[20.6827%]&lt;BR/&gt;{134.72.11.51:*, *:445}[20.6827%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (22.7912%)&lt;BR/&gt; 1025: (17.5703%)&lt;BR/&gt; 445: (10.3414%)&lt;BR/&gt; 139: (10.3414%)&lt;BR/&gt; 1026: (5.22088%)&gt;];
}
156--492[label="0.102857;18pkt 18fpkt"];
156--526[label="1;175pkt 175fpkt"];
156--635[label="0.102857;18pkt 18fpkt"];
236--492[label="0.884615;46pkt 46fpkt"];
236--546[label="1;52pkt 52fpkt"];
236--635[label="0.884615;46pkt 46fpkt"];
236--2683[label="0.557692;29pkt 29fpkt"];
1659--2682[label="0.0153846;1pkt 1fpkt"];
1659--3625[label="0.984615;64pkt 64fpkt"];
1659--4548[label="0.984615;64pkt 64fpkt"];
1712--2676[label="0.0436893;9pkt 9fpkt"];
1712--2677[label="0.0436893;9pkt 9fpkt"];
1712--2684[label="0.0339806;7pkt 7fpkt"];
1712--2700[label="0.0436893;9pkt 9fpkt"];
1712--2701[label="0.0436893;9pkt 9fpkt"];
1712--3061[label="0.995146;205pkt 205fpkt"];
1712--4327[label="1;206pkt 206fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="134.72.11.51"/>
      <filter dst_port="139" src_ip="134.72.11.51"/>
      <filter dst_port="137" src_ip="192.220.137.14" src_port="1025"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.107.34.102"/>
    </slice>
    <from sec="1054875611" usec="0"/>
    <to sec="1054876491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.42.0.103"/>
    </slice>
    <from sec="1054875668" usec="0"/>
    <to sec="1054876494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.78.143.103"/>
    </slice>
    <from sec="1054876308" usec="0"/>
    <to sec="1054876343" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.35.200.103"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.137.208.103"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054876127" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.884557,1.68016,002,0 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_619{
style=filled;
color=gray75;
551[label="84.117.1.105s;64pkt 64fpkt", shape=ellipse, color=green];
3403[label="84.117.1.105;185pkt 185fpkt", shape=pentagon, color=darkviolet];
stat619[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.117.1.105:61003, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61003: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
551--3403[label="0.984375;63pkt 63fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="84.117.1.105" src_port="61003"/>
    </slice>
    <from sec="1054875829" usec="0"/>
    <to sec="1054875859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.107.32.105"/>
    </slice>
    <from sec="1054875613" usec="0"/>
    <to sec="1054876499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.756434,1.65,002,1 0 0 0 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_621{
style=filled;
color=gray75;
263[label="36.133.214.106s;109pkt 109fpkt", shape=rectangle, color=red];
4457[label="36.133.214.106;227pkt 227fpkt", shape=invtriangle, color=brown];
stat621[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.133.214.106:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
263--552[label="1;66pkt 66fpkt"];
263--3413[label="1;109pkt 109fpkt"];
263--4457[label="1;109pkt 109fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="36.133.214.106" src_port="1029"/>
    </slice>
    <from sec="1054875637" usec="0"/>
    <to sec="1054875674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.133.137.108"/>
    </slice>
    <from sec="1054876294" usec="0"/>
    <to sec="1054876311" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.24.96.113"/>
    </slice>
    <from sec="1054875605" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.27.72.114"/>
    </slice>
    <from sec="1054876335" usec="0"/>
    <to sec="1054876353" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724842,1.586,503,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_625{
style=filled;
color=gray75;
273[label="219.27.72.114s;1pkt 1fpkt", shape=rectangle, color=red];
3452[label="50.85.148.114;52pkt 52fpkt", shape=pentagon, color=darkviolet];
4474[label="50.85.148.114;52pkt 52fpkt", shape=invtriangle, color=brown];
stat625[shape=component, label=&lt;Rules:&lt;BR/&gt;{50.85.148.114:80, 175.84.49.98:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1866: (1.90476%)&lt;BR/&gt; 1079: (1.42857%)&lt;BR/&gt; 59591: (0.952381%)&lt;BR/&gt; 53135: (0.952381%)&gt;];
}
273--3452[label="1;1pkt 1fpkt"];
273--4474[label="1;1pkt 1fpkt"];
3452--4474[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.49.98" src_ip="50.85.148.114" src_port="80"/>
    </slice>
    <from sec="1054875676" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.571638,1.61542,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_626{
style=filled;
color=gray75;
1559[label="169.9.112.217;d;86pkt 86fpkt", shape=diamond, color=yellow];
3433[label="173.8.229.109;26pkt 26fpkt", shape=pentagon, color=darkviolet];
3455[label="211.42.201.114;8pkt 8fpkt", shape=pentagon, color=darkviolet];
stat626[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.8.229.109:8080, 169.9.112.217:*}[28.7356%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (21.25%)&lt;BR/&gt; 29084: (7.08333%)&lt;BR/&gt; 7563: (6.25%)&lt;BR/&gt; 22579: (2.91667%)&lt;BR/&gt; 7435: (2.91667%)&gt;];
}
1559--3433[label="0.961538;25pkt 25fpkt"];
1559--3455[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="169.9.112.217" src_ip="173.8.229.109" src_port="8080"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.136.37.115"/>
    </slice>
    <from sec="1054875781" usec="0"/>
    <to sec="1054876080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.194.41.116"/>
    </slice>
    <from sec="1054875973" usec="0"/>
    <to sec="1054876163" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.98.118.116"/>
    </slice>
    <from sec="1054876500" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.160.163.116"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.193.16.117"/>
    </slice>
    <from sec="1054875604" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.134.166.118"/>
    </slice>
    <from sec="1054876151" usec="0"/>
    <to sec="1054876174" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.33.180.119"/>
    </slice>
    <from sec="1054875608" usec="0"/>
    <to sec="1054876497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724842,1.586,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_635{
style=filled;
color=gray75;
282[label="199.12.250.119s;99pkt 99fpkt", shape=rectangle, color=red];
3484[label="199.12.250.119;108pkt 108fpkt", shape=pentagon, color=darkviolet];
4489[label="199.12.250.119;108pkt 108fpkt", shape=invtriangle, color=brown];
stat635[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.12.250.119:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
282--3484[label="1;99pkt 99fpkt"];
282--4489[label="1;99pkt 99fpkt"];
3484--4489[label="1;108pkt 108fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.12.250.119" src_port="1026"/>
    </slice>
    <from sec="1054876364" usec="0"/>
    <to sec="1054876383" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.10.193.120"/>
    </slice>
    <from sec="1054876448" usec="0"/>
    <to sec="1054876499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="139.208.67.121"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_638{
style=filled;
color=gray75;
1850[label="87.24.19.119;s;89pkt 89fpkt", shape=diamond, color=yellow];
stat638[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.24.19.119:80, 175.85.101.150:*}[96.6292%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 13791: (0.561798%)&lt;BR/&gt; 2837: (0.561798%)&lt;BR/&gt; 2836: (0.561798%)&lt;BR/&gt; 2834: (0.561798%)&gt;];
}
1850--2669[label="0.011236;1pkt 1fpkt"];
1850--3478[label="1;88pkt 88fpkt"];
</description>
    <slice>
      <filter dst_ip="175.85.101.150" src_ip="87.24.19.119" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876398" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.60.196.121"/>
    </slice>
    <from sec="1054876307" usec="0"/>
    <to sec="1054876335" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.17.77.122"/>
    </slice>
    <from sec="1054875604" usec="0"/>
    <to sec="1054876490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.138.186.123"/>
    </slice>
    <from sec="1054876500" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.179.224.123"/>
    </slice>
    <from sec="1054875607" usec="0"/>
    <to sec="1054876497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.563947,1.61415,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_643{
style=filled;
color=gray75;
288[label="209.186.134.124s;128pkt 128fpkt", shape=rectangle, color=red];
3502[label="209.186.134.124;154pkt 154fpkt", shape=pentagon, color=darkviolet];
stat643[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.186.134.124:10003, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10003: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
288--3502[label="1;128pkt 128fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="209.186.134.124" src_port="10003"/>
    </slice>
    <from sec="1054875887" usec="0"/>
    <to sec="1054875914" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.19.100.125"/>
    </slice>
    <from sec="1054875605" usec="0"/>
    <to sec="1054876499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.563947,1.61415,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_645{
style=filled;
color=gray75;
290[label="84.116.170.126s;194pkt 194fpkt", shape=rectangle, color=red];
3512[label="84.116.170.126;193pkt 193fpkt", shape=pentagon, color=darkviolet];
stat645[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.116.170.126:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
290--3512[label="1;193pkt 193fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="84.116.170.126" src_port="1028"/>
    </slice>
    <from sec="1054876057" usec="0"/>
    <to sec="1054876089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.66.160.128"/>
    </slice>
    <from sec="1054876385" usec="0"/>
    <to sec="1054876406" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770739,1.60066,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_647{
style=filled;
color=gray75;
851[label="176.107.12.100;d;3pkt 3fpkt", shape=diamond, color=yellow];
852[label="220.24.15.130;s;4pkt 4fpkt", shape=diamond, color=yellow];
2108[label="220.24.15.130;s;4pkt 4fpkt", shape=hexagon, color=black];
3533[label="220.24.15.130;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat647[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.193.195.36:5050, 176.107.12.100:1883}[20%]&lt;BR/&gt;{220.24.15.130:49128, 175.84.32.84:6970}[20%]&lt;BR/&gt;{220.24.15.130:7070, 175.84.32.84:1370}[20%]&lt;BR/&gt;{220.24.15.130:48887, 176.107.12.100:6970}[20%]&lt;BR/&gt;{220.24.15.130:7070, 176.107.12.100:1888}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7070: (23.3333%)&lt;BR/&gt; 6970: (23.3333%)&lt;BR/&gt; 48887: (13.3333%)&lt;BR/&gt; 1888: (13.3333%)&lt;BR/&gt; 49128: (10%)&gt;];
}
851--852[label="0.666667;2pkt 2fpkt"];
851--2108[label="0.666667;2pkt 2fpkt"];
851--3533[label="0.666667;2pkt 2fpkt"];
852--2108[label="1;4pkt 4fpkt"];
852--3533[label="1;4pkt 4fpkt"];
2108--3533[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="176.107.12.100" dst_port="1888" src_ip="220.24.15.130" src_port="7070"/>
      <filter dst_ip="176.107.12.100" dst_port="6970" src_ip="220.24.15.130" src_port="48887"/>
      <filter dst_ip="175.84.32.84" dst_port="1370" src_ip="220.24.15.130" src_port="7070"/>
      <filter dst_ip="175.84.32.84" dst_port="6970" src_ip="220.24.15.130" src_port="49128"/>
      <filter dst_ip="176.107.12.100" dst_port="1883" src_ip="210.193.195.36" src_port="5050"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.187.110.130"/>
    </slice>
    <from sec="1054875608" usec="0"/>
    <to sec="1054876491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.42.2.131"/>
    </slice>
    <from sec="1054875603" usec="0"/>
    <to sec="1054876493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.136.41.131"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054876097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.131.65.131"/>
    </slice>
    <from sec="1054875603" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.10.131.131"/>
    </slice>
    <from sec="1054876400" usec="0"/>
    <to sec="1054876496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.128.181.131"/>
    </slice>
    <from sec="1054875612" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.563947,1.61415,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_654{
style=filled;
color=gray75;
293[label="51.92.217.131s;225pkt 225fpkt", shape=rectangle, color=red];
3545[label="51.92.217.131;233pkt 233fpkt", shape=pentagon, color=darkviolet];
stat654[shape=component, label=&lt;Rules:&lt;BR/&gt;{51.92.217.131:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
293--3545[label="1;225pkt 225fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="51.92.217.131" src_port="1025"/>
    </slice>
    <from sec="1054876333" usec="0"/>
    <to sec="1054876370" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.44.253.131"/>
    </slice>
    <from sec="1054875829" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.176.181.132"/>
    </slice>
    <from sec="1054875604" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.154.224.133"/>
    </slice>
    <from sec="1054876281" usec="0"/>
    <to sec="1054876303" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.34.82.134"/>
    </slice>
    <from sec="1054876500" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.111.108.135"/>
    </slice>
    <from sec="1054876500" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.571638,1.61542,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_660{
style=filled;
color=gray75;
1928[label="198.128.177.41;d;4pkt 4fpkt", shape=diamond, color=yellow];
3566[label="87.32.195.135;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat660[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.226.170.89:2784, 198.128.177.41:2323}[25%]&lt;BR/&gt;{208.226.170.89:14555, 198.128.177.41:2706}[25%]&lt;BR/&gt;{87.32.195.135:1246, 198.128.177.41:2323}[25%]&lt;BR/&gt;{87.32.195.135:2359, 198.128.177.41:2720}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2720: (20%)&lt;BR/&gt; 2359: (20%)&lt;BR/&gt; 2323: (20%)&lt;BR/&gt; 14555: (10%)&lt;BR/&gt; 2784: (10%)&gt;];
}
1928--3566[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.128.177.41" dst_port="2720" src_ip="87.32.195.135" src_port="2359"/>
      <filter dst_ip="198.128.177.41" dst_port="2323" src_ip="87.32.195.135" src_port="1246"/>
      <filter dst_ip="198.128.177.41" dst_port="2706" src_ip="208.226.170.89" src_port="14555"/>
      <filter dst_ip="198.128.177.41" dst_port="2323" src_ip="208.226.170.89" src_port="2784"/>
    </slice>
    <from sec="1054876265" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.125.67.136"/>
    </slice>
    <from sec="1054875659" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.139.135.136"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054876499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_663{
style=filled;
color=gray75;
77[label="84.59.53.137s;2pkt 2fpkt", shape=rectangle, color=red];
stat663[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.59.53.137:80, 199.98.117.1:2266}[50%]&lt;BR/&gt;{84.59.53.137:80, 199.98.117.1:2272}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2272: (25%)&lt;BR/&gt; 2266: (25%)&gt;];
}
77--1085[label="1;2pkt 2fpkt"];
77--2140[label="1;2pkt 2fpkt"];
77--3576[label="1;2pkt 2fpkt"];
77--4527[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="199.98.117.1" dst_port="2272" src_ip="84.59.53.137" src_port="80"/>
      <filter dst_ip="199.98.117.1" dst_port="2266" src_ip="84.59.53.137" src_port="80"/>
    </slice>
    <from sec="1054875771" usec="0"/>
    <to sec="1054875778" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730842,1.58729,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_664{
style=filled;
color=gray75;
969[label="199.104.120.101;d;336pkt 336fpkt", shape=diamond, color=yellow];
3415[label="192.42.0.107;24pkt 24fpkt", shape=pentagon, color=darkviolet];
3578[label="219.117.139.137;32pkt 32fpkt", shape=pentagon, color=darkviolet];
3765[label="219.117.139.168;19pkt 19fpkt", shape=pentagon, color=darkviolet];
4458[label="192.42.0.107;24pkt 24fpkt", shape=invtriangle, color=brown];
4528[label="219.117.139.137;32pkt 32fpkt", shape=invtriangle, color=brown];
stat664[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 199.104.120.101:*}[96.0227%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.6081%)&lt;BR/&gt; 53: (1.82013%)&lt;BR/&gt; 0: (0.642398%)&lt;BR/&gt; 4984: (0.321199%)&lt;BR/&gt; 4983: (0.321199%)&gt;];
}
969--1059[label="0.00297619;1pkt 1fpkt"];
969--1065[label="0.00297619;1pkt 1fpkt"];
969--1289[label="0.00735294;1pkt 1fpkt"];
969--1347[label="0.00735294;1pkt 1fpkt"];
969--1454[label="0.00526316;1pkt 1fpkt"];
969--1471[label="0.0434783;6pkt 6fpkt"];
969--1577[label="0.0142857;1pkt 1fpkt"];
969--1601[label="0.0208333;1pkt 1fpkt"];
969--1683[label="0.0116279;1pkt 1fpkt"];
969--1706[label="0.0107527;1pkt 1fpkt"];
969--1775[label="0.0153846;1pkt 1fpkt"];
969--1779[label="0.00724638;1pkt 1fpkt"];
969--2019[label="0.00297619;1pkt 1fpkt"];
969--2250[label="0.0797546;26pkt 26fpkt"];
969--2281[label="0.00578035;1pkt 1fpkt"];
969--2438[label="0.00735294;1pkt 1fpkt"];
969--2439[label="0.0504202;6pkt 6fpkt"];
969--2509[label="0.00847458;1pkt 1fpkt"];
969--2510[label="0.00297619;1pkt 1fpkt"];
969--2669[label="0.0446429;15pkt 15fpkt"];
969--2681[label="0.0119048;4pkt 4fpkt"];
969--3074[label="0.0397351;6pkt 6fpkt"];
969--3225[label="0.0144928;1pkt 1fpkt"];
969--3301[label="0.9375;15pkt 15fpkt"];
969--3341[label="0.116071;39pkt 39fpkt"];
969--3415[label="0.958333;23pkt 23fpkt"];
969--3578[label="0.84375;27pkt 27fpkt"];
969--3714[label="0.00297619;1pkt 1fpkt"];
969--3765[label="0.473684;9pkt 9fpkt"];
969--3947[label="0.0416667;1pkt 1fpkt"];
969--4417[label="0.9375;15pkt 15fpkt"];
969--4458[label="0.958333;23pkt 23fpkt"];
969--4528[label="0.84375;27pkt 27fpkt"];
3415--4458[label="1;24pkt 24fpkt"];
3578--4528[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="199.104.120.101" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730842,1.58729,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_665{
style=filled;
color=gray75;
1827[label="199.98.137.227;d;23pkt 23fpkt", shape=diamond, color=yellow];
1828[label="51.147.159.138;s;15pkt 15fpkt", shape=diamond, color=yellow];
3586[label="51.147.159.138;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4533[label="51.147.159.138;14pkt 14fpkt", shape=invtriangle, color=brown];
stat665[shape=component, label=&lt;Rules:&lt;BR/&gt;{51.147.159.138:80, 199.98.137.227:*}[47.8261%]&lt;BR/&gt;{51.147.159.64:21, 199.98.137.227:*}[34.7826%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 20: (9.09091%)&lt;BR/&gt; 21: (7.57576%)&lt;BR/&gt; 2854: (3.0303%)&lt;BR/&gt; 2852: (3.0303%)&gt;];
}
1827--1828[label="1;15pkt 15fpkt"];
1827--3586[label="1;14pkt 14fpkt"];
1827--4533[label="1;14pkt 14fpkt"];
1828--3586[label="1;14pkt 14fpkt"];
1828--4533[label="1;14pkt 14fpkt"];
3586--4533[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="199.98.137.227" src_ip="51.147.159.138" src_port="80"/>
      <filter dst_ip="199.98.137.227" src_ip="51.147.159.64" src_port="21"/>
    </slice>
    <from sec="1054876171" usec="0"/>
    <to sec="1054876487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840471,1.56547,503,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_666{
style=filled;
color=gray75;
78[label="51.234.160.138s;1pkt 1fpkt", shape=rectangle, color=red];
922[label="51.234.160.138;s;19pkt 19fpkt", shape=diamond, color=yellow];
1978[label="175.84.32.85;d;147pkt 147fpkt", shape=hexagon, color=black];
3587[label="51.234.160.138;19pkt 19fpkt", shape=pentagon, color=darkviolet];
stat666[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.24.15.151:80, 175.84.32.85:*}[50.3401%]&lt;BR/&gt;{220.24.15.33:80, 175.84.32.85:*}[25.1701%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7312%)&lt;BR/&gt; 1423: (1.07527%)&lt;BR/&gt; 1426: (0.806452%)&lt;BR/&gt; 1425: (0.806452%)&lt;BR/&gt; 1424: (0.806452%)&gt;];
}
78--922[label="1;1pkt 1fpkt"];
78--1978[label="1;1pkt 1fpkt"];
78--2669[label="1;1pkt 1fpkt"];
78--3587[label="1;1pkt 1fpkt"];
922--1978[label="1;19pkt 19fpkt"];
922--2669[label="1;19pkt 19fpkt"];
922--3587[label="1;19pkt 19fpkt"];
1978--2669[label="0.14966;22pkt 22fpkt"];
1978--2945[label="0.9;36pkt 36fpkt"];
1978--3167[label="0.00680272;1pkt 1fpkt"];
1978--3587[label="1;19pkt 19fpkt"];
1978--4277[label="0.9;36pkt 36fpkt"];
1978--4367[label="0.00680272;1pkt 1fpkt"];
1978--4798[label="0.9;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.32.85" src_ip="220.24.15.151" src_port="80"/>
      <filter dst_ip="175.84.32.85" src_ip="220.24.15.33" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054875861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.563947,1.61415,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_667{
style=filled;
color=gray75;
302[label="177.113.167.140s;107pkt 107fpkt", shape=rectangle, color=red];
3596[label="177.113.167.140;121pkt 121fpkt", shape=pentagon, color=darkviolet];
stat667[shape=component, label=&lt;Rules:&lt;BR/&gt;{177.113.167.140:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
302--3596[label="0.990654;106pkt 106fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="177.113.167.140" src_port="1028"/>
    </slice>
    <from sec="1054875806" usec="0"/>
    <to sec="1054875825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.74.160.141"/>
    </slice>
    <from sec="1054876374" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.107.175.141"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054876467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.42.209.141"/>
    </slice>
    <from sec="1054875970" usec="0"/>
    <to sec="1054876032" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.107.143.142"/>
    </slice>
    <from sec="1054876345" usec="0"/>
    <to sec="1054876441" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.102.153.142"/>
    </slice>
    <from sec="1054875692" usec="0"/>
    <to sec="1054876499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.43.46.143"/>
    </slice>
    <from sec="1054876500" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.208.160.144"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945936,1.64668,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_676{
style=filled;
color=gray75;
309[label="84.5.0.145s;231pkt 231fpkt", shape=rectangle, color=red];
564[label="84.5.0.145s;119pkt 119fpkt", shape=ellipse, color=green];
3629[label="84.5.0.145;246pkt 246fpkt", shape=pentagon, color=darkviolet];
stat676[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.5.0.145:1045, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1045: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
309--564[label="1;119pkt 119fpkt"];
309--3629[label="1;231pkt 231fpkt"];
564--3629[label="1;119pkt 119fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="84.5.0.145" src_port="1045"/>
    </slice>
    <from sec="1054876402" usec="0"/>
    <to sec="1054876424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.179.107.145"/>
    </slice>
    <from sec="1054875821" usec="0"/>
    <to sec="1054875862" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.158.103.148"/>
    </slice>
    <from sec="1054876119" usec="0"/>
    <to sec="1054876416" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.171.180.148"/>
    </slice>
    <from sec="1054876381" usec="0"/>
    <to sec="1054876415" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.132.4.149"/>
    </slice>
    <from sec="1054876401" usec="0"/>
    <to sec="1054876495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.107.43.150"/>
    </slice>
    <from sec="1054875674" usec="0"/>
    <to sec="1054876393" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.563947,1.61415,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_683{
style=filled;
color=gray75;
315[label="209.127.74.150s;58pkt 58fpkt", shape=rectangle, color=red];
3656[label="209.127.74.150;186pkt 186fpkt", shape=pentagon, color=darkviolet];
stat683[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.127.74.150:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
315--3656[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="209.127.74.150" src_port="1027"/>
    </slice>
    <from sec="1054876339" usec="0"/>
    <to sec="1054876369" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.953451,1.64696,053,0 0 0 1 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_684{
style=filled;
color=gray75;
1903[label="199.98.114.167;d;35pkt 35fpkt", shape=diamond, color=yellow];
3657[label="139.234.161.150;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4891[label="139.234.161.150;1pkt 1fpkt", shape=invhouse, color=bisque];
stat684[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.106.25.44:80, 199.98.114.167:*}[34.2857%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.027%)&lt;BR/&gt; 3366: (4.05405%)&lt;BR/&gt; 2545: (4.05405%)&lt;BR/&gt; 2849: (2.7027%)&lt;BR/&gt; 3129: (1.35135%)&gt;];
}
1903--1950[label="1;1pkt 1fpkt"];
1903--1953[label="1;1pkt 1fpkt"];
1903--2038[label="0.0285714;1pkt 1fpkt"];
1903--2436[label="0.0571429;2pkt 2fpkt"];
1903--2584[label="1;35pkt 35fpkt"];
1903--2669[label="0.0285714;1pkt 1fpkt"];
1903--3039[label="0.0571429;2pkt 2fpkt"];
1903--3657[label="1;1pkt 1fpkt"];
1903--3775[label="0.0857143;3pkt 3fpkt"];
1903--4317[label="0.0571429;2pkt 2fpkt"];
1903--4816[label="0.0571429;2pkt 2fpkt"];
1903--4891[label="1;1pkt 1fpkt"];
3657--4891[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.98.114.167" src_ip="210.106.25.44" src_port="80"/>
    </slice>
    <from sec="1054875935" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.8.68.151"/>
    </slice>
    <from sec="1054875920" usec="0"/>
    <to sec="1054875946" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.563947,1.61415,503,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_686{
style=filled;
color=gray75;
87[label="48.232.100.151s;3pkt 3fpkt", shape=rectangle, color=red];
3663[label="48.232.100.151;27pkt 27fpkt", shape=pentagon, color=darkviolet];
stat686[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.232.100.151:80, 169.189.85.74:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2449: (3.33333%)&lt;BR/&gt; 2442: (3.33333%)&lt;BR/&gt; 2429: (3.33333%)&lt;BR/&gt; 2616: (1.66667%)&gt;];
}
87--1290[label="1;3pkt 3fpkt"];
87--1513[label="1;3pkt 3fpkt"];
87--3663[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.85.74" src_ip="48.232.100.151" src_port="80"/>
    </slice>
    <from sec="1054875911" usec="0"/>
    <to sec="1054876028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04984,1.61909,501,1 1 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_687{
style=filled;
color=gray75;
137[label="48.139.163.153s;3pkt 3fpkt", shape=rectangle, color=red];
497[label="48.139.163.153s;2pkt 2fpkt", shape=ellipse, color=green];
3676[label="48.139.163.153;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4570[label="48.139.163.153;14pkt 14fpkt", shape=invtriangle, color=brown];
stat687[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.139.163.153:21, 199.172.98.4:*}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (33.8235%)&lt;BR/&gt; 51539: (5.88235%)&lt;BR/&gt; 51514: (5.88235%)&lt;BR/&gt; 57414: (4.41176%)&lt;BR/&gt; 51378: (4.41176%)&gt;];
}
137--497[label="1;2pkt 2fpkt"];
137--3676[label="1;3pkt 3fpkt"];
137--4570[label="1;3pkt 3fpkt"];
497--3676[label="1;2pkt 2fpkt"];
497--4570[label="1;2pkt 2fpkt"];
3676--4570[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="199.172.98.4" src_ip="48.139.163.153" src_port="21"/>
    </slice>
    <from sec="1054876449" usec="0"/>
    <to sec="1054876498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.101.78.154"/>
    </slice>
    <from sec="1054876177" usec="0"/>
    <to sec="1054876497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.563947,1.61415,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_689{
style=filled;
color=gray75;
322[label="84.78.5.155s;73pkt 73fpkt", shape=rectangle, color=red];
3687[label="84.78.5.155;122pkt 122fpkt", shape=pentagon, color=darkviolet];
stat689[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.78.5.155:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
322--3687[label="1;73pkt 73fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="84.78.5.155" src_port="1026"/>
    </slice>
    <from sec="1054875744" usec="0"/>
    <to sec="1054875764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.241.138.155"/>
    </slice>
    <from sec="1054875610" usec="0"/>
    <to sec="1054876454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.114.100.156"/>
    </slice>
    <from sec="1054875615" usec="0"/>
    <to sec="1054876495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.42.2.157"/>
    </slice>
    <from sec="1054875637" usec="0"/>
    <to sec="1054876471" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.199.55.158"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054875713" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.202.72.158"/>
    </slice>
    <from sec="1054875616" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.571638,1.61542,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_695{
style=filled;
color=gray75;
1582[label="176.107.34.159;s;24pkt 24fpkt", shape=diamond, color=yellow];
3709[label="176.107.34.159;33pkt 33fpkt", shape=pentagon, color=darkviolet];
stat695[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.107.34.159:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60786: (1.75439%)&lt;BR/&gt; 58753: (1.75439%)&lt;BR/&gt; 54611: (1.75439%)&lt;BR/&gt; 54610: (1.75439%)&gt;];
}
1582--2669[label="0.0833333;2pkt 2fpkt"];
1582--3709[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter src_ip="176.107.34.159" src_port="80"/>
    </slice>
    <from sec="1054875607" usec="0"/>
    <to sec="1054876499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.563947,1.61415,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_696{
style=filled;
color=gray75;
461[label="50.207.30.160s;61pkt 61fpkt", shape=rectangle, color=red];
3712[label="50.207.30.160;137pkt 137fpkt", shape=pentagon, color=darkviolet];
stat696[shape=component, label=&lt;Rules:&lt;BR/&gt;{50.207.30.160:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 16134: (0.505051%)&lt;BR/&gt; 15930: (0.505051%)&lt;BR/&gt; 15886: (0.505051%)&lt;BR/&gt; 15718: (0.505051%)&gt;];
}
461--3712[label="1;61pkt 61fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="50.207.30.160"/>
    </slice>
    <from sec="1054876090" usec="0"/>
    <to sec="1054876113" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.66.77.160"/>
    </slice>
    <from sec="1054875602" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.42.2.161"/>
    </slice>
    <from sec="1054875614" usec="0"/>
    <to sec="1054876363" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.9.40.161"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054876498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.884557,1.68016,002,0 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_700{
style=filled;
color=gray75;
569[label="52.19.140.161s;52pkt 52fpkt", shape=ellipse, color=green];
3722[label="52.19.140.161;227pkt 227fpkt", shape=pentagon, color=darkviolet];
stat700[shape=component, label=&lt;Rules:&lt;BR/&gt;{52.19.140.161:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
569--3722[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="52.19.140.161" src_port="1027"/>
    </slice>
    <from sec="1054875758" usec="0"/>
    <to sec="1054875798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_701{
style=filled;
color=gray75;
1728[label="204.66.137.162;s;7pkt 7fpkt", shape=diamond, color=yellow];
stat701[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.66.137.162:80, 199.104.100.179:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4112: (7.14286%)&lt;BR/&gt; 4103: (7.14286%)&lt;BR/&gt; 4075: (7.14286%)&lt;BR/&gt; 3250: (7.14286%)&gt;];
}
1728--3727[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="199.104.100.179" src_ip="204.66.137.162" src_port="80"/>
    </slice>
    <from sec="1054875955" usec="0"/>
    <to sec="1054876368" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770739,1.60066,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_702{
style=filled;
color=gray75;
930[label="208.137.209.162;s;2pkt 2fpkt", shape=diamond, color=yellow];
978[label="208.137.209.40;s;1pkt 1fpkt", shape=diamond, color=yellow];
1144[label="199.174.145.4;d;15pkt 15fpkt", shape=diamond, color=yellow];
1269[label="219.12.134.40;s;2pkt 2fpkt", shape=diamond, color=yellow];
2239[label="219.12.134.40;s;2pkt 2fpkt", shape=hexagon, color=black];
2322[label="199.174.145.4;d;15pkt 15fpkt", shape=hexagon, color=black];
2991[label="208.137.209.40;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat702[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.137.210.3:80, 199.174.145.4:*}[33.3333%]&lt;BR/&gt;{208.137.210.22:80, 199.174.145.4:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1674: (5.26316%)&lt;BR/&gt; 1672: (5.26316%)&lt;BR/&gt; 1663: (5.26316%)&lt;BR/&gt; 1686: (3.94737%)&gt;];
}
930--1144[label="1;2pkt 2fpkt"];
930--2322[label="1;2pkt 2fpkt"];
930--3730[label="1;2pkt 2fpkt"];
978--1144[label="1;1pkt 1fpkt"];
978--2322[label="1;1pkt 1fpkt"];
978--2669[label="1;1pkt 1fpkt"];
978--2991[label="1;1pkt 1fpkt"];
1144--1269[label="1;2pkt 2fpkt"];
1144--1289[label="0.133333;2pkt 2fpkt"];
1144--2239[label="1;2pkt 2fpkt"];
1144--2322[label="1;15pkt 15fpkt"];
1144--2669[label="0.0666667;1pkt 1fpkt"];
1144--2991[label="1;1pkt 1fpkt"];
1144--3730[label="0.666667;2pkt 2fpkt"];
1269--2239[label="1;2pkt 2fpkt"];
1269--2322[label="1;2pkt 2fpkt"];
2239--2322[label="1;2pkt 2fpkt"];
2322--2669[label="0.0666667;1pkt 1fpkt"];
2322--2991[label="1;1pkt 1fpkt"];
2322--3730[label="0.666667;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="199.174.145.4" src_ip="208.137.210.3" src_port="80"/>
      <filter dst_ip="199.174.145.4" src_ip="208.137.210.22" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.563947,1.61415,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_703{
style=filled;
color=gray75;
328[label="143.79.128.164s;58pkt 58fpkt", shape=rectangle, color=red];
3741[label="143.79.128.164;173pkt 173fpkt", shape=pentagon, color=darkviolet];
stat703[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.79.128.164:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
328--3741[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="143.79.128.164" src_port="1031"/>
    </slice>
    <from sec="1054876439" usec="0"/>
    <to sec="1054876467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08459,1.63248,503,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_704{
style=filled;
color=gray75;
1060[label="220.13.69.191;s;270pkt 270fpkt", shape=diamond, color=yellow];
1191[label="169.189.249.100;d;116pkt 116fpkt", shape=diamond, color=yellow];
1611[label="169.189.249.97;d;81pkt 81fpkt", shape=diamond, color=yellow];
2366[label="169.189.249.97;d;57pkt 57fpkt", shape=hexagon, color=black];
3747[label="48.94.62.165;17pkt 17fpkt", shape=pentagon, color=darkviolet];
4900[label="48.94.62.165;17pkt 17fpkt", shape=invhouse, color=bisque];
stat704[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.13.69.191:80, 169.189.249.100:*}[31.761%]&lt;BR/&gt;{220.13.69.191:80, 169.189.249.97:*}[23.5849%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 32873: (0.358423%)&lt;BR/&gt; 32872: (0.358423%)&lt;BR/&gt; 32870: (0.358423%)&lt;BR/&gt; 32869: (0.358423%)&gt;];
}
1060--1191[label="0.775862;90pkt 90fpkt"];
1060--1611[label="0.851852;69pkt 69fpkt"];
1060--1615[label="0.794521;58pkt 58fpkt"];
1060--1708[label="0.757143;53pkt 53fpkt"];
1060--2366[label="0.894737;51pkt 51fpkt"];
1060--2369[label="0.788462;41pkt 41fpkt"];
1060--2456[label="0.757143;53pkt 53fpkt"];
1060--2665[label="0.757143;53pkt 53fpkt"];
1060--2669[label="0.0037037;1pkt 1fpkt"];
1191--2669[label="0.00862069;1pkt 1fpkt"];
1191--3328[label="0.037037;3pkt 3fpkt"];
1191--3747[label="0.176471;3pkt 3fpkt"];
1191--3978[label="0.047619;1pkt 1fpkt"];
1191--4426[label="0.037037;3pkt 3fpkt"];
1191--4590[label="0.176471;3pkt 3fpkt"];
1191--4900[label="0.176471;3pkt 3fpkt"];
1611--2366[label="1;57pkt 57fpkt"];
1611--3747[label="0.235294;4pkt 4fpkt"];
1611--4590[label="0.235294;4pkt 4fpkt"];
1611--4900[label="0.235294;4pkt 4fpkt"];
2366--3747[label="0.235294;4pkt 4fpkt"];
2366--4590[label="0.235294;4pkt 4fpkt"];
2366--4900[label="0.235294;4pkt 4fpkt"];
3747--4590[label="1;17pkt 17fpkt"];
3747--4900[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.249.100" src_ip="220.13.69.191" src_port="80"/>
      <filter dst_ip="169.189.249.97" src_ip="220.13.69.191" src_port="80"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054876431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.206.221.165"/>
    </slice>
    <from sec="1054875951" usec="0"/>
    <to sec="1054875958" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.220.48.166"/>
    </slice>
    <from sec="1054875894" usec="0"/>
    <to sec="1054876316" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.108.2.167"/>
    </slice>
    <from sec="1054876392" usec="0"/>
    <to sec="1054876416" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.42.4.167"/>
    </slice>
    <from sec="1054875650" usec="0"/>
    <to sec="1054876499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.42.2.170"/>
    </slice>
    <from sec="1054876500" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_711{
style=filled;
color=gray75;
1202[label="192.77.54.236;s;142pkt 142fpkt", shape=diamond, color=yellow];
stat711[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.77.54.236:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2431: (0.704225%)&lt;BR/&gt; 1407: (0.704225%)&lt;BR/&gt; 1252: (0.704225%)&lt;BR/&gt; 59141: (0.352113%)&gt;];
}
1202--1284[label="0.0166667;1pkt 1fpkt"];
1202--1319[label="0.010101;1pkt 1fpkt"];
1202--1378[label="0.0333333;2pkt 2fpkt"];
1202--1408[label="0.0645161;2pkt 2fpkt"];
1202--1733[label="0.181818;4pkt 4fpkt"];
1202--1901[label="0.0322581;1pkt 1fpkt"];
1202--1966[label="0.00704225;1pkt 1fpkt"];
1202--1973[label="0.00704225;1pkt 1fpkt"];
1202--1975[label="0.00704225;1pkt 1fpkt"];
1202--1988[label="0.0985915;14pkt 14fpkt"];
1202--2029[label="0.00704225;1pkt 1fpkt"];
1202--2088[label="0.0140845;2pkt 2fpkt"];
1202--2089[label="0.0140845;2pkt 2fpkt"];
1202--2252[label="0.0140845;2pkt 2fpkt"];
1202--2347[label="0.00704225;1pkt 1fpkt"];
1202--2430[label="0.00704225;1pkt 1fpkt"];
1202--2478[label="0.125;2pkt 2fpkt"];
1202--2492[label="0.0140845;2pkt 2fpkt"];
1202--2611[label="0.00704225;1pkt 1fpkt"];
1202--2616[label="0.028169;4pkt 4fpkt"];
1202--2619[label="0.00704225;1pkt 1fpkt"];
1202--2669[label="0.0774648;11pkt 11fpkt"];
</description>
    <slice>
      <filter src_ip="192.77.54.236" src_port="80"/>
    </slice>
    <from sec="1054875603" usec="0"/>
    <to sec="1054876427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.69.134.170"/>
    </slice>
    <from sec="1054875621" usec="0"/>
    <to sec="1054876499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.895209,1.57226,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_713{
style=filled;
color=gray75;
1085[label="199.98.117.1;d;118pkt 118fpkt", shape=diamond, color=yellow];
1723[label="84.59.53.171;s;23pkt 23fpkt", shape=diamond, color=yellow];
2140[label="199.98.117.1;d;115pkt 115fpkt", shape=hexagon, color=black];
2471[label="84.59.53.171;s;23pkt 23fpkt", shape=hexagon, color=black];
3576[label="84.59.53.137;20pkt 20fpkt", shape=pentagon, color=darkviolet];
3738[label="84.59.53.164;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3781[label="84.59.53.171;23pkt 23fpkt", shape=pentagon, color=darkviolet];
4527[label="84.59.53.137;20pkt 20fpkt", shape=invtriangle, color=brown];
stat713[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.116.55.66:80, 199.98.117.1:*}[50.8475%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7085%)&lt;BR/&gt; 2310: (0.728863%)&lt;BR/&gt; 2307: (0.728863%)&lt;BR/&gt; 2305: (0.728863%)&lt;BR/&gt; 2304: (0.728863%)&gt;];
}
1085--1723[label="1;23pkt 23fpkt"];
1085--2140[label="1;115pkt 115fpkt"];
1085--2471[label="1;23pkt 23fpkt"];
1085--2669[label="0.161017;19pkt 19fpkt"];
1085--2949[label="0.0277778;1pkt 1fpkt"];
1085--3576[label="1;20pkt 20fpkt"];
1085--3738[label="1;1pkt 1fpkt"];
1085--3781[label="1;23pkt 23fpkt"];
1085--4527[label="1;20pkt 20fpkt"];
1723--2140[label="0.913043;21pkt 21fpkt"];
1723--2471[label="1;23pkt 23fpkt"];
1723--3781[label="1;23pkt 23fpkt"];
2140--2471[label="0.913043;21pkt 21fpkt"];
2140--2669[label="0.165217;19pkt 19fpkt"];
2140--2949[label="0.0277778;1pkt 1fpkt"];
2140--3576[label="0.95;19pkt 19fpkt"];
2140--3738[label="1;1pkt 1fpkt"];
2140--3781[label="0.913043;21pkt 21fpkt"];
2140--4527[label="0.95;19pkt 19fpkt"];
2471--3781[label="1;23pkt 23fpkt"];
3576--4527[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="199.98.117.1" src_ip="199.116.55.66" src_port="80"/>
    </slice>
    <from sec="1054875613" usec="0"/>
    <to sec="1054876258" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945936,1.64668,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_714{
style=filled;
color=gray75;
333[label="48.196.169.171s;245pkt 245fpkt", shape=rectangle, color=red];
571[label="48.196.169.171s;245pkt 245fpkt", shape=ellipse, color=green];
3784[label="48.196.169.171;245pkt 245fpkt", shape=pentagon, color=darkviolet];
stat714[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.196.169.171:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
333--571[label="1;245pkt 245fpkt"];
333--3784[label="1;245pkt 245fpkt"];
571--3784[label="1;245pkt 245fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="48.196.169.171" src_port="1028"/>
    </slice>
    <from sec="1054876067" usec="0"/>
    <to sec="1054876086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.105.19.172"/>
    </slice>
    <from sec="1054875659" usec="0"/>
    <to sec="1054876076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724842,1.586,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_716{
style=filled;
color=gray75;
334[label="48.132.66.173s;55pkt 55fpkt", shape=rectangle, color=red];
3794[label="48.132.66.173;212pkt 212fpkt", shape=pentagon, color=darkviolet];
4604[label="48.132.66.173;212pkt 212fpkt", shape=invtriangle, color=brown];
stat716[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.132.66.173:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
334--3794[label="1;55pkt 55fpkt"];
334--4604[label="1;55pkt 55fpkt"];
3794--4604[label="1;212pkt 212fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="48.132.66.173" src_port="1026"/>
    </slice>
    <from sec="1054875747" usec="0"/>
    <to sec="1054875802" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.563947,1.61415,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_717{
style=filled;
color=gray75;
335[label="209.124.150.173s;119pkt 119fpkt", shape=rectangle, color=red];
3796[label="209.124.150.173;145pkt 145fpkt", shape=pentagon, color=darkviolet];
stat717[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.124.150.173:64537, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64537: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
335--3796[label="1;119pkt 119fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="209.124.150.173" src_port="64537"/>
    </slice>
    <from sec="1054875964" usec="0"/>
    <to sec="1054875987" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.70.211.174"/>
    </slice>
    <from sec="1054876368" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724842,1.586,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_719{
style=filled;
color=gray75;
338[label="49.42.233.174s;74pkt 74fpkt", shape=rectangle, color=red];
3804[label="49.42.233.174;131pkt 131fpkt", shape=pentagon, color=darkviolet];
4610[label="49.42.233.174;130pkt 130fpkt", shape=invtriangle, color=brown];
stat719[shape=component, label=&lt;Rules:&lt;BR/&gt;{49.42.233.174:19825, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19825: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
338--2675[label="1;74pkt 74fpkt"];
338--2699[label="1;74pkt 74fpkt"];
338--3804[label="0.986486;73pkt 73fpkt"];
338--4610[label="0.986486;73pkt 73fpkt"];
3804--4610[label="1;130pkt 130fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="49.42.233.174" src_port="19825"/>
    </slice>
    <from sec="1054875707" usec="0"/>
    <to sec="1054875729" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.42.4.176"/>
    </slice>
    <from sec="1054875623" usec="0"/>
    <to sec="1054876480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.48.248.176"/>
    </slice>
    <from sec="1054875603" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.42.2.177"/>
    </slice>
    <from sec="1054875839" usec="0"/>
    <to sec="1054876474" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.18.25.178"/>
    </slice>
    <from sec="1054876152" usec="0"/>
    <to sec="1054876210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.84.32.179"/>
    </slice>
    <from sec="1054876391" usec="0"/>
    <to sec="1054876429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="175.84.213.179"/>
    </slice>
    <from sec="1054876500" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.85.167.180"/>
    </slice>
    <from sec="1054875602" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.60.48.181"/>
    </slice>
    <from sec="1054876058" usec="0"/>
    <to sec="1054876075" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.137.209.181"/>
    </slice>
    <from sec="1054876355" usec="0"/>
    <to sec="1054876499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724842,1.586,503,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_729{
style=filled;
color=gray75;
99[label="210.218.134.183s;1pkt 1fpkt", shape=rectangle, color=red];
3841[label="210.218.134.183;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4628[label="210.218.134.183;9pkt 9fpkt", shape=invtriangle, color=brown];
stat729[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.218.134.183:80, 199.104.67.46:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 39985: (7.5%)&lt;BR/&gt; 42010: (5%)&lt;BR/&gt; 40095: (5%)&lt;BR/&gt; 40053: (5%)&gt;];
}
99--748[label="1;1pkt 1fpkt"];
99--2088[label="1;1pkt 1fpkt"];
99--3841[label="1;1pkt 1fpkt"];
99--4628[label="1;1pkt 1fpkt"];
3841--4628[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="199.104.67.46" src_ip="210.218.134.183" src_port="80"/>
    </slice>
    <from sec="1054875917" usec="0"/>
    <to sec="1054876189" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724842,1.586,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_730{
style=filled;
color=gray75;
464[label="201.130.212.183s;151pkt 151fpkt", shape=rectangle, color=red];
3842[label="201.130.212.183;174pkt 174fpkt", shape=pentagon, color=darkviolet];
4629[label="201.130.212.183;173pkt 173fpkt", shape=invtriangle, color=brown];
stat730[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.130.212.183:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 48820: (0.301205%)&lt;BR/&gt; 48819: (0.301205%)&lt;BR/&gt; 48818: (0.301205%)&lt;BR/&gt; 48817: (0.301205%)&gt;];
}
464--3842[label="1;151pkt 151fpkt"];
464--4629[label="1;151pkt 151fpkt"];
3842--4629[label="1;173pkt 173fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.130.212.183"/>
    </slice>
    <from sec="1054876138" usec="0"/>
    <to sec="1054876165" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.563947,1.61415,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_731{
style=filled;
color=gray75;
356[label="84.29.69.186s;448pkt 448fpkt", shape=rectangle, color=red];
3852[label="84.29.69.186;504pkt 504fpkt", shape=pentagon, color=darkviolet];
stat731[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.29.69.186:1028, *:137}[50%]&lt;BR/&gt;{84.29.69.186:1026, *:137}[28.1746%]&lt;BR/&gt;{84.29.69.186:1025, *:137}[21.8254%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1028: (26.4706%)&lt;BR/&gt; 1026: (12.8676%)&lt;BR/&gt; 1025: (10.6618%)&gt;];
}
356--578[label="1;252pkt 252fpkt"];
356--3852[label="1;448pkt 448fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="84.29.69.186" src_port="1028"/>
      <filter dst_port="137" src_ip="84.29.69.186" src_port="1026"/>
      <filter dst_port="137" src_ip="84.29.69.186" src_port="1025"/>
    </slice>
    <from sec="1054875772" usec="0"/>
    <to sec="1054876402" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.42.2.187"/>
    </slice>
    <from sec="1054875710" usec="0"/>
    <to sec="1054876491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.105.38.187"/>
    </slice>
    <from sec="1054875768" usec="0"/>
    <to sec="1054876499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.170.164.188"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054875665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.571638,1.61542,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_735{
style=filled;
color=gray75;
1390[label="169.189.203.18;d;34pkt 34fpkt", shape=diamond, color=yellow];
1395[label="216.49.134.173;s;83pkt 83fpkt", shape=diamond, color=yellow];
3640[label="192.42.4.147;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3867[label="192.42.2.189;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3973[label="192.42.2.209;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat735[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.49.134.173:80, 169.9.116.169:*}[52%]&lt;BR/&gt;{*:80, 169.189.203.18:*}[24%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.7984%)&lt;BR/&gt; 1863: (6.20155%)&lt;BR/&gt; 1247: (0.775194%)&lt;BR/&gt; 1241: (0.775194%)&lt;BR/&gt; 1240: (0.775194%)&gt;];
}
1390--1395[label="0.0294118;1pkt 1fpkt"];
1390--1458[label="0.117647;4pkt 4fpkt"];
1390--1471[label="0.0294118;1pkt 1fpkt"];
1390--1570[label="0.117647;4pkt 4fpkt"];
1390--1843[label="0.176471;6pkt 6fpkt"];
1390--2283[label="0.117647;4pkt 4fpkt"];
1390--2293[label="0.294118;10pkt 10fpkt"];
1390--2346[label="0.117647;4pkt 4fpkt"];
1390--2439[label="0.0294118;1pkt 1fpkt"];
1390--2542[label="0.176471;6pkt 6fpkt"];
1390--3071[label="0.294118;10pkt 10fpkt"];
1390--3074[label="0.0294118;1pkt 1fpkt"];
1390--3640[label="1;1pkt 1fpkt"];
1390--3867[label="0.2;1pkt 1fpkt"];
1390--3969[label="0.176471;6pkt 6fpkt"];
1390--3973[label="0.166667;1pkt 1fpkt"];
1390--4684[label="0.176471;6pkt 6fpkt"];
1390--4925[label="0.176471;6pkt 6fpkt"];
1395--1590[label="0.0120482;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.203.18" src_port="80"/>
      <filter dst_ip="169.9.116.169" src_ip="216.49.134.173" src_port="80"/>
    </slice>
    <from sec="1054875611" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.994888,1.65314,002,0 1 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_736{
style=filled;
color=gray75;
580[label="50.7.204.190s;50pkt 50fpkt", shape=ellipse, color=green];
3875[label="50.7.204.190;200pkt 200fpkt", shape=pentagon, color=darkviolet];
4643[label="50.7.204.190;199pkt 199fpkt", shape=invtriangle, color=brown];
stat736[shape=component, label=&lt;Rules:&lt;BR/&gt;{50.7.204.190:62232, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62232: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
580--3875[label="1;50pkt 50fpkt"];
580--4643[label="1;50pkt 50fpkt"];
3875--4643[label="1;199pkt 199fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="50.7.204.190" src_port="62232"/>
    </slice>
    <from sec="1054875979" usec="0"/>
    <to sec="1054876012" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.107.190.192"/>
    </slice>
    <from sec="1054875734" usec="0"/>
    <to sec="1054876497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.90.32.193"/>
    </slice>
    <from sec="1054875681" usec="0"/>
    <to sec="1054876497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.107.53.193"/>
    </slice>
    <from sec="1054876256" usec="0"/>
    <to sec="1054876323" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.145.64.193"/>
    </slice>
    <from sec="1054876467" usec="0"/>
    <to sec="1054876497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724842,1.586,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_741{
style=filled;
color=gray75;
363[label="99.102.147.193s;109pkt 109fpkt", shape=rectangle, color=red];
3891[label="99.102.147.193;127pkt 127fpkt", shape=pentagon, color=darkviolet];
4649[label="99.102.147.193;126pkt 126fpkt", shape=invtriangle, color=brown];
stat741[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.102.147.193:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
363--3891[label="1;109pkt 109fpkt"];
363--4649[label="0.990826;108pkt 108fpkt"];
3891--4649[label="1;126pkt 126fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="99.102.147.193" src_port="1027"/>
    </slice>
    <from sec="1054876069" usec="0"/>
    <to sec="1054876089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.123.198.194"/>
    </slice>
    <from sec="1054875619" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.140.159.195"/>
    </slice>
    <from sec="1054875603" usec="0"/>
    <to sec="1054876490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.697078,1.64478,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_744{
style=filled;
color=gray75;
254[label="208.65.167.101s;1pkt 1fpkt", shape=rectangle, color=red];
402[label="211.194.151.232s;1pkt 1fpkt", shape=rectangle, color=red];
1044[label="199.98.139.203;d;57pkt 57fpkt", shape=diamond, color=yellow];
1616[label="199.98.139.243;d;107pkt 107fpkt", shape=diamond, color=yellow];
1792[label="169.189.202.41;d;150pkt 150fpkt", shape=diamond, color=yellow];
stat744[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 169.189.202.41:*}[40.8228%]&lt;BR/&gt;{50.85.151.90:443, 199.98.139.243:*}[25.6329%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (28.7975%)&lt;BR/&gt; 80: (20.7278%)&lt;BR/&gt; 1863: (0.474684%)&lt;BR/&gt; 1398: (0.316456%)&lt;BR/&gt; 1804: (0.158228%)&gt;];
}
254--736[label="1;1pkt 1fpkt"];
402--1145[label="1;1pkt 1fpkt"];
1044--1333[label="0.0350877;2pkt 2fpkt"];
1044--1569[label="0.0701754;4pkt 4fpkt"];
1044--1599[label="0.701754;40pkt 40fpkt"];
1044--1873[label="0.2;10pkt 10fpkt"];
1044--2362[label="0.701754;40pkt 40fpkt"];
1044--2512[label="0.0526316;3pkt 3fpkt"];
1044--2527[label="1;54pkt 54fpkt"];
1044--2561[label="0.0350877;2pkt 2fpkt"];
1044--3292[label="0.0434783;1pkt 1fpkt"];
1044--3343[label="0.0701754;4pkt 4fpkt"];
1616--1706[label="0.0107527;1pkt 1fpkt"];
1616--1800[label="0.0163934;1pkt 1fpkt"];
1616--1873[label="0.44;22pkt 22fpkt"];
1616--2465[label="1;92pkt 92fpkt"];
1616--2561[label="0.757009;81pkt 81fpkt"];
1616--3074[label="0.00934579;1pkt 1fpkt"];
1616--3298[label="0.0138889;1pkt 1fpkt"];
1616--3660[label="0.0625;1pkt 1fpkt"];
1616--4563[label="0.0666667;1pkt 1fpkt"];
1792--1795[label="0.0823529;7pkt 7fpkt"];
1792--1819[label="0.42623;26pkt 26fpkt"];
1792--2019[label="0.00666667;1pkt 1fpkt"];
1792--2131[label="0.027972;4pkt 4fpkt"];
1792--2362[label="0.00884956;1pkt 1fpkt"];
1792--2428[label="0.0147059;1pkt 1fpkt"];
1792--2510[label="0.0133333;2pkt 2fpkt"];
1792--2512[label="0.0136986;1pkt 1fpkt"];
1792--2669[label="0.0266667;4pkt 4fpkt"];
1792--3031[label="0.101351;15pkt 15fpkt"];
1792--3089[label="0.0612245;9pkt 9fpkt"];
1792--3340[label="0.0133333;2pkt 2fpkt"];
1792--3343[label="0.0116279;1pkt 1fpkt"];
1792--3423[label="0.076087;7pkt 7fpkt"];
1792--3439[label="0.00666667;1pkt 1fpkt"];
1792--3447[label="0.0245902;3pkt 3fpkt"];
1792--3584[label="0.0266667;4pkt 4fpkt"];
1792--3597[label="0.285714;28pkt 28fpkt"];
1792--3616[label="0.00917431;1pkt 1fpkt"];
1792--3714[label="0.00666667;1pkt 1fpkt"];
1792--3878[label="0.0714286;4pkt 4fpkt"];
1792--3912[label="0.057971;4pkt 4fpkt"];
1792--4315[label="0.100671;15pkt 15fpkt"];
1792--4461[label="0.076087;7pkt 7fpkt"];
1792--4466[label="0.00666667;1pkt 1fpkt"];
1792--4471[label="0.0245902;3pkt 3fpkt"];
1792--4531[label="0.0266667;4pkt 4fpkt"];
1792--4539[label="0.28866;28pkt 28fpkt"];
1792--4544[label="0.00917431;1pkt 1fpkt"];
1792--4660[label="0.057971;4pkt 4fpkt"];
1792--4814[label="0.101351;15pkt 15fpkt"];
1792--4860[label="0.0752688;7pkt 7fpkt"];
1792--4864[label="0.00666667;1pkt 1fpkt"];
1792--4885[label="0.285714;28pkt 28fpkt"];
1792--4887[label="0.00917431;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.202.41" src_port="80"/>
      <filter dst_ip="199.98.139.243" src_ip="50.85.151.90" src_port="443"/>
    </slice>
    <from sec="1054875606" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.200.117.198"/>
    </slice>
    <from sec="1054875607" usec="0"/>
    <to sec="1054876486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.41.10.199"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054876498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724842,1.586,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_747{
style=filled;
color=gray75;
466[label="208.67.73.201s;55pkt 55fpkt", shape=rectangle, color=red];
3937[label="208.67.73.201;209pkt 209fpkt", shape=pentagon, color=darkviolet];
4671[label="208.67.73.201;209pkt 209fpkt", shape=invtriangle, color=brown];
stat747[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.67.73.201:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 37635: (0.317125%)&lt;BR/&gt; 37499: (0.317125%)&lt;BR/&gt; 37468: (0.317125%)&lt;BR/&gt; 37422: (0.317125%)&gt;];
}
466--3937[label="1;55pkt 55fpkt"];
466--4671[label="1;55pkt 55fpkt"];
3937--4671[label="1;209pkt 209fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.67.73.201"/>
    </slice>
    <from sec="1054875767" usec="0"/>
    <to sec="1054875805" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.563947,1.61415,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_748{
style=filled;
color=gray75;
375[label="210.232.20.202s;108pkt 108fpkt", shape=rectangle, color=red];
3942[label="210.232.20.202;152pkt 152fpkt", shape=pentagon, color=darkviolet];
stat748[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.232.20.202:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
375--492[label="0.0555556;6pkt 6fpkt"];
375--635[label="0.0555556;6pkt 6fpkt"];
375--3942[label="1;108pkt 108fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="210.232.20.202" src_port="1027"/>
    </slice>
    <from sec="1054876158" usec="0"/>
    <to sec="1054876184" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.158.64.202"/>
    </slice>
    <from sec="1054876500" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.106.194.204"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054876493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.563947,1.61415,503,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_751{
style=filled;
color=gray75;
378[label="36.74.44.205s;3pkt 3fpkt", shape=rectangle, color=red];
3955[label="192.77.36.205;78pkt 78fpkt", shape=pentagon, color=darkviolet];
3957[label="51.158.64.205;71pkt 71fpkt", shape=pentagon, color=darkviolet];
stat751[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.77.36.205:80, *:*}[52.349%]&lt;BR/&gt;{51.158.64.205:80, *:*}[47.651%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55663: (0.657895%)&lt;BR/&gt; 55643: (0.657895%)&lt;BR/&gt; 49535: (0.657895%)&lt;BR/&gt; 1062: (0.657895%)&gt;];
}
378--3955[label="0.333333;1pkt 1fpkt"];
378--3957[label="0.666667;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="192.77.36.205" src_port="80"/>
      <filter src_ip="51.158.64.205" src_port="80"/>
    </slice>
    <from sec="1054875613" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.31.194.205"/>
    </slice>
    <from sec="1054876035" usec="0"/>
    <to sec="1054876155" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840471,1.56547,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_753{
style=filled;
color=gray75;
379[label="84.43.202.205s;2pkt 2fpkt", shape=rectangle, color=red];
1331[label="84.180.226.205;s;11pkt 11fpkt", shape=diamond, color=yellow];
1355[label="169.189.207.172;d;23pkt 23fpkt", shape=diamond, color=yellow];
2277[label="84.180.226.205;s;11pkt 11fpkt", shape=hexagon, color=black];
2519[label="169.189.207.172;d;23pkt 23fpkt", shape=hexagon, color=black];
3319[label="195.4.122.90;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3958[label="50.83.82.205;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3961[label="84.180.226.205;11pkt 11fpkt", shape=pentagon, color=darkviolet];
stat753[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.4.122.90:80, 169.189.207.172:*}[34.2857%]&lt;BR/&gt;{84.180.226.205:6588, 199.172.98.4:*}[31.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (26.8421%)&lt;BR/&gt; 6588: (17.8947%)&lt;BR/&gt; 39985: (2.10526%)&lt;BR/&gt; 6699: (2.10526%)&lt;BR/&gt; 2879: (2.10526%)&gt;];
}
379--790[label="0.5;1pkt 1fpkt"];
379--1331[label="0.5;1pkt 1fpkt"];
379--1355[label="0.5;1pkt 1fpkt"];
379--2252[label="0.5;1pkt 1fpkt"];
379--2277[label="0.5;1pkt 1fpkt"];
379--2519[label="0.5;1pkt 1fpkt"];
379--3958[label="1;1pkt 1fpkt"];
379--3961[label="0.5;1pkt 1fpkt"];
1331--2252[label="1;11pkt 11fpkt"];
1331--2277[label="1;11pkt 11fpkt"];
1331--3961[label="1;11pkt 11fpkt"];
1355--1471[label="0.0434783;1pkt 1fpkt"];
1355--2439[label="0.0434783;1pkt 1fpkt"];
1355--2519[label="1;23pkt 23fpkt"];
1355--3074[label="0.0434783;1pkt 1fpkt"];
1355--3319[label="0.923077;12pkt 12fpkt"];
1355--3958[label="1;1pkt 1fpkt"];
2277--3961[label="1;11pkt 11fpkt"];
2519--3074[label="0.0434783;1pkt 1fpkt"];
2519--3319[label="0.923077;12pkt 12fpkt"];
2519--3958[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.207.172" src_ip="195.4.122.90" src_port="80"/>
      <filter dst_ip="199.172.98.4" src_ip="84.180.226.205" src_port="6588"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.46.2.208"/>
    </slice>
    <from sec="1054875620" usec="0"/>
    <to sec="1054876254" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.563947,1.61415,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_756{
style=filled;
color=gray75;
384[label="208.88.228.209s;103pkt 103fpkt", shape=rectangle, color=red];
3979[label="208.88.228.209;172pkt 172fpkt", shape=pentagon, color=darkviolet];
stat756[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.88.228.209:1287, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1287: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
384--3979[label="1;103pkt 103fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.88.228.209" src_port="1287"/>
    </slice>
    <from sec="1054875741" usec="0"/>
    <to sec="1054875769" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730842,1.58729,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_757{
style=filled;
color=gray75;
1364[label="175.84.90.113;d;53pkt 53fpkt", shape=diamond, color=yellow];
3143[label="172.82.144.65;12pkt 12fpkt", shape=pentagon, color=darkviolet];
4358[label="172.82.144.65;12pkt 12fpkt", shape=invtriangle, color=brown];
stat757[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.82.144.77:80, 175.84.90.113:*}[50%]&lt;BR/&gt;{172.82.144.65:80, *:*}[21.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.7013%)&lt;BR/&gt; 1821: (1.94805%)&lt;BR/&gt; 1818: (1.94805%)&lt;BR/&gt; 1815: (1.94805%)&lt;BR/&gt; 1808: (1.94805%)&gt;];
}
1364--1486[label="0.6;30pkt 30fpkt"];
1364--3143[label="0.416667;5pkt 5fpkt"];
1364--3229[label="0.591837;29pkt 29fpkt"];
1364--4358[label="0.416667;5pkt 5fpkt"];
3143--4358[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter src_ip="172.82.144.65" src_port="80"/>
      <filter dst_ip="175.84.90.113" src_ip="172.82.144.77" src_port="80"/>
    </slice>
    <from sec="1054875711" usec="0"/>
    <to sec="1054876392" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.76.105.211"/>
    </slice>
    <from sec="1054876500" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.67.224.211"/>
    </slice>
    <from sec="1054875811" usec="0"/>
    <to sec="1054875836" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.60.0.215"/>
    </slice>
    <from sec="1054876434" usec="0"/>
    <to sec="1054876452" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.32.174.216"/>
    </slice>
    <from sec="1054876310" usec="0"/>
    <to sec="1054876335" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.173.158.218"/>
    </slice>
    <from sec="1054875607" usec="0"/>
    <to sec="1054876259" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05661,1.61938,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_763{
style=filled;
color=gray75;
1861[label="51.158.69.200;d;34pkt 34fpkt", shape=diamond, color=yellow];
2868[label="176.107.238.20;25pkt 25fpkt", shape=pentagon, color=darkviolet];
4248[label="176.107.238.20;25pkt 25fpkt", shape=invtriangle, color=brown];
4792[label="176.107.238.20;25pkt 25fpkt", shape=invhouse, color=bisque];
stat763[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.107.238.20:*, 51.158.69.200:80}[63.1579%]&lt;BR/&gt;{199.98.138.219:*, 51.158.69.200:80}[26.3158%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1618: (2.29358%)&lt;BR/&gt; 1637: (1.83486%)&lt;BR/&gt; 1634: (1.83486%)&lt;BR/&gt; 1631: (1.83486%)&gt;];
}
1861--2670[label="0.0882353;3pkt 3fpkt"];
1861--2682[label="0.117647;4pkt 4fpkt"];
1861--2691[label="0.0294118;1pkt 1fpkt"];
1861--2868[label="0.84;21pkt 21fpkt"];
1861--4025[label="0.434783;10pkt 10fpkt"];
1861--4248[label="0.84;21pkt 21fpkt"];
1861--4792[label="0.84;21pkt 21fpkt"];
2868--4248[label="1;25pkt 25fpkt"];
2868--4792[label="1;25pkt 25fpkt"];
4248--4792[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="51.158.69.200" dst_port="80" src_ip="176.107.238.20"/>
      <filter dst_ip="51.158.69.200" dst_port="80" src_ip="199.98.138.219"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.132.4.220"/>
    </slice>
    <from sec="1054876500" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.164.153.221"/>
    </slice>
    <from sec="1054875956" usec="0"/>
    <to sec="1054876363" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.14.165.221"/>
    </slice>
    <from sec="1054876500" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.171.177.224"/>
    </slice>
    <from sec="1054876436" usec="0"/>
    <to sec="1054876492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724842,1.586,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_769{
style=filled;
color=gray75;
394[label="50.37.214.225s;145pkt 145fpkt", shape=rectangle, color=red];
4046[label="50.37.214.225;179pkt 179fpkt", shape=pentagon, color=darkviolet];
4714[label="50.37.214.225;179pkt 179fpkt", shape=invtriangle, color=brown];
stat769[shape=component, label=&lt;Rules:&lt;BR/&gt;{50.37.214.225:1029, *:137}[99.4413%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1029: (49.8012%)&lt;BR/&gt; 1028: (0.198807%)&gt;];
}
394--4046[label="1;145pkt 145fpkt"];
394--4714[label="1;145pkt 145fpkt"];
4046--4714[label="1;179pkt 179fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="50.37.214.225" src_port="1029"/>
    </slice>
    <from sec="1054875942" usec="0"/>
    <to sec="1054876003" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.227.244.226"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054875691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05247,1.61811,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_771{
style=filled;
color=gray75;
469[label="84.36.107.227s;146pkt 146fpkt", shape=rectangle, color=red];
4055[label="84.36.107.227;177pkt 177fpkt", shape=pentagon, color=darkviolet];
4721[label="84.36.107.227;177pkt 177fpkt", shape=invtriangle, color=brown];
4938[label="84.36.107.227;177pkt 177fpkt", shape=invhouse, color=bisque];
stat771[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.36.107.227:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 45525: (0.295421%)&lt;BR/&gt; 45518: (0.295421%)&lt;BR/&gt; 45511: (0.295421%)&lt;BR/&gt; 45504: (0.295421%)&gt;];
}
469--4055[label="1;146pkt 146fpkt"];
469--4721[label="1;146pkt 146fpkt"];
469--4938[label="1;146pkt 146fpkt"];
4055--4721[label="1;177pkt 177fpkt"];
4055--4938[label="1;177pkt 177fpkt"];
4721--4938[label="1;177pkt 177fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="84.36.107.227"/>
    </slice>
    <from sec="1054876103" usec="0"/>
    <to sec="1054876133" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.181.60.230"/>
    </slice>
    <from sec="1054876500" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.233.72.231"/>
    </slice>
    <from sec="1054876243" usec="0"/>
    <to sec="1054876350" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.50.247.231"/>
    </slice>
    <from sec="1054876051" usec="0"/>
    <to sec="1054876074" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.24.90.232"/>
    </slice>
    <from sec="1054876059" usec="0"/>
    <to sec="1054876095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_776{
style=filled;
color=gray75;
4082[label="211.194.151.232;205pkt 205fpkt", shape=pentagon, color=darkviolet];
stat776[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.194.151.232:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
</description>
    <slice>
      <filter dst_port="137" src_ip="211.194.151.232" src_port="1025"/>
    </slice>
    <from sec="1054875991" usec="0"/>
    <to sec="1054876026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945936,1.64668,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_777{
style=filled;
color=gray75;
403[label="99.110.164.233s;205pkt 205fpkt", shape=rectangle, color=red];
595[label="99.110.164.233s;54pkt 54fpkt", shape=ellipse, color=green];
4087[label="99.110.164.233;224pkt 224fpkt", shape=pentagon, color=darkviolet];
stat777[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.110.164.233:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
403--595[label="1;54pkt 54fpkt"];
403--4087[label="1;205pkt 205fpkt"];
595--4087[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="99.110.164.233" src_port="1025"/>
    </slice>
    <from sec="1054875782" usec="0"/>
    <to sec="1054875817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.17.7.234"/>
    </slice>
    <from sec="1054876327" usec="0"/>
    <to sec="1054876361" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.171.76.234"/>
    </slice>
    <from sec="1054875671" usec="0"/>
    <to sec="1054876497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.81.46.238"/>
    </slice>
    <from sec="1054876500" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.571638,1.61542,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_781{
style=filled;
color=gray75;
1720[label="220.30.45.239;s;1pkt 1fpkt", shape=diamond, color=yellow];
4109[label="220.30.45.239;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat781[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.30.45.239:4662, 169.9.111.96:3406}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 3406: (50%)&gt;];
}
1720--4109[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.9.111.96" dst_port="3406" src_ip="220.30.45.239" src_port="4662"/>
    </slice>
    <from sec="1054875622" usec="0"/>
    <to sec="1054876331" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.25.164.239"/>
    </slice>
    <from sec="1054876500" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.125.33.240"/>
    </slice>
    <from sec="1054875806" usec="0"/>
    <to sec="1054876005" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.159.149.240"/>
    </slice>
    <from sec="1054876051" usec="0"/>
    <to sec="1054876090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.19.104.241"/>
    </slice>
    <from sec="1054875611" usec="0"/>
    <to sec="1054876497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770739,1.60066,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_786{
style=filled;
color=gray75;
909[label="87.24.5.243;s;281pkt 281fpkt", shape=diamond, color=yellow];
1066[label="169.189.207.91;d;37pkt 37fpkt", shape=diamond, color=yellow];
1594[label="175.84.164.58;d;324pkt 324fpkt", shape=diamond, color=yellow];
2214[label="87.24.5.243;s;253pkt 253fpkt", shape=hexagon, color=black];
2356[label="192.42.221.137;s;60pkt 60fpkt", shape=hexagon, color=black];
3861[label="202.210.30.188;10pkt 10fpkt", shape=pentagon, color=darkviolet];
stat786[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.24.5.243:80, *:*}[41.7798%]&lt;BR/&gt;{210.157.77.93:80, 175.84.164.58:*}[31.2217%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3782%)&lt;BR/&gt; 8080: (0.207254%)&lt;BR/&gt; 53: (0.207254%)&lt;BR/&gt; 20925: (0.15544%)&lt;BR/&gt; 20922: (0.15544%)&gt;];
}
909--1066[label="0.216216;8pkt 8fpkt"];
909--1145[label="0.00711744;2pkt 2fpkt"];
909--1168[label="0.00355872;1pkt 1fpkt"];
909--1594[label="0.106762;30pkt 30fpkt"];
909--1966[label="0.00473934;1pkt 1fpkt"];
909--1970[label="0.00711744;2pkt 2fpkt"];
909--1988[label="0.231317;65pkt 65fpkt"];
909--2010[label="0.00355872;1pkt 1fpkt"];
909--2214[label="1;253pkt 253fpkt"];
909--2270[label="0.00355872;1pkt 1fpkt"];
909--2396[label="0.351852;95pkt 95fpkt"];
909--2616[label="0.0569395;16pkt 16fpkt"];
909--2669[label="0.13879;39pkt 39fpkt"];
909--4131[label="1;281pkt 281fpkt"];
909--4747[label="1;281pkt 281fpkt"];
1066--1338[label="0.027027;1pkt 1fpkt"];
1066--1440[label="0.027027;1pkt 1fpkt"];
1066--4131[label="0.216216;8pkt 8fpkt"];
1066--4747[label="0.216216;8pkt 8fpkt"];
1594--1700[label="0.0145985;2pkt 2fpkt"];
1594--1704[label="0.0140845;1pkt 1fpkt"];
1594--1760[label="0.0373832;4pkt 4fpkt"];
1594--2019[label="0.00308642;1pkt 1fpkt"];
1594--2213[label="0.0277778;2pkt 2fpkt"];
1594--2214[label="0.0790514;20pkt 20fpkt"];
1594--2250[label="0.0123457;4pkt 4fpkt"];
1594--2267[label="0.0384615;5pkt 5fpkt"];
1594--2275[label="0.00900901;1pkt 1fpkt"];
1594--2356[label="0.0166667;1pkt 1fpkt"];
1594--2501[label="0.0373832;4pkt 4fpkt"];
1594--2510[label="0.00308642;1pkt 1fpkt"];
1594--2669[label="0.00925926;3pkt 3fpkt"];
1594--2845[label="0.0135135;1pkt 1fpkt"];
1594--3064[label="0.0833333;14pkt 14fpkt"];
1594--3065[label="0.00862069;1pkt 1fpkt"];
1594--3272[label="0.00990099;1pkt 1fpkt"];
1594--3291[label="0.0357143;1pkt 1fpkt"];
1594--3341[label="0.638889;207pkt 207fpkt"];
1594--3467[label="0.0143885;2pkt 2fpkt"];
1594--3580[label="0.0120482;1pkt 1fpkt"];
1594--3682[label="0.0333333;1pkt 1fpkt"];
1594--3714[label="0.00308642;1pkt 1fpkt"];
1594--3861[label="1;10pkt 10fpkt"];
1594--4131[label="0.10453;30pkt 30fpkt"];
1594--4238[label="0.0135135;1pkt 1fpkt"];
1594--4405[label="0.01;1pkt 1fpkt"];
1594--4482[label="0.0144928;2pkt 2fpkt"];
1594--4747[label="0.10453;30pkt 30fpkt"];
1594--4786[label="0.0133333;1pkt 1fpkt"];
1594--4871[label="0.0143885;2pkt 2fpkt"];
1594--4951[label="0.037037;5pkt 5fpkt"];
2214--2270[label="0.00395257;1pkt 1fpkt"];
2214--2396[label="0.375494;95pkt 95fpkt"];
2214--2616[label="0.0632411;16pkt 16fpkt"];
2214--2669[label="0.15415;39pkt 39fpkt"];
2214--4131[label="1;253pkt 253fpkt"];
2214--4747[label="1;253pkt 253fpkt"];
2356--2359[label="0.0333333;2pkt 2fpkt"];
2356--2569[label="0.0333333;2pkt 2fpkt"];
2356--2611[label="0.1;6pkt 6fpkt"];
2356--2616[label="0.0333333;2pkt 2fpkt"];
2356--2669[label="0.0666667;4pkt 4fpkt"];
2356--3580[label="0.983333;59pkt 59fpkt"];
</description>
    <slice>
      <filter src_ip="87.24.5.243" src_port="80"/>
      <filter dst_ip="175.84.164.58" src_ip="210.157.77.93" src_port="80"/>
    </slice>
    <from sec="1054875602" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.75.245.242"/>
    </slice>
    <from sec="1054875602" usec="0"/>
    <to sec="1054875842" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.98.139.243"/>
    </slice>
    <from sec="1054875749" usec="0"/>
    <to sec="1054875974" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724842,1.586,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_789{
style=filled;
color=gray75;
412[label="84.75.155.243s;62pkt 62fpkt", shape=rectangle, color=red];
4134[label="84.75.155.243;119pkt 119fpkt", shape=pentagon, color=darkviolet];
4748[label="84.75.155.243;118pkt 118fpkt", shape=invtriangle, color=brown];
stat789[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.75.155.243:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
412--4134[label="1;62pkt 62fpkt"];
412--4748[label="0.983871;61pkt 61fpkt"];
4134--4748[label="1;118pkt 118fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="84.75.155.243" src_port="1027"/>
    </slice>
    <from sec="1054875784" usec="0"/>
    <to sec="1054875803" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="177.136.169.243"/>
    </slice>
    <from sec="1054876177" usec="0"/>
    <to sec="1054876493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.42.238.244"/>
    </slice>
    <from sec="1054876500" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.32.110.245"/>
    </slice>
    <from sec="1054875604" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770739,1.60066,501,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_793{
style=filled;
color=gray75;
1295[label="176.107.32.3;d;46pkt 46fpkt", shape=diamond, color=yellow];
2186[label="176.107.32.3;d;35pkt 35fpkt", shape=hexagon, color=black];
4149[label="48.4.110.246;23pkt 23fpkt", shape=pentagon, color=darkviolet];
stat793[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.4.110.246:*, 176.107.32.3:*}[52.1739%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (9.13462%)&lt;BR/&gt; 0: (6.73077%)&lt;BR/&gt; 42827: (1.44231%)&lt;BR/&gt; 42824: (1.44231%)&lt;BR/&gt; 42823: (1.44231%)&gt;];
}
1295--2186[label="1;35pkt 35fpkt"];
1295--4149[label="1;23pkt 23fpkt"];
2186--4149[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="176.107.32.3" src_ip="48.4.110.246"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.571638,1.61542,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_794{
style=filled;
color=gray75;
1325[label="175.84.40.248;d;38pkt 38fpkt", shape=diamond, color=yellow];
1626[label="210.96.3.201;s;10pkt 10fpkt", shape=diamond, color=yellow];
3832[label="86.253.46.181;19pkt 19fpkt", shape=pentagon, color=darkviolet];
4155[label="86.176.204.249;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat794[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.253.46.181:80, 175.84.40.248:*}[50%]&lt;BR/&gt;{210.96.3.201:80, 175.84.40.248:*}[31.5789%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2857%)&lt;BR/&gt; 1477: (1.42857%)&lt;BR/&gt; 1476: (1.42857%)&lt;BR/&gt; 1475: (1.42857%)&lt;BR/&gt; 1474: (1.42857%)&gt;];
}
1325--1626[label="1;10pkt 10fpkt"];
1325--2669[label="0.0789474;3pkt 3fpkt"];
1325--3832[label="1;19pkt 19fpkt"];
1325--4155[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.40.248" src_ip="86.253.46.181" src_port="80"/>
      <filter dst_ip="175.84.40.248" src_ip="210.96.3.201" src_port="80"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054876427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.563947,1.61415,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_795{
style=filled;
color=gray75;
421[label="196.143.136.250s;57pkt 57fpkt", shape=rectangle, color=red];
4159[label="196.143.136.250;131pkt 131fpkt", shape=pentagon, color=darkviolet];
stat795[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.143.136.250:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
421--4159[label="1;57pkt 57fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.143.136.250" src_port="1026"/>
    </slice>
    <from sec="1054875958" usec="0"/>
    <to sec="1054875982" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.563947,1.61415,999,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_796{
style=filled;
color=gray75;
422[label="208.6.225.250s;1pkt 1fpkt", shape=rectangle, color=red];
4161[label="48.75.245.250;15pkt 15fpkt", shape=pentagon, color=darkviolet];
stat796[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.75.245.250:*, *:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 12742: (6.25%)&lt;BR/&gt; 31947: (3.125%)&lt;BR/&gt; 13725: (3.125%)&lt;BR/&gt; 13091: (3.125%)&gt;];
}
422--4161[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="48.75.245.250"/>
    </slice>
    <from sec="1054875641" usec="0"/>
    <to sec="1054876411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.563947,1.61415,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_797{
style=filled;
color=gray75;
423[label="84.45.19.252s;191pkt 191fpkt", shape=rectangle, color=red];
4166[label="84.45.19.252;286pkt 286fpkt", shape=pentagon, color=darkviolet];
stat797[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.45.19.252:1029, *:137}[66.7832%]&lt;BR/&gt;{84.45.19.252:1027, *:137}[33.2168%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1029: (40.0419%)&lt;BR/&gt; 1027: (9.95807%)&gt;];
}
423--4166[label="1;191pkt 191fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="84.45.19.252" src_port="1029"/>
      <filter dst_port="137" src_ip="84.45.19.252" src_port="1027"/>
    </slice>
    <from sec="1054875826" usec="0"/>
    <to sec="1054875906" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.99.114.252"/>
    </slice>
    <from sec="1054876053" usec="0"/>
    <to sec="1054876245" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.563947,1.61415,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_799{
style=filled;
color=gray75;
427[label="211.188.141.253s;57pkt 57fpkt", shape=rectangle, color=red];
4171[label="211.188.141.253;113pkt 113fpkt", shape=pentagon, color=darkviolet];
stat799[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.188.141.253:63305, *:137}[94.6903%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 63305: (48.2353%)&lt;BR/&gt; 63304: (1.76471%)&gt;];
}
427--4171[label="1;57pkt 57fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="211.188.141.253" src_port="63305"/>
    </slice>
    <from sec="1054875929" usec="0"/>
    <to sec="1054875947" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.563947,1.61415,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_801{
style=filled;
color=gray75;
428[label="50.33.5.254s;160pkt 160fpkt", shape=rectangle, color=red];
4175[label="50.33.5.254;224pkt 224fpkt", shape=pentagon, color=darkviolet];
stat801[shape=component, label=&lt;Rules:&lt;BR/&gt;{50.33.5.254:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
428--4175[label="1;160pkt 160fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="50.33.5.254" src_port="1027"/>
    </slice>
    <from sec="1054875659" usec="0"/>
    <to sec="1054875695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.209.168.254"/>
    </slice>
    <from sec="1054876046" usec="0"/>
    <to sec="1054876067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.563947,1.61415,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_803{
style=filled;
color=gray75;
473[label="221.15.11.255s;136pkt 136fpkt", shape=rectangle, color=red];
4180[label="221.15.11.255;158pkt 158fpkt", shape=pentagon, color=darkviolet];
stat803[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.15.11.255:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 65233: (0.340136%)&lt;BR/&gt; 65225: (0.340136%)&lt;BR/&gt; 65217: (0.340136%)&lt;BR/&gt; 65208: (0.340136%)&gt;];
}
473--4180[label="1;136pkt 136fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="221.15.11.255"/>
    </slice>
    <from sec="1054875781" usec="0"/>
    <to sec="1054875806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724842,1.586,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_804{
style=filled;
color=gray75;
430[label="99.43.36.255s;35pkt 35fpkt", shape=rectangle, color=red];
4181[label="99.43.36.255;110pkt 110fpkt", shape=pentagon, color=darkviolet];
4763[label="99.43.36.255;109pkt 109fpkt", shape=invtriangle, color=brown];
stat804[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.43.36.255:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
430--4181[label="1;35pkt 35fpkt"];
430--4763[label="0.971429;34pkt 34fpkt"];
4181--4763[label="1;109pkt 109fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="99.43.36.255" src_port="1027"/>
    </slice>
    <from sec="1054875970" usec="0"/>
    <to sec="1054875988" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945936,1.64668,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_805{
style=filled;
color=gray75;
431[label="210.78.37.255s;191pkt 191fpkt", shape=rectangle, color=red];
602[label="210.78.37.255s;57pkt 57fpkt", shape=ellipse, color=green];
4182[label="210.78.37.255;238pkt 238fpkt", shape=pentagon, color=darkviolet];
stat805[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.78.37.255:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
431--602[label="1;57pkt 57fpkt"];
431--4182[label="1;191pkt 191fpkt"];
602--4182[label="1;57pkt 57fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="210.78.37.255" src_port="1026"/>
    </slice>
    <from sec="1054876111" usec="0"/>
    <to sec="1054876152" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05661,1.61938,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_806{
style=filled;
color=gray75;
817[label="220.139.125.1;s;6640pkt 6640fpkt", shape=diamond, color=yellow];
1665[label="129.24.200.25;d;2pkt 2fpkt", shape=diamond, color=yellow];
2717[label="220.139.125.1;7193pkt 7193fpkt", shape=pentagon, color=darkviolet];
4187[label="220.139.125.1;7193pkt 7193fpkt", shape=invtriangle, color=brown];
4768[label="220.139.125.1;7193pkt 7193fpkt", shape=invhouse, color=bisque];
stat806[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.139.125.1:32190, *:1434}[99.9861%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32190: (49.9982%)&lt;BR/&gt; 1434: (49.9982%)&lt;BR/&gt; 0: (0.00354346%)&gt;];
}
817--1010[label="0.0014771;1pkt 1fpkt"];
817--1437[label="0.00221729;1pkt 1fpkt"];
817--1540[label="0.0107527;1pkt 1fpkt"];
817--1665[label="0.5;1pkt 1fpkt"];
817--1866[label="0.00353357;1pkt 1fpkt"];
817--2261[label="0.00157729;1pkt 1fpkt"];
817--2545[label="0.0107527;1pkt 1fpkt"];
817--2674[label="0.0658651;378pkt 378fpkt"];
817--2678[label="0.0654045;380pkt 380fpkt"];
817--2685[label="0.0573795;381pkt 381fpkt"];
817--2698[label="0.0658651;378pkt 378fpkt"];
817--2709[label="0.0658651;378pkt 378fpkt"];
817--2717[label="0.999849;6639pkt 6639fpkt"];
817--4187[label="0.999849;6639pkt 6639fpkt"];
817--4768[label="0.999849;6639pkt 6639fpkt"];
1665--2264[label="0.5;1pkt 1fpkt"];
1665--2717[label="0.5;1pkt 1fpkt"];
1665--2869[label="0.5;1pkt 1fpkt"];
1665--4187[label="0.5;1pkt 1fpkt"];
1665--4249[label="0.5;1pkt 1fpkt"];
1665--4768[label="0.5;1pkt 1fpkt"];
2717--4187[label="1;7193pkt 7193fpkt"];
2717--4768[label="1;7193pkt 7193fpkt"];
4187--4768[label="1;7193pkt 7193fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="220.139.125.1" src_port="32190"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.604013,1.67707,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_807{
style=filled;
color=gray75;
1[label="210.4.213.1s;5pkt 5fpkt", shape=rectangle, color=red];
stat807[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.4.213.1:80, 199.104.102.216:53004}[20%]&lt;BR/&gt;{210.4.213.1:80, 199.104.102.216:53007}[20%]&lt;BR/&gt;{210.4.213.1:80, 199.104.102.216:53008}[20%]&lt;BR/&gt;{210.4.213.1:80, 199.104.102.216:53011}[20%]&lt;BR/&gt;{210.4.213.1:80, 199.104.102.216:53012}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53012: (10%)&lt;BR/&gt; 53011: (10%)&lt;BR/&gt; 53008: (10%)&lt;BR/&gt; 53007: (10%)&gt;];
}
1--1946[label="1;5pkt 5fpkt"];
1--1947[label="1;5pkt 5fpkt"];
1--2719[label="0.5;1pkt 1fpkt"];
1--4188[label="0.5;1pkt 1fpkt"];
1--4769[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.104.102.216" dst_port="53012" src_ip="210.4.213.1" src_port="80"/>
      <filter dst_ip="199.104.102.216" dst_port="53011" src_ip="210.4.213.1" src_port="80"/>
      <filter dst_ip="199.104.102.216" dst_port="53008" src_ip="210.4.213.1" src_port="80"/>
      <filter dst_ip="199.104.102.216" dst_port="53007" src_ip="210.4.213.1" src_port="80"/>
      <filter dst_ip="199.104.102.216" dst_port="53004" src_ip="210.4.213.1" src_port="80"/>
    </slice>
    <from sec="1054876428" usec="0"/>
    <to sec="1054876437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997668,1.65217,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_808{
style=filled;
color=gray75;
2737[label="192.42.4.3;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4195[label="192.42.4.3;9pkt 9fpkt", shape=invtriangle, color=brown];
4771[label="192.42.4.3;9pkt 9fpkt", shape=invhouse, color=bisque];
stat808[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.42.4.3:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3830: (5.55556%)&lt;BR/&gt; 1107: (5.55556%)&lt;BR/&gt; 1091: (5.55556%)&lt;BR/&gt; 1069: (5.55556%)&gt;];
}
2737--4195[label="1;9pkt 9fpkt"];
2737--4771[label="1;9pkt 9fpkt"];
4195--4771[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter src_ip="192.42.4.3" src_port="1863"/>
    </slice>
    <from sec="1054875650" usec="0"/>
    <to sec="1054876488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_810{
style=filled;
color=gray75;
2752[label="183.82.149.4;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4201[label="183.82.149.4;2pkt 2fpkt", shape=invtriangle, color=brown];
stat810[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.82.149.4:80, 176.107.12.136:1382}[50%]&lt;BR/&gt;{183.82.149.4:80, 176.107.12.136:1383}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1383: (25%)&lt;BR/&gt; 1382: (25%)&gt;];
}
2752--4201[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="176.107.12.136" dst_port="1383" src_ip="183.82.149.4" src_port="80"/>
      <filter dst_ip="176.107.12.136" dst_port="1382" src_ip="183.82.149.4" src_port="80"/>
    </slice>
    <from sec="1054876490" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.955904,1.53643,503,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_811{
style=filled;
color=gray75;
133[label="220.46.3.5s;46pkt 46fpkt", shape=rectangle, color=red];
1290[label="169.189.85.74;d;1036pkt 1036fpkt", shape=diamond, color=yellow];
1396[label="53.19.146.80;s;42pkt 42fpkt", shape=diamond, color=yellow];
1397[label="51.83.9.36;s;70pkt 70fpkt", shape=diamond, color=yellow];
1514[label="48.100.203.176;s;35pkt 35fpkt", shape=diamond, color=yellow];
1653[label="220.46.3.5;s;376pkt 376fpkt", shape=diamond, color=yellow];
1938[label="220.46.3.6;s;85pkt 85fpkt", shape=diamond, color=yellow];
2595[label="220.46.3.6;s;85pkt 85fpkt", shape=hexagon, color=black];
2758[label="220.46.3.5;379pkt 379fpkt", shape=pentagon, color=darkviolet];
3232[label="48.139.4.78;34pkt 34fpkt", shape=pentagon, color=darkviolet];
4205[label="220.46.3.5;379pkt 379fpkt", shape=invtriangle, color=brown];
stat811[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.46.3.5:80, 169.189.85.74:*}[36.0577%]&lt;BR/&gt;{220.46.3.10:80, 169.189.85.74:*}[21.3462%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2944: (0.0973899%)&lt;BR/&gt; 2943: (0.0973899%)&lt;BR/&gt; 2942: (0.0973899%)&lt;BR/&gt; 2941: (0.0973899%)&gt;];
}
133--1290[label="1;46pkt 46fpkt"];
133--1653[label="1;46pkt 46fpkt"];
133--2758[label="1;46pkt 46fpkt"];
133--4205[label="1;46pkt 46fpkt"];
1290--1396[label="1;42pkt 42fpkt"];
1290--1397[label="1;70pkt 70fpkt"];
1290--1513[label="1;28pkt 28fpkt"];
1290--1514[label="1;35pkt 35fpkt"];
1290--1653[label="0.99734;375pkt 375fpkt"];
1290--1938[label="1;85pkt 85fpkt"];
1290--1959[label="0.978261;45pkt 45fpkt"];
1290--2595[label="1;85pkt 85fpkt"];
1290--2669[label="0.00772201;8pkt 8fpkt"];
1290--2758[label="0.989446;375pkt 375fpkt"];
1290--2789[label="0.982301;222pkt 222fpkt"];
1290--3232[label="1;34pkt 34fpkt"];
1290--3334[label="0.977778;44pkt 44fpkt"];
1290--3663[label="1;27pkt 27fpkt"];
1290--4205[label="0.989446;375pkt 375fpkt"];
1290--4215[label="0.982301;222pkt 222fpkt"];
1290--4430[label="0.978261;45pkt 45fpkt"];
1290--4778[label="0.982301;222pkt 222fpkt"];
1653--2758[label="1;376pkt 376fpkt"];
1653--4205[label="1;376pkt 376fpkt"];
1938--2595[label="1;85pkt 85fpkt"];
2758--4205[label="1;379pkt 379fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.85.74" src_ip="220.46.3.5" src_port="80"/>
      <filter dst_ip="169.189.85.74" src_ip="220.46.3.10" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997668,1.65217,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_812{
style=filled;
color=gray75;
2781[label="219.77.232.8;108pkt 108fpkt", shape=pentagon, color=darkviolet];
4210[label="219.77.232.8;108pkt 108fpkt", shape=invtriangle, color=brown];
4776[label="219.77.232.8;108pkt 108fpkt", shape=invhouse, color=bisque];
stat812[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.77.232.8:*, *:139}[50%]&lt;BR/&gt;{219.77.232.8:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25%)&lt;BR/&gt; 139: (25%)&lt;BR/&gt; 4884: (0.462963%)&lt;BR/&gt; 4883: (0.462963%)&lt;BR/&gt; 4859: (0.462963%)&gt;];
}
2781--4210[label="1;108pkt 108fpkt"];
2781--4776[label="1;108pkt 108fpkt"];
4210--4776[label="1;108pkt 108fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="219.77.232.8"/>
      <filter dst_port="139" src_ip="219.77.232.8"/>
    </slice>
    <from sec="1054876314" usec="0"/>
    <to sec="1054876453" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_813{
style=filled;
color=gray75;
2786[label="198.128.183.9;217pkt 217fpkt", shape=pentagon, color=darkviolet];
4213[label="198.128.183.9;216pkt 216fpkt", shape=invtriangle, color=brown];
stat813[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.128.183.9:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2786--4213[label="1;216pkt 216fpkt"];
</description>
    <slice>
      <filter src_ip="198.128.183.9"/>
    </slice>
    <from sec="1054875604" usec="0"/>
    <to sec="1054876499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05661,1.61938,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_814{
style=filled;
color=gray75;
1001[label="220.46.3.10;s;226pkt 226fpkt", shape=diamond, color=yellow];
2789[label="220.46.3.10;226pkt 226fpkt", shape=pentagon, color=darkviolet];
4215[label="220.46.3.10;226pkt 226fpkt", shape=invtriangle, color=brown];
4778[label="220.46.3.10;226pkt 226fpkt", shape=invhouse, color=bisque];
stat814[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.46.3.10:80, 169.189.85.74:*}[98.2301%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60627: (0.221239%)&lt;BR/&gt; 2566: (0.221239%)&lt;BR/&gt; 2561: (0.221239%)&lt;BR/&gt; 2559: (0.221239%)&gt;];
}
1001--1207[label="0.0132743;3pkt 3fpkt"];
1001--1290[label="0.982301;222pkt 222fpkt"];
1001--1973[label="0.00442478;1pkt 1fpkt"];
1001--2611[label="0.00442478;1pkt 1fpkt"];
1001--2669[label="0.00442478;1pkt 1fpkt"];
1001--2789[label="1;226pkt 226fpkt"];
1001--4215[label="1;226pkt 226fpkt"];
1001--4778[label="1;226pkt 226fpkt"];
2789--4215[label="1;226pkt 226fpkt"];
2789--4778[label="1;226pkt 226fpkt"];
4215--4778[label="1;226pkt 226fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.85.74" src_ip="220.46.3.10" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876007" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_815{
style=filled;
color=gray75;
2802[label="48.190.79.11;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4218[label="48.190.79.11;2pkt 2fpkt", shape=invtriangle, color=brown];
stat815[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.190.79.11:80, 134.66.168.64:1411}[50%]&lt;BR/&gt;{48.190.79.11:80, 134.66.168.64:1412}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1412: (25%)&lt;BR/&gt; 1411: (25%)&gt;];
}
2802--4218[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="134.66.168.64" dst_port="1412" src_ip="48.190.79.11" src_port="80"/>
      <filter dst_ip="134.66.168.64" dst_port="1411" src_ip="48.190.79.11" src_port="80"/>
    </slice>
    <from sec="1054876435" usec="0"/>
    <to sec="1054876458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_816{
style=filled;
color=gray75;
2803[label="219.163.153.11;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4219[label="219.163.153.11;5pkt 5fpkt", shape=invtriangle, color=brown];
stat816[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.163.153.11:80, 176.107.207.97:1698}[20%]&lt;BR/&gt;{219.163.153.11:80, 176.107.207.97:1699}[20%]&lt;BR/&gt;{219.163.153.11:80, 176.107.207.97:1702}[20%]&lt;BR/&gt;{219.163.153.11:80, 176.107.207.97:1703}[20%]&lt;BR/&gt;{219.163.153.11:80, 176.107.207.97:1704}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1704: (10%)&lt;BR/&gt; 1703: (10%)&lt;BR/&gt; 1702: (10%)&lt;BR/&gt; 1699: (10%)&gt;];
}
2803--4219[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="176.107.207.97" dst_port="1704" src_ip="219.163.153.11" src_port="80"/>
      <filter dst_ip="176.107.207.97" dst_port="1703" src_ip="219.163.153.11" src_port="80"/>
      <filter dst_ip="176.107.207.97" dst_port="1702" src_ip="219.163.153.11" src_port="80"/>
      <filter dst_ip="176.107.207.97" dst_port="1699" src_ip="219.163.153.11" src_port="80"/>
      <filter dst_ip="176.107.207.97" dst_port="1698" src_ip="219.163.153.11" src_port="80"/>
    </slice>
    <from sec="1054876181" usec="0"/>
    <to sec="1054876246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_817{
style=filled;
color=gray75;
2807[label="139.237.3.12;12pkt 12fpkt", shape=pentagon, color=darkviolet];
4220[label="139.237.3.12;12pkt 12fpkt", shape=invtriangle, color=brown];
stat817[shape=component, label=&lt;Rules:&lt;BR/&gt;{139.237.3.12:*, *:17300}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 17300: (50%)&lt;BR/&gt; 2782: (4.16667%)&lt;BR/&gt; 2781: (4.16667%)&lt;BR/&gt; 2780: (4.16667%)&lt;BR/&gt; 2779: (4.16667%)&gt;];
}
2807--4220[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_port="17300" src_ip="139.237.3.12"/>
    </slice>
    <from sec="1054876500" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_818{
style=filled;
color=gray75;
2819[label="218.138.188.12;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4226[label="218.138.188.12;1pkt 1fpkt", shape=invtriangle, color=brown];
stat818[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.138.188.12:80, 199.98.114.3:2099}[50%]&lt;BR/&gt;{218.138.188.12:80, 199.98.114.3:2100}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2100: (33.3333%)&lt;BR/&gt; 2099: (16.6667%)&gt;];
}
2819--4226[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.98.114.3" dst_port="2100" src_ip="218.138.188.12" src_port="80"/>
      <filter dst_ip="199.98.114.3" dst_port="2099" src_ip="218.138.188.12" src_port="80"/>
    </slice>
    <from sec="1054876150" usec="0"/>
    <to sec="1054876163" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_819{
style=filled;
color=gray75;
2820[label="219.77.232.12;119pkt 119fpkt", shape=pentagon, color=darkviolet];
4227[label="219.77.232.12;120pkt 120fpkt", shape=invtriangle, color=brown];
stat819[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.77.232.12:*, *:139}[50%]&lt;BR/&gt;{219.77.232.12:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (25.1046%)&lt;BR/&gt; 445: (24.8954%)&lt;BR/&gt; 4752: (0.41841%)&lt;BR/&gt; 4751: (0.41841%)&lt;BR/&gt; 4732: (0.41841%)&gt;];
}
2820--4227[label="1;119pkt 119fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="219.77.232.12"/>
      <filter dst_port="139" src_ip="219.77.232.12"/>
    </slice>
    <from sec="1054875920" usec="0"/>
    <to sec="1054876050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_820{
style=filled;
color=gray75;
2823[label="176.107.81.13;27pkt 27fpkt", shape=pentagon, color=darkviolet];
4229[label="176.107.81.13;27pkt 27fpkt", shape=invtriangle, color=brown];
stat820[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.107.81.13:*, 208.43.121.3:80}[51.8519%]&lt;BR/&gt;{176.107.81.13:*, 208.71.113.245:80}[25.9259%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3178: (1.85185%)&lt;BR/&gt; 3175: (1.85185%)&lt;BR/&gt; 3174: (1.85185%)&lt;BR/&gt; 3172: (1.85185%)&gt;];
}
2823--4229[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="208.43.121.3" dst_port="80" src_ip="176.107.81.13"/>
      <filter dst_ip="208.71.113.245" dst_port="80" src_ip="176.107.81.13"/>
    </slice>
    <from sec="1054875938" usec="0"/>
    <to sec="1054876119" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.678114,1.68342,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.45.85.16"/>
    </slice>
    <from sec="1054876164" usec="0"/>
    <to sec="1054876288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_822{
style=filled;
color=gray75;
2837[label="198.30.57.17;120pkt 120fpkt", shape=pentagon, color=darkviolet];
4235[label="198.30.57.17;120pkt 120fpkt", shape=invtriangle, color=brown];
stat822[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.30.57.17:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2837--4235[label="1;120pkt 120fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="198.30.57.17" src_port="1026"/>
    </slice>
    <from sec="1054875652" usec="0"/>
    <to sec="1054875673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997668,1.65217,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_823{
style=filled;
color=gray75;
2840[label="199.91.159.17;20pkt 20fpkt", shape=pentagon, color=darkviolet];
4237[label="199.91.159.17;21pkt 21fpkt", shape=invtriangle, color=brown];
4785[label="199.91.159.17;21pkt 21fpkt", shape=invhouse, color=bisque];
stat823[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.91.159.17:80, 175.84.9.5:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50537: (2.41935%)&lt;BR/&gt; 50536: (2.41935%)&lt;BR/&gt; 50533: (2.41935%)&lt;BR/&gt; 50532: (2.41935%)&gt;];
}
2840--4237[label="1;20pkt 20fpkt"];
2840--4785[label="1;20pkt 20fpkt"];
4237--4785[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.9.5" src_ip="199.91.159.17" src_port="80"/>
    </slice>
    <from sec="1054875888" usec="0"/>
    <to sec="1054875952" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_824{
style=filled;
color=gray75;
2847[label="192.11.129.18;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4239[label="192.11.129.18;2pkt 2fpkt", shape=invtriangle, color=brown];
stat824[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.11.129.18:80, 175.84.22.173:3729}[50%]&lt;BR/&gt;{192.11.129.18:80, 175.84.22.173:3730}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3730: (33.3333%)&lt;BR/&gt; 3729: (16.6667%)&gt;];
}
2847--4239[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.22.173" dst_port="3730" src_ip="192.11.129.18" src_port="80"/>
      <filter dst_ip="175.84.22.173" dst_port="3729" src_ip="192.11.129.18" src_port="80"/>
    </slice>
    <from sec="1054876173" usec="0"/>
    <to sec="1054876236" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_825{
style=filled;
color=gray75;
2874[label="199.200.35.22;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4252[label="199.200.35.22;4pkt 4fpkt", shape=invtriangle, color=brown];
stat825[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.200.35.22:80, 169.189.200.65:1995}[25%]&lt;BR/&gt;{199.200.35.22:80, 169.189.200.65:1997}[25%]&lt;BR/&gt;{199.200.35.22:80, 169.189.200.65:2011}[25%]&lt;BR/&gt;{199.200.35.22:80, 169.189.200.65:2013}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2013: (14.2857%)&lt;BR/&gt; 2011: (14.2857%)&lt;BR/&gt; 1997: (14.2857%)&lt;BR/&gt; 1995: (7.14286%)&gt;];
}
2874--4252[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.200.65" dst_port="2013" src_ip="199.200.35.22" src_port="80"/>
      <filter dst_ip="169.189.200.65" dst_port="2011" src_ip="199.200.35.22" src_port="80"/>
      <filter dst_ip="169.189.200.65" dst_port="1997" src_ip="199.200.35.22" src_port="80"/>
      <filter dst_ip="169.189.200.65" dst_port="1995" src_ip="199.200.35.22" src_port="80"/>
    </slice>
    <from sec="1054876001" usec="0"/>
    <to sec="1054876172" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997668,1.65217,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_826{
style=filled;
color=gray75;
2891[label="84.8.70.25;245pkt 245fpkt", shape=pentagon, color=darkviolet];
4257[label="84.8.70.25;246pkt 246fpkt", shape=invtriangle, color=brown];
4793[label="84.8.70.25;246pkt 246fpkt", shape=invhouse, color=bisque];
stat826[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.8.70.25:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 59955: (0.203528%)&lt;BR/&gt; 59949: (0.203528%)&lt;BR/&gt; 59945: (0.203528%)&lt;BR/&gt; 59939: (0.203528%)&gt;];
}
2891--4257[label="1;245pkt 245fpkt"];
2891--4793[label="1;245pkt 245fpkt"];
4257--4793[label="1;246pkt 246fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="84.8.70.25"/>
    </slice>
    <from sec="1054875922" usec="0"/>
    <to sec="1054875960" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_827{
style=filled;
color=gray75;
2917[label="84.40.130.28;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4266[label="84.40.130.28;15pkt 15fpkt", shape=invtriangle, color=brown];
stat827[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.40.130.28:80, 199.98.105.84:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1186: (3.44828%)&lt;BR/&gt; 1185: (3.44828%)&lt;BR/&gt; 1184: (3.44828%)&lt;BR/&gt; 1183: (3.44828%)&gt;];
}
2917--4266[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="199.98.105.84" src_ip="84.40.130.28" src_port="80"/>
    </slice>
    <from sec="1054876212" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,053,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_828{
style=filled;
color=gray75;
2923[label="48.75.229.28;40pkt 40fpkt", shape=pentagon, color=darkviolet];
4271[label="48.75.229.28;39pkt 39fpkt", shape=invtriangle, color=brown];
stat828[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.75.229.28:80, 199.104.102.191:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49511: (1.26582%)&lt;BR/&gt; 49508: (1.26582%)&lt;BR/&gt; 49507: (1.26582%)&lt;BR/&gt; 49506: (1.26582%)&gt;];
}
2923--4271[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="199.104.102.191" src_ip="48.75.229.28" src_port="80"/>
    </slice>
    <from sec="1054876453" usec="0"/>
    <to sec="1054876486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.571638,1.61542,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_829{
style=filled;
color=gray75;
1731[label="48.182.62.31;s;151pkt 151fpkt", shape=diamond, color=yellow];
4058[label="198.121.79.228;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat829[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.182.62.31:80, 175.85.65.1:*}[89.4737%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 47567: (0.328947%)&lt;BR/&gt; 47566: (0.328947%)&lt;BR/&gt; 47563: (0.328947%)&lt;BR/&gt; 47561: (0.328947%)&gt;];
}
1731--1743[label="0.900662;136pkt 136fpkt"];
4058--4723[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.85.65.1" src_ip="48.182.62.31" src_port="80"/>
    </slice>
    <from sec="1054875984" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.453524,1.64829,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_830{
style=filled;
color=gray75;
3313[label="195.4.72.89;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat830[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.4.72.89:33585, 175.84.11.1:80}[33.3333%]&lt;BR/&gt;{195.4.72.89:54585, 198.128.183.145:80}[33.3333%]&lt;BR/&gt;{195.4.72.89:54801, 198.128.183.145:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54801: (16.6667%)&lt;BR/&gt; 54585: (16.6667%)&lt;BR/&gt; 33585: (16.6667%)&gt;];
}
3313--4421[label="1;2pkt 2fpkt"];
3313--4848[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="198.128.183.145" dst_port="80" src_ip="195.4.72.89" src_port="54801"/>
      <filter dst_ip="198.128.183.145" dst_port="80" src_ip="195.4.72.89" src_port="54585"/>
      <filter dst_ip="175.84.11.1" dst_port="80" src_ip="195.4.72.89" src_port="33585"/>
    </slice>
    <from sec="1054875688" usec="0"/>
    <to sec="1054876029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.678114,1.68342,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.9.47.34"/>
    </slice>
    <from sec="1054875602" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_832{
style=filled;
color=gray75;
2952[label="219.163.152.34;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4281[label="219.163.152.34;5pkt 5fpkt", shape=invtriangle, color=brown];
stat832[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.163.152.34:80, 169.189.201.10:3705}[20%]&lt;BR/&gt;{219.163.152.34:80, 169.189.201.10:3706}[20%]&lt;BR/&gt;{219.163.152.34:80, 169.189.201.10:3710}[20%]&lt;BR/&gt;{219.163.152.34:80, 169.189.201.10:3711}[20%]&lt;BR/&gt;{219.163.152.34:80, 169.189.201.10:3724}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3724: (10%)&lt;BR/&gt; 3711: (10%)&lt;BR/&gt; 3710: (10%)&lt;BR/&gt; 3706: (10%)&gt;];
}
2952--4281[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.201.10" dst_port="3724" src_ip="219.163.152.34" src_port="80"/>
      <filter dst_ip="169.189.201.10" dst_port="3711" src_ip="219.163.152.34" src_port="80"/>
      <filter dst_ip="169.189.201.10" dst_port="3710" src_ip="219.163.152.34" src_port="80"/>
      <filter dst_ip="169.189.201.10" dst_port="3706" src_ip="219.163.152.34" src_port="80"/>
      <filter dst_ip="169.189.201.10" dst_port="3705" src_ip="219.163.152.34" src_port="80"/>
    </slice>
    <from sec="1054876089" usec="0"/>
    <to sec="1054876137" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.678114,1.68342,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.6.47.38"/>
    </slice>
    <from sec="1054875604" usec="0"/>
    <to sec="1054875774" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997668,1.65217,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_834{
style=filled;
color=gray75;
2982[label="176.107.208.39;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4295[label="176.107.208.39;7pkt 7fpkt", shape=invtriangle, color=brown];
4804[label="176.107.208.39;7pkt 7fpkt", shape=invhouse, color=bisque];
stat834[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.107.208.39:*, 50.17.7.230:80}[71.4286%]&lt;BR/&gt;{176.107.208.39:*, 210.6.154.33:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54107: (7.14286%)&lt;BR/&gt; 54106: (7.14286%)&lt;BR/&gt; 54105: (7.14286%)&lt;BR/&gt; 54104: (7.14286%)&gt;];
}
2982--4295[label="1;7pkt 7fpkt"];
2982--4804[label="1;7pkt 7fpkt"];
4295--4804[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="50.17.7.230" dst_port="80" src_ip="176.107.208.39"/>
      <filter dst_ip="210.6.154.33" dst_port="80" src_ip="176.107.208.39"/>
    </slice>
    <from sec="1054876241" usec="0"/>
    <to sec="1054876254" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.678114,1.68342,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="199.169.68.40"/>
    </slice>
    <from sec="1054875602" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.678114,1.68342,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="50.85.132.44"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_837{
style=filled;
color=gray75;
3017[label="199.31.164.44;210pkt 210fpkt", shape=pentagon, color=darkviolet];
4308[label="199.31.164.44;209pkt 209fpkt", shape=invtriangle, color=brown];
stat837[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.31.164.44:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3017--4308[label="1;209pkt 209fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.31.164.44" src_port="1029"/>
    </slice>
    <from sec="1054876018" usec="0"/>
    <to sec="1054876059" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.678114,1.68342,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="133.110.225.50"/>
    </slice>
    <from sec="1054875620" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724842,1.586,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_841{
style=filled;
color=gray75;
205[label="50.37.149.55s;181pkt 181fpkt", shape=rectangle, color=red];
3082[label="50.37.149.55;207pkt 207fpkt", shape=pentagon, color=darkviolet];
4333[label="50.37.149.55;206pkt 206fpkt", shape=invtriangle, color=brown];
stat841[shape=component, label=&lt;Rules:&lt;BR/&gt;{50.37.149.55:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
205--2680[label="0.546961;99pkt 99fpkt"];
205--3082[label="1;181pkt 181fpkt"];
205--4333[label="0.994475;180pkt 180fpkt"];
3082--4333[label="1;206pkt 206fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="50.37.149.55" src_port="1027"/>
    </slice>
    <from sec="1054875898" usec="0"/>
    <to sec="1054875935" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_842{
style=filled;
color=gray75;
1694[label="192.77.36.205;s;70pkt 70fpkt", shape=diamond, color=yellow];
stat842[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.77.36.205:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62759: (0.714286%)&lt;BR/&gt; 55554: (0.714286%)&lt;BR/&gt; 51658: (0.714286%)&lt;BR/&gt; 49250: (0.714286%)&gt;];
}
1694--1742[label="0.0142857;1pkt 1fpkt"];
1694--1752[label="0.037037;2pkt 2fpkt"];
1694--1820[label="0.0285714;2pkt 2fpkt"];
1694--1913[label="0.0204082;1pkt 1fpkt"];
1694--1924[label="0.0428571;3pkt 3fpkt"];
1694--1961[label="0.0142857;1pkt 1fpkt"];
1694--1970[label="0.0142857;1pkt 1fpkt"];
1694--1973[label="0.0142857;1pkt 1fpkt"];
1694--1975[label="0.0142857;1pkt 1fpkt"];
1694--1988[label="0.1;7pkt 7fpkt"];
1694--2078[label="0.0338983;2pkt 2fpkt"];
1694--2088[label="0.0428571;3pkt 3fpkt"];
1694--2120[label="0.0142857;1pkt 1fpkt"];
1694--2124[label="0.0142857;1pkt 1fpkt"];
1694--2172[label="0.0285714;2pkt 2fpkt"];
1694--2359[label="0.0285714;2pkt 2fpkt"];
1694--2384[label="0.037037;2pkt 2fpkt"];
1694--2480[label="0.0285714;2pkt 2fpkt"];
1694--2489[label="0.037037;2pkt 2fpkt"];
1694--2492[label="0.0142857;1pkt 1fpkt"];
1694--2520[label="0.0142857;1pkt 1fpkt"];
1694--2570[label="1;70pkt 70fpkt"];
1694--2571[label="0.0142857;1pkt 1fpkt"];
1694--2589[label="0.0204082;1pkt 1fpkt"];
1694--2611[label="0.0142857;1pkt 1fpkt"];
1694--2616[label="0.0285714;2pkt 2fpkt"];
1694--2619[label="0.0142857;1pkt 1fpkt"];
1694--2650[label="0.0285714;2pkt 2fpkt"];
1694--2669[label="0.0142857;1pkt 1fpkt"];
1694--3955[label="1;70pkt 70fpkt"];
</description>
    <slice>
      <filter src_ip="192.77.36.205" src_port="80"/>
    </slice>
    <from sec="1054875611" usec="0"/>
    <to sec="1054876423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997668,1.65217,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_843{
style=filled;
color=gray75;
3095[label="195.56.206.56;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4338[label="195.56.206.56;1pkt 1fpkt", shape=invtriangle, color=brown];
4824[label="195.56.206.56;1pkt 1fpkt", shape=invhouse, color=bisque];
stat843[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.56.206.56:80, 169.189.85.74:4078}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4078: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3095--4338[label="1;1pkt 1fpkt"];
3095--4824[label="1;1pkt 1fpkt"];
4338--4824[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.85.74" dst_port="4078" src_ip="195.56.206.56" src_port="80"/>
    </slice>
    <from sec="1054876500" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05661,1.61938,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_844{
style=filled;
color=gray75;
1829[label="176.107.176.65;d;51pkt 51fpkt", shape=diamond, color=yellow];
3099[label="210.205.95.57;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4339[label="210.205.95.57;15pkt 15fpkt", shape=invtriangle, color=brown];
4825[label="210.205.95.57;15pkt 15fpkt", shape=invhouse, color=bisque];
stat844[shape=component, label=&lt;Rules:&lt;BR/&gt;{51.115.50.67:80, 176.107.176.65:*}[33.3333%]&lt;BR/&gt;{210.205.95.57:80, 176.107.176.65:*}[31.3725%]&lt;BR/&gt;{218.30.233.177:80, 176.107.176.65:*}[21.5686%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65090: (2.08333%)&lt;BR/&gt; 65089: (2.08333%)&lt;BR/&gt; 65088: (2.08333%)&lt;BR/&gt; 65087: (2.08333%)&gt;];
}
1829--3099[label="1;15pkt 15fpkt"];
1829--4339[label="1;15pkt 15fpkt"];
1829--4825[label="1;15pkt 15fpkt"];
3099--4339[label="1;15pkt 15fpkt"];
3099--4825[label="1;15pkt 15fpkt"];
4339--4825[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="176.107.176.65" src_ip="51.115.50.67" src_port="80"/>
      <filter dst_ip="176.107.176.65" src_ip="210.205.95.57" src_port="80"/>
      <filter dst_ip="176.107.176.65" src_ip="218.30.233.177" src_port="80"/>
    </slice>
    <from sec="1054876174" usec="0"/>
    <to sec="1054876395" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.678114,1.68342,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="87.6.35.63"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054875959" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_847{
style=filled;
color=gray75;
3130[label="50.66.19.64;170pkt 170fpkt", shape=pentagon, color=darkviolet];
4352[label="50.66.19.64;170pkt 170fpkt", shape=invtriangle, color=brown];
stat847[shape=component, label=&lt;Rules:&lt;BR/&gt;{50.66.19.64:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 17780: (0.882353%)&lt;BR/&gt; 17675: (0.882353%)&lt;BR/&gt; 17667: (0.882353%)&lt;BR/&gt; 17777: (0.588235%)&gt;];
}
3130--4352[label="1;170pkt 170fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="50.66.19.64"/>
    </slice>
    <from sec="1054876328" usec="0"/>
    <to sec="1054876355" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_848{
style=filled;
color=gray75;
3138[label="198.22.2.65;171pkt 171fpkt", shape=pentagon, color=darkviolet];
4355[label="198.22.2.65;172pkt 172fpkt", shape=invtriangle, color=brown];
stat848[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.22.2.65:1027, *:137}[80.814%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1027: (40.379%)&lt;BR/&gt; 1030: (9.62099%)&gt;];
}
3138--4355[label="1;171pkt 171fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="198.22.2.65" src_port="1027"/>
    </slice>
    <from sec="1054876285" usec="0"/>
    <to sec="1054876409" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997668,1.65217,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_849{
style=filled;
color=gray75;
3142[label="210.198.137.65;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4357[label="210.198.137.65;1pkt 1fpkt", shape=invtriangle, color=brown];
4835[label="210.198.137.65;1pkt 1fpkt", shape=invhouse, color=bisque];
stat849[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.198.137.65:80, 199.98.97.241:1629}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1629: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3142--4357[label="1;1pkt 1fpkt"];
3142--4835[label="1;1pkt 1fpkt"];
4357--4835[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.98.97.241" dst_port="1629" src_ip="210.198.137.65" src_port="80"/>
    </slice>
    <from sec="1054876500" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997668,1.65217,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_850{
style=filled;
color=gray75;
3154[label="221.195.26.67;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4361[label="221.195.26.67;5pkt 5fpkt", shape=invtriangle, color=brown];
4836[label="221.195.26.67;5pkt 5fpkt", shape=invhouse, color=bisque];
stat850[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.195.26.67:80, 175.84.22.112:4556}[20%]&lt;BR/&gt;{221.195.26.67:80, 175.84.22.112:4557}[20%]&lt;BR/&gt;{221.195.26.67:80, 175.84.22.112:4558}[20%]&lt;BR/&gt;{221.195.26.67:80, 175.84.22.112:4559}[20%]&lt;BR/&gt;{221.195.26.67:80, 175.84.22.112:4560}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4560: (10%)&lt;BR/&gt; 4559: (10%)&lt;BR/&gt; 4558: (10%)&lt;BR/&gt; 4557: (10%)&gt;];
}
3154--4361[label="1;5pkt 5fpkt"];
3154--4836[label="1;5pkt 5fpkt"];
4361--4836[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.22.112" dst_port="4560" src_ip="221.195.26.67" src_port="80"/>
      <filter dst_ip="175.84.22.112" dst_port="4559" src_ip="221.195.26.67" src_port="80"/>
      <filter dst_ip="175.84.22.112" dst_port="4558" src_ip="221.195.26.67" src_port="80"/>
      <filter dst_ip="175.84.22.112" dst_port="4557" src_ip="221.195.26.67" src_port="80"/>
      <filter dst_ip="175.84.22.112" dst_port="4556" src_ip="221.195.26.67" src_port="80"/>
    </slice>
    <from sec="1054875670" usec="0"/>
    <to sec="1054875723" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.678114,1.68342,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.132.139.68"/>
    </slice>
    <from sec="1054875604" usec="0"/>
    <to sec="1054876493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_852{
style=filled;
color=gray75;
3165[label="198.128.183.68;110pkt 110fpkt", shape=pentagon, color=darkviolet];
4366[label="198.128.183.68;109pkt 109fpkt", shape=invtriangle, color=brown];
stat852[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.128.183.68:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3165--4366[label="1;109pkt 109fpkt"];
</description>
    <slice>
      <filter src_ip="198.128.183.68"/>
    </slice>
    <from sec="1054875606" usec="0"/>
    <to sec="1054876499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.678114,1.68342,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="51.159.107.69"/>
    </slice>
    <from sec="1054875838" usec="0"/>
    <to sec="1054875886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05247,1.61811,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_854{
style=filled;
color=gray75;
218[label="219.176.16.72s;46pkt 46fpkt", shape=rectangle, color=red];
3190[label="219.176.16.72;107pkt 107fpkt", shape=pentagon, color=darkviolet];
4377[label="219.176.16.72;106pkt 106fpkt", shape=invtriangle, color=brown];
4838[label="219.176.16.72;106pkt 106fpkt", shape=invhouse, color=bisque];
stat854[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.176.16.72:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
218--3190[label="1;46pkt 46fpkt"];
218--4377[label="0.978261;45pkt 45fpkt"];
218--4838[label="0.978261;45pkt 45fpkt"];
3190--4377[label="1;106pkt 106fpkt"];
3190--4838[label="1;106pkt 106fpkt"];
4377--4838[label="1;106pkt 106fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="219.176.16.72" src_port="1026"/>
    </slice>
    <from sec="1054876117" usec="0"/>
    <to sec="1054876135" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_855{
style=filled;
color=gray75;
3213[label="200.41.65.74;22pkt 22fpkt", shape=pentagon, color=darkviolet];
4384[label="200.41.65.74;22pkt 22fpkt", shape=invtriangle, color=brown];
stat855[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.41.65.74:80, 169.189.201.121:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49508: (2.27273%)&lt;BR/&gt; 49507: (2.27273%)&lt;BR/&gt; 49505: (2.27273%)&lt;BR/&gt; 49504: (2.27273%)&gt;];
}
3213--4384[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.201.121" src_ip="200.41.65.74" src_port="80"/>
    </slice>
    <from sec="1054876098" usec="0"/>
    <to sec="1054876136" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.762184,1.65124,503,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_856{
style=filled;
color=gray75;
1930[label="176.107.181.76;s;18pkt 18fpkt", shape=diamond, color=yellow];
4390[label="176.107.181.76;20pkt 20fpkt", shape=invtriangle, color=brown];
stat856[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.107.181.76:*, 205.209.126.169:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33137: (2.63158%)&lt;BR/&gt; 33136: (2.63158%)&lt;BR/&gt; 33135: (2.63158%)&lt;BR/&gt; 33134: (2.63158%)&gt;];
}
1930--3224[label="1;18pkt 18fpkt"];
1930--4390[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="205.209.126.169" dst_port="80" src_ip="176.107.181.76"/>
    </slice>
    <from sec="1054875844" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_857{
style=filled;
color=gray75;
3255[label="48.194.13.81;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4399[label="48.194.13.81;6pkt 6fpkt", shape=invtriangle, color=brown];
stat857[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.194.13.81:80, 169.189.205.177:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3601: (9.09091%)&lt;BR/&gt; 3600: (9.09091%)&lt;BR/&gt; 3599: (9.09091%)&lt;BR/&gt; 3598: (9.09091%)&gt;];
}
3255--4399[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.205.177" src_ip="48.194.13.81" src_port="80"/>
    </slice>
    <from sec="1054875718" usec="0"/>
    <to sec="1054875829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997668,1.65217,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_858{
style=filled;
color=gray75;
3274[label="50.64.171.82;103pkt 103fpkt", shape=pentagon, color=darkviolet];
4406[label="50.64.171.82;103pkt 103fpkt", shape=invtriangle, color=brown];
4846[label="50.64.171.82;103pkt 103fpkt", shape=invhouse, color=bisque];
stat858[shape=component, label=&lt;Rules:&lt;BR/&gt;{50.64.171.82:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3274--4406[label="1;103pkt 103fpkt"];
3274--4846[label="1;103pkt 103fpkt"];
4406--4846[label="1;103pkt 103fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="50.64.171.82" src_port="1025"/>
    </slice>
    <from sec="1054875670" usec="0"/>
    <to sec="1054875687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05661,1.61938,504,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_859{
style=filled;
color=gray75;
1856[label="198.160.58.48;d;29pkt 29fpkt", shape=diamond, color=yellow];
3280[label="205.45.114.83;15pkt 15fpkt", shape=pentagon, color=darkviolet];
3724[label="198.94.67.162;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4409[label="205.45.114.83;16pkt 16fpkt", shape=invtriangle, color=brown];
4585[label="198.94.67.162;13pkt 13fpkt", shape=invtriangle, color=brown];
4897[label="198.94.67.162;14pkt 14fpkt", shape=invhouse, color=bisque];
stat859[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.45.114.83:443, 198.160.58.48:*}[51.6129%]&lt;BR/&gt;{198.94.67.162:443, 198.160.58.48:*}[45.1613%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (49.505%)&lt;BR/&gt; 1088: (1.9802%)&lt;BR/&gt; 1087: (1.9802%)&lt;BR/&gt; 1086: (1.9802%)&lt;BR/&gt; 1085: (1.9802%)&gt;];
}
1856--3280[label="0.866667;13pkt 13fpkt"];
1856--3724[label="1;14pkt 14fpkt"];
1856--4409[label="0.875;14pkt 14fpkt"];
1856--4585[label="1;13pkt 13fpkt"];
1856--4897[label="1;14pkt 14fpkt"];
3280--4409[label="1;15pkt 15fpkt"];
3724--4585[label="1;13pkt 13fpkt"];
3724--4897[label="1;14pkt 14fpkt"];
4585--4897[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="198.160.58.48" src_ip="205.45.114.83" src_port="443"/>
      <filter dst_ip="198.160.58.48" src_ip="198.94.67.162" src_port="443"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_860{
style=filled;
color=gray75;
3286[label="219.105.132.84;43pkt 43fpkt", shape=pentagon, color=darkviolet];
4411[label="219.105.132.84;43pkt 43fpkt", shape=invtriangle, color=brown];
stat860[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.105.132.84:80, 134.66.197.230:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49256: (1.16279%)&lt;BR/&gt; 49255: (1.16279%)&lt;BR/&gt; 49254: (1.16279%)&lt;BR/&gt; 49253: (1.16279%)&gt;];
}
3286--4411[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_ip="134.66.197.230" src_ip="219.105.132.84" src_port="80"/>
    </slice>
    <from sec="1054875898" usec="0"/>
    <to sec="1054876009" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.678114,1.68342,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="50.206.79.85"/>
    </slice>
    <from sec="1054875900" usec="0"/>
    <to sec="1054876000" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.678114,1.68342,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.72.84.88"/>
    </slice>
    <from sec="1054875638" usec="0"/>
    <to sec="1054875759" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730842,1.58729,504,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_863{
style=filled;
color=gray75;
1920[label="169.189.207.120;d;29pkt 29fpkt", shape=diamond, color=yellow];
3316[label="192.42.187.89;30pkt 30fpkt", shape=pentagon, color=darkviolet];
4422[label="192.42.187.89;29pkt 29fpkt", shape=invtriangle, color=brown];
stat863[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.42.187.89:443, 169.189.207.120:*}[96.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1086: (1.70455%)&lt;BR/&gt; 1085: (1.70455%)&lt;BR/&gt; 1084: (1.70455%)&lt;BR/&gt; 1083: (1.70455%)&gt;];
}
1920--3316[label="1;29pkt 29fpkt"];
1920--4422[label="1;29pkt 29fpkt"];
3316--4422[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.207.120" src_ip="192.42.187.89" src_port="443"/>
    </slice>
    <from sec="1054876137" usec="0"/>
    <to sec="1054876466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_864{
style=filled;
color=gray75;
3318[label="51.147.7.90;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4423[label="51.147.7.90;1pkt 1fpkt", shape=invtriangle, color=brown];
stat864[shape=component, label=&lt;Rules:&lt;BR/&gt;{51.147.7.90:5190, 199.98.138.23:1573}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5190: (50%)&lt;BR/&gt; 1573: (50%)&gt;];
}
3318--4423[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.98.138.23" dst_port="1573" src_ip="51.147.7.90" src_port="5190"/>
    </slice>
    <from sec="1054876444" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.678114,1.68342,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.172.100.92"/>
    </slice>
    <from sec="1054875620" usec="0"/>
    <to sec="1054875771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_866{
style=filled;
color=gray75;
3393[label="221.45.149.103;116pkt 116fpkt", shape=pentagon, color=darkviolet];
4450[label="221.45.149.103;116pkt 116fpkt", shape=invtriangle, color=brown];
stat866[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.45.149.103:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3393--4450[label="1;116pkt 116fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="221.45.149.103" src_port="1030"/>
    </slice>
    <from sec="1054876286" usec="0"/>
    <to sec="1054876305" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_867{
style=filled;
color=gray75;
3405[label="219.105.146.105;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4454[label="219.105.146.105;5pkt 5fpkt", shape=invtriangle, color=brown];
stat867[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.105.146.105:80, 199.98.139.44:3567}[20%]&lt;BR/&gt;{219.105.146.105:80, 199.98.139.44:3573}[20%]&lt;BR/&gt;{219.105.146.105:80, 199.98.139.44:3574}[20%]&lt;BR/&gt;{219.105.146.105:80, 199.98.139.44:3579}[20%]&lt;BR/&gt;{219.105.146.105:80, 199.98.139.44:3580}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3580: (11.1111%)&lt;BR/&gt; 3579: (11.1111%)&lt;BR/&gt; 3574: (11.1111%)&lt;BR/&gt; 3573: (11.1111%)&gt;];
}
3405--4454[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="199.98.139.44" dst_port="3580" src_ip="219.105.146.105" src_port="80"/>
      <filter dst_ip="199.98.139.44" dst_port="3579" src_ip="219.105.146.105" src_port="80"/>
      <filter dst_ip="199.98.139.44" dst_port="3574" src_ip="219.105.146.105" src_port="80"/>
      <filter dst_ip="199.98.139.44" dst_port="3573" src_ip="219.105.146.105" src_port="80"/>
      <filter dst_ip="199.98.139.44" dst_port="3567" src_ip="219.105.146.105" src_port="80"/>
    </slice>
    <from sec="1054876463" usec="0"/>
    <to sec="1054876483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997668,1.65217,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_868{
style=filled;
color=gray75;
3417[label="211.64.62.107;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4459[label="211.64.62.107;3pkt 3fpkt", shape=invtriangle, color=brown];
4858[label="211.64.62.107;3pkt 3fpkt", shape=invhouse, color=bisque];
stat868[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.64.62.107:0, 175.84.131.38:0}[33.3333%]&lt;BR/&gt;{211.64.62.107:0, 175.84.223.104:0}[33.3333%]&lt;BR/&gt;{211.64.62.107:0, 175.84.223.106:0}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3417--4459[label="1;3pkt 3fpkt"];
3417--4858[label="1;3pkt 3fpkt"];
4459--4858[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.223.106" src_ip="211.64.62.107"/>
      <filter dst_ip="175.84.223.104" src_ip="211.64.62.107"/>
      <filter dst_ip="175.84.131.38" src_ip="211.64.62.107"/>
    </slice>
    <from sec="1054876500" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.678114,1.68342,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="139.197.54.109"/>
    </slice>
    <from sec="1054876225" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997668,1.65217,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_871{
style=filled;
color=gray75;
3431[label="221.113.83.109;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4464[label="221.113.83.109;4pkt 4fpkt", shape=invtriangle, color=brown];
4862[label="221.113.83.109;5pkt 5fpkt", shape=invhouse, color=bisque];
stat871[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.113.83.109:80, 198.160.55.168:41471}[20%]&lt;BR/&gt;{221.113.83.109:80, 198.160.55.168:41499}[20%]&lt;BR/&gt;{221.113.83.109:80, 198.160.55.168:41539}[20%]&lt;BR/&gt;{221.113.83.109:80, 198.160.55.168:41540}[20%]&lt;BR/&gt;{221.113.83.109:80, 198.160.55.168:41919}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 41919: (11.5385%)&lt;BR/&gt; 41540: (11.5385%)&lt;BR/&gt; 41539: (11.5385%)&lt;BR/&gt; 41499: (11.5385%)&gt;];
}
3431--4464[label="1;4pkt 4fpkt"];
3431--4862[label="1;4pkt 4fpkt"];
4464--4862[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="198.160.55.168" dst_port="41919" src_ip="221.113.83.109" src_port="80"/>
      <filter dst_ip="198.160.55.168" dst_port="41540" src_ip="221.113.83.109" src_port="80"/>
      <filter dst_ip="198.160.55.168" dst_port="41539" src_ip="221.113.83.109" src_port="80"/>
      <filter dst_ip="198.160.55.168" dst_port="41499" src_ip="221.113.83.109" src_port="80"/>
      <filter dst_ip="198.160.55.168" dst_port="41471" src_ip="221.113.83.109" src_port="80"/>
    </slice>
    <from sec="1054876456" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724842,1.586,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_872{
style=filled;
color=gray75;
268[label="52.235.16.110s;78pkt 78fpkt", shape=rectangle, color=red];
3434[label="52.235.16.110;125pkt 125fpkt", shape=pentagon, color=darkviolet];
4465[label="52.235.16.110;125pkt 125fpkt", shape=invtriangle, color=brown];
stat872[shape=component, label=&lt;Rules:&lt;BR/&gt;{52.235.16.110:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
268--3434[label="0.987179;77pkt 77fpkt"];
268--4465[label="0.987179;77pkt 77fpkt"];
3434--4465[label="1;125pkt 125fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="52.235.16.110" src_port="1027"/>
    </slice>
    <from sec="1054876102" usec="0"/>
    <to sec="1054876124" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997668,1.65217,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_873{
style=filled;
color=gray75;
3443[label="50.10.140.113;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4469[label="50.10.140.113;4pkt 4fpkt", shape=invtriangle, color=brown];
4866[label="50.10.140.113;5pkt 5fpkt", shape=invhouse, color=bisque];
stat873[shape=component, label=&lt;Rules:&lt;BR/&gt;{50.10.140.113:80, 199.98.139.44:3523}[20%]&lt;BR/&gt;{50.10.140.113:80, 199.98.139.44:3526}[20%]&lt;BR/&gt;{50.10.140.113:80, 199.98.139.44:3527}[20%]&lt;BR/&gt;{50.10.140.113:80, 199.98.139.44:3528}[20%]&lt;BR/&gt;{50.10.140.113:80, 199.98.139.44:3540}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3540: (10.7143%)&lt;BR/&gt; 3528: (10.7143%)&lt;BR/&gt; 3527: (10.7143%)&lt;BR/&gt; 3526: (10.7143%)&gt;];
}
3443--4469[label="1;4pkt 4fpkt"];
3443--4866[label="1;5pkt 5fpkt"];
4469--4866[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="199.98.139.44" dst_port="3540" src_ip="50.10.140.113" src_port="80"/>
      <filter dst_ip="199.98.139.44" dst_port="3528" src_ip="50.10.140.113" src_port="80"/>
      <filter dst_ip="199.98.139.44" dst_port="3527" src_ip="50.10.140.113" src_port="80"/>
      <filter dst_ip="199.98.139.44" dst_port="3526" src_ip="50.10.140.113" src_port="80"/>
      <filter dst_ip="199.98.139.44" dst_port="3523" src_ip="50.10.140.113" src_port="80"/>
    </slice>
    <from sec="1054876448" usec="0"/>
    <to sec="1054876472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.678114,1.68342,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.3.248.113"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.678114,1.68342,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.98.118.116"/>
    </slice>
    <from sec="1054876500" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724842,1.586,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_877{
style=filled;
color=gray75;
280[label="99.227.33.119s;81pkt 81fpkt", shape=rectangle, color=red];
3479[label="99.227.33.119;136pkt 136fpkt", shape=pentagon, color=darkviolet];
4486[label="99.227.33.119;135pkt 135fpkt", shape=invtriangle, color=brown];
stat877[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.227.33.119:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
280--2675[label="0.0864198;7pkt 7fpkt"];
280--2699[label="0.0864198;7pkt 7fpkt"];
280--3479[label="1;81pkt 81fpkt"];
280--4486[label="1;81pkt 81fpkt"];
3479--4486[label="1;135pkt 135fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="99.227.33.119" src_port="1026"/>
    </slice>
    <from sec="1054875669" usec="0"/>
    <to sec="1054875694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.678114,1.68342,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="139.208.67.121"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.678114,1.68342,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.138.186.123"/>
    </slice>
    <from sec="1054876500" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724842,1.586,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_880{
style=filled;
color=gray75;
459[label="208.32.64.124s;141pkt 141fpkt", shape=rectangle, color=red];
3501[label="208.32.64.124;193pkt 193fpkt", shape=pentagon, color=darkviolet];
4496[label="208.32.64.124;193pkt 193fpkt", shape=invtriangle, color=brown];
stat880[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.32.64.124:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 63964: (0.28463%)&lt;BR/&gt; 63961: (0.28463%)&lt;BR/&gt; 63957: (0.28463%)&lt;BR/&gt; 63953: (0.28463%)&gt;];
}
459--3501[label="1;141pkt 141fpkt"];
459--4496[label="1;141pkt 141fpkt"];
3501--4496[label="1;193pkt 193fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.32.64.124"/>
    </slice>
    <from sec="1054876392" usec="0"/>
    <to sec="1054876423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_881{
style=filled;
color=gray75;
3520[label="51.91.84.128;157pkt 157fpkt", shape=pentagon, color=darkviolet];
4502[label="51.91.84.128;156pkt 156fpkt", shape=invtriangle, color=brown];
stat881[shape=component, label=&lt;Rules:&lt;BR/&gt;{51.91.84.128:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3520--4502[label="1;156pkt 156fpkt"];
</description>
    <slice>
      <filter src_ip="51.91.84.128"/>
    </slice>
    <from sec="1054875724" usec="0"/>
    <to sec="1054875836" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_882{
style=filled;
color=gray75;
3524[label="192.42.2.129;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4503[label="192.42.2.129;3pkt 3fpkt", shape=invtriangle, color=brown];
stat882[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.42.2.129:1863, 176.107.69.94:2632}[33.3333%]&lt;BR/&gt;{192.42.2.129:1863, 198.160.56.137:1462}[33.3333%]&lt;BR/&gt;{192.42.2.129:1863, 175.84.138.235:64345}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 64345: (16.6667%)&lt;BR/&gt; 2632: (16.6667%)&lt;BR/&gt; 1462: (16.6667%)&gt;];
}
3524--4503[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.138.235" dst_port="64345" src_ip="192.42.2.129" src_port="1863"/>
      <filter dst_ip="198.160.56.137" dst_port="1462" src_ip="192.42.2.129" src_port="1863"/>
      <filter dst_ip="176.107.69.94" dst_port="2632" src_ip="192.42.2.129" src_port="1863"/>
    </slice>
    <from sec="1054875613" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_883{
style=filled;
color=gray75;
3525[label="199.18.6.129;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4504[label="199.18.6.129;10pkt 10fpkt", shape=invtriangle, color=brown];
stat883[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.18.6.129:*, 129.24.203.18:80}[50%]&lt;BR/&gt;{199.18.6.129:*, 129.24.200.55:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54617: (5.26316%)&lt;BR/&gt; 51435: (5.26316%)&lt;BR/&gt; 51229: (5.26316%)&lt;BR/&gt; 51214: (5.26316%)&gt;];
}
3525--4504[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="129.24.200.55" dst_port="80" src_ip="199.18.6.129"/>
      <filter dst_ip="129.24.203.18" dst_port="80" src_ip="199.18.6.129"/>
    </slice>
    <from sec="1054875753" usec="0"/>
    <to sec="1054876135" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_884{
style=filled;
color=gray75;
3536[label="198.128.181.130;100pkt 100fpkt", shape=pentagon, color=darkviolet];
4510[label="198.128.181.130;100pkt 100fpkt", shape=invtriangle, color=brown];
stat884[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.128.181.130:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3536--4510[label="1;100pkt 100fpkt"];
</description>
    <slice>
      <filter src_ip="198.128.181.130"/>
    </slice>
    <from sec="1054875603" usec="0"/>
    <to sec="1054876497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.678114,1.68342,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="162.66.13.131"/>
    </slice>
    <from sec="1054875735" usec="0"/>
    <to sec="1054875768" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.678114,1.68342,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="199.136.41.131"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054876097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.678114,1.68342,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="134.44.253.131"/>
    </slice>
    <from sec="1054875829" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.678114,1.68342,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="99.111.108.135"/>
    </slice>
    <from sec="1054876500" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724842,1.586,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_889{
style=filled;
color=gray75;
303[label="220.25.68.141s;102pkt 102fpkt", shape=rectangle, color=red];
3599[label="220.25.68.141;207pkt 207fpkt", shape=pentagon, color=darkviolet];
4540[label="220.25.68.141;206pkt 206fpkt", shape=invtriangle, color=brown];
stat889[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.25.68.141:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
303--3599[label="1;102pkt 102fpkt"];
303--4540[label="1;102pkt 102fpkt"];
3599--4540[label="1;206pkt 206fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="220.25.68.141" src_port="1028"/>
    </slice>
    <from sec="1054876042" usec="0"/>
    <to sec="1054876075" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_890{
style=filled;
color=gray75;
3602[label="84.12.187.141;160pkt 160fpkt", shape=pentagon, color=darkviolet];
4541[label="84.12.187.141;160pkt 160fpkt", shape=invtriangle, color=brown];
stat890[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.12.187.141:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3602--4541[label="1;160pkt 160fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="84.12.187.141" src_port="1029"/>
    </slice>
    <from sec="1054876109" usec="0"/>
    <to sec="1054876137" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_891{
style=filled;
color=gray75;
3618[label="192.42.2.144;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4545[label="192.42.2.144;6pkt 6fpkt", shape=invtriangle, color=brown];
stat891[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.42.2.144:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 49362: (7.69231%)&lt;BR/&gt; 4828: (7.69231%)&lt;BR/&gt; 3167: (7.69231%)&lt;BR/&gt; 3046: (7.69231%)&gt;];
}
3618--4545[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="192.42.2.144" src_port="1863"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054876498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_892{
style=filled;
color=gray75;
3634[label="48.75.229.145;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4551[label="48.75.229.145;9pkt 9fpkt", shape=invtriangle, color=brown];
stat892[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.75.229.145:80, 169.189.243.140:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49097: (5.26316%)&lt;BR/&gt; 49095: (5.26316%)&lt;BR/&gt; 48940: (5.26316%)&lt;BR/&gt; 48939: (5.26316%)&gt;];
}
3634--4551[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.243.140" src_ip="48.75.229.145" src_port="80"/>
    </slice>
    <from sec="1054876438" usec="0"/>
    <to sec="1054876449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.895209,1.57226,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_893{
style=filled;
color=gray75;
1309[label="198.128.180.148;s;531pkt 531fpkt", shape=diamond, color=yellow];
2408[label="198.128.180.148;s;430pkt 430fpkt", shape=hexagon, color=black];
3646[label="198.128.180.148;568pkt 568fpkt", shape=pentagon, color=darkviolet];
4556[label="198.128.180.148;568pkt 568fpkt", shape=invtriangle, color=brown];
stat893[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.128.180.148:53, *:*}[99.297%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (59.4182%)&lt;BR/&gt; 32768: (1.23987%)&lt;BR/&gt; 1024: (0.858369%)&lt;BR/&gt; 0: (0.476872%)&lt;BR/&gt; 32769: (0.453028%)&gt;];
}
1309--2408[label="1;430pkt 430fpkt"];
1309--2681[label="0.0207156;11pkt 11fpkt"];
1309--2690[label="0.00188324;1pkt 1fpkt"];
1309--2702[label="0.00188324;1pkt 1fpkt"];
1309--2710[label="0.00188324;1pkt 1fpkt"];
1309--3646[label="0.998117;530pkt 530fpkt"];
1309--4556[label="0.998117;530pkt 530fpkt"];
2408--2681[label="0.0255814;11pkt 11fpkt"];
2408--2690[label="0.00232558;1pkt 1fpkt"];
2408--2702[label="0.00232558;1pkt 1fpkt"];
2408--2710[label="0.00232558;1pkt 1fpkt"];
2408--3646[label="1;430pkt 430fpkt"];
2408--4556[label="1;430pkt 430fpkt"];
3646--4556[label="1;568pkt 568fpkt"];
</description>
    <slice>
      <filter src_ip="198.128.180.148" src_port="53"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.678114,1.68342,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.139.208.148"/>
    </slice>
    <from sec="1054876449" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.678114,1.68342,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="139.234.161.150"/>
    </slice>
    <from sec="1054876354" usec="0"/>
    <to sec="1054876422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05661,1.61938,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_896{
style=filled;
color=gray75;
1833[label="175.85.90.66;d;2pkt 2fpkt", shape=diamond, color=yellow];
3667[label="219.241.18.152;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4566[label="219.241.18.152;1pkt 1fpkt", shape=invtriangle, color=brown];
4892[label="219.241.18.152;2pkt 2fpkt", shape=invhouse, color=bisque];
stat896[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.241.18.152:80, 175.85.90.66:13243}[50%]&lt;BR/&gt;{219.241.18.152:80, 175.85.90.66:13272}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 13272: (28.5714%)&lt;BR/&gt; 13243: (21.4286%)&gt;];
}
1833--3667[label="1;2pkt 2fpkt"];
1833--4566[label="1;1pkt 1fpkt"];
1833--4892[label="1;2pkt 2fpkt"];
3667--4566[label="1;1pkt 1fpkt"];
3667--4892[label="1;2pkt 2fpkt"];
4566--4892[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.85.90.66" dst_port="13272" src_ip="219.241.18.152" src_port="80"/>
      <filter dst_ip="175.85.90.66" dst_port="13243" src_ip="219.241.18.152" src_port="80"/>
    </slice>
    <from sec="1054876189" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.678114,1.68342,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.186.136.154"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_899{
style=filled;
color=gray75;
3686[label="216.108.156.154;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4574[label="216.108.156.154;2pkt 2fpkt", shape=invtriangle, color=brown];
stat899[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.108.156.154:80, 175.84.40.208:1333}[33.3333%]&lt;BR/&gt;{216.108.156.154:80, 175.84.40.208:1336}[33.3333%]&lt;BR/&gt;{216.108.156.154:80, 175.84.40.208:1337}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1337: (20%)&lt;BR/&gt; 1336: (20%)&lt;BR/&gt; 1333: (10%)&gt;];
}
3686--4574[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.40.208" dst_port="1337" src_ip="216.108.156.154" src_port="80"/>
      <filter dst_ip="175.84.40.208" dst_port="1336" src_ip="216.108.156.154" src_port="80"/>
      <filter dst_ip="175.84.40.208" dst_port="1333" src_ip="216.108.156.154" src_port="80"/>
    </slice>
    <from sec="1054876452" usec="0"/>
    <to sec="1054876490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.678114,1.68342,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.9.40.161"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054876498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997668,1.65217,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_901{
style=filled;
color=gray75;
3734[label="84.17.196.163;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4589[label="84.17.196.163;1pkt 1fpkt", shape=invtriangle, color=brown];
4899[label="84.17.196.163;1pkt 1fpkt", shape=invhouse, color=bisque];
stat901[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.17.196.163:80, 175.85.65.4:11974}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11974: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3734--4589[label="1;1pkt 1fpkt"];
3734--4899[label="1;1pkt 1fpkt"];
4589--4899[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.85.65.4" dst_port="11974" src_ip="84.17.196.163" src_port="80"/>
    </slice>
    <from sec="1054876500" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.678114,1.68342,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.220.48.166"/>
    </slice>
    <from sec="1054875894" usec="0"/>
    <to sec="1054876316" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.678114,1.68342,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.162.80.170"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724842,1.586,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_904{
style=filled;
color=gray75;
332[label="37.148.150.171s;137pkt 137fpkt", shape=rectangle, color=red];
3783[label="37.148.150.171;227pkt 227fpkt", shape=pentagon, color=darkviolet];
4600[label="37.148.150.171;227pkt 227fpkt", shape=invtriangle, color=brown];
stat904[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.148.150.171:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
332--2675[label="0.437956;60pkt 60fpkt"];
332--2699[label="0.437956;60pkt 60fpkt"];
332--3783[label="1;137pkt 137fpkt"];
332--4600[label="1;137pkt 137fpkt"];
3783--4600[label="1;227pkt 227fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="37.148.150.171" src_port="1031"/>
    </slice>
    <from sec="1054875664" usec="0"/>
    <to sec="1054875700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_905{
style=filled;
color=gray75;
3786[label="192.42.2.172;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4601[label="192.42.2.172;5pkt 5fpkt", shape=invtriangle, color=brown];
stat905[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.42.2.172:1863, 198.160.44.29:2999}[20%]&lt;BR/&gt;{192.42.2.172:1863, 169.189.203.116:1311}[20%]&lt;BR/&gt;{192.42.2.172:1863, 169.189.200.122:3806}[20%]&lt;BR/&gt;{192.42.2.172:1863, 169.189.202.144:1075}[20%]&lt;BR/&gt;{192.42.2.172:1863, 169.189.197.205:2226}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3806: (10%)&lt;BR/&gt; 2999: (10%)&lt;BR/&gt; 2226: (10%)&lt;BR/&gt; 1311: (10%)&gt;];
}
3786--4601[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.197.205" dst_port="2226" src_ip="192.42.2.172" src_port="1863"/>
      <filter dst_ip="169.189.202.144" dst_port="1075" src_ip="192.42.2.172" src_port="1863"/>
      <filter dst_ip="169.189.200.122" dst_port="3806" src_ip="192.42.2.172" src_port="1863"/>
      <filter dst_ip="169.189.203.116" dst_port="1311" src_ip="192.42.2.172" src_port="1863"/>
      <filter dst_ip="198.160.44.29" dst_port="2999" src_ip="192.42.2.172" src_port="1863"/>
    </slice>
    <from sec="1054875607" usec="0"/>
    <to sec="1054876472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.678114,1.68342,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.232.125.173"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.678114,1.68342,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.28.193.173"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_909{
style=filled;
color=gray75;
3828[label="84.1.65.180;222pkt 222fpkt", shape=pentagon, color=darkviolet];
4621[label="84.1.65.180;221pkt 221fpkt", shape=invtriangle, color=brown];
stat909[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.1.65.180:1035, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1035: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3828--4621[label="1;221pkt 221fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="84.1.65.180" src_port="1035"/>
    </slice>
    <from sec="1054875880" usec="0"/>
    <to sec="1054875917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.678114,1.68342,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.137.209.181"/>
    </slice>
    <from sec="1054876355" usec="0"/>
    <to sec="1054876499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724842,1.586,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_911{
style=filled;
color=gray75;
352[label="211.199.26.184s;75pkt 75fpkt", shape=rectangle, color=red];
3844[label="211.199.26.184;179pkt 179fpkt", shape=pentagon, color=darkviolet];
4630[label="211.199.26.184;179pkt 179fpkt", shape=invtriangle, color=brown];
stat911[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.199.26.184:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
352--3844[label="1;75pkt 75fpkt"];
352--4630[label="1;75pkt 75fpkt"];
3844--4630[label="1;179pkt 179fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="211.199.26.184" src_port="1028"/>
    </slice>
    <from sec="1054875850" usec="0"/>
    <to sec="1054875881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997668,1.65217,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_912{
style=filled;
color=gray75;
3856[label="210.193.192.186;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4634[label="210.193.192.186;5pkt 5fpkt", shape=invtriangle, color=brown];
4910[label="210.193.192.186;4pkt 4fpkt", shape=invhouse, color=bisque];
stat912[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.193.192.186:23, 129.24.193.0:1585}[20%]&lt;BR/&gt;{210.193.192.186:5050, 129.24.214.11:2541}[20%]&lt;BR/&gt;{210.193.192.186:80, 176.107.232.66:3772}[20%]&lt;BR/&gt;{210.193.192.186:23, 129.24.224.129:1041}[20%]&lt;BR/&gt;{210.193.192.186:5050, 129.24.192.176:1129}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23: (21.4286%)&lt;BR/&gt; 5050: (17.8571%)&lt;BR/&gt; 3772: (10.7143%)&lt;BR/&gt; 1585: (10.7143%)&lt;BR/&gt; 1129: (10.7143%)&gt;];
}
3856--4634[label="1;5pkt 5fpkt"];
3856--4910[label="1;4pkt 4fpkt"];
4634--4910[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="129.24.192.176" dst_port="1129" src_ip="210.193.192.186" src_port="5050"/>
      <filter dst_ip="129.24.224.129" dst_port="1041" src_ip="210.193.192.186" src_port="23"/>
      <filter dst_ip="176.107.232.66" dst_port="3772" src_ip="210.193.192.186" src_port="80"/>
      <filter dst_ip="129.24.214.11" dst_port="2541" src_ip="210.193.192.186" src_port="5050"/>
      <filter dst_ip="129.24.193.0" dst_port="1585" src_ip="210.193.192.186" src_port="23"/>
    </slice>
    <from sec="1054875602" usec="0"/>
    <to sec="1054876498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_913{
style=filled;
color=gray75;
3860[label="211.80.182.187;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4635[label="211.80.182.187;2pkt 2fpkt", shape=invtriangle, color=brown];
stat913[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.80.182.187:32788, 169.9.2.94:53}[50%]&lt;BR/&gt;{211.80.182.187:32788, 169.9.2.95:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32788: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
3860--4635[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="169.9.2.95" dst_port="53" src_ip="211.80.182.187" src_port="32788"/>
      <filter dst_ip="169.9.2.94" dst_port="53" src_ip="211.80.182.187" src_port="32788"/>
    </slice>
    <from sec="1054875662" usec="0"/>
    <to sec="1054876491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997668,1.65217,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_914{
style=filled;
color=gray75;
3880[label="216.38.102.192;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4646[label="216.38.102.192;4pkt 4fpkt", shape=invtriangle, color=brown];
4915[label="216.38.102.192;3pkt 3fpkt", shape=invhouse, color=bisque];
stat914[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.38.102.192:80, 169.189.161.65:3519}[25%]&lt;BR/&gt;{216.38.102.192:80, 169.189.161.65:3521}[25%]&lt;BR/&gt;{216.38.102.192:80, 169.189.161.65:3522}[25%]&lt;BR/&gt;{216.38.102.192:80, 169.189.161.65:3523}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3523: (13.6364%)&lt;BR/&gt; 3522: (13.6364%)&lt;BR/&gt; 3521: (13.6364%)&lt;BR/&gt; 3519: (9.09091%)&gt;];
}
3880--4646[label="1;4pkt 4fpkt"];
3880--4915[label="1;3pkt 3fpkt"];
4646--4915[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.161.65" dst_port="3523" src_ip="216.38.102.192" src_port="80"/>
      <filter dst_ip="169.189.161.65" dst_port="3522" src_ip="216.38.102.192" src_port="80"/>
      <filter dst_ip="169.189.161.65" dst_port="3521" src_ip="216.38.102.192" src_port="80"/>
      <filter dst_ip="169.189.161.65" dst_port="3519" src_ip="216.38.102.192" src_port="80"/>
    </slice>
    <from sec="1054875855" usec="0"/>
    <to sec="1054875913" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_915{
style=filled;
color=gray75;
3885[label="87.121.16.193;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4647[label="87.121.16.193;7pkt 7fpkt", shape=invtriangle, color=brown];
stat915[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.121.16.193:80, 134.66.217.71:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1507: (6.66667%)&lt;BR/&gt; 1506: (6.66667%)&lt;BR/&gt; 1505: (6.66667%)&lt;BR/&gt; 1504: (6.66667%)&gt;];
}
3885--4647[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="134.66.217.71" src_ip="87.121.16.193" src_port="80"/>
    </slice>
    <from sec="1054875882" usec="0"/>
    <to sec="1054876446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730842,1.58729,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_916{
style=filled;
color=gray75;
1780[label="219.73.186.194;s;595pkt 595fpkt", shape=diamond, color=yellow];
3898[label="219.73.186.194;645pkt 645fpkt", shape=pentagon, color=darkviolet];
4652[label="219.73.186.194;644pkt 644fpkt", shape=invtriangle, color=brown];
stat916[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.73.186.194:4956, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4956: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
1780--2674[label="0.0571429;34pkt 34fpkt"];
1780--2678[label="0.0638655;38pkt 38fpkt"];
1780--2685[label="0.0588235;35pkt 35fpkt"];
1780--2698[label="0.0571429;34pkt 34fpkt"];
1780--2709[label="0.0571429;34pkt 34fpkt"];
1780--3898[label="0.998319;594pkt 594fpkt"];
1780--4652[label="0.998319;594pkt 594fpkt"];
3898--4652[label="1;644pkt 644fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="219.73.186.194" src_port="4956"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054876499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730842,1.58729,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_917{
style=filled;
color=gray75;
1412[label="202.25.164.195;s;238pkt 238fpkt", shape=diamond, color=yellow];
3904[label="202.25.164.195;335pkt 335fpkt", shape=pentagon, color=darkviolet];
4655[label="202.25.164.195;335pkt 335fpkt", shape=invtriangle, color=brown];
stat917[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.25.164.195:53, *:*}[99.7015%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 1059: (0.440529%)&lt;BR/&gt; 3413: (0.330396%)&lt;BR/&gt; 3377: (0.330396%)&lt;BR/&gt; 1885: (0.330396%)&gt;];
}
1412--3904[label="1;238pkt 238fpkt"];
1412--4655[label="1;238pkt 238fpkt"];
3904--4655[label="1;335pkt 335fpkt"];
</description>
    <slice>
      <filter src_ip="202.25.164.195" src_port="53"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_918{
style=filled;
color=gray75;
3911[label="199.22.26.196;117pkt 117fpkt", shape=pentagon, color=darkviolet];
4659[label="199.22.26.196;116pkt 116fpkt", shape=invtriangle, color=brown];
stat918[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.22.26.196:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3911--4659[label="1;116pkt 116fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="199.22.26.196" src_port="1028"/>
    </slice>
    <from sec="1054876236" usec="0"/>
    <to sec="1054876264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_919{
style=filled;
color=gray75;
3916[label="192.42.4.197;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4662[label="192.42.4.197;3pkt 3fpkt", shape=invtriangle, color=brown];
stat919[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.42.4.197:1863, 169.189.200.125:1032}[33.3333%]&lt;BR/&gt;{192.42.4.197:1863, 198.160.56.154:1031}[33.3333%]&lt;BR/&gt;{192.42.4.197:1863, 169.189.232.211:2081}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 2081: (16.6667%)&lt;BR/&gt; 1032: (16.6667%)&lt;BR/&gt; 1031: (16.6667%)&gt;];
}
3916--4662[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.232.211" dst_port="2081" src_ip="192.42.4.197" src_port="1863"/>
      <filter dst_ip="198.160.56.154" dst_port="1031" src_ip="192.42.4.197" src_port="1863"/>
      <filter dst_ip="169.189.200.125" dst_port="1032" src_ip="192.42.4.197" src_port="1863"/>
    </slice>
    <from sec="1054875751" usec="0"/>
    <to sec="1054876494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.678114,1.68342,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.100.17.198"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054875634" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.730842,1.58729,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_921{
style=filled;
color=gray75;
819[label="175.85.128.27;d;87pkt 87fpkt", shape=diamond, color=yellow];
3909[label="202.168.18.196;87pkt 87fpkt", shape=pentagon, color=darkviolet];
3927[label="51.214.151.198;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4666[label="51.214.151.198;2pkt 2fpkt", shape=invtriangle, color=brown];
stat921[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.168.18.196:80, 175.85.128.27:*}[85.8586%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33730: (0.837989%)&lt;BR/&gt; 33016: (0.837989%)&lt;BR/&gt; 33763: (0.558659%)&lt;BR/&gt; 33753: (0.558659%)&gt;];
}
819--859[label="0.0229885;2pkt 2fpkt"];
819--2038[label="0.0229885;2pkt 2fpkt"];
819--2170[label="0.214286;3pkt 3fpkt"];
819--2669[label="0.0229885;2pkt 2fpkt"];
819--3775[label="0.0229885;2pkt 2fpkt"];
819--3909[label="0.862069;75pkt 75fpkt"];
819--3927[label="1;3pkt 3fpkt"];
819--4666[label="1;2pkt 2fpkt"];
3927--4666[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="175.85.128.27" src_ip="202.168.18.196" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770739,1.60066,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_922{
style=filled;
color=gray75;
764[label="210.157.81.160;s;406pkt 406fpkt", shape=diamond, color=yellow];
886[label="175.85.101.99;d;37pkt 37fpkt", shape=diamond, color=yellow];
1319[label="175.84.245.197;d;99pkt 99fpkt", shape=diamond, color=yellow];
1339[label="175.85.75.7;d;17pkt 17fpkt", shape=diamond, color=yellow];
1778[label="175.85.161.144;d;50pkt 50fpkt", shape=diamond, color=yellow];
1925[label="176.107.53.193;d;152pkt 152fpkt", shape=diamond, color=yellow];
2578[label="200.20.48.102;s;41pkt 41fpkt", shape=hexagon, color=black];
2814[label="177.154.127.12;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3411[label="84.45.85.106;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3829[label="48.117.131.180;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4000[label="51.178.23.214;133pkt 133fpkt", shape=pentagon, color=darkviolet];
stat922[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.157.81.160:80, *:*}[50.8838%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.4603%)&lt;BR/&gt; 0: (0.846561%)&lt;BR/&gt; 1863: (0.793651%)&lt;BR/&gt; 1024: (0.529101%)&lt;BR/&gt; 53: (0.529101%)&gt;];
}
764--776[label="0.0300752;4pkt 4fpkt"];
764--786[label="0.0221675;9pkt 9fpkt"];
764--790[label="0.0172414;7pkt 7fpkt"];
764--814[label="0.00510204;1pkt 1fpkt"];
764--816[label="0.00246305;1pkt 1fpkt"];
764--842[label="0.315271;128pkt 128fpkt"];
764--845[label="0.0496894;8pkt 8fpkt"];
764--888[label="0.0197044;8pkt 8fpkt"];
764--892[label="0.00543478;2pkt 2fpkt"];
764--899[label="0.0882353;6pkt 6fpkt"];
764--905[label="0.012987;2pkt 2fpkt"];
764--907[label="0.00928793;3pkt 3fpkt"];
764--950[label="0.0176991;2pkt 2fpkt"];
764--962[label="0.00246305;1pkt 1fpkt"];
764--969[label="0.00297619;1pkt 1fpkt"];
764--1009[label="0.0197044;8pkt 8fpkt"];
764--1145[label="0.0197044;8pkt 8fpkt"];
764--1196[label="0.0406504;5pkt 5fpkt"];
764--1207[label="0.0179856;5pkt 5fpkt"];
764--1319[label="0.020202;2pkt 2fpkt"];
764--1594[label="0.00308642;1pkt 1fpkt"];
764--1792[label="0.00666667;1pkt 1fpkt"];
764--1970[label="0.00738916;3pkt 3fpkt"];
764--1973[label="0.00492611;2pkt 2fpkt"];
764--1988[label="0.315271;128pkt 128fpkt"];
764--2010[label="0.00246305;1pkt 1fpkt"];
764--2018[label="0.25;12pkt 12fpkt"];
764--2019[label="1;406pkt 406fpkt"];
764--2029[label="0.00510204;1pkt 1fpkt"];
764--2037[label="0.0197044;8pkt 8fpkt"];
764--2081[label="0.015625;1pkt 1fpkt"];
764--2088[label="0.00985222;4pkt 4fpkt"];
764--2094[label="0.0300752;4pkt 4fpkt"];
764--2120[label="0.00543478;2pkt 2fpkt"];
764--2128[label="0.0882353;6pkt 6fpkt"];
764--2209[label="0.0168067;2pkt 2fpkt"];
764--2315[label="0.0147783;6pkt 6fpkt"];
764--2317[label="0.0147783;6pkt 6fpkt"];
764--2347[label="0.00928793;3pkt 3fpkt"];
764--2350[label="0.0595238;5pkt 5fpkt"];
764--2492[label="0.0172414;7pkt 7fpkt"];
764--2611[label="0.00492611;2pkt 2fpkt"];
764--2616[label="0.0197044;8pkt 8fpkt"];
764--2669[label="0.0517241;21pkt 21fpkt"];
764--3714[label="1;406pkt 406fpkt"];
886--887[label="1;4pkt 4fpkt"];
886--1040[label="0.0540541;2pkt 2fpkt"];
886--1104[label="0.030303;1pkt 1fpkt"];
886--2044[label="1;4pkt 4fpkt"];
886--2126[label="0.0571429;2pkt 2fpkt"];
886--2669[label="0.135135;5pkt 5fpkt"];
886--3411[label="1;4pkt 4fpkt"];
886--3939[label="0.0540541;2pkt 2fpkt"];
886--4673[label="0.0540541;2pkt 2fpkt"];
1319--1332[label="0.010101;1pkt 1fpkt"];
1319--1334[label="0.020202;2pkt 2fpkt"];
1319--1454[label="0.010101;1pkt 1fpkt"];
1319--1486[label="0.12;6pkt 6fpkt"];
1319--1497[label="0.0447761;3pkt 3fpkt"];
1319--1577[label="0.0142857;1pkt 1fpkt"];
1319--1800[label="0.0163934;1pkt 1fpkt"];
1319--1980[label="0.020202;2pkt 2fpkt"];
1319--2019[label="0.020202;2pkt 2fpkt"];
1319--2203[label="0.222222;22pkt 22fpkt"];
1319--2281[label="0.010101;1pkt 1fpkt"];
1319--2510[label="0.020202;2pkt 2fpkt"];
1319--2669[label="0.222222;22pkt 22fpkt"];
1319--2793[label="0.027027;1pkt 1fpkt"];
1319--3098[label="0.020202;2pkt 2fpkt"];
1319--3229[label="0.122449;6pkt 6fpkt"];
1319--3298[label="0.0138889;1pkt 1fpkt"];
1319--3312[label="0.0869565;6pkt 6fpkt"];
1319--3330[label="0.010101;1pkt 1fpkt"];
1319--3558[label="0.2;1pkt 1fpkt"];
1319--3714[label="0.020202;2pkt 2fpkt"];
1319--4128[label="0.0175439;1pkt 1fpkt"];
1319--4420[label="0.0869565;6pkt 6fpkt"];
1319--4428[label="0.010101;1pkt 1fpkt"];
1319--4746[label="0.0175439;1pkt 1fpkt"];
1339--1368[label="0.470588;8pkt 8fpkt"];
1339--2126[label="0.176471;3pkt 3fpkt"];
1339--2578[label="0.470588;8pkt 8fpkt"];
1339--2669[label="0.0588235;1pkt 1fpkt"];
1339--3939[label="0.176471;3pkt 3fpkt"];
1339--4673[label="0.176471;3pkt 3fpkt"];
1778--2053[label="0.5;25pkt 25fpkt"];
1778--2126[label="0.171429;6pkt 6fpkt"];
1778--2669[label="0.12;6pkt 6fpkt"];
1778--3636[label="0.8;40pkt 40fpkt"];
1778--3939[label="0.16;8pkt 8fpkt"];
1778--4673[label="0.16;8pkt 8fpkt"];
1925--2814[label="1;3pkt 3fpkt"];
1925--3829[label="1;3pkt 3fpkt"];
1925--3939[label="0.0208333;3pkt 3fpkt"];
1925--4000[label="1;133pkt 133fpkt"];
1925--4673[label="0.0208333;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="210.157.81.160" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_923{
style=filled;
color=gray75;
3948[label="51.0.135.203;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4676[label="51.0.135.203;9pkt 9fpkt", shape=invtriangle, color=brown];
stat923[shape=component, label=&lt;Rules:&lt;BR/&gt;{51.0.135.203:80, 176.107.32.66:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 5978: (5.55556%)&lt;BR/&gt; 5949: (5.55556%)&lt;BR/&gt; 5932: (5.55556%)&lt;BR/&gt; 5929: (5.55556%)&gt;];
}
3948--4676[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="176.107.32.66" src_ip="51.0.135.203" src_port="80"/>
    </slice>
    <from sec="1054876446" usec="0"/>
    <to sec="1054876499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_924{
style=filled;
color=gray75;
3953[label="208.34.206.204;221pkt 221fpkt", shape=pentagon, color=darkviolet];
4678[label="208.34.206.204;221pkt 221fpkt", shape=invtriangle, color=brown];
stat924[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.34.206.204:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 34696: (0.226244%)&lt;BR/&gt; 34688: (0.226244%)&lt;BR/&gt; 34679: (0.226244%)&lt;BR/&gt; 34671: (0.226244%)&gt;];
}
3953--4678[label="1;221pkt 221fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.34.206.204"/>
    </slice>
    <from sec="1054875943" usec="0"/>
    <to sec="1054876003" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.678114,1.68342,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.49.170.206"/>
    </slice>
    <from sec="1054875695" usec="0"/>
    <to sec="1054875864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724842,1.586,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_926{
style=filled;
color=gray75;
382[label="86.230.77.208s;42pkt 42fpkt", shape=rectangle, color=red];
3972[label="86.230.77.208;120pkt 120fpkt", shape=pentagon, color=darkviolet];
4685[label="86.230.77.208;120pkt 120fpkt", shape=invtriangle, color=brown];
stat926[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.230.77.208:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
382--3972[label="1;42pkt 42fpkt"];
382--4685[label="1;42pkt 42fpkt"];
3972--4685[label="1;120pkt 120fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="86.230.77.208" src_port="1028"/>
    </slice>
    <from sec="1054876341" usec="0"/>
    <to sec="1054876367" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724842,1.586,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_927{
style=filled;
color=gray75;
383[label="198.208.40.209s;151pkt 151fpkt", shape=rectangle, color=red];
3976[label="198.208.40.209;175pkt 175fpkt", shape=pentagon, color=darkviolet];
4687[label="198.208.40.209;174pkt 174fpkt", shape=invtriangle, color=brown];
stat927[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.208.40.209:1032, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1032: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
383--3976[label="1;151pkt 151fpkt"];
383--4687[label="0.993377;150pkt 150fpkt"];
3976--4687[label="1;174pkt 174fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="198.208.40.209" src_port="1032"/>
    </slice>
    <from sec="1054876033" usec="0"/>
    <to sec="1054876061" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_928{
style=filled;
color=gray75;
3980[label="192.42.2.210;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4689[label="192.42.2.210;4pkt 4fpkt", shape=invtriangle, color=brown];
stat928[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.42.2.210:1863, 199.98.125.11:1076}[25%]&lt;BR/&gt;{192.42.2.210:1863, 176.107.104.120:3021}[25%]&lt;BR/&gt;{192.42.2.210:1863, 169.189.200.122:3805}[25%]&lt;BR/&gt;{192.42.2.210:1863, 169.189.205.160:1158}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3805: (12.5%)&lt;BR/&gt; 3021: (12.5%)&lt;BR/&gt; 1158: (12.5%)&lt;BR/&gt; 1076: (12.5%)&gt;];
}
3980--4689[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.205.160" dst_port="1158" src_ip="192.42.2.210" src_port="1863"/>
      <filter dst_ip="169.189.200.122" dst_port="3805" src_ip="192.42.2.210" src_port="1863"/>
      <filter dst_ip="176.107.104.120" dst_port="3021" src_ip="192.42.2.210" src_port="1863"/>
      <filter dst_ip="199.98.125.11" dst_port="1076" src_ip="192.42.2.210" src_port="1863"/>
    </slice>
    <from sec="1054875744" usec="0"/>
    <to sec="1054876491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.724842,1.586,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_929{
style=filled;
color=gray75;
386[label="49.84.222.211s;199pkt 199fpkt", shape=rectangle, color=red];
3992[label="49.84.222.211;247pkt 247fpkt", shape=pentagon, color=darkviolet];
4695[label="49.84.222.211;246pkt 246fpkt", shape=invtriangle, color=brown];
stat929[shape=component, label=&lt;Rules:&lt;BR/&gt;{49.84.222.211:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
386--3992[label="1;199pkt 199fpkt"];
386--4695[label="0.994975;198pkt 198fpkt"];
3992--4695[label="1;246pkt 246fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="49.84.222.211" src_port="1025"/>
    </slice>
    <from sec="1054876303" usec="0"/>
    <to sec="1054876318" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_930{
style=filled;
color=gray75;
985[label="210.72.155.214;s;331pkt 331fpkt", shape=diamond, color=yellow];
stat930[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.72.155.214:80, 199.104.102.143:*}[83.9879%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8489%)&lt;BR/&gt; 0: (0.302115%)&lt;BR/&gt; 63584: (0.151057%)&lt;BR/&gt; 63366: (0.151057%)&lt;BR/&gt; 63351: (0.151057%)&gt;];
}
985--1145[label="0.0422961;14pkt 14fpkt"];
985--1671[label="0.0183486;2pkt 2fpkt"];
985--1970[label="0.0271903;9pkt 9fpkt"];
985--1975[label="0.755287;250pkt 250fpkt"];
985--2030[label="0.00381679;1pkt 1fpkt"];
985--2120[label="0.00302115;1pkt 1fpkt"];
985--2172[label="0.0060423;2pkt 2fpkt"];
985--2252[label="0.00906344;3pkt 3fpkt"];
985--2256[label="1;187pkt 187fpkt"];
985--2619[label="0.598187;198pkt 198fpkt"];
985--2669[label="0.0634441;21pkt 21fpkt"];
985--4002[label="1;331pkt 331fpkt"];
985--4699[label="1;331pkt 331fpkt"];
</description>
    <slice>
      <filter dst_ip="199.104.102.143" src_ip="210.72.155.214" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997668,1.65217,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_931{
style=filled;
color=gray75;
4011[label="210.6.69.216;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4702[label="210.6.69.216;5pkt 5fpkt", shape=invtriangle, color=brown];
4931[label="210.6.69.216;4pkt 4fpkt", shape=invhouse, color=bisque];
stat931[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.6.69.216:80, 199.174.154.15:1324}[20%]&lt;BR/&gt;{210.6.69.216:80, 199.174.154.15:1325}[20%]&lt;BR/&gt;{210.6.69.216:80, 199.174.154.15:1327}[20%]&lt;BR/&gt;{210.6.69.216:80, 199.174.154.15:1340}[20%]&lt;BR/&gt;{210.6.69.216:80, 199.174.154.15:1342}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1342: (10.7143%)&lt;BR/&gt; 1340: (10.7143%)&lt;BR/&gt; 1327: (10.7143%)&lt;BR/&gt; 1325: (10.7143%)&gt;];
}
4011--4702[label="1;5pkt 5fpkt"];
4011--4931[label="1;4pkt 4fpkt"];
4702--4931[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="199.174.154.15" dst_port="1342" src_ip="210.6.69.216" src_port="80"/>
      <filter dst_ip="199.174.154.15" dst_port="1340" src_ip="210.6.69.216" src_port="80"/>
      <filter dst_ip="199.174.154.15" dst_port="1327" src_ip="210.6.69.216" src_port="80"/>
      <filter dst_ip="199.174.154.15" dst_port="1325" src_ip="210.6.69.216" src_port="80"/>
      <filter dst_ip="199.174.154.15" dst_port="1324" src_ip="210.6.69.216" src_port="80"/>
    </slice>
    <from sec="1054875906" usec="0"/>
    <to sec="1054875924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997668,1.65217,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_932{
style=filled;
color=gray75;
4017[label="48.90.238.216;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4703[label="48.90.238.216;13pkt 13fpkt", shape=invtriangle, color=brown];
4932[label="48.90.238.216;14pkt 14fpkt", shape=invhouse, color=bisque];
stat932[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.90.238.216:80, 169.189.205.204:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1651: (3.65854%)&lt;BR/&gt; 1650: (3.65854%)&lt;BR/&gt; 1638: (3.65854%)&lt;BR/&gt; 1636: (3.65854%)&gt;];
}
4017--4703[label="1;13pkt 13fpkt"];
4017--4932[label="1;14pkt 14fpkt"];
4703--4932[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.205.204" src_ip="48.90.238.216" src_port="80"/>
    </slice>
    <from sec="1054876045" usec="0"/>
    <to sec="1054876054" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_933{
style=filled;
color=gray75;
4021[label="189.183.43.218;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4704[label="189.183.43.218;2pkt 2fpkt", shape=invtriangle, color=brown];
stat933[shape=component, label=&lt;Rules:&lt;BR/&gt;{189.183.43.218:5190, 169.189.201.180:3030}[50%]&lt;BR/&gt;{189.183.43.218:5190, 169.189.201.180:5190}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5190: (83.3333%)&lt;BR/&gt; 3030: (16.6667%)&gt;];
}
4021--4704[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.201.180" dst_port="5190" src_ip="189.183.43.218" src_port="5190"/>
      <filter dst_ip="169.189.201.180" dst_port="3030" src_ip="189.183.43.218" src_port="5190"/>
    </slice>
    <from sec="1054876034" usec="0"/>
    <to sec="1054876317" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.678114,1.68342,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.67.64.220"/>
    </slice>
    <from sec="1054875605" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997668,1.65217,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_935{
style=filled;
color=gray75;
4041[label="51.208.165.224;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4712[label="51.208.165.224;7pkt 7fpkt", shape=invtriangle, color=brown];
4936[label="51.208.165.224;7pkt 7fpkt", shape=invhouse, color=bisque];
stat935[shape=component, label=&lt;Rules:&lt;BR/&gt;{51.208.165.224:7070, 199.174.157.10:*}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7070: (42.5%)&lt;BR/&gt; 32940: (7.5%)&lt;BR/&gt; 6970: (7.5%)&lt;BR/&gt; 1558: (7.5%)&lt;BR/&gt; 1555: (7.5%)&gt;];
}
4041--4712[label="1;6pkt 6fpkt"];
4041--4936[label="1;6pkt 6fpkt"];
4712--4936[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="199.174.157.10" src_ip="51.208.165.224" src_port="7070"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054875924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.678114,1.68342,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.227.244.226"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054875691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_937{
style=filled;
color=gray75;
4054[label="210.149.86.227;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4720[label="210.149.86.227;4pkt 4fpkt", shape=invtriangle, color=brown];
stat937[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.149.86.227:80, 176.107.180.47:47533}[25%]&lt;BR/&gt;{210.149.86.227:80, 176.107.180.47:47534}[25%]&lt;BR/&gt;{210.149.86.227:80, 176.107.180.47:47535}[25%]&lt;BR/&gt;{210.149.86.227:80, 176.107.180.47:47536}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 47536: (12.5%)&lt;BR/&gt; 47535: (12.5%)&lt;BR/&gt; 47534: (12.5%)&lt;BR/&gt; 47533: (12.5%)&gt;];
}
4054--4720[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="176.107.180.47" dst_port="47536" src_ip="210.149.86.227" src_port="80"/>
      <filter dst_ip="176.107.180.47" dst_port="47535" src_ip="210.149.86.227" src_port="80"/>
      <filter dst_ip="176.107.180.47" dst_port="47534" src_ip="210.149.86.227" src_port="80"/>
      <filter dst_ip="176.107.180.47" dst_port="47533" src_ip="210.149.86.227" src_port="80"/>
    </slice>
    <from sec="1054875956" usec="0"/>
    <to sec="1054875978" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05247,1.61811,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_938{
style=filled;
color=gray75;
400[label="51.41.48.229s;230pkt 230fpkt", shape=rectangle, color=red];
4062[label="51.41.48.229;229pkt 229fpkt", shape=pentagon, color=darkviolet];
4726[label="51.41.48.229;228pkt 228fpkt", shape=invtriangle, color=brown];
4940[label="51.41.48.229;229pkt 229fpkt", shape=invhouse, color=bisque];
stat938[shape=component, label=&lt;Rules:&lt;BR/&gt;{51.41.48.229:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
400--4062[label="1;229pkt 229fpkt"];
400--4726[label="1;228pkt 228fpkt"];
400--4940[label="1;229pkt 229fpkt"];
4062--4726[label="1;228pkt 228fpkt"];
4062--4940[label="1;229pkt 229fpkt"];
4726--4940[label="1;228pkt 228fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="51.41.48.229" src_port="1025"/>
    </slice>
    <from sec="1054875922" usec="0"/>
    <to sec="1054875967" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_939{
style=filled;
color=gray75;
1764[label="199.194.81.5;s;6pkt 6fpkt", shape=diamond, color=yellow];
stat939[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.194.81.5:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (58.3333%)&lt;BR/&gt; 32833: (8.33333%)&lt;BR/&gt; 32792: (8.33333%)&lt;BR/&gt; 4528: (8.33333%)&lt;BR/&gt; 3261: (8.33333%)&gt;];
}
1764--1853[label="0.166667;1pkt 1fpkt"];
1764--2112[label="0.166667;1pkt 1fpkt"];
1764--2182[label="0.166667;1pkt 1fpkt"];
1764--2498[label="0.166667;1pkt 1fpkt"];
1764--2504[label="1;6pkt 6fpkt"];
1764--2633[label="0.166667;1pkt 1fpkt"];
1764--2681[label="0.166667;1pkt 1fpkt"];
1764--2690[label="0.166667;1pkt 1fpkt"];
1764--2702[label="0.166667;1pkt 1fpkt"];
1764--2710[label="0.166667;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="199.194.81.5" src_port="53"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_940{
style=filled;
color=gray75;
4097[label="129.0.100.236;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4735[label="129.0.100.236;5pkt 5fpkt", shape=invtriangle, color=brown];
stat940[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.0.100.236:80, 169.189.200.12:1183}[20%]&lt;BR/&gt;{129.0.100.236:80, 169.189.200.12:1189}[20%]&lt;BR/&gt;{129.0.100.236:80, 169.189.200.12:1191}[20%]&lt;BR/&gt;{129.0.100.236:80, 169.189.200.12:1192}[20%]&lt;BR/&gt;{129.0.100.236:80, 169.189.200.12:1206}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1206: (11.1111%)&lt;BR/&gt; 1192: (11.1111%)&lt;BR/&gt; 1191: (11.1111%)&lt;BR/&gt; 1189: (11.1111%)&gt;];
}
4097--4735[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="169.189.200.12" dst_port="1206" src_ip="129.0.100.236" src_port="80"/>
      <filter dst_ip="169.189.200.12" dst_port="1192" src_ip="129.0.100.236" src_port="80"/>
      <filter dst_ip="169.189.200.12" dst_port="1191" src_ip="129.0.100.236" src_port="80"/>
      <filter dst_ip="169.189.200.12" dst_port="1189" src_ip="129.0.100.236" src_port="80"/>
      <filter dst_ip="169.189.200.12" dst_port="1183" src_ip="129.0.100.236" src_port="80"/>
    </slice>
    <from sec="1054876110" usec="0"/>
    <to sec="1054876360" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.678114,1.68342,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.48.192.236"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997668,1.65217,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_942{
style=filled;
color=gray75;
4104[label="84.180.192.237;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4738[label="84.180.192.237;1pkt 1fpkt", shape=invtriangle, color=brown];
4946[label="84.180.192.237;1pkt 1fpkt", shape=invhouse, color=bisque];
stat942[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.180.192.237:10048, 134.66.118.86:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10048: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
4104--4738[label="1;1pkt 1fpkt"];
4104--4946[label="1;1pkt 1fpkt"];
4738--4946[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.66.118.86" dst_port="25" src_ip="84.180.192.237" src_port="10048"/>
    </slice>
    <from sec="1054876500" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_943{
style=filled;
color=gray75;
4117[label="50.64.139.240;105pkt 105fpkt", shape=pentagon, color=darkviolet];
4742[label="50.64.139.240;104pkt 104fpkt", shape=invtriangle, color=brown];
stat943[shape=component, label=&lt;Rules:&lt;BR/&gt;{50.64.139.240:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4117--4742[label="1;104pkt 104fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="50.64.139.240" src_port="1028"/>
    </slice>
    <from sec="1054875992" usec="0"/>
    <to sec="1054876009" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_944{
style=filled;
color=gray75;
4123[label="219.105.154.241;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4745[label="219.105.154.241;14pkt 14fpkt", shape=invtriangle, color=brown];
stat944[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.105.154.241:80, 175.84.79.45:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51368: (3.57143%)&lt;BR/&gt; 51367: (3.57143%)&lt;BR/&gt; 51366: (3.57143%)&lt;BR/&gt; 51365: (3.57143%)&gt;];
}
4123--4745[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.79.45" src_ip="219.105.154.241" src_port="80"/>
    </slice>
    <from sec="1054876293" usec="0"/>
    <to sec="1054876316" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.571638,1.61542,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_945{
style=filled;
color=gray75;
1059[label="210.157.78.121;s;430pkt 430fpkt", shape=diamond, color=yellow];
1212[label="192.77.54.155;s;112pkt 112fpkt", shape=diamond, color=yellow];
1334[label="192.77.56.57;s;107pkt 107fpkt", shape=diamond, color=yellow];
3491[label="210.157.78.121;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat945[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.157.78.121:80, *:*}[66.1043%]&lt;BR/&gt;{*:80, 169.189.243.140:*}[22.0859%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8469%)&lt;BR/&gt; 0: (0.306279%)&lt;BR/&gt; 2367: (0.229709%)&lt;BR/&gt; 1114: (0.229709%)&lt;BR/&gt; 3263: (0.153139%)&gt;];
}
1059--1145[label="0.0139535;6pkt 6fpkt"];
1059--1157[label="0.02;1pkt 1fpkt"];
1059--1196[label="0.0325203;4pkt 4fpkt"];
1059--1207[label="0.0107914;3pkt 3fpkt"];
1059--1215[label="0.0229008;3pkt 3fpkt"];
1059--1319[label="0.020202;2pkt 2fpkt"];
1059--1533[label="0.342857;24pkt 24fpkt"];
1059--1593[label="0.029703;3pkt 3fpkt"];
1059--1594[label="0.00308642;1pkt 1fpkt"];
1059--1792[label="0.0133333;2pkt 2fpkt"];
1059--1966[label="0.00947867;2pkt 2fpkt"];
1059--1970[label="0.00930233;4pkt 4fpkt"];
1059--1975[label="0.00930233;4pkt 4fpkt"];
1059--1988[label="0.283721;122pkt 122fpkt"];
1059--2010[label="0.00465116;2pkt 2fpkt"];
1059--2014[label="0.00275482;1pkt 1fpkt"];
1059--2037[label="0.0162791;7pkt 7fpkt"];
1059--2056[label="0.0235294;4pkt 4fpkt"];
1059--2088[label="0.00697674;3pkt 3fpkt"];
1059--2094[label="0.0150376;2pkt 2fpkt"];
1059--2104[label="0.00854701;1pkt 1fpkt"];
1059--2120[label="0.00543478;2pkt 2fpkt"];
1059--2128[label="0.0735294;5pkt 5fpkt"];
1059--2209[label="0.00840336;1pkt 1fpkt"];
1059--2252[label="0.00697674;3pkt 3fpkt"];
1059--2266[label="0.0238095;1pkt 1fpkt"];
1059--2310[label="0.0980392;5pkt 5fpkt"];
1059--2315[label="0.00465116;2pkt 2fpkt"];
1059--2317[label="0.0139535;6pkt 6fpkt"];
1059--2347[label="0.00928793;3pkt 3fpkt"];
1059--2350[label="0.0238095;2pkt 2fpkt"];
1059--2358[label="0.0422535;3pkt 3fpkt"];
1059--2492[label="0.0162791;7pkt 7fpkt"];
1059--2510[label="1;362pkt 362fpkt"];
1059--2616[label="0.0193237;8pkt 8fpkt"];
1059--2619[label="0.00930233;4pkt 4fpkt"];
1059--2669[label="0.0395349;17pkt 17fpkt"];
1059--3491[label="0.25;1pkt 1fpkt"];
1212--1260[label="0.04;3pkt 3fpkt"];
1212--1593[label="0.019802;2pkt 2fpkt"];
1212--1594[label="0.00892857;1pkt 1fpkt"];
1212--1742[label="0.0113636;1pkt 1fpkt"];
1212--1961[label="0.00892857;1pkt 1fpkt"];
1212--1973[label="0.0178571;2pkt 2fpkt"];
1212--1975[label="0.0178571;2pkt 2fpkt"];
1212--1988[label="0.0803571;9pkt 9fpkt"];
1212--2030[label="0.0178571;2pkt 2fpkt"];
1212--2089[label="0.0178571;2pkt 2fpkt"];
1212--2252[label="0.00892857;1pkt 1fpkt"];
1212--2291[label="1;82pkt 82fpkt"];
1212--2347[label="0.00892857;1pkt 1fpkt"];
1212--2430[label="0.00892857;1pkt 1fpkt"];
1212--2492[label="0.00892857;1pkt 1fpkt"];
1212--2611[label="0.00892857;1pkt 1fpkt"];
1212--2616[label="0.0267857;3pkt 3fpkt"];
1212--2619[label="0.0178571;2pkt 2fpkt"];
1212--2669[label="0.0714286;8pkt 8fpkt"];
1212--2678[label="0.00892857;1pkt 1fpkt"];
1334--1901[label="0.0645161;2pkt 2fpkt"];
1334--1961[label="0.00934579;1pkt 1fpkt"];
1334--1973[label="0.00934579;1pkt 1fpkt"];
1334--1975[label="0.0186916;2pkt 2fpkt"];
1334--1988[label="0.121495;13pkt 13fpkt"];
1334--2089[label="0.00934579;1pkt 1fpkt"];
1334--2252[label="0.00934579;1pkt 1fpkt"];
1334--2347[label="0.00934579;1pkt 1fpkt"];
1334--2349[label="1;74pkt 74fpkt"];
1334--2430[label="0.00934579;1pkt 1fpkt"];
1334--2611[label="0.00934579;1pkt 1fpkt"];
1334--2616[label="0.0280374;3pkt 3fpkt"];
1334--2619[label="0.0186916;2pkt 2fpkt"];
1334--2669[label="0.0747664;8pkt 8fpkt"];
1334--3098[label="0.990654;106pkt 106fpkt"];
</description>
    <slice>
      <filter src_ip="210.157.78.121" src_port="80"/>
      <filter dst_ip="169.189.243.140" src_port="80"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.895209,1.57226,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_946{
style=filled;
color=gray75;
1174[label="134.66.118.86;d;38pkt 38fpkt", shape=diamond, color=yellow];
1175[label="84.180.192.237;s;11pkt 11fpkt", shape=diamond, color=yellow];
1794[label="217.55.216.244;s;35pkt 35fpkt", shape=diamond, color=yellow];
1958[label="192.151.129.107;s;2pkt 2fpkt", shape=diamond, color=yellow];
2271[label="134.66.118.86;d;38pkt 38fpkt", shape=hexagon, color=black];
3420[label="192.151.129.107;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4142[label="217.55.216.244;43pkt 43fpkt", shape=pentagon, color=darkviolet];
4752[label="217.55.216.244;41pkt 41fpkt", shape=invtriangle, color=brown];
stat946[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 134.66.118.86:25}[43.2099%]&lt;BR/&gt;{217.55.216.244:80, 169.189.18.127:*}[25.9259%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.1429%)&lt;BR/&gt; 25: (21.4286%)&lt;BR/&gt; 2866: (1.19048%)&lt;BR/&gt; 39746: (0.952381%)&lt;BR/&gt; 53: (0.952381%)&gt;];
}
1174--1175[label="1;11pkt 11fpkt"];
1174--1794[label="0.0285714;1pkt 1fpkt"];
1174--1958[label="0.5;1pkt 1fpkt"];
1174--2271[label="1;38pkt 38fpkt"];
1174--2766[label="0.05;1pkt 1fpkt"];
1174--3420[label="0.5;1pkt 1fpkt"];
1174--4142[label="0.0263158;1pkt 1fpkt"];
1174--4752[label="0.0263158;1pkt 1fpkt"];
1175--2271[label="1;11pkt 11fpkt"];
1794--2271[label="0.0285714;1pkt 1fpkt"];
1794--2669[label="0.0857143;3pkt 3fpkt"];
1794--4142[label="1;35pkt 35fpkt"];
1794--4752[label="0.942857;33pkt 33fpkt"];
1958--2271[label="0.5;1pkt 1fpkt"];
1958--3420[label="1;2pkt 2fpkt"];
2271--2766[label="0.05;1pkt 1fpkt"];
2271--3420[label="0.5;1pkt 1fpkt"];
2271--4142[label="0.0263158;1pkt 1fpkt"];
2271--4752[label="0.0263158;1pkt 1fpkt"];
4142--4752[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_ip="134.66.118.86" dst_port="25"/>
      <filter dst_ip="169.189.18.127" src_ip="217.55.216.244" src_port="80"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997668,1.65217,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_947{
style=filled;
color=gray75;
4145[label="203.229.182.245;182pkt 182fpkt", shape=pentagon, color=darkviolet];
4753[label="203.229.182.245;181pkt 181fpkt", shape=invtriangle, color=brown];
4952[label="203.229.182.245;182pkt 182fpkt", shape=invhouse, color=bisque];
stat947[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.229.182.245:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 35232: (0.275229%)&lt;BR/&gt; 35225: (0.275229%)&lt;BR/&gt; 35208: (0.275229%)&lt;BR/&gt; 35206: (0.275229%)&gt;];
}
4145--4753[label="1;181pkt 181fpkt"];
4145--4952[label="1;182pkt 182fpkt"];
4753--4952[label="1;181pkt 181fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="203.229.182.245"/>
    </slice>
    <from sec="1054876094" usec="0"/>
    <to sec="1054876124" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_948{
style=filled;
color=gray75;
4153[label="219.105.129.248;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4757[label="219.105.129.248;1pkt 1fpkt", shape=invtriangle, color=brown];
stat948[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.105.129.248:80, 175.84.52.208:1685}[50%]&lt;BR/&gt;{219.105.129.248:80, 175.84.52.208:1686}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1686: (33.3333%)&lt;BR/&gt; 1685: (16.6667%)&gt;];
}
4153--4757[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="175.84.52.208" dst_port="1686" src_ip="219.105.129.248" src_port="80"/>
      <filter dst_ip="175.84.52.208" dst_port="1685" src_ip="219.105.129.248" src_port="80"/>
    </slice>
    <from sec="1054875907" usec="0"/>
    <to sec="1054875930" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.678114,1.68342,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.145.114.251"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.678114,1.68342,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="99.99.114.252"/>
    </slice>
    <from sec="1054876053" usec="0"/>
    <to sec="1054876245" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_951{
style=filled;
color=gray75;
4176[label="89.174.84.254;47pkt 47fpkt", shape=pentagon, color=darkviolet];
4762[label="89.174.84.254;47pkt 47fpkt", shape=invtriangle, color=brown];
stat951[shape=component, label=&lt;Rules:&lt;BR/&gt;{89.174.84.254:13364, 89.174.84.254:*}[89.3617%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13364: (44.6809%)&lt;BR/&gt; 0: (8.51064%)&lt;BR/&gt; 13447: (2.12766%)&lt;BR/&gt; 63366: (1.06383%)&lt;BR/&gt; 63041: (1.06383%)&gt;];
}
4176--4762[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_ip="89.174.84.254" src_ip="89.174.84.254" src_port="13364"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054876499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642685,1.62074,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_952{
style=filled;
color=gray75;
4184[label="208.54.240.255;130pkt 130fpkt", shape=pentagon, color=darkviolet];
4765[label="208.54.240.255;130pkt 130fpkt", shape=invtriangle, color=brown];
stat952[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.54.240.255:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4184--4765[label="1;130pkt 130fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.54.240.255" src_port="1026"/>
    </slice>
    <from sec="1054875928" usec="0"/>
    <to sec="1054875955" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913662,1.73979,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="52.9.47.34"/>
    </slice>
    <from sec="1054875602" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913662,1.73979,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="199.169.68.40"/>
    </slice>
    <from sec="1054875602" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913662,1.73979,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="36.8.105.44"/>
    </slice>
    <from sec="1054875603" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.571638,1.61542,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_956{
style=filled;
color=gray75;
1890[label="129.24.214.8;d;27pkt 27fpkt", shape=diamond, color=yellow];
3158[label="53.24.176.67;7pkt 7fpkt", shape=pentagon, color=darkviolet];
stat956[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 129.24.214.8:25}[48.4848%]&lt;BR/&gt;{*:25, 129.24.214.8:*}[24.2424%]&lt;BR/&gt;{53.24.176.67:*, *:25}[21.2121%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (45.5882%)&lt;BR/&gt; 53: (4.41176%)&lt;BR/&gt; 4206: (2.94118%)&lt;BR/&gt; 1421: (2.94118%)&lt;BR/&gt; 51932: (1.47059%)&gt;];
}
1890--3018[label="0.0416667;1pkt 1fpkt"];
1890--3158[label="0.142857;1pkt 1fpkt"];
1890--3997[label="0.1;1pkt 1fpkt"];
1890--4154[label="0.0625;1pkt 1fpkt"];
1890--4309[label="0.0416667;1pkt 1fpkt"];
1890--4697[label="0.1;1pkt 1fpkt"];
1890--4811[label="0.0416667;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="53.24.176.67"/>
      <filter dst_ip="129.24.214.8" src_port="25"/>
      <filter dst_ip="129.24.214.8" dst_port="25"/>
    </slice>
    <from sec="1054875631" usec="0"/>
    <to sec="1054876428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.6112,1.6783,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_957{
style=filled;
color=gray75;
1454[label="192.77.37.33;s;190pkt 190fpkt", shape=diamond, color=yellow];
stat957[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.77.37.33:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1046: (1.57895%)&lt;BR/&gt; 1071: (1.05263%)&lt;BR/&gt; 1056: (1.05263%)&lt;BR/&gt; 2482: (0.526316%)&gt;];
}
1454--1516[label="0.2;4pkt 4fpkt"];
1454--1593[label="0.049505;5pkt 5fpkt"];
1454--1973[label="0.0157895;3pkt 3fpkt"];
1454--1988[label="0.0105263;2pkt 2fpkt"];
1454--2056[label="0.0176471;3pkt 3fpkt"];
1454--2090[label="0.0294118;1pkt 1fpkt"];
1454--2094[label="0.0075188;1pkt 1fpkt"];
1454--2120[label="0.0157895;3pkt 3fpkt"];
1454--2124[label="0.0105263;2pkt 2fpkt"];
1454--2128[label="0.0588235;4pkt 4fpkt"];
1454--2142[label="0.0847458;5pkt 5fpkt"];
1454--2281[label="1;173pkt 173fpkt"];
1454--2288[label="0.0111111;1pkt 1fpkt"];
1454--2315[label="0.00526316;1pkt 1fpkt"];
1454--2347[label="0.0105263;2pkt 2fpkt"];
1454--2358[label="0.056338;4pkt 4fpkt"];
1454--2492[label="0.1;19pkt 19fpkt"];
1454--2611[label="0.00526316;1pkt 1fpkt"];
1454--2616[label="0.00526316;1pkt 1fpkt"];
1454--2669[label="0.0157895;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="192.77.37.33" src_port="80"/>
    </slice>
    <from sec="1054875603" usec="0"/>
    <to sec="1054876426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887684,1.67921,503,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_958{
style=filled;
color=gray75;
3102[label="219.105.147.57;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4826[label="219.105.147.57;4pkt 4fpkt", shape=invhouse, color=bisque];
stat958[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.105.147.57:80, 199.98.136.51:1939}[25%]&lt;BR/&gt;{219.105.147.57:80, 199.98.136.51:1942}[25%]&lt;BR/&gt;{219.105.147.57:80, 199.98.136.51:1943}[25%]&lt;BR/&gt;{219.105.147.57:80, 199.98.136.51:1946}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1942: (20%)&lt;BR/&gt; 1946: (10%)&lt;BR/&gt; 1943: (10%)&lt;BR/&gt; 1939: (10%)&gt;];
}
3102--4826[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.98.136.51" dst_port="1946" src_ip="219.105.147.57" src_port="80"/>
      <filter dst_ip="199.98.136.51" dst_port="1943" src_ip="219.105.147.57" src_port="80"/>
      <filter dst_ip="199.98.136.51" dst_port="1942" src_ip="219.105.147.57" src_port="80"/>
      <filter dst_ip="199.98.136.51" dst_port="1939" src_ip="219.105.147.57" src_port="80"/>
    </slice>
    <from sec="1054876491" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913662,1.73979,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.137.208.103"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054876127" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913662,1.73979,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="36.3.248.113"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913662,1.73979,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="139.208.67.121"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913662,1.73979,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.138.186.123"/>
    </slice>
    <from sec="1054876500" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913662,1.73979,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="199.136.41.131"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054876097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913662,1.73979,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="99.111.108.135"/>
    </slice>
    <from sec="1054876500" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913662,1.73979,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.162.80.170"/>
    </slice>
    <from sec="1054875600" usec="0"/>
    <to sec="1054876501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913662,1.73979,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="48.232.125.173"/>
    </slice>
    <from sec="1054875601" usec="0"/>
    <to sec="1054876500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913662,1.73979,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="52.4.41.184"/>
    </slice>
    <from sec="1054875604" usec="0"/>
    <to sec="1054876498" usec="0"/>
  </anomaly>

</admd:annotation>
