<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="0.599826,1.65003,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="tcp" src_ip="202.45.195.86" src_port="1031"/>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="udp" src_ip="202.45.195.86" src_port="1031"/>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="tcp" src_ip="202.45.195.86" src_port="80"/>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="udp" src_ip="202.45.195.86" src_port="80"/>
      <from sec="1060319322" usec="0"/>
      <to sec="1060319352" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="tcp" src_ip="16.70.203.86" src_port="1031"/>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="udp" src_ip="16.70.203.86" src_port="1031"/>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="tcp" src_ip="16.70.203.86" src_port="80"/>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="udp" src_ip="16.70.203.86" src_port="80"/>
      <from sec="1060319322" usec="0"/>
      <to sec="1060319353" usec="0"/>
    </slice>
    <from sec="1060319322" usec="0"/>
    <to sec="1060319353" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="148.238.59.45" dst_port="80" proto="tcp" src_ip="16.83.34.92" src_port="3043"/>
      <from sec="1060319381" usec="0"/>
      <to sec="1060319384" usec="0"/>
    </slice>
    <from sec="1060319381" usec="0"/>
    <to sec="1060319389" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="148.238.49.210" dst_port="25" proto="tcp" src_ip="216.211.164.215" src_port="27076"/>
      <from sec="1060319089" usec="0"/>
      <to sec="1060319097" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="148.238.49.210" dst_port="25" proto="tcp" src_ip="221.41.180.212" src_port="27076"/>
      <from sec="1060319089" usec="0"/>
      <to sec="1060319097" usec="0"/>
    </slice>
    <from sec="1060319089" usec="0"/>
    <to sec="1060319097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,504,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="148.238.26.160" dst_port="4153" proto="tcp" src_ip="215.42.249.51" src_port="443"/>
      <filter dst_ip="148.238.26.160" dst_port="4153" proto="tcp" src_ip="215.42.249.51" src_port="80"/>
      <from sec="1060319091" usec="0"/>
      <to sec="1060319638" usec="0"/>
    </slice>
    <from sec="1060319091" usec="0"/>
    <to sec="1060319638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="201.201.34.197" dst_port="137" proto="tcp" src_ip="19.122.98.240" src_port="80"/>
      <filter dst_ip="201.201.34.197" dst_port="137" proto="udp" src_ip="19.122.98.240" src_port="80"/>
      <from sec="1060319453" usec="0"/>
      <to sec="1060319461" usec="0"/>
    </slice>
    <from sec="1060319453" usec="0"/>
    <to sec="1060319462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="82.177.4.0" src_port="64544"/>
      <from sec="1060318966" usec="0"/>
      <to sec="1060318982" usec="0"/>
    </slice>
    <from sec="1060318966" usec="0"/>
    <to sec="1060318982" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="215.30.33.2" src_port="1025"/>
      <from sec="1060319231" usec="0"/>
      <to sec="1060319238" usec="0"/>
    </slice>
    <from sec="1060319231" usec="0"/>
    <to sec="1060319238" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="216.89.160.2" src_port="1029"/>
      <from sec="1060319185" usec="0"/>
      <to sec="1060319215" usec="0"/>
    </slice>
    <from sec="1060319185" usec="0"/>
    <to sec="1060319217" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="82.135.67.8" src_port="1025"/>
      <filter dst_port="137" proto="udp" src_ip="82.135.67.8" src_port="1025"/>
      <from sec="1060319632" usec="0"/>
      <to sec="1060319641" usec="0"/>
    </slice>
    <from sec="1060319632" usec="0"/>
    <to sec="1060319641" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="9.18.0.10" src_port="1027"/>
      <filter dst_port="137" proto="udp" src_ip="9.18.0.10" src_port="1027"/>
      <from sec="1060319445" usec="0"/>
      <to sec="1060319454" usec="0"/>
    </slice>
    <from sec="1060319445" usec="0"/>
    <to sec="1060319454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="200.50.139.184" dst_port="137" proto="tcp" src_ip="82.135.141.10" src_port="61019"/>
      <filter dst_ip="200.50.139.184" dst_port="137" proto="udp" src_ip="82.135.141.10" src_port="61019"/>
      <filter dst_ip="200.50.139.184" dst_port="137" proto="tcp" src_ip="82.135.141.10" src_port="80"/>
      <filter dst_ip="200.50.139.184" dst_port="137" proto="udp" src_ip="82.135.141.10" src_port="80"/>
      <from sec="1060319484" usec="0"/>
      <to sec="1060319522" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="200.50.139.184" dst_port="137" proto="tcp" src_ip="214.105.173.10" src_port="61019"/>
      <filter dst_ip="200.50.139.184" dst_port="137" proto="udp" src_ip="214.105.173.10" src_port="61019"/>
      <filter dst_ip="200.50.139.184" dst_port="137" proto="tcp" src_ip="214.105.173.10" src_port="80"/>
      <filter dst_ip="200.50.139.184" dst_port="137" proto="udp" src_ip="214.105.173.10" src_port="80"/>
      <from sec="1060319490" usec="0"/>
      <to sec="1060319493" usec="0"/>
    </slice>
    <from sec="1060319484" usec="0"/>
    <to sec="1060319522" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="216.48.213.14" src_port="1025"/>
      <from sec="1060319261" usec="0"/>
      <to sec="1060319270" usec="0"/>
    </slice>
    <from sec="1060319261" usec="0"/>
    <to sec="1060319270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="201.201.34.47" dst_port="137" proto="tcp" src_ip="8.197.40.16" src_port="29828"/>
      <filter dst_ip="201.201.34.47" dst_port="137" proto="udp" src_ip="8.197.40.16" src_port="29828"/>
      <filter dst_ip="201.201.34.47" dst_port="80" proto="tcp" src_ip="8.197.40.16" src_port="29828"/>
      <filter dst_ip="201.201.34.47" dst_port="80" proto="udp" src_ip="8.197.40.16" src_port="29828"/>
      <from sec="1060319650" usec="0"/>
      <to sec="1060319667" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="201.201.34.47" dst_port="137" proto="tcp" src_ip="219.148.68.16" src_port="29828"/>
      <filter dst_ip="201.201.34.47" dst_port="137" proto="udp" src_ip="219.148.68.16" src_port="29828"/>
      <filter dst_ip="201.201.34.47" dst_port="80" proto="tcp" src_ip="219.148.68.16" src_port="29828"/>
      <filter dst_ip="201.201.34.47" dst_port="80" proto="udp" src_ip="219.148.68.16" src_port="29828"/>
      <from sec="1060319650" usec="0"/>
      <to sec="1060319659" usec="0"/>
    </slice>
    <from sec="1060319650" usec="0"/>
    <to sec="1060319667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="147.164.158.249" dst_port="137" proto="tcp" src_ip="82.241.180.16" src_port="64957"/>
      <filter dst_ip="147.164.158.249" dst_port="137" proto="udp" src_ip="82.241.180.16" src_port="64957"/>
      <filter dst_ip="147.164.158.249" dst_port="80" proto="tcp" src_ip="82.241.180.16" src_port="64957"/>
      <filter dst_ip="147.164.158.249" dst_port="80" proto="udp" src_ip="82.241.180.16" src_port="64957"/>
      <from sec="1060318878" usec="0"/>
      <to sec="1060318899" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="147.164.158.249" dst_port="137" proto="tcp" src_ip="219.148.68.16" src_port="64957"/>
      <filter dst_ip="147.164.158.249" dst_port="137" proto="udp" src_ip="219.148.68.16" src_port="64957"/>
      <filter dst_ip="147.164.158.249" dst_port="80" proto="tcp" src_ip="219.148.68.16" src_port="64957"/>
      <filter dst_ip="147.164.158.249" dst_port="80" proto="udp" src_ip="219.148.68.16" src_port="64957"/>
      <from sec="1060318883" usec="0"/>
      <to sec="1060318889" usec="0"/>
    </slice>
    <from sec="1060318878" usec="0"/>
    <to sec="1060318899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="216.161.206.18" src_port="65124"/>
      <from sec="1060319008" usec="0"/>
      <to sec="1060319016" usec="0"/>
    </slice>
    <from sec="1060319008" usec="0"/>
    <to sec="1060319016" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="82.230.16.48" dst_port="137" proto="tcp" src_ip="218.87.195.21" src_port="1028"/>
      <filter dst_ip="82.230.16.48" dst_port="137" proto="udp" src_ip="218.87.195.21" src_port="1028"/>
      <from sec="1060319141" usec="0"/>
      <to sec="1060319147" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="82.230.16.48" dst_port="137" proto="tcp" src_ip="139.112.231.21" src_port="1028"/>
      <filter dst_ip="82.230.16.48" dst_port="137" proto="udp" src_ip="139.112.231.21" src_port="1028"/>
      <from sec="1060319141" usec="0"/>
      <to sec="1060319148" usec="0"/>
    </slice>
    <from sec="1060319141" usec="0"/>
    <to sec="1060319148" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="82.232.29.22" src_port="1026"/>
      <filter dst_port="137" proto="udp" src_ip="82.232.29.22" src_port="1026"/>
      <filter dst_port="1434" proto="tcp" src_ip="82.232.29.22" src_port="1026"/>
      <filter dst_port="1434" proto="udp" src_ip="82.232.29.22" src_port="1026"/>
      <filter dst_port="137" proto="tcp" src_ip="82.232.29.22" src_port="1028"/>
      <filter dst_port="137" proto="udp" src_ip="82.232.29.22" src_port="1028"/>
      <filter dst_port="1434" proto="tcp" src_ip="82.232.29.22" src_port="1028"/>
      <filter dst_port="1434" proto="udp" src_ip="82.232.29.22" src_port="1028"/>
      <filter dst_port="137" proto="tcp" src_ip="82.232.29.22" src_port="1030"/>
      <filter dst_port="137" proto="udp" src_ip="82.232.29.22" src_port="1030"/>
      <filter dst_port="1434" proto="tcp" src_ip="82.232.29.22" src_port="1030"/>
      <filter dst_port="1434" proto="udp" src_ip="82.232.29.22" src_port="1030"/>
      <from sec="1060318895" usec="0"/>
      <to sec="1060318920" usec="0"/>
    </slice>
    <from sec="1060318895" usec="0"/>
    <to sec="1060318920" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="172.235.0.43" dst_port="137" proto="tcp" src_ip="82.132.48.29" src_port="1027"/>
      <filter dst_ip="172.235.0.43" dst_port="137" proto="udp" src_ip="82.132.48.29" src_port="1027"/>
      <filter dst_ip="172.235.0.43" dst_port="137" proto="tcp" src_ip="82.132.48.29" src_port="53"/>
      <filter dst_ip="172.235.0.43" dst_port="137" proto="udp" src_ip="82.132.48.29" src_port="53"/>
      <filter dst_ip="201.17.212.26" dst_port="137" proto="tcp" src_ip="82.132.48.29" src_port="1027"/>
      <filter dst_ip="201.17.212.26" dst_port="137" proto="udp" src_ip="82.132.48.29" src_port="1027"/>
      <filter dst_ip="201.17.212.26" dst_port="137" proto="tcp" src_ip="82.132.48.29" src_port="53"/>
      <filter dst_ip="201.17.212.26" dst_port="137" proto="udp" src_ip="82.132.48.29" src_port="53"/>
      <from sec="1060319253" usec="0"/>
      <to sec="1060319260" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="172.235.0.43" dst_port="137" proto="tcp" src_ip="192.229.224.29" src_port="1027"/>
      <filter dst_ip="172.235.0.43" dst_port="137" proto="udp" src_ip="192.229.224.29" src_port="1027"/>
      <filter dst_ip="172.235.0.43" dst_port="137" proto="tcp" src_ip="192.229.224.29" src_port="53"/>
      <filter dst_ip="172.235.0.43" dst_port="137" proto="udp" src_ip="192.229.224.29" src_port="53"/>
      <filter dst_ip="201.17.212.26" dst_port="137" proto="tcp" src_ip="192.229.224.29" src_port="1027"/>
      <filter dst_ip="201.17.212.26" dst_port="137" proto="udp" src_ip="192.229.224.29" src_port="1027"/>
      <filter dst_ip="201.17.212.26" dst_port="137" proto="tcp" src_ip="192.229.224.29" src_port="53"/>
      <filter dst_ip="201.17.212.26" dst_port="137" proto="udp" src_ip="192.229.224.29" src_port="53"/>
      <from sec="1060319254" usec="0"/>
      <to sec="1060319262" usec="0"/>
    </slice>
    <from sec="1060319253" usec="0"/>
    <to sec="1060319262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="217.180.250.37" src_port="1031"/>
      <from sec="1060319359" usec="0"/>
      <to sec="1060319380" usec="0"/>
    </slice>
    <from sec="1060319359" usec="0"/>
    <to sec="1060319380" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="201.17.248.141" dst_port="137" proto="tcp" src_ip="17.48.2.38" src_port="1026"/>
      <filter dst_ip="201.17.248.141" dst_port="137" proto="udp" src_ip="17.48.2.38" src_port="1026"/>
      <filter dst_ip="201.17.248.141" dst_port="53" proto="tcp" src_ip="17.48.2.38" src_port="1026"/>
      <filter dst_ip="201.17.248.141" dst_port="53" proto="udp" src_ip="17.48.2.38" src_port="1026"/>
      <filter dst_ip="201.17.248.141" dst_port="137" proto="tcp" src_ip="17.48.2.38" src_port="80"/>
      <filter dst_ip="201.17.248.141" dst_port="137" proto="udp" src_ip="17.48.2.38" src_port="80"/>
      <filter dst_ip="201.17.248.141" dst_port="53" proto="tcp" src_ip="17.48.2.38" src_port="80"/>
      <filter dst_ip="201.17.248.141" dst_port="53" proto="udp" src_ip="17.48.2.38" src_port="80"/>
      <filter dst_ip="201.17.248.141" dst_port="137" proto="tcp" src_ip="17.48.2.38" src_port="53"/>
      <filter dst_ip="201.17.248.141" dst_port="137" proto="udp" src_ip="17.48.2.38" src_port="53"/>
      <filter dst_ip="201.17.248.141" dst_port="53" proto="tcp" src_ip="17.48.2.38" src_port="53"/>
      <filter dst_ip="201.17.248.141" dst_port="53" proto="udp" src_ip="17.48.2.38" src_port="53"/>
      <from sec="1060319445" usec="0"/>
      <to sec="1060319459" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="201.17.248.141" dst_port="137" proto="tcp" src_ip="18.209.102.38" src_port="1026"/>
      <filter dst_ip="201.17.248.141" dst_port="137" proto="udp" src_ip="18.209.102.38" src_port="1026"/>
      <filter dst_ip="201.17.248.141" dst_port="53" proto="tcp" src_ip="18.209.102.38" src_port="1026"/>
      <filter dst_ip="201.17.248.141" dst_port="53" proto="udp" src_ip="18.209.102.38" src_port="1026"/>
      <filter dst_ip="201.17.248.141" dst_port="137" proto="tcp" src_ip="18.209.102.38" src_port="80"/>
      <filter dst_ip="201.17.248.141" dst_port="137" proto="udp" src_ip="18.209.102.38" src_port="80"/>
      <filter dst_ip="201.17.248.141" dst_port="53" proto="tcp" src_ip="18.209.102.38" src_port="80"/>
      <filter dst_ip="201.17.248.141" dst_port="53" proto="udp" src_ip="18.209.102.38" src_port="80"/>
      <filter dst_ip="201.17.248.141" dst_port="137" proto="tcp" src_ip="18.209.102.38" src_port="53"/>
      <filter dst_ip="201.17.248.141" dst_port="137" proto="udp" src_ip="18.209.102.38" src_port="53"/>
      <filter dst_ip="201.17.248.141" dst_port="53" proto="tcp" src_ip="18.209.102.38" src_port="53"/>
      <filter dst_ip="201.17.248.141" dst_port="53" proto="udp" src_ip="18.209.102.38" src_port="53"/>
      <from sec="1060319446" usec="0"/>
      <to sec="1060319452" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="201.17.248.141" dst_port="137" proto="tcp" src_ip="212.52.146.38" src_port="1026"/>
      <filter dst_ip="201.17.248.141" dst_port="137" proto="udp" src_ip="212.52.146.38" src_port="1026"/>
      <filter dst_ip="201.17.248.141" dst_port="53" proto="tcp" src_ip="212.52.146.38" src_port="1026"/>
      <filter dst_ip="201.17.248.141" dst_port="53" proto="udp" src_ip="212.52.146.38" src_port="1026"/>
      <filter dst_ip="201.17.248.141" dst_port="137" proto="tcp" src_ip="212.52.146.38" src_port="80"/>
      <filter dst_ip="201.17.248.141" dst_port="137" proto="udp" src_ip="212.52.146.38" src_port="80"/>
      <filter dst_ip="201.17.248.141" dst_port="53" proto="tcp" src_ip="212.52.146.38" src_port="80"/>
      <filter dst_ip="201.17.248.141" dst_port="53" proto="udp" src_ip="212.52.146.38" src_port="80"/>
      <filter dst_ip="201.17.248.141" dst_port="137" proto="tcp" src_ip="212.52.146.38" src_port="53"/>
      <filter dst_ip="201.17.248.141" dst_port="137" proto="udp" src_ip="212.52.146.38" src_port="53"/>
      <filter dst_ip="201.17.248.141" dst_port="53" proto="tcp" src_ip="212.52.146.38" src_port="53"/>
      <filter dst_ip="201.17.248.141" dst_port="53" proto="udp" src_ip="212.52.146.38" src_port="53"/>
      <from sec="1060319453" usec="0"/>
      <to sec="1060319462" usec="0"/>
    </slice>
    <from sec="1060319445" usec="0"/>
    <to sec="1060319462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="168.73.150.40" src_port="1030"/>
      <filter dst_port="137" proto="udp" src_ip="168.73.150.40" src_port="1030"/>
      <filter dst_port="1434" proto="tcp" src_ip="168.73.150.40" src_port="1030"/>
      <filter dst_port="1434" proto="udp" src_ip="168.73.150.40" src_port="1030"/>
      <from sec="1060319633" usec="0"/>
      <to sec="1060319668" usec="0"/>
    </slice>
    <from sec="1060319633" usec="0"/>
    <to sec="1060319669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="216.64.19.41" src_port="1027"/>
      <from sec="1060319256" usec="0"/>
      <to sec="1060319262" usec="0"/>
    </slice>
    <from sec="1060319256" usec="0"/>
    <to sec="1060319262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="16.116.6.44" src_port="1025"/>
      <from sec="1060319284" usec="0"/>
      <to sec="1060319292" usec="0"/>
    </slice>
    <from sec="1060319284" usec="0"/>
    <to sec="1060319292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="82.175.67.45" src_port="1029"/>
      <from sec="1060319329" usec="0"/>
      <to sec="1060319345" usec="0"/>
    </slice>
    <from sec="1060319329" usec="0"/>
    <to sec="1060319345" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="216.89.43.47" src_port="1027"/>
      <from sec="1060319461" usec="0"/>
      <to sec="1060319469" usec="0"/>
    </slice>
    <from sec="1060319461" usec="0"/>
    <to sec="1060319469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="216.84.64.47" src_port="1025"/>
      <from sec="1060319624" usec="0"/>
      <to sec="1060319640" usec="0"/>
    </slice>
    <from sec="1060319624" usec="0"/>
    <to sec="1060319640" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="200.147.245.48" src_port="1026"/>
      <from sec="1060319437" usec="0"/>
      <to sec="1060319454" usec="0"/>
    </slice>
    <from sec="1060319437" usec="0"/>
    <to sec="1060319454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="tcp" src_ip="202.255.34.49" src_port="1025"/>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="udp" src_ip="202.255.34.49" src_port="1025"/>
      <filter dst_ip="201.17.250.129" dst_port="1434" proto="tcp" src_ip="202.255.34.49" src_port="1025"/>
      <filter dst_ip="201.17.250.129" dst_port="1434" proto="udp" src_ip="202.255.34.49" src_port="1025"/>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="tcp" src_ip="202.255.34.49" src_port="4573"/>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="udp" src_ip="202.255.34.49" src_port="4573"/>
      <filter dst_ip="201.17.250.129" dst_port="1434" proto="tcp" src_ip="202.255.34.49" src_port="4573"/>
      <filter dst_ip="201.17.250.129" dst_port="1434" proto="udp" src_ip="202.255.34.49" src_port="4573"/>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="tcp" src_ip="202.255.34.49" src_port="80"/>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="udp" src_ip="202.255.34.49" src_port="80"/>
      <filter dst_ip="201.17.250.129" dst_port="1434" proto="tcp" src_ip="202.255.34.49" src_port="80"/>
      <filter dst_ip="201.17.250.129" dst_port="1434" proto="udp" src_ip="202.255.34.49" src_port="80"/>
      <from sec="1060319389" usec="0"/>
      <to sec="1060319397" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="tcp" src_ip="216.93.106.49" src_port="1025"/>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="udp" src_ip="216.93.106.49" src_port="1025"/>
      <filter dst_ip="201.17.250.129" dst_port="1434" proto="tcp" src_ip="216.93.106.49" src_port="1025"/>
      <filter dst_ip="201.17.250.129" dst_port="1434" proto="udp" src_ip="216.93.106.49" src_port="1025"/>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="tcp" src_ip="216.93.106.49" src_port="4573"/>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="udp" src_ip="216.93.106.49" src_port="4573"/>
      <filter dst_ip="201.17.250.129" dst_port="1434" proto="tcp" src_ip="216.93.106.49" src_port="4573"/>
      <filter dst_ip="201.17.250.129" dst_port="1434" proto="udp" src_ip="216.93.106.49" src_port="4573"/>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="tcp" src_ip="216.93.106.49" src_port="80"/>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="udp" src_ip="216.93.106.49" src_port="80"/>
      <filter dst_ip="201.17.250.129" dst_port="1434" proto="tcp" src_ip="216.93.106.49" src_port="80"/>
      <filter dst_ip="201.17.250.129" dst_port="1434" proto="udp" src_ip="216.93.106.49" src_port="80"/>
      <from sec="1060319390" usec="0"/>
      <to sec="1060319397" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="tcp" src_ip="212.108.42.49" src_port="1025"/>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="udp" src_ip="212.108.42.49" src_port="1025"/>
      <filter dst_ip="201.17.250.129" dst_port="1434" proto="tcp" src_ip="212.108.42.49" src_port="1025"/>
      <filter dst_ip="201.17.250.129" dst_port="1434" proto="udp" src_ip="212.108.42.49" src_port="1025"/>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="tcp" src_ip="212.108.42.49" src_port="4573"/>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="udp" src_ip="212.108.42.49" src_port="4573"/>
      <filter dst_ip="201.17.250.129" dst_port="1434" proto="tcp" src_ip="212.108.42.49" src_port="4573"/>
      <filter dst_ip="201.17.250.129" dst_port="1434" proto="udp" src_ip="212.108.42.49" src_port="4573"/>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="tcp" src_ip="212.108.42.49" src_port="80"/>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="udp" src_ip="212.108.42.49" src_port="80"/>
      <filter dst_ip="201.17.250.129" dst_port="1434" proto="tcp" src_ip="212.108.42.49" src_port="80"/>
      <filter dst_ip="201.17.250.129" dst_port="1434" proto="udp" src_ip="212.108.42.49" src_port="80"/>
      <from sec="1060319394" usec="0"/>
      <to sec="1060319397" usec="0"/>
    </slice>
    <from sec="1060319389" usec="0"/>
    <to sec="1060319397" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="19.17.41.49" src_port="1026"/>
      <filter dst_port="137" proto="udp" src_ip="19.17.41.49" src_port="1026"/>
      <from sec="1060319218" usec="0"/>
      <to sec="1060319239" usec="0"/>
    </slice>
    <from sec="1060319218" usec="0"/>
    <to sec="1060319239" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="217.180.59.50" src_port="1028"/>
      <filter dst_port="137" proto="udp" src_ip="217.180.59.50" src_port="1028"/>
      <from sec="1060319096" usec="0"/>
      <to sec="1060319125" usec="0"/>
    </slice>
    <from sec="1060319096" usec="0"/>
    <to sec="1060319126" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="202.44.101.54" src_port="1025"/>
      <filter dst_port="137" proto="udp" src_ip="202.44.101.54" src_port="1025"/>
      <filter dst_port="80" proto="tcp" src_ip="202.44.101.54" src_port="1025"/>
      <filter dst_port="80" proto="udp" src_ip="202.44.101.54" src_port="1025"/>
      <from sec="1060319515" usec="0"/>
      <to sec="1060319536" usec="0"/>
    </slice>
    <from sec="1060319515" usec="0"/>
    <to sec="1060319539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="216.34.14.65" src_port="65200"/>
      <from sec="1060319248" usec="0"/>
      <to sec="1060319254" usec="0"/>
    </slice>
    <from sec="1060319246" usec="0"/>
    <to sec="1060319254" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="194.119.116.76" src_port="1030"/>
      <from sec="1060319445" usec="0"/>
      <to sec="1060319454" usec="0"/>
    </slice>
    <from sec="1060319445" usec="0"/>
    <to sec="1060319454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="9.211.171.76" src_port="1027"/>
      <filter dst_port="137" proto="udp" src_ip="9.211.171.76" src_port="1027"/>
      <filter dst_port="445" proto="tcp" src_ip="9.211.171.76" src_port="1027"/>
      <filter dst_port="445" proto="udp" src_ip="9.211.171.76" src_port="1027"/>
      <filter dst_port="139" proto="tcp" src_ip="9.211.171.76" src_port="1027"/>
      <filter dst_port="139" proto="udp" src_ip="9.211.171.76" src_port="1027"/>
      <from sec="1060319366" usec="0"/>
      <to sec="1060319397" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="216.32.87.76" src_port="1027"/>
      <filter dst_port="137" proto="udp" src_ip="216.32.87.76" src_port="1027"/>
      <filter dst_port="445" proto="tcp" src_ip="216.32.87.76" src_port="1027"/>
      <filter dst_port="445" proto="udp" src_ip="216.32.87.76" src_port="1027"/>
      <filter dst_port="139" proto="tcp" src_ip="216.32.87.76" src_port="1027"/>
      <filter dst_port="139" proto="udp" src_ip="216.32.87.76" src_port="1027"/>
      <from sec="1060319367" usec="0"/>
      <to sec="1060319397" usec="0"/>
    </slice>
    <from sec="1060319366" usec="0"/>
    <to sec="1060319397" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="139" proto="tcp" src_ip="215.149.236.80" src_port="80"/>
      <from sec="1060319667" usec="0"/>
      <to sec="1060319698" usec="0"/>
    </slice>
    <from sec="1060319667" usec="0"/>
    <to sec="1060319698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="tcp" src_ip="82.241.111.89" src_port="1025"/>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="udp" src_ip="82.241.111.89" src_port="1025"/>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="tcp" src_ip="82.241.111.89" src_port="80"/>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="udp" src_ip="82.241.111.89" src_port="80"/>
      <from sec="1060319563" usec="0"/>
      <to sec="1060319571" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="tcp" src_ip="16.70.203.89" src_port="1025"/>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="udp" src_ip="16.70.203.89" src_port="1025"/>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="tcp" src_ip="16.70.203.89" src_port="80"/>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="udp" src_ip="16.70.203.89" src_port="80"/>
      <from sec="1060319566" usec="0"/>
      <to sec="1060319571" usec="0"/>
    </slice>
    <from sec="1060319563" usec="0"/>
    <to sec="1060319571" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="17.20.204.91" src_port="1026"/>
      <filter dst_port="137" proto="udp" src_ip="17.20.204.91" src_port="1026"/>
      <filter dst_port="1434" proto="tcp" src_ip="17.20.204.91" src_port="1026"/>
      <filter dst_port="1434" proto="udp" src_ip="17.20.204.91" src_port="1026"/>
      <filter dst_port="139" proto="tcp" src_ip="17.20.204.91" src_port="1026"/>
      <filter dst_port="139" proto="udp" src_ip="17.20.204.91" src_port="1026"/>
      <filter dst_port="445" proto="tcp" src_ip="17.20.204.91" src_port="1026"/>
      <filter dst_port="445" proto="udp" src_ip="17.20.204.91" src_port="1026"/>
      <filter dst_port="137" proto="tcp" src_ip="17.20.204.91" src_port="1028"/>
      <filter dst_port="137" proto="udp" src_ip="17.20.204.91" src_port="1028"/>
      <filter dst_port="1434" proto="tcp" src_ip="17.20.204.91" src_port="1028"/>
      <filter dst_port="1434" proto="udp" src_ip="17.20.204.91" src_port="1028"/>
      <filter dst_port="139" proto="tcp" src_ip="17.20.204.91" src_port="1028"/>
      <filter dst_port="139" proto="udp" src_ip="17.20.204.91" src_port="1028"/>
      <filter dst_port="445" proto="tcp" src_ip="17.20.204.91" src_port="1028"/>
      <filter dst_port="445" proto="udp" src_ip="17.20.204.91" src_port="1028"/>
      <filter dst_port="137" proto="tcp" src_ip="17.20.204.91" src_port="1029"/>
      <filter dst_port="137" proto="udp" src_ip="17.20.204.91" src_port="1029"/>
      <filter dst_port="1434" proto="tcp" src_ip="17.20.204.91" src_port="1029"/>
      <filter dst_port="1434" proto="udp" src_ip="17.20.204.91" src_port="1029"/>
      <filter dst_port="139" proto="tcp" src_ip="17.20.204.91" src_port="1029"/>
      <filter dst_port="139" proto="udp" src_ip="17.20.204.91" src_port="1029"/>
      <filter dst_port="445" proto="tcp" src_ip="17.20.204.91" src_port="1029"/>
      <filter dst_port="445" proto="udp" src_ip="17.20.204.91" src_port="1029"/>
      <from sec="1060318904" usec="0"/>
      <to sec="1060318920" usec="0"/>
    </slice>
    <from sec="1060318903" usec="0"/>
    <to sec="1060318920" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="221.37.10.93" src_port="1029"/>
      <from sec="1060319277" usec="0"/>
      <to sec="1060319285" usec="0"/>
    </slice>
    <from sec="1060319277" usec="0"/>
    <to sec="1060319285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="19.119.110.93" src_port="1027"/>
      <from sec="1060319337" usec="0"/>
      <to sec="1060319344" usec="0"/>
    </slice>
    <from sec="1060319337" usec="0"/>
    <to sec="1060319344" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="148.239.211.232" dst_port="137" proto="tcp" src_ip="82.202.124.99" src_port="1029"/>
      <filter dst_ip="148.239.211.232" dst_port="137" proto="udp" src_ip="82.202.124.99" src_port="1029"/>
      <filter dst_ip="148.239.211.232" dst_port="2402" proto="tcp" src_ip="82.202.124.99" src_port="1029"/>
      <filter dst_ip="148.239.211.232" dst_port="2402" proto="udp" src_ip="82.202.124.99" src_port="1029"/>
      <filter dst_ip="148.239.211.232" dst_port="137" proto="tcp" src_ip="82.202.124.99" src_port="5664"/>
      <filter dst_ip="148.239.211.232" dst_port="137" proto="udp" src_ip="82.202.124.99" src_port="5664"/>
      <filter dst_ip="148.239.211.232" dst_port="2402" proto="tcp" src_ip="82.202.124.99" src_port="5664"/>
      <filter dst_ip="148.239.211.232" dst_port="2402" proto="udp" src_ip="82.202.124.99" src_port="5664"/>
      <from sec="1060319061" usec="0"/>
      <to sec="1060319068" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="148.239.211.232" dst_port="137" proto="tcp" src_ip="8.192.96.99" src_port="1029"/>
      <filter dst_ip="148.239.211.232" dst_port="137" proto="udp" src_ip="8.192.96.99" src_port="1029"/>
      <filter dst_ip="148.239.211.232" dst_port="2402" proto="tcp" src_ip="8.192.96.99" src_port="1029"/>
      <filter dst_ip="148.239.211.232" dst_port="2402" proto="udp" src_ip="8.192.96.99" src_port="1029"/>
      <filter dst_ip="148.239.211.232" dst_port="137" proto="tcp" src_ip="8.192.96.99" src_port="5664"/>
      <filter dst_ip="148.239.211.232" dst_port="137" proto="udp" src_ip="8.192.96.99" src_port="5664"/>
      <filter dst_ip="148.239.211.232" dst_port="2402" proto="tcp" src_ip="8.192.96.99" src_port="5664"/>
      <filter dst_ip="148.239.211.232" dst_port="2402" proto="udp" src_ip="8.192.96.99" src_port="5664"/>
      <from sec="1060319062" usec="0"/>
      <to sec="1060319067" usec="0"/>
    </slice>
    <from sec="1060319061" usec="0"/>
    <to sec="1060319068" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="19.55.105.104" src_port="32818"/>
      <filter dst_port="53" proto="udp" src_ip="19.55.105.104" src_port="32818"/>
      <from sec="1060318858" usec="0"/>
      <to sec="1060318876" usec="0"/>
    </slice>
    <from sec="1060318858" usec="0"/>
    <to sec="1060318876" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="221.42.10.105" src_port="64866"/>
      <from sec="1060319453" usec="0"/>
      <to sec="1060319462" usec="0"/>
    </slice>
    <from sec="1060319453" usec="0"/>
    <to sec="1060319462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="202.202.39.105" src_port="1032"/>
      <from sec="1060319224" usec="0"/>
      <to sec="1060319247" usec="0"/>
    </slice>
    <from sec="1060319224" usec="0"/>
    <to sec="1060319247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="169.92.157.104" dst_port="137" proto="tcp" src_ip="216.98.81.105" src_port="6168"/>
      <filter dst_ip="169.92.157.104" dst_port="137" proto="udp" src_ip="216.98.81.105" src_port="6168"/>
      <filter dst_ip="169.92.157.104" dst_port="137" proto="tcp" src_ip="216.98.81.105" src_port="6100"/>
      <filter dst_ip="169.92.157.104" dst_port="137" proto="udp" src_ip="216.98.81.105" src_port="6100"/>
      <from sec="1060319461" usec="0"/>
      <to sec="1060319493" usec="0"/>
    </slice>
    <from sec="1060319461" usec="0"/>
    <to sec="1060319493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="217.180.17.108" src_port="1028"/>
      <from sec="1060319299" usec="0"/>
      <to sec="1060319323" usec="0"/>
    </slice>
    <from sec="1060319299" usec="0"/>
    <to sec="1060319323" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="8.207.6.110" src_port="1027"/>
      <from sec="1060319453" usec="0"/>
      <to sec="1060319462" usec="0"/>
    </slice>
    <from sec="1060319453" usec="0"/>
    <to sec="1060319462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="202.44.45.113" src_port="1025"/>
      <filter dst_port="137" proto="udp" src_ip="202.44.45.113" src_port="1025"/>
      <filter dst_port="137" proto="tcp" src_ip="202.44.45.113" src_port="80"/>
      <filter dst_port="137" proto="udp" src_ip="202.44.45.113" src_port="80"/>
      <from sec="1060319177" usec="0"/>
      <to sec="1060319199" usec="0"/>
    </slice>
    <from sec="1060319177" usec="0"/>
    <to sec="1060319199" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="219.186.156.116" src_port="1028"/>
      <filter dst_port="137" proto="udp" src_ip="219.186.156.116" src_port="1028"/>
      <filter dst_port="1434" proto="tcp" src_ip="219.186.156.116" src_port="1028"/>
      <filter dst_port="1434" proto="udp" src_ip="219.186.156.116" src_port="1028"/>
      <filter dst_port="137" proto="tcp" src_ip="219.186.156.116" src_port="1025"/>
      <filter dst_port="137" proto="udp" src_ip="219.186.156.116" src_port="1025"/>
      <filter dst_port="1434" proto="tcp" src_ip="219.186.156.116" src_port="1025"/>
      <filter dst_port="1434" proto="udp" src_ip="219.186.156.116" src_port="1025"/>
      <filter dst_port="137" proto="tcp" src_ip="219.186.156.116" src_port="1026"/>
      <filter dst_port="137" proto="udp" src_ip="219.186.156.116" src_port="1026"/>
      <filter dst_port="1434" proto="tcp" src_ip="219.186.156.116" src_port="1026"/>
      <filter dst_port="1434" proto="udp" src_ip="219.186.156.116" src_port="1026"/>
      <from sec="1060318885" usec="0"/>
      <to sec="1060318895" usec="0"/>
    </slice>
    <from sec="1060318885" usec="0"/>
    <to sec="1060318896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="215.181.195.116" src_port="6496"/>
      <from sec="1060319199" usec="0"/>
      <to sec="1060319211" usec="0"/>
    </slice>
    <from sec="1060319199" usec="0"/>
    <to sec="1060319211" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="82.119.15.119" src_port="1039"/>
      <from sec="1060319300" usec="0"/>
      <to sec="1060319321" usec="0"/>
    </slice>
    <from sec="1060319300" usec="0"/>
    <to sec="1060319321" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="82.125.203.131" src_port="1028"/>
      <from sec="1060318900" usec="0"/>
      <to sec="1060318907" usec="0"/>
    </slice>
    <from sec="1060318900" usec="0"/>
    <to sec="1060318907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="201.82.228.132" src_port="59112"/>
      <from sec="1060319328" usec="0"/>
      <to sec="1060319353" usec="0"/>
    </slice>
    <from sec="1060319328" usec="0"/>
    <to sec="1060319353" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="216.35.37.133" src_port="64939"/>
      <from sec="1060319352" usec="0"/>
      <to sec="1060319360" usec="0"/>
    </slice>
    <from sec="1060319352" usec="0"/>
    <to sec="1060319360" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="201.90.60.136" src_port="1025"/>
      <filter dst_port="137" proto="udp" src_ip="201.90.60.136" src_port="1025"/>
      <filter dst_port="1434" proto="tcp" src_ip="201.90.60.136" src_port="1025"/>
      <filter dst_port="1434" proto="udp" src_ip="201.90.60.136" src_port="1025"/>
      <filter dst_port="137" proto="tcp" src_ip="201.90.60.136" src_port="1026"/>
      <filter dst_port="137" proto="udp" src_ip="201.90.60.136" src_port="1026"/>
      <filter dst_port="1434" proto="tcp" src_ip="201.90.60.136" src_port="1026"/>
      <filter dst_port="1434" proto="udp" src_ip="201.90.60.136" src_port="1026"/>
      <from sec="1060318856" usec="0"/>
      <to sec="1060318870" usec="0"/>
    </slice>
    <from sec="1060318856" usec="0"/>
    <to sec="1060318871" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="148.238.64.199" dst_port="137" proto="tcp" src_ip="217.175.166.136" src_port="1046"/>
      <filter dst_ip="148.238.64.199" dst_port="137" proto="udp" src_ip="217.175.166.136" src_port="1046"/>
      <filter dst_ip="148.238.64.199" dst_port="137" proto="tcp" src_ip="217.175.166.136" src_port="80"/>
      <filter dst_ip="148.238.64.199" dst_port="137" proto="udp" src_ip="217.175.166.136" src_port="80"/>
      <from sec="1060318900" usec="0"/>
      <to sec="1060318914" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="148.238.64.199" dst_port="137" proto="tcp" src_ip="81.64.18.136" src_port="1046"/>
      <filter dst_ip="148.238.64.199" dst_port="137" proto="udp" src_ip="81.64.18.136" src_port="1046"/>
      <filter dst_ip="148.238.64.199" dst_port="137" proto="tcp" src_ip="81.64.18.136" src_port="80"/>
      <filter dst_ip="148.238.64.199" dst_port="137" proto="udp" src_ip="81.64.18.136" src_port="80"/>
      <from sec="1060318900" usec="0"/>
      <to sec="1060318912" usec="0"/>
    </slice>
    <from sec="1060318900" usec="0"/>
    <to sec="1060318914" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="82.241.162.139" src_port="1026"/>
      <from sec="1060319277" usec="0"/>
      <to sec="1060319285" usec="0"/>
    </slice>
    <from sec="1060319277" usec="0"/>
    <to sec="1060319285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="18.216.65.142" src_port="1027"/>
      <filter dst_port="137" proto="udp" src_ip="18.216.65.142" src_port="1027"/>
      <from sec="1060318994" usec="0"/>
      <to sec="1060319023" usec="0"/>
    </slice>
    <from sec="1060318994" usec="0"/>
    <to sec="1060319023" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="82.248.12.143" src_port="1028"/>
      <from sec="1060319413" usec="0"/>
      <to sec="1060319438" usec="0"/>
    </slice>
    <from sec="1060319413" usec="0"/>
    <to sec="1060319438" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="157.13.32.143" src_port="1027"/>
      <from sec="1060318857" usec="0"/>
      <to sec="1060318870" usec="0"/>
    </slice>
    <from sec="1060318857" usec="0"/>
    <to sec="1060318871" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="82.241.106.144" src_port="1028"/>
      <from sec="1060319322" usec="0"/>
      <to sec="1060319345" usec="0"/>
    </slice>
    <from sec="1060319322" usec="0"/>
    <to sec="1060319345" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="216.85.124.144" src_port="1026"/>
      <from sec="1060319476" usec="0"/>
      <to sec="1060319492" usec="0"/>
    </slice>
    <from sec="1060319476" usec="0"/>
    <to sec="1060319492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="148.238.117.43" dst_port="137" proto="tcp" src_ip="201.214.151.146" src_port="1025"/>
      <filter dst_ip="148.238.117.43" dst_port="137" proto="udp" src_ip="201.214.151.146" src_port="1025"/>
      <filter dst_ip="148.238.117.43" dst_port="60265" proto="tcp" src_ip="201.214.151.146" src_port="1025"/>
      <filter dst_ip="148.238.117.43" dst_port="60265" proto="udp" src_ip="201.214.151.146" src_port="1025"/>
      <filter dst_ip="148.238.117.43" dst_port="137" proto="tcp" src_ip="201.214.151.146" src_port="80"/>
      <filter dst_ip="148.238.117.43" dst_port="137" proto="udp" src_ip="201.214.151.146" src_port="80"/>
      <filter dst_ip="148.238.117.43" dst_port="60265" proto="tcp" src_ip="201.214.151.146" src_port="80"/>
      <filter dst_ip="148.238.117.43" dst_port="60265" proto="udp" src_ip="201.214.151.146" src_port="80"/>
      <from sec="1060319225" usec="0"/>
      <to sec="1060319254" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="148.238.117.43" dst_port="137" proto="tcp" src_ip="16.173.43.146" src_port="1025"/>
      <filter dst_ip="148.238.117.43" dst_port="137" proto="udp" src_ip="16.173.43.146" src_port="1025"/>
      <filter dst_ip="148.238.117.43" dst_port="60265" proto="tcp" src_ip="16.173.43.146" src_port="1025"/>
      <filter dst_ip="148.238.117.43" dst_port="60265" proto="udp" src_ip="16.173.43.146" src_port="1025"/>
      <filter dst_ip="148.238.117.43" dst_port="137" proto="tcp" src_ip="16.173.43.146" src_port="80"/>
      <filter dst_ip="148.238.117.43" dst_port="137" proto="udp" src_ip="16.173.43.146" src_port="80"/>
      <filter dst_ip="148.238.117.43" dst_port="60265" proto="tcp" src_ip="16.173.43.146" src_port="80"/>
      <filter dst_ip="148.238.117.43" dst_port="60265" proto="udp" src_ip="16.173.43.146" src_port="80"/>
      <from sec="1060319227" usec="0"/>
      <to sec="1060319253" usec="0"/>
    </slice>
    <from sec="1060319225" usec="0"/>
    <to sec="1060319254" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="217.29.229.147" src_port="1029"/>
      <from sec="1060319649" usec="0"/>
      <to sec="1060319655" usec="0"/>
    </slice>
    <from sec="1060319649" usec="0"/>
    <to sec="1060319657" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="200.176.84.153" src_port="1026"/>
      <filter dst_port="137" proto="udp" src_ip="200.176.84.153" src_port="1026"/>
      <filter dst_port="80" proto="tcp" src_ip="200.176.84.153" src_port="1026"/>
      <filter dst_port="80" proto="udp" src_ip="200.176.84.153" src_port="1026"/>
      <filter dst_port="137" proto="tcp" src_ip="200.176.84.153" src_port="80"/>
      <filter dst_port="137" proto="udp" src_ip="200.176.84.153" src_port="80"/>
      <filter dst_port="80" proto="tcp" src_ip="200.176.84.153" src_port="80"/>
      <filter dst_port="80" proto="udp" src_ip="200.176.84.153" src_port="80"/>
      <from sec="1060319239" usec="0"/>
      <to sec="1060319261" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="219.201.104.153" src_port="1026"/>
      <filter dst_port="137" proto="udp" src_ip="219.201.104.153" src_port="1026"/>
      <filter dst_port="80" proto="tcp" src_ip="219.201.104.153" src_port="1026"/>
      <filter dst_port="80" proto="udp" src_ip="219.201.104.153" src_port="1026"/>
      <filter dst_port="137" proto="tcp" src_ip="219.201.104.153" src_port="80"/>
      <filter dst_port="137" proto="udp" src_ip="219.201.104.153" src_port="80"/>
      <filter dst_port="80" proto="tcp" src_ip="219.201.104.153" src_port="80"/>
      <filter dst_port="80" proto="udp" src_ip="219.201.104.153" src_port="80"/>
      <from sec="1060319242" usec="0"/>
      <to sec="1060319261" usec="0"/>
    </slice>
    <from sec="1060319239" usec="0"/>
    <to sec="1060319262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="148.238.144.23" dst_port="137" proto="tcp" src_ip="214.145.16.154" src_port="43478"/>
      <filter dst_ip="148.238.144.23" dst_port="137" proto="udp" src_ip="214.145.16.154" src_port="43478"/>
      <filter dst_ip="148.238.144.23" dst_port="6667" proto="tcp" src_ip="214.145.16.154" src_port="43478"/>
      <filter dst_ip="148.238.144.23" dst_port="6667" proto="udp" src_ip="214.145.16.154" src_port="43478"/>
      <from sec="1060318814" usec="0"/>
      <to sec="1060318821" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="148.238.144.23" dst_port="137" proto="tcp" src_ip="215.202.144.154" src_port="43478"/>
      <filter dst_ip="148.238.144.23" dst_port="137" proto="udp" src_ip="215.202.144.154" src_port="43478"/>
      <filter dst_ip="148.238.144.23" dst_port="6667" proto="tcp" src_ip="215.202.144.154" src_port="43478"/>
      <filter dst_ip="148.238.144.23" dst_port="6667" proto="udp" src_ip="215.202.144.154" src_port="43478"/>
      <from sec="1060318815" usec="0"/>
      <to sec="1060318821" usec="0"/>
    </slice>
    <from sec="1060318814" usec="0"/>
    <to sec="1060318821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="216.82.145.155" src_port="64394"/>
      <from sec="1060318927" usec="0"/>
      <to sec="1060318940" usec="0"/>
    </slice>
    <from sec="1060318927" usec="0"/>
    <to sec="1060318940" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="214.116.74.156" src_port="1029"/>
      <from sec="1060318960" usec="0"/>
      <to sec="1060318987" usec="0"/>
    </slice>
    <from sec="1060318960" usec="0"/>
    <to sec="1060318988" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="82.129.148.157" src_port="1030"/>
      <from sec="1060318900" usec="0"/>
      <to sec="1060318907" usec="0"/>
    </slice>
    <from sec="1060318900" usec="0"/>
    <to sec="1060318907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="202.168.245.159" src_port="1025"/>
      <from sec="1060319389" usec="0"/>
      <to sec="1060319397" usec="0"/>
    </slice>
    <from sec="1060319389" usec="0"/>
    <to sec="1060319397" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="216.66.8.163" src_port="10009"/>
      <from sec="1060319632" usec="0"/>
      <to sec="1060319639" usec="0"/>
    </slice>
    <from sec="1060319632" usec="0"/>
    <to sec="1060319639" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="201.235.16.168" src_port="17041"/>
      <filter dst_port="137" proto="udp" src_ip="201.235.16.168" src_port="17041"/>
      <filter dst_port="137" proto="tcp" src_ip="201.235.16.168" src_port="80"/>
      <filter dst_port="137" proto="udp" src_ip="201.235.16.168" src_port="80"/>
      <from sec="1060319366" usec="0"/>
      <to sec="1060319372" usec="0"/>
    </slice>
    <from sec="1060319366" usec="0"/>
    <to sec="1060319374" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="215.171.140.168" src_port="1030"/>
      <filter dst_port="137" proto="udp" src_ip="215.171.140.168" src_port="1030"/>
      <filter dst_port="137" proto="tcp" src_ip="215.171.140.168" src_port="80"/>
      <filter dst_port="137" proto="udp" src_ip="215.171.140.168" src_port="80"/>
      <from sec="1060319238" usec="0"/>
      <to sec="1060319270" usec="0"/>
    </slice>
    <from sec="1060319238" usec="0"/>
    <to sec="1060319270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="201.17.248.141" dst_port="137" proto="tcp" src_ip="20.57.135.169" src_port="1026"/>
      <filter dst_ip="201.17.248.141" dst_port="137" proto="udp" src_ip="20.57.135.169" src_port="1026"/>
      <filter dst_ip="201.17.248.141" dst_port="137" proto="tcp" src_ip="20.57.135.169" src_port="80"/>
      <filter dst_ip="201.17.248.141" dst_port="137" proto="udp" src_ip="20.57.135.169" src_port="80"/>
      <from sec="1060319279" usec="0"/>
      <to sec="1060319307" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="201.17.248.141" dst_port="137" proto="tcp" src_ip="18.17.91.169" src_port="1026"/>
      <filter dst_ip="201.17.248.141" dst_port="137" proto="udp" src_ip="18.17.91.169" src_port="1026"/>
      <filter dst_ip="201.17.248.141" dst_port="137" proto="tcp" src_ip="18.17.91.169" src_port="80"/>
      <filter dst_ip="201.17.248.141" dst_port="137" proto="udp" src_ip="18.17.91.169" src_port="80"/>
      <from sec="1060319277" usec="0"/>
      <to sec="1060319307" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="201.17.248.141" dst_port="137" proto="tcp" src_ip="219.5.23.169" src_port="1026"/>
      <filter dst_ip="201.17.248.141" dst_port="137" proto="udp" src_ip="219.5.23.169" src_port="1026"/>
      <filter dst_ip="201.17.248.141" dst_port="137" proto="tcp" src_ip="219.5.23.169" src_port="80"/>
      <filter dst_ip="201.17.248.141" dst_port="137" proto="udp" src_ip="219.5.23.169" src_port="80"/>
      <from sec="1060319281" usec="0"/>
      <to sec="1060319307" usec="0"/>
    </slice>
    <from sec="1060319277" usec="0"/>
    <to sec="1060319307" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="82.125.26.174" src_port="1056"/>
      <from sec="1060319082" usec="0"/>
      <to sec="1060319104" usec="0"/>
    </slice>
    <from sec="1060319082" usec="0"/>
    <to sec="1060319104" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="82.246.8.181" src_port="1026"/>
      <from sec="1060318863" usec="0"/>
      <to sec="1060318871" usec="0"/>
    </slice>
    <from sec="1060318863" usec="0"/>
    <to sec="1060318871" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_75{
style=filled;
color=gray75;
347[label="214.116.34.197s;80pkt 80fpkt", shape=rectangle, color=red];
stat75[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.116.34.197:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
347--1081[label="0.0125;1pkt 1fpkt"];
347--1758[label="0.0125;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.116.34.197" src_port="1025"/>
    </slice>
    <from sec="1060318926" usec="0"/>
    <to sec="1060318940" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="216.48.229.210" src_port="1031"/>
      <from sec="1060319507" usec="0"/>
      <to sec="1060319531" usec="0"/>
    </slice>
    <from sec="1060319507" usec="0"/>
    <to sec="1060319531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="194.226.47.212" src_port="1031"/>
      <from sec="1060319291" usec="0"/>
      <to sec="1060319315" usec="0"/>
    </slice>
    <from sec="1060319291" usec="0"/>
    <to sec="1060319315" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="17.15.76.214" src_port="33552"/>
      <from sec="1060319381" usec="0"/>
      <to sec="1060319403" usec="0"/>
    </slice>
    <from sec="1060319381" usec="0"/>
    <to sec="1060319403" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="tcp" src_ip="82.208.144.217" src_port="1028"/>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="udp" src_ip="82.208.144.217" src_port="1028"/>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="tcp" src_ip="82.208.144.217" src_port="80"/>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="udp" src_ip="82.208.144.217" src_port="80"/>
      <filter dst_ip="201.17.248.191" dst_port="137" proto="tcp" src_ip="82.208.144.217" src_port="1028"/>
      <filter dst_ip="201.17.248.191" dst_port="137" proto="udp" src_ip="82.208.144.217" src_port="1028"/>
      <filter dst_ip="201.17.248.191" dst_port="137" proto="tcp" src_ip="82.208.144.217" src_port="80"/>
      <filter dst_ip="201.17.248.191" dst_port="137" proto="udp" src_ip="82.208.144.217" src_port="80"/>
      <from sec="1060319133" usec="0"/>
      <to sec="1060319149" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="tcp" src_ip="16.19.80.217" src_port="1028"/>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="udp" src_ip="16.19.80.217" src_port="1028"/>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="tcp" src_ip="16.19.80.217" src_port="80"/>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="udp" src_ip="16.19.80.217" src_port="80"/>
      <filter dst_ip="201.17.248.191" dst_port="137" proto="tcp" src_ip="16.19.80.217" src_port="1028"/>
      <filter dst_ip="201.17.248.191" dst_port="137" proto="udp" src_ip="16.19.80.217" src_port="1028"/>
      <filter dst_ip="201.17.248.191" dst_port="137" proto="tcp" src_ip="16.19.80.217" src_port="80"/>
      <filter dst_ip="201.17.248.191" dst_port="137" proto="udp" src_ip="16.19.80.217" src_port="80"/>
      <from sec="1060319135" usec="0"/>
      <to sec="1060319148" usec="0"/>
    </slice>
    <from sec="1060319133" usec="0"/>
    <to sec="1060319149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="202.105.68.218" src_port="1026"/>
      <from sec="1060319008" usec="0"/>
      <to sec="1060319015" usec="0"/>
    </slice>
    <from sec="1060319008" usec="0"/>
    <to sec="1060319015" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="82.204.108.225" src_port="1025"/>
      <from sec="1060319177" usec="0"/>
      <to sec="1060319185" usec="0"/>
    </slice>
    <from sec="1060319177" usec="0"/>
    <to sec="1060319185" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="172.235.11.119" dst_port="137" proto="tcp" src_ip="80.22.42.226" src_port="1046"/>
      <filter dst_ip="172.235.11.119" dst_port="137" proto="udp" src_ip="80.22.42.226" src_port="1046"/>
      <filter dst_ip="172.235.11.119" dst_port="137" proto="tcp" src_ip="80.22.42.226" src_port="25"/>
      <filter dst_ip="172.235.11.119" dst_port="137" proto="udp" src_ip="80.22.42.226" src_port="25"/>
      <from sec="1060319509" usec="0"/>
      <to sec="1060319523" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="172.235.11.119" dst_port="137" proto="tcp" src_ip="18.144.118.226" src_port="1046"/>
      <filter dst_ip="172.235.11.119" dst_port="137" proto="udp" src_ip="18.144.118.226" src_port="1046"/>
      <filter dst_ip="172.235.11.119" dst_port="137" proto="tcp" src_ip="18.144.118.226" src_port="25"/>
      <filter dst_ip="172.235.11.119" dst_port="137" proto="udp" src_ip="18.144.118.226" src_port="25"/>
      <from sec="1060319508" usec="0"/>
      <to sec="1060319523" usec="0"/>
    </slice>
    <from sec="1060319508" usec="0"/>
    <to sec="1060319523" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="172.235.11.119" dst_port="137" proto="tcp" src_ip="218.97.134.226" src_port="64438"/>
      <filter dst_ip="172.235.11.119" dst_port="137" proto="udp" src_ip="218.97.134.226" src_port="64438"/>
      <filter dst_ip="172.235.11.119" dst_port="137" proto="tcp" src_ip="218.97.134.226" src_port="25"/>
      <filter dst_ip="172.235.11.119" dst_port="137" proto="udp" src_ip="218.97.134.226" src_port="25"/>
      <from sec="1060319539" usec="0"/>
      <to sec="1060319564" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="172.235.11.119" dst_port="137" proto="tcp" src_ip="18.144.118.226" src_port="64438"/>
      <filter dst_ip="172.235.11.119" dst_port="137" proto="udp" src_ip="18.144.118.226" src_port="64438"/>
      <filter dst_ip="172.235.11.119" dst_port="137" proto="tcp" src_ip="18.144.118.226" src_port="25"/>
      <filter dst_ip="172.235.11.119" dst_port="137" proto="udp" src_ip="18.144.118.226" src_port="25"/>
      <from sec="1060319539" usec="0"/>
      <to sec="1060319563" usec="0"/>
    </slice>
    <from sec="1060319539" usec="0"/>
    <to sec="1060319564" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="214.43.66.228" src_port="1027"/>
      <from sec="1060319232" usec="0"/>
      <to sec="1060319261" usec="0"/>
    </slice>
    <from sec="1060319232" usec="0"/>
    <to sec="1060319261" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="216.91.160.229" src_port="1025"/>
      <from sec="1060318940" usec="0"/>
      <to sec="1060318960" usec="0"/>
    </slice>
    <from sec="1060318940" usec="0"/>
    <to sec="1060318960" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="82.208.9.235" src_port="1025"/>
      <from sec="1060319255" usec="0"/>
      <to sec="1060319285" usec="0"/>
    </slice>
    <from sec="1060319255" usec="0"/>
    <to sec="1060319285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="19.116.147.235" src_port="16835"/>
      <from sec="1060319381" usec="0"/>
      <to sec="1060319390" usec="0"/>
    </slice>
    <from sec="1060319381" usec="0"/>
    <to sec="1060319390" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="215.61.10.245" src_port="1027"/>
      <from sec="1060319468" usec="0"/>
      <to sec="1060319493" usec="0"/>
    </slice>
    <from sec="1060319468" usec="0"/>
    <to sec="1060319493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="82.240.89.245" src_port="61216"/>
      <filter dst_port="137" proto="udp" src_ip="82.240.89.245" src_port="61211"/>
      <filter dst_port="137" proto="udp" src_ip="82.240.89.245" src_port="61218"/>
      <from sec="1060318863" usec="0"/>
      <to sec="1060318871" usec="0"/>
    </slice>
    <from sec="1060318863" usec="0"/>
    <to sec="1060318871" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="82.211.50.246" src_port="21890"/>
      <from sec="1060319141" usec="0"/>
      <to sec="1060319149" usec="0"/>
    </slice>
    <from sec="1060319141" usec="0"/>
    <to sec="1060319149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="201.235.49.255" src_port="1025"/>
      <from sec="1060318933" usec="0"/>
      <to sec="1060318940" usec="0"/>
    </slice>
    <from sec="1060318933" usec="0"/>
    <to sec="1060318940" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="144.170.242.9" dst_port="137" proto="tcp" src_ip="221.32.227.99" src_port="25"/>
      <filter dst_ip="144.170.242.9" dst_port="137" proto="udp" src_ip="221.32.227.99" src_port="25"/>
      <from sec="1060318820" usec="0"/>
      <to sec="1060318828" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="144.170.242.9" dst_port="137" proto="tcp" src_ip="200.11.103.99" src_port="25"/>
      <filter dst_ip="144.170.242.9" dst_port="137" proto="udp" src_ip="200.11.103.99" src_port="25"/>
      <from sec="1060318820" usec="0"/>
      <to sec="1060318828" usec="0"/>
    </slice>
    <from sec="1060318820" usec="0"/>
    <to sec="1060318828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="201.17.248.191" dst_port="137" proto="tcp" src_ip="19.117.255.116" src_port="80"/>
      <filter dst_ip="201.17.248.191" dst_port="137" proto="udp" src_ip="19.117.255.116" src_port="80"/>
      <from sec="1060318814" usec="0"/>
      <to sec="1060318827" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="201.17.248.191" dst_port="137" proto="tcp" src_ip="16.70.203.116" src_port="80"/>
      <filter dst_ip="201.17.248.191" dst_port="137" proto="udp" src_ip="16.70.203.116" src_port="80"/>
      <from sec="1060318814" usec="0"/>
      <to sec="1060318825" usec="0"/>
    </slice>
    <from sec="1060318814" usec="0"/>
    <to sec="1060318827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="221.35.32.130" src_port="4662"/>
      <filter dst_port="137" proto="udp" src_ip="221.35.32.130" src_port="4662"/>
      <from sec="1060319366" usec="0"/>
      <to sec="1060319380" usec="0"/>
    </slice>
    <from sec="1060319366" usec="0"/>
    <to sec="1060319380" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="80.137.212.202"/>
      <from sec="1060319110" usec="0"/>
      <to sec="1060319134" usec="0"/>
    </slice>
    <from sec="1060319110" usec="0"/>
    <to sec="1060319134" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="9.26.96.205"/>
      <from sec="1060319689" usec="0"/>
      <to sec="1060319698" usec="0"/>
    </slice>
    <from sec="1060319689" usec="0"/>
    <to sec="1060319698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599826,1.65003,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="215.180.161.222"/>
      <from sec="1060318926" usec="0"/>
      <to sec="1060318932" usec="0"/>
    </slice>
    <from sec="1060318926" usec="0"/>
    <to sec="1060318932" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00405,1.66318,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_99{
style=filled;
color=gray75;
96[label="216.48.38.8s;60pkt 60fpkt", shape=rectangle, color=red];
460[label="216.48.38.8s;60pkt 60fpkt", shape=ellipse, color=green];
stat99[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.48.38.8:63423, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63423: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
96--460[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="216.48.38.8" src_port="63423"/>
    </slice>
    <from sec="1060319674" usec="0"/>
    <to sec="1060319682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.967651,1.59443,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_100{
style=filled;
color=gray75;
122[label="81.123.174.24s;180pkt 180fpkt", shape=rectangle, color=red];
465[label="81.123.174.24s;66pkt 66fpkt", shape=ellipse, color=green];
2197[label="81.123.174.24;193pkt 193fpkt", shape=pentagon, color=darkviolet];
stat100[shape=component, label=&lt;Rules:&lt;BR/&gt;{81.123.174.24:1038, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1038: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
122--465[label="1;66pkt 66fpkt"];
122--2197[label="1;180pkt 180fpkt"];
465--2197[label="1;66pkt 66fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="81.123.174.24" src_port="1038"/>
    </slice>
    <from sec="1060319167" usec="0"/>
    <to sec="1060319199" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00405,1.66318,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_101{
style=filled;
color=gray75;
133[label="200.61.72.36s;60pkt 60fpkt", shape=rectangle, color=red];
468[label="200.61.72.36s;60pkt 60fpkt", shape=ellipse, color=green];
stat101[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.61.72.36:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
133--468[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.61.72.36" src_port="1027"/>
    </slice>
    <from sec="1060319539" usec="0"/>
    <to sec="1060319548" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.967651,1.59443,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_102{
style=filled;
color=gray75;
140[label="82.64.187.40s;63pkt 63fpkt", shape=rectangle, color=red];
469[label="82.64.187.40s;63pkt 63fpkt", shape=ellipse, color=green];
2285[label="82.64.187.40;150pkt 150fpkt", shape=pentagon, color=darkviolet];
stat102[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.64.187.40:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
140--469[label="1;63pkt 63fpkt"];
140--2285[label="1;63pkt 63fpkt"];
469--2285[label="1;63pkt 63fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="82.64.187.40" src_port="1027"/>
    </slice>
    <from sec="1060319186" usec="0"/>
    <to sec="1060319210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.967651,1.59443,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_103{
style=filled;
color=gray75;
159[label="82.133.166.50s;136pkt 136fpkt", shape=rectangle, color=red];
472[label="82.133.166.50s;52pkt 52fpkt", shape=ellipse, color=green];
2333[label="82.133.166.50;149pkt 149fpkt", shape=pentagon, color=darkviolet];
stat103[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.133.166.50:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
159--472[label="1;52pkt 52fpkt"];
159--2333[label="1;136pkt 136fpkt"];
472--2333[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="82.133.166.50" src_port="1026"/>
    </slice>
    <from sec="1060319213" usec="0"/>
    <to sec="1060319240" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.948345,1.71208,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="139.112.153.89" dst_port="137" proto="tcp" src_ip="216.93.244.50" src_port="1026"/>
      <filter dst_ip="139.112.153.89" dst_port="137" proto="udp" src_ip="216.93.244.50" src_port="1026"/>
      <filter dst_ip="139.112.153.89" dst_port="137" proto="tcp" src_ip="216.93.244.50" src_port="80"/>
      <filter dst_ip="139.112.153.89" dst_port="137" proto="udp" src_ip="216.93.244.50" src_port="80"/>
      <filter dst_ip="139.112.153.89" dst_port="137" proto="tcp" src_ip="216.93.244.50" src_port="53"/>
      <filter dst_ip="139.112.153.89" dst_port="137" proto="udp" src_ip="216.93.244.50" src_port="53"/>
      <from sec="1060319624" usec="0"/>
      <to sec="1060319633" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="139.112.153.89" dst_port="137" proto="tcp" src_ip="216.52.4.50" src_port="1026"/>
      <filter dst_ip="139.112.153.89" dst_port="137" proto="udp" src_ip="216.52.4.50" src_port="1026"/>
      <filter dst_ip="139.112.153.89" dst_port="137" proto="tcp" src_ip="216.52.4.50" src_port="80"/>
      <filter dst_ip="139.112.153.89" dst_port="137" proto="udp" src_ip="216.52.4.50" src_port="80"/>
      <filter dst_ip="139.112.153.89" dst_port="137" proto="tcp" src_ip="216.52.4.50" src_port="53"/>
      <filter dst_ip="139.112.153.89" dst_port="137" proto="udp" src_ip="216.52.4.50" src_port="53"/>
      <from sec="1060319625" usec="0"/>
      <to sec="1060319633" usec="0"/>
    </slice>
    <from sec="1060319624" usec="0"/>
    <to sec="1060319633" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00405,1.66318,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_105{
style=filled;
color=gray75;
161[label="216.81.56.53s;169pkt 169fpkt", shape=rectangle, color=red];
474[label="216.81.56.53s;98pkt 98fpkt", shape=ellipse, color=green];
stat105[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.81.56.53:1038, *:137}[59.1716%]&lt;BR/&gt;{216.34.20.53:37739, *:137}[40.8284%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1038: (29.9625%)&lt;BR/&gt; 37739: (20.0375%)&gt;];
}
161--474[label="1;98pkt 98fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="216.81.56.53" src_port="1038"/>
      <filter dst_port="137" src_ip="216.34.20.53" src_port="37739"/>
    </slice>
    <from sec="1060318946" usec="0"/>
    <to sec="1060318960" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00405,1.66318,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_106{
style=filled;
color=gray75;
177[label="82.179.92.67s;163pkt 163fpkt", shape=rectangle, color=red];
479[label="82.179.92.67s;64pkt 64fpkt", shape=ellipse, color=green];
stat106[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.179.92.67:62286, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62286: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
177--479[label="1;64pkt 64fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="82.179.92.67" src_port="62286"/>
    </slice>
    <from sec="1060319453" usec="0"/>
    <to sec="1060319477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00405,1.66318,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_108{
style=filled;
color=gray75;
188[label="195.101.27.72s;66pkt 66fpkt", shape=rectangle, color=red];
483[label="195.101.27.72s;66pkt 66fpkt", shape=ellipse, color=green];
stat108[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.101.27.72:64461, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64461: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
188--483[label="1;66pkt 66fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="195.101.27.72" src_port="64461"/>
    </slice>
    <from sec="1060319689" usec="0"/>
    <to sec="1060319698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00405,1.66318,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_109{
style=filled;
color=gray75;
191[label="19.55.224.74s;61pkt 61fpkt", shape=rectangle, color=red];
484[label="19.55.224.74s;61pkt 61fpkt", shape=ellipse, color=green];
stat109[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.55.224.74:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
191--484[label="1;61pkt 61fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="19.55.224.74" src_port="1028"/>
    </slice>
    <from sec="1060319681" usec="0"/>
    <to sec="1060319690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00405,1.66318,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_110{
style=filled;
color=gray75;
206[label="217.67.128.84s;220pkt 220fpkt", shape=rectangle, color=red];
487[label="217.67.128.84s;61pkt 61fpkt", shape=ellipse, color=green];
stat110[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.67.128.84:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
206--487[label="1;61pkt 61fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="217.67.128.84" src_port="1030"/>
    </slice>
    <from sec="1060319179" usec="0"/>
    <to sec="1060319214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.948345,1.71208,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="tcp" src_ip="202.45.195.86" src_port="1031"/>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="udp" src_ip="202.45.195.86" src_port="1031"/>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="tcp" src_ip="202.45.195.86" src_port="80"/>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="udp" src_ip="202.45.195.86" src_port="80"/>
      <from sec="1060319345" usec="0"/>
      <to sec="1060319352" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="tcp" src_ip="16.70.203.86" src_port="1031"/>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="udp" src_ip="16.70.203.86" src_port="1031"/>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="tcp" src_ip="16.70.203.86" src_port="80"/>
      <filter dst_ip="201.17.250.129" dst_port="137" proto="udp" src_ip="16.70.203.86" src_port="80"/>
      <from sec="1060319345" usec="0"/>
      <to sec="1060319353" usec="0"/>
    </slice>
    <from sec="1060319345" usec="0"/>
    <to sec="1060319353" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00405,1.66318,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_113{
style=filled;
color=gray75;
219[label="82.179.29.94s;218pkt 218fpkt", shape=rectangle, color=red];
490[label="82.179.29.94s;60pkt 60fpkt", shape=ellipse, color=green];
stat113[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.179.29.94:1032, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1032: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
219--490[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="82.179.29.94" src_port="1032"/>
    </slice>
    <from sec="1060319633" usec="0"/>
    <to sec="1060319667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00405,1.66318,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_114{
style=filled;
color=gray75;
222[label="20.84.67.96s;202pkt 202fpkt", shape=rectangle, color=red];
491[label="20.84.67.96s;50pkt 50fpkt", shape=ellipse, color=green];
stat114[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.84.67.96:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
222--491[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="20.84.67.96" src_port="1025"/>
    </slice>
    <from sec="1060319118" usec="0"/>
    <to sec="1060319149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.967651,1.59443,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_116{
style=filled;
color=gray75;
230[label="82.239.238.100s;109pkt 109fpkt", shape=rectangle, color=red];
494[label="82.239.238.100s;65pkt 65fpkt", shape=ellipse, color=green];
2650[label="82.239.238.100;459pkt 459fpkt", shape=pentagon, color=darkviolet];
stat116[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.239.238.100:1029, *:137}[98.6928%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (49.5261%)&lt;BR/&gt; 137: (49.5261%)&lt;BR/&gt; 139: (0.473934%)&lt;BR/&gt; 1514: (0.0789889%)&lt;BR/&gt; 1441: (0.0789889%)&gt;];
}
230--494[label="1;65pkt 65fpkt"];
230--2650[label="1;109pkt 109fpkt"];
494--2650[label="1;65pkt 65fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="82.239.238.100" src_port="1029"/>
    </slice>
    <from sec="1060319370" usec="0"/>
    <to sec="1060319531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03965,1.56152,002,1 1 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_120{
style=filled;
color=gray75;
244[label="194.208.17.115s;232pkt 232fpkt", shape=rectangle, color=red];
498[label="194.208.17.115s;66pkt 66fpkt", shape=ellipse, color=green];
2728[label="194.208.17.115;232pkt 232fpkt", shape=pentagon, color=darkviolet];
3715[label="194.208.17.115;232pkt 232fpkt", shape=invtriangle, color=brown];
stat120[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.208.17.115:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
244--498[label="1;66pkt 66fpkt"];
244--2728[label="1;232pkt 232fpkt"];
244--3715[label="1;232pkt 232fpkt"];
498--2728[label="1;66pkt 66fpkt"];
498--3715[label="1;66pkt 66fpkt"];
2728--3715[label="1;232pkt 232fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.208.17.115" src_port="1025"/>
    </slice>
    <from sec="1060319478" usec="0"/>
    <to sec="1060319514" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.948345,1.71208,503,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="147.4.86.101" dst_port="137" proto="tcp" src_ip="216.81.72.130" src_port="1027"/>
      <filter dst_ip="147.4.86.101" dst_port="137" proto="udp" src_ip="216.81.72.130" src_port="1027"/>
      <filter dst_ip="147.4.86.101" dst_port="1054" proto="tcp" src_ip="216.81.72.130" src_port="1027"/>
      <filter dst_ip="147.4.86.101" dst_port="1054" proto="udp" src_ip="216.81.72.130" src_port="1027"/>
      <filter dst_ip="147.4.86.101" dst_port="137" proto="tcp" src_ip="216.81.72.130" src_port="80"/>
      <filter dst_ip="147.4.86.101" dst_port="137" proto="udp" src_ip="216.81.72.130" src_port="80"/>
      <filter dst_ip="147.4.86.101" dst_port="1054" proto="tcp" src_ip="216.81.72.130" src_port="80"/>
      <filter dst_ip="147.4.86.101" dst_port="1054" proto="udp" src_ip="216.81.72.130" src_port="80"/>
      <from sec="1060319523" usec="0"/>
      <to sec="1060319539" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="147.4.86.101" dst_port="137" proto="tcp" src_ip="216.34.20.130" src_port="1027"/>
      <filter dst_ip="147.4.86.101" dst_port="137" proto="udp" src_ip="216.34.20.130" src_port="1027"/>
      <filter dst_ip="147.4.86.101" dst_port="1054" proto="tcp" src_ip="216.34.20.130" src_port="1027"/>
      <filter dst_ip="147.4.86.101" dst_port="1054" proto="udp" src_ip="216.34.20.130" src_port="1027"/>
      <filter dst_ip="147.4.86.101" dst_port="137" proto="tcp" src_ip="216.34.20.130" src_port="80"/>
      <filter dst_ip="147.4.86.101" dst_port="137" proto="udp" src_ip="216.34.20.130" src_port="80"/>
      <filter dst_ip="147.4.86.101" dst_port="1054" proto="tcp" src_ip="216.34.20.130" src_port="80"/>
      <filter dst_ip="147.4.86.101" dst_port="1054" proto="udp" src_ip="216.34.20.130" src_port="80"/>
      <from sec="1060319532" usec="0"/>
      <to sec="1060319538" usec="0"/>
    </slice>
    <from sec="1060319523" usec="0"/>
    <to sec="1060319539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00405,1.66318,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_122{
style=filled;
color=gray75;
268[label="82.176.30.132s;49pkt 49fpkt", shape=rectangle, color=red];
500[label="82.176.30.132s;49pkt 49fpkt", shape=ellipse, color=green];
stat122[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.176.30.132:1041, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1041: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
268--500[label="1;49pkt 49fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="82.176.30.132" src_port="1041"/>
    </slice>
    <from sec="1060319397" usec="0"/>
    <to sec="1060319405" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.967651,1.59443,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_123{
style=filled;
color=gray75;
271[label="18.244.49.135s;182pkt 182fpkt", shape=rectangle, color=red];
501[label="18.244.49.135s;113pkt 113fpkt", shape=ellipse, color=green];
2831[label="18.244.49.135;238pkt 238fpkt", shape=pentagon, color=darkviolet];
stat123[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.244.49.135:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
271--501[label="1;113pkt 113fpkt"];
271--2831[label="1;182pkt 182fpkt"];
501--2831[label="1;113pkt 113fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="18.244.49.135" src_port="1027"/>
    </slice>
    <from sec="1060319124" usec="0"/>
    <to sec="1060319161" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.948345,1.71208,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="148.238.64.199" dst_port="137" proto="tcp" src_ip="217.175.166.136" src_port="1046"/>
      <filter dst_ip="148.238.64.199" dst_port="137" proto="udp" src_ip="217.175.166.136" src_port="1046"/>
      <filter dst_ip="148.238.64.199" dst_port="137" proto="tcp" src_ip="217.175.166.136" src_port="80"/>
      <filter dst_ip="148.238.64.199" dst_port="137" proto="udp" src_ip="217.175.166.136" src_port="80"/>
      <from sec="1060318900" usec="0"/>
      <to sec="1060318907" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="148.238.64.199" dst_port="137" proto="tcp" src_ip="81.64.18.136" src_port="1046"/>
      <filter dst_ip="148.238.64.199" dst_port="137" proto="udp" src_ip="81.64.18.136" src_port="1046"/>
      <filter dst_ip="148.238.64.199" dst_port="137" proto="tcp" src_ip="81.64.18.136" src_port="80"/>
      <filter dst_ip="148.238.64.199" dst_port="137" proto="udp" src_ip="81.64.18.136" src_port="80"/>
      <from sec="1060318900" usec="0"/>
      <to sec="1060318907" usec="0"/>
    </slice>
    <from sec="1060318900" usec="0"/>
    <to sec="1060318907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00405,1.66318,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_125{
style=filled;
color=gray75;
284[label="20.37.13.144s;95pkt 95fpkt", shape=rectangle, color=red];
503[label="20.37.13.144s;60pkt 60fpkt", shape=ellipse, color=green];
stat125[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.37.13.144:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
284--503[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="20.37.13.144" src_port="1025"/>
    </slice>
    <from sec="1060319185" usec="0"/>
    <to sec="1060319200" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00405,1.66318,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_126{
style=filled;
color=gray75;
285[label="82.244.18.144s;134pkt 134fpkt", shape=rectangle, color=red];
504[label="82.244.18.144s;66pkt 66fpkt", shape=ellipse, color=green];
stat126[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.244.18.144:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
285--504[label="1;66pkt 66fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="82.244.18.144" src_port="1025"/>
    </slice>
    <from sec="1060318885" usec="0"/>
    <to sec="1060318906" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03965,1.56152,002,1 1 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_134{
style=filled;
color=gray75;
329[label="200.176.120.179s;66pkt 66fpkt", shape=rectangle, color=red];
515[label="200.176.120.179s;66pkt 66fpkt", shape=ellipse, color=green];
3044[label="200.176.120.179;131pkt 131fpkt", shape=pentagon, color=darkviolet];
3871[label="200.176.120.179;131pkt 131fpkt", shape=invtriangle, color=brown];
stat134[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.176.120.179:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
329--515[label="1;66pkt 66fpkt"];
329--3044[label="1;66pkt 66fpkt"];
329--3871[label="1;66pkt 66fpkt"];
515--3044[label="1;66pkt 66fpkt"];
515--3871[label="1;66pkt 66fpkt"];
3044--3871[label="1;131pkt 131fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.176.120.179" src_port="1026"/>
    </slice>
    <from sec="1060319443" usec="0"/>
    <to sec="1060319464" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03965,1.56152,002,1 1 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_135{
style=filled;
color=gray75;
334[label="218.14.60.186s;233pkt 233fpkt", shape=rectangle, color=red];
517[label="218.14.60.186s;112pkt 112fpkt", shape=ellipse, color=green];
3074[label="218.14.60.186;250pkt 250fpkt", shape=pentagon, color=darkviolet];
3887[label="218.14.60.186;250pkt 250fpkt", shape=invtriangle, color=brown];
stat135[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.14.60.186:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
334--517[label="1;112pkt 112fpkt"];
334--3074[label="1;233pkt 233fpkt"];
334--3887[label="1;233pkt 233fpkt"];
517--3074[label="1;112pkt 112fpkt"];
517--3887[label="1;112pkt 112fpkt"];
3074--3887[label="1;250pkt 250fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="218.14.60.186" src_port="1028"/>
    </slice>
    <from sec="1060318947" usec="0"/>
    <to sec="1060318986" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03965,1.56152,002,1 1 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_136{
style=filled;
color=gray75;
336[label="215.194.0.187s;135pkt 135fpkt", shape=rectangle, color=red];
518[label="215.194.0.187s;65pkt 65fpkt", shape=ellipse, color=green];
3077[label="215.194.0.187;185pkt 185fpkt", shape=pentagon, color=darkviolet];
3889[label="215.194.0.187;185pkt 185fpkt", shape=invtriangle, color=brown];
stat136[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.194.0.187:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
336--518[label="1;65pkt 65fpkt"];
336--3077[label="0.992593;134pkt 134fpkt"];
336--3889[label="0.992593;134pkt 134fpkt"];
518--3077[label="1;65pkt 65fpkt"];
518--3889[label="1;65pkt 65fpkt"];
3077--3889[label="1;185pkt 185fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.194.0.187" src_port="1027"/>
    </slice>
    <from sec="1060319157" usec="0"/>
    <to sec="1060319187" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.967651,1.59443,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_137{
style=filled;
color=gray75;
337[label="216.33.120.187s;66pkt 66fpkt", shape=rectangle, color=red];
519[label="216.33.120.187s;66pkt 66fpkt", shape=ellipse, color=green];
3080[label="216.33.120.187;149pkt 149fpkt", shape=pentagon, color=darkviolet];
stat137[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.33.120.187:63779, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63779: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
337--519[label="1;66pkt 66fpkt"];
337--3080[label="1;66pkt 66fpkt"];
519--3080[label="1;66pkt 66fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="216.33.120.187" src_port="63779"/>
    </slice>
    <from sec="1060319645" usec="0"/>
    <to sec="1060319669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00405,1.66318,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_138{
style=filled;
color=gray75;
343[label="80.137.24.194s;118pkt 118fpkt", shape=rectangle, color=red];
520[label="80.137.24.194s;66pkt 66fpkt", shape=ellipse, color=green];
stat138[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.137.24.194:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
343--520[label="1;66pkt 66fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="80.137.24.194" src_port="1030"/>
    </slice>
    <from sec="1060319405" usec="0"/>
    <to sec="1060319422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.967651,1.59443,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_142{
style=filled;
color=gray75;
358[label="16.142.195.200s;134pkt 134fpkt", shape=rectangle, color=red];
526[label="16.142.195.200s;56pkt 56fpkt", shape=ellipse, color=green];
3176[label="16.142.195.200;134pkt 134fpkt", shape=pentagon, color=darkviolet];
stat142[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.142.195.200:4682, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4682: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
358--526[label="1;56pkt 56fpkt"];
358--3176[label="1;134pkt 134fpkt"];
526--3176[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="16.142.195.200" src_port="4682"/>
    </slice>
    <from sec="1060319322" usec="0"/>
    <to sec="1060319343" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.967651,1.59443,503,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_146{
style=filled;
color=gray75;
393[label="19.47.242.244s;1pkt 1fpkt", shape=rectangle, color=red];
532[label="19.47.242.244s;1pkt 1fpkt", shape=ellipse, color=green];
3359[label="195.183.46.244;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat146[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.183.46.244:80, 139.112.196.132:1280}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1280: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
393--532[label="1;1pkt 1fpkt"];
393--3359[label="1;1pkt 1fpkt"];
532--3359[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="139.112.196.132" dst_port="1280" src_ip="195.183.46.244" src_port="80"/>
    </slice>
    <from sec="1060319263" usec="0"/>
    <to sec="1060319696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00405,1.66318,010,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_147{
style=filled;
color=gray75;
404[label="19.55.108.11s;83pkt 83fpkt", shape=rectangle, color=red];
533[label="19.55.108.11s;83pkt 83fpkt", shape=ellipse, color=green];
stat147[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.55.108.11:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 61692: (0.60241%)&lt;BR/&gt; 4346: (0.60241%)&lt;BR/&gt; 4345: (0.60241%)&lt;BR/&gt; 4311: (0.60241%)&gt;];
}
404--533[label="1;83pkt 83fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="19.55.108.11"/>
    </slice>
    <from sec="1060319338" usec="0"/>
    <to sec="1060319345" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00405,1.66318,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_148{
style=filled;
color=gray75;
407[label="193.36.212.18s;59pkt 59fpkt", shape=rectangle, color=red];
534[label="193.36.212.18s;59pkt 59fpkt", shape=ellipse, color=green];
stat148[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.36.212.18:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 57099: (0.847458%)&lt;BR/&gt; 57098: (0.847458%)&lt;BR/&gt; 57097: (0.847458%)&lt;BR/&gt; 57095: (0.847458%)&gt;];
}
407--534[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="193.36.212.18"/>
    </slice>
    <from sec="1060318966" usec="0"/>
    <to sec="1060318974" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03965,1.56152,010,1 1 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_152{
style=filled;
color=gray75;
419[label="200.126.53.73s;254pkt 254fpkt", shape=rectangle, color=red];
543[label="200.126.53.73s;189pkt 189fpkt", shape=ellipse, color=green];
2457[label="200.126.53.73;255pkt 255fpkt", shape=pentagon, color=darkviolet];
3600[label="200.126.53.73;255pkt 255fpkt", shape=invtriangle, color=brown];
stat152[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.126.53.73:*, *:139}[99.6078%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (49.8951%)&lt;BR/&gt; 28807: (0.209864%)&lt;BR/&gt; 28806: (0.209864%)&lt;BR/&gt; 28805: (0.209864%)&lt;BR/&gt; 28804: (0.209864%)&gt;];
}
419--543[label="1;189pkt 189fpkt"];
419--2457[label="1;254pkt 254fpkt"];
419--3600[label="1;254pkt 254fpkt"];
543--2457[label="1;189pkt 189fpkt"];
543--3600[label="1;189pkt 189fpkt"];
2457--3600[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="200.126.53.73"/>
    </slice>
    <from sec="1060319632" usec="0"/>
    <to sec="1060319675" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.948345,1.71208,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="139" proto="tcp" src_ip="215.149.236.80" src_port="80"/>
      <from sec="1060319667" usec="0"/>
      <to sec="1060319698" usec="0"/>
    </slice>
    <from sec="1060319667" usec="0"/>
    <to sec="1060319698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00405,1.66318,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_163{
style=filled;
color=gray75;
200[label="169.179.239.79s;142pkt 142fpkt", shape=rectangle, color=red];
564[label="169.179.239.79s;73pkt 73fpkt", shape=ellipse, color=green];
stat163[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.179.239.79:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
200--564[label="1;73pkt 73fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="169.179.239.79" src_port="1026"/>
    </slice>
    <from sec="1060319492" usec="0"/>
    <to sec="1060319516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0371,1.65774,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_166{
style=filled;
color=gray75;
610[label="139.112.43.29;d;1pkt 1fpkt", shape=diamond, color=yellow];
613[label="18.208.176.38;s;1pkt 1fpkt", shape=diamond, color=yellow];
1665[label="139.112.43.29;d;1pkt 1fpkt", shape=hexagon, color=black];
stat166[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.208.176.38:80, 139.112.43.29:49685}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49685: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
610--613[label="1;1pkt 1fpkt"];
610--1665[label="1;1pkt 1fpkt"];
613--1665[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="139.112.43.29" dst_port="49685" src_ip="18.208.176.38" src_port="80"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.976421,1.53835,999,1 0 0 1 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_169{
style=filled;
color=gray75;
52[label="200.88.196.184s;2pkt 2fpkt", shape=rectangle, color=red];
637[label="200.11.101.158;d;2pkt 2fpkt", shape=diamond, color=yellow];
638[label="200.88.196.184;s;2pkt 2fpkt", shape=diamond, color=yellow];
3069[label="200.88.196.184;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4267[label="200.88.196.184;1pkt 1fpkt", shape=invhouse, color=bisque];
stat169[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.88.196.184:64521, 200.11.101.158:2}[50%]&lt;BR/&gt;{200.88.196.184:65265, 200.11.101.158:3}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65265: (27.7778%)&lt;BR/&gt; 3: (27.7778%)&lt;BR/&gt; 64521: (22.2222%)&lt;BR/&gt; 2: (22.2222%)&gt;];
}
52--637[label="1;2pkt 2fpkt"];
52--638[label="1;2pkt 2fpkt"];
52--3069[label="1;2pkt 2fpkt"];
52--4267[label="1;1pkt 1fpkt"];
637--638[label="1;2pkt 2fpkt"];
637--3069[label="1;2pkt 2fpkt"];
637--4267[label="1;1pkt 1fpkt"];
638--3069[label="1;2pkt 2fpkt"];
638--4267[label="1;1pkt 1fpkt"];
3069--4267[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.11.101.158" dst_port="3" src_ip="200.88.196.184" src_port="65265"/>
      <filter dst_ip="200.11.101.158" dst_port="2" src_ip="200.88.196.184" src_port="64521"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0371,1.65774,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_170{
style=filled;
color=gray75;
645[label="148.238.35.118;d;3pkt 3fpkt", shape=diamond, color=yellow];
646[label="201.168.13.148;s;1pkt 1fpkt", shape=diamond, color=yellow];
1843[label="201.168.13.148;s;1pkt 1fpkt", shape=hexagon, color=black];
stat170[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.168.13.148:60321, 148.238.35.118:80}[33.3333%]&lt;BR/&gt;{152.36.164.206:17643, 148.238.35.118:80}[33.3333%]&lt;BR/&gt;{152.36.164.206:17644, 148.238.35.118:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60321: (30%)&lt;BR/&gt; 17644: (10%)&lt;BR/&gt; 17643: (10%)&gt;];
}
645--646[label="1;1pkt 1fpkt"];
645--1843[label="1;1pkt 1fpkt"];
646--1843[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.238.35.118" dst_port="80" src_ip="152.36.164.206" src_port="17644"/>
      <filter dst_ip="148.238.35.118" dst_port="80" src_ip="152.36.164.206" src_port="17643"/>
      <filter dst_ip="148.238.35.118" dst_port="80" src_ip="201.168.13.148" src_port="60321"/>
    </slice>
    <from sec="1060319199" usec="0"/>
    <to sec="1060319344" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.771159,1.54257,503,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_174{
style=filled;
color=gray75;
65[label="215.202.158.213s;1pkt 1fpkt", shape=rectangle, color=red];
701[label="148.238.3.168;d;167pkt 167fpkt", shape=diamond, color=yellow];
702[label="215.202.158.213;s;1pkt 1fpkt", shape=diamond, color=yellow];
2874[label="216.136.154.143;21pkt 21fpkt", shape=pentagon, color=darkviolet];
3063[label="216.136.154.183;20pkt 20fpkt", shape=pentagon, color=darkviolet];
stat174[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.136.212.43:80, 148.238.3.168:*}[29.3413%]&lt;BR/&gt;{216.136.154.76:80, 148.238.3.168:*}[25.1497%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2617: (0.714286%)&lt;BR/&gt; 4177: (0.47619%)&lt;BR/&gt; 4167: (0.47619%)&lt;BR/&gt; 4165: (0.47619%)&gt;];
}
65--701[label="1;1pkt 1fpkt"];
65--702[label="1;1pkt 1fpkt"];
701--702[label="1;1pkt 1fpkt"];
701--2874[label="1;21pkt 21fpkt"];
701--3063[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="148.238.3.168" src_ip="216.136.212.43" src_port="80"/>
      <filter dst_ip="148.238.3.168" src_ip="216.136.154.76" src_port="80"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0019,1.58876,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_175{
style=filled;
color=gray75;
705[label="139.112.86.119;d;4pkt 4fpkt", shape=diamond, color=yellow];
706[label="152.58.10.193;s;1pkt 1fpkt", shape=diamond, color=yellow];
1695[label="152.58.10.193;s;1pkt 1fpkt", shape=hexagon, color=black];
3114[label="152.58.10.193;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat175[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.70.201.8:119, 139.112.86.119:2355}[25%]&lt;BR/&gt;{152.58.10.193:4299, 139.112.86.119:1326}[25%]&lt;BR/&gt;{82.42.212.8:1214, 139.112.86.119:2882}[25%]&lt;BR/&gt;{82.42.212.8:1214, 139.112.86.119:2934}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4299: (28.5714%)&lt;BR/&gt; 1326: (28.5714%)&lt;BR/&gt; 1214: (14.2857%)&lt;BR/&gt; 2934: (7.14286%)&lt;BR/&gt; 2882: (7.14286%)&gt;];
}
705--706[label="1;1pkt 1fpkt"];
705--1695[label="1;1pkt 1fpkt"];
705--3114[label="1;1pkt 1fpkt"];
706--1695[label="1;1pkt 1fpkt"];
706--3114[label="1;1pkt 1fpkt"];
1695--3114[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="139.112.86.119" dst_port="2934" src_ip="82.42.212.8" src_port="1214"/>
      <filter dst_ip="139.112.86.119" dst_port="2882" src_ip="82.42.212.8" src_port="1214"/>
      <filter dst_ip="139.112.86.119" dst_port="1326" src_ip="152.58.10.193" src_port="4299"/>
      <filter dst_ip="139.112.86.119" dst_port="2355" src_ip="16.70.201.8" src_port="119"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0019,1.58876,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_177{
style=filled;
color=gray75;
729[label="139.112.89.81;d;3pkt 3fpkt", shape=diamond, color=yellow];
730[label="206.9.123.127;s;1pkt 1fpkt", shape=diamond, color=yellow];
1674[label="139.112.89.81;d;3pkt 3fpkt", shape=hexagon, color=black];
2787[label="206.9.123.127;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat177[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.144.231.36:123, 139.112.89.81:123}[33.3333%]&lt;BR/&gt;{17.20.204.91:1029, 139.112.89.81:137}[33.3333%]&lt;BR/&gt;{206.9.123.127:8012, 139.112.89.81:49157}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49157: (25%)&lt;BR/&gt; 8012: (25%)&lt;BR/&gt; 123: (25%)&lt;BR/&gt; 1029: (12.5%)&lt;BR/&gt; 137: (12.5%)&gt;];
}
729--730[label="1;1pkt 1fpkt"];
729--1674[label="1;3pkt 3fpkt"];
729--2787[label="1;1pkt 1fpkt"];
730--1674[label="1;1pkt 1fpkt"];
730--2787[label="1;1pkt 1fpkt"];
1674--2787[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="139.112.89.81" dst_port="49157" src_ip="206.9.123.127" src_port="8012"/>
      <filter dst_ip="139.112.89.81" dst_port="137" src_ip="17.20.204.91" src_port="1029"/>
      <filter dst_ip="139.112.89.81" dst_port="123" src_ip="200.144.231.36" src_port="123"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0019,1.58876,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_178{
style=filled;
color=gray75;
752[label="172.235.1.45;d;1pkt 1fpkt", shape=diamond, color=yellow];
753[label="212.108.31.178;s;1pkt 1fpkt", shape=diamond, color=yellow];
1755[label="172.235.1.45;d;1pkt 1fpkt", shape=hexagon, color=black];
3037[label="212.108.31.178;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat178[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.108.31.178:43766, 172.235.1.45:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43766: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
752--753[label="1;1pkt 1fpkt"];
752--1755[label="1;1pkt 1fpkt"];
752--3037[label="1;1pkt 1fpkt"];
753--1755[label="1;1pkt 1fpkt"];
753--3037[label="1;1pkt 1fpkt"];
1755--3037[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.235.1.45" dst_port="25" src_ip="212.108.31.178" src_port="43766"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319111" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746791,1.66389,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="204.135.159.50"/>
      <from sec="1060319371" usec="0"/>
      <to sec="1060319628" usec="0"/>
    </slice>
    <from sec="1060319371" usec="0"/>
    <to sec="1060319628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746791,1.66389,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_181{
style=filled;
color=gray75;
809[label="147.4.2.29;d;614pkt 614fpkt", shape=diamond, color=yellow];
810[label="17.9.1.181;s;531pkt 531fpkt", shape=diamond, color=yellow];
stat181[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.9.1.181:*, 147.4.2.29:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4729: (0.174672%)&lt;BR/&gt; 4720: (0.174672%)&lt;BR/&gt; 4627: (0.174672%)&lt;BR/&gt; 4610: (0.174672%)&lt;BR/&gt; 4603: (0.174672%)&gt;];
}
809--810[label="1;531pkt 531fpkt"];
</description>
    <slice>
      <filter dst_ip="147.4.2.29" src_ip="17.9.1.181"/>
    </slice>
    <from sec="1060318816" usec="0"/>
    <to sec="1060319628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746791,1.66389,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_182{
style=filled;
color=gray75;
648[label="196.189.62.92;d;1pkt 1fpkt", shape=diamond, color=yellow];
813[label="147.52.106.87;s;5pkt 5fpkt", shape=diamond, color=yellow];
stat182[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.52.106.87:0, 18.66.138.76:0}[20%]&lt;BR/&gt;{147.52.106.87:0, 82.192.145.77:0}[20%]&lt;BR/&gt;{147.52.106.87:0, 196.189.62.92:0}[20%]&lt;BR/&gt;{147.52.106.87:0, 216.53.201.93:0}[20%]&lt;BR/&gt;{147.52.106.87:0, 201.162.146.128:0}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
648--813[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.162.146.128" src_ip="147.52.106.87"/>
      <filter dst_ip="216.53.201.93" src_ip="147.52.106.87"/>
      <filter dst_ip="196.189.62.92" src_ip="147.52.106.87"/>
      <filter dst_ip="82.192.145.77" src_ip="147.52.106.87"/>
      <filter dst_ip="18.66.138.76" src_ip="147.52.106.87"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319579" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.794011,1.56228,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_184{
style=filled;
color=gray75;
870[label="148.239.157.192;d;1pkt 1fpkt", shape=diamond, color=yellow];
871[label="213.92.125.236;s;1pkt 1fpkt", shape=diamond, color=yellow];
3333[label="213.92.125.236;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3998[label="213.92.125.236;1pkt 1fpkt", shape=invtriangle, color=brown];
stat184[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.92.125.236:554, 148.239.157.192:1083}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1083: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
870--871[label="1;1pkt 1fpkt"];
870--3333[label="1;1pkt 1fpkt"];
870--3998[label="1;1pkt 1fpkt"];
871--3333[label="1;1pkt 1fpkt"];
871--3998[label="1;1pkt 1fpkt"];
3333--3998[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.239.157.192" dst_port="1083" src_ip="213.92.125.236" src_port="554"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.794011,1.56228,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_185{
style=filled;
color=gray75;
841[label="201.193.210.142;s;53pkt 53fpkt", shape=diamond, color=yellow];
905[label="215.173.61.160;d;8pkt 8fpkt", shape=diamond, color=yellow];
1381[label="200.112.57.121;d;10pkt 10fpkt", shape=diamond, color=yellow];
2866[label="201.193.210.142;60pkt 60fpkt", shape=pentagon, color=darkviolet];
3784[label="201.193.210.142;60pkt 60fpkt", shape=invtriangle, color=brown];
stat185[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.193.210.142:80, 200.21.106.238:*}[70%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62270: (1.04712%)&lt;BR/&gt; 62250: (1.04712%)&lt;BR/&gt; 62234: (1.04712%)&lt;BR/&gt; 60092: (1.04712%)&gt;];
}
841--905[label="1;8pkt 8fpkt"];
841--1381[label="1;10pkt 10fpkt"];
841--2866[label="1;53pkt 53fpkt"];
841--3784[label="1;53pkt 53fpkt"];
905--2866[label="1;8pkt 8fpkt"];
905--3784[label="1;8pkt 8fpkt"];
1381--2866[label="1;10pkt 10fpkt"];
1381--3784[label="1;10pkt 10fpkt"];
2866--3784[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_ip="200.21.106.238" src_ip="201.193.210.142" src_port="80"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0371,1.65774,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_186{
style=filled;
color=gray75;
843[label="214.82.203.170;s;1pkt 1fpkt", shape=diamond, color=yellow];
947[label="139.112.231.13;d;3pkt 3fpkt", shape=diamond, color=yellow];
1697[label="214.82.203.170;s;1pkt 1fpkt", shape=hexagon, color=black];
stat186[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.135.152.0:1863, 139.112.231.13:2799}[33.3333%]&lt;BR/&gt;{215.80.119.150:1982, 139.112.231.13:3969}[33.3333%]&lt;BR/&gt;{214.82.203.170:7470, 139.112.231.13:3998}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7470: (30%)&lt;BR/&gt; 3998: (30%)&lt;BR/&gt; 3969: (10%)&lt;BR/&gt; 2799: (10%)&lt;BR/&gt; 1982: (10%)&gt;];
}
843--947[label="1;1pkt 1fpkt"];
843--1697[label="1;1pkt 1fpkt"];
947--1697[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="139.112.231.13" dst_port="3998" src_ip="214.82.203.170" src_port="7470"/>
      <filter dst_ip="139.112.231.13" dst_port="3969" src_ip="215.80.119.150" src_port="1982"/>
      <filter dst_ip="139.112.231.13" dst_port="2799" src_ip="204.135.152.0" src_port="1863"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746791,1.66389,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_188{
style=filled;
color=gray75;
802[label="214.90.217.152;s;1pkt 1fpkt", shape=diamond, color=yellow];
1006[label="148.238.152.80;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat188[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.130.190.12:80, 148.238.152.80:33644}[50%]&lt;BR/&gt;{214.90.217.152:110, 148.238.152.80:33023}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33023: (33.3333%)&lt;BR/&gt; 110: (33.3333%)&lt;BR/&gt; 33644: (16.6667%)&lt;BR/&gt; 80: (16.6667%)&gt;];
}
802--1006[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.238.152.80" dst_port="33023" src_ip="214.90.217.152" src_port="110"/>
      <filter dst_ip="148.238.152.80" dst_port="33644" src_ip="215.130.190.12" src_port="80"/>
    </slice>
    <from sec="1060318807" usec="0"/>
    <to sec="1060319151" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746791,1.66389,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="139.112.146.246"/>
      <from sec="1060318800" usec="0"/>
      <to sec="1060319538" usec="0"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746791,1.66389,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="139.112.222.42"/>
      <from sec="1060318800" usec="0"/>
      <to sec="1060319537" usec="0"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319537" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746791,1.66389,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_191{
style=filled;
color=gray75;
946[label="214.82.203.170;d;1pkt 1fpkt", shape=diamond, color=yellow];
1066[label="139.112.231.13;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat191[shape=component, label=&lt;Rules:&lt;BR/&gt;{139.112.231.13:3998, 214.82.203.170:7470}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7470: (50%)&lt;BR/&gt; 3998: (50%)&gt;];
}
946--1066[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.82.203.170" dst_port="7470" src_ip="139.112.231.13" src_port="3998"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.994568,1.55812,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_192{
style=filled;
color=gray75;
915[label="139.112.20.23;s;63pkt 63fpkt", shape=diamond, color=yellow];
1068[label="218.75.36.48;d;63pkt 63fpkt", shape=diamond, color=yellow];
2189[label="139.112.20.23;70pkt 70fpkt", shape=pentagon, color=darkviolet];
3470[label="139.112.20.23;71pkt 71fpkt", shape=invtriangle, color=brown];
4064[label="139.112.20.23;70pkt 70fpkt", shape=invhouse, color=bisque];
stat192[shape=component, label=&lt;Rules:&lt;BR/&gt;{139.112.20.23:*, 218.75.36.48:80}[88.7324%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1098%)&lt;BR/&gt; 49219: (0.74184%)&lt;BR/&gt; 49218: (0.74184%)&lt;BR/&gt; 49217: (0.74184%)&lt;BR/&gt; 49216: (0.74184%)&gt;];
}
915--1068[label="1;63pkt 63fpkt"];
915--2189[label="1;63pkt 63fpkt"];
915--3470[label="1;63pkt 63fpkt"];
915--4064[label="1;63pkt 63fpkt"];
1068--2189[label="1;63pkt 63fpkt"];
1068--3470[label="1;63pkt 63fpkt"];
1068--4064[label="1;63pkt 63fpkt"];
2189--3470[label="1;70pkt 70fpkt"];
2189--4064[label="1;70pkt 70fpkt"];
3470--4064[label="1;70pkt 70fpkt"];
</description>
    <slice>
      <filter dst_ip="218.75.36.48" dst_port="80" src_ip="139.112.20.23"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746791,1.66389,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="201.162.146.128"/>
      <from sec="1060318804" usec="0"/>
      <to sec="1060319628" usec="0"/>
    </slice>
    <from sec="1060318804" usec="0"/>
    <to sec="1060319628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746791,1.66389,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_195{
style=filled;
color=gray75;
1025[label="147.164.158.249;d;8pkt 8fpkt", shape=diamond, color=yellow];
1159[label="217.76.144.179;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat195[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.206.178.77:*, 147.164.158.249:80}[37.5%]&lt;BR/&gt;{219.148.68.16:*, 147.164.158.249:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 10816: (11.1111%)&lt;BR/&gt; 45830: (5.55556%)&lt;BR/&gt; 43843: (5.55556%)&lt;BR/&gt; 43800: (5.55556%)&gt;];
}
1025--1159[label="1;1pkt 1fpkt"];
1025--3025[label="0.125;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.164.158.249" dst_port="80" src_ip="200.206.178.77"/>
      <filter dst_ip="147.164.158.249" dst_port="80" src_ip="219.148.68.16"/>
    </slice>
    <from sec="1060318884" usec="0"/>
    <to sec="1060319149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0019,1.58876,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_196{
style=filled;
color=gray75;
838[label="201.17.227.66;s;78pkt 78fpkt", shape=diamond, color=yellow];
912[label="192.203.57.158;d;1pkt 1fpkt", shape=diamond, color=yellow];
1165[label="16.212.45.87;d;119pkt 119fpkt", shape=diamond, color=yellow];
1166[label="139.112.84.20;s;135pkt 135fpkt", shape=diamond, color=yellow];
1292[label="219.38.152.58;d;53pkt 53fpkt", shape=diamond, color=yellow];
1628[label="201.17.227.66;s;18pkt 18fpkt", shape=hexagon, color=black];
1833[label="192.203.57.158;d;1pkt 1fpkt", shape=hexagon, color=black];
2311[label="139.112.41.46;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat196[shape=component, label=&lt;Rules:&lt;BR/&gt;{139.112.84.20:*, 16.212.45.87:80}[50.4237%]&lt;BR/&gt;{201.17.227.66:*, *:80}[31.7797%]&lt;BR/&gt;{*:*, 219.38.152.58:80}[22.0339%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1443%)&lt;BR/&gt; 59409: (0.488998%)&lt;BR/&gt; 58900: (0.366748%)&lt;BR/&gt; 58865: (0.366748%)&lt;BR/&gt; 58864: (0.366748%)&gt;];
}
838--912[label="1;1pkt 1fpkt"];
838--1292[label="0.584906;31pkt 31fpkt"];
838--1628[label="1;18pkt 18fpkt"];
838--1833[label="1;1pkt 1fpkt"];
838--2004[label="0.0384615;3pkt 3fpkt"];
838--2021[label="0.0384615;3pkt 3fpkt"];
838--2028[label="0.0384615;3pkt 3fpkt"];
912--1628[label="1;1pkt 1fpkt"];
912--1833[label="1;1pkt 1fpkt"];
1165--1166[label="1;119pkt 119fpkt"];
1166--1292[label="0.0377358;2pkt 2fpkt"];
1292--1628[label="0.444444;8pkt 8fpkt"];
1292--2004[label="0.169811;9pkt 9fpkt"];
1292--2021[label="0.169811;9pkt 9fpkt"];
1292--2028[label="0.169811;9pkt 9fpkt"];
1292--2311[label="0.25;1pkt 1fpkt"];
1628--1833[label="1;1pkt 1fpkt"];
1628--2004[label="0.166667;3pkt 3fpkt"];
1628--2021[label="0.166667;3pkt 3fpkt"];
1628--2028[label="0.166667;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="201.17.227.66"/>
      <filter dst_ip="219.38.152.58" dst_port="80"/>
      <filter dst_ip="16.212.45.87" dst_port="80" src_ip="139.112.84.20"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0019,1.58876,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_197{
style=filled;
color=gray75;
957[label="139.112.225.71;s;301pkt 301fpkt", shape=diamond, color=yellow];
1167[label="82.3.45.132;d;99pkt 99fpkt", shape=diamond, color=yellow];
1936[label="139.112.225.71;s;301pkt 301fpkt", shape=hexagon, color=black];
2450[label="139.112.225.71;301pkt 301fpkt", shape=pentagon, color=darkviolet];
stat197[shape=component, label=&lt;Rules:&lt;BR/&gt;{139.112.225.71:*, 82.3.45.132:80}[32.7815%]&lt;BR/&gt;{139.112.225.71:*, 82.3.45.128:80}[20.8609%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.8044%)&lt;BR/&gt; 8601: (1.1477%)&lt;BR/&gt; 7175: (1.0479%)&lt;BR/&gt; 1677: (0.199601%)&lt;BR/&gt; 1676: (0.199601%)&gt;];
}
957--1167[label="1;99pkt 99fpkt"];
957--1936[label="1;301pkt 301fpkt"];
957--2450[label="0.996678;300pkt 300fpkt"];
1167--1936[label="1;99pkt 99fpkt"];
1167--2450[label="1;99pkt 99fpkt"];
1936--2450[label="0.996678;300pkt 300fpkt"];
</description>
    <slice>
      <filter dst_ip="82.3.45.132" dst_port="80" src_ip="139.112.225.71"/>
      <filter dst_ip="82.3.45.128" dst_port="80" src_ip="139.112.225.71"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746791,1.66389,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_198{
style=filled;
color=gray75;
1026[label="148.238.35.114;d;5pkt 5fpkt", shape=diamond, color=yellow];
1171[label="82.215.84.148;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat198[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.197.128.28:80, 148.238.35.114:11114}[20%]&lt;BR/&gt;{82.201.170.68:80, 148.238.35.114:11116}[20%]&lt;BR/&gt;{201.175.65.171:80, 148.238.35.114:11118}[20%]&lt;BR/&gt;{82.215.84.148:80, 148.238.35.114:11120}[20%]&lt;BR/&gt;{82.215.84.148:80, 148.238.35.114:11126}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 11126: (14.2857%)&lt;BR/&gt; 11120: (14.2857%)&lt;BR/&gt; 11118: (7.14286%)&lt;BR/&gt; 11116: (7.14286%)&gt;];
}
1026--1171[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="148.238.35.114" dst_port="11126" src_ip="82.215.84.148" src_port="80"/>
      <filter dst_ip="148.238.35.114" dst_port="11120" src_ip="82.215.84.148" src_port="80"/>
      <filter dst_ip="148.238.35.114" dst_port="11118" src_ip="201.175.65.171" src_port="80"/>
      <filter dst_ip="148.238.35.114" dst_port="11116" src_ip="82.201.170.68" src_port="80"/>
      <filter dst_ip="148.238.35.114" dst_port="11114" src_ip="82.197.128.28" src_port="80"/>
    </slice>
    <from sec="1060319269" usec="0"/>
    <to sec="1060319581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746791,1.66389,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_199{
style=filled;
color=gray75;
1179[label="18.237.40.125;s;328pkt 328fpkt", shape=diamond, color=yellow];
stat199[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.237.40.125:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6588: (8.53659%)&lt;BR/&gt; 1080: (8.53659%)&lt;BR/&gt; 8080: (8.23171%)&lt;BR/&gt; 5490: (8.23171%)&lt;BR/&gt; 3128: (8.23171%)&gt;];
}
1179--2004[label="0.0121951;4pkt 4fpkt"];
1179--2021[label="0.0121951;4pkt 4fpkt"];
1179--2028[label="0.0121951;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="18.237.40.125"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746791,1.66389,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="139.112.10.66"/>
      <from sec="1060318801" usec="0"/>
      <to sec="1060319323" usec="0"/>
    </slice>
    <from sec="1060318801" usec="0"/>
    <to sec="1060319323" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0019,1.58876,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_201{
style=filled;
color=gray75;
831[label="200.50.162.71;d;54pkt 54fpkt", shape=diamond, color=yellow];
1229[label="215.183.120.1;s;1pkt 1fpkt", shape=diamond, color=yellow];
1819[label="215.183.120.1;s;1pkt 1fpkt", shape=hexagon, color=black];
1849[label="200.50.162.71;d;45pkt 45fpkt", shape=hexagon, color=black];
2041[label="215.183.120.1;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat201[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 200.50.162.71:3649}[94.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3649: (47.549%)&lt;BR/&gt; 43809: (2.45098%)&lt;BR/&gt; 3790: (1.47059%)&lt;BR/&gt; 2759: (1.47059%)&lt;BR/&gt; 65235: (0.980392%)&gt;];
}
831--1229[label="1;1pkt 1fpkt"];
831--1819[label="1;1pkt 1fpkt"];
831--1849[label="1;45pkt 45fpkt"];
831--2041[label="1;1pkt 1fpkt"];
1229--1819[label="1;1pkt 1fpkt"];
1229--1849[label="1;1pkt 1fpkt"];
1229--2041[label="1;1pkt 1fpkt"];
1819--1849[label="1;1pkt 1fpkt"];
1819--2041[label="1;1pkt 1fpkt"];
1849--2041[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.50.162.71" dst_port="3649"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0019,1.58876,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_203{
style=filled;
color=gray75;
1037[label="139.112.231.90;d;21pkt 21fpkt", shape=diamond, color=yellow];
1260[label="200.30.141.226;s;8pkt 8fpkt", shape=diamond, color=yellow];
1952[label="139.112.231.90;d;21pkt 21fpkt", shape=hexagon, color=black];
2047[label="201.126.24.2;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat203[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.30.141.226:*, 139.112.231.90:*}[38.0952%]&lt;BR/&gt;{175.202.247.5:80, 139.112.231.90:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 1755: (11.5385%)&lt;BR/&gt; 4588: (2.88462%)&lt;BR/&gt; 4569: (2.88462%)&lt;BR/&gt; 4558: (2.88462%)&gt;];
}
1037--1260[label="1;8pkt 8fpkt"];
1037--1952[label="1;21pkt 21fpkt"];
1037--2047[label="1;2pkt 2fpkt"];
1260--1952[label="1;8pkt 8fpkt"];
1952--2047[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="139.112.231.90" src_ip="200.30.141.226"/>
      <filter dst_ip="139.112.231.90" src_ip="175.202.247.5" src_port="80"/>
    </slice>
    <from sec="1060318978" usec="0"/>
    <to sec="1060319628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746791,1.66389,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="139.112.220.124"/>
      <from sec="1060318800" usec="0"/>
      <to sec="1060319615" usec="0"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319615" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0371,1.65774,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_207{
style=filled;
color=gray75;
1300[label="169.24.62.15;d;1pkt 1fpkt", shape=diamond, color=yellow];
1301[label="218.200.30.194;s;1pkt 1fpkt", shape=diamond, color=yellow];
1805[label="218.200.30.194;s;1pkt 1fpkt", shape=hexagon, color=black];
stat207[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.200.30.194:49251, 169.24.62.15:1615}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49251: (50%)&lt;BR/&gt; 1615: (50%)&gt;];
}
1300--1301[label="1;1pkt 1fpkt"];
1300--1805[label="1;1pkt 1fpkt"];
1301--1805[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.24.62.15" dst_port="1615" src_ip="218.200.30.194" src_port="49251"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0371,1.65774,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_208{
style=filled;
color=gray75;
1200[label="8.103.57.68;s;1pkt 1fpkt", shape=diamond, color=yellow];
1302[label="201.25.126.108;d;2pkt 2fpkt", shape=diamond, color=yellow];
1757[label="8.103.57.68;s;1pkt 1fpkt", shape=hexagon, color=black];
stat208[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.103.57.68:6699, 201.25.126.108:2808}[50%]&lt;BR/&gt;{9.162.67.244:6699, 201.25.126.108:1870}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 2808: (37.5%)&lt;BR/&gt; 1870: (12.5%)&gt;];
}
1200--1302[label="1;1pkt 1fpkt"];
1200--1757[label="1;1pkt 1fpkt"];
1302--1757[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.25.126.108" dst_port="1870" src_ip="9.162.67.244" src_port="6699"/>
      <filter dst_ip="201.25.126.108" dst_port="2808" src_ip="8.103.57.68" src_port="6699"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746791,1.66389,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="204.16.106.11"/>
      <from sec="1060318800" usec="0"/>
      <to sec="1060319535" usec="0"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319535" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746791,1.66389,502,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_211{
style=filled;
color=gray75;
1365[label="16.129.98.178;d;1pkt 1fpkt", shape=diamond, color=yellow];
1366[label="147.37.147.214;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat211[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.37.147.214:22, 16.129.98.178:1570}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1570: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
1365--1366[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="16.129.98.178" dst_port="1570" src_ip="147.37.147.214" src_port="22"/>
    </slice>
    <from sec="1060319187" usec="0"/>
    <to sec="1060319613" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0019,1.58876,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_212{
style=filled;
color=gray75;
1335[label="200.11.99.234;d;3pkt 3fpkt", shape=diamond, color=yellow];
1372[label="18.201.37.3;s;1pkt 1fpkt", shape=diamond, color=yellow];
1872[label="18.201.37.3;s;1pkt 1fpkt", shape=hexagon, color=black];
2054[label="18.201.37.3;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat212[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.135.152.1:1863, 200.11.99.234:4532}[33.3333%]&lt;BR/&gt;{18.201.37.3:0, 200.11.99.234:0}[33.3333%]&lt;BR/&gt;{204.135.159.69:1863, 200.11.99.234:4835}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (66.6667%)&lt;BR/&gt; 1863: (16.6667%)&lt;BR/&gt; 4835: (8.33333%)&lt;BR/&gt; 4532: (8.33333%)&gt;];
}
1335--1372[label="1;1pkt 1fpkt"];
1335--1872[label="1;1pkt 1fpkt"];
1335--2054[label="1;1pkt 1fpkt"];
1372--1872[label="1;1pkt 1fpkt"];
1372--2054[label="1;1pkt 1fpkt"];
1872--2054[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.11.99.234" dst_port="4835" src_ip="204.135.159.69" src_port="1863"/>
      <filter dst_ip="200.11.99.234" src_ip="18.201.37.3"/>
      <filter dst_ip="200.11.99.234" dst_port="4532" src_ip="204.135.152.1" src_port="1863"/>
    </slice>
    <from sec="1060318815" usec="0"/>
    <to sec="1060319615" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746791,1.66389,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="200.11.99.234"/>
      <from sec="1060318815" usec="0"/>
      <to sec="1060319615" usec="0"/>
    </slice>
    <from sec="1060318815" usec="0"/>
    <to sec="1060319615" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746791,1.66389,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="139.112.225.87"/>
      <from sec="1060318999" usec="0"/>
      <to sec="1060319610" usec="0"/>
    </slice>
    <from sec="1060318999" usec="0"/>
    <to sec="1060319610" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.697081,1.59517,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_216{
style=filled;
color=gray75;
1115[label="139.112.244.20;d;46pkt 46fpkt", shape=diamond, color=yellow];
1475[label="135.34.237.16;s;38pkt 38fpkt", shape=diamond, color=yellow];
2146[label="135.34.237.16;51pkt 51fpkt", shape=pentagon, color=darkviolet];
stat216[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.34.237.16:80, 139.112.244.20:*}[98.1132%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6296%)&lt;BR/&gt; 44508: (1.11111%)&lt;BR/&gt; 44507: (1.11111%)&lt;BR/&gt; 44506: (1.11111%)&lt;BR/&gt; 44505: (1.11111%)&gt;];
}
1115--1475[label="1;38pkt 38fpkt"];
1115--2146[label="0.956522;44pkt 44fpkt"];
1475--2146[label="0.973684;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_ip="139.112.244.20" src_ip="135.34.237.16" src_port="80"/>
    </slice>
    <from sec="1060318803" usec="0"/>
    <to sec="1060319686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746791,1.66389,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_217{
style=filled;
color=gray75;
1478[label="90.211.9.74;d;30pkt 30fpkt", shape=diamond, color=yellow];
1479[label="90.211.9.74;s;30pkt 30fpkt", shape=diamond, color=yellow];
stat217[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.211.9.74:13364, 90.211.9.74:*}[86.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13364: (43.3333%)&lt;BR/&gt; 0: (13.3333%)&lt;BR/&gt; 80: (3.33333%)&lt;BR/&gt; 49162: (1.66667%)&lt;BR/&gt; 13565: (1.66667%)&gt;];
}
1478--1479[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="90.211.9.74" src_ip="90.211.9.74" src_port="13364"/>
    </slice>
    <from sec="1060318804" usec="0"/>
    <to sec="1060319626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.697081,1.59517,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_219{
style=filled;
color=gray75;
1505[label="147.189.177.80;d;25pkt 25fpkt", shape=diamond, color=yellow];
1507[label="212.70.150.155;s;24pkt 24fpkt", shape=diamond, color=yellow];
2939[label="212.70.150.155;29pkt 29fpkt", shape=pentagon, color=darkviolet];
stat219[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.70.150.155:80, 147.189.177.80:*}[96.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50252: (1.92308%)&lt;BR/&gt; 50251: (1.92308%)&lt;BR/&gt; 50250: (1.92308%)&lt;BR/&gt; 50249: (1.92308%)&gt;];
}
1505--1507[label="1;24pkt 24fpkt"];
1505--2939[label="0.96;24pkt 24fpkt"];
1507--2939[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="147.189.177.80" src_ip="212.70.150.155" src_port="80"/>
    </slice>
    <from sec="1060319262" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746791,1.66389,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_220{
style=filled;
color=gray75;
1515[label="139.112.2.48;d;127pkt 127fpkt", shape=diamond, color=yellow];
1522[label="150.82.187.196;s;119pkt 119fpkt", shape=diamond, color=yellow];
stat220[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.82.187.196:80, 139.112.2.48:*}[93.7008%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5935%)&lt;BR/&gt; 50086: (0.406504%)&lt;BR/&gt; 50085: (0.406504%)&lt;BR/&gt; 50084: (0.406504%)&lt;BR/&gt; 50082: (0.406504%)&gt;];
}
1515--1522[label="1;119pkt 119fpkt"];
</description>
    <slice>
      <filter dst_ip="139.112.2.48" src_ip="150.82.187.196" src_port="80"/>
    </slice>
    <from sec="1060319406" usec="0"/>
    <to sec="1060319628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.697081,1.59517,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_221{
style=filled;
color=gray75;
1297[label="200.11.98.20;s;231pkt 231fpkt", shape=diamond, color=yellow];
1525[label="216.53.24.238;d;1pkt 1fpkt", shape=diamond, color=yellow];
2172[label="200.11.98.20;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat221[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.11.98.20:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1297--1525[label="1;1pkt 1fpkt"];
1297--2172[label="1;1pkt 1fpkt"];
1525--2172[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="200.11.98.20"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746791,1.66389,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="200.11.98.117"/>
      <from sec="1060318800" usec="0"/>
      <to sec="1060319628" usec="0"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746791,1.66389,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_224{
style=filled;
color=gray75;
1480[label="172.235.28.82;d;4pkt 4fpkt", shape=diamond, color=yellow];
1546[label="209.54.193.137;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat224[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.214.178.43:3387, 172.235.28.82:1434}[25%]&lt;BR/&gt;{16.70.200.110:23, 172.235.28.82:4082}[25%]&lt;BR/&gt;{209.54.193.137:20, 172.235.28.82:3220}[25%]&lt;BR/&gt;{209.54.193.137:21, 172.235.28.82:3219}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3220: (16.6667%)&lt;BR/&gt; 3219: (16.6667%)&lt;BR/&gt; 21: (16.6667%)&lt;BR/&gt; 20: (16.6667%)&lt;BR/&gt; 4082: (8.33333%)&gt;];
}
1480--1546[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="172.235.28.82" dst_port="3219" src_ip="209.54.193.137" src_port="21"/>
      <filter dst_ip="172.235.28.82" dst_port="3220" src_ip="209.54.193.137" src_port="20"/>
      <filter dst_ip="172.235.28.82" dst_port="4082" src_ip="16.70.200.110" src_port="23"/>
      <filter dst_ip="172.235.28.82" dst_port="1434" src_ip="201.214.178.43" src_port="3387"/>
    </slice>
    <from sec="1060318804" usec="0"/>
    <to sec="1060319626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0019,1.58876,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_225{
style=filled;
color=gray75;
1516[label="139.112.2.48;s;140pkt 140fpkt", shape=diamond, color=yellow];
1562[label="150.82.187.196;d;120pkt 120fpkt", shape=diamond, color=yellow];
1926[label="139.112.2.48;s;98pkt 98fpkt", shape=hexagon, color=black];
2316[label="139.112.2.48;145pkt 145fpkt", shape=pentagon, color=darkviolet];
stat225[shape=component, label=&lt;Rules:&lt;BR/&gt;{139.112.2.48:*, 150.82.187.196:80}[83.5616%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3042%)&lt;BR/&gt; 50042: (0.397614%)&lt;BR/&gt; 50041: (0.397614%)&lt;BR/&gt; 50040: (0.397614%)&lt;BR/&gt; 50039: (0.397614%)&gt;];
}
1516--1562[label="1;120pkt 120fpkt"];
1516--1926[label="1;98pkt 98fpkt"];
1516--2316[label="0.992857;139pkt 139fpkt"];
1562--1926[label="0.795918;78pkt 78fpkt"];
1562--2316[label="0.991667;119pkt 119fpkt"];
1926--2316[label="0.989796;97pkt 97fpkt"];
</description>
    <slice>
      <filter dst_ip="150.82.187.196" dst_port="80" src_ip="139.112.2.48"/>
    </slice>
    <from sec="1060319406" usec="0"/>
    <to sec="1060319694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746791,1.66389,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_226{
style=filled;
color=gray75;
1559[label="192.35.95.236;d;184pkt 184fpkt", shape=diamond, color=yellow];
1568[label="200.126.1.14;s;180pkt 180fpkt", shape=diamond, color=yellow];
stat226[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.126.1.14:*, 192.35.95.236:80}[97.8261%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 39716: (0.274725%)&lt;BR/&gt; 39715: (0.274725%)&lt;BR/&gt; 39714: (0.274725%)&lt;BR/&gt; 39713: (0.274725%)&gt;];
}
1559--1568[label="1;180pkt 180fpkt"];
</description>
    <slice>
      <filter dst_ip="192.35.95.236" dst_port="80" src_ip="200.126.1.14"/>
    </slice>
    <from sec="1060319435" usec="0"/>
    <to sec="1060319624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0019,1.58876,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_229{
style=filled;
color=gray75;
696[label="82.34.218.133;s;2pkt 2fpkt", shape=diamond, color=yellow];
1597[label="82.34.218.133;s;2pkt 2fpkt", shape=hexagon, color=black];
2825[label="82.34.218.133;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat229[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.34.218.133:28290, 148.238.113.28:34744}[50%]&lt;BR/&gt;{82.34.218.133:28290, 148.238.113.28:34813}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 28290: (50%)&lt;BR/&gt; 34744: (30%)&lt;BR/&gt; 34813: (20%)&gt;];
}
696--1597[label="1;2pkt 2fpkt"];
696--2825[label="1;1pkt 1fpkt"];
1597--2825[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.238.113.28" dst_port="34813" src_ip="82.34.218.133" src_port="28290"/>
      <filter dst_ip="148.238.113.28" dst_port="34744" src_ip="82.34.218.133" src_port="28290"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060318880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0371,1.65774,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_232{
style=filled;
color=gray75;
886[label="215.180.11.24;s;747pkt 747fpkt", shape=diamond, color=yellow];
1644[label="215.180.11.24;s;747pkt 747fpkt", shape=hexagon, color=black];
stat232[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.180.11.24:0, *:0}[51.2718%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (51.2718%)&lt;BR/&gt; 1433: (6.96118%)&lt;BR/&gt; 21: (5.22088%)&lt;BR/&gt; 137: (4.083%)&lt;BR/&gt; 445: (2.27577%)&gt;];
}
886--1644[label="1;747pkt 747fpkt"];
886--2015[label="0.00401606;3pkt 3fpkt"];
886--2016[label="0.00267738;2pkt 2fpkt"];
886--2017[label="0.00267738;2pkt 2fpkt"];
1644--2015[label="0.00401606;3pkt 3fpkt"];
1644--2016[label="0.00267738;2pkt 2fpkt"];
1644--2017[label="0.00267738;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="215.180.11.24"/>
    </slice>
    <from sec="1060318801" usec="0"/>
    <to sec="1060319628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0371,1.65774,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_234{
style=filled;
color=gray75;
775[label="148.238.34.39;d;4pkt 4fpkt", shape=diamond, color=yellow];
776[label="144.46.68.33;s;4pkt 4fpkt", shape=diamond, color=yellow];
1009[label="148.238.88.89;d;3pkt 3fpkt", shape=diamond, color=yellow];
1678[label="144.46.68.33;s;4pkt 4fpkt", shape=hexagon, color=black];
stat234[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.46.68.33:210, *:*}[44.4444%]&lt;BR/&gt;{144.46.42.4:80, 148.238.34.39:*}[33.3333%]&lt;BR/&gt;{*:3531, 148.238.88.89:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 210: (33.3333%)&lt;BR/&gt; 2905: (10%)&lt;BR/&gt; 2489: (10%)&lt;BR/&gt; 80: (10%)&lt;BR/&gt; 32937: (6.66667%)&gt;];
}
775--776[label="0.25;1pkt 1fpkt"];
775--1678[label="0.25;1pkt 1fpkt"];
776--1009[label="0.333333;1pkt 1fpkt"];
776--1678[label="1;4pkt 4fpkt"];
1009--1678[label="0.333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="144.46.68.33" src_port="210"/>
      <filter dst_ip="148.238.88.89" src_port="3531"/>
      <filter dst_ip="148.238.34.39" src_ip="144.46.42.4" src_port="80"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319613" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0019,1.58876,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_235{
style=filled;
color=gray75;
1147[label="139.112.231.68;s;91pkt 91fpkt", shape=diamond, color=yellow];
1736[label="139.112.231.68;s;86pkt 86fpkt", shape=hexagon, color=black];
2432[label="139.112.231.68;107pkt 107fpkt", shape=pentagon, color=darkviolet];
stat235[shape=component, label=&lt;Rules:&lt;BR/&gt;{139.112.231.68:*, 19.108.159.16:80}[23.3645%]&lt;BR/&gt;{139.112.231.68:*, 19.108.138.221:80}[23.3645%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1972: (0.528169%)&lt;BR/&gt; 1971: (0.528169%)&lt;BR/&gt; 1970: (0.528169%)&lt;BR/&gt; 1969: (0.528169%)&gt;];
}
1147--1736[label="1;86pkt 86fpkt"];
1147--2432[label="1;91pkt 91fpkt"];
1736--2432[label="1;86pkt 86fpkt"];
</description>
    <slice>
      <filter dst_ip="19.108.138.221" dst_port="80" src_ip="139.112.231.68"/>
      <filter dst_ip="19.108.159.16" dst_port="80" src_ip="139.112.231.68"/>
    </slice>
    <from sec="1060318859" usec="0"/>
    <to sec="1060319682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.876879,1.69328,503,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="82.215.84.148"/>
      <from sec="1060319052" usec="0"/>
      <to sec="1060319126" usec="0"/>
    </slice>
    <from sec="1060319052" usec="0"/>
    <to sec="1060319126" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746791,1.66389,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_237{
style=filled;
color=gray75;
1007[label="201.17.212.26;s;262pkt 262fpkt", shape=diamond, color=yellow];
1380[label="219.147.181.33;d;58pkt 58fpkt", shape=diamond, color=yellow];
stat237[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.17.212.26:*, *:53}[28.2443%]&lt;BR/&gt;{201.17.212.26:*, 219.147.181.33:80}[22.5191%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.3438%)&lt;BR/&gt; 53: (11.5625%)&lt;BR/&gt; 443: (7.65625%)&lt;BR/&gt; 0: (1.5625%)&lt;BR/&gt; 1863: (0.9375%)&gt;];
}
1007--1380[label="1;58pkt 58fpkt"];
1007--1750[label="0.0333333;1pkt 1fpkt"];
1007--2003[label="0.00763359;2pkt 2fpkt"];
1007--2004[label="0.0267176;7pkt 7fpkt"];
1007--2021[label="0.0267176;7pkt 7fpkt"];
1007--2028[label="0.0267176;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="201.17.212.26"/>
      <filter dst_ip="219.147.181.33" dst_port="80" src_ip="201.17.212.26"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0019,1.58876,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_239{
style=filled;
color=gray75;
1201[label="172.235.38.131;d;112pkt 112fpkt", shape=diamond, color=yellow];
1202[label="216.128.122.189;s;112pkt 112fpkt", shape=diamond, color=yellow];
1807[label="172.235.38.131;d;107pkt 107fpkt", shape=hexagon, color=black];
3097[label="216.128.122.189;111pkt 111fpkt", shape=pentagon, color=darkviolet];
stat239[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.128.122.189:*, 172.235.38.131:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 4988: (0.452489%)&lt;BR/&gt; 4968: (0.452489%)&lt;BR/&gt; 4935: (0.452489%)&lt;BR/&gt; 4905: (0.452489%)&gt;];
}
1201--1202[label="1;112pkt 112fpkt"];
1201--1807[label="1;107pkt 107fpkt"];
1201--3097[label="1;111pkt 111fpkt"];
1202--1807[label="1;107pkt 107fpkt"];
1202--3097[label="1;111pkt 111fpkt"];
1807--3097[label="0.990654;106pkt 106fpkt"];
</description>
    <slice>
      <filter dst_ip="172.235.38.131" dst_port="25" src_ip="216.128.122.189"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319391" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0371,1.65774,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_241{
style=filled;
color=gray75;
998[label="213.71.28.153;s;6pkt 6fpkt", shape=diamond, color=yellow];
1817[label="213.71.28.153;s;6pkt 6fpkt", shape=hexagon, color=black];
stat241[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.71.28.153:80, 192.35.95.177:*}[66.6667%]&lt;BR/&gt;{213.71.28.153:80, 169.92.214.232:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3033: (8.33333%)&lt;BR/&gt; 3031: (8.33333%)&lt;BR/&gt; 1284: (8.33333%)&lt;BR/&gt; 1282: (8.33333%)&gt;];
}
998--1817[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="192.35.95.177" src_ip="213.71.28.153" src_port="80"/>
      <filter dst_ip="169.92.214.232" src_ip="213.71.28.153" src_port="80"/>
    </slice>
    <from sec="1060318803" usec="0"/>
    <to sec="1060319194" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0019,1.58876,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_244{
style=filled;
color=gray75;
882[label="139.112.147.36;d;4pkt 4fpkt", shape=diamond, color=yellow];
883[label="214.82.203.180;s;1pkt 1fpkt", shape=diamond, color=yellow];
1857[label="139.112.147.36;d;2pkt 2fpkt", shape=hexagon, color=black];
1892[label="214.82.203.180;s;1pkt 1fpkt", shape=hexagon, color=black];
3006[label="215.202.154.172;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat244[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.135.153.67:1863, 139.112.147.36:1035}[25%]&lt;BR/&gt;{219.27.170.78:80, 139.112.147.36:1346}[25%]&lt;BR/&gt;{215.202.154.172:4150, 139.112.147.36:1353}[25%]&lt;BR/&gt;{214.82.203.180:8200, 139.112.147.36:1062}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8200: (22.2222%)&lt;BR/&gt; 1062: (22.2222%)&lt;BR/&gt; 4150: (11.1111%)&lt;BR/&gt; 1863: (11.1111%)&lt;BR/&gt; 1353: (11.1111%)&gt;];
}
882--883[label="1;1pkt 1fpkt"];
882--1857[label="1;2pkt 2fpkt"];
882--1892[label="1;1pkt 1fpkt"];
882--3006[label="1;1pkt 1fpkt"];
883--1857[label="1;1pkt 1fpkt"];
883--1892[label="1;1pkt 1fpkt"];
1857--1892[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="139.112.147.36" dst_port="1062" src_ip="214.82.203.180" src_port="8200"/>
      <filter dst_ip="139.112.147.36" dst_port="1353" src_ip="215.202.154.172" src_port="4150"/>
      <filter dst_ip="139.112.147.36" dst_port="1346" src_ip="219.27.170.78" src_port="80"/>
      <filter dst_ip="139.112.147.36" dst_port="1035" src_ip="204.135.153.67" src_port="1863"/>
    </slice>
    <from sec="1060318801" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0371,1.65774,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_245{
style=filled;
color=gray75;
1215[label="216.52.1.109;s;859pkt 859fpkt", shape=diamond, color=yellow];
1858[label="216.52.1.109;s;679pkt 679fpkt", shape=hexagon, color=black];
stat245[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.52.1.109:80, 147.94.152.20:*}[22.0023%]&lt;BR/&gt;{216.52.1.109:80, 147.37.116.112:*}[21.4203%]&lt;BR/&gt;{216.52.1.109:80, 169.24.16.76:*}[20.4889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64732: (0.130039%)&lt;BR/&gt; 64642: (0.130039%)&lt;BR/&gt; 63212: (0.130039%)&lt;BR/&gt; 46728: (0.130039%)&gt;];
}
1215--1858[label="1;679pkt 679fpkt"];
</description>
    <slice>
      <filter dst_ip="147.94.152.20" src_ip="216.52.1.109" src_port="80"/>
      <filter dst_ip="147.37.116.112" src_ip="216.52.1.109" src_port="80"/>
      <filter dst_ip="169.24.16.76" src_ip="216.52.1.109" src_port="80"/>
    </slice>
    <from sec="1060318801" usec="0"/>
    <to sec="1060319628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0371,1.65774,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_250{
style=filled;
color=gray75;
1218[label="192.229.224.38;s;207pkt 207fpkt", shape=diamond, color=yellow];
1894[label="192.229.224.38;s;190pkt 190fpkt", shape=hexagon, color=black];
stat250[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.229.224.38:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50.2519%)&lt;BR/&gt; 4861: (0.503778%)&lt;BR/&gt; 3005: (0.503778%)&lt;BR/&gt; 1574: (0.503778%)&lt;BR/&gt; 1316: (0.503778%)&gt;];
}
1218--1378[label="0.00483092;1pkt 1fpkt"];
1218--1526[label="0.00483092;1pkt 1fpkt"];
1218--1531[label="0.00483092;1pkt 1fpkt"];
1218--1747[label="0.00483092;1pkt 1fpkt"];
1218--1785[label="0.00483092;1pkt 1fpkt"];
1218--1894[label="1;190pkt 190fpkt"];
1218--1940[label="0.00483092;1pkt 1fpkt"];
1218--1941[label="0.00483092;1pkt 1fpkt"];
1218--2003[label="0.00483092;1pkt 1fpkt"];
1894--1940[label="0.00526316;1pkt 1fpkt"];
1894--1941[label="0.00526316;1pkt 1fpkt"];
1894--2003[label="0.00526316;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="192.229.224.38" src_port="53"/>
    </slice>
    <from sec="1060318801" usec="0"/>
    <to sec="1060319621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0371,1.65774,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_251{
style=filled;
color=gray75;
1219[label="82.219.148.241;s;867pkt 867fpkt", shape=diamond, color=yellow];
1896[label="82.219.148.241;s;772pkt 772fpkt", shape=hexagon, color=black];
stat251[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.219.148.241:80, 147.94.230.193:*}[21.4533%]&lt;BR/&gt;{82.219.148.241:80, 147.218.218.134:*}[21.3379%]&lt;BR/&gt;{82.219.148.241:80, 147.37.116.112:*}[20.2999%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3552: (0.183038%)&lt;BR/&gt; 3243: (0.183038%)&lt;BR/&gt; 62352: (0.122026%)&lt;BR/&gt; 55770: (0.122026%)&gt;];
}
1219--1896[label="1;772pkt 772fpkt"];
</description>
    <slice>
      <filter dst_ip="147.94.230.193" src_ip="82.219.148.241" src_port="80"/>
      <filter dst_ip="147.218.218.134" src_ip="82.219.148.241" src_port="80"/>
      <filter dst_ip="147.37.116.112" src_ip="82.219.148.241" src_port="80"/>
    </slice>
    <from sec="1060318802" usec="0"/>
    <to sec="1060319626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0019,1.58876,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_254{
style=filled;
color=gray75;
1008[label="81.36.121.97;s;187pkt 187fpkt", shape=diamond, color=yellow];
1044[label="172.235.10.202;d;180pkt 180fpkt", shape=diamond, color=yellow];
1130[label="172.235.0.187;d;86pkt 86fpkt", shape=diamond, color=yellow];
1177[label="16.142.24.190;s;150pkt 150fpkt", shape=diamond, color=yellow];
1330[label="172.235.122.175;d;71pkt 71fpkt", shape=diamond, color=yellow];
1409[label="172.235.122.168;d;55pkt 55fpkt", shape=diamond, color=yellow];
1784[label="16.142.24.190;s;103pkt 103fpkt", shape=hexagon, color=black];
1903[label="172.235.122.175;d;63pkt 63fpkt", shape=hexagon, color=black];
2957[label="214.84.253.160;18pkt 18fpkt", shape=pentagon, color=darkviolet];
stat254[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.142.24.190:*, 172.235.10.202:25}[36.6995%]&lt;BR/&gt;{81.36.121.97:25, *:*}[22.9064%]&lt;BR/&gt;{81.36.121.97:*, 172.235.0.187:25}[22.6601%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.3976%)&lt;BR/&gt; 53: (0.383352%)&lt;BR/&gt; 2956: (0.328587%)&lt;BR/&gt; 137: (0.328587%)&lt;BR/&gt; 2707: (0.273823%)&gt;];
}
1008--1130[label="0.965116;83pkt 83fpkt"];
1008--1330[label="0.661972;47pkt 47fpkt"];
1008--1409[label="0.781818;43pkt 43fpkt"];
1008--1903[label="0.619048;39pkt 39fpkt"];
1044--1134[label="0.0147059;1pkt 1fpkt"];
1044--1177[label="1;150pkt 150fpkt"];
1044--1715[label="0.0384615;2pkt 2fpkt"];
1044--1784[label="1;103pkt 103fpkt"];
1044--2004[label="0.00555556;1pkt 1fpkt"];
1044--2010[label="0.00555556;1pkt 1fpkt"];
1044--2015[label="0.00555556;1pkt 1fpkt"];
1044--2021[label="0.00555556;1pkt 1fpkt"];
1044--2028[label="0.00555556;1pkt 1fpkt"];
1044--2516[label="0.0714286;1pkt 1fpkt"];
1044--2957[label="0.944444;17pkt 17fpkt"];
1044--3253[label="0.0144928;1pkt 1fpkt"];
1044--4297[label="0.0147059;1pkt 1fpkt"];
1130--1551[label="0.0136986;1pkt 1fpkt"];
1130--3235[label="0.0131579;1pkt 1fpkt"];
1177--1784[label="1;103pkt 103fpkt"];
1177--2010[label="0.00666667;1pkt 1fpkt"];
1177--2015[label="0.00666667;1pkt 1fpkt"];
1330--1417[label="0.0294118;1pkt 1fpkt"];
1330--1424[label="0.0434783;1pkt 1fpkt"];
1330--1715[label="0.0384615;2pkt 2fpkt"];
1330--1903[label="1;63pkt 63fpkt"];
1330--1911[label="0.047619;1pkt 1fpkt"];
1330--2481[label="0.0277778;1pkt 1fpkt"];
1330--2946[label="0.142857;2pkt 2fpkt"];
1330--3253[label="0.0289855;2pkt 2fpkt"];
1330--3611[label="0.0277778;1pkt 1fpkt"];
1330--3824[label="0.142857;2pkt 2fpkt"];
1330--4297[label="0.0294118;2pkt 2fpkt"];
1409--2957[label="0.0555556;1pkt 1fpkt"];
1409--3228[label="0.125;1pkt 1fpkt"];
1784--2010[label="0.00970874;1pkt 1fpkt"];
1784--2015[label="0.00970874;1pkt 1fpkt"];
1903--1911[label="0.047619;1pkt 1fpkt"];
1903--2481[label="0.0277778;1pkt 1fpkt"];
1903--2946[label="0.142857;2pkt 2fpkt"];
1903--3253[label="0.031746;2pkt 2fpkt"];
1903--3611[label="0.0277778;1pkt 1fpkt"];
1903--3824[label="0.142857;2pkt 2fpkt"];
1903--4297[label="0.031746;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="81.36.121.97" src_port="25"/>
      <filter dst_ip="172.235.0.187" dst_port="25" src_ip="81.36.121.97"/>
      <filter dst_ip="172.235.10.202" dst_port="25" src_ip="16.142.24.190"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0019,1.58876,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_256{
style=filled;
color=gray75;
1467[label="200.50.175.208;d;60pkt 60fpkt", shape=diamond, color=yellow];
1939[label="200.50.175.208;d;60pkt 60fpkt", shape=hexagon, color=black];
3214[label="20.42.111.207;9pkt 9fpkt", shape=pentagon, color=darkviolet];
stat256[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 200.50.175.208:1214}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (31.7829%)&lt;BR/&gt; 2227: (8.91473%)&lt;BR/&gt; 3694: (3.87597%)&lt;BR/&gt; 1235: (3.87597%)&lt;BR/&gt; 3462: (1.16279%)&gt;];
}
1467--1939[label="1;60pkt 60fpkt"];
1467--3214[label="1;9pkt 9fpkt"];
1939--3214[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="200.50.175.208" dst_port="1214"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0019,1.58876,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_257{
style=filled;
color=gray75;
1013[label="82.220.83.85;d;2pkt 2fpkt", shape=diamond, color=yellow];
1048[label="147.37.146.26;s;1492pkt 1492fpkt", shape=diamond, color=yellow];
1949[label="82.220.83.85;d;2pkt 2fpkt", shape=hexagon, color=black];
2062[label="169.24.63.4;191pkt 191fpkt", shape=pentagon, color=darkviolet];
stat257[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.37.146.26:0, *:0}[88.5324%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.8814%)&lt;BR/&gt; 59506: (0.0592768%)&lt;BR/&gt; 53: (0.0592768%)&gt;];
}
1013--1048[label="0.5;1pkt 1fpkt"];
1013--1949[label="1;2pkt 2fpkt"];
1013--2062[label="0.5;1pkt 1fpkt"];
1048--1949[label="0.5;1pkt 1fpkt"];
1949--2062[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="147.37.146.26"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0371,1.65774,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_258{
style=filled;
color=gray75;
1498[label="139.112.229.46;s;76pkt 76fpkt", shape=diamond, color=yellow];
1954[label="139.112.229.46;s;76pkt 76fpkt", shape=hexagon, color=black];
stat258[shape=component, label=&lt;Rules:&lt;BR/&gt;{139.112.229.46:*, 221.160.115.95:8080}[50%]&lt;BR/&gt;{139.112.229.46:*, *:80}[30.2632%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (25%)&lt;BR/&gt; 80: (15.1316%)&lt;BR/&gt; 24315: (9.21053%)&lt;BR/&gt; 50828: (0.657895%)&lt;BR/&gt; 50827: (0.657895%)&gt;];
}
1498--1954[label="1;76pkt 76fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="139.112.229.46"/>
      <filter dst_ip="221.160.115.95" dst_port="8080" src_ip="139.112.229.46"/>
    </slice>
    <from sec="1060319183" usec="0"/>
    <to sec="1060319616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0019,1.58876,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_259{
style=filled;
color=gray75;
1035[label="169.92.205.45;d;111pkt 111fpkt", shape=diamond, color=yellow];
1040[label="19.108.136.148;s;93pkt 93fpkt", shape=diamond, color=yellow];
1344[label="19.108.136.9;s;185pkt 185fpkt", shape=diamond, color=yellow];
1356[label="147.189.177.133;d;204pkt 204fpkt", shape=diamond, color=yellow];
1511[label="21.82.112.219;s;86pkt 86fpkt", shape=diamond, color=yellow];
1835[label="19.108.136.9;s;112pkt 112fpkt", shape=hexagon, color=black];
1957[label="21.82.112.219;s;86pkt 86fpkt", shape=hexagon, color=black];
2095[label="19.108.136.9;194pkt 194fpkt", shape=pentagon, color=darkviolet];
2202[label="21.106.213.25;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2429[label="204.135.153.68;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3327[label="204.6.94.235;22pkt 22fpkt", shape=pentagon, color=darkviolet];
stat259[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 147.189.177.133:*}[46.7849%]&lt;BR/&gt;{19.108.136.9:80, 169.92.205.45:*}[25.9424%]&lt;BR/&gt;{19.108.136.148:80, *:*}[20.6208%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5924%)&lt;BR/&gt; 1863: (0.452899%)&lt;BR/&gt; 3127: (0.181159%)&lt;BR/&gt; 3120: (0.181159%)&lt;BR/&gt; 3118: (0.181159%)&gt;];
}
1035--1040[label="0.301075;28pkt 28fpkt"];
1035--1090[label="0.0107527;1pkt 1fpkt"];
1035--1344[label="0.594595;66pkt 66fpkt"];
1035--2095[label="0.594595;66pkt 66fpkt"];
1040--1356[label="0.225806;21pkt 21fpkt"];
1040--1681[label="0.0430108;4pkt 4fpkt"];
1344--1356[label="0.291892;54pkt 54fpkt"];
1344--1835[label="1;112pkt 112fpkt"];
1344--2095[label="0.978378;181pkt 181fpkt"];
1356--1511[label="1;86pkt 86fpkt"];
1356--1835[label="0.482143;54pkt 54fpkt"];
1356--1957[label="1;86pkt 86fpkt"];
1356--2095[label="0.278351;54pkt 54fpkt"];
1356--2202[label="1;6pkt 6fpkt"];
1356--2273[label="0.0212766;1pkt 1fpkt"];
1356--2429[label="0.2;1pkt 1fpkt"];
1356--3327[label="0.545455;12pkt 12fpkt"];
1511--1957[label="1;86pkt 86fpkt"];
1835--2095[label="0.964286;108pkt 108fpkt"];
</description>
    <slice>
      <filter src_ip="19.108.136.148" src_port="80"/>
      <filter dst_ip="147.189.177.133" src_port="80"/>
      <filter dst_ip="169.92.205.45" src_ip="19.108.136.9" src_port="80"/>
    </slice>
    <from sec="1060318804" usec="0"/>
    <to sec="1060319698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.183.128.1"/>
    </slice>
    <from sec="1060319110" usec="0"/>
    <to sec="1060319132" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536673,1.5807,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_265{
style=filled;
color=gray75;
84[label="216.56.13.2s;58pkt 58fpkt", shape=rectangle, color=red];
2046[label="216.56.13.2;164pkt 164fpkt", shape=pentagon, color=darkviolet];
stat265[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.56.13.2:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
84--2046[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="216.56.13.2" src_port="1027"/>
    </slice>
    <from sec="1060319309" usec="0"/>
    <to sec="1060319336" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889528,1.5433,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_266{
style=filled;
color=gray75;
86[label="216.49.103.2s;151pkt 151fpkt", shape=rectangle, color=red];
2049[label="216.49.103.2;247pkt 247fpkt", shape=pentagon, color=darkviolet];
3409[label="216.49.103.2;246pkt 246fpkt", shape=invtriangle, color=brown];
4034[label="216.49.103.2;246pkt 246fpkt", shape=invhouse, color=bisque];
stat266[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.49.103.2:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
86--2049[label="1;151pkt 151fpkt"];
86--3409[label="1;151pkt 151fpkt"];
86--4034[label="1;151pkt 151fpkt"];
2049--3409[label="1;246pkt 246fpkt"];
2049--4034[label="1;246pkt 246fpkt"];
3409--4034[label="1;246pkt 246fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="216.49.103.2" src_port="1026"/>
    </slice>
    <from sec="1060319080" usec="0"/>
    <to sec="1060319119" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.697081,1.59517,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_267{
style=filled;
color=gray75;
1305[label="204.135.159.2;s;4pkt 4fpkt", shape=diamond, color=yellow];
2051[label="204.135.159.2;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat267[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.135.159.2:1863, 200.11.120.51:3066}[25%]&lt;BR/&gt;{204.135.159.2:1863, 169.92.20.58:3461}[25%]&lt;BR/&gt;{204.135.159.2:1863, 169.92.20.59:4040}[25%]&lt;BR/&gt;{204.135.159.2:1863, 147.189.89.85:2400}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3461: (14.2857%)&lt;BR/&gt; 3066: (14.2857%)&lt;BR/&gt; 2400: (14.2857%)&lt;BR/&gt; 4040: (7.14286%)&gt;];
}
1305--2051[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="147.189.89.85" dst_port="2400" src_ip="204.135.159.2" src_port="1863"/>
      <filter dst_ip="169.92.20.59" dst_port="4040" src_ip="204.135.159.2" src_port="1863"/>
      <filter dst_ip="169.92.20.58" dst_port="3461" src_ip="204.135.159.2" src_port="1863"/>
      <filter dst_ip="200.11.120.51" dst_port="3066" src_ip="204.135.159.2" src_port="1863"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536673,1.5807,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_268{
style=filled;
color=gray75;
88[label="8.161.221.3s;55pkt 55fpkt", shape=rectangle, color=red];
2059[label="8.161.221.3;203pkt 203fpkt", shape=pentagon, color=darkviolet];
stat268[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.161.221.3:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
88--2059[label="1;55pkt 55fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="8.161.221.3" src_port="1027"/>
    </slice>
    <from sec="1060319261" usec="0"/>
    <to sec="1060319294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536673,1.5807,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_269{
style=filled;
color=gray75;
89[label="216.94.93.4s;160pkt 160fpkt", shape=rectangle, color=red];
2065[label="216.94.93.4;160pkt 160fpkt", shape=pentagon, color=darkviolet];
stat269[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.94.93.4:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
89--2065[label="1;160pkt 160fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="216.94.93.4" src_port="1027"/>
    </slice>
    <from sec="1060319539" usec="0"/>
    <to sec="1060319564" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.21.70.5"/>
    </slice>
    <from sec="1060319223" usec="0"/>
    <to sec="1060319580" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536673,1.5807,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_271{
style=filled;
color=gray75;
91[label="82.177.125.6s;53pkt 53fpkt", shape=rectangle, color=red];
2077[label="82.177.125.6;154pkt 154fpkt", shape=pentagon, color=darkviolet];
stat271[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.177.125.6:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
91--2077[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="82.177.125.6" src_port="1028"/>
    </slice>
    <from sec="1060319295" usec="0"/>
    <to sec="1060319323" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.135.152.6"/>
    </slice>
    <from sec="1060318818" usec="0"/>
    <to sec="1060319680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.16.216.6"/>
    </slice>
    <from sec="1060319467" usec="0"/>
    <to sec="1060319507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.19.80.7"/>
    </slice>
    <from sec="1060318821" usec="0"/>
    <to sec="1060319686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536673,1.5807,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_275{
style=filled;
color=gray75;
94[label="202.131.144.7s;101pkt 101fpkt", shape=rectangle, color=red];
2086[label="202.131.144.7;111pkt 111fpkt", shape=pentagon, color=darkviolet];
stat275[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.131.144.7:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
94--2086[label="1;101pkt 101fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.131.144.7" src_port="1025"/>
    </slice>
    <from sec="1060319323" usec="0"/>
    <to sec="1060319341" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.657684,1.54751,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_276{
style=filled;
color=gray75;
95[label="202.212.4.8s;66pkt 66fpkt", shape=rectangle, color=red];
2087[label="202.212.4.8;134pkt 134fpkt", shape=pentagon, color=darkviolet];
3429[label="202.212.4.8;134pkt 134fpkt", shape=invtriangle, color=brown];
stat276[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.212.4.8:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
95--2087[label="1;66pkt 66fpkt"];
95--3429[label="1;66pkt 66fpkt"];
2087--3429[label="1;134pkt 134fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.212.4.8" src_port="1025"/>
    </slice>
    <from sec="1060319132" usec="0"/>
    <to sec="1060319153" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.64.57.10"/>
    </slice>
    <from sec="1060318874" usec="0"/>
    <to sec="1060318998" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536673,1.5807,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_278{
style=filled;
color=gray75;
403[label="219.83.168.10s;324pkt 324fpkt", shape=rectangle, color=red];
2103[label="219.83.168.10;323pkt 323fpkt", shape=pentagon, color=darkviolet];
stat278[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.83.168.10:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 63641: (0.15456%)&lt;BR/&gt; 63637: (0.15456%)&lt;BR/&gt; 63634: (0.15456%)&lt;BR/&gt; 63631: (0.15456%)&gt;];
}
403--2103[label="1;323pkt 323fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="219.83.168.10"/>
    </slice>
    <from sec="1060319374" usec="0"/>
    <to sec="1060319439" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.100.2.11"/>
    </slice>
    <from sec="1060319204" usec="0"/>
    <to sec="1060319354" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.135.152.12"/>
    </slice>
    <from sec="1060318817" usec="0"/>
    <to sec="1060319691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.69.156.12"/>
    </slice>
    <from sec="1060318804" usec="0"/>
    <to sec="1060319697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.77.38.14"/>
    </slice>
    <from sec="1060318871" usec="0"/>
    <to sec="1060319698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.55.22.16"/>
    </slice>
    <from sec="1060318877" usec="0"/>
    <to sec="1060318985" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="154.67.22.16"/>
    </slice>
    <from sec="1060319077" usec="0"/>
    <to sec="1060319114" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.657684,1.54751,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_285{
style=filled;
color=gray75;
105[label="82.198.128.16s;245pkt 245fpkt", shape=rectangle, color=red];
2141[label="82.198.128.16;246pkt 246fpkt", shape=pentagon, color=darkviolet];
3452[label="82.198.128.16;245pkt 245fpkt", shape=invtriangle, color=brown];
stat285[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.198.128.16:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
105--2141[label="1;245pkt 245fpkt"];
105--3452[label="0.995918;244pkt 244fpkt"];
2141--3452[label="1;245pkt 245fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="82.198.128.16" src_port="1025"/>
    </slice>
    <from sec="1060319149" usec="0"/>
    <to sec="1060319195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="139.112.97.17"/>
    </slice>
    <from sec="1060318824" usec="0"/>
    <to sec="1060319690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.657684,1.54751,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_288{
style=filled;
color=gray75;
109[label="216.172.188.17s;133pkt 133fpkt", shape=rectangle, color=red];
2157[label="216.172.188.17;133pkt 133fpkt", shape=pentagon, color=darkviolet];
3457[label="216.172.188.17;133pkt 133fpkt", shape=invtriangle, color=brown];
stat288[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.172.188.17:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
109--2157[label="1;133pkt 133fpkt"];
109--3457[label="1;133pkt 133fpkt"];
2157--3457[label="1;133pkt 133fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="216.172.188.17" src_port="1030"/>
    </slice>
    <from sec="1060319231" usec="0"/>
    <to sec="1060319251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536673,1.5807,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_289{
style=filled;
color=gray75;
406[label="215.243.221.17s;112pkt 112fpkt", shape=rectangle, color=red];
2158[label="215.243.221.17;196pkt 196fpkt", shape=pentagon, color=darkviolet];
stat289[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.243.221.17:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 33882: (0.324675%)&lt;BR/&gt; 33879: (0.324675%)&lt;BR/&gt; 33877: (0.324675%)&lt;BR/&gt; 33875: (0.324675%)&gt;];
}
406--2158[label="0.991071;111pkt 111fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.243.221.17"/>
    </slice>
    <from sec="1060319263" usec="0"/>
    <to sec="1060319294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="82.128.64.18"/>
    </slice>
    <from sec="1060319227" usec="0"/>
    <to sec="1060319465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.84.20.20"/>
    </slice>
    <from sec="1060319700" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.19.85.20"/>
    </slice>
    <from sec="1060319700" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="139.112.220.20"/>
    </slice>
    <from sec="1060318851" usec="0"/>
    <to sec="1060319694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.87.195.21"/>
    </slice>
    <from sec="1060319118" usec="0"/>
    <to sec="1060319147" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="82.251.196.21"/>
    </slice>
    <from sec="1060318945" usec="0"/>
    <to sec="1060318961" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.170.203.21"/>
    </slice>
    <from sec="1060319334" usec="0"/>
    <to sec="1060319371" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="139.112.42.22"/>
    </slice>
    <from sec="1060318808" usec="0"/>
    <to sec="1060319699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536673,1.5807,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_299{
style=filled;
color=gray75;
410[label="17.48.130.23s;135pkt 135fpkt", shape=rectangle, color=red];
2192[label="17.48.130.23;182pkt 182fpkt", shape=pentagon, color=darkviolet];
stat299[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.48.130.23:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 34457: (0.315457%)&lt;BR/&gt; 34456: (0.315457%)&lt;BR/&gt; 34455: (0.315457%)&lt;BR/&gt; 34454: (0.315457%)&gt;];
}
410--2192[label="0.992593;134pkt 134fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="17.48.130.23"/>
    </slice>
    <from sec="1060319184" usec="0"/>
    <to sec="1060319218" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.50.184.23"/>
    </slice>
    <from sec="1060318936" usec="0"/>
    <to sec="1060319699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.135.152.26"/>
    </slice>
    <from sec="1060319700" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.232.192.26"/>
    </slice>
    <from sec="1060318932" usec="0"/>
    <to sec="1060319667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.226.198.26"/>
    </slice>
    <from sec="1060319112" usec="0"/>
    <to sec="1060319661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889528,1.5433,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_304{
style=filled;
color=gray75;
123[label="201.151.12.27s;179pkt 179fpkt", shape=rectangle, color=red];
2211[label="201.151.12.27;199pkt 199fpkt", shape=pentagon, color=darkviolet];
3481[label="201.151.12.27;199pkt 199fpkt", shape=invtriangle, color=brown];
4069[label="201.151.12.27;198pkt 198fpkt", shape=invhouse, color=bisque];
stat304[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.151.12.27:1084, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1084: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
123--2211[label="1;179pkt 179fpkt"];
123--3481[label="1;179pkt 179fpkt"];
123--4069[label="0.994413;178pkt 178fpkt"];
2211--3481[label="1;199pkt 199fpkt"];
2211--4069[label="1;198pkt 198fpkt"];
3481--4069[label="1;198pkt 198fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.151.12.27" src_port="1084"/>
    </slice>
    <from sec="1060319275" usec="0"/>
    <to sec="1060319567" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="82.200.7.28"/>
    </slice>
    <from sec="1060319464" usec="0"/>
    <to sec="1060319498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.7.243.28"/>
    </slice>
    <from sec="1060319700" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536673,1.5807,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_307{
style=filled;
color=gray75;
128[label="82.178.66.31s;82pkt 82fpkt", shape=rectangle, color=red];
2234[label="82.178.66.31;217pkt 217fpkt", shape=pentagon, color=darkviolet];
stat307[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.178.66.31:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
128--2234[label="0.987805;81pkt 81fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="82.178.66.31" src_port="1028"/>
    </slice>
    <from sec="1060319205" usec="0"/>
    <to sec="1060319251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.657684,1.54751,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_308{
style=filled;
color=gray75;
129[label="216.160.198.32s;169pkt 169fpkt", shape=rectangle, color=red];
2241[label="216.160.198.32;186pkt 186fpkt", shape=pentagon, color=darkviolet];
3499[label="216.160.198.32;186pkt 186fpkt", shape=invtriangle, color=brown];
stat308[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.160.198.32:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
129--2241[label="1;169pkt 169fpkt"];
129--3499[label="1;169pkt 169fpkt"];
2241--3499[label="1;186pkt 186fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="216.160.198.32" src_port="1025"/>
    </slice>
    <from sec="1060319288" usec="0"/>
    <to sec="1060319321" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.994568,1.55812,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_309{
style=filled;
color=gray75;
1139[label="172.235.162.6;d;4pkt 4fpkt", shape=diamond, color=yellow];
1172[label="214.144.25.33;s;3pkt 3fpkt", shape=diamond, color=yellow];
2244[label="214.144.25.33;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3501[label="214.144.25.33;2pkt 2fpkt", shape=invtriangle, color=brown];
4078[label="214.144.25.33;2pkt 2fpkt", shape=invhouse, color=bisque];
stat309[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.2.222.59:42477, 172.235.162.6:80}[25%]&lt;BR/&gt;{214.144.25.33:1671, 172.235.162.6:80}[25%]&lt;BR/&gt;{214.144.25.33:1672, 172.235.162.6:80}[25%]&lt;BR/&gt;{214.144.25.33:1673, 172.235.162.6:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1673: (19.2308%)&lt;BR/&gt; 1672: (19.2308%)&lt;BR/&gt; 1671: (7.69231%)&lt;BR/&gt; 42477: (3.84615%)&gt;];
}
1139--1172[label="1;3pkt 3fpkt"];
1139--2004[label="0.25;1pkt 1fpkt"];
1139--2021[label="0.25;1pkt 1fpkt"];
1139--2028[label="0.25;1pkt 1fpkt"];
1139--2244[label="1;2pkt 2fpkt"];
1139--3501[label="1;2pkt 2fpkt"];
1139--4078[label="1;2pkt 2fpkt"];
1172--2244[label="1;2pkt 2fpkt"];
1172--3501[label="1;2pkt 2fpkt"];
1172--4078[label="1;2pkt 2fpkt"];
2244--3501[label="1;2pkt 2fpkt"];
2244--4078[label="1;2pkt 2fpkt"];
3501--4078[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="172.235.162.6" dst_port="80" src_ip="214.144.25.33" src_port="1673"/>
      <filter dst_ip="172.235.162.6" dst_port="80" src_ip="214.144.25.33" src_port="1672"/>
      <filter dst_ip="172.235.162.6" dst_port="80" src_ip="214.144.25.33" src_port="1671"/>
      <filter dst_ip="172.235.162.6" dst_port="80" src_ip="16.2.222.59" src_port="42477"/>
    </slice>
    <from sec="1060318822" usec="0"/>
    <to sec="1060319268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.859777,1.50854,020,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_310{
style=filled;
color=gray75;
78[label="9.26.67.27s;155pkt 155fpkt", shape=rectangle, color=red];
669[label="9.26.67.27;s;2972pkt 2972fpkt", shape=diamond, color=yellow];
2214[label="9.26.67.27;3634pkt 3634fpkt", shape=pentagon, color=darkviolet];
3484[label="9.26.67.27;3633pkt 3633fpkt", shape=invtriangle, color=brown];
stat310[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.26.67.27:0, *:0}[87.1491%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (85.9631%)&lt;BR/&gt; 445: (2.98249%)&lt;BR/&gt; 139: (2.26573%)&lt;BR/&gt; 80: (1.66923%)&lt;BR/&gt; 64498: (0.10102%)&gt;];
}
78--669[label="0.819355;127pkt 127fpkt"];
78--2006[label="0.0322581;5pkt 5fpkt"];
78--2017[label="0.0903226;14pkt 14fpkt"];
78--2214[label="1;155pkt 155fpkt"];
78--3484[label="1;155pkt 155fpkt"];
669--2004[label="0.00544794;9pkt 9fpkt"];
669--2005[label="0.000672948;2pkt 2fpkt"];
669--2006[label="0.00302826;9pkt 9fpkt"];
669--2010[label="0.00235532;7pkt 7fpkt"];
669--2011[label="0.00462161;8pkt 8fpkt"];
669--2015[label="0.00168237;5pkt 5fpkt"];
669--2021[label="0.00544794;9pkt 9fpkt"];
669--2022[label="0.000672948;2pkt 2fpkt"];
669--2028[label="0.00545124;9pkt 9fpkt"];
669--2214[label="1;2972pkt 2972fpkt"];
669--3484[label="0.999664;2971pkt 2971fpkt"];
2214--3484[label="1;3633pkt 3633fpkt"];
</description>
    <slice>
      <filter src_ip="9.26.67.27"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889528,1.5433,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_311{
style=filled;
color=gray75;
131[label="17.14.139.35s;52pkt 52fpkt", shape=rectangle, color=red];
2257[label="17.14.139.35;210pkt 210fpkt", shape=pentagon, color=darkviolet];
3509[label="17.14.139.35;210pkt 210fpkt", shape=invtriangle, color=brown];
4082[label="17.14.139.35;210pkt 210fpkt", shape=invhouse, color=bisque];
stat311[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.14.139.35:33350, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33350: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
131--2257[label="1;52pkt 52fpkt"];
131--3509[label="1;52pkt 52fpkt"];
131--4082[label="1;52pkt 52fpkt"];
2257--3509[label="1;210pkt 210fpkt"];
2257--4082[label="1;210pkt 210fpkt"];
3509--4082[label="1;210pkt 210fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="17.14.139.35" src_port="33350"/>
    </slice>
    <from sec="1060318931" usec="0"/>
    <to sec="1060318964" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.91.93.36"/>
    </slice>
    <from sec="1060318802" usec="0"/>
    <to sec="1060319699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.994568,1.55812,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_313{
style=filled;
color=gray75;
1566[label="139.112.21.37;s;91pkt 91fpkt", shape=diamond, color=yellow];
2269[label="139.112.21.37;91pkt 91fpkt", shape=pentagon, color=darkviolet];
3516[label="139.112.21.37;91pkt 91fpkt", shape=invtriangle, color=brown];
4086[label="139.112.21.37;90pkt 90fpkt", shape=invhouse, color=bisque];
stat313[shape=component, label=&lt;Rules:&lt;BR/&gt;{139.112.21.37:*, 18.104.46.16:80}[81.3187%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33107: (0.550964%)&lt;BR/&gt; 33105: (0.550964%)&lt;BR/&gt; 33104: (0.550964%)&lt;BR/&gt; 33103: (0.550964%)&gt;];
}
1566--2269[label="1;91pkt 91fpkt"];
1566--3516[label="1;91pkt 91fpkt"];
1566--4086[label="1;90pkt 90fpkt"];
2269--3516[label="1;91pkt 91fpkt"];
2269--4086[label="1;90pkt 90fpkt"];
3516--4086[label="1;90pkt 90fpkt"];
</description>
    <slice>
      <filter dst_ip="18.104.46.16" dst_port="80" src_ip="139.112.21.37"/>
    </slice>
    <from sec="1060319515" usec="0"/>
    <to sec="1060319612" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.135.159.37"/>
    </slice>
    <from sec="1060319076" usec="0"/>
    <to sec="1060319699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.697081,1.59517,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_316{
style=filled;
color=gray75;
1457[label="139.112.231.37;s;24pkt 24fpkt", shape=diamond, color=yellow];
2274[label="139.112.231.37;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat316[shape=component, label=&lt;Rules:&lt;BR/&gt;{139.112.231.37:*, 16.70.204.113:80}[41.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40%)&lt;BR/&gt; 6970: (4%)&lt;BR/&gt; 6770: (4%)&lt;BR/&gt; 0: (4%)&lt;BR/&gt; 7070: (2%)&gt;];
}
1457--2274[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="16.70.204.113" dst_port="80" src_ip="139.112.231.37"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="82.219.137.39"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.657684,1.54751,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_318{
style=filled;
color=gray75;
142[label="214.144.232.41s;138pkt 138fpkt", shape=rectangle, color=red];
2289[label="214.144.232.41;158pkt 158fpkt", shape=pentagon, color=darkviolet];
3523[label="214.144.232.41;158pkt 158fpkt", shape=invtriangle, color=brown];
stat318[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.144.232.41:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
142--2289[label="1;138pkt 138fpkt"];
142--3523[label="1;138pkt 138fpkt"];
2289--3523[label="1;158pkt 158fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.144.232.41" src_port="1027"/>
    </slice>
    <from sec="1060319663" usec="0"/>
    <to sec="1060319690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.180.86.43"/>
    </slice>
    <from sec="1060319175" usec="0"/>
    <to sec="1060319344" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.255.36.44"/>
    </slice>
    <from sec="1060319246" usec="0"/>
    <to sec="1060319265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="163.55.88.44"/>
    </slice>
    <from sec="1060318935" usec="0"/>
    <to sec="1060318970" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.241.88.44"/>
    </slice>
    <from sec="1060319345" usec="0"/>
    <to sec="1060319383" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536673,1.5807,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_324{
style=filled;
color=gray75;
152[label="82.64.186.47s;191pkt 191fpkt", shape=rectangle, color=red];
2315[label="82.64.186.47;190pkt 190fpkt", shape=pentagon, color=darkviolet];
stat324[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.64.186.47:1024, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1024: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
152--2315[label="1;190pkt 190fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="82.64.186.47" src_port="1024"/>
    </slice>
    <from sec="1060319422" usec="0"/>
    <to sec="1060319453" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.14.162.48"/>
    </slice>
    <from sec="1060318858" usec="0"/>
    <to sec="1060319172" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.794011,1.56228,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_326{
style=filled;
color=gray75;
1028[label="201.25.109.108;d;5pkt 5fpkt", shape=diamond, color=yellow];
1030[label="204.28.232.48;s;2pkt 2fpkt", shape=diamond, color=yellow];
1150[label="20.31.43.69;s;3pkt 3fpkt", shape=diamond, color=yellow];
2323[label="204.28.232.48;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3537[label="204.28.232.48;2pkt 2fpkt", shape=invtriangle, color=brown];
stat326[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.28.232.48:1888, 201.25.109.108:12132}[20%]&lt;BR/&gt;{204.28.232.48:19306, 201.25.109.108:3040}[20%]&lt;BR/&gt;{20.31.43.69:9191, 201.25.109.108:12132}[20%]&lt;BR/&gt;{20.31.43.69:9192, 201.25.109.108:12132}[20%]&lt;BR/&gt;{20.31.43.69:29845, 201.25.109.108:3039}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12132: (30.7692%)&lt;BR/&gt; 1888: (15.3846%)&lt;BR/&gt; 19306: (11.5385%)&lt;BR/&gt; 3040: (11.5385%)&lt;BR/&gt; 29845: (7.69231%)&gt;];
}
1028--1030[label="1;2pkt 2fpkt"];
1028--1150[label="1;3pkt 3fpkt"];
1028--2323[label="1;1pkt 1fpkt"];
1028--3537[label="1;2pkt 2fpkt"];
1030--2323[label="1;1pkt 1fpkt"];
1030--3537[label="1;2pkt 2fpkt"];
2323--3537[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.25.109.108" dst_port="3039" src_ip="20.31.43.69" src_port="29845"/>
      <filter dst_ip="201.25.109.108" dst_port="12132" src_ip="20.31.43.69" src_port="9192"/>
      <filter dst_ip="201.25.109.108" dst_port="12132" src_ip="20.31.43.69" src_port="9191"/>
      <filter dst_ip="201.25.109.108" dst_port="3040" src_ip="204.28.232.48" src_port="19306"/>
      <filter dst_ip="201.25.109.108" dst_port="12132" src_ip="204.28.232.48" src_port="1888"/>
    </slice>
    <from sec="1060318891" usec="0"/>
    <to sec="1060319628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.26.154.49"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.135.152.50"/>
    </slice>
    <from sec="1060318837" usec="0"/>
    <to sec="1060319685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536673,1.5807,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_329{
style=filled;
color=gray75;
160[label="216.93.244.50s;114pkt 114fpkt", shape=rectangle, color=red];
2334[label="216.93.244.50;135pkt 135fpkt", shape=pentagon, color=darkviolet];
stat329[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.93.244.50:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
160--2334[label="0.991228;113pkt 113fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="216.93.244.50" src_port="1026"/>
    </slice>
    <from sec="1060319618" usec="0"/>
    <to sec="1060319641" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.214.146.51"/>
    </slice>
    <from sec="1060319666" usec="0"/>
    <to sec="1060319691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.209.96.52"/>
    </slice>
    <from sec="1060318802" usec="0"/>
    <to sec="1060319699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.135.159.52"/>
    </slice>
    <from sec="1060318808" usec="0"/>
    <to sec="1060319239" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.141.42.53"/>
    </slice>
    <from sec="1060318848" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.56.222.55"/>
    </slice>
    <from sec="1060318951" usec="0"/>
    <to sec="1060319681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.143.226.55"/>
    </slice>
    <from sec="1060319321" usec="0"/>
    <to sec="1060319406" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.90.203.56"/>
    </slice>
    <from sec="1060319182" usec="0"/>
    <to sec="1060319198" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.19.85.57"/>
    </slice>
    <from sec="1060319700" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.135.152.57"/>
    </slice>
    <from sec="1060318809" usec="0"/>
    <to sec="1060319694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.96.252.57"/>
    </slice>
    <from sec="1060319700" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.248.28.58"/>
    </slice>
    <from sec="1060319182" usec="0"/>
    <to sec="1060319210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.232.232.58"/>
    </slice>
    <from sec="1060318918" usec="0"/>
    <to sec="1060319071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.178.129.60"/>
    </slice>
    <from sec="1060318943" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.135.159.60"/>
    </slice>
    <from sec="1060319134" usec="0"/>
    <to sec="1060319687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.209.68.62"/>
    </slice>
    <from sec="1060319473" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.73.35.64"/>
    </slice>
    <from sec="1060318836" usec="0"/>
    <to sec="1060319697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.229.110.68"/>
    </slice>
    <from sec="1060318890" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.96.87.69"/>
    </slice>
    <from sec="1060319403" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536673,1.5807,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_348{
style=filled;
color=gray75;
183[label="219.113.12.70s;106pkt 106fpkt", shape=rectangle, color=red];
2436[label="219.113.12.70;128pkt 128fpkt", shape=pentagon, color=darkviolet];
stat348[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.113.12.70:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
183--2436[label="1;106pkt 106fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="219.113.12.70" src_port="1028"/>
    </slice>
    <from sec="1060319212" usec="0"/>
    <to sec="1060319233" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.135.115.70"/>
    </slice>
    <from sec="1060318865" usec="0"/>
    <to sec="1060319269" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.66.170.70"/>
    </slice>
    <from sec="1060319700" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="82.179.26.71"/>
    </slice>
    <from sec="1060318804" usec="0"/>
    <to sec="1060319699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.104.13.72"/>
    </slice>
    <from sec="1060318801" usec="0"/>
    <to sec="1060319302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_353{
style=filled;
color=gray75;
2459[label="200.176.90.73;77pkt 77fpkt", shape=pentagon, color=darkviolet];
stat353[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.176.90.73:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4957: (0.649351%)&lt;BR/&gt; 4913: (0.649351%)&lt;BR/&gt; 4884: (0.649351%)&lt;BR/&gt; 4853: (0.649351%)&gt;];
}
</description>
    <slice>
      <filter dst_port="80" src_ip="200.176.90.73"/>
    </slice>
    <from sec="1060318818" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.46.149.74"/>
    </slice>
    <from sec="1060318808" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536673,1.5807,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_355{
style=filled;
color=gray75;
194[label="216.169.125.75s;106pkt 106fpkt", shape=rectangle, color=red];
2468[label="216.169.125.75;162pkt 162fpkt", shape=pentagon, color=darkviolet];
stat355[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.169.125.75:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
194--2468[label="1;106pkt 106fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="216.169.125.75" src_port="1027"/>
    </slice>
    <from sec="1060319450" usec="0"/>
    <to sec="1060319477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.108.216.75"/>
    </slice>
    <from sec="1060318853" usec="0"/>
    <to sec="1060318857" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.124.201.76"/>
    </slice>
    <from sec="1060318990" usec="0"/>
    <to sec="1060319021" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536673,1.5807,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_358{
style=filled;
color=gray75;
197[label="82.64.105.77s;59pkt 59fpkt", shape=rectangle, color=red];
2480[label="82.64.105.77;136pkt 136fpkt", shape=pentagon, color=darkviolet];
stat358[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.64.105.77:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
197--2480[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="82.64.105.77" src_port="1027"/>
    </slice>
    <from sec="1060318858" usec="0"/>
    <to sec="1060318880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.135.153.78"/>
    </slice>
    <from sec="1060318814" usec="0"/>
    <to sec="1060319689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.235.13.79"/>
    </slice>
    <from sec="1060318817" usec="0"/>
    <to sec="1060319608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.182.243.79"/>
    </slice>
    <from sec="1060318810" usec="0"/>
    <to sec="1060319698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.38.129.80"/>
    </slice>
    <from sec="1060319700" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.149.236.80"/>
    </slice>
    <from sec="1060319663" usec="0"/>
    <to sec="1060319698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889528,1.5433,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_364{
style=filled;
color=gray75;
203[label="219.82.115.81s;62pkt 62fpkt", shape=rectangle, color=red];
2507[label="219.82.115.81;130pkt 130fpkt", shape=pentagon, color=darkviolet];
3623[label="219.82.115.81;130pkt 130fpkt", shape=invtriangle, color=brown];
4132[label="219.82.115.81;130pkt 130fpkt", shape=invhouse, color=bisque];
stat364[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.82.115.81:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
203--2507[label="1;62pkt 62fpkt"];
203--3623[label="1;62pkt 62fpkt"];
203--4132[label="1;62pkt 62fpkt"];
2507--3623[label="1;130pkt 130fpkt"];
2507--4132[label="1;130pkt 130fpkt"];
3623--4132[label="1;130pkt 130fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="219.82.115.81" src_port="1025"/>
    </slice>
    <from sec="1060319417" usec="0"/>
    <to sec="1060319439" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.135.153.82"/>
    </slice>
    <from sec="1060318822" usec="0"/>
    <to sec="1060319693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.116.211.82"/>
    </slice>
    <from sec="1060319501" usec="0"/>
    <to sec="1060319540" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.220.7.83"/>
    </slice>
    <from sec="1060318801" usec="0"/>
    <to sec="1060319080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.135.156.84"/>
    </slice>
    <from sec="1060319700" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.70.203.84"/>
    </slice>
    <from sec="1060319700" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="147.164.157.85"/>
    </slice>
    <from sec="1060318805" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.70.203.85"/>
    </slice>
    <from sec="1060319700" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.20.255.85"/>
    </slice>
    <from sec="1060319329" usec="0"/>
    <to sec="1060319644" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536673,1.5807,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_376{
style=filled;
color=gray75;
211[label="82.228.10.88s;178pkt 178fpkt", shape=rectangle, color=red];
2552[label="82.228.10.88;241pkt 241fpkt", shape=pentagon, color=darkviolet];
stat376[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.228.10.88:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
211--2552[label="1;178pkt 178fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="82.228.10.88" src_port="1026"/>
    </slice>
    <from sec="1060318893" usec="0"/>
    <to sec="1060318931" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.194.36.88"/>
    </slice>
    <from sec="1060319700" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.96.209.88"/>
    </slice>
    <from sec="1060319051" usec="0"/>
    <to sec="1060319655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.38.129.89"/>
    </slice>
    <from sec="1060319700" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.697081,1.59517,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_381{
style=filled;
color=gray75;
1557[label="148.239.177.237;d;6pkt 6fpkt", shape=diamond, color=yellow];
2569[label="16.90.58.90;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat381[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.90.58.90:*, 148.239.177.237:80}[66.6667%]&lt;BR/&gt;{16.2.210.215:*, 148.239.177.237:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 36894: (10%)&lt;BR/&gt; 36893: (10%)&lt;BR/&gt; 36892: (10%)&lt;BR/&gt; 36880: (10%)&gt;];
}
1557--2569[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="148.239.177.237" dst_port="80" src_ip="16.90.58.90"/>
      <filter dst_ip="148.239.177.237" dst_port="80" src_ip="16.2.210.215"/>
    </slice>
    <from sec="1060319362" usec="0"/>
    <to sec="1060319611" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536673,1.5807,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_382{
style=filled;
color=gray75;
214[label="9.234.77.91s;36pkt 36fpkt", shape=rectangle, color=red];
2575[label="9.234.77.91;118pkt 118fpkt", shape=pentagon, color=darkviolet];
stat382[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.234.77.91:62352, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62352: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
214--2575[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.234.77.91" src_port="62352"/>
    </slice>
    <from sec="1060319142" usec="0"/>
    <to sec="1060319161" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.183.129.91"/>
    </slice>
    <from sec="1060318812" usec="0"/>
    <to sec="1060319662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.2.102.92"/>
    </slice>
    <from sec="1060318803" usec="0"/>
    <to sec="1060319222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.162.125.92"/>
    </slice>
    <from sec="1060319490" usec="0"/>
    <to sec="1060319550" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.46.145.93"/>
    </slice>
    <from sec="1060319451" usec="0"/>
    <to sec="1060319490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.19.92.94"/>
    </slice>
    <from sec="1060319700" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.657684,1.54751,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_388{
style=filled;
color=gray75;
220[label="17.88.39.95s;181pkt 181fpkt", shape=rectangle, color=red];
2604[label="17.88.39.95;181pkt 181fpkt", shape=pentagon, color=darkviolet];
3665[label="17.88.39.95;180pkt 180fpkt", shape=invtriangle, color=brown];
stat388[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.88.39.95:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
220--2604[label="1;181pkt 181fpkt"];
220--3665[label="1;180pkt 180fpkt"];
2604--3665[label="1;180pkt 180fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="17.88.39.95" src_port="1026"/>
    </slice>
    <from sec="1060319224" usec="0"/>
    <to sec="1060319253" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,011,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_389{
style=filled;
color=gray75;
2605[label="16.204.90.95;154pkt 154fpkt", shape=pentagon, color=darkviolet];
stat389[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.204.90.95:24956, *:*}[62.3377%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24956: (31.1688%)&lt;BR/&gt; 4929: (5.19481%)&lt;BR/&gt; 4653: (5.19481%)&lt;BR/&gt; 53: (4.87013%)&lt;BR/&gt; 5131: (1.2987%)&gt;];
}
</description>
    <slice>
      <filter src_ip="16.204.90.95" src_port="24956"/>
    </slice>
    <from sec="1060318824" usec="0"/>
    <to sec="1060319698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.13.40.96"/>
    </slice>
    <from sec="1060319155" usec="0"/>
    <to sec="1060319179" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889528,1.5433,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_391{
style=filled;
color=gray75;
420[label="216.35.55.96s;132pkt 132fpkt", shape=rectangle, color=red];
2611[label="216.35.55.96;132pkt 132fpkt", shape=pentagon, color=darkviolet];
3667[label="216.35.55.96;131pkt 131fpkt", shape=invtriangle, color=brown];
4151[label="216.35.55.96;132pkt 132fpkt", shape=invhouse, color=bisque];
stat391[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.35.55.96:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 50517: (0.759013%)&lt;BR/&gt; 50371: (0.759013%)&lt;BR/&gt; 51015: (0.379507%)&lt;BR/&gt; 51006: (0.379507%)&gt;];
}
420--2611[label="1;132pkt 132fpkt"];
420--3667[label="1;131pkt 131fpkt"];
420--4151[label="1;132pkt 132fpkt"];
2611--3667[label="1;131pkt 131fpkt"];
2611--4151[label="1;132pkt 132fpkt"];
3667--4151[label="1;131pkt 131fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="216.35.55.96"/>
    </slice>
    <from sec="1060319478" usec="0"/>
    <to sec="1060319500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="82.64.29.97"/>
    </slice>
    <from sec="1060319372" usec="0"/>
    <to sec="1060319392" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.228.155.97"/>
    </slice>
    <from sec="1060318804" usec="0"/>
    <to sec="1060319698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536673,1.5807,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_394{
style=filled;
color=gray75;
226[label="212.18.224.98s;202pkt 202fpkt", shape=rectangle, color=red];
2638[label="212.18.224.98;209pkt 209fpkt", shape=pentagon, color=darkviolet];
stat394[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.18.224.98:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
226--2638[label="1;202pkt 202fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="212.18.224.98" src_port="1025"/>
    </slice>
    <from sec="1060319095" usec="0"/>
    <to sec="1060319134" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.60.87.99"/>
    </slice>
    <from sec="1060319700" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.174.240.100"/>
    </slice>
    <from sec="1060319700" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="138.115.43.101"/>
    </slice>
    <from sec="1060318825" usec="0"/>
    <to sec="1060319685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.657684,1.54751,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_398{
style=filled;
color=gray75;
231[label="218.201.141.101s;43pkt 43fpkt", shape=rectangle, color=red];
2656[label="218.201.141.101;129pkt 129fpkt", shape=pentagon, color=darkviolet];
3685[label="218.201.141.101;128pkt 128fpkt", shape=invtriangle, color=brown];
stat398[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.201.141.101:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
231--2656[label="1;43pkt 43fpkt"];
231--3685[label="1;43pkt 43fpkt"];
2656--3685[label="1;128pkt 128fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="218.201.141.101" src_port="1027"/>
    </slice>
    <from sec="1060319660" usec="0"/>
    <to sec="1060319681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.165.235.103"/>
    </slice>
    <from sec="1060318947" usec="0"/>
    <to sec="1060319664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.187.12.104"/>
    </slice>
    <from sec="1060318815" usec="0"/>
    <to sec="1060319611" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.211.225.104"/>
    </slice>
    <from sec="1060319115" usec="0"/>
    <to sec="1060319421" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.176.72.105"/>
    </slice>
    <from sec="1060319126" usec="0"/>
    <to sec="1060319687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.98.81.105"/>
    </slice>
    <from sec="1060319457" usec="0"/>
    <to sec="1060319494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.104.115.105"/>
    </slice>
    <from sec="1060318802" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.39.137.105"/>
    </slice>
    <from sec="1060318801" usec="0"/>
    <to sec="1060319422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.22.39.106"/>
    </slice>
    <from sec="1060318942" usec="0"/>
    <to sec="1060318998" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.156.65.106"/>
    </slice>
    <from sec="1060319361" usec="0"/>
    <to sec="1060319390" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.82.81.107"/>
    </slice>
    <from sec="1060319433" usec="0"/>
    <to sec="1060319683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.137.113.108"/>
    </slice>
    <from sec="1060318816" usec="0"/>
    <to sec="1060319681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.171.29.109"/>
    </slice>
    <from sec="1060318945" usec="0"/>
    <to sec="1060319649" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.51.19.112"/>
    </slice>
    <from sec="1060319700" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.235.0.113"/>
    </slice>
    <from sec="1060318801" usec="0"/>
    <to sec="1060319616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.32.184.115"/>
    </slice>
    <from sec="1060318801" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.22.203.117"/>
    </slice>
    <from sec="1060318822" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.794011,1.56228,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_418{
style=filled;
color=gray75;
641[label="192.179.133.118;s;1220pkt 1220fpkt", shape=diamond, color=yellow];
2739[label="192.179.133.118;1468pkt 1468fpkt", shape=pentagon, color=darkviolet];
3726[label="192.179.133.118;1468pkt 1468fpkt", shape=invtriangle, color=brown];
stat418[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.179.133.118:6669, *:*}[26.0899%]&lt;BR/&gt;{192.179.133.118:6668, *:*}[25.9537%]&lt;BR/&gt;{192.179.133.118:6666, *:*}[25%]&lt;BR/&gt;{192.179.133.118:6667, *:*}[22.9564%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6669: (13.0654%)&lt;BR/&gt; 6668: (12.9331%)&lt;BR/&gt; 6666: (12.5842%)&lt;BR/&gt; 6667: (11.4172%)&lt;BR/&gt; 2428: (0.180462%)&gt;];
}
641--2007[label="0.00163934;2pkt 2fpkt"];
641--2023[label="0.00163934;2pkt 2fpkt"];
641--2029[label="0.00163934;2pkt 2fpkt"];
641--2739[label="1;1220pkt 1220fpkt"];
641--3726[label="1;1220pkt 1220fpkt"];
2739--3726[label="1;1468pkt 1468fpkt"];
</description>
    <slice>
      <filter src_ip="192.179.133.118" src_port="6669"/>
      <filter src_ip="192.179.133.118" src_port="6668"/>
      <filter src_ip="192.179.133.118" src_port="6666"/>
      <filter src_ip="192.179.133.118" src_port="6667"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536673,1.5807,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_419{
style=filled;
color=gray75;
250[label="214.209.241.119s;45pkt 45fpkt", shape=rectangle, color=red];
2748[label="214.209.241.119;123pkt 123fpkt", shape=pentagon, color=darkviolet];
stat419[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.209.241.119:1034, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1034: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
250--2748[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.209.241.119" src_port="1034"/>
    </slice>
    <from sec="1060319543" usec="0"/>
    <to sec="1060319563" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.90.226.120"/>
    </slice>
    <from sec="1060319700" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.657684,1.54751,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_421{
style=filled;
color=gray75;
253[label="202.84.3.122s;206pkt 206fpkt", shape=rectangle, color=red];
2758[label="202.84.3.122;240pkt 240fpkt", shape=pentagon, color=darkviolet];
3735[label="202.84.3.122;240pkt 240fpkt", shape=invtriangle, color=brown];
stat421[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.84.3.122:64901, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64901: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
253--2758[label="1;206pkt 206fpkt"];
253--3735[label="1;206pkt 206fpkt"];
2758--3735[label="1;240pkt 240fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.84.3.122" src_port="64901"/>
    </slice>
    <from sec="1060319462" usec="0"/>
    <to sec="1060319500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536673,1.5807,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_422{
style=filled;
color=gray75;
254[label="217.173.240.123s;133pkt 133fpkt", shape=rectangle, color=red];
2769[label="217.173.240.123;173pkt 173fpkt", shape=pentagon, color=darkviolet];
stat422[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.173.240.123:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
254--2769[label="1;133pkt 133fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="217.173.240.123" src_port="1026"/>
    </slice>
    <from sec="1060319416" usec="0"/>
    <to sec="1060319443" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="139.112.220.124"/>
    </slice>
    <from sec="1060319700" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="139.112.230.125"/>
    </slice>
    <from sec="1060318819" usec="0"/>
    <to sec="1060319697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="139.112.196.128"/>
    </slice>
    <from sec="1060319149" usec="0"/>
    <to sec="1060319673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536673,1.5807,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_426{
style=filled;
color=gray75;
260[label="216.94.168.129s;56pkt 56fpkt", shape=rectangle, color=red];
2797[label="216.94.168.129;111pkt 111fpkt", shape=pentagon, color=darkviolet];
stat426[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.94.168.129:1055, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1055: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
260--2797[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="216.94.168.129" src_port="1055"/>
    </slice>
    <from sec="1060319089" usec="0"/>
    <to sec="1060319108" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889528,1.5433,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_427{
style=filled;
color=gray75;
261[label="216.89.212.129s;171pkt 171fpkt", shape=rectangle, color=red];
2798[label="216.89.212.129;191pkt 191fpkt", shape=pentagon, color=darkviolet];
3745[label="216.89.212.129;191pkt 191fpkt", shape=invtriangle, color=brown];
4192[label="216.89.212.129;191pkt 191fpkt", shape=invhouse, color=bisque];
stat427[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.89.212.129:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
261--2798[label="1;171pkt 171fpkt"];
261--3745[label="1;171pkt 171fpkt"];
261--4192[label="1;171pkt 171fpkt"];
2798--3745[label="1;191pkt 191fpkt"];
2798--4192[label="1;191pkt 191fpkt"];
3745--4192[label="1;191pkt 191fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="216.89.212.129" src_port="1027"/>
    </slice>
    <from sec="1060319617" usec="0"/>
    <to sec="1060319646" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.102.29.130"/>
    </slice>
    <from sec="1060319000" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.657684,1.54751,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_429{
style=filled;
color=gray75;
262[label="81.123.71.130s;101pkt 101fpkt", shape=rectangle, color=red];
2800[label="81.123.71.130;154pkt 154fpkt", shape=pentagon, color=darkviolet];
3747[label="81.123.71.130;154pkt 154fpkt", shape=invtriangle, color=brown];
stat429[shape=component, label=&lt;Rules:&lt;BR/&gt;{81.123.71.130:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
262--2800[label="1;101pkt 101fpkt"];
262--3747[label="1;101pkt 101fpkt"];
2800--3747[label="1;154pkt 154fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="81.123.71.130" src_port="1026"/>
    </slice>
    <from sec="1060319461" usec="0"/>
    <to sec="1060319489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889528,1.5433,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_430{
style=filled;
color=gray75;
266[label="216.38.89.131s;57pkt 57fpkt", shape=rectangle, color=red];
2807[label="216.38.89.131;111pkt 111fpkt", shape=pentagon, color=darkviolet];
3752[label="216.38.89.131;111pkt 111fpkt", shape=invtriangle, color=brown];
4194[label="216.38.89.131;111pkt 111fpkt", shape=invhouse, color=bisque];
stat430[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.38.89.131:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
266--2807[label="1;57pkt 57fpkt"];
266--3752[label="1;57pkt 57fpkt"];
266--4194[label="1;57pkt 57fpkt"];
2807--3752[label="1;111pkt 111fpkt"];
2807--4194[label="1;111pkt 111fpkt"];
3752--4194[label="1;111pkt 111fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="216.38.89.131" src_port="1026"/>
    </slice>
    <from sec="1060319134" usec="0"/>
    <to sec="1060319153" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.101.137.133"/>
    </slice>
    <from sec="1060318895" usec="0"/>
    <to sec="1060319632" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889528,1.5433,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_433{
style=filled;
color=gray75;
272[label="9.229.128.135s;303pkt 303fpkt", shape=rectangle, color=red];
2834[label="9.229.128.135;385pkt 385fpkt", shape=pentagon, color=darkviolet];
3771[label="9.229.128.135;385pkt 385fpkt", shape=invtriangle, color=brown];
4204[label="9.229.128.135;385pkt 385fpkt", shape=invhouse, color=bisque];
stat433[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.229.128.135:1043, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1043: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
272--2834[label="1;303pkt 303fpkt"];
272--3771[label="1;303pkt 303fpkt"];
272--4204[label="1;303pkt 303fpkt"];
2834--3771[label="1;385pkt 385fpkt"];
2834--4204[label="1;385pkt 385fpkt"];
3771--4204[label="1;385pkt 385fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.229.128.135" src_port="1043"/>
    </slice>
    <from sec="1060319105" usec="0"/>
    <to sec="1060319369" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.5.8.136"/>
    </slice>
    <from sec="1060318803" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="174.8.97.136"/>
    </slice>
    <from sec="1060318910" usec="0"/>
    <to sec="1060319515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.36.238.136"/>
    </slice>
    <from sec="1060319048" usec="0"/>
    <to sec="1060319389" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.9.102.137"/>
    </slice>
    <from sec="1060319301" usec="0"/>
    <to sec="1060319659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.165.58.141"/>
    </slice>
    <from sec="1060319273" usec="0"/>
    <to sec="1060319521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.121.76.141"/>
    </slice>
    <from sec="1060319124" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.96.36.145"/>
    </slice>
    <from sec="1060318817" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536673,1.5807,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_441{
style=filled;
color=gray75;
290[label="82.226.50.147s;58pkt 58fpkt", shape=rectangle, color=red];
2887[label="82.226.50.147;188pkt 188fpkt", shape=pentagon, color=darkviolet];
stat441[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.226.50.147:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
290--2887[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="82.226.50.147" src_port="1029"/>
    </slice>
    <from sec="1060319455" usec="0"/>
    <to sec="1060319485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.108.133.148"/>
    </slice>
    <from sec="1060319669" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.8.75.150"/>
    </slice>
    <from sec="1060319127" usec="0"/>
    <to sec="1060319154" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.239.3.152"/>
    </slice>
    <from sec="1060318802" usec="0"/>
    <to sec="1060319381" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.90.217.152"/>
    </slice>
    <from sec="1060318833" usec="0"/>
    <to sec="1060319000" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.162.18.153"/>
    </slice>
    <from sec="1060319700" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_447{
style=filled;
color=gray75;
2926[label="221.48.221.153;157pkt 157fpkt", shape=pentagon, color=darkviolet];
stat447[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.48.221.153:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4299: (0.318471%)&lt;BR/&gt; 4297: (0.318471%)&lt;BR/&gt; 4295: (0.318471%)&lt;BR/&gt; 4293: (0.318471%)&gt;];
}
</description>
    <slice>
      <filter dst_port="445" src_ip="221.48.221.153"/>
    </slice>
    <from sec="1060318944" usec="0"/>
    <to sec="1060319473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.41.219.154"/>
    </slice>
    <from sec="1060318808" usec="0"/>
    <to sec="1060319070" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889528,1.5433,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_449{
style=filled;
color=gray75;
301[label="82.199.9.155s;145pkt 145fpkt", shape=rectangle, color=red];
2934[label="82.199.9.155;160pkt 160fpkt", shape=pentagon, color=darkviolet];
3819[label="82.199.9.155;160pkt 160fpkt", shape=invtriangle, color=brown];
4229[label="82.199.9.155;160pkt 160fpkt", shape=invhouse, color=bisque];
stat449[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.199.9.155:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
301--2934[label="1;145pkt 145fpkt"];
301--3819[label="1;145pkt 145fpkt"];
301--4229[label="1;145pkt 145fpkt"];
2934--3819[label="1;160pkt 160fpkt"];
2934--4229[label="1;160pkt 160fpkt"];
3819--4229[label="1;160pkt 160fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="82.199.9.155" src_port="1028"/>
    </slice>
    <from sec="1060319134" usec="0"/>
    <to sec="1060319160" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.186.106.155"/>
    </slice>
    <from sec="1060318803" usec="0"/>
    <to sec="1060319695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.33.217.155"/>
    </slice>
    <from sec="1060318870" usec="0"/>
    <to sec="1060318898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03965,1.56152,002,1 1 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_452{
style=filled;
color=gray75;
103[label="217.180.35.15s;346pkt 346fpkt", shape=rectangle, color=red];
304[label="215.146.60.157s;220pkt 220fpkt", shape=rectangle, color=red];
309[label="152.60.166.161s;132pkt 132fpkt", shape=rectangle, color=red];
462[label="217.180.35.15s;139pkt 139fpkt", shape=ellipse, color=green];
2945[label="215.146.60.157;233pkt 233fpkt", shape=pentagon, color=darkviolet];
3823[label="215.146.60.157;233pkt 233fpkt", shape=invtriangle, color=brown];
stat452[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.146.60.157:1025, *:137}[40.2418%]&lt;BR/&gt;{217.180.35.15:1029, *:137}[31.9516%]&lt;BR/&gt;{152.60.166.161:1038, *:137}[27.8066%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1025: (28.9332%)&lt;BR/&gt; 1038: (11.2433%)&lt;BR/&gt; 1029: (9.82348%)&gt;];
}
103--309[label="1;132pkt 132fpkt"];
103--462[label="0.510791;71pkt 71fpkt"];
304--462[label="0.489209;68pkt 68fpkt"];
304--2945[label="1;220pkt 220fpkt"];
304--3823[label="1;220pkt 220fpkt"];
462--2945[label="0.489209;68pkt 68fpkt"];
462--3823[label="0.489209;68pkt 68fpkt"];
2945--3823[label="1;233pkt 233fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.146.60.157" src_port="1025"/>
      <filter dst_port="137" src_ip="217.180.35.15" src_port="1029"/>
      <filter dst_port="137" src_ip="152.60.166.161" src_port="1038"/>
    </slice>
    <from sec="1060318959" usec="0"/>
    <to sec="1060318999" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889528,1.5433,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_453{
style=filled;
color=gray75;
306[label="214.200.68.158s;193pkt 193fpkt", shape=rectangle, color=red];
2948[label="214.200.68.158;238pkt 238fpkt", shape=pentagon, color=darkviolet];
3825[label="214.200.68.158;238pkt 238fpkt", shape=invtriangle, color=brown];
4233[label="214.200.68.158;238pkt 238fpkt", shape=invhouse, color=bisque];
stat453[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.200.68.158:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
306--2948[label="1;193pkt 193fpkt"];
306--3825[label="1;193pkt 193fpkt"];
306--4233[label="1;193pkt 193fpkt"];
2948--3825[label="1;238pkt 238fpkt"];
2948--4233[label="1;238pkt 238fpkt"];
3825--4233[label="1;238pkt 238fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.200.68.158" src_port="1025"/>
    </slice>
    <from sec="1060319215" usec="0"/>
    <to sec="1060319255" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536673,1.5807,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_454{
style=filled;
color=gray75;
307[label="82.130.75.158s;112pkt 112fpkt", shape=rectangle, color=red];
2949[label="82.130.75.158;122pkt 122fpkt", shape=pentagon, color=darkviolet];
stat454[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.130.75.158:1036, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1036: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
307--2949[label="1;112pkt 112fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="82.130.75.158" src_port="1036"/>
    </slice>
    <from sec="1060319289" usec="0"/>
    <to sec="1060319309" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.160.115.158"/>
    </slice>
    <from sec="1060318873" usec="0"/>
    <to sec="1060319681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.657684,1.54751,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_456{
style=filled;
color=gray75;
311[label="217.180.35.163s;197pkt 197fpkt", shape=rectangle, color=red];
2962[label="217.180.35.163;253pkt 253fpkt", shape=pentagon, color=darkviolet];
3830[label="217.180.35.163;253pkt 253fpkt", shape=invtriangle, color=brown];
stat456[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.180.35.163:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
311--2962[label="1;197pkt 197fpkt"];
311--3830[label="1;197pkt 197fpkt"];
2962--3830[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="217.180.35.163" src_port="1029"/>
    </slice>
    <from sec="1060319298" usec="0"/>
    <to sec="1060319337" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="82.200.246.165"/>
    </slice>
    <from sec="1060319414" usec="0"/>
    <to sec="1060319642" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.20.255.165"/>
    </slice>
    <from sec="1060319294" usec="0"/>
    <to sec="1060319669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.657684,1.54751,503,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_459{
style=filled;
color=gray75;
313[label="202.216.7.166s;1pkt 1fpkt", shape=rectangle, color=red];
2980[label="147.37.147.166;32pkt 32fpkt", shape=pentagon, color=darkviolet];
3838[label="147.37.147.166;32pkt 32fpkt", shape=invtriangle, color=brown];
stat459[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.37.147.166:*, 196.20.255.165:80}[46.875%]&lt;BR/&gt;{147.37.147.166:1024, *:53}[34.375%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.0769%)&lt;BR/&gt; 1024: (16.9231%)&lt;BR/&gt; 53: (16.9231%)&lt;BR/&gt; 2332: (2.30769%)&lt;BR/&gt; 2338: (1.53846%)&gt;];
}
313--2980[label="1;1pkt 1fpkt"];
313--3838[label="1;1pkt 1fpkt"];
2980--3838[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="196.20.255.165" dst_port="80" src_ip="147.37.147.166"/>
      <filter dst_port="53" src_ip="147.37.147.166" src_port="1024"/>
    </slice>
    <from sec="1060319079" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.182.237.168"/>
    </slice>
    <from sec="1060318813" usec="0"/>
    <to sec="1060319699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.994568,1.55812,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_461{
style=filled;
color=gray75;
1174[label="139.112.3.169;s;70pkt 70fpkt", shape=diamond, color=yellow];
2989[label="139.112.3.169;70pkt 70fpkt", shape=pentagon, color=darkviolet];
3843[label="139.112.3.169;70pkt 70fpkt", shape=invtriangle, color=brown];
4245[label="139.112.3.169;70pkt 70fpkt", shape=invhouse, color=bisque];
stat461[shape=component, label=&lt;Rules:&lt;BR/&gt;{139.112.3.169:*, 18.96.230.5:80}[41.4286%]&lt;BR/&gt;{139.112.3.169:*, 18.96.230.148:80}[31.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49252: (0.714286%)&lt;BR/&gt; 49251: (0.714286%)&lt;BR/&gt; 49250: (0.714286%)&lt;BR/&gt; 49249: (0.714286%)&gt;];
}
1174--2989[label="1;70pkt 70fpkt"];
1174--3843[label="1;70pkt 70fpkt"];
1174--4245[label="1;70pkt 70fpkt"];
2989--3843[label="1;70pkt 70fpkt"];
2989--4245[label="1;70pkt 70fpkt"];
3843--4245[label="1;70pkt 70fpkt"];
</description>
    <slice>
      <filter dst_ip="18.96.230.5" dst_port="80" src_ip="139.112.3.169"/>
      <filter dst_ip="18.96.230.148" dst_port="80" src_ip="139.112.3.169"/>
    </slice>
    <from sec="1060319059" usec="0"/>
    <to sec="1060319451" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.90.131.169"/>
    </slice>
    <from sec="1060319455" usec="0"/>
    <to sec="1060319473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889528,1.5433,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_463{
style=filled;
color=gray75;
320[label="18.216.206.169s;96pkt 96fpkt", shape=rectangle, color=red];
2993[label="18.216.206.169;112pkt 112fpkt", shape=pentagon, color=darkviolet];
3846[label="18.216.206.169;112pkt 112fpkt", shape=invtriangle, color=brown];
4247[label="18.216.206.169;112pkt 112fpkt", shape=invhouse, color=bisque];
stat463[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.216.206.169:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
320--2993[label="1;96pkt 96fpkt"];
320--3846[label="1;96pkt 96fpkt"];
320--4247[label="1;96pkt 96fpkt"];
2993--3846[label="1;112pkt 112fpkt"];
2993--4247[label="1;112pkt 112fpkt"];
3846--4247[label="1;112pkt 112fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="18.216.206.169" src_port="1030"/>
    </slice>
    <from sec="1060319528" usec="0"/>
    <to sec="1060319546" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.82.203.170"/>
    </slice>
    <from sec="1060318805" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.73.47.171"/>
    </slice>
    <from sec="1060318801" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536673,1.5807,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_466{
style=filled;
color=gray75;
324[label="216.89.64.173s;151pkt 151fpkt", shape=rectangle, color=red];
3008[label="216.89.64.173;177pkt 177fpkt", shape=pentagon, color=darkviolet];
stat466[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.89.64.173:65269, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65269: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
324--3008[label="1;151pkt 151fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="216.89.64.173" src_port="65269"/>
    </slice>
    <from sec="1060318846" usec="0"/>
    <to sec="1060318874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.26.160.173"/>
    </slice>
    <from sec="1060319163" usec="0"/>
    <to sec="1060319312" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.105.129.177"/>
    </slice>
    <from sec="1060318802" usec="0"/>
    <to sec="1060319172" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.133.129.178"/>
    </slice>
    <from sec="1060319435" usec="0"/>
    <to sec="1060319469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.92.87.180"/>
    </slice>
    <from sec="1060319336" usec="0"/>
    <to sec="1060319354" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="139.112.35.183"/>
    </slice>
    <from sec="1060319566" usec="0"/>
    <to sec="1060319592" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.168.55.183"/>
    </slice>
    <from sec="1060319358" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536673,1.5807,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_475{
style=filled;
color=gray75;
335[label="9.236.240.186s;53pkt 53fpkt", shape=rectangle, color=red];
3076[label="9.236.240.186;107pkt 107fpkt", shape=pentagon, color=darkviolet];
stat475[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.236.240.186:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
335--3076[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="9.236.240.186" src_port="1030"/>
    </slice>
    <from sec="1060319205" usec="0"/>
    <to sec="1060319229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="147.37.145.187"/>
    </slice>
    <from sec="1060318827" usec="0"/>
    <to sec="1060319644" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.657684,1.54751,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_477{
style=filled;
color=gray75;
338[label="201.214.164.187s;33pkt 33fpkt", shape=rectangle, color=red];
3082[label="201.214.164.187;131pkt 131fpkt", shape=pentagon, color=darkviolet];
3892[label="201.214.164.187;131pkt 131fpkt", shape=invtriangle, color=brown];
stat477[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.214.164.187:21050, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21050: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
338--3082[label="1;33pkt 33fpkt"];
338--3892[label="1;33pkt 33fpkt"];
3082--3892[label="1;131pkt 131fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.214.164.187" src_port="21050"/>
    </slice>
    <from sec="1060319138" usec="0"/>
    <to sec="1060319162" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536673,1.5807,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_478{
style=filled;
color=gray75;
339[label="216.50.25.189s;100pkt 100fpkt", shape=rectangle, color=red];
3090[label="216.50.25.189;159pkt 159fpkt", shape=pentagon, color=darkviolet];
stat478[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.50.25.189:61587, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61587: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
339--3090[label="1;100pkt 100fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="216.50.25.189" src_port="61587"/>
    </slice>
    <from sec="1060319465" usec="0"/>
    <to sec="1060319495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.241.120.189"/>
    </slice>
    <from sec="1060319417" usec="0"/>
    <to sec="1060319456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.46.246.189"/>
    </slice>
    <from sec="1060318810" usec="0"/>
    <to sec="1060319699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="82.196.46.190"/>
    </slice>
    <from sec="1060319700" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.135.152.192"/>
    </slice>
    <from sec="1060318808" usec="0"/>
    <to sec="1060319697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.88.53.193"/>
    </slice>
    <from sec="1060319700" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.200.30.194"/>
    </slice>
    <from sec="1060318803" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.10.129.194"/>
    </slice>
    <from sec="1060319325" usec="0"/>
    <to sec="1060319338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.135.152.194"/>
    </slice>
    <from sec="1060318809" usec="0"/>
    <to sec="1060319680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.41.158.195"/>
    </slice>
    <from sec="1060318807" usec="0"/>
    <to sec="1060319699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.160.115.197"/>
    </slice>
    <from sec="1060319371" usec="0"/>
    <to sec="1060319390" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.108.151.197"/>
    </slice>
    <from sec="1060319109" usec="0"/>
    <to sec="1060319119" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.25.25.198"/>
    </slice>
    <from sec="1060318802" usec="0"/>
    <to sec="1060319160" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="82.247.3.199"/>
    </slice>
    <from sec="1060318943" usec="0"/>
    <to sec="1060319698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.120.32.199"/>
    </slice>
    <from sec="1060318920" usec="0"/>
    <to sec="1060318939" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.244.164.199"/>
    </slice>
    <from sec="1060318861" usec="0"/>
    <to sec="1060318891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="82.192.172.200"/>
    </slice>
    <from sec="1060319403" usec="0"/>
    <to sec="1060319424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="82.131.108.201"/>
    </slice>
    <from sec="1060318961" usec="0"/>
    <to sec="1060319453" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536673,1.5807,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_496{
style=filled;
color=gray75;
359[label="216.81.21.202s;227pkt 227fpkt", shape=rectangle, color=red];
3188[label="216.81.21.202;251pkt 251fpkt", shape=pentagon, color=darkviolet];
stat496[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.81.21.202:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
359--3188[label="1;227pkt 227fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="216.81.21.202" src_port="1028"/>
    </slice>
    <from sec="1060319639" usec="0"/>
    <to sec="1060319658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="174.171.110.203"/>
    </slice>
    <from sec="1060319659" usec="0"/>
    <to sec="1060319684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.25.133.203"/>
    </slice>
    <from sec="1060319064" usec="0"/>
    <to sec="1060319107" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.203.37.204"/>
    </slice>
    <from sec="1060319506" usec="0"/>
    <to sec="1060319565" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="82.102.155.204"/>
    </slice>
    <from sec="1060319642" usec="0"/>
    <to sec="1060319697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.657684,1.54751,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_502{
style=filled;
color=gray75;
361[label="82.209.52.205s;62pkt 62fpkt", shape=rectangle, color=red];
3202[label="82.209.52.205;124pkt 124fpkt", shape=pentagon, color=darkviolet];
3944[label="82.209.52.205;124pkt 124fpkt", shape=invtriangle, color=brown];
stat502[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.209.52.205:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
361--3202[label="1;62pkt 62fpkt"];
361--3944[label="1;62pkt 62fpkt"];
3202--3944[label="1;124pkt 124fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="82.209.52.205" src_port="1026"/>
    </slice>
    <from sec="1060319666" usec="0"/>
    <to sec="1060319686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.30.136.206"/>
    </slice>
    <from sec="1060318811" usec="0"/>
    <to sec="1060319699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.58.192.206"/>
    </slice>
    <from sec="1060319700" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.48.201.207"/>
    </slice>
    <from sec="1060318804" usec="0"/>
    <to sec="1060319320" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.101.69.209"/>
    </slice>
    <from sec="1060319700" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.113.97.212"/>
    </slice>
    <from sec="1060319700" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.36.178.212"/>
    </slice>
    <from sec="1060318905" usec="0"/>
    <to sec="1060319674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.79.146.213"/>
    </slice>
    <from sec="1060319023" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0019,1.58876,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_512{
style=filled;
color=gray75;
1122[label="148.238.136.188;d;74pkt 74fpkt", shape=diamond, color=yellow];
1123[label="19.4.17.97;s;67pkt 67fpkt", shape=diamond, color=yellow];
1727[label="19.4.17.97;s;59pkt 59fpkt", shape=hexagon, color=black];
2619[label="19.4.17.97;73pkt 73fpkt", shape=pentagon, color=darkviolet];
stat512[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.4.17.97:80, 148.238.136.188:*}[82.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.5348%)&lt;BR/&gt; 53: (1.0989%)&lt;BR/&gt; 62644: (0.732601%)&lt;BR/&gt; 62642: (0.732601%)&lt;BR/&gt; 62639: (0.732601%)&gt;];
}
1122--1123[label="0.940299;63pkt 63fpkt"];
1122--1134[label="0.0147059;1pkt 1fpkt"];
1122--1727[label="0.966102;57pkt 57fpkt"];
1122--2619[label="0.863014;63pkt 63fpkt"];
1122--2903[label="0.0149254;1pkt 1fpkt"];
1122--3253[label="0.0144928;1pkt 1fpkt"];
1122--3801[label="0.0149254;1pkt 1fpkt"];
1122--4297[label="0.0147059;1pkt 1fpkt"];
1123--1589[label="0.0298507;2pkt 2fpkt"];
1123--1727[label="1;59pkt 59fpkt"];
1123--2619[label="1;67pkt 67fpkt"];
1727--2619[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter dst_ip="148.238.136.188" src_ip="19.4.17.97" src_port="80"/>
    </slice>
    <from sec="1060318806" usec="0"/>
    <to sec="1060319655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.145.149.215"/>
    </slice>
    <from sec="1060318807" usec="0"/>
    <to sec="1060319699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.58.234.216"/>
    </slice>
    <from sec="1060318929" usec="0"/>
    <to sec="1060318959" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889528,1.5433,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_515{
style=filled;
color=gray75;
373[label="20.184.3.217s;83pkt 83fpkt", shape=rectangle, color=red];
3268[label="20.184.3.217;101pkt 101fpkt", shape=pentagon, color=darkviolet];
3970[label="20.184.3.217;101pkt 101fpkt", shape=invtriangle, color=brown];
4300[label="20.184.3.217;101pkt 101fpkt", shape=invhouse, color=bisque];
stat515[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.184.3.217:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
373--3268[label="1;83pkt 83fpkt"];
373--3970[label="1;83pkt 83fpkt"];
373--4300[label="1;83pkt 83fpkt"];
3268--3970[label="1;101pkt 101fpkt"];
3268--4300[label="1;101pkt 101fpkt"];
3970--4300[label="1;101pkt 101fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="20.184.3.217" src_port="1025"/>
    </slice>
    <from sec="1060319544" usec="0"/>
    <to sec="1060319560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="82.208.144.217"/>
    </slice>
    <from sec="1060319121" usec="0"/>
    <to sec="1060319153" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.76.66.219"/>
    </slice>
    <from sec="1060319093" usec="0"/>
    <to sec="1060319141" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.17.59.220"/>
    </slice>
    <from sec="1060318813" usec="0"/>
    <to sec="1060319697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.224.231.220"/>
    </slice>
    <from sec="1060319248" usec="0"/>
    <to sec="1060319691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.794011,1.56228,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_520{
style=filled;
color=gray75;
1336[label="147.4.2.92;d;64pkt 64fpkt", shape=diamond, color=yellow];
1429[label="214.48.35.125;s;18pkt 18fpkt", shape=diamond, color=yellow];
1448[label="20.54.20.222;s;16pkt 16fpkt", shape=diamond, color=yellow];
2090[label="16.136.97.8;29pkt 29fpkt", shape=pentagon, color=darkviolet];
3285[label="20.54.20.222;16pkt 16fpkt", shape=pentagon, color=darkviolet];
3977[label="20.54.20.222;16pkt 16fpkt", shape=invtriangle, color=brown];
stat520[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.136.97.8:*, 147.4.2.92:80}[41.4286%]&lt;BR/&gt;{20.54.20.222:*, 147.4.2.92:80}[22.8571%]&lt;BR/&gt;{214.48.35.125:*, 147.4.2.92:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.7421%)&lt;BR/&gt; 4691: (1.25786%)&lt;BR/&gt; 4690: (1.25786%)&lt;BR/&gt; 4689: (1.25786%)&lt;BR/&gt; 4688: (1.25786%)&gt;];
}
1336--1429[label="0.777778;14pkt 14fpkt"];
1336--1448[label="1;16pkt 16fpkt"];
1336--2004[label="0.015625;1pkt 1fpkt"];
1336--2021[label="0.015625;1pkt 1fpkt"];
1336--2028[label="0.015625;1pkt 1fpkt"];
1336--2090[label="0.931034;27pkt 27fpkt"];
1336--3285[label="1;16pkt 16fpkt"];
1336--3977[label="1;16pkt 16fpkt"];
1448--3285[label="1;16pkt 16fpkt"];
1448--3977[label="1;16pkt 16fpkt"];
3285--3977[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="147.4.2.92" dst_port="80" src_ip="16.136.97.8"/>
      <filter dst_ip="147.4.2.92" dst_port="80" src_ip="214.48.35.125"/>
      <filter dst_ip="147.4.2.92" dst_port="80" src_ip="20.54.20.222"/>
    </slice>
    <from sec="1060318817" usec="0"/>
    <to sec="1060319684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.84.20.226"/>
    </slice>
    <from sec="1060319700" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.144.118.226"/>
    </slice>
    <from sec="1060319700" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="139.112.3.227"/>
    </slice>
    <from sec="1060319285" usec="0"/>
    <to sec="1060319668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.198.117.228"/>
    </slice>
    <from sec="1060318860" usec="0"/>
    <to sec="1060319699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.234.246.229"/>
    </slice>
    <from sec="1060319179" usec="0"/>
    <to sec="1060319186" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.657684,1.54751,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_526{
style=filled;
color=gray75;
388[label="17.103.228.231s;169pkt 169fpkt", shape=rectangle, color=red];
3315[label="17.103.228.231;205pkt 205fpkt", shape=pentagon, color=darkviolet];
3991[label="17.103.228.231;205pkt 205fpkt", shape=invtriangle, color=brown];
stat526[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.103.228.231:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
388--3315[label="1;169pkt 169fpkt"];
388--3991[label="1;169pkt 169fpkt"];
3315--3991[label="1;205pkt 205fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="17.103.228.231" src_port="1026"/>
    </slice>
    <from sec="1060318913" usec="0"/>
    <to sec="1060318947" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.78.150.232"/>
    </slice>
    <from sec="1060318815" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.59.77.235"/>
    </slice>
    <from sec="1060319480" usec="0"/>
    <to sec="1060319684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.174.99.236"/>
    </slice>
    <from sec="1060318955" usec="0"/>
    <to sec="1060318975" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.97.175.239"/>
    </slice>
    <from sec="1060319700" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="82.179.28.240"/>
    </slice>
    <from sec="1060318828" usec="0"/>
    <to sec="1060319695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.18.205.240"/>
    </slice>
    <from sec="1060318806" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.86.80.242"/>
    </slice>
    <from sec="1060319158" usec="0"/>
    <to sec="1060319225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.149.232.243"/>
    </slice>
    <from sec="1060319644" usec="0"/>
    <to sec="1060319677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.162.67.244"/>
    </slice>
    <from sec="1060318804" usec="0"/>
    <to sec="1060319696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.163.174.245"/>
    </slice>
    <from sec="1060318915" usec="0"/>
    <to sec="1060318942" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.144.138.247"/>
    </slice>
    <from sec="1060319388" usec="0"/>
    <to sec="1060319412" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.108.160.248"/>
    </slice>
    <from sec="1060318803" usec="0"/>
    <to sec="1060319697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889528,1.5433,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_539{
style=filled;
color=gray75;
398[label="216.52.46.250s;123pkt 123fpkt", shape=rectangle, color=red];
3382[label="216.52.46.250;197pkt 197fpkt", shape=pentagon, color=darkviolet];
4025[label="216.52.46.250;197pkt 197fpkt", shape=invtriangle, color=brown];
4324[label="216.52.46.250;197pkt 197fpkt", shape=invhouse, color=bisque];
stat539[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.52.46.250:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
398--3382[label="1;123pkt 123fpkt"];
398--4025[label="1;123pkt 123fpkt"];
398--4324[label="1;123pkt 123fpkt"];
3382--4025[label="1;197pkt 197fpkt"];
3382--4324[label="1;197pkt 197fpkt"];
4025--4324[label="1;197pkt 197fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="216.52.46.250" src_port="1027"/>
    </slice>
    <from sec="1060319648" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536673,1.5807,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_540{
style=filled;
color=gray75;
399[label="82.179.149.250s;147pkt 147fpkt", shape=rectangle, color=red];
3384[label="82.179.149.250;198pkt 198fpkt", shape=pentagon, color=darkviolet];
stat540[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.179.149.250:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
399--3384[label="1;147pkt 147fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="82.179.149.250" src_port="1028"/>
    </slice>
    <from sec="1060318910" usec="0"/>
    <to sec="1060318943" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423384,1.63208,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.118.100.255"/>
    </slice>
    <from sec="1060318981" usec="0"/>
    <to sec="1060319018" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_543{
style=filled;
color=gray75;
2036[label="218.76.45.1;152pkt 152fpkt", shape=pentagon, color=darkviolet];
3405[label="218.76.45.1;151pkt 151fpkt", shape=invtriangle, color=brown];
4033[label="218.76.45.1;151pkt 151fpkt", shape=invhouse, color=bisque];
stat543[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.76.45.1:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2036--3405[label="1;151pkt 151fpkt"];
2036--4033[label="1;151pkt 151fpkt"];
3405--4033[label="1;151pkt 151fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="218.76.45.1" src_port="1030"/>
    </slice>
    <from sec="1060318892" usec="0"/>
    <to sec="1060318918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_545{
style=filled;
color=gray75;
2055[label="155.24.120.3;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3412[label="155.24.120.3;8pkt 8fpkt", shape=invtriangle, color=brown];
4036[label="155.24.120.3;7pkt 7fpkt", shape=invhouse, color=bisque];
stat545[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.24.120.3:80, 148.238.59.251:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 35426: (6.81818%)&lt;BR/&gt; 35423: (6.81818%)&lt;BR/&gt; 35422: (6.81818%)&lt;BR/&gt; 35421: (6.81818%)&gt;];
}
2055--3412[label="1;7pkt 7fpkt"];
2055--4036[label="1;7pkt 7fpkt"];
3412--4036[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="148.238.59.251" src_ip="155.24.120.3" src_port="80"/>
    </slice>
    <from sec="1060319292" usec="0"/>
    <to sec="1060319409" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_546{
style=filled;
color=gray75;
2066[label="200.11.98.4;46pkt 46fpkt", shape=pentagon, color=darkviolet];
3417[label="200.11.98.4;45pkt 45fpkt", shape=invtriangle, color=brown];
4038[label="200.11.98.4;45pkt 45fpkt", shape=invhouse, color=bisque];
stat546[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.11.98.4:*, *:80}[60.8696%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30.1471%)&lt;BR/&gt; 443: (7.72059%)&lt;BR/&gt; 1032: (5.51471%)&lt;BR/&gt; 53: (5.51471%)&lt;BR/&gt; 7001: (2.20588%)&gt;];
}
2066--3417[label="1;45pkt 45fpkt"];
2066--4038[label="1;45pkt 45fpkt"];
3417--4038[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="200.11.98.4"/>
    </slice>
    <from sec="1060318886" usec="0"/>
    <to sec="1060319667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.21.70.5"/>
    </slice>
    <from sec="1060319223" usec="0"/>
    <to sec="1060319580" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_548{
style=filled;
color=gray75;
2069[label="200.176.85.5;258pkt 258fpkt", shape=pentagon, color=darkviolet];
3419[label="200.176.85.5;257pkt 257fpkt", shape=invtriangle, color=brown];
stat548[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.176.85.5:1027, *:137}[59.6899%]&lt;BR/&gt;{200.176.85.5:1028, *:137}[40.3101%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1027: (29.9029%)&lt;BR/&gt; 1028: (20.0971%)&gt;];
}
2069--3419[label="1;257pkt 257fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.176.85.5" src_port="1027"/>
      <filter dst_port="137" src_ip="200.176.85.5" src_port="1028"/>
    </slice>
    <from sec="1060319385" usec="0"/>
    <to sec="1060319664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889528,1.5433,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_551{
style=filled;
color=gray75;
93[label="218.214.229.6s;227pkt 227fpkt", shape=rectangle, color=red];
2081[label="218.214.229.6;232pkt 232fpkt", shape=pentagon, color=darkviolet];
3425[label="218.214.229.6;232pkt 232fpkt", shape=invtriangle, color=brown];
4043[label="218.214.229.6;232pkt 232fpkt", shape=invhouse, color=bisque];
stat551[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.214.229.6:61093, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61093: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
93--2081[label="0.995595;226pkt 226fpkt"];
93--3425[label="0.995595;226pkt 226fpkt"];
93--4043[label="0.995595;226pkt 226fpkt"];
2081--3425[label="1;232pkt 232fpkt"];
2081--4043[label="1;232pkt 232fpkt"];
3425--4043[label="1;232pkt 232fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="218.214.229.6" src_port="61093"/>
    </slice>
    <from sec="1060319154" usec="0"/>
    <to sec="1060319189" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.19.80.7"/>
    </slice>
    <from sec="1060318821" usec="0"/>
    <to sec="1060319686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_554{
style=filled;
color=gray75;
2091[label="82.201.64.9;209pkt 209fpkt", shape=pentagon, color=darkviolet];
3431[label="82.201.64.9;208pkt 208fpkt", shape=invtriangle, color=brown];
stat554[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.201.64.9:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2091--3431[label="1;208pkt 208fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="82.201.64.9" src_port="1026"/>
    </slice>
    <from sec="1060319425" usec="0"/>
    <to sec="1060319457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_555{
style=filled;
color=gray75;
2093[label="216.67.82.9;62pkt 62fpkt", shape=pentagon, color=darkviolet];
3432[label="216.67.82.9;61pkt 61fpkt", shape=invtriangle, color=brown];
stat555[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.67.82.9:*, 192.192.215.74:80}[66.129%]&lt;BR/&gt;{216.67.82.9:*, 192.192.215.75:80}[27.4194%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.748%)&lt;BR/&gt; 445: (3.25203%)&lt;BR/&gt; 4854: (0.813008%)&lt;BR/&gt; 4184: (0.813008%)&lt;BR/&gt; 4182: (0.813008%)&gt;];
}
2093--3432[label="1;61pkt 61fpkt"];
</description>
    <slice>
      <filter dst_ip="192.192.215.74" dst_port="80" src_ip="216.67.82.9"/>
      <filter dst_ip="192.192.215.75" dst_port="80" src_ip="216.67.82.9"/>
    </slice>
    <from sec="1060318869" usec="0"/>
    <to sec="1060319463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.794011,1.56228,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_556{
style=filled;
color=gray75;
1101[label="200.11.100.101;d;106pkt 106fpkt", shape=diamond, color=yellow];
2094[label="218.42.131.9;16pkt 16fpkt", shape=pentagon, color=darkviolet];
2594[label="82.53.76.93;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3433[label="218.42.131.9;16pkt 16fpkt", shape=invtriangle, color=brown];
stat556[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 200.11.100.101:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8889: (10.473%)&lt;BR/&gt; 18540: (6.75676%)&lt;BR/&gt; 13846: (6.41892%)&lt;BR/&gt; 27719: (6.08108%)&lt;BR/&gt; 2274: (5.74324%)&gt;];
}
1101--2094[label="0.875;14pkt 14fpkt"];
1101--2594[label="0.9;9pkt 9fpkt"];
1101--3433[label="0.875;14pkt 14fpkt"];
2094--3433[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="200.11.100.101"/>
    </slice>
    <from sec="1060318801" usec="0"/>
    <to sec="1060319697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_557{
style=filled;
color=gray75;
2100[label="16.19.85.10;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3435[label="16.19.85.10;10pkt 10fpkt", shape=invtriangle, color=brown];
stat557[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.19.85.10:*, 169.92.43.197:25}[20%]&lt;BR/&gt;{16.19.85.10:*, 148.239.64.242:25}[20%]&lt;BR/&gt;{16.19.85.10:*, 148.239.64.245:25}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 36124: (5.26316%)&lt;BR/&gt; 36123: (5.26316%)&lt;BR/&gt; 31011: (5.26316%)&lt;BR/&gt; 30779: (5.26316%)&gt;];
}
2100--3435[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="148.239.64.245" dst_port="25" src_ip="16.19.85.10"/>
      <filter dst_ip="148.239.64.242" dst_port="25" src_ip="16.19.85.10"/>
      <filter dst_ip="169.92.43.197" dst_port="25" src_ip="16.19.85.10"/>
    </slice>
    <from sec="1060319009" usec="0"/>
    <to sec="1060319694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_558{
style=filled;
color=gray75;
2126[label="16.19.85.14;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3445[label="16.19.85.14;4pkt 4fpkt", shape=invtriangle, color=brown];
stat558[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.19.85.14:34534, 172.235.1.45:25}[20%]&lt;BR/&gt;{16.19.85.14:35996, 172.235.59.47:25}[20%]&lt;BR/&gt;{16.19.85.14:34695, 172.235.11.114:25}[20%]&lt;BR/&gt;{16.19.85.14:31694, 172.235.0.122:25}[20%]&lt;BR/&gt;{16.19.85.14:34656, 172.235.2.202:25}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 35996: (11.1111%)&lt;BR/&gt; 34695: (11.1111%)&lt;BR/&gt; 34534: (11.1111%)&lt;BR/&gt; 31694: (11.1111%)&gt;];
}
2126--3445[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="172.235.2.202" dst_port="25" src_ip="16.19.85.14" src_port="34656"/>
      <filter dst_ip="172.235.0.122" dst_port="25" src_ip="16.19.85.14" src_port="31694"/>
      <filter dst_ip="172.235.11.114" dst_port="25" src_ip="16.19.85.14" src_port="34695"/>
      <filter dst_ip="172.235.59.47" dst_port="25" src_ip="16.19.85.14" src_port="35996"/>
      <filter dst_ip="172.235.1.45" dst_port="25" src_ip="16.19.85.14" src_port="34534"/>
    </slice>
    <from sec="1060319275" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.73.154.15"/>
    </slice>
    <from sec="1060319700" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.55.22.16"/>
    </slice>
    <from sec="1060318877" usec="0"/>
    <to sec="1060318985" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_561{
style=filled;
color=gray75;
2134[label="8.197.40.16;122pkt 122fpkt", shape=pentagon, color=darkviolet];
3449[label="8.197.40.16;122pkt 122fpkt", shape=invtriangle, color=brown];
stat561[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.197.40.16:29828, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 29828: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2134--3449[label="1;122pkt 122fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="8.197.40.16" src_port="29828"/>
    </slice>
    <from sec="1060319650" usec="0"/>
    <to sec="1060319673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_562{
style=filled;
color=gray75;
2136[label="18.104.46.16;74pkt 74fpkt", shape=pentagon, color=darkviolet];
3450[label="18.104.46.16;73pkt 73fpkt", shape=invtriangle, color=brown];
4052[label="18.104.46.16;73pkt 73fpkt", shape=invhouse, color=bisque];
stat562[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.104.46.16:80, 139.112.21.37:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33103: (0.681818%)&lt;BR/&gt; 33099: (0.681818%)&lt;BR/&gt; 33098: (0.681818%)&lt;BR/&gt; 33096: (0.681818%)&gt;];
}
2136--3450[label="1;73pkt 73fpkt"];
2136--4052[label="1;73pkt 73fpkt"];
3450--4052[label="1;73pkt 73fpkt"];
</description>
    <slice>
      <filter dst_ip="139.112.21.37" src_ip="18.104.46.16" src_port="80"/>
    </slice>
    <from sec="1060319517" usec="0"/>
    <to sec="1060319558" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_563{
style=filled;
color=gray75;
2145[label="204.135.152.16;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3453[label="204.135.152.16;6pkt 6fpkt", shape=invtriangle, color=brown];
4053[label="204.135.152.16;6pkt 6fpkt", shape=invhouse, color=bisque];
stat563[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.135.152.16:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 50163: (8.82353%)&lt;BR/&gt; 3864: (8.82353%)&lt;BR/&gt; 2074: (8.82353%)&lt;BR/&gt; 1459: (8.82353%)&gt;];
}
2145--3453[label="1;5pkt 5fpkt"];
2145--4053[label="1;5pkt 5fpkt"];
3453--4053[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="204.135.152.16" src_port="1863"/>
    </slice>
    <from sec="1060318818" usec="0"/>
    <to sec="1060319692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_564{
style=filled;
color=gray75;
2177[label="215.171.184.20;104pkt 104fpkt", shape=pentagon, color=darkviolet];
3465[label="215.171.184.20;104pkt 104fpkt", shape=invtriangle, color=brown];
4060[label="215.171.184.20;104pkt 104fpkt", shape=invhouse, color=bisque];
stat564[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.171.184.20:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2177--3465[label="1;104pkt 104fpkt"];
2177--4060[label="1;104pkt 104fpkt"];
3465--4060[label="1;104pkt 104fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.171.184.20" src_port="1026"/>
    </slice>
    <from sec="1060319679" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_566{
style=filled;
color=gray75;
2183[label="204.135.159.21;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3467[label="204.135.159.21;7pkt 7fpkt", shape=invtriangle, color=brown];
stat566[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.135.159.21:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 50264: (7.69231%)&lt;BR/&gt; 4827: (7.69231%)&lt;BR/&gt; 3588: (7.69231%)&lt;BR/&gt; 3415: (7.69231%)&gt;];
}
2183--3467[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="204.135.159.21" src_port="1863"/>
    </slice>
    <from sec="1060318811" usec="0"/>
    <to sec="1060319619" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="139.112.42.22"/>
    </slice>
    <from sec="1060318808" usec="0"/>
    <to sec="1060319699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.50.184.23"/>
    </slice>
    <from sec="1060318936" usec="0"/>
    <to sec="1060319699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_569{
style=filled;
color=gray75;
2201[label="200.64.111.25;68pkt 68fpkt", shape=pentagon, color=darkviolet];
3477[label="200.64.111.25;68pkt 68fpkt", shape=invtriangle, color=brown];
stat569[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.64.111.25:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4873: (1.47059%)&lt;BR/&gt; 3719: (1.47059%)&lt;BR/&gt; 4968: (0.735294%)&lt;BR/&gt; 4946: (0.735294%)&gt;];
}
2201--3477[label="1;68pkt 68fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="200.64.111.25"/>
    </slice>
    <from sec="1060318806" usec="0"/>
    <to sec="1060319698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_570{
style=filled;
color=gray75;
2226[label="214.18.203.29;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3490[label="214.18.203.29;6pkt 6fpkt", shape=invtriangle, color=brown];
4073[label="214.18.203.29;6pkt 6fpkt", shape=invhouse, color=bisque];
stat570[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.18.203.29:*, 147.189.138.128:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3534: (8.82353%)&lt;BR/&gt; 3450: (8.82353%)&lt;BR/&gt; 3245: (8.82353%)&lt;BR/&gt; 2861: (8.82353%)&gt;];
}
2226--3490[label="1;5pkt 5fpkt"];
2226--4073[label="1;5pkt 5fpkt"];
3490--4073[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="147.189.138.128" dst_port="80" src_ip="214.18.203.29"/>
    </slice>
    <from sec="1060319621" usec="0"/>
    <to sec="1060319693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_571{
style=filled;
color=gray75;
2237[label="214.166.59.32;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3495[label="214.166.59.32;12pkt 12fpkt", shape=invtriangle, color=brown];
4076[label="214.166.59.32;11pkt 11fpkt", shape=invhouse, color=bisque];
stat571[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.166.59.32:80, 214.162.155.187:*}[66.6667%]&lt;BR/&gt;{214.166.59.32:443, 214.162.155.187:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (32.3529%)&lt;BR/&gt; 443: (17.6471%)&lt;BR/&gt; 42449: (4.41176%)&lt;BR/&gt; 42448: (4.41176%)&lt;BR/&gt; 42411: (4.41176%)&gt;];
}
2237--3495[label="1;11pkt 11fpkt"];
2237--4076[label="1;11pkt 11fpkt"];
3495--4076[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="214.162.155.187" src_ip="214.166.59.32" src_port="80"/>
      <filter dst_ip="214.162.155.187" src_ip="214.166.59.32" src_port="443"/>
    </slice>
    <from sec="1060319648" usec="0"/>
    <to sec="1060319666" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_572{
style=filled;
color=gray75;
2245[label="80.140.41.33;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3502[label="80.140.41.33;1pkt 1fpkt", shape=invtriangle, color=brown];
stat572[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.140.41.33:80, 169.92.216.83:1328}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1328: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2245--3502[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.92.216.83" dst_port="1328" src_ip="80.140.41.33" src_port="80"/>
    </slice>
    <from sec="1060319671" usec="0"/>
    <to sec="1060319691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_573{
style=filled;
color=gray75;
2258[label="204.135.159.35;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3510[label="204.135.159.35;2pkt 2fpkt", shape=invtriangle, color=brown];
stat573[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.135.159.35:1863, 200.50.137.137:1729}[50%]&lt;BR/&gt;{204.135.159.35:1863, 147.189.154.244:4203}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1729: (33.3333%)&lt;BR/&gt; 4203: (16.6667%)&gt;];
}
2258--3510[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.189.154.244" dst_port="4203" src_ip="204.135.159.35" src_port="1863"/>
      <filter dst_ip="200.50.137.137" dst_port="1729" src_ip="204.135.159.35" src_port="1863"/>
    </slice>
    <from sec="1060318828" usec="0"/>
    <to sec="1060319699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.91.93.36"/>
    </slice>
    <from sec="1060318802" usec="0"/>
    <to sec="1060319699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_575{
style=filled;
color=gray75;
2268[label="17.54.231.36;200pkt 200fpkt", shape=pentagon, color=darkviolet];
3515[label="17.54.231.36;199pkt 199fpkt", shape=invtriangle, color=brown];
4085[label="17.54.231.36;178pkt 178fpkt", shape=invhouse, color=bisque];
stat575[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.54.231.36:1032, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1032: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2268--3515[label="1;199pkt 199fpkt"];
2268--4085[label="1;178pkt 178fpkt"];
3515--4085[label="1;178pkt 178fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="17.54.231.36" src_port="1032"/>
    </slice>
    <from sec="1060319510" usec="0"/>
    <to sec="1060319544" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="82.219.137.39"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_578{
style=filled;
color=gray75;
2324[label="202.255.34.49;187pkt 187fpkt", shape=pentagon, color=darkviolet];
3538[label="202.255.34.49;188pkt 188fpkt", shape=invtriangle, color=brown];
4092[label="202.255.34.49;188pkt 188fpkt", shape=invhouse, color=bisque];
stat578[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.255.34.49:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2324--3538[label="1;187pkt 187fpkt"];
2324--4092[label="1;187pkt 187fpkt"];
3538--4092[label="1;188pkt 188fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.255.34.49" src_port="1025"/>
    </slice>
    <from sec="1060319375" usec="0"/>
    <to sec="1060319405" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.135.159.52"/>
    </slice>
    <from sec="1060318808" usec="0"/>
    <to sec="1060319239" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_581{
style=filled;
color=gray75;
2352[label="208.200.197.54;14pkt 14fpkt", shape=pentagon, color=darkviolet];
3549[label="208.200.197.54;14pkt 14fpkt", shape=invtriangle, color=brown];
4099[label="208.200.197.54;14pkt 14fpkt", shape=invhouse, color=bisque];
stat581[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.200.197.54:25, 172.235.19.121:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 1967: (3.57143%)&lt;BR/&gt; 1966: (3.57143%)&lt;BR/&gt; 1963: (3.57143%)&lt;BR/&gt; 1962: (3.57143%)&gt;];
}
2352--3549[label="1;14pkt 14fpkt"];
2352--4099[label="1;14pkt 14fpkt"];
3549--4099[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="172.235.19.121" src_ip="208.200.197.54" src_port="25"/>
    </slice>
    <from sec="1060318826" usec="0"/>
    <to sec="1060319673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.56.222.55"/>
    </slice>
    <from sec="1060318951" usec="0"/>
    <to sec="1060319681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_583{
style=filled;
color=gray75;
2375[label="139.112.183.58;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3558[label="139.112.183.58;13pkt 13fpkt", shape=invtriangle, color=brown];
stat583[shape=component, label=&lt;Rules:&lt;BR/&gt;{139.112.183.58:*, 175.202.247.5:80}[53.8462%]&lt;BR/&gt;{139.112.183.58:*, 208.193.2.91:80}[30.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.3077%)&lt;BR/&gt; 0: (7.69231%)&lt;BR/&gt; 5190: (3.84615%)&lt;BR/&gt; 2642: (3.84615%)&lt;BR/&gt; 2641: (3.84615%)&gt;];
}
2375--3558[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="175.202.247.5" dst_port="80" src_ip="139.112.183.58"/>
      <filter dst_ip="208.193.2.91" dst_port="80" src_ip="139.112.183.58"/>
    </slice>
    <from sec="1060318805" usec="0"/>
    <to sec="1060319698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_584{
style=filled;
color=gray75;
2384[label="82.222.233.60;165pkt 165fpkt", shape=pentagon, color=darkviolet];
3563[label="82.222.233.60;165pkt 165fpkt", shape=invtriangle, color=brown];
4103[label="82.222.233.60;165pkt 165fpkt", shape=invhouse, color=bisque];
stat584[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.222.233.60:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2384--3563[label="1;165pkt 165fpkt"];
2384--4103[label="1;165pkt 165fpkt"];
3563--4103[label="1;165pkt 165fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="82.222.233.60" src_port="1028"/>
    </slice>
    <from sec="1060319276" usec="0"/>
    <to sec="1060319302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.209.68.62"/>
    </slice>
    <from sec="1060319473" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_586{
style=filled;
color=gray75;
2394[label="216.147.152.62;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3570[label="216.147.152.62;1pkt 1fpkt", shape=invtriangle, color=brown];
stat586[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.147.152.62:4171, 214.162.155.1:1755}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4171: (50%)&lt;BR/&gt; 1755: (50%)&gt;];
}
2394--3570[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.162.155.1" dst_port="1755" src_ip="216.147.152.62" src_port="4171"/>
    </slice>
    <from sec="1060319700" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_587{
style=filled;
color=gray75;
2414[label="204.135.159.65;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3578[label="204.135.159.65;2pkt 2fpkt", shape=invtriangle, color=brown];
4109[label="204.135.159.65;1pkt 1fpkt", shape=invhouse, color=bisque];
stat587[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.135.159.65:1863, 200.50.152.25:4290}[50%]&lt;BR/&gt;{204.135.159.65:1863, 214.162.155.129:1379}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1379: (30%)&lt;BR/&gt; 4290: (20%)&gt;];
}
2414--3578[label="1;2pkt 2fpkt"];
2414--4109[label="1;1pkt 1fpkt"];
3578--4109[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.162.155.129" dst_port="1379" src_ip="204.135.159.65" src_port="1863"/>
      <filter dst_ip="200.50.152.25" dst_port="4290" src_ip="204.135.159.65" src_port="1863"/>
    </slice>
    <from sec="1060318862" usec="0"/>
    <to sec="1060319697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_588{
style=filled;
color=gray75;
2421[label="16.19.91.67;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3581[label="16.19.91.67;10pkt 10fpkt", shape=invtriangle, color=brown];
4111[label="16.19.91.67;10pkt 10fpkt", shape=invhouse, color=bisque];
stat588[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.19.91.67:80, 147.4.64.149:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1268: (5%)&lt;BR/&gt; 1267: (5%)&lt;BR/&gt; 1266: (5%)&lt;BR/&gt; 1265: (5%)&gt;];
}
2421--3581[label="1;10pkt 10fpkt"];
2421--4111[label="1;10pkt 10fpkt"];
3581--4111[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="147.4.64.149" src_ip="16.19.91.67" src_port="80"/>
    </slice>
    <from sec="1060318898" usec="0"/>
    <to sec="1060319152" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.135.115.70"/>
    </slice>
    <from sec="1060318865" usec="0"/>
    <to sec="1060319269" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_590{
style=filled;
color=gray75;
2443[label="82.179.155.70;130pkt 130fpkt", shape=pentagon, color=darkviolet];
3590[label="82.179.155.70;129pkt 129fpkt", shape=invtriangle, color=brown];
4115[label="82.179.155.70;130pkt 130fpkt", shape=invhouse, color=bisque];
stat590[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.179.155.70:62095, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62095: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2443--3590[label="1;129pkt 129fpkt"];
2443--4115[label="1;130pkt 130fpkt"];
3590--4115[label="1;129pkt 129fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="82.179.155.70" src_port="62095"/>
    </slice>
    <from sec="1060319115" usec="0"/>
    <to sec="1060319137" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="82.179.26.71"/>
    </slice>
    <from sec="1060318804" usec="0"/>
    <to sec="1060319699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_592{
style=filled;
color=gray75;
2449[label="215.129.94.71;144pkt 144fpkt", shape=pentagon, color=darkviolet];
3594[label="215.129.94.71;143pkt 143fpkt", shape=invtriangle, color=brown];
stat592[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.129.94.71:1040, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1040: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2449--3594[label="1;143pkt 143fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.129.94.71" src_port="1040"/>
    </slice>
    <from sec="1060319225" usec="0"/>
    <to sec="1060319252" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.104.13.72"/>
    </slice>
    <from sec="1060318801" usec="0"/>
    <to sec="1060319302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_594{
style=filled;
color=gray75;
2456[label="201.17.227.72;159pkt 159fpkt", shape=pentagon, color=darkviolet];
3599[label="201.17.227.72;159pkt 159fpkt", shape=invtriangle, color=brown];
4121[label="201.17.227.72;159pkt 159fpkt", shape=invhouse, color=bisque];
stat594[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.17.227.72:53, *:*}[88.0503%]&lt;BR/&gt;{201.17.227.72:*, *:53}[21.3836%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (54.717%)&lt;BR/&gt; 36356: (4.08805%)&lt;BR/&gt; 32768: (3.77358%)&lt;BR/&gt; 0: (3.77358%)&lt;BR/&gt; 32776: (2.20126%)&gt;];
}
2456--3599[label="1;159pkt 159fpkt"];
2456--4121[label="1;159pkt 159fpkt"];
3599--4121[label="1;159pkt 159fpkt"];
</description>
    <slice>
      <filter src_ip="201.17.227.72" src_port="53"/>
      <filter dst_port="53" src_ip="201.17.227.72"/>
    </slice>
    <from sec="1060318830" usec="0"/>
    <to sec="1060319697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.46.149.74"/>
    </slice>
    <from sec="1060318808" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="19.108.216.75"/>
    </slice>
    <from sec="1060318853" usec="0"/>
    <to sec="1060318857" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_597{
style=filled;
color=gray75;
2479[label="170.122.50.77;93pkt 93fpkt", shape=pentagon, color=darkviolet];
3610[label="170.122.50.77;92pkt 92fpkt", shape=invtriangle, color=brown];
4126[label="170.122.50.77;92pkt 92fpkt", shape=invhouse, color=bisque];
stat597[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.122.50.77:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2479--3610[label="1;92pkt 92fpkt"];
2479--4126[label="1;92pkt 92fpkt"];
3610--4126[label="1;92pkt 92fpkt"];
</description>
    <slice>
      <filter src_ip="170.122.50.77"/>
    </slice>
    <from sec="1060318815" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_598{
style=filled;
color=gray75;
2494[label="19.72.67.80;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3616[label="19.72.67.80;5pkt 5fpkt", shape=invtriangle, color=brown];
4129[label="19.72.67.80;5pkt 5fpkt", shape=invhouse, color=bisque];
stat598[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.72.67.80:80, 139.112.41.88:1238}[20%]&lt;BR/&gt;{19.72.67.80:80, 139.112.136.88:1754}[20%]&lt;BR/&gt;{19.72.67.80:80, 139.112.136.88:1755}[20%]&lt;BR/&gt;{19.72.67.80:80, 139.112.44.193:49545}[20%]&lt;BR/&gt;{19.72.67.80:80, 139.112.44.193:49552}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49552: (10%)&lt;BR/&gt; 49545: (10%)&lt;BR/&gt; 1755: (10%)&lt;BR/&gt; 1754: (10%)&gt;];
}
2494--3616[label="1;5pkt 5fpkt"];
2494--4129[label="1;5pkt 5fpkt"];
3616--4129[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="139.112.44.193" dst_port="49552" src_ip="19.72.67.80" src_port="80"/>
      <filter dst_ip="139.112.44.193" dst_port="49545" src_ip="19.72.67.80" src_port="80"/>
      <filter dst_ip="139.112.136.88" dst_port="1755" src_ip="19.72.67.80" src_port="80"/>
      <filter dst_ip="139.112.136.88" dst_port="1754" src_ip="19.72.67.80" src_port="80"/>
      <filter dst_ip="139.112.41.88" dst_port="1238" src_ip="19.72.67.80" src_port="80"/>
    </slice>
    <from sec="1060319152" usec="0"/>
    <to sec="1060319669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.220.7.83"/>
    </slice>
    <from sec="1060318801" usec="0"/>
    <to sec="1060319080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="82.3.41.83"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_603{
style=filled;
color=gray75;
2523[label="204.135.152.83;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3631[label="204.135.152.83;6pkt 6fpkt", shape=invtriangle, color=brown];
stat603[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.135.152.83:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4119: (8.33333%)&lt;BR/&gt; 1727: (8.33333%)&lt;BR/&gt; 1259: (8.33333%)&lt;BR/&gt; 1036: (8.33333%)&gt;];
}
2523--3631[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="204.135.152.83" src_port="1863"/>
    </slice>
    <from sec="1060318811" usec="0"/>
    <to sec="1060319691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_605{
style=filled;
color=gray75;
2556[label="18.70.95.88;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3644[label="18.70.95.88;1pkt 1fpkt", shape=invtriangle, color=brown];
stat605[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.70.95.88:80, 148.238.107.202:8630}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8630: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2556--3644[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.238.107.202" dst_port="8630" src_ip="18.70.95.88" src_port="80"/>
    </slice>
    <from sec="1060319307" usec="0"/>
    <to sec="1060319331" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.96.209.88"/>
    </slice>
    <from sec="1060319051" usec="0"/>
    <to sec="1060319655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_607{
style=filled;
color=gray75;
2577[label="216.22.107.91;40pkt 40fpkt", shape=pentagon, color=darkviolet];
3654[label="216.22.107.91;40pkt 40fpkt", shape=invtriangle, color=brown];
4145[label="216.22.107.91;39pkt 39fpkt", shape=invhouse, color=bisque];
stat607[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.22.107.91:80, 214.162.155.187:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 42766: (1.2605%)&lt;BR/&gt; 42765: (1.2605%)&lt;BR/&gt; 42764: (1.2605%)&lt;BR/&gt; 42760: (1.2605%)&gt;];
}
2577--3654[label="1;40pkt 40fpkt"];
2577--4145[label="1;39pkt 39fpkt"];
3654--4145[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="214.162.155.187" src_ip="216.22.107.91" src_port="80"/>
    </slice>
    <from sec="1060319680" usec="0"/>
    <to sec="1060319691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.183.129.91"/>
    </slice>
    <from sec="1060318812" usec="0"/>
    <to sec="1060319662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.2.102.92"/>
    </slice>
    <from sec="1060318803" usec="0"/>
    <to sec="1060319222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.710156,1.61825,002,1 0 0 0 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_611{
style=filled;
color=gray75;
223[label="82.183.214.96s;66pkt 66fpkt", shape=rectangle, color=red];
3671[label="82.183.214.96;133pkt 133fpkt", shape=invtriangle, color=brown];
stat611[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.183.214.96:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
223--3671[label="0.984848;65pkt 65fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="82.183.214.96" src_port="1030"/>
    </slice>
    <from sec="1060319680" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_612{
style=filled;
color=gray75;
2631[label="8.94.30.98;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3673[label="8.94.30.98;1pkt 1fpkt", shape=invtriangle, color=brown];
4156[label="8.94.30.98;2pkt 2fpkt", shape=invhouse, color=bisque];
stat612[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.94.30.98:80, 147.189.177.157:3124}[50%]&lt;BR/&gt;{8.94.30.98:80, 147.189.177.157:3125}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3124: (30%)&lt;BR/&gt; 3125: (20%)&gt;];
}
2631--3673[label="1;1pkt 1fpkt"];
2631--4156[label="1;2pkt 2fpkt"];
3673--4156[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.189.177.157" dst_port="3125" src_ip="8.94.30.98" src_port="80"/>
      <filter dst_ip="147.189.177.157" dst_port="3124" src_ip="8.94.30.98" src_port="80"/>
    </slice>
    <from sec="1060319579" usec="0"/>
    <to sec="1060319623" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_613{
style=filled;
color=gray75;
2633[label="80.175.77.98;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3674[label="80.175.77.98;5pkt 5fpkt", shape=invtriangle, color=brown];
stat613[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.175.77.98:80, 148.238.104.165:3669}[20%]&lt;BR/&gt;{80.175.77.98:80, 148.238.104.165:3670}[20%]&lt;BR/&gt;{80.175.77.98:80, 148.238.104.165:3671}[20%]&lt;BR/&gt;{80.175.77.98:80, 148.238.104.165:3673}[20%]&lt;BR/&gt;{80.175.77.98:80, 148.238.104.165:3674}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3674: (10%)&lt;BR/&gt; 3673: (10%)&lt;BR/&gt; 3671: (10%)&lt;BR/&gt; 3670: (10%)&gt;];
}
2633--3674[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="148.238.104.165" dst_port="3674" src_ip="80.175.77.98" src_port="80"/>
      <filter dst_ip="148.238.104.165" dst_port="3673" src_ip="80.175.77.98" src_port="80"/>
      <filter dst_ip="148.238.104.165" dst_port="3671" src_ip="80.175.77.98" src_port="80"/>
      <filter dst_ip="148.238.104.165" dst_port="3670" src_ip="80.175.77.98" src_port="80"/>
      <filter dst_ip="148.238.104.165" dst_port="3669" src_ip="80.175.77.98" src_port="80"/>
    </slice>
    <from sec="1060319022" usec="0"/>
    <to sec="1060319232" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="19.108.150.98"/>
    </slice>
    <from sec="1060318890" usec="0"/>
    <to sec="1060318900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_615{
style=filled;
color=gray75;
2663[label="195.174.240.102;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3688[label="195.174.240.102;1pkt 1fpkt", shape=invtriangle, color=brown];
stat615[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.174.240.102:80, 172.235.10.193:3714}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3714: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2663--3688[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.235.10.193" dst_port="3714" src_ip="195.174.240.102" src_port="80"/>
    </slice>
    <from sec="1060319700" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.165.235.103"/>
    </slice>
    <from sec="1060318947" usec="0"/>
    <to sec="1060319664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_617{
style=filled;
color=gray75;
2673[label="200.38.201.104;44pkt 44fpkt", shape=pentagon, color=darkviolet];
3692[label="200.38.201.104;43pkt 43fpkt", shape=invtriangle, color=brown];
4163[label="200.38.201.104;44pkt 44fpkt", shape=invhouse, color=bisque];
stat617[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.38.201.104:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4883: (1.14504%)&lt;BR/&gt; 4720: (1.14504%)&lt;BR/&gt; 4697: (1.14504%)&lt;BR/&gt; 4652: (1.14504%)&gt;];
}
2673--3692[label="1;43pkt 43fpkt"];
2673--4163[label="1;44pkt 44fpkt"];
3692--4163[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="200.38.201.104"/>
    </slice>
    <from sec="1060318854" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.171.29.109"/>
    </slice>
    <from sec="1060318945" usec="0"/>
    <to sec="1060319649" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_619{
style=filled;
color=gray75;
2704[label="212.239.1.110;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3706[label="212.239.1.110;17pkt 17fpkt", shape=invtriangle, color=brown];
stat619[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.239.1.110:80, 147.4.48.208:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 44302: (2.94118%)&lt;BR/&gt; 44301: (2.94118%)&lt;BR/&gt; 44297: (2.94118%)&lt;BR/&gt; 44296: (2.94118%)&gt;];
}
2704--3706[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="147.4.48.208" src_ip="212.239.1.110" src_port="80"/>
    </slice>
    <from sec="1060319315" usec="0"/>
    <to sec="1060319682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.994568,1.55812,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_620{
style=filled;
color=gray75;
1496[label="139.112.231.218;d;39pkt 39fpkt", shape=diamond, color=yellow];
1563[label="219.116.18.212;s;4pkt 4fpkt", shape=diamond, color=yellow];
2705[label="18.45.21.110;31pkt 31fpkt", shape=pentagon, color=darkviolet];
3236[label="219.116.18.212;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3707[label="18.45.21.110;31pkt 31fpkt", shape=invtriangle, color=brown];
3956[label="219.116.18.212;4pkt 4fpkt", shape=invtriangle, color=brown];
4172[label="18.45.21.110;30pkt 30fpkt", shape=invhouse, color=bisque];
stat620[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.45.21.110:80, 139.112.231.218:*}[68.8889%]&lt;BR/&gt;{16.238.155.226:80, 139.112.231.218:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1258: (1.3986%)&lt;BR/&gt; 1257: (1.3986%)&lt;BR/&gt; 1256: (1.3986%)&lt;BR/&gt; 1255: (1.3986%)&gt;];
}
1496--1563[label="1;4pkt 4fpkt"];
1496--2705[label="0.806452;25pkt 25fpkt"];
1496--3236[label="1;4pkt 4fpkt"];
1496--3707[label="0.806452;25pkt 25fpkt"];
1496--3956[label="1;4pkt 4fpkt"];
1496--4172[label="0.833333;25pkt 25fpkt"];
1563--3236[label="1;4pkt 4fpkt"];
1563--3956[label="1;4pkt 4fpkt"];
2705--3707[label="1;31pkt 31fpkt"];
2705--4172[label="1;30pkt 30fpkt"];
3236--3956[label="1;4pkt 4fpkt"];
3707--4172[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="139.112.231.218" src_ip="18.45.21.110" src_port="80"/>
      <filter dst_ip="139.112.231.218" src_ip="16.238.155.226" src_port="80"/>
    </slice>
    <from sec="1060318926" usec="0"/>
    <to sec="1060319610" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="172.235.0.113"/>
    </slice>
    <from sec="1060318801" usec="0"/>
    <to sec="1060319616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_622{
style=filled;
color=gray75;
2726[label="16.130.89.114;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3713[label="16.130.89.114;5pkt 5fpkt", shape=invtriangle, color=brown];
stat622[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.130.89.114:80, 169.92.216.233:4693}[20%]&lt;BR/&gt;{16.130.89.114:80, 169.92.216.233:4695}[20%]&lt;BR/&gt;{16.130.89.114:80, 169.92.216.233:4696}[20%]&lt;BR/&gt;{16.130.89.114:80, 169.92.216.233:4700}[20%]&lt;BR/&gt;{16.130.89.114:80, 169.92.216.233:4701}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4701: (10%)&lt;BR/&gt; 4700: (10%)&lt;BR/&gt; 4696: (10%)&lt;BR/&gt; 4695: (10%)&gt;];
}
2726--3713[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="169.92.216.233" dst_port="4701" src_ip="16.130.89.114" src_port="80"/>
      <filter dst_ip="169.92.216.233" dst_port="4700" src_ip="16.130.89.114" src_port="80"/>
      <filter dst_ip="169.92.216.233" dst_port="4696" src_ip="16.130.89.114" src_port="80"/>
      <filter dst_ip="169.92.216.233" dst_port="4695" src_ip="16.130.89.114" src_port="80"/>
      <filter dst_ip="169.92.216.233" dst_port="4693" src_ip="16.130.89.114" src_port="80"/>
    </slice>
    <from sec="1060319126" usec="0"/>
    <to sec="1060319231" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.32.184.115"/>
    </slice>
    <from sec="1060318801" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.98.66.116"/>
    </slice>
    <from sec="1060318812" usec="0"/>
    <to sec="1060319661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.22.203.117"/>
    </slice>
    <from sec="1060318822" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.697081,1.59517,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_626{
style=filled;
color=gray75;
1439[label="148.239.163.6;d;18pkt 18fpkt", shape=diamond, color=yellow];
1452[label="16.238.197.187;s;8pkt 8fpkt", shape=diamond, color=yellow];
3084[label="16.238.197.187;8pkt 8fpkt", shape=pentagon, color=darkviolet];
stat626[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.238.197.187:80, 148.239.163.6:*}[44.4444%]&lt;BR/&gt;{216.136.159.90:80, 148.239.163.6:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2158: (4.41176%)&lt;BR/&gt; 2157: (4.41176%)&lt;BR/&gt; 2156: (4.41176%)&lt;BR/&gt; 2155: (4.41176%)&gt;];
}
1439--1452[label="1;8pkt 8fpkt"];
1439--2746[label="0.0555556;1pkt 1fpkt"];
1439--3084[label="1;8pkt 8fpkt"];
1439--3730[label="0.0555556;1pkt 1fpkt"];
1439--4180[label="0.0555556;1pkt 1fpkt"];
1452--3084[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="148.239.163.6" src_ip="16.238.197.187" src_port="80"/>
      <filter dst_ip="148.239.163.6" src_ip="216.136.159.90" src_port="80"/>
    </slice>
    <from sec="1060319249" usec="0"/>
    <to sec="1060319605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0371,1.65774,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_627{
style=filled;
color=gray75;
747[label="148.238.81.25;d;505pkt 505fpkt", shape=diamond, color=yellow];
748[label="213.104.145.182;s;501pkt 501fpkt", shape=diamond, color=yellow];
1601[label="213.104.145.182;s;361pkt 361fpkt", shape=hexagon, color=black];
stat627[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.104.145.182:80, 148.238.81.25:*}[30.297%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (20.0439%)&lt;BR/&gt; 445: (4.20629%)&lt;BR/&gt; 4662: (1.93855%)&lt;BR/&gt; 25: (1.93855%)&lt;BR/&gt; 53: (1.57279%)&gt;];
}
747--748[label="1;501pkt 501fpkt"];
747--884[label="0.013245;2pkt 2fpkt"];
747--990[label="0.00456621;1pkt 1fpkt"];
747--1601[label="1;361pkt 361fpkt"];
747--1716[label="0.00884956;1pkt 1fpkt"];
747--2003[label="0.0019802;1pkt 1fpkt"];
747--2004[label="0.00594059;3pkt 3fpkt"];
747--2005[label="0.0039604;2pkt 2fpkt"];
747--2006[label="0.00594059;3pkt 3fpkt"];
747--2010[label="0.00594059;3pkt 3fpkt"];
747--2012[label="0.00792079;4pkt 4fpkt"];
747--2013[label="0.0019802;1pkt 1fpkt"];
747--2015[label="0.00594059;3pkt 3fpkt"];
747--2017[label="0.00594059;3pkt 3fpkt"];
747--2021[label="0.00594059;3pkt 3fpkt"];
747--2022[label="0.0039604;2pkt 2fpkt"];
747--2028[label="0.00594059;3pkt 3fpkt"];
747--2750[label="0.0384615;1pkt 1fpkt"];
747--3731[label="0.0416667;1pkt 1fpkt"];
747--4181[label="0.0434783;1pkt 1fpkt"];
748--1601[label="1;361pkt 361fpkt"];
748--2003[label="0.00199601;1pkt 1fpkt"];
748--2004[label="0.00598802;3pkt 3fpkt"];
748--2005[label="0.00399202;2pkt 2fpkt"];
748--2006[label="0.00598802;3pkt 3fpkt"];
748--2010[label="0.00598802;3pkt 3fpkt"];
748--2012[label="0.00798403;4pkt 4fpkt"];
748--2013[label="0.00199601;1pkt 1fpkt"];
748--2015[label="0.00598802;3pkt 3fpkt"];
748--2017[label="0.00598802;3pkt 3fpkt"];
748--2021[label="0.00598802;3pkt 3fpkt"];
748--2022[label="0.00399202;2pkt 2fpkt"];
748--2028[label="0.00598802;3pkt 3fpkt"];
1601--2003[label="0.00277008;1pkt 1fpkt"];
1601--2004[label="0.00831025;3pkt 3fpkt"];
1601--2005[label="0.00554017;2pkt 2fpkt"];
1601--2006[label="0.00831025;3pkt 3fpkt"];
1601--2010[label="0.00831025;3pkt 3fpkt"];
1601--2012[label="0.0110803;4pkt 4fpkt"];
1601--2013[label="0.00277008;1pkt 1fpkt"];
1601--2015[label="0.00831025;3pkt 3fpkt"];
1601--2021[label="0.00831025;3pkt 3fpkt"];
1601--2022[label="0.00554017;2pkt 2fpkt"];
1601--2028[label="0.00831025;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="148.238.81.25" src_ip="213.104.145.182" src_port="80"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_628{
style=filled;
color=gray75;
2754[label="16.214.32.121;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3733[label="16.214.32.121;12pkt 12fpkt", shape=invtriangle, color=brown];
4183[label="16.214.32.121;11pkt 11fpkt", shape=invhouse, color=bisque];
stat628[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.214.32.121:80, 200.11.97.95:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3650: (4.28571%)&lt;BR/&gt; 3649: (4.28571%)&lt;BR/&gt; 3648: (4.28571%)&lt;BR/&gt; 3647: (4.28571%)&gt;];
}
2754--3733[label="1;12pkt 12fpkt"];
2754--4183[label="1;11pkt 11fpkt"];
3733--4183[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="200.11.97.95" src_ip="16.214.32.121" src_port="80"/>
    </slice>
    <from sec="1060319633" usec="0"/>
    <to sec="1060319645" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.218.231.121"/>
    </slice>
    <from sec="1060318803" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_630{
style=filled;
color=gray75;
2761[label="200.112.56.122;70pkt 70fpkt", shape=pentagon, color=darkviolet];
3738[label="200.112.56.122;70pkt 70fpkt", shape=invtriangle, color=brown];
4186[label="200.112.56.122;69pkt 69fpkt", shape=invhouse, color=bisque];
stat630[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.112.56.122:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4978: (0.717703%)&lt;BR/&gt; 4814: (0.717703%)&lt;BR/&gt; 4741: (0.717703%)&lt;BR/&gt; 4696: (0.717703%)&gt;];
}
2761--3738[label="1;70pkt 70fpkt"];
2761--4186[label="1;69pkt 69fpkt"];
3738--4186[label="1;69pkt 69fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="200.112.56.122"/>
    </slice>
    <from sec="1060318816" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_631{
style=filled;
color=gray75;
2765[label="200.117.1.123;66pkt 66fpkt", shape=pentagon, color=darkviolet];
3739[label="200.117.1.123;65pkt 65fpkt", shape=invtriangle, color=brown];
4187[label="200.117.1.123;65pkt 65fpkt", shape=invhouse, color=bisque];
stat631[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.117.1.123:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4972: (0.765306%)&lt;BR/&gt; 4948: (0.765306%)&lt;BR/&gt; 4848: (0.765306%)&lt;BR/&gt; 4722: (0.765306%)&gt;];
}
2765--3739[label="1;65pkt 65fpkt"];
2765--4187[label="1;65pkt 65fpkt"];
3739--4187[label="1;65pkt 65fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="200.117.1.123"/>
    </slice>
    <from sec="1060318804" usec="0"/>
    <to sec="1060319699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.102.29.130"/>
    </slice>
    <from sec="1060319000" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.710156,1.61825,002,1 0 0 0 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_633{
style=filled;
color=gray75;
263[label="216.81.72.130s;233pkt 233fpkt", shape=rectangle, color=red];
3748[label="216.81.72.130;217pkt 217fpkt", shape=invtriangle, color=brown];
stat633[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.81.72.130:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
263--3748[label="0.976959;212pkt 212fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="216.81.72.130" src_port="1027"/>
    </slice>
    <from sec="1060319501" usec="0"/>
    <to sec="1060319541" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_634{
style=filled;
color=gray75;
2808[label="16.192.89.131;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3753[label="16.192.89.131;8pkt 8fpkt", shape=invtriangle, color=brown];
4195[label="16.192.89.131;8pkt 8fpkt", shape=invhouse, color=bisque];
stat634[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.192.89.131:80, 201.17.250.129:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4456: (6.25%)&lt;BR/&gt; 4455: (6.25%)&lt;BR/&gt; 4454: (6.25%)&lt;BR/&gt; 4421: (6.25%)&gt;];
}
2808--3753[label="1;8pkt 8fpkt"];
2808--4195[label="1;8pkt 8fpkt"];
3753--4195[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="201.17.250.129" src_ip="16.192.89.131" src_port="80"/>
    </slice>
    <from sec="1060319642" usec="0"/>
    <to sec="1060319698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_636{
style=filled;
color=gray75;
2813[label="21.84.10.132;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3756[label="21.84.10.132;6pkt 6fpkt", shape=invtriangle, color=brown];
4197[label="21.84.10.132;6pkt 6fpkt", shape=invhouse, color=bisque];
stat636[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.84.10.132:80, 147.4.48.183:*}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.6667%)&lt;BR/&gt; 0: (16.6667%)&lt;BR/&gt; 52851: (8.33333%)&lt;BR/&gt; 52850: (8.33333%)&lt;BR/&gt; 52843: (8.33333%)&gt;];
}
2813--3756[label="1;6pkt 6fpkt"];
2813--4197[label="1;6pkt 6fpkt"];
3756--4197[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="147.4.48.183" src_ip="21.84.10.132" src_port="80"/>
    </slice>
    <from sec="1060319688" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_637{
style=filled;
color=gray75;
2816[label="139.112.196.132;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3758[label="139.112.196.132;12pkt 12fpkt", shape=invtriangle, color=brown];
stat637[shape=component, label=&lt;Rules:&lt;BR/&gt;{139.112.196.132:*, *:80}[41.6667%]&lt;BR/&gt;{139.112.196.132:*, 19.108.134.138:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (20.8333%)&lt;BR/&gt; 7001: (8.33333%)&lt;BR/&gt; 1863: (8.33333%)&lt;BR/&gt; 1261: (8.33333%)&lt;BR/&gt; 443: (8.33333%)&gt;];
}
2816--3758[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="19.108.134.138" src_ip="139.112.196.132"/>
      <filter dst_port="80" src_ip="139.112.196.132"/>
    </slice>
    <from sec="1060318843" usec="0"/>
    <to sec="1060319681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.101.137.133"/>
    </slice>
    <from sec="1060318895" usec="0"/>
    <to sec="1060319632" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_640{
style=filled;
color=gray75;
2824[label="147.164.201.133;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3765[label="147.164.201.133;2pkt 2fpkt", shape=invtriangle, color=brown];
stat640[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.164.201.133:137, 147.164.201.129:137}[50%]&lt;BR/&gt;{147.164.201.133:138, 147.164.201.129:138}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 138: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2824--3765[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="147.164.201.129" dst_port="138" src_ip="147.164.201.133" src_port="138"/>
      <filter dst_ip="147.164.201.129" dst_port="137" src_ip="147.164.201.133" src_port="137"/>
    </slice>
    <from sec="1060318829" usec="0"/>
    <to sec="1060319591" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_641{
style=filled;
color=gray75;
2844[label="216.33.192.136;156pkt 156fpkt", shape=pentagon, color=darkviolet];
3776[label="216.33.192.136;156pkt 156fpkt", shape=invtriangle, color=brown];
4207[label="216.33.192.136;156pkt 156fpkt", shape=invhouse, color=bisque];
stat641[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.33.192.136:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2844--3776[label="1;156pkt 156fpkt"];
2844--4207[label="1;156pkt 156fpkt"];
3776--4207[label="1;156pkt 156fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="216.33.192.136" src_port="1025"/>
    </slice>
    <from sec="1060318962" usec="0"/>
    <to sec="1060318987" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.36.238.136"/>
    </slice>
    <from sec="1060319048" usec="0"/>
    <to sec="1060319389" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_643{
style=filled;
color=gray75;
2849[label="202.44.85.137;171pkt 171fpkt", shape=pentagon, color=darkviolet];
3779[label="202.44.85.137;171pkt 171fpkt", shape=invtriangle, color=brown];
stat643[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.44.85.137:55226, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55226: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2849--3779[label="1;171pkt 171fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.44.85.137" src_port="55226"/>
    </slice>
    <from sec="1060318866" usec="0"/>
    <to sec="1060318893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_644{
style=filled;
color=gray75;
2855[label="214.107.163.138;167pkt 167fpkt", shape=pentagon, color=darkviolet];
3781[label="214.107.163.138;167pkt 167fpkt", shape=invtriangle, color=brown];
4210[label="214.107.163.138;167pkt 167fpkt", shape=invhouse, color=bisque];
stat644[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.107.163.138:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 65533: (0.299401%)&lt;BR/&gt; 65528: (0.299401%)&lt;BR/&gt; 33567: (0.299401%)&lt;BR/&gt; 33562: (0.299401%)&gt;];
}
2855--3781[label="1;167pkt 167fpkt"];
2855--4210[label="1;167pkt 167fpkt"];
3781--4210[label="1;167pkt 167fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.107.163.138"/>
    </slice>
    <from sec="1060319354" usec="0"/>
    <to sec="1060319383" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_645{
style=filled;
color=gray75;
2876[label="200.59.12.144;111pkt 111fpkt", shape=pentagon, color=darkviolet];
3786[label="200.59.12.144;111pkt 111fpkt", shape=invtriangle, color=brown];
4214[label="200.59.12.144;111pkt 111fpkt", shape=invhouse, color=bisque];
stat645[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.59.12.144:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2876--3786[label="1;111pkt 111fpkt"];
2876--4214[label="1;111pkt 111fpkt"];
3786--4214[label="1;111pkt 111fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.59.12.144" src_port="1026"/>
    </slice>
    <from sec="1060319128" usec="0"/>
    <to sec="1060319155" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_646{
style=filled;
color=gray75;
2883[label="215.171.76.145;139pkt 139fpkt", shape=pentagon, color=darkviolet];
3789[label="215.171.76.145;139pkt 139fpkt", shape=invtriangle, color=brown];
stat646[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.171.76.145:64435, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64435: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2883--3789[label="1;139pkt 139fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.171.76.145" src_port="64435"/>
    </slice>
    <from sec="1060319270" usec="0"/>
    <to sec="1060319293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_647{
style=filled;
color=gray75;
2885[label="201.214.151.146;177pkt 177fpkt", shape=pentagon, color=darkviolet];
3791[label="201.214.151.146;177pkt 177fpkt", shape=invtriangle, color=brown];
4217[label="201.214.151.146;177pkt 177fpkt", shape=invhouse, color=bisque];
stat647[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.214.151.146:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2885--3791[label="1;177pkt 177fpkt"];
2885--4217[label="1;177pkt 177fpkt"];
3791--4217[label="1;177pkt 177fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.214.151.146" src_port="1025"/>
    </slice>
    <from sec="1060319225" usec="0"/>
    <to sec="1060319254" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_648{
style=filled;
color=gray75;
2893[label="212.131.31.148;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3797[label="212.131.31.148;7pkt 7fpkt", shape=invtriangle, color=brown];
stat648[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.131.31.148:80, 201.17.248.211:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58174: (7.14286%)&lt;BR/&gt; 58172: (7.14286%)&lt;BR/&gt; 58171: (7.14286%)&lt;BR/&gt; 58170: (7.14286%)&gt;];
}
2893--3797[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="201.17.248.211" src_ip="212.131.31.148" src_port="80"/>
    </slice>
    <from sec="1060319616" usec="0"/>
    <to sec="1060319628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.994568,1.55812,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_650{
style=filled;
color=gray75;
726[label="148.238.117.155;d;80pkt 80fpkt", shape=diamond, color=yellow];
727[label="8.81.196.62;s;1pkt 1fpkt", shape=diamond, color=yellow];
1014[label="148.238.99.30;d;151pkt 151fpkt", shape=diamond, color=yellow];
2168[label="194.41.23.20;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2661[label="157.115.214.102;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2900[label="212.108.31.150;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3053[label="219.201.107.181;87pkt 87fpkt", shape=pentagon, color=darkviolet];
3462[label="194.41.23.20;4pkt 4fpkt", shape=invtriangle, color=brown];
3800[label="212.108.31.150;13pkt 13fpkt", shape=invtriangle, color=brown];
4220[label="212.108.31.150;13pkt 13fpkt", shape=invhouse, color=bisque];
stat650[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 148.238.99.30:*}[53.4965%]&lt;BR/&gt;{*:80, 148.238.117.155:*}[32.5175%]&lt;BR/&gt;{219.201.107.181:80, *:*}[30.4196%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7333%)&lt;BR/&gt; 4223: (0.533333%)&lt;BR/&gt; 4212: (0.533333%)&lt;BR/&gt; 4211: (0.533333%)&lt;BR/&gt; 4181: (0.533333%)&gt;];
}
726--727[label="1;1pkt 1fpkt"];
726--731[label="0.0375;3pkt 3fpkt"];
726--1184[label="0.025;2pkt 2fpkt"];
726--1226[label="0.025;2pkt 2fpkt"];
726--1746[label="0.025;2pkt 2fpkt"];
726--3053[label="0.3625;29pkt 29fpkt"];
1014--1065[label="0.015625;1pkt 1fpkt"];
1014--1226[label="0.0390625;5pkt 5fpkt"];
1014--1236[label="0.013245;2pkt 2fpkt"];
1014--1397[label="0.147541;18pkt 18fpkt"];
1014--1880[label="0.0175439;1pkt 1fpkt"];
1014--1904[label="0.013245;2pkt 2fpkt"];
1014--2168[label="1;4pkt 4fpkt"];
1014--2295[label="0.046875;3pkt 3fpkt"];
1014--2325[label="0.123288;18pkt 18fpkt"];
1014--2661[label="0.666667;6pkt 6fpkt"];
1014--2746[label="0.0425532;2pkt 2fpkt"];
1014--2900[label="0.846154;11pkt 11fpkt"];
1014--3053[label="0.091954;8pkt 8fpkt"];
1014--3328[label="0.0970874;10pkt 10fpkt"];
1014--3355[label="0.0952381;6pkt 6fpkt"];
1014--3462[label="1;4pkt 4fpkt"];
1014--3526[label="0.046875;3pkt 3fpkt"];
1014--3730[label="0.0425532;2pkt 2fpkt"];
1014--3800[label="0.846154;11pkt 11fpkt"];
1014--4089[label="0.046875;3pkt 3fpkt"];
1014--4180[label="0.0434783;2pkt 2fpkt"];
1014--4220[label="0.846154;11pkt 11fpkt"];
2168--3462[label="1;4pkt 4fpkt"];
2900--3800[label="1;13pkt 13fpkt"];
2900--4220[label="1;13pkt 13fpkt"];
3800--4220[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter src_ip="219.201.107.181" src_port="80"/>
      <filter dst_ip="148.238.99.30" src_port="80"/>
      <filter dst_ip="148.238.117.155" src_port="80"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_652{
style=filled;
color=gray75;
2908[label="214.251.132.151;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3804[label="214.251.132.151;2pkt 2fpkt", shape=invtriangle, color=brown];
stat652[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.251.132.151:110, 147.164.150.18:33058}[50%]&lt;BR/&gt;{214.251.132.151:25, 147.164.62.203:2600}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33058: (25%)&lt;BR/&gt; 2600: (25%)&lt;BR/&gt; 110: (25%)&lt;BR/&gt; 25: (25%)&gt;];
}
2908--3804[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="147.164.62.203" dst_port="2600" src_ip="214.251.132.151" src_port="25"/>
      <filter dst_ip="147.164.150.18" dst_port="33058" src_ip="214.251.132.151" src_port="110"/>
    </slice>
    <from sec="1060319164" usec="0"/>
    <to sec="1060319480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_653{
style=filled;
color=gray75;
2913[label="16.49.224.151;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3806[label="16.49.224.151;2pkt 2fpkt", shape=invtriangle, color=brown];
stat653[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.49.224.151:80, 147.189.39.146:46616}[50%]&lt;BR/&gt;{16.49.224.151:80, 147.189.39.148:50052}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50052: (25%)&lt;BR/&gt; 46616: (25%)&gt;];
}
2913--3806[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="147.189.39.148" dst_port="50052" src_ip="16.49.224.151" src_port="80"/>
      <filter dst_ip="147.189.39.146" dst_port="46616" src_ip="16.49.224.151" src_port="80"/>
    </slice>
    <from sec="1060319700" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.90.217.152"/>
    </slice>
    <from sec="1060318833" usec="0"/>
    <to sec="1060319000" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_657{
style=filled;
color=gray75;
2965[label="219.73.68.164;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3833[label="219.73.68.164;1pkt 1fpkt", shape=invtriangle, color=brown];
stat657[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.73.68.164:80, 201.17.248.191:29825}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 29825: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2965--3833[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.17.248.191" dst_port="29825" src_ip="219.73.68.164" src_port="80"/>
    </slice>
    <from sec="1060319700" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_658{
style=filled;
color=gray75;
2972[label="82.240.116.165;14pkt 14fpkt", shape=pentagon, color=darkviolet];
3835[label="82.240.116.165;14pkt 14fpkt", shape=invtriangle, color=brown];
4240[label="82.240.116.165;14pkt 14fpkt", shape=invhouse, color=bisque];
stat658[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.240.116.165:*, 201.25.129.1:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2889: (3.57143%)&lt;BR/&gt; 2850: (3.57143%)&lt;BR/&gt; 2808: (3.57143%)&lt;BR/&gt; 2776: (3.57143%)&gt;];
}
2972--3835[label="1;14pkt 14fpkt"];
2972--4240[label="1;14pkt 14fpkt"];
3835--4240[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="201.25.129.1" dst_port="80" src_ip="82.240.116.165"/>
    </slice>
    <from sec="1060318835" usec="0"/>
    <to sec="1060319696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_659{
style=filled;
color=gray75;
2981[label="201.45.51.167;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3839[label="201.45.51.167;6pkt 6fpkt", shape=invtriangle, color=brown];
4243[label="201.45.51.167;6pkt 6fpkt", shape=invhouse, color=bisque];
stat659[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.45.51.167:*, 214.162.155.91:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56690: (8.33333%)&lt;BR/&gt; 56548: (8.33333%)&lt;BR/&gt; 56546: (8.33333%)&lt;BR/&gt; 56521: (8.33333%)&gt;];
}
2981--3839[label="1;6pkt 6fpkt"];
2981--4243[label="1;6pkt 6fpkt"];
3839--4243[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="214.162.155.91" dst_port="80" src_ip="201.45.51.167"/>
    </slice>
    <from sec="1060319674" usec="0"/>
    <to sec="1060319696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.73.47.171"/>
    </slice>
    <from sec="1060318801" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_662{
style=filled;
color=gray75;
3011[label="150.108.86.173;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3854[label="150.108.86.173;4pkt 4fpkt", shape=invtriangle, color=brown];
4252[label="150.108.86.173;4pkt 4fpkt", shape=invhouse, color=bisque];
stat662[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.108.86.173:80, 139.112.41.46:1036}[25%]&lt;BR/&gt;{150.108.86.173:80, 139.112.41.46:1037}[25%]&lt;BR/&gt;{150.108.86.173:80, 139.112.41.46:1045}[25%]&lt;BR/&gt;{150.108.86.173:80, 139.112.41.46:1046}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1046: (12.5%)&lt;BR/&gt; 1045: (12.5%)&lt;BR/&gt; 1037: (12.5%)&lt;BR/&gt; 1036: (12.5%)&gt;];
}
3011--3854[label="1;4pkt 4fpkt"];
3011--4252[label="1;4pkt 4fpkt"];
3854--4252[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="139.112.41.46" dst_port="1046" src_ip="150.108.86.173" src_port="80"/>
      <filter dst_ip="139.112.41.46" dst_port="1045" src_ip="150.108.86.173" src_port="80"/>
      <filter dst_ip="139.112.41.46" dst_port="1037" src_ip="150.108.86.173" src_port="80"/>
      <filter dst_ip="139.112.41.46" dst_port="1036" src_ip="150.108.86.173" src_port="80"/>
    </slice>
    <from sec="1060319554" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_664{
style=filled;
color=gray75;
3027[label="204.135.152.176;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3859[label="204.135.152.176;6pkt 6fpkt", shape=invtriangle, color=brown];
stat664[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.135.152.176:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4576: (8.33333%)&lt;BR/&gt; 2768: (8.33333%)&lt;BR/&gt; 2431: (8.33333%)&lt;BR/&gt; 1419: (8.33333%)&gt;];
}
3027--3859[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="204.135.152.176" src_port="1863"/>
    </slice>
    <from sec="1060318803" usec="0"/>
    <to sec="1060319691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.105.129.177"/>
    </slice>
    <from sec="1060318803" usec="0"/>
    <to sec="1060319172" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_666{
style=filled;
color=gray75;
3038[label="209.131.40.178;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3867[label="209.131.40.178;6pkt 6fpkt", shape=invtriangle, color=brown];
stat666[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.131.40.178:80, 201.17.250.167:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4835: (8.33333%)&lt;BR/&gt; 4609: (8.33333%)&lt;BR/&gt; 4543: (8.33333%)&lt;BR/&gt; 4530: (8.33333%)&gt;];
}
3038--3867[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="201.17.250.167" src_ip="209.131.40.178" src_port="80"/>
    </slice>
    <from sec="1060319644" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_667{
style=filled;
color=gray75;
3042[label="18.212.252.178;15pkt 15fpkt", shape=pentagon, color=darkviolet];
3869[label="18.212.252.178;15pkt 15fpkt", shape=invtriangle, color=brown];
stat667[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.212.252.178:80, 139.112.225.200:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49291: (3.33333%)&lt;BR/&gt; 49290: (3.33333%)&lt;BR/&gt; 49289: (3.33333%)&lt;BR/&gt; 49288: (3.33333%)&gt;];
}
3042--3869[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="139.112.225.200" src_ip="18.212.252.178" src_port="80"/>
    </slice>
    <from sec="1060319023" usec="0"/>
    <to sec="1060319042" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_668{
style=filled;
color=gray75;
3051[label="216.131.56.181;15pkt 15fpkt", shape=pentagon, color=darkviolet];
3873[label="216.131.56.181;15pkt 15fpkt", shape=invtriangle, color=brown];
4260[label="216.131.56.181;15pkt 15fpkt", shape=invhouse, color=bisque];
stat668[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.131.56.181:80, 148.238.64.199:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 32089: (3.33333%)&lt;BR/&gt; 31968: (3.33333%)&lt;BR/&gt; 5286: (3.33333%)&lt;BR/&gt; 5285: (3.33333%)&gt;];
}
3051--3873[label="1;15pkt 15fpkt"];
3051--4260[label="1;15pkt 15fpkt"];
3873--4260[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="148.238.64.199" src_ip="216.131.56.181" src_port="80"/>
    </slice>
    <from sec="1060319651" usec="0"/>
    <to sec="1060319669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.168.55.183"/>
    </slice>
    <from sec="1060319358" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_670{
style=filled;
color=gray75;
3066[label="200.172.131.184;58pkt 58fpkt", shape=pentagon, color=darkviolet];
3881[label="200.172.131.184;58pkt 58fpkt", shape=invtriangle, color=brown];
stat670[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.172.131.184:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4898: (0.862069%)&lt;BR/&gt; 4759: (0.862069%)&lt;BR/&gt; 4704: (0.862069%)&lt;BR/&gt; 4213: (0.862069%)&gt;];
}
3066--3881[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="200.172.131.184"/>
    </slice>
    <from sec="1060318817" usec="0"/>
    <to sec="1060319697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="82.136.58.185"/>
    </slice>
    <from sec="1060318804" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_673{
style=filled;
color=gray75;
3079[label="201.167.106.187;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3891[label="201.167.106.187;11pkt 11fpkt", shape=invtriangle, color=brown];
stat673[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.167.106.187:80, 147.4.86.101:*}[90.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.4545%)&lt;BR/&gt; 1089: (4.54545%)&lt;BR/&gt; 1087: (4.54545%)&lt;BR/&gt; 1085: (4.54545%)&lt;BR/&gt; 1082: (4.54545%)&gt;];
}
3079--3891[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="147.4.86.101" src_ip="201.167.106.187" src_port="80"/>
    </slice>
    <from sec="1060319459" usec="0"/>
    <to sec="1060319699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.994568,1.55812,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_675{
style=filled;
color=gray75;
1276[label="147.4.48.183;d;266pkt 266fpkt", shape=diamond, color=yellow];
1280[label="16.192.1.152;s;161pkt 161fpkt", shape=diamond, color=yellow];
2708[label="204.6.94.111;33pkt 33fpkt", shape=pentagon, color=darkviolet];
3101[label="206.53.62.190;56pkt 56fpkt", shape=pentagon, color=darkviolet];
3807[label="16.192.1.152;166pkt 166fpkt", shape=invtriangle, color=brown];
3896[label="206.53.62.190;56pkt 56fpkt", shape=invtriangle, color=brown];
4273[label="206.53.62.190;56pkt 56fpkt", shape=invhouse, color=bisque];
stat675[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.192.1.152:80, 147.4.48.183:*}[59.3407%]&lt;BR/&gt;{206.53.62.190:80, 147.4.48.183:*}[20.1465%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8111%)&lt;BR/&gt; 0: (0.377834%)&lt;BR/&gt; 52706: (0.251889%)&lt;BR/&gt; 52705: (0.251889%)&lt;BR/&gt; 52704: (0.251889%)&gt;];
}
1276--1280[label="1;161pkt 161fpkt"];
1276--2708[label="0.969697;32pkt 32fpkt"];
1276--3101[label="0.982143;55pkt 55fpkt"];
1276--3122[label="0.111111;2pkt 2fpkt"];
1276--3807[label="0.96988;161pkt 161fpkt"];
1276--3896[label="0.982143;55pkt 55fpkt"];
1276--3905[label="0.111111;2pkt 2fpkt"];
1276--4273[label="0.982143;55pkt 55fpkt"];
1276--4279[label="0.111111;2pkt 2fpkt"];
1280--3807[label="1;161pkt 161fpkt"];
3101--3896[label="1;56pkt 56fpkt"];
3101--4273[label="1;56pkt 56fpkt"];
3896--4273[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_ip="147.4.48.183" src_ip="16.192.1.152" src_port="80"/>
      <filter dst_ip="147.4.48.183" src_ip="206.53.62.190" src_port="80"/>
    </slice>
    <from sec="1060319117" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,501,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_677{
style=filled;
color=gray75;
3110[label="213.92.125.192;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3899[label="213.92.125.192;11pkt 11fpkt", shape=invtriangle, color=brown];
4276[label="213.92.125.192;11pkt 11fpkt", shape=invhouse, color=bisque];
stat677[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.92.125.192:21, 172.235.54.140:*}[63.6364%]&lt;BR/&gt;{213.92.125.192:21, 200.50.173.12:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (45.4545%)&lt;BR/&gt; 56670: (4.54545%)&lt;BR/&gt; 3788: (4.54545%)&lt;BR/&gt; 3786: (4.54545%)&lt;BR/&gt; 3784: (4.54545%)&gt;];
}
3110--3899[label="1;11pkt 11fpkt"];
3110--4276[label="1;11pkt 11fpkt"];
3899--4276[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="172.235.54.140" src_ip="213.92.125.192" src_port="21"/>
      <filter dst_ip="200.50.173.12" src_ip="213.92.125.192" src_port="21"/>
    </slice>
    <from sec="1060319030" usec="0"/>
    <to sec="1060319421" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_678{
style=filled;
color=gray75;
3113[label="82.118.194.192;123pkt 123fpkt", shape=pentagon, color=darkviolet];
3901[label="82.118.194.192;123pkt 123fpkt", shape=invtriangle, color=brown];
stat678[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.118.194.192:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3113--3901[label="1;123pkt 123fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="82.118.194.192" src_port="1029"/>
    </slice>
    <from sec="1060319144" usec="0"/>
    <to sec="1060319163" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.88.53.193"/>
    </slice>
    <from sec="1060319700" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_680{
style=filled;
color=gray75;
3119[label="19.98.118.193;14pkt 14fpkt", shape=pentagon, color=darkviolet];
3904[label="19.98.118.193;14pkt 14fpkt", shape=invtriangle, color=brown];
4278[label="19.98.118.193;14pkt 14fpkt", shape=invhouse, color=bisque];
stat680[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.98.118.193:80, 169.92.207.131:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2723: (3.57143%)&lt;BR/&gt; 2722: (3.57143%)&lt;BR/&gt; 2721: (3.57143%)&lt;BR/&gt; 2720: (3.57143%)&gt;];
}
3119--3904[label="1;14pkt 14fpkt"];
3119--4278[label="1;14pkt 14fpkt"];
3904--4278[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="169.92.207.131" src_ip="19.98.118.193" src_port="80"/>
    </slice>
    <from sec="1060319350" usec="0"/>
    <to sec="1060319379" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="19.10.129.194"/>
    </slice>
    <from sec="1060319325" usec="0"/>
    <to sec="1060319338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_682{
style=filled;
color=gray75;
3126[label="18.19.134.194;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3909[label="18.19.134.194;8pkt 8fpkt", shape=invtriangle, color=brown];
stat682[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.19.134.194:80, 169.92.205.46:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3546: (6.25%)&lt;BR/&gt; 3544: (6.25%)&lt;BR/&gt; 3541: (6.25%)&lt;BR/&gt; 3520: (6.25%)&gt;];
}
3126--3909[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="169.92.205.46" src_ip="18.19.134.194" src_port="80"/>
    </slice>
    <from sec="1060318962" usec="0"/>
    <to sec="1060319572" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889528,1.5433,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_683{
style=filled;
color=gray75;
436[label="195.152.52.195s;177pkt 177fpkt", shape=rectangle, color=red];
3131[label="195.152.52.195;194pkt 194fpkt", shape=pentagon, color=darkviolet];
3910[label="195.152.52.195;194pkt 194fpkt", shape=invtriangle, color=brown];
4280[label="195.152.52.195;194pkt 194fpkt", shape=invhouse, color=bisque];
stat683[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.152.52.195:*, *:137}[89.0411%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 35201: (0.263505%)&lt;BR/&gt; 35196: (0.263505%)&lt;BR/&gt; 35178: (0.263505%)&lt;BR/&gt; 35170: (0.263505%)&gt;];
}
436--3131[label="0.858757;152pkt 152fpkt"];
436--3910[label="0.858757;152pkt 152fpkt"];
436--4280[label="0.858757;152pkt 152fpkt"];
3131--3910[label="1;194pkt 194fpkt"];
3131--4280[label="1;194pkt 194fpkt"];
3910--4280[label="1;194pkt 194fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="195.152.52.195"/>
    </slice>
    <from sec="1060319315" usec="0"/>
    <to sec="1060319346" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.41.158.195"/>
    </slice>
    <from sec="1060318807" usec="0"/>
    <to sec="1060319699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_686{
style=filled;
color=gray75;
3145[label="82.132.222.196;164pkt 164fpkt", shape=pentagon, color=darkviolet];
3916[label="82.132.222.196;164pkt 164fpkt", shape=invtriangle, color=brown];
stat686[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.132.222.196:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3145--3916[label="1;164pkt 164fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="82.132.222.196" src_port="1029"/>
    </slice>
    <from sec="1060319379" usec="0"/>
    <to sec="1060319404" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_687{
style=filled;
color=gray75;
3147[label="192.51.39.197;118pkt 118fpkt", shape=pentagon, color=darkviolet];
3917[label="192.51.39.197;118pkt 118fpkt", shape=invtriangle, color=brown];
4283[label="192.51.39.197;118pkt 118fpkt", shape=invhouse, color=bisque];
stat687[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.51.39.197:53, *:53}[30.5085%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (64.8305%)&lt;BR/&gt; 33701: (0.847458%)&lt;BR/&gt; 32774: (0.847458%)&lt;BR/&gt; 32770: (0.847458%)&lt;BR/&gt; 32768: (0.847458%)&gt;];
}
3147--3917[label="1;118pkt 118fpkt"];
3147--4283[label="1;118pkt 118fpkt"];
3917--4283[label="1;118pkt 118fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="192.51.39.197" src_port="53"/>
    </slice>
    <from sec="1060318835" usec="0"/>
    <to sec="1060319680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.794011,1.56228,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_688{
style=filled;
color=gray75;
1137[label="139.112.231.108;d;49pkt 49fpkt", shape=diamond, color=yellow];
2170[label="82.40.34.20;35pkt 35fpkt", shape=pentagon, color=darkviolet];
3154[label="204.135.152.197;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3921[label="204.135.152.197;9pkt 9fpkt", shape=invtriangle, color=brown];
stat688[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.40.34.20:80, 139.112.231.108:*}[63.1579%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.6863%)&lt;BR/&gt; 1863: (9.31373%)&lt;BR/&gt; 1063: (1.47059%)&lt;BR/&gt; 4451: (0.980392%)&lt;BR/&gt; 4243: (0.980392%)&gt;];
}
1137--1213[label="0.0204082;1pkt 1fpkt"];
1137--2170[label="1;35pkt 35fpkt"];
1137--3154[label="0.111111;1pkt 1fpkt"];
1137--3921[label="0.111111;1pkt 1fpkt"];
3154--3921[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="139.112.231.108" src_ip="82.40.34.20" src_port="80"/>
    </slice>
    <from sec="1060318814" usec="0"/>
    <to sec="1060319695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_689{
style=filled;
color=gray75;
3178[label="139.112.225.200;22pkt 22fpkt", shape=pentagon, color=darkviolet];
3931[label="139.112.225.200;22pkt 22fpkt", shape=invtriangle, color=brown];
stat689[shape=component, label=&lt;Rules:&lt;BR/&gt;{139.112.225.200:*, 18.212.252.178:80}[68.1818%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.7273%)&lt;BR/&gt; 49291: (2.27273%)&lt;BR/&gt; 49290: (2.27273%)&lt;BR/&gt; 49289: (2.27273%)&lt;BR/&gt; 49288: (2.27273%)&gt;];
}
3178--3931[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="18.212.252.178" dst_port="80" src_ip="139.112.225.200"/>
    </slice>
    <from sec="1060319013" usec="0"/>
    <to sec="1060319042" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_690{
style=filled;
color=gray75;
3180[label="201.108.3.201;65pkt 65fpkt", shape=pentagon, color=darkviolet];
3933[label="201.108.3.201;65pkt 65fpkt", shape=invtriangle, color=brown];
4287[label="201.108.3.201;65pkt 65fpkt", shape=invhouse, color=bisque];
stat690[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.108.3.201:*, 172.235.13.16:1080}[21.5385%]&lt;BR/&gt;{201.108.3.201:*, 172.235.13.18:*}[21.5385%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1080: (15.3846%)&lt;BR/&gt; 8080: (6.92308%)&lt;BR/&gt; 8000: (6.92308%)&lt;BR/&gt; 3128: (6.92308%)&lt;BR/&gt; 81: (6.92308%)&gt;];
}
3180--3933[label="1;65pkt 65fpkt"];
3180--4287[label="1;65pkt 65fpkt"];
3933--4287[label="1;65pkt 65fpkt"];
</description>
    <slice>
      <filter dst_ip="172.235.13.18" src_ip="201.108.3.201"/>
      <filter dst_ip="172.235.13.16" dst_port="1080" src_ip="201.108.3.201"/>
    </slice>
    <from sec="1060318818" usec="0"/>
    <to sec="1060319549" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.93.82.204"/>
    </slice>
    <from sec="1060318805" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_693{
style=filled;
color=gray75;
3204[label="9.26.96.205;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3945[label="9.26.96.205;3pkt 3fpkt", shape=invtriangle, color=brown];
stat693[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.26.96.205:33377, 172.235.240.224:137}[33.3333%]&lt;BR/&gt;{9.26.96.205:34423, 172.235.240.226:137}[33.3333%]&lt;BR/&gt;{9.26.96.205:32928, 172.235.240.227:137}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 34423: (16.6667%)&lt;BR/&gt; 33377: (16.6667%)&lt;BR/&gt; 32928: (16.6667%)&gt;];
}
3204--3945[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="172.235.240.227" dst_port="137" src_ip="9.26.96.205" src_port="32928"/>
      <filter dst_ip="172.235.240.226" dst_port="137" src_ip="9.26.96.205" src_port="34423"/>
      <filter dst_ip="172.235.240.224" dst_port="137" src_ip="9.26.96.205" src_port="33377"/>
    </slice>
    <from sec="1060319700" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.58.192.206"/>
    </slice>
    <from sec="1060319700" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.48.201.207"/>
    </slice>
    <from sec="1060318804" usec="0"/>
    <to sec="1060319320" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_696{
style=filled;
color=gray75;
3217[label="214.219.32.208;157pkt 157fpkt", shape=pentagon, color=darkviolet];
3951[label="214.219.32.208;157pkt 157fpkt", shape=invtriangle, color=brown];
4293[label="214.219.32.208;157pkt 157fpkt", shape=invhouse, color=bisque];
stat696[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.219.32.208:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3217--3951[label="1;157pkt 157fpkt"];
3217--4293[label="1;157pkt 157fpkt"];
3951--4293[label="1;157pkt 157fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.219.32.208" src_port="1028"/>
    </slice>
    <from sec="1060319276" usec="0"/>
    <to sec="1060319315" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_697{
style=filled;
color=gray75;
3218[label="213.89.90.208;65pkt 65fpkt", shape=pentagon, color=darkviolet];
3952[label="213.89.90.208;65pkt 65fpkt", shape=invtriangle, color=brown];
stat697[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.89.90.208:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 20289: (0.769231%)&lt;BR/&gt; 20251: (0.769231%)&lt;BR/&gt; 20144: (0.769231%)&lt;BR/&gt; 19934: (0.769231%)&gt;];
}
3218--3952[label="1;65pkt 65fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="213.89.90.208"/>
    </slice>
    <from sec="1060318801" usec="0"/>
    <to sec="1060319699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,501,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_698{
style=filled;
color=gray75;
3241[label="213.92.125.212;46pkt 46fpkt", shape=pentagon, color=darkviolet];
3959[label="213.92.125.212;46pkt 46fpkt", shape=invtriangle, color=brown];
4296[label="213.92.125.212;46pkt 46fpkt", shape=invhouse, color=bisque];
stat698[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.92.125.212:21, 148.238.145.149:*}[60.8696%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (32.6087%)&lt;BR/&gt; 58722: (1.08696%)&lt;BR/&gt; 58328: (1.08696%)&lt;BR/&gt; 57913: (1.08696%)&lt;BR/&gt; 56832: (1.08696%)&gt;];
}
3241--3959[label="1;46pkt 46fpkt"];
3241--4296[label="1;46pkt 46fpkt"];
3959--4296[label="1;46pkt 46fpkt"];
</description>
    <slice>
      <filter dst_ip="148.238.145.149" src_ip="213.92.125.212" src_port="21"/>
    </slice>
    <from sec="1060319000" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.36.178.212"/>
    </slice>
    <from sec="1060318905" usec="0"/>
    <to sec="1060319674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_700{
style=filled;
color=gray75;
3256[label="18.195.164.214;25pkt 25fpkt", shape=pentagon, color=darkviolet];
3966[label="18.195.164.214;25pkt 25fpkt", shape=invtriangle, color=brown];
stat700[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.195.164.214:80, 147.189.32.67:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1538: (2%)&lt;BR/&gt; 1535: (2%)&lt;BR/&gt; 1533: (2%)&lt;BR/&gt; 1532: (2%)&gt;];
}
3256--3966[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="147.189.32.67" src_ip="18.195.164.214" src_port="80"/>
    </slice>
    <from sec="1060319114" usec="0"/>
    <to sec="1060319192" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_702{
style=filled;
color=gray75;
3269[label="16.19.80.217;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3971[label="16.19.80.217;1pkt 1fpkt", shape=invtriangle, color=brown];
4301[label="16.19.80.217;1pkt 1fpkt", shape=invhouse, color=bisque];
stat702[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.19.80.217:80, 201.17.250.129:4792}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4792: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3269--3971[label="1;1pkt 1fpkt"];
3269--4301[label="1;1pkt 1fpkt"];
3971--4301[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.17.250.129" dst_port="4792" src_ip="16.19.80.217" src_port="80"/>
    </slice>
    <from sec="1060319700" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_703{
style=filled;
color=gray75;
3281[label="201.239.13.221;214pkt 214fpkt", shape=pentagon, color=darkviolet];
3975[label="201.239.13.221;214pkt 214fpkt", shape=invtriangle, color=brown];
stat703[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.239.13.221:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3281--3975[label="1;214pkt 214fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.239.13.221" src_port="1030"/>
    </slice>
    <from sec="1060319293" usec="0"/>
    <to sec="1060319350" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_704{
style=filled;
color=gray75;
3286[label="139.112.109.222;27pkt 27fpkt", shape=pentagon, color=darkviolet];
3978[label="139.112.109.222;27pkt 27fpkt", shape=invtriangle, color=brown];
stat704[shape=component, label=&lt;Rules:&lt;BR/&gt;{139.112.109.222:80, *:*}[66.6667%]&lt;BR/&gt;{139.112.109.222:8000, *:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 8000: (11.1111%)&lt;BR/&gt; 25: (5.55556%)&lt;BR/&gt; 62907: (1.85185%)&lt;BR/&gt; 62906: (1.85185%)&gt;];
}
3286--3978[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter src_ip="139.112.109.222" src_port="80"/>
      <filter src_ip="139.112.109.222" src_port="8000"/>
    </slice>
    <from sec="1060318824" usec="0"/>
    <to sec="1060319682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_705{
style=filled;
color=gray75;
3290[label="16.2.210.222;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3980[label="16.2.210.222;2pkt 2fpkt", shape=invtriangle, color=brown];
4305[label="16.2.210.222;2pkt 2fpkt", shape=invhouse, color=bisque];
stat705[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.2.210.222:50954, 147.189.53.128:80}[50%]&lt;BR/&gt;{16.2.210.222:51611, 148.238.189.136:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51611: (25%)&lt;BR/&gt; 50954: (25%)&gt;];
}
3290--3980[label="1;2pkt 2fpkt"];
3290--4305[label="1;2pkt 2fpkt"];
3980--4305[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="148.238.189.136" dst_port="80" src_ip="16.2.210.222" src_port="51611"/>
      <filter dst_ip="147.189.53.128" dst_port="80" src_ip="16.2.210.222" src_port="50954"/>
    </slice>
    <from sec="1060319309" usec="0"/>
    <to sec="1060319457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_706{
style=filled;
color=gray75;
3291[label="18.206.185.223;15pkt 15fpkt", shape=pentagon, color=darkviolet];
3981[label="18.206.185.223;15pkt 15fpkt", shape=invtriangle, color=brown];
4306[label="18.206.185.223;15pkt 15fpkt", shape=invhouse, color=bisque];
stat706[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.206.185.223:*, 172.235.21.98:25}[33.3333%]&lt;BR/&gt;{18.206.185.223:*, 172.235.0.177:25}[33.3333%]&lt;BR/&gt;{18.206.185.223:*, 172.235.38.193:25}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 47659: (3.33333%)&lt;BR/&gt; 47596: (3.33333%)&lt;BR/&gt; 46907: (3.33333%)&lt;BR/&gt; 44612: (3.33333%)&gt;];
}
3291--3981[label="1;15pkt 15fpkt"];
3291--4306[label="1;15pkt 15fpkt"];
3981--4306[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="172.235.38.193" dst_port="25" src_ip="18.206.185.223"/>
      <filter dst_ip="172.235.0.177" dst_port="25" src_ip="18.206.185.223"/>
      <filter dst_ip="172.235.21.98" dst_port="25" src_ip="18.206.185.223"/>
    </slice>
    <from sec="1060318957" usec="0"/>
    <to sec="1060319610" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_707{
style=filled;
color=gray75;
3305[label="213.92.125.227;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3987[label="213.92.125.227;3pkt 3fpkt", shape=invtriangle, color=brown];
stat707[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.92.125.227:554, 148.239.153.249:1102}[33.3333%]&lt;BR/&gt;{213.92.125.227:22778, 200.11.98.189:6970}[33.3333%]&lt;BR/&gt;{213.92.125.227:554, 200.11.98.189:1044}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 554: (33.3333%)&lt;BR/&gt; 22778: (16.6667%)&lt;BR/&gt; 6970: (16.6667%)&lt;BR/&gt; 1102: (16.6667%)&lt;BR/&gt; 1044: (16.6667%)&gt;];
}
3305--3987[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="200.11.98.189" dst_port="1044" src_ip="213.92.125.227" src_port="554"/>
      <filter dst_ip="200.11.98.189" dst_port="6970" src_ip="213.92.125.227" src_port="22778"/>
      <filter dst_ip="148.239.153.249" dst_port="1102" src_ip="213.92.125.227" src_port="554"/>
    </slice>
    <from sec="1060318801" usec="0"/>
    <to sec="1060319582" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_708{
style=filled;
color=gray75;
3306[label="200.11.102.228;34pkt 34fpkt", shape=pentagon, color=darkviolet];
3988[label="200.11.102.228;34pkt 34fpkt", shape=invtriangle, color=brown];
stat708[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.11.102.228:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3306--3988[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter src_ip="200.11.102.228"/>
    </slice>
    <from sec="1060318819" usec="0"/>
    <to sec="1060319698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.35.40.233"/>
    </slice>
    <from sec="1060319045" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_710{
style=filled;
color=gray75;
3337[label="16.2.210.237;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4001[label="16.2.210.237;3pkt 3fpkt", shape=invtriangle, color=brown];
stat710[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.2.210.237:31184, 148.238.74.62:80}[33.3333%]&lt;BR/&gt;{16.2.210.237:36716, 172.235.1.178:80}[33.3333%]&lt;BR/&gt;{16.2.210.237:29197, 200.11.98.207:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 36716: (16.6667%)&lt;BR/&gt; 31184: (16.6667%)&lt;BR/&gt; 29197: (16.6667%)&gt;];
}
3337--4001[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="200.11.98.207" dst_port="80" src_ip="16.2.210.237" src_port="29197"/>
      <filter dst_ip="172.235.1.178" dst_port="80" src_ip="16.2.210.237" src_port="36716"/>
      <filter dst_ip="148.238.74.62" dst_port="80" src_ip="16.2.210.237" src_port="31184"/>
    </slice>
    <from sec="1060318954" usec="0"/>
    <to sec="1060319544" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_711{
style=filled;
color=gray75;
3338[label="174.108.53.238;135pkt 135fpkt", shape=pentagon, color=darkviolet];
4002[label="174.108.53.238;135pkt 135fpkt", shape=invtriangle, color=brown];
stat711[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.108.53.238:56713, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56713: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3338--4002[label="1;135pkt 135fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="174.108.53.238" src_port="56713"/>
    </slice>
    <from sec="1060319413" usec="0"/>
    <to sec="1060319436" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_712{
style=filled;
color=gray75;
3344[label="193.54.77.240;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4003[label="193.54.77.240;2pkt 2fpkt", shape=invtriangle, color=brown];
stat712[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.54.77.240:113, 148.239.188.157:50041}[50%]&lt;BR/&gt;{193.54.77.240:1579, 148.239.188.157:25}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50041: (25%)&lt;BR/&gt; 1579: (25%)&lt;BR/&gt; 113: (25%)&lt;BR/&gt; 25: (25%)&gt;];
}
3344--4003[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="148.239.188.157" dst_port="25" src_ip="193.54.77.240" src_port="1579"/>
      <filter dst_ip="148.239.188.157" dst_port="50041" src_ip="193.54.77.240" src_port="113"/>
    </slice>
    <from sec="1060319013" usec="0"/>
    <to sec="1060319028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="81.18.205.240"/>
    </slice>
    <from sec="1060318806" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_714{
style=filled;
color=gray75;
3352[label="195.183.46.242;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4011[label="195.183.46.242;1pkt 1fpkt", shape=invtriangle, color=brown];
4317[label="195.183.46.242;1pkt 1fpkt", shape=invhouse, color=bisque];
stat714[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.183.46.242:80, 139.112.20.23:49224}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49224: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3352--4011[label="1;1pkt 1fpkt"];
3352--4317[label="1;1pkt 1fpkt"];
4011--4317[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="139.112.20.23" dst_port="49224" src_ip="195.183.46.242" src_port="80"/>
    </slice>
    <from sec="1060319247" usec="0"/>
    <to sec="1060319259" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628934,1.66847,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.86.80.242"/>
    </slice>
    <from sec="1060319158" usec="0"/>
    <to sec="1060319225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_716{
style=filled;
color=gray75;
3361[label="18.19.134.244;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4015[label="18.19.134.244;2pkt 2fpkt", shape=invtriangle, color=brown];
stat716[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.19.134.244:80, 169.92.205.46:3529}[50%]&lt;BR/&gt;{18.19.134.244:80, 169.92.205.46:3530}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3530: (25%)&lt;BR/&gt; 3529: (25%)&gt;];
}
3361--4015[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="169.92.205.46" dst_port="3530" src_ip="18.19.134.244" src_port="80"/>
      <filter dst_ip="169.92.205.46" dst_port="3529" src_ip="18.19.134.244" src_port="80"/>
    </slice>
    <from sec="1060319079" usec="0"/>
    <to sec="1060319144" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_717{
style=filled;
color=gray75;
3369[label="204.135.152.246;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4019[label="204.135.152.246;3pkt 3fpkt", shape=invtriangle, color=brown];
stat717[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.135.152.246:1863, 148.239.135.156:1337}[33.3333%]&lt;BR/&gt;{204.135.152.246:1863, 147.164.216.209:16325}[33.3333%]&lt;BR/&gt;{204.135.152.246:1863, 169.92.20.210:1031}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 16325: (16.6667%)&lt;BR/&gt; 1337: (16.6667%)&lt;BR/&gt; 1031: (16.6667%)&gt;];
}
3369--4019[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="169.92.20.210" dst_port="1031" src_ip="204.135.152.246" src_port="1863"/>
      <filter dst_ip="147.164.216.209" dst_port="16325" src_ip="204.135.152.246" src_port="1863"/>
      <filter dst_ip="148.239.135.156" dst_port="1337" src_ip="204.135.152.246" src_port="1863"/>
    </slice>
    <from sec="1060318847" usec="0"/>
    <to sec="1060319652" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826134,1.59587,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_718{
style=filled;
color=gray75;
3371[label="16.251.35.247;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4021[label="16.251.35.247;1pkt 1fpkt", shape=invtriangle, color=brown];
4322[label="16.251.35.247;1pkt 1fpkt", shape=invhouse, color=bisque];
stat718[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.251.35.247:80, 201.201.34.197:54501}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54501: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3371--4021[label="1;1pkt 1fpkt"];
3371--4322[label="1;1pkt 1fpkt"];
4021--4322[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.201.34.197" dst_port="54501" src_ip="16.251.35.247" src_port="80"/>
    </slice>
    <from sec="1060319552" usec="0"/>
    <to sec="1060319583" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_719{
style=filled;
color=gray75;
3374[label="169.81.157.247;79pkt 79fpkt", shape=pentagon, color=darkviolet];
4023[label="169.81.157.247;79pkt 79fpkt", shape=invtriangle, color=brown];
stat719[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.81.157.247:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 1716: (0.632911%)&lt;BR/&gt; 1713: (0.632911%)&lt;BR/&gt; 1710: (0.632911%)&lt;BR/&gt; 1707: (0.632911%)&gt;];
}
3374--4023[label="1;79pkt 79fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="169.81.157.247"/>
    </slice>
    <from sec="1060319663" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.569021,1.59995,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_720{
style=filled;
color=gray75;
3396[label="201.162.179.254;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4030[label="201.162.179.254;1pkt 1fpkt", shape=invtriangle, color=brown];
stat720[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.162.179.254:4924, 148.238.144.23:6667}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (50%)&lt;BR/&gt; 4924: (50%)&gt;];
}
3396--4030[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.238.144.23" dst_port="6667" src_ip="201.162.179.254" src_port="4924"/>
    </slice>
    <from sec="1060319700" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.780859,1.69547,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.21.70.5"/>
    </slice>
    <from sec="1060319223" usec="0"/>
    <to sec="1060319580" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.780859,1.69547,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.55.22.16"/>
    </slice>
    <from sec="1060318877" usec="0"/>
    <to sec="1060318985" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.780859,1.69547,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="139.112.42.22"/>
    </slice>
    <from sec="1060318808" usec="0"/>
    <to sec="1060319699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889528,1.5433,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_724{
style=filled;
color=gray75;
121[label="216.68.116.24s;209pkt 209fpkt", shape=rectangle, color=red];
2195[label="216.68.116.24;227pkt 227fpkt", shape=pentagon, color=darkviolet];
3474[label="216.68.116.24;227pkt 227fpkt", shape=invtriangle, color=brown];
4066[label="216.68.116.24;228pkt 228fpkt", shape=invhouse, color=bisque];
stat724[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.68.116.24:1034, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1034: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
121--2195[label="0.995215;208pkt 208fpkt"];
121--3474[label="0.995215;208pkt 208fpkt"];
121--4066[label="1;209pkt 209fpkt"];
2195--3474[label="1;227pkt 227fpkt"];
2195--4066[label="1;227pkt 227fpkt"];
3474--4066[label="1;227pkt 227fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="216.68.116.24" src_port="1034"/>
    </slice>
    <from sec="1060319646" usec="0"/>
    <to sec="1060319681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.780859,1.69547,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="82.179.26.71"/>
    </slice>
    <from sec="1060318804" usec="0"/>
    <to sec="1060319699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.780859,1.69547,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="20.46.149.74"/>
    </slice>
    <from sec="1060318808" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.780859,1.69547,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="82.3.41.83"/>
    </slice>
    <from sec="1060318800" usec="0"/>
    <to sec="1060319701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.780859,1.69547,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="18.70.95.88"/>
    </slice>
    <from sec="1060319307" usec="0"/>
    <to sec="1060319331" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.780859,1.69547,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.2.102.92"/>
    </slice>
    <from sec="1060318803" usec="0"/>
    <to sec="1060319222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.780859,1.69547,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.228.155.97"/>
    </slice>
    <from sec="1060318805" usec="0"/>
    <to sec="1060319698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.780859,1.69547,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.165.235.103"/>
    </slice>
    <from sec="1060318947" usec="0"/>
    <to sec="1060319664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.780859,1.69547,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="18.220.0.107"/>
    </slice>
    <from sec="1060319573" usec="0"/>
    <to sec="1060319585" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.780859,1.69547,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="147.37.147.117"/>
    </slice>
    <from sec="1060319057" usec="0"/>
    <to sec="1060319695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.780859,1.69547,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.218.231.121"/>
    </slice>
    <from sec="1060318803" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.780859,1.69547,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.101.137.133"/>
    </slice>
    <from sec="1060318895" usec="0"/>
    <to sec="1060319632" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.780859,1.69547,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="19.0.68.162"/>
    </slice>
    <from sec="1060318947" usec="0"/>
    <to sec="1060319019" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.780859,1.69547,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.105.129.177"/>
    </slice>
    <from sec="1060318803" usec="0"/>
    <to sec="1060319172" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.780859,1.69547,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.168.55.183"/>
    </slice>
    <from sec="1060319358" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.780859,1.69547,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="82.136.58.185"/>
    </slice>
    <from sec="1060318804" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.780859,1.69547,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.88.53.192"/>
    </slice>
    <from sec="1060318803" usec="0"/>
    <to sec="1060319700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.780859,1.69547,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.41.158.195"/>
    </slice>
    <from sec="1060318807" usec="0"/>
    <to sec="1060319699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.780859,1.69547,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.48.201.207"/>
    </slice>
    <from sec="1060318804" usec="0"/>
    <to sec="1060319320" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.780859,1.69547,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="206.86.80.242"/>
    </slice>
    <from sec="1060319158" usec="0"/>
    <to sec="1060319225" usec="0"/>
  </anomaly>

</admd:annotation>
