<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="1.00488,1.51158,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00488,1.51158,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00488,1.51158,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="217.163.212.27" dst_port="49566" proto="tcp" src_ip="212.185.183.64" src_port="1863"/>
      <from sec="1063084064" usec="0"/>
      <to sec="1063084066" usec="0"/>
    </slice>
    <from sec="1063084064" usec="0"/>
    <to sec="1063084066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00488,1.51158,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
    </slice>
    <from sec="13" usec="0"/>
    <to sec="96" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00488,1.51158,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00488,1.51158,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="133.150.88.208" dst_port="3971" proto="tcp" src_ip="196.59.99.38" src_port="80"/>
      <filter dst_ip="133.150.88.208" dst_port="3972" proto="tcp" src_ip="196.59.99.38" src_port="80"/>
      <filter dst_ip="133.150.88.208" dst_port="1283" proto="tcp" src_ip="196.59.99.38" src_port="80"/>
      <filter dst_ip="133.150.88.208" dst_port="1284" proto="tcp" src_ip="196.59.99.38" src_port="80"/>
      <filter dst_ip="131.184.72.77" dst_port="3971" proto="tcp" src_ip="196.59.99.38" src_port="80"/>
      <filter dst_ip="131.184.72.77" dst_port="3972" proto="tcp" src_ip="196.59.99.38" src_port="80"/>
      <filter dst_ip="131.184.72.77" dst_port="1283" proto="tcp" src_ip="196.59.99.38" src_port="80"/>
      <filter dst_ip="131.184.72.77" dst_port="1284" proto="tcp" src_ip="196.59.99.38" src_port="80"/>
      <from sec="1063083939" usec="0"/>
      <to sec="1063084437" usec="0"/>
    </slice>
    <from sec="1063083939" usec="0"/>
    <to sec="1063084437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00488,1.51158,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="209.161.1.246" proto="tcp" src_ip="205.239.51.84" src_port="80"/>
      <filter dst_ip="209.161.1.246" proto="icmp" src_ip="205.239.51.84" src_port="80"/>
      <from sec="1063084319" usec="0"/>
      <to sec="1063084321" usec="0"/>
    </slice>
    <from sec="1063084319" usec="0"/>
    <to sec="1063084321" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00488,1.51158,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00488,1.51158,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="131.184.65.236" proto="tcp" src_ip="131.184.65.236" src_port="4662"/>
      <filter dst_ip="131.184.65.236" proto="tcp" src_ip="131.184.65.236" src_port="4662"/>
      <filter dst_ip="131.184.65.236" proto="tcp" src_ip="131.184.65.236" src_port="4662"/>
      <filter dst_ip="131.184.65.236" proto="tcp" src_ip="131.184.65.236" src_port="4662"/>
      <from sec="1063083883" usec="0"/>
      <to sec="1063084352" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="131.184.77.186" proto="tcp" src_ip="131.184.65.236" src_port="4662"/>
      <filter dst_ip="131.184.77.186" proto="tcp" src_ip="131.184.65.236" src_port="4662"/>
      <filter dst_ip="131.184.77.186" proto="tcp" src_ip="131.184.65.236" src_port="4662"/>
      <filter dst_ip="131.184.77.186" proto="tcp" src_ip="131.184.65.236" src_port="4662"/>
      <from sec="1063084076" usec="0"/>
      <to sec="1063084083" usec="0"/>
    </slice>
    <from sec="1063083883" usec="0"/>
    <to sec="1063084352" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00488,1.51158,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00488,1.51158,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00488,1.51158,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
      <filter proto="icmp"/>
      <filter proto="icmp"/>
      <filter proto="icmp"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00488,1.51158,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp" src_ip="153.0.37.4"/>
      <from sec="1063084465" usec="0"/>
      <to sec="1063084466" usec="0"/>
    </slice>
    <from sec="1063084465" usec="0"/>
    <to sec="1063084466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00488,1.51158,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="157.52.200.28" src_port="1027"/>
      <filter dst_port="1434" proto="udp" src_ip="157.52.200.28" src_port="1027"/>
      <filter dst_port="137" proto="udp" src_ip="157.52.200.28" src_port="1028"/>
      <filter dst_port="1434" proto="udp" src_ip="157.52.200.28" src_port="1028"/>
      <from sec="1063083700" usec="0"/>
      <to sec="1063083711" usec="0"/>
    </slice>
    <from sec="1063083700" usec="0"/>
    <to sec="1063083711" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00488,1.51158,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="205.233.199.36" src_port="63415"/>
      <from sec="1063083957" usec="0"/>
      <to sec="1063083963" usec="0"/>
    </slice>
    <from sec="1063083957" usec="0"/>
    <to sec="1063083963" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00488,1.51158,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="207.109.168.46" src_port="1026"/>
      <filter dst_port="137" proto="udp" src_ip="207.109.168.46" src_port="1026"/>
      <filter dst_port="1434" proto="tcp" src_ip="207.109.168.46" src_port="1026"/>
      <filter dst_port="1434" proto="udp" src_ip="207.109.168.46" src_port="1026"/>
      <filter dst_port="137" proto="tcp" src_ip="207.109.168.46" src_port="1027"/>
      <filter dst_port="137" proto="udp" src_ip="207.109.168.46" src_port="1027"/>
      <filter dst_port="1434" proto="tcp" src_ip="207.109.168.46" src_port="1027"/>
      <filter dst_port="1434" proto="udp" src_ip="207.109.168.46" src_port="1027"/>
      <filter dst_port="137" proto="tcp" src_ip="207.109.168.46" src_port="1028"/>
      <filter dst_port="137" proto="udp" src_ip="207.109.168.46" src_port="1028"/>
      <filter dst_port="1434" proto="tcp" src_ip="207.109.168.46" src_port="1028"/>
      <filter dst_port="1434" proto="udp" src_ip="207.109.168.46" src_port="1028"/>
      <from sec="1063084455" usec="0"/>
      <to sec="1063084461" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="195.209.246.142" src_port="1026"/>
      <filter dst_port="137" proto="udp" src_ip="195.209.246.142" src_port="1026"/>
      <filter dst_port="1434" proto="tcp" src_ip="195.209.246.142" src_port="1026"/>
      <filter dst_port="1434" proto="udp" src_ip="195.209.246.142" src_port="1026"/>
      <filter dst_port="137" proto="tcp" src_ip="195.209.246.142" src_port="1027"/>
      <filter dst_port="137" proto="udp" src_ip="195.209.246.142" src_port="1027"/>
      <filter dst_port="1434" proto="tcp" src_ip="195.209.246.142" src_port="1027"/>
      <filter dst_port="1434" proto="udp" src_ip="195.209.246.142" src_port="1027"/>
      <filter dst_port="137" proto="tcp" src_ip="195.209.246.142" src_port="1028"/>
      <filter dst_port="137" proto="udp" src_ip="195.209.246.142" src_port="1028"/>
      <filter dst_port="1434" proto="tcp" src_ip="195.209.246.142" src_port="1028"/>
      <filter dst_port="1434" proto="udp" src_ip="195.209.246.142" src_port="1028"/>
      <from sec="1063084455" usec="0"/>
      <to sec="1063084461" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="29.11.248.250" src_port="1026"/>
      <filter dst_port="137" proto="udp" src_ip="29.11.248.250" src_port="1026"/>
      <filter dst_port="1434" proto="tcp" src_ip="29.11.248.250" src_port="1026"/>
      <filter dst_port="1434" proto="udp" src_ip="29.11.248.250" src_port="1026"/>
      <filter dst_port="137" proto="tcp" src_ip="29.11.248.250" src_port="1027"/>
      <filter dst_port="137" proto="udp" src_ip="29.11.248.250" src_port="1027"/>
      <filter dst_port="1434" proto="tcp" src_ip="29.11.248.250" src_port="1027"/>
      <filter dst_port="1434" proto="udp" src_ip="29.11.248.250" src_port="1027"/>
      <filter dst_port="137" proto="tcp" src_ip="29.11.248.250" src_port="1028"/>
      <filter dst_port="137" proto="udp" src_ip="29.11.248.250" src_port="1028"/>
      <filter dst_port="1434" proto="tcp" src_ip="29.11.248.250" src_port="1028"/>
      <filter dst_port="1434" proto="udp" src_ip="29.11.248.250" src_port="1028"/>
      <from sec="1063084455" usec="0"/>
      <to sec="1063084461" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="205.149.96.128" src_port="1026"/>
      <filter dst_port="137" proto="udp" src_ip="205.149.96.128" src_port="1026"/>
      <filter dst_port="1434" proto="tcp" src_ip="205.149.96.128" src_port="1026"/>
      <filter dst_port="1434" proto="udp" src_ip="205.149.96.128" src_port="1026"/>
      <filter dst_port="137" proto="tcp" src_ip="205.149.96.128" src_port="1027"/>
      <filter dst_port="137" proto="udp" src_ip="205.149.96.128" src_port="1027"/>
      <filter dst_port="1434" proto="tcp" src_ip="205.149.96.128" src_port="1027"/>
      <filter dst_port="1434" proto="udp" src_ip="205.149.96.128" src_port="1027"/>
      <filter dst_port="137" proto="tcp" src_ip="205.149.96.128" src_port="1028"/>
      <filter dst_port="137" proto="udp" src_ip="205.149.96.128" src_port="1028"/>
      <filter dst_port="1434" proto="tcp" src_ip="205.149.96.128" src_port="1028"/>
      <filter dst_port="1434" proto="udp" src_ip="205.149.96.128" src_port="1028"/>
      <from sec="1063084455" usec="0"/>
      <to sec="1063084461" usec="0"/>
    </slice>
    <from sec="1063084455" usec="0"/>
    <to sec="1063084461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00488,1.51158,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="205.233.91.58" src_port="63413"/>
      <from sec="1063084066" usec="0"/>
      <to sec="1063084070" usec="0"/>
    </slice>
    <from sec="1063084066" usec="0"/>
    <to sec="1063084070" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00488,1.51158,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="65.169.165.94" src_port="1026"/>
      <from sec="1063084074" usec="0"/>
      <to sec="1063084082" usec="0"/>
    </slice>
    <from sec="1063084074" usec="0"/>
    <to sec="1063084082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00488,1.51158,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="197.163.10.124" src_port="1025"/>
      <filter dst_port="137" proto="udp" src_ip="197.163.10.124" src_port="1025"/>
      <filter dst_port="1434" proto="tcp" src_ip="197.163.10.124" src_port="1025"/>
      <filter dst_port="1434" proto="udp" src_ip="197.163.10.124" src_port="1025"/>
      <filter dst_port="137" proto="tcp" src_ip="197.163.10.124" src_port="1028"/>
      <filter dst_port="137" proto="udp" src_ip="197.163.10.124" src_port="1028"/>
      <filter dst_port="1434" proto="tcp" src_ip="197.163.10.124" src_port="1028"/>
      <filter dst_port="1434" proto="udp" src_ip="197.163.10.124" src_port="1028"/>
      <from sec="1063083735" usec="0"/>
      <to sec="1063083742" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="205.229.118.33" src_port="1025"/>
      <filter dst_port="137" proto="udp" src_ip="205.229.118.33" src_port="1025"/>
      <filter dst_port="1434" proto="tcp" src_ip="205.229.118.33" src_port="1025"/>
      <filter dst_port="1434" proto="udp" src_ip="205.229.118.33" src_port="1025"/>
      <filter dst_port="137" proto="tcp" src_ip="205.229.118.33" src_port="1028"/>
      <filter dst_port="137" proto="udp" src_ip="205.229.118.33" src_port="1028"/>
      <filter dst_port="1434" proto="tcp" src_ip="205.229.118.33" src_port="1028"/>
      <filter dst_port="1434" proto="udp" src_ip="205.229.118.33" src_port="1028"/>
      <from sec="1063083735" usec="0"/>
      <to sec="1063083741" usec="0"/>
    </slice>
    <from sec="1063083735" usec="0"/>
    <to sec="1063083742" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00488,1.51158,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="29.150.109.130" src_port="1032"/>
      <filter dst_port="137" proto="udp" src_ip="29.150.109.130" src_port="1032"/>
      <filter dst_port="1434" proto="tcp" src_ip="29.150.109.130" src_port="1032"/>
      <filter dst_port="1434" proto="udp" src_ip="29.150.109.130" src_port="1032"/>
      <filter dst_port="137" proto="tcp" src_ip="29.150.109.130" src_port="1026"/>
      <filter dst_port="137" proto="udp" src_ip="29.150.109.130" src_port="1026"/>
      <filter dst_port="1434" proto="tcp" src_ip="29.150.109.130" src_port="1026"/>
      <filter dst_port="1434" proto="udp" src_ip="29.150.109.130" src_port="1026"/>
      <from sec="1063084466" usec="0"/>
      <to sec="1063084476" usec="0"/>
    </slice>
    <from sec="1063084466" usec="0"/>
    <to sec="1063084479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00488,1.51158,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="64.128.37.192" src_port="33446"/>
      <from sec="1063084027" usec="0"/>
      <to sec="1063084033" usec="0"/>
    </slice>
    <from sec="1063084027" usec="0"/>
    <to sec="1063084033" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00488,1.51158,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="445" proto="tcp" src_ip="29.158.145.49"/>
      <from sec="1063084465" usec="0"/>
      <to sec="1063084467" usec="0"/>
    </slice>
    <from sec="1063084465" usec="0"/>
    <to sec="1063084467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00488,1.51158,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="135" proto="tcp" src_ip="170.42.46.244"/>
      <filter dst_port="80" proto="tcp" src_ip="170.42.46.244"/>
      <from sec="1063084455" usec="0"/>
      <to sec="1063084460" usec="0"/>
    </slice>
    <from sec="1063084455" usec="0"/>
    <to sec="1063084461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00488,1.51158,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp" src_ip="208.119.239.57"/>
      <from sec="1063084473" usec="0"/>
      <to sec="1063084475" usec="0"/>
    </slice>
    <from sec="1063084473" usec="0"/>
    <to sec="1063084475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00488,1.51158,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="131.41.207.57" dst_port="135" proto="tcp" src_port="4662"/>
      <filter dst_ip="131.41.207.57" dst_port="135" proto="tcp" src_port="4662"/>
      <filter dst_ip="131.41.207.57" dst_port="135" proto="tcp" src_port="4662"/>
      <filter dst_ip="131.41.207.57" dst_port="135" proto="tcp" src_port="4662"/>
      <from sec="1063083883" usec="0"/>
      <to sec="1063084352" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="131.184.77.186" dst_port="135" proto="tcp" src_port="4662"/>
      <filter dst_ip="131.184.77.186" dst_port="135" proto="tcp" src_port="4662"/>
      <filter dst_ip="131.184.77.186" dst_port="135" proto="tcp" src_port="4662"/>
      <filter dst_ip="131.184.77.186" dst_port="135" proto="tcp" src_port="4662"/>
      <from sec="1063083884" usec="0"/>
      <to sec="1063084352" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="131.184.15.47" dst_port="135" proto="tcp" src_port="4662"/>
      <filter dst_ip="131.184.15.47" dst_port="135" proto="tcp" src_port="4662"/>
      <filter dst_ip="131.184.15.47" dst_port="135" proto="tcp" src_port="4662"/>
      <filter dst_ip="131.184.15.47" dst_port="135" proto="tcp" src_port="4662"/>
      <from sec="1063083883" usec="0"/>
      <to sec="1063084352" usec="0"/>
    </slice>
    <from sec="1063083883" usec="0"/>
    <to sec="1063084352" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00488,1.51158,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="208.162.196.151" proto="icmp"/>
      <filter dst_ip="208.162.196.151" proto="icmp"/>
      <filter dst_ip="208.162.196.151" proto="icmp"/>
      <filter dst_ip="208.162.196.151" proto="icmp"/>
      <from sec="1063084458" usec="0"/>
      <to sec="1063084460" usec="0"/>
    </slice>
    <from sec="1063084458" usec="0"/>
    <to sec="1063084460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.660028,1.35035,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_67{
style=filled;
color=gray75;
442[label="153.0.38.191;s;2pkt 2fpkt", shape=diamond, color=yellow];
443[label="205.142.201.142;d;1pkt 1fpkt", shape=diamond, color=yellow];
3355[label="153.0.38.191;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat67[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.0.38.191:1033, 212.185.182.122:1863}[50%]&lt;BR/&gt;{153.0.38.191:1334, 205.142.201.142:7200}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7200: (30%)&lt;BR/&gt; 1334: (30%)&lt;BR/&gt; 1863: (20%)&lt;BR/&gt; 1033: (20%)&gt;];
}
442--443[label="1;1pkt 1fpkt"];
442--3355[label="1;2pkt 2fpkt"];
443--3355[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.142.201.142" dst_port="7200" src_ip="153.0.38.191" src_port="1334"/>
      <filter dst_ip="212.185.182.122" dst_port="1863" src_ip="153.0.38.191" src_port="1033"/>
    </slice>
    <from sec="1063083601" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.760121,1.41127,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_79{
style=filled;
color=gray75;
818[label="209.161.14.149;d;88pkt 88fpkt", shape=diamond, color=yellow];
stat79[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.149.110.201:443, 209.161.14.149:*}[68.1818%]&lt;BR/&gt;{207.149.108.147:443, 209.161.14.149:*}[28.4091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (48.8636%)&lt;BR/&gt; 0: (1.13636%)&lt;BR/&gt; 4669: (0.568182%)&lt;BR/&gt; 1373: (0.568182%)&lt;BR/&gt; 1372: (0.568182%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="209.161.14.149" src_ip="207.149.110.201" src_port="443"/>
      <filter dst_ip="209.161.14.149" src_ip="207.149.108.147" src_port="443"/>
    </slice>
    <from sec="1063083625" usec="0"/>
    <to sec="1063083939" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.760121,1.41127,501,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="153.0.9.207"/>
      <from sec="1063083603" usec="0"/>
      <to sec="1063084429" usec="0"/>
    </slice>
    <from sec="1063083603" usec="0"/>
    <to sec="1063084429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.760121,1.41127,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="38.97.73.124"/>
      <from sec="1063083985" usec="0"/>
      <to sec="1063084148" usec="0"/>
    </slice>
    <from sec="1063083985" usec="0"/>
    <to sec="1063084148" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.760121,1.41127,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_87{
style=filled;
color=gray75;
1086[label="1.159.44.17;s;577pkt 577fpkt", shape=diamond, color=yellow];
stat87[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.159.44.17:0, *:0}[93.4142%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (93.4142%)&lt;BR/&gt; 80: (1.90641%)&lt;BR/&gt; 135: (1.38648%)&lt;BR/&gt; 63750: (0.0866551%)&lt;BR/&gt; 62797: (0.0866551%)&gt;];
}
1086--2201[label="0.00519931;3pkt 3fpkt"];
1086--2202[label="0.0017331;1pkt 1fpkt"];
1086--2211[label="0.0017331;1pkt 1fpkt"];
1086--2246[label="0.0017331;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="1.159.44.17"/>
    </slice>
    <from sec="1063083601" usec="0"/>
    <to sec="1063084429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.760121,1.41127,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_89{
style=filled;
color=gray75;
1115[label="209.161.52.186;d;239pkt 239fpkt", shape=diamond, color=yellow];
stat89[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 209.161.52.186:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (1.67364%)&lt;BR/&gt; 1515: (1.25523%)&lt;BR/&gt; 3897: (0.627615%)&lt;BR/&gt; 6273: (0.41841%)&lt;BR/&gt; 4185: (0.41841%)&gt;];
}
1115--2203[label="0.0041841;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.161.52.186"/>
    </slice>
    <from sec="1063083605" usec="0"/>
    <to sec="1063084427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.760121,1.41127,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="10.171.16.88"/>
      <from sec="1063084223" usec="0"/>
      <to sec="1063084429" usec="0"/>
    </slice>
    <from sec="1063084223" usec="0"/>
    <to sec="1063084429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.760121,1.41127,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_93{
style=filled;
color=gray75;
1253[label="133.150.200.219;d;3pkt 3fpkt", shape=diamond, color=yellow];
1268[label="85.21.156.21;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat93[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.212.37.0:1377, 133.150.200.219:25}[33.3333%]&lt;BR/&gt;{85.21.156.21:4366, 133.150.200.219:25}[33.3333%]&lt;BR/&gt;{206.24.191.148:46962, 133.150.200.219:25}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 4366: (25%)&lt;BR/&gt; 46962: (12.5%)&lt;BR/&gt; 1377: (12.5%)&gt;];
}
1253--1268[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.150.200.219" dst_port="25" src_ip="206.24.191.148" src_port="46962"/>
      <filter dst_ip="133.150.200.219" dst_port="25" src_ip="85.21.156.21" src_port="4366"/>
      <filter dst_ip="133.150.200.219" dst_port="25" src_ip="84.212.37.0" src_port="1377"/>
    </slice>
    <from sec="1063084168" usec="0"/>
    <to sec="1063084429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708731,1.31862,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_94{
style=filled;
color=gray75;
1157[label="209.132.168.221;s;148pkt 148fpkt", shape=diamond, color=yellow];
1316[label="217.163.212.161;d;159pkt 159fpkt", shape=diamond, color=yellow];
3501[label="209.132.168.221;147pkt 147fpkt", shape=pentagon, color=darkviolet];
4341[label="209.132.168.221;147pkt 147fpkt", shape=invtriangle, color=brown];
stat94[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.132.168.221:80, 217.163.212.161:*}[62.2642%]&lt;BR/&gt;{209.132.168.221:8080, 217.163.212.161:*}[30.8176%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.2779%)&lt;BR/&gt; 8080: (16.3062%)&lt;BR/&gt; 1409: (0.332779%)&lt;BR/&gt; 1408: (0.332779%)&lt;BR/&gt; 1407: (0.332779%)&gt;];
}
1157--1316[label="1;148pkt 148fpkt"];
1157--3501[label="1;147pkt 147fpkt"];
1157--4341[label="1;147pkt 147fpkt"];
1316--1588[label="0.00628931;1pkt 1fpkt"];
1316--2090[label="0.00628931;1pkt 1fpkt"];
1316--2202[label="0.00628931;1pkt 1fpkt"];
1316--2207[label="0.0125786;2pkt 2fpkt"];
1316--2220[label="0.00628931;1pkt 1fpkt"];
1316--2221[label="0.00628931;1pkt 1fpkt"];
1316--2254[label="0.00628931;1pkt 1fpkt"];
1316--2255[label="0.00628931;1pkt 1fpkt"];
1316--2268[label="0.00628931;1pkt 1fpkt"];
1316--2269[label="0.00628931;1pkt 1fpkt"];
1316--2575[label="0.00628931;1pkt 1fpkt"];
1316--2655[label="0.00628931;1pkt 1fpkt"];
1316--3501[label="1;147pkt 147fpkt"];
1316--3821[label="0.00628931;1pkt 1fpkt"];
1316--4341[label="1;147pkt 147fpkt"];
3501--4341[label="1;147pkt 147fpkt"];
</description>
    <slice>
      <filter dst_ip="217.163.212.161" src_ip="209.132.168.221" src_port="80"/>
      <filter dst_ip="217.163.212.161" src_ip="209.132.168.221" src_port="8080"/>
    </slice>
    <from sec="1063083814" usec="0"/>
    <to sec="1063084416" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.760121,1.41127,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="38.208.31.142"/>
      <from sec="1063084201" usec="0"/>
      <to sec="1063084429" usec="0"/>
    </slice>
    <from sec="1063084201" usec="0"/>
    <to sec="1063084429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.760121,1.41127,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_98{
style=filled;
color=gray75;
1348[label="174.22.237.78;d;11pkt 11fpkt", shape=diamond, color=yellow];
1349[label="133.132.131.49;s;11pkt 11fpkt", shape=diamond, color=yellow];
stat98[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.132.131.49:80, 174.22.237.78:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4601: (4.54545%)&lt;BR/&gt; 4600: (4.54545%)&lt;BR/&gt; 4599: (4.54545%)&lt;BR/&gt; 4598: (4.54545%)&gt;];
}
1348--1349[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="174.22.237.78" src_ip="133.132.131.49" src_port="80"/>
    </slice>
    <from sec="1063084295" usec="0"/>
    <to sec="1063084419" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.818117,1.42293,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="38.97.73.124"/>
      <from sec="1063083985" usec="0"/>
      <to sec="1063084148" usec="0"/>
    </slice>
    <from sec="1063083985" usec="0"/>
    <to sec="1063084148" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_167{
style=filled;
color=gray75;
2785[label="141.168.158.86;50pkt 50fpkt", shape=pentagon, color=darkviolet];
stat167[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.168.158.86:0, *:0}[88%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (88%)&lt;BR/&gt; 80: (6%)&lt;BR/&gt; 2611: (1%)&lt;BR/&gt; 1917: (1%)&lt;BR/&gt; 1900: (1%)&gt;];
}
</description>
    <slice>
      <filter src_ip="141.168.158.86"/>
    </slice>
    <from sec="1063083632" usec="0"/>
    <to sec="1063084092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708731,1.31862,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_169{
style=filled;
color=gray75;
843[label="207.133.147.0;s;510pkt 510fpkt", shape=diamond, color=yellow];
2281[label="207.133.147.0;509pkt 509fpkt", shape=pentagon, color=darkviolet];
3660[label="207.133.147.0;509pkt 509fpkt", shape=invtriangle, color=brown];
stat169[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.133.147.0:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4382: (0.0981675%)&lt;BR/&gt; 4381: (0.0981675%)&lt;BR/&gt; 4380: (0.0981675%)&lt;BR/&gt; 4378: (0.0981675%)&gt;];
}
843--2281[label="1;509pkt 509fpkt"];
843--3660[label="1;509pkt 509fpkt"];
2281--3660[label="1;509pkt 509fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="207.133.147.0"/>
    </slice>
    <from sec="1063083884" usec="0"/>
    <to sec="1063083965" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.42.193.0"/>
    </slice>
    <from sec="1063083985" usec="0"/>
    <to sec="1063084015" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.73.12.1"/>
    </slice>
    <from sec="1063083666" usec="0"/>
    <to sec="1063083707" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.232.94.2"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.134.192.2"/>
    </slice>
    <from sec="1063084279" usec="0"/>
    <to sec="1063084357" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.100.18.4"/>
    </slice>
    <from sec="1063083612" usec="0"/>
    <to sec="1063084498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="65.235.195.4"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.238.213.4"/>
    </slice>
    <from sec="1063083677" usec="0"/>
    <to sec="1063084466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.68.86.5"/>
    </slice>
    <from sec="1063083604" usec="0"/>
    <to sec="1063084499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.77.123.5"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_179{
style=filled;
color=gray75;
2314[label="84.122.218.5;96pkt 96fpkt", shape=pentagon, color=darkviolet];
stat179[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.122.218.5:0, *:0}[93.75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (93.75%)&lt;BR/&gt; 135: (1.5625%)&lt;BR/&gt; 80: (1.5625%)&lt;BR/&gt; 65299: (0.520833%)&lt;BR/&gt; 65247: (0.520833%)&gt;];
}
</description>
    <slice>
      <filter src_ip="84.122.218.5"/>
    </slice>
    <from sec="1063083896" usec="0"/>
    <to sec="1063084499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.22.200.6"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_181{
style=filled;
color=gray75;
2322[label="140.230.206.6;183pkt 183fpkt", shape=pentagon, color=darkviolet];
stat181[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.230.206.6:0, *:0}[96.7213%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.7213%)&lt;BR/&gt; 80: (1.63934%)&lt;BR/&gt; 47678: (0.273224%)&lt;BR/&gt; 46660: (0.273224%)&lt;BR/&gt; 42796: (0.273224%)&gt;];
}
</description>
    <slice>
      <filter src_ip="140.230.206.6"/>
    </slice>
    <from sec="1063083614" usec="0"/>
    <to sec="1063084500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.153.25.7"/>
    </slice>
    <from sec="1063084427" usec="0"/>
    <to sec="1063084471" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_183{
style=filled;
color=gray75;
2333[label="86.221.196.8;155pkt 155fpkt", shape=pentagon, color=darkviolet];
stat183[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.221.196.8:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
</description>
    <slice>
      <filter src_ip="86.221.196.8"/>
    </slice>
    <from sec="1063083605" usec="0"/>
    <to sec="1063084498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.193.229.9"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="174.79.4.11"/>
    </slice>
    <from sec="1063083603" usec="0"/>
    <to sec="1063084500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.148.17.11"/>
    </slice>
    <from sec="1063084287" usec="0"/>
    <to sec="1063084358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.660028,1.35035,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_187{
style=filled;
color=gray75;
548[label="29.199.107.11;s;204pkt 204fpkt", shape=diamond, color=yellow];
2347[label="29.199.107.11;204pkt 204fpkt", shape=pentagon, color=darkviolet];
stat187[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.199.107.11:*, *:139}[50%]&lt;BR/&gt;{29.199.107.11:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25%)&lt;BR/&gt; 139: (25%)&lt;BR/&gt; 3900: (0.245098%)&lt;BR/&gt; 3899: (0.245098%)&lt;BR/&gt; 3897: (0.245098%)&gt;];
}
548--2347[label="1;204pkt 204fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="29.199.107.11"/>
      <filter dst_port="139" src_ip="29.199.107.11"/>
    </slice>
    <from sec="1063083602" usec="0"/>
    <to sec="1063083820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.243.14.14"/>
    </slice>
    <from sec="1063083998" usec="0"/>
    <to sec="1063084019" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="31.113.162.14"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.172.135.15"/>
    </slice>
    <from sec="1063084287" usec="0"/>
    <to sec="1063084304" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.33.156.15"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.101.214.15"/>
    </slice>
    <from sec="1063084124" usec="0"/>
    <to sec="1063084204" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.251.3.16"/>
    </slice>
    <from sec="1063083990" usec="0"/>
    <to sec="1063084021" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.146.138.16"/>
    </slice>
    <from sec="1063083996" usec="0"/>
    <to sec="1063084002" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="30.30.134.17"/>
    </slice>
    <from sec="1063083631" usec="0"/>
    <to sec="1063084500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.192.237.18"/>
    </slice>
    <from sec="1063083601" usec="0"/>
    <to sec="1063083655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.202.169.20"/>
    </slice>
    <from sec="1063083616" usec="0"/>
    <to sec="1063083705" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.219.65.21"/>
    </slice>
    <from sec="1063084065" usec="0"/>
    <to sec="1063084291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="30.27.134.21"/>
    </slice>
    <from sec="1063083601" usec="0"/>
    <to sec="1063083764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.21.156.21"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.222.191.23"/>
    </slice>
    <from sec="1063083619" usec="0"/>
    <to sec="1063083980" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.128.83.24"/>
    </slice>
    <from sec="1063084001" usec="0"/>
    <to sec="1063084062" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.21.156.24"/>
    </slice>
    <from sec="1063084344" usec="0"/>
    <to sec="1063084364" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.185.183.24"/>
    </slice>
    <from sec="1063083605" usec="0"/>
    <to sec="1063084497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.234.47.27"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.202.169.27"/>
    </slice>
    <from sec="1063083837" usec="0"/>
    <to sec="1063083887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.163.70.28"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.213.101.28"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.241.97.29"/>
    </slice>
    <from sec="1063084186" usec="0"/>
    <to sec="1063084195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.150.111.29"/>
    </slice>
    <from sec="1063083621" usec="0"/>
    <to sec="1063084492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.228.95.31"/>
    </slice>
    <from sec="1063084255" usec="0"/>
    <to sec="1063084287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.153.137.31"/>
    </slice>
    <from sec="1063083723" usec="0"/>
    <to sec="1063084087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.68.190.34"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.133.180.35"/>
    </slice>
    <from sec="1063083756" usec="0"/>
    <to sec="1063083775" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.125.66.36"/>
    </slice>
    <from sec="1063084458" usec="0"/>
    <to sec="1063084491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="152.116.130.36"/>
    </slice>
    <from sec="1063083615" usec="0"/>
    <to sec="1063084473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_218{
style=filled;
color=gray75;
2503[label="215.18.3.37;192pkt 192fpkt", shape=pentagon, color=darkviolet];
stat218[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.18.3.37:0, *:0}[90.625%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (90.625%)&lt;BR/&gt; 80: (2.86458%)&lt;BR/&gt; 135: (1.82292%)&lt;BR/&gt; 61919: (0.260417%)&lt;BR/&gt; 59841: (0.260417%)&gt;];
}
</description>
    <slice>
      <filter src_ip="215.18.3.37"/>
    </slice>
    <from sec="1063083604" usec="0"/>
    <to sec="1063084495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.175.26.37"/>
    </slice>
    <from sec="1063083708" usec="0"/>
    <to sec="1063083726" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.185.183.37"/>
    </slice>
    <from sec="1063083628" usec="0"/>
    <to sec="1063084488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.203.193.37"/>
    </slice>
    <from sec="1063084204" usec="0"/>
    <to sec="1063084499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.140.159.38"/>
    </slice>
    <from sec="1063083763" usec="0"/>
    <to sec="1063083987" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.118.178.38"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.175.14.40"/>
    </slice>
    <from sec="1063084087" usec="0"/>
    <to sec="1063084151" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.34.49.40"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.242.65.40"/>
    </slice>
    <from sec="1063083601" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.241.119.42"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.197.28.44"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.8.41.44"/>
    </slice>
    <from sec="1063084471" usec="0"/>
    <to sec="1063084482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.176.95.44"/>
    </slice>
    <from sec="1063083604" usec="0"/>
    <to sec="1063084478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.66.154.44"/>
    </slice>
    <from sec="1063083868" usec="0"/>
    <to sec="1063083881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.122.87.47"/>
    </slice>
    <from sec="1063083627" usec="0"/>
    <to sec="1063084374" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.93.226.49"/>
    </slice>
    <from sec="1063084269" usec="0"/>
    <to sec="1063084302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.213.136.51"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.14.132.53"/>
    </slice>
    <from sec="1063083676" usec="0"/>
    <to sec="1063084458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.193.188.53"/>
    </slice>
    <from sec="1063084021" usec="0"/>
    <to sec="1063084042" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.210.246.53"/>
    </slice>
    <from sec="1063083602" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="153.0.97.54"/>
    </slice>
    <from sec="1063083693" usec="0"/>
    <to sec="1063084497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.27.195.54"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.224.150.55"/>
    </slice>
    <from sec="1063084436" usec="0"/>
    <to sec="1063084461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.201.26.59"/>
    </slice>
    <from sec="1063083601" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.4.40.61"/>
    </slice>
    <from sec="1063083601" usec="0"/>
    <to sec="1063083813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.192.193.61"/>
    </slice>
    <from sec="1063083747" usec="0"/>
    <to sec="1063083756" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.73.68.62"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.43.18.63"/>
    </slice>
    <from sec="1063083601" usec="0"/>
    <to sec="1063083682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.3.49.63"/>
    </slice>
    <from sec="1063084396" usec="0"/>
    <to sec="1063084435" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.180.31.65"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.213.162.68"/>
    </slice>
    <from sec="1063083601" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="175.45.120.71"/>
    </slice>
    <from sec="1063083604" usec="0"/>
    <to sec="1063084500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.144.145.72"/>
    </slice>
    <from sec="1063084442" usec="0"/>
    <to sec="1063084460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.242.65.74"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.27.76.74"/>
    </slice>
    <from sec="1063084160" usec="0"/>
    <to sec="1063084255" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.151.16.75"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.242.65.75"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="65.37.175.75"/>
    </slice>
    <from sec="1063083603" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_263{
style=filled;
color=gray75;
2735[label="193.89.80.77;232pkt 232fpkt", shape=pentagon, color=darkviolet];
stat263[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.89.80.77:0, *:0}[97.8448%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.8448%)&lt;BR/&gt; 80: (1.07759%)&lt;BR/&gt; 56078: (0.215517%)&lt;BR/&gt; 53755: (0.215517%)&lt;BR/&gt; 50694: (0.215517%)&gt;];
}
</description>
    <slice>
      <filter src_ip="193.89.80.77"/>
    </slice>
    <from sec="1063083603" usec="0"/>
    <to sec="1063084499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.180.31.78"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.211.36.80"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.74.4.81"/>
    </slice>
    <from sec="1063083620" usec="0"/>
    <to sec="1063084500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.180.31.81"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.244.192.81"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.201.164.82"/>
    </slice>
    <from sec="1063083602" usec="0"/>
    <to sec="1063084495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.153.29.85"/>
    </slice>
    <from sec="1063084480" usec="0"/>
    <to sec="1063084483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.1.93.86"/>
    </slice>
    <from sec="1063084305" usec="0"/>
    <to sec="1063084431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.13.105.87"/>
    </slice>
    <from sec="1063083653" usec="0"/>
    <to sec="1063083691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="30.72.154.87"/>
    </slice>
    <from sec="1063083603" usec="0"/>
    <to sec="1063083837" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.29.132.88"/>
    </slice>
    <from sec="1063083948" usec="0"/>
    <to sec="1063083985" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.96.130.90"/>
    </slice>
    <from sec="1063084298" usec="0"/>
    <to sec="1063084343" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.26.43.91"/>
    </slice>
    <from sec="1063083608" usec="0"/>
    <to sec="1063084489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_277{
style=filled;
color=gray75;
2804[label="217.205.85.91;276pkt 276fpkt", shape=pentagon, color=darkviolet];
stat277[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.205.85.91:0, *:0}[96.0145%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.0145%)&lt;BR/&gt; 135: (1.44928%)&lt;BR/&gt; 80: (0.543478%)&lt;BR/&gt; 38678: (0.181159%)&lt;BR/&gt; 38212: (0.181159%)&gt;];
}
</description>
    <slice>
      <filter src_ip="217.205.85.91"/>
    </slice>
    <from sec="1063083675" usec="0"/>
    <to sec="1063084487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.138.250.92"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.132.187.93"/>
    </slice>
    <from sec="1063084044" usec="0"/>
    <to sec="1063084099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.137.77.94"/>
    </slice>
    <from sec="1063083602" usec="0"/>
    <to sec="1063084500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.197.134.98"/>
    </slice>
    <from sec="1063084262" usec="0"/>
    <to sec="1063084287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.189.161.99"/>
    </slice>
    <from sec="1063083906" usec="0"/>
    <to sec="1063083927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_283{
style=filled;
color=gray75;
2847[label="87.226.56.100;95pkt 95fpkt", shape=pentagon, color=darkviolet];
stat283[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.226.56.100:0, *:0}[92.6316%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (92.6316%)&lt;BR/&gt; 135: (3.15789%)&lt;BR/&gt; 23983: (0.526316%)&lt;BR/&gt; 23603: (0.526316%)&lt;BR/&gt; 20387: (0.526316%)&gt;];
}
</description>
    <slice>
      <filter src_ip="87.226.56.100"/>
    </slice>
    <from sec="1063083610" usec="0"/>
    <to sec="1063084488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708731,1.31862,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_284{
style=filled;
color=gray75;
1235[label="133.151.133.74;d;66pkt 66fpkt", shape=diamond, color=yellow];
2852[label="197.243.30.102;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3979[label="197.243.30.102;1pkt 1fpkt", shape=invtriangle, color=brown];
stat284[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 133.151.133.74:*}[45.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (23.5294%)&lt;BR/&gt; 1521: (2.94118%)&lt;BR/&gt; 3512: (2.20588%)&lt;BR/&gt; 2225: (2.20588%)&lt;BR/&gt; 1723: (2.20588%)&gt;];
}
1235--2852[label="1;1pkt 1fpkt"];
1235--3979[label="1;1pkt 1fpkt"];
2852--3979[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.151.133.74" src_port="80"/>
    </slice>
    <from sec="1063083908" usec="0"/>
    <to sec="1063084429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.32.53.102"/>
    </slice>
    <from sec="1063083610" usec="0"/>
    <to sec="1063084478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.10.253.103"/>
    </slice>
    <from sec="1063084309" usec="0"/>
    <to sec="1063084488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.212.37.104"/>
    </slice>
    <from sec="1063083602" usec="0"/>
    <to sec="1063084020" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.130.41.105"/>
    </slice>
    <from sec="1063084110" usec="0"/>
    <to sec="1063084138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.141.207.110"/>
    </slice>
    <from sec="1063083606" usec="0"/>
    <to sec="1063084479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.6.47.113"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.37.69.113"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.185.182.114"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.144.134.115"/>
    </slice>
    <from sec="1063083619" usec="0"/>
    <to sec="1063084450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_295{
style=filled;
color=gray75;
2930[label="86.201.228.115;301pkt 301fpkt", shape=pentagon, color=darkviolet];
stat295[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.201.228.115:0, *:0}[97.01%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.01%)&lt;BR/&gt; 80: (1.49502%)&lt;BR/&gt; 59922: (0.166113%)&lt;BR/&gt; 59884: (0.166113%)&lt;BR/&gt; 59752: (0.166113%)&gt;];
}
</description>
    <slice>
      <filter src_ip="86.201.228.115"/>
    </slice>
    <from sec="1063083603" usec="0"/>
    <to sec="1063084499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.180.31.118"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="153.0.39.118"/>
    </slice>
    <from sec="1063083614" usec="0"/>
    <to sec="1063084476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="152.122.199.119"/>
    </slice>
    <from sec="1063084187" usec="0"/>
    <to sec="1063084221" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.128.6.120"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.164.128.126"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.124.154.127"/>
    </slice>
    <from sec="1063084426" usec="0"/>
    <to sec="1063084437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708731,1.31862,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_302{
style=filled;
color=gray75;
1284[label="86.180.28.128;s;14pkt 14fpkt", shape=diamond, color=yellow];
2979[label="86.180.28.128;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4059[label="86.180.28.128;14pkt 14fpkt", shape=invtriangle, color=brown];
stat302[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.180.28.128:25, *:*}[33.3333%]&lt;BR/&gt;{86.180.28.128:5050, 168.160.68.155:*}[26.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (26.7442%)&lt;BR/&gt; 25: (16.2791%)&lt;BR/&gt; 1090: (5.81395%)&lt;BR/&gt; 41013: (3.48837%)&lt;BR/&gt; 3884: (3.48837%)&gt;];
}
1284--2979[label="1;14pkt 14fpkt"];
1284--4059[label="0.928571;13pkt 13fpkt"];
2979--4059[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter src_ip="86.180.28.128" src_port="25"/>
      <filter dst_ip="168.160.68.155" src_ip="86.180.28.128" src_port="5050"/>
    </slice>
    <from sec="1063083601" usec="0"/>
    <to sec="1063084498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.145.30.128"/>
    </slice>
    <from sec="1063083602" usec="0"/>
    <to sec="1063083630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.660028,1.35035,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_304{
style=filled;
color=gray75;
1096[label="153.0.10.129;s;122pkt 122fpkt", shape=diamond, color=yellow];
2981[label="153.0.10.129;129pkt 129fpkt", shape=pentagon, color=darkviolet];
stat304[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.0.10.129:*, *:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 54536: (0.398406%)&lt;BR/&gt; 54529: (0.398406%)&lt;BR/&gt; 54528: (0.398406%)&lt;BR/&gt; 54499: (0.398406%)&gt;];
}
1096--2981[label="1;122pkt 122fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="153.0.10.129"/>
    </slice>
    <from sec="1063083602" usec="0"/>
    <to sec="1063084500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.138.140.129"/>
    </slice>
    <from sec="1063084209" usec="0"/>
    <to sec="1063084217" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.21.225.129"/>
    </slice>
    <from sec="1063084200" usec="0"/>
    <to sec="1063084497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.137.148.130"/>
    </slice>
    <from sec="1063083675" usec="0"/>
    <to sec="1063083720" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.0.198.131"/>
    </slice>
    <from sec="1063083757" usec="0"/>
    <to sec="1063083789" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.185.178.132"/>
    </slice>
    <from sec="1063083610" usec="0"/>
    <to sec="1063084493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.173.48.133"/>
    </slice>
    <from sec="1063083611" usec="0"/>
    <to sec="1063084490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_312{
style=filled;
color=gray75;
3016[label="208.106.234.133;37pkt 37fpkt", shape=pentagon, color=darkviolet];
stat312[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.106.234.133:0, *:0}[51.3514%]&lt;BR/&gt;{208.106.234.133:25, *:*}[35.1351%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (51.3514%)&lt;BR/&gt; 25: (17.5676%)&lt;BR/&gt; 80: (6.75676%)&lt;BR/&gt; 36299: (1.35135%)&lt;BR/&gt; 33681: (1.35135%)&gt;];
}
</description>
    <slice>
      <filter src_ip="208.106.234.133" src_port="25"/>
      <filter src_ip="208.106.234.133"/>
    </slice>
    <from sec="1063083615" usec="0"/>
    <to sec="1063084427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_313{
style=filled;
color=gray75;
3021[label="215.77.206.134;134pkt 134fpkt", shape=pentagon, color=darkviolet];
stat313[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.77.206.134:0, *:0}[94.7761%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.7761%)&lt;BR/&gt; 135: (2.61194%)&lt;BR/&gt; 52890: (0.373134%)&lt;BR/&gt; 48303: (0.373134%)&lt;BR/&gt; 34486: (0.373134%)&gt;];
}
</description>
    <slice>
      <filter src_ip="215.77.206.134"/>
    </slice>
    <from sec="1063083618" usec="0"/>
    <to sec="1063084483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.239.242.134"/>
    </slice>
    <from sec="1063084244" usec="0"/>
    <to sec="1063084270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.111.106.135"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.208.245.138"/>
    </slice>
    <from sec="1063083602" usec="0"/>
    <to sec="1063084486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.172.94.139"/>
    </slice>
    <from sec="1063083603" usec="0"/>
    <to sec="1063084500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.186.201.139"/>
    </slice>
    <from sec="1063083955" usec="0"/>
    <to sec="1063084031" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.184.34.140"/>
    </slice>
    <from sec="1063083624" usec="0"/>
    <to sec="1063084453" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.200.246.141"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.0.132.143"/>
    </slice>
    <from sec="1063084039" usec="0"/>
    <to sec="1063084056" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.36.32.144"/>
    </slice>
    <from sec="1063083645" usec="0"/>
    <to sec="1063084465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="65.152.136.144"/>
    </slice>
    <from sec="1063083750" usec="0"/>
    <to sec="1063083779" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.868607,1.33356,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_326{
style=filled;
color=gray75;
720[label="131.41.243.152;d;10pkt 10fpkt", shape=diamond, color=yellow];
3076[label="218.127.137.144;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4105[label="218.127.137.144;5pkt 5fpkt", shape=invtriangle, color=brown];
4637[label="218.127.137.144;6pkt 6fpkt", shape=invhouse, color=bisque];
stat326[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.127.137.144:80, 131.41.243.152:*}[60%]&lt;BR/&gt;{218.142.48.15:80, 131.41.243.152:*}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1544: (7.40741%)&lt;BR/&gt; 1543: (7.40741%)&lt;BR/&gt; 1542: (7.40741%)&lt;BR/&gt; 1541: (7.40741%)&gt;];
}
720--3076[label="1;6pkt 6fpkt"];
720--4105[label="1;5pkt 5fpkt"];
720--4637[label="1;6pkt 6fpkt"];
3076--4105[label="1;5pkt 5fpkt"];
3076--4637[label="1;6pkt 6fpkt"];
4105--4637[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="131.41.243.152" src_ip="218.127.137.144" src_port="80"/>
      <filter dst_ip="131.41.243.152" src_ip="218.142.48.15" src_port="80"/>
    </slice>
    <from sec="1063083687" usec="0"/>
    <to sec="1063083967" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.74.218.144"/>
    </slice>
    <from sec="1063083616" usec="0"/>
    <to sec="1063084496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.19.36.145"/>
    </slice>
    <from sec="1063083771" usec="0"/>
    <to sec="1063083791" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.140.198.146"/>
    </slice>
    <from sec="1063083605" usec="0"/>
    <to sec="1063084500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.150.198.146"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.219.64.148"/>
    </slice>
    <from sec="1063083611" usec="0"/>
    <to sec="1063084492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_333{
style=filled;
color=gray75;
3119[label="163.154.115.151;145pkt 145fpkt", shape=pentagon, color=darkviolet];
stat333[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.154.115.151:0, *:0}[92.4138%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (92.4138%)&lt;BR/&gt; 80: (2.06897%)&lt;BR/&gt; 135: (1.72414%)&lt;BR/&gt; 51643: (0.344828%)&lt;BR/&gt; 49113: (0.344828%)&gt;];
}
</description>
    <slice>
      <filter src_ip="163.154.115.151"/>
    </slice>
    <from sec="1063083651" usec="0"/>
    <to sec="1063084491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.185.178.151"/>
    </slice>
    <from sec="1063083884" usec="0"/>
    <to sec="1063084498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="10.171.15.152"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="31.87.66.154"/>
    </slice>
    <from sec="1063083683" usec="0"/>
    <to sec="1063083690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.144.70.154"/>
    </slice>
    <from sec="1063083603" usec="0"/>
    <to sec="1063084327" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.219.64.155"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.136.62.157"/>
    </slice>
    <from sec="1063083604" usec="0"/>
    <to sec="1063084499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.137.20.159"/>
    </slice>
    <from sec="1063084336" usec="0"/>
    <to sec="1063084450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.52.129.159"/>
    </slice>
    <from sec="1063083602" usec="0"/>
    <to sec="1063083834" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.236.102.160"/>
    </slice>
    <from sec="1063083744" usec="0"/>
    <to sec="1063083814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.116.82.162"/>
    </slice>
    <from sec="1063083796" usec="0"/>
    <to sec="1063083824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.64.127.162"/>
    </slice>
    <from sec="1063083671" usec="0"/>
    <to sec="1063084487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="153.0.12.163"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="174.175.221.163"/>
    </slice>
    <from sec="1063084271" usec="0"/>
    <to sec="1063084309" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.67.255.164"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.213.101.165"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.185.178.165"/>
    </slice>
    <from sec="1063084260" usec="0"/>
    <to sec="1063084500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_352{
style=filled;
color=gray75;
3208[label="208.173.17.166;248pkt 248fpkt", shape=pentagon, color=darkviolet];
stat352[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.173.17.166:0, *:0}[93.9516%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (93.9516%)&lt;BR/&gt; 80: (2.21774%)&lt;BR/&gt; 135: (0.806452%)&lt;BR/&gt; 32263: (0.201613%)&lt;BR/&gt; 28239: (0.201613%)&gt;];
}
</description>
    <slice>
      <filter src_ip="208.173.17.166"/>
    </slice>
    <from sec="1063083617" usec="0"/>
    <to sec="1063084499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.97.238.166"/>
    </slice>
    <from sec="1063084376" usec="0"/>
    <to sec="1063084434" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.197.5.171"/>
    </slice>
    <from sec="1063083642" usec="0"/>
    <to sec="1063084498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="152.120.15.171"/>
    </slice>
    <from sec="1063084265" usec="0"/>
    <to sec="1063084286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708731,1.31862,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_357{
style=filled;
color=gray75;
1097[label="87.2.22.172;s;695pkt 695fpkt", shape=diamond, color=yellow];
3243[label="87.2.22.172;760pkt 760fpkt", shape=pentagon, color=darkviolet];
4192[label="87.2.22.172;760pkt 760fpkt", shape=invtriangle, color=brown];
stat357[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.2.22.172:0, *:0}[98.0289%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.0135%)&lt;BR/&gt; 80: (0.993228%)&lt;BR/&gt; 58648: (0.0677201%)&lt;BR/&gt; 50593: (0.0677201%)&lt;BR/&gt; 47685: (0.0677201%)&gt;];
}
1097--2201[label="0.00143885;1pkt 1fpkt"];
1097--2211[label="0.00143885;1pkt 1fpkt"];
1097--2220[label="0.00143885;1pkt 1fpkt"];
1097--2246[label="0.00143885;1pkt 1fpkt"];
1097--2254[label="0.00143885;1pkt 1fpkt"];
1097--2268[label="0.00143885;1pkt 1fpkt"];
1097--3243[label="0.998561;694pkt 694fpkt"];
1097--4192[label="0.998561;694pkt 694fpkt"];
3243--4192[label="1;760pkt 760fpkt"];
</description>
    <slice>
      <filter src_ip="87.2.22.172"/>
    </slice>
    <from sec="1063083602" usec="0"/>
    <to sec="1063084499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.150.110.172"/>
    </slice>
    <from sec="1063083604" usec="0"/>
    <to sec="1063084500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_359{
style=filled;
color=gray75;
2571[label="205.253.176.49;42pkt 42fpkt", shape=pentagon, color=darkviolet];
3818[label="205.253.176.49;41pkt 41fpkt", shape=invtriangle, color=brown];
4497[label="205.253.176.49;42pkt 42fpkt", shape=invhouse, color=bisque];
stat359[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.253.176.49:2048, 208.77.232.42:*}[35.7143%]&lt;BR/&gt;{205.253.176.49:80, 208.77.232.42:*}[23.8095%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2048: (18%)&lt;BR/&gt; 80: (14.4%)&lt;BR/&gt; 119: (4.8%)&lt;BR/&gt; 135: (2.4%)&lt;BR/&gt; 25: (2%)&gt;];
}
2571--3818[label="1;41pkt 41fpkt"];
2571--4497[label="1;42pkt 42fpkt"];
3818--4497[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_ip="208.77.232.42" src_ip="205.253.176.49" src_port="2048"/>
      <filter dst_ip="208.77.232.42" src_ip="205.253.176.49" src_port="80"/>
    </slice>
    <from sec="1063083626" usec="0"/>
    <to sec="1063084328" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.48.14.174"/>
    </slice>
    <from sec="1063083667" usec="0"/>
    <to sec="1063084453" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.150.110.174"/>
    </slice>
    <from sec="1063083630" usec="0"/>
    <to sec="1063084488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.78.2.175"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.162.37.175"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.185.178.175"/>
    </slice>
    <from sec="1063083775" usec="0"/>
    <to sec="1063084454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.2.67.176"/>
    </slice>
    <from sec="1063084430" usec="0"/>
    <to sec="1063084445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.65.229.177"/>
    </slice>
    <from sec="1063083608" usec="0"/>
    <to sec="1063084477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.660028,1.35035,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_367{
style=filled;
color=gray75;
1098[label="209.150.106.178;s;331pkt 331fpkt", shape=diamond, color=yellow];
3289[label="209.150.106.178;355pkt 355fpkt", shape=pentagon, color=darkviolet];
stat367[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.150.106.178:0, *:0}[98.0337%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.105%)&lt;BR/&gt; 80: (0.655977%)&lt;BR/&gt; 135: (0.291545%)&lt;BR/&gt; 4618: (0.145773%)&lt;BR/&gt; 3655: (0.145773%)&gt;];
}
1098--2207[label="0.00302115;1pkt 1fpkt"];
1098--3289[label="0.996979;330pkt 330fpkt"];
</description>
    <slice>
      <filter src_ip="209.150.106.178"/>
    </slice>
    <from sec="1063083602" usec="0"/>
    <to sec="1063084500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.128.118.178"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.185.178.178"/>
    </slice>
    <from sec="1063083601" usec="0"/>
    <to sec="1063084171" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.192.27.179"/>
    </slice>
    <from sec="1063083635" usec="0"/>
    <to sec="1063084499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.119.145.183"/>
    </slice>
    <from sec="1063083603" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.6.168.183"/>
    </slice>
    <from sec="1063083617" usec="0"/>
    <to sec="1063084474" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.185.178.183"/>
    </slice>
    <from sec="1063083887" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.32.148.184"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.236.183.184"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.71.78.186"/>
    </slice>
    <from sec="1063083603" usec="0"/>
    <to sec="1063084500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.200.212.186"/>
    </slice>
    <from sec="1063083635" usec="0"/>
    <to sec="1063084038" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.173.34.187"/>
    </slice>
    <from sec="1063083632" usec="0"/>
    <to sec="1063084474" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.185.178.188"/>
    </slice>
    <from sec="1063083608" usec="0"/>
    <to sec="1063084352" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.36.181.188"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.25.75.193"/>
    </slice>
    <from sec="1063084331" usec="0"/>
    <to sec="1063084424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.171.99.193"/>
    </slice>
    <from sec="1063084286" usec="0"/>
    <to sec="1063084498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.185.178.194"/>
    </slice>
    <from sec="1063083643" usec="0"/>
    <to sec="1063084465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.146.1.199"/>
    </slice>
    <from sec="1063083980" usec="0"/>
    <to sec="1063083998" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.18.198.199"/>
    </slice>
    <from sec="1063083603" usec="0"/>
    <to sec="1063083855" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.77.157.200"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.101.196.200"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.118.20.201"/>
    </slice>
    <from sec="1063083702" usec="0"/>
    <to sec="1063083728" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.42.55.202"/>
    </slice>
    <from sec="1063083606" usec="0"/>
    <to sec="1063084479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.35.186.202"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="174.175.41.205"/>
    </slice>
    <from sec="1063083602" usec="0"/>
    <to sec="1063084499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.185.178.206"/>
    </slice>
    <from sec="1063083612" usec="0"/>
    <to sec="1063084311" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_397{
style=filled;
color=gray75;
3437[label="81.118.100.207;280pkt 280fpkt", shape=pentagon, color=darkviolet];
stat397[shape=component, label=&lt;Rules:&lt;BR/&gt;{81.118.100.207:0, *:0}[92.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (92.5%)&lt;BR/&gt; 135: (1.96429%)&lt;BR/&gt; 80: (1.78571%)&lt;BR/&gt; 63243: (0.178571%)&lt;BR/&gt; 56657: (0.178571%)&gt;];
}
</description>
    <slice>
      <filter src_ip="81.118.100.207"/>
    </slice>
    <from sec="1063083606" usec="0"/>
    <to sec="1063084496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.25.159.208"/>
    </slice>
    <from sec="1063084250" usec="0"/>
    <to sec="1063084272" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.185.183.208"/>
    </slice>
    <from sec="1063083606" usec="0"/>
    <to sec="1063084486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.34.36.209"/>
    </slice>
    <from sec="1063083622" usec="0"/>
    <to sec="1063084500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_401{
style=filled;
color=gray75;
3445[label="217.110.104.209;110pkt 110fpkt", shape=pentagon, color=darkviolet];
stat401[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.110.104.209:0, *:0}[94.5455%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.5455%)&lt;BR/&gt; 80: (2.72727%)&lt;BR/&gt; 31679: (0.454545%)&lt;BR/&gt; 31609: (0.454545%)&lt;BR/&gt; 31423: (0.454545%)&gt;];
}
</description>
    <slice>
      <filter src_ip="217.110.104.209"/>
    </slice>
    <from sec="1063084006" usec="0"/>
    <to sec="1063084496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.23.27.210"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.1.6.214"/>
    </slice>
    <from sec="1063083602" usec="0"/>
    <to sec="1063084074" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.200.9.214"/>
    </slice>
    <from sec="1063083758" usec="0"/>
    <to sec="1063084478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.21.211.214"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.76.119.217"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_409{
style=filled;
color=gray75;
3497[label="85.123.160.220;142pkt 142fpkt", shape=pentagon, color=darkviolet];
stat409[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.123.160.220:0, *:0}[97.1831%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.1831%)&lt;BR/&gt; 135: (1.05634%)&lt;BR/&gt; 25135: (0.352113%)&lt;BR/&gt; 18255: (0.352113%)&lt;BR/&gt; 16178: (0.352113%)&gt;];
}
</description>
    <slice>
      <filter src_ip="85.123.160.220"/>
    </slice>
    <from sec="1063083615" usec="0"/>
    <to sec="1063084496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="31.32.229.221"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.185.183.223"/>
    </slice>
    <from sec="1063083624" usec="0"/>
    <to sec="1063084500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.65.34.226"/>
    </slice>
    <from sec="1063084224" usec="0"/>
    <to sec="1063084256" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.73.82.227"/>
    </slice>
    <from sec="1063083875" usec="0"/>
    <to sec="1063083908" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.210.80.229"/>
    </slice>
    <from sec="1063083618" usec="0"/>
    <to sec="1063083646" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.13.2.232"/>
    </slice>
    <from sec="1063083609" usec="0"/>
    <to sec="1063083631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_417{
style=filled;
color=gray75;
3552[label="212.246.170.232;189pkt 189fpkt", shape=pentagon, color=darkviolet];
stat417[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.246.170.232:0, *:0}[91.5344%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (91.5344%)&lt;BR/&gt; 135: (2.91005%)&lt;BR/&gt; 80: (1.32275%)&lt;BR/&gt; 65296: (0.26455%)&lt;BR/&gt; 62030: (0.26455%)&gt;];
}
</description>
    <slice>
      <filter src_ip="212.246.170.232"/>
    </slice>
    <from sec="1063083605" usec="0"/>
    <to sec="1063084499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.78.232.232"/>
    </slice>
    <from sec="1063083798" usec="0"/>
    <to sec="1063083948" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708731,1.31862,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_420{
style=filled;
color=gray75;
287[label="18.134.124.234;d;70pkt 70fpkt", shape=diamond, color=yellow];
288[label="18.134.124.234;s;67pkt 67fpkt", shape=diamond, color=yellow];
3565[label="18.134.124.234;79pkt 79fpkt", shape=pentagon, color=darkviolet];
4369[label="18.134.124.234;78pkt 78fpkt", shape=invtriangle, color=brown];
stat420[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.134.124.234:13364, 18.134.124.234:*}[87.3418%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13364: (43.5374%)&lt;BR/&gt; 0: (5.10204%)&lt;BR/&gt; 13312: (2.72109%)&lt;BR/&gt; 13447: (1.36054%)&lt;BR/&gt; 135: (1.19048%)&gt;];
}
287--288[label="1;67pkt 67fpkt"];
287--2202[label="0.0142857;1pkt 1fpkt"];
287--2211[label="0.0142857;1pkt 1fpkt"];
287--2220[label="0.0142857;1pkt 1fpkt"];
287--2246[label="0.0142857;1pkt 1fpkt"];
287--2254[label="0.0142857;1pkt 1fpkt"];
287--2268[label="0.0142857;1pkt 1fpkt"];
287--3565[label="1;70pkt 70fpkt"];
287--4369[label="0.985714;69pkt 69fpkt"];
288--2202[label="0.0149254;1pkt 1fpkt"];
288--2211[label="0.0149254;1pkt 1fpkt"];
288--2220[label="0.0149254;1pkt 1fpkt"];
288--2246[label="0.0149254;1pkt 1fpkt"];
288--2254[label="0.0149254;1pkt 1fpkt"];
288--2268[label="0.0149254;1pkt 1fpkt"];
288--3565[label="1;67pkt 67fpkt"];
288--4369[label="0.985075;66pkt 66fpkt"];
3565--4369[label="1;78pkt 78fpkt"];
</description>
    <slice>
      <filter dst_ip="18.134.124.234" src_ip="18.134.124.234" src_port="13364"/>
    </slice>
    <from sec="1063083601" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_421{
style=filled;
color=gray75;
3572[label="192.151.23.236;154pkt 154fpkt", shape=pentagon, color=darkviolet];
stat421[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.151.23.236:0, *:0}[93.5065%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (93.5065%)&lt;BR/&gt; 135: (3.24675%)&lt;BR/&gt; 60447: (0.324675%)&lt;BR/&gt; 59226: (0.324675%)&lt;BR/&gt; 56546: (0.324675%)&gt;];
}
</description>
    <slice>
      <filter src_ip="192.151.23.236"/>
    </slice>
    <from sec="1063083607" usec="0"/>
    <to sec="1063084495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.167.124.236"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.112.196.237"/>
    </slice>
    <from sec="1063083651" usec="0"/>
    <to sec="1063083681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.34.58.240"/>
    </slice>
    <from sec="1063084002" usec="0"/>
    <to sec="1063084041" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.212.208.240"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.216.120.243"/>
    </slice>
    <from sec="1063083607" usec="0"/>
    <to sec="1063084497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.42.46.244"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_428{
style=filled;
color=gray75;
3620[label="193.91.143.244;156pkt 156fpkt", shape=pentagon, color=darkviolet];
stat428[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.91.143.244:0, *:0}[94.8718%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.8718%)&lt;BR/&gt; 80: (2.5641%)&lt;BR/&gt; 53436: (0.320513%)&lt;BR/&gt; 49074: (0.320513%)&lt;BR/&gt; 46020: (0.320513%)&gt;];
}
</description>
    <slice>
      <filter src_ip="193.91.143.244"/>
    </slice>
    <from sec="1063083618" usec="0"/>
    <to sec="1063084482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.660028,1.35035,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_429{
style=filled;
color=gray75;
1266[label="10.171.12.246;s;1993pkt 1993fpkt", shape=diamond, color=yellow];
3625[label="10.171.12.246;1993pkt 1993fpkt", shape=pentagon, color=darkviolet];
stat429[shape=component, label=&lt;Rules:&lt;BR/&gt;{10.171.12.246:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1266--3625[label="1;1993pkt 1993fpkt"];
</description>
    <slice>
      <filter src_ip="10.171.12.246"/>
    </slice>
    <from sec="1063084260" usec="0"/>
    <to sec="1063084402" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.53.88.247"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_431{
style=filled;
color=gray75;
3631[label="84.56.69.248;131pkt 131fpkt", shape=pentagon, color=darkviolet];
stat431[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.56.69.248:0, *:0}[92.3664%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (92.3664%)&lt;BR/&gt; 135: (1.9084%)&lt;BR/&gt; 80: (1.9084%)&lt;BR/&gt; 44533: (0.381679%)&lt;BR/&gt; 44365: (0.381679%)&gt;];
}
</description>
    <slice>
      <filter src_ip="84.56.69.248"/>
    </slice>
    <from sec="1063083613" usec="0"/>
    <to sec="1063084482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.200.112.249"/>
    </slice>
    <from sec="1063084450" usec="0"/>
    <to sec="1063084490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="31.30.58.250"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.77.104.250"/>
    </slice>
    <from sec="1063084417" usec="0"/>
    <to sec="1063084428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.660028,1.35035,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_435{
style=filled;
color=gray75;
255[label="10.171.12.251;s;21606pkt 21606fpkt", shape=diamond, color=yellow];
3642[label="10.171.12.251;23826pkt 23826fpkt", shape=pentagon, color=darkviolet];
stat435[shape=component, label=&lt;Rules:&lt;BR/&gt;{10.171.12.251:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
255--3642[label="1;21606pkt 21606fpkt"];
</description>
    <slice>
      <filter src_ip="10.171.12.251"/>
    </slice>
    <from sec="1063083601" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.133.56.254"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.403426,1.39847,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.155.120.255"/>
    </slice>
    <from sec="1063083625" usec="0"/>
    <to sec="1063084495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_438{
style=filled;
color=gray75;
2278[label="205.248.54.0;224pkt 224fpkt", shape=pentagon, color=darkviolet];
3659[label="205.248.54.0;224pkt 224fpkt", shape=invtriangle, color=brown];
4413[label="205.248.54.0;224pkt 224fpkt", shape=invhouse, color=bisque];
stat438[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.248.54.0:1075, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1075: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2278--3659[label="1;224pkt 224fpkt"];
2278--4413[label="1;224pkt 224fpkt"];
3659--4413[label="1;224pkt 224fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="205.248.54.0" src_port="1075"/>
    </slice>
    <from sec="1063084445" usec="0"/>
    <to sec="1063084482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.42.193.0"/>
    </slice>
    <from sec="1063083985" usec="0"/>
    <to sec="1063084015" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_441{
style=filled;
color=gray75;
2290[label="141.170.120.1;170pkt 170fpkt", shape=pentagon, color=darkviolet];
3667[label="141.170.120.1;170pkt 170fpkt", shape=invtriangle, color=brown];
4418[label="141.170.120.1;169pkt 169fpkt", shape=invhouse, color=bisque];
stat441[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.170.120.1:1032, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1032: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2290--3667[label="1;170pkt 170fpkt"];
2290--4418[label="1;169pkt 169fpkt"];
3667--4418[label="1;169pkt 169fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="141.170.120.1" src_port="1032"/>
    </slice>
    <from sec="1063084012" usec="0"/>
    <to sec="1063084043" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_442{
style=filled;
color=gray75;
2294[label="131.140.57.2;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3669[label="131.140.57.2;2pkt 2fpkt", shape=invtriangle, color=brown];
stat442[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.140.57.2:53, 150.91.208.154:54700}[50%]&lt;BR/&gt;{131.140.57.2:0, 206.14.25.168:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (50%)&lt;BR/&gt; 54700: (25%)&lt;BR/&gt; 53: (25%)&gt;];
}
2294--3669[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="206.14.25.168" src_ip="131.140.57.2"/>
      <filter dst_ip="150.91.208.154" dst_port="54700" src_ip="131.140.57.2" src_port="53"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.232.94.2"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_444{
style=filled;
color=gray75;
2297[label="86.119.187.2;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3672[label="86.119.187.2;1pkt 1fpkt", shape=invtriangle, color=brown];
stat444[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.119.187.2:80, 208.173.0.162:28653}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 28653: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2297--3672[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.173.0.162" dst_port="28653" src_ip="86.119.187.2" src_port="80"/>
    </slice>
    <from sec="1063084323" usec="0"/>
    <to sec="1063084487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="65.235.195.4"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="80.77.123.5"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_447{
style=filled;
color=gray75;
2315[label="205.149.0.6;110pkt 110fpkt", shape=pentagon, color=darkviolet];
3679[label="205.149.0.6;110pkt 110fpkt", shape=invtriangle, color=brown];
4425[label="205.149.0.6;109pkt 109fpkt", shape=invhouse, color=bisque];
stat447[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.149.0.6:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2315--3679[label="1;110pkt 110fpkt"];
2315--4425[label="1;109pkt 109fpkt"];
3679--4425[label="1;109pkt 109fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="205.149.0.6" src_port="1027"/>
    </slice>
    <from sec="1063083752" usec="0"/>
    <to sec="1063083771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_449{
style=filled;
color=gray75;
2318[label="194.102.83.6;96pkt 96fpkt", shape=pentagon, color=darkviolet];
3682[label="194.102.83.6;96pkt 96fpkt", shape=invtriangle, color=brown];
stat449[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.102.83.6:0, *:0}[94.7917%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.7917%)&lt;BR/&gt; 80: (2.60417%)&lt;BR/&gt; 56567: (0.520833%)&lt;BR/&gt; 47370: (0.520833%)&lt;BR/&gt; 36745: (0.520833%)&gt;];
}
2318--3682[label="1;96pkt 96fpkt"];
</description>
    <slice>
      <filter src_ip="194.102.83.6"/>
    </slice>
    <from sec="1063083977" usec="0"/>
    <to sec="1063084500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_450{
style=filled;
color=gray75;
2320[label="86.1.181.6;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3684[label="86.1.181.6;3pkt 3fpkt", shape=invtriangle, color=brown];
4428[label="86.1.181.6;3pkt 3fpkt", shape=invhouse, color=bisque];
stat450[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.1.181.6:80, 153.0.9.164:30182}[33.3333%]&lt;BR/&gt;{86.1.181.6:80, 153.0.9.164:30183}[33.3333%]&lt;BR/&gt;{86.1.181.6:80, 153.0.9.164:30184}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 30184: (16.6667%)&lt;BR/&gt; 30183: (16.6667%)&lt;BR/&gt; 30182: (16.6667%)&gt;];
}
2320--3684[label="1;3pkt 3fpkt"];
2320--4428[label="1;3pkt 3fpkt"];
3684--4428[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="153.0.9.164" dst_port="30184" src_ip="86.1.181.6" src_port="80"/>
      <filter dst_ip="153.0.9.164" dst_port="30183" src_ip="86.1.181.6" src_port="80"/>
      <filter dst_ip="153.0.9.164" dst_port="30182" src_ip="86.1.181.6" src_port="80"/>
    </slice>
    <from sec="1063084436" usec="0"/>
    <to sec="1063084448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="64.22.200.6"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_452{
style=filled;
color=gray75;
2330[label="85.21.241.7;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3690[label="85.21.241.7;1pkt 1fpkt", shape=invtriangle, color=brown];
4430[label="85.21.241.7;1pkt 1fpkt", shape=invhouse, color=bisque];
stat452[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.21.241.7:80, 133.150.172.74:1595}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1595: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2330--3690[label="1;1pkt 1fpkt"];
2330--4430[label="1;1pkt 1fpkt"];
3690--4430[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.150.172.74" dst_port="1595" src_ip="85.21.241.7" src_port="80"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_453{
style=filled;
color=gray75;
2334[label="202.139.20.9;179pkt 179fpkt", shape=pentagon, color=darkviolet];
3693[label="202.139.20.9;178pkt 178fpkt", shape=invtriangle, color=brown];
stat453[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.139.20.9:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2334--3693[label="1;178pkt 178fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.139.20.9" src_port="1027"/>
    </slice>
    <from sec="1063083896" usec="0"/>
    <to sec="1063083925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_454{
style=filled;
color=gray75;
2338[label="56.248.29.10;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3696[label="56.248.29.10;3pkt 3fpkt", shape=invtriangle, color=brown];
4433[label="56.248.29.10;3pkt 3fpkt", shape=invhouse, color=bisque];
stat454[shape=component, label=&lt;Rules:&lt;BR/&gt;{56.248.29.10:47311, 153.0.10.19:80}[33.3333%]&lt;BR/&gt;{56.248.29.10:49162, 153.0.10.19:80}[33.3333%]&lt;BR/&gt;{56.248.29.10:50283, 153.0.10.19:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50283: (16.6667%)&lt;BR/&gt; 49162: (16.6667%)&lt;BR/&gt; 47311: (16.6667%)&gt;];
}
2338--3696[label="1;3pkt 3fpkt"];
2338--4433[label="1;3pkt 3fpkt"];
3696--4433[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="153.0.10.19" dst_port="80" src_ip="56.248.29.10" src_port="50283"/>
      <filter dst_ip="153.0.10.19" dst_port="80" src_ip="56.248.29.10" src_port="49162"/>
      <filter dst_ip="153.0.10.19" dst_port="80" src_ip="56.248.29.10" src_port="47311"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_455{
style=filled;
color=gray75;
2352[label="208.177.176.13;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3702[label="208.177.176.13;11pkt 11fpkt", shape=invtriangle, color=brown];
stat455[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.177.176.13:*, 133.150.165.124:80}[90.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51149: (4.54545%)&lt;BR/&gt; 42702: (4.54545%)&lt;BR/&gt; 42240: (4.54545%)&lt;BR/&gt; 42239: (4.54545%)&gt;];
}
2352--3702[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="133.150.165.124" dst_port="80" src_ip="208.177.176.13"/>
    </slice>
    <from sec="1063083809" usec="0"/>
    <to sec="1063083981" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_457{
style=filled;
color=gray75;
2354[label="29.148.225.13;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3704[label="29.148.225.13;1pkt 1fpkt", shape=invtriangle, color=brown];
stat457[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.148.225.13:10246, 133.151.12.117:36712}[50%]&lt;BR/&gt;{29.148.225.13:10769, 133.151.12.117:36342}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 36712: (33.3333%)&lt;BR/&gt; 10246: (33.3333%)&lt;BR/&gt; 36342: (16.6667%)&lt;BR/&gt; 10769: (16.6667%)&gt;];
}
2354--3704[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.151.12.117" dst_port="36342" src_ip="29.148.225.13" src_port="10769"/>
      <filter dst_ip="133.151.12.117" dst_port="36712" src_ip="29.148.225.13" src_port="10246"/>
    </slice>
    <from sec="1063083988" usec="0"/>
    <to sec="1063084494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_458{
style=filled;
color=gray75;
2357[label="208.173.16.14;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3706[label="208.173.16.14;1pkt 1fpkt", shape=invtriangle, color=brown];
4439[label="208.173.16.14;1pkt 1fpkt", shape=invhouse, color=bisque];
stat458[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.173.16.14:0, 80.250.226.100:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2357--3706[label="1;1pkt 1fpkt"];
2357--4439[label="1;1pkt 1fpkt"];
3706--4439[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="80.250.226.100" src_ip="208.173.16.14"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_459{
style=filled;
color=gray75;
2360[label="153.0.70.14;29pkt 29fpkt", shape=pentagon, color=darkviolet];
3709[label="153.0.70.14;28pkt 28fpkt", shape=invtriangle, color=brown];
4441[label="153.0.70.14;29pkt 29fpkt", shape=invhouse, color=bisque];
stat459[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.0.70.14:*, 212.213.96.161:80}[62.069%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.2791%)&lt;BR/&gt; 7001: (3.48837%)&lt;BR/&gt; 1863: (3.48837%)&lt;BR/&gt; 1092: (1.74419%)&lt;BR/&gt; 1091: (1.74419%)&gt;];
}
2360--3709[label="1;28pkt 28fpkt"];
2360--4441[label="1;29pkt 29fpkt"];
3709--4441[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="212.213.96.161" dst_port="80" src_ip="153.0.70.14"/>
    </slice>
    <from sec="1063083623" usec="0"/>
    <to sec="1063084499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="31.113.162.14"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="80.101.214.15"/>
    </slice>
    <from sec="1063084124" usec="0"/>
    <to sec="1063084204" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_463{
style=filled;
color=gray75;
2372[label="206.244.82.16;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3716[label="206.244.82.16;1pkt 1fpkt", shape=invtriangle, color=brown];
4442[label="206.244.82.16;1pkt 1fpkt", shape=invhouse, color=bisque];
stat463[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.244.82.16:80, 133.150.117.46:62313}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62313: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2372--3716[label="1;1pkt 1fpkt"];
2372--4442[label="1;1pkt 1fpkt"];
3716--4442[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.150.117.46" dst_port="62313" src_ip="206.244.82.16" src_port="80"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_464{
style=filled;
color=gray75;
2376[label="205.116.56.17;189pkt 189fpkt", shape=pentagon, color=darkviolet];
3717[label="205.116.56.17;189pkt 189fpkt", shape=invtriangle, color=brown];
stat464[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.116.56.17:0, *:0}[97.8836%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.8836%)&lt;BR/&gt; 80: (1.0582%)&lt;BR/&gt; 50170: (0.26455%)&lt;BR/&gt; 29360: (0.26455%)&lt;BR/&gt; 24548: (0.26455%)&gt;];
}
2376--3717[label="1;189pkt 189fpkt"];
</description>
    <slice>
      <filter src_ip="205.116.56.17"/>
    </slice>
    <from sec="1063083624" usec="0"/>
    <to sec="1063084490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_465{
style=filled;
color=gray75;
2388[label="212.102.249.19;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3721[label="212.102.249.19;12pkt 12fpkt", shape=invtriangle, color=brown];
4445[label="212.102.249.19;12pkt 12fpkt", shape=invhouse, color=bisque];
stat465[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.102.249.19:80, 153.0.20.197:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54820: (4.16667%)&lt;BR/&gt; 54785: (4.16667%)&lt;BR/&gt; 49235: (4.16667%)&lt;BR/&gt; 49229: (4.16667%)&gt;];
}
2388--3721[label="1;12pkt 12fpkt"];
2388--4445[label="1;12pkt 12fpkt"];
3721--4445[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="153.0.20.197" src_ip="212.102.249.19" src_port="80"/>
    </slice>
    <from sec="1063083706" usec="0"/>
    <to sec="1063084341" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_467{
style=filled;
color=gray75;
2393[label="209.173.18.21;198pkt 198fpkt", shape=pentagon, color=darkviolet];
3724[label="209.173.18.21;197pkt 197fpkt", shape=invtriangle, color=brown];
4448[label="209.173.18.21;198pkt 198fpkt", shape=invhouse, color=bisque];
stat467[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.173.18.21:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2393--3724[label="1;197pkt 197fpkt"];
2393--4448[label="1;198pkt 198fpkt"];
3724--4448[label="1;197pkt 197fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="209.173.18.21" src_port="1027"/>
    </slice>
    <from sec="1063083617" usec="0"/>
    <to sec="1063083652" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_468{
style=filled;
color=gray75;
2401[label="192.75.89.22;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3727[label="192.75.89.22;6pkt 6fpkt", shape=invtriangle, color=brown];
stat468[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.75.89.22:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2401--3727[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="192.75.89.22" src_port="1026"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_470{
style=filled;
color=gray75;
2413[label="207.109.23.24;227pkt 227fpkt", shape=pentagon, color=darkviolet];
3732[label="207.109.23.24;227pkt 227fpkt", shape=invtriangle, color=brown];
stat470[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.109.23.24:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2413--3732[label="1;227pkt 227fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="207.109.23.24" src_port="1027"/>
    </slice>
    <from sec="1063084401" usec="0"/>
    <to sec="1063084439" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_471{
style=filled;
color=gray75;
2420[label="208.173.17.25;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3737[label="208.173.17.25;7pkt 7fpkt", shape=invtriangle, color=brown];
stat471[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.173.17.25:53, *:53}[57.1429%]&lt;BR/&gt;{208.173.17.25:*, 192.8.110.236:443}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (53.8462%)&lt;BR/&gt; 443: (23.0769%)&lt;BR/&gt; 4964: (7.69231%)&lt;BR/&gt; 4963: (7.69231%)&lt;BR/&gt; 4962: (7.69231%)&gt;];
}
2420--3737[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="192.8.110.236" dst_port="443" src_ip="208.173.17.25"/>
      <filter dst_port="53" src_ip="208.173.17.25" src_port="53"/>
    </slice>
    <from sec="1063083604" usec="0"/>
    <to sec="1063084449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_472{
style=filled;
color=gray75;
2423[label="139.87.187.25;165pkt 165fpkt", shape=pentagon, color=darkviolet];
3740[label="139.87.187.25;166pkt 166fpkt", shape=invtriangle, color=brown];
4457[label="139.87.187.25;165pkt 165fpkt", shape=invhouse, color=bisque];
stat472[shape=component, label=&lt;Rules:&lt;BR/&gt;{139.87.187.25:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2423--3740[label="1;165pkt 165fpkt"];
2423--4457[label="1;165pkt 165fpkt"];
3740--4457[label="1;165pkt 165fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="139.87.187.25" src_port="1026"/>
    </slice>
    <from sec="1063084054" usec="0"/>
    <to sec="1063084082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.234.47.27"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_474{
style=filled;
color=gray75;
2430[label="216.170.52.27;45pkt 45fpkt", shape=pentagon, color=darkviolet];
3743[label="216.170.52.27;45pkt 45fpkt", shape=invtriangle, color=brown];
stat474[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.170.52.27:80, 133.150.122.141:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49280: (1.11111%)&lt;BR/&gt; 49279: (1.11111%)&lt;BR/&gt; 49278: (1.11111%)&lt;BR/&gt; 49277: (1.11111%)&gt;];
}
2430--3743[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter dst_ip="133.150.122.141" src_ip="216.170.52.27" src_port="80"/>
    </slice>
    <from sec="1063083760" usec="0"/>
    <to sec="1063083941" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="80.163.70.28"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_477{
style=filled;
color=gray75;
2444[label="65.42.109.28;20pkt 20fpkt", shape=pentagon, color=darkviolet];
3751[label="65.42.109.28;20pkt 20fpkt", shape=invtriangle, color=brown];
4464[label="65.42.109.28;21pkt 21fpkt", shape=invhouse, color=bisque];
stat477[shape=component, label=&lt;Rules:&lt;BR/&gt;{65.42.109.28:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4999: (2.45902%)&lt;BR/&gt; 4998: (2.45902%)&lt;BR/&gt; 4997: (2.45902%)&lt;BR/&gt; 4996: (2.45902%)&gt;];
}
2444--3751[label="1;20pkt 20fpkt"];
2444--4464[label="1;20pkt 20fpkt"];
3751--4464[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="65.42.109.28"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_479{
style=filled;
color=gray75;
2449[label="205.52.106.29;127pkt 127fpkt", shape=pentagon, color=darkviolet];
3755[label="205.52.106.29;127pkt 127fpkt", shape=invtriangle, color=brown];
stat479[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.52.106.29:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2449--3755[label="1;127pkt 127fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="205.52.106.29" src_port="1026"/>
    </slice>
    <from sec="1063083766" usec="0"/>
    <to sec="1063083788" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_480{
style=filled;
color=gray75;
2455[label="195.168.156.30;21pkt 21fpkt", shape=pentagon, color=darkviolet];
3759[label="195.168.156.30;20pkt 20fpkt", shape=invtriangle, color=brown];
4469[label="195.168.156.30;20pkt 20fpkt", shape=invhouse, color=bisque];
stat480[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.168.156.30:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4169: (2.45902%)&lt;BR/&gt; 4168: (2.45902%)&lt;BR/&gt; 4167: (2.45902%)&lt;BR/&gt; 4166: (2.45902%)&gt;];
}
2455--3759[label="1;20pkt 20fpkt"];
2455--4469[label="1;20pkt 20fpkt"];
3759--4469[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="195.168.156.30"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_481{
style=filled;
color=gray75;
2456[label="205.253.196.30;249pkt 249fpkt", shape=pentagon, color=darkviolet];
3760[label="205.253.196.30;250pkt 250fpkt", shape=invtriangle, color=brown];
4470[label="205.253.196.30;249pkt 249fpkt", shape=invhouse, color=bisque];
stat481[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.253.196.30:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 53176: (0.200535%)&lt;BR/&gt; 53172: (0.200535%)&lt;BR/&gt; 53168: (0.200535%)&lt;BR/&gt; 53164: (0.200535%)&gt;];
}
2456--3760[label="1;249pkt 249fpkt"];
2456--4470[label="1;249pkt 249fpkt"];
3760--4470[label="1;249pkt 249fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="205.253.196.30"/>
    </slice>
    <from sec="1063084269" usec="0"/>
    <to sec="1063084308" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="64.89.125.31"/>
    </slice>
    <from sec="1063083622" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_483{
style=filled;
color=gray75;
2479[label="29.189.136.33;171pkt 171fpkt", shape=pentagon, color=darkviolet];
3772[label="29.189.136.33;171pkt 171fpkt", shape=invtriangle, color=brown];
4478[label="29.189.136.33;170pkt 170fpkt", shape=invhouse, color=bisque];
stat483[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.189.136.33:64091, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64091: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2479--3772[label="1;171pkt 171fpkt"];
2479--4478[label="1;170pkt 170fpkt"];
3772--4478[label="1;170pkt 170fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="29.189.136.33" src_port="64091"/>
    </slice>
    <from sec="1063084292" usec="0"/>
    <to sec="1063084319" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_484{
style=filled;
color=gray75;
2482[label="208.173.16.34;177pkt 177fpkt", shape=pentagon, color=darkviolet];
3773[label="208.173.16.34;177pkt 177fpkt", shape=invtriangle, color=brown];
stat484[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.173.16.34:53, *:*}[81.3559%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (46.8927%)&lt;BR/&gt; 0: (12.4294%)&lt;BR/&gt; 32768: (2.54237%)&lt;BR/&gt; 80: (1.9774%)&lt;BR/&gt; 32769: (1.12994%)&gt;];
}
2482--3773[label="1;177pkt 177fpkt"];
</description>
    <slice>
      <filter src_ip="208.173.16.34" src_port="53"/>
    </slice>
    <from sec="1063083612" usec="0"/>
    <to sec="1063084488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.68.190.34"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_486{
style=filled;
color=gray75;
2499[label="29.194.122.36;123pkt 123fpkt", shape=pentagon, color=darkviolet];
3780[label="29.194.122.36;122pkt 122fpkt", shape=invtriangle, color=brown];
stat486[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.194.122.36:64793, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64793: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2499--3780[label="1;122pkt 122fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="29.194.122.36" src_port="64793"/>
    </slice>
    <from sec="1063083883" usec="0"/>
    <to sec="1063083904" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="152.116.130.36"/>
    </slice>
    <from sec="1063083615" usec="0"/>
    <to sec="1063084473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_488{
style=filled;
color=gray75;
2501[label="218.203.193.36;18pkt 18fpkt", shape=pentagon, color=darkviolet];
3782[label="218.203.193.36;17pkt 17fpkt", shape=invtriangle, color=brown];
4483[label="218.203.193.36;18pkt 18fpkt", shape=invhouse, color=bisque];
stat488[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.203.193.36:80, 174.22.157.68:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1278: (2.83019%)&lt;BR/&gt; 1277: (2.83019%)&lt;BR/&gt; 1276: (2.83019%)&lt;BR/&gt; 1275: (2.83019%)&gt;];
}
2501--3782[label="1;17pkt 17fpkt"];
2501--4483[label="1;18pkt 18fpkt"];
3782--4483[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="174.22.157.68" src_ip="218.203.193.36" src_port="80"/>
    </slice>
    <from sec="1063083609" usec="0"/>
    <to sec="1063083918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_490{
style=filled;
color=gray75;
2521[label="192.243.94.39;104pkt 104fpkt", shape=pentagon, color=darkviolet];
3789[label="192.243.94.39;104pkt 104fpkt", shape=invtriangle, color=brown];
stat490[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.243.94.39:0, *:0}[97.1154%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.1154%)&lt;BR/&gt; 80: (1.44231%)&lt;BR/&gt; 49127: (0.480769%)&lt;BR/&gt; 43234: (0.480769%)&lt;BR/&gt; 36706: (0.480769%)&gt;];
}
2521--3789[label="1;104pkt 104fpkt"];
</description>
    <slice>
      <filter src_ip="192.243.94.39"/>
    </slice>
    <from sec="1063083625" usec="0"/>
    <to sec="1063084494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_492{
style=filled;
color=gray75;
2530[label="212.179.117.40;180pkt 180fpkt", shape=pentagon, color=darkviolet];
3793[label="212.179.117.40;181pkt 181fpkt", shape=invtriangle, color=brown];
4488[label="212.179.117.40;181pkt 181fpkt", shape=invhouse, color=bisque];
stat492[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.179.117.40:0, *:0}[96.6851%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.679%)&lt;BR/&gt; 80: (1.10701%)&lt;BR/&gt; 135: (0.553506%)&lt;BR/&gt; 64659: (0.276753%)&lt;BR/&gt; 63333: (0.276753%)&gt;];
}
2530--3793[label="1;180pkt 180fpkt"];
2530--4488[label="1;180pkt 180fpkt"];
3793--4488[label="1;181pkt 181fpkt"];
</description>
    <slice>
      <filter src_ip="212.179.117.40"/>
    </slice>
    <from sec="1063083609" usec="0"/>
    <to sec="1063084491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_493{
style=filled;
color=gray75;
2537[label="29.193.190.41;53pkt 53fpkt", shape=pentagon, color=darkviolet];
3797[label="29.193.190.41;54pkt 54fpkt", shape=invtriangle, color=brown];
stat493[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.193.190.41:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 3599: (0.934579%)&lt;BR/&gt; 3598: (0.934579%)&lt;BR/&gt; 3597: (0.934579%)&lt;BR/&gt; 3596: (0.934579%)&gt;];
}
2537--3797[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="29.193.190.41"/>
    </slice>
    <from sec="1063083602" usec="0"/>
    <to sec="1063083838" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_494{
style=filled;
color=gray75;
2539[label="84.174.200.41;107pkt 107fpkt", shape=pentagon, color=darkviolet];
3798[label="84.174.200.41;107pkt 107fpkt", shape=invtriangle, color=brown];
4489[label="84.174.200.41;108pkt 108fpkt", shape=invhouse, color=bisque];
stat494[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.174.200.41:0, *:0}[98.1481%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.1366%)&lt;BR/&gt; 135: (0.931677%)&lt;BR/&gt; 20542: (0.465839%)&lt;BR/&gt; 19510: (0.465839%)&gt;];
}
2539--3798[label="1;107pkt 107fpkt"];
2539--4489[label="1;107pkt 107fpkt"];
3798--4489[label="1;107pkt 107fpkt"];
</description>
    <slice>
      <filter src_ip="84.174.200.41"/>
    </slice>
    <from sec="1063083792" usec="0"/>
    <to sec="1063084498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_495{
style=filled;
color=gray75;
2540[label="218.141.35.42;113pkt 113fpkt", shape=pentagon, color=darkviolet];
3799[label="218.141.35.42;114pkt 114fpkt", shape=invtriangle, color=brown];
4490[label="218.141.35.42;114pkt 114fpkt", shape=invhouse, color=bisque];
stat495[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.141.35.42:0, *:0}[95.614%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.6012%)&lt;BR/&gt; 80: (2.19941%)&lt;BR/&gt; 61698: (0.439883%)&lt;BR/&gt; 40921: (0.439883%)&lt;BR/&gt; 30688: (0.439883%)&gt;];
}
2540--3799[label="1;113pkt 113fpkt"];
2540--4490[label="1;113pkt 113fpkt"];
3799--4490[label="1;114pkt 114fpkt"];
</description>
    <slice>
      <filter src_ip="218.141.35.42"/>
    </slice>
    <from sec="1063083613" usec="0"/>
    <to sec="1063084498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_496{
style=filled;
color=gray75;
2544[label="212.185.183.42;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3801[label="212.185.183.42;5pkt 5fpkt", shape=invtriangle, color=brown];
4491[label="212.185.183.42;4pkt 4fpkt", shape=invhouse, color=bisque];
stat496[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.185.183.42:1863, 133.150.85.7:1039}[20%]&lt;BR/&gt;{212.185.183.42:1863, 174.22.147.21:2126}[20%]&lt;BR/&gt;{212.185.183.42:1863, 153.0.200.78:2824}[20%]&lt;BR/&gt;{212.185.183.42:1863, 131.53.91.163:3538}[20%]&lt;BR/&gt;{212.185.183.42:1863, 131.53.86.237:1060}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 2824: (11.5385%)&lt;BR/&gt; 2126: (11.5385%)&lt;BR/&gt; 1060: (11.5385%)&lt;BR/&gt; 1039: (11.5385%)&gt;];
}
2544--3801[label="1;4pkt 4fpkt"];
2544--4491[label="1;4pkt 4fpkt"];
3801--4491[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="131.53.86.237" dst_port="1060" src_ip="212.185.183.42" src_port="1863"/>
      <filter dst_ip="131.53.91.163" dst_port="3538" src_ip="212.185.183.42" src_port="1863"/>
      <filter dst_ip="153.0.200.78" dst_port="2824" src_ip="212.185.183.42" src_port="1863"/>
      <filter dst_ip="174.22.147.21" dst_port="2126" src_ip="212.185.183.42" src_port="1863"/>
      <filter dst_ip="133.150.85.7" dst_port="1039" src_ip="212.185.183.42" src_port="1863"/>
    </slice>
    <from sec="1063083605" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_497{
style=filled;
color=gray75;
2547[label="87.36.32.43;164pkt 164fpkt", shape=pentagon, color=darkviolet];
3804[label="87.36.32.43;164pkt 164fpkt", shape=invtriangle, color=brown];
4492[label="87.36.32.43;164pkt 164fpkt", shape=invhouse, color=bisque];
stat497[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.36.32.43:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2547--3804[label="1;164pkt 164fpkt"];
2547--4492[label="1;164pkt 164fpkt"];
3804--4492[label="1;164pkt 164fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="87.36.32.43" src_port="1031"/>
    </slice>
    <from sec="1063083934" usec="0"/>
    <to sec="1063083960" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_498{
style=filled;
color=gray75;
2549[label="205.150.150.43;227pkt 227fpkt", shape=pentagon, color=darkviolet];
3805[label="205.150.150.43;227pkt 227fpkt", shape=invtriangle, color=brown];
stat498[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.150.150.43:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 35263: (0.220264%)&lt;BR/&gt; 35261: (0.220264%)&lt;BR/&gt; 35249: (0.220264%)&lt;BR/&gt; 35242: (0.220264%)&gt;];
}
2549--3805[label="1;227pkt 227fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="205.150.150.43"/>
    </slice>
    <from sec="1063083709" usec="0"/>
    <to sec="1063083744" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.8.41.44"/>
    </slice>
    <from sec="1063084471" usec="0"/>
    <to sec="1063084482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="81.66.154.44"/>
    </slice>
    <from sec="1063083868" usec="0"/>
    <to sec="1063083881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_501{
style=filled;
color=gray75;
2557[label="210.14.163.45;117pkt 117fpkt", shape=pentagon, color=darkviolet];
3810[label="210.14.163.45;117pkt 117fpkt", shape=invtriangle, color=brown];
4493[label="210.14.163.45;117pkt 117fpkt", shape=invhouse, color=bisque];
stat501[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.14.163.45:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2557--3810[label="1;117pkt 117fpkt"];
2557--4493[label="1;117pkt 117fpkt"];
3810--4493[label="1;117pkt 117fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="210.14.163.45" src_port="1027"/>
    </slice>
    <from sec="1063083638" usec="0"/>
    <to sec="1063083665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_502{
style=filled;
color=gray75;
2558[label="150.49.163.45;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3811[label="150.49.163.45;10pkt 10fpkt", shape=invtriangle, color=brown];
4494[label="150.49.163.45;9pkt 9fpkt", shape=invhouse, color=bisque];
stat502[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.49.163.45:80, 133.150.149.33:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1065: (5.35714%)&lt;BR/&gt; 1064: (5.35714%)&lt;BR/&gt; 1063: (5.35714%)&lt;BR/&gt; 1062: (5.35714%)&gt;];
}
2558--3811[label="1;9pkt 9fpkt"];
2558--4494[label="1;9pkt 9fpkt"];
3811--4494[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="133.150.149.33" src_ip="150.49.163.45" src_port="80"/>
    </slice>
    <from sec="1063083851" usec="0"/>
    <to sec="1063083944" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_504{
style=filled;
color=gray75;
2565[label="86.180.29.48;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3814[label="86.180.29.48;2pkt 2fpkt", shape=invtriangle, color=brown];
stat504[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.180.29.48:20, 168.160.60.201:3631}[33.3333%]&lt;BR/&gt;{86.180.29.48:5050, 168.160.42.220:1227}[33.3333%]&lt;BR/&gt;{86.180.29.48:5050, 168.160.60.234:32774}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (30%)&lt;BR/&gt; 32774: (20%)&lt;BR/&gt; 3631: (20%)&lt;BR/&gt; 20: (20%)&lt;BR/&gt; 1227: (10%)&gt;];
}
2565--3814[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="168.160.60.234" dst_port="32774" src_ip="86.180.29.48" src_port="5050"/>
      <filter dst_ip="168.160.42.220" dst_port="1227" src_ip="86.180.29.48" src_port="5050"/>
      <filter dst_ip="168.160.60.201" dst_port="3631" src_ip="86.180.29.48" src_port="20"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_505{
style=filled;
color=gray75;
2580[label="197.94.148.51;129pkt 129fpkt", shape=pentagon, color=darkviolet];
3823[label="197.94.148.51;129pkt 129fpkt", shape=invtriangle, color=brown];
4499[label="197.94.148.51;128pkt 128fpkt", shape=invhouse, color=bisque];
stat505[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.94.148.51:14622, *:137}[44.9612%]&lt;BR/&gt;{197.94.148.51:14624, *:137}[37.9845%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 14622: (22.5389%)&lt;BR/&gt; 14624: (18.9119%)&lt;BR/&gt; 14394: (4.66321%)&lt;BR/&gt; 14625: (3.88601%)&gt;];
}
2580--3823[label="1;129pkt 129fpkt"];
2580--4499[label="1;128pkt 128fpkt"];
3823--4499[label="1;128pkt 128fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.94.148.51" src_port="14622"/>
      <filter dst_port="137" src_ip="197.94.148.51" src_port="14624"/>
    </slice>
    <from sec="1063083734" usec="0"/>
    <to sec="1063083755" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_506{
style=filled;
color=gray75;
2581[label="85.21.236.51;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3824[label="85.21.236.51;1pkt 1fpkt", shape=invtriangle, color=brown];
stat506[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.21.236.51:25, 174.22.17.74:54016}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54016: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
2581--3824[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="174.22.17.74" dst_port="54016" src_ip="85.21.236.51" src_port="25"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="153.0.97.54"/>
    </slice>
    <from sec="1063083693" usec="0"/>
    <to sec="1063084497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="64.27.195.54"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_510{
style=filled;
color=gray75;
2608[label="207.102.5.56;146pkt 146fpkt", shape=pentagon, color=darkviolet];
3837[label="207.102.5.56;147pkt 147fpkt", shape=invtriangle, color=brown];
4504[label="207.102.5.56;147pkt 147fpkt", shape=invhouse, color=bisque];
stat510[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.102.5.56:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2608--3837[label="1;146pkt 146fpkt"];
2608--4504[label="1;146pkt 146fpkt"];
3837--4504[label="1;147pkt 147fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="207.102.5.56" src_port="1029"/>
    </slice>
    <from sec="1063084033" usec="0"/>
    <to sec="1063084060" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_511{
style=filled;
color=gray75;
2609[label="146.50.15.56;110pkt 110fpkt", shape=pentagon, color=darkviolet];
3838[label="146.50.15.56;111pkt 111fpkt", shape=invtriangle, color=brown];
4505[label="146.50.15.56;110pkt 110fpkt", shape=invhouse, color=bisque];
stat511[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.50.15.56:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 65015: (0.453172%)&lt;BR/&gt; 63491: (0.453172%)&lt;BR/&gt; 62551: (0.453172%)&lt;BR/&gt; 62352: (0.453172%)&gt;];
}
2609--3838[label="1;110pkt 110fpkt"];
2609--4505[label="1;110pkt 110fpkt"];
3838--4505[label="1;110pkt 110fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="146.50.15.56"/>
    </slice>
    <from sec="1063083742" usec="0"/>
    <to sec="1063083759" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708731,1.31862,504,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_512{
style=filled;
color=gray75;
825[label="131.41.243.26;d;52pkt 52fpkt", shape=diamond, color=yellow];
1251[label="221.42.193.79;s;29pkt 29fpkt", shape=diamond, color=yellow];
2614[label="212.185.183.56;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2742[label="221.42.193.79;40pkt 40fpkt", shape=pentagon, color=darkviolet];
3841[label="212.185.183.56;4pkt 4fpkt", shape=invtriangle, color=brown];
stat512[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.42.193.79:443, 131.41.243.26:*}[60.6061%]&lt;BR/&gt;{221.42.193.181:80, 131.41.243.26:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (38.2812%)&lt;BR/&gt; 80: (8.59375%)&lt;BR/&gt; 1863: (3.125%)&lt;BR/&gt; 4215: (1.17188%)&lt;BR/&gt; 4214: (1.17188%)&gt;];
}
825--1251[label="1;29pkt 29fpkt"];
825--2614[label="0.333333;1pkt 1fpkt"];
825--2742[label="0.725;29pkt 29fpkt"];
825--3841[label="0.25;1pkt 1fpkt"];
1251--2742[label="1;29pkt 29fpkt"];
2614--3841[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="131.41.243.26" src_ip="221.42.193.79" src_port="443"/>
      <filter dst_ip="131.41.243.26" src_ip="221.42.193.181" src_port="80"/>
    </slice>
    <from sec="1063083615" usec="0"/>
    <to sec="1063084480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_513{
style=filled;
color=gray75;
2626[label="205.249.86.59;156pkt 156fpkt", shape=pentagon, color=darkviolet];
3848[label="205.249.86.59;156pkt 156fpkt", shape=invtriangle, color=brown];
4512[label="205.249.86.59;156pkt 156fpkt", shape=invhouse, color=bisque];
stat513[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.249.86.59:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2626--3848[label="1;156pkt 156fpkt"];
2626--4512[label="1;156pkt 156fpkt"];
3848--4512[label="1;156pkt 156fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="205.249.86.59" src_port="1031"/>
    </slice>
    <from sec="1063083732" usec="0"/>
    <to sec="1063083763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.4.40.61"/>
    </slice>
    <from sec="1063083601" usec="0"/>
    <to sec="1063083813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_515{
style=filled;
color=gray75;
2641[label="206.29.140.61;239pkt 239fpkt", shape=pentagon, color=darkviolet];
3853[label="206.29.140.61;239pkt 239fpkt", shape=invtriangle, color=brown];
4516[label="206.29.140.61;239pkt 239fpkt", shape=invhouse, color=bisque];
stat515[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.29.140.61:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2641--3853[label="1;239pkt 239fpkt"];
2641--4516[label="1;239pkt 239fpkt"];
3853--4516[label="1;239pkt 239fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="206.29.140.61" src_port="1028"/>
    </slice>
    <from sec="1063084434" usec="0"/>
    <to sec="1063084448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.192.193.61"/>
    </slice>
    <from sec="1063083747" usec="0"/>
    <to sec="1063083756" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_517{
style=filled;
color=gray75;
2644[label="210.14.247.61;127pkt 127fpkt", shape=pentagon, color=darkviolet];
3856[label="210.14.247.61;128pkt 128fpkt", shape=invtriangle, color=brown];
4519[label="210.14.247.61;128pkt 128fpkt", shape=invhouse, color=bisque];
stat517[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.14.247.61:1117, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1117: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2644--3856[label="1;127pkt 127fpkt"];
2644--4519[label="1;127pkt 127fpkt"];
3856--4519[label="1;128pkt 128fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="210.14.247.61" src_port="1117"/>
    </slice>
    <from sec="1063084229" usec="0"/>
    <to sec="1063084251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_518{
style=filled;
color=gray75;
2651[label="86.180.31.64;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3859[label="86.180.31.64;2pkt 2fpkt", shape=invtriangle, color=brown];
stat518[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.180.31.64:80, 208.173.2.76:3411}[50%]&lt;BR/&gt;{86.180.31.64:80, 168.160.36.104:3261}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3411: (25%)&lt;BR/&gt; 3261: (25%)&gt;];
}
2651--3859[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="168.160.36.104" dst_port="3261" src_ip="86.180.31.64" src_port="80"/>
      <filter dst_ip="208.173.2.76" dst_port="3411" src_ip="86.180.31.64" src_port="80"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_519{
style=filled;
color=gray75;
2654[label="81.124.82.64;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3861[label="81.124.82.64;4pkt 4fpkt", shape=invtriangle, color=brown];
4522[label="81.124.82.64;4pkt 4fpkt", shape=invhouse, color=bisque];
stat519[shape=component, label=&lt;Rules:&lt;BR/&gt;{81.124.82.64:80, 208.162.201.161:1679}[25%]&lt;BR/&gt;{81.124.82.64:80, 208.162.201.161:1680}[25%]&lt;BR/&gt;{81.124.82.64:80, 208.162.201.161:1681}[25%]&lt;BR/&gt;{81.124.82.64:80, 208.162.201.161:1682}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1682: (13.6364%)&lt;BR/&gt; 1681: (13.6364%)&lt;BR/&gt; 1680: (13.6364%)&lt;BR/&gt; 1679: (9.09091%)&gt;];
}
2654--3861[label="1;3pkt 3fpkt"];
2654--4522[label="1;3pkt 3fpkt"];
3861--4522[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="208.162.201.161" dst_port="1682" src_ip="81.124.82.64" src_port="80"/>
      <filter dst_ip="208.162.201.161" dst_port="1681" src_ip="81.124.82.64" src_port="80"/>
      <filter dst_ip="208.162.201.161" dst_port="1680" src_ip="81.124.82.64" src_port="80"/>
      <filter dst_ip="208.162.201.161" dst_port="1679" src_ip="81.124.82.64" src_port="80"/>
    </slice>
    <from sec="1063083902" usec="0"/>
    <to sec="1063083914" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_520{
style=filled;
color=gray75;
2659[label="80.93.234.64;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3863[label="80.93.234.64;1pkt 1fpkt", shape=invtriangle, color=brown];
4524[label="80.93.234.64;1pkt 1fpkt", shape=invhouse, color=bisque];
stat520[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.93.234.64:7144, 209.150.109.43:2495}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7144: (50%)&lt;BR/&gt; 2495: (50%)&gt;];
}
2659--3863[label="1;1pkt 1fpkt"];
2659--4524[label="1;1pkt 1fpkt"];
3863--4524[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.150.109.43" dst_port="2495" src_ip="80.93.234.64" src_port="7144"/>
    </slice>
    <from sec="1063084126" usec="0"/>
    <to sec="1063084451" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.100.75.67"/>
    </slice>
    <from sec="1063084150" usec="0"/>
    <to sec="1063084168" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_522{
style=filled;
color=gray75;
2679[label="85.181.195.68;191pkt 191fpkt", shape=pentagon, color=darkviolet];
3876[label="85.181.195.68;191pkt 191fpkt", shape=invtriangle, color=brown];
stat522[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.181.195.68:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2679--3876[label="1;191pkt 191fpkt"];
</description>
    <slice>
      <filter src_ip="85.181.195.68"/>
    </slice>
    <from sec="1063083612" usec="0"/>
    <to sec="1063084493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_523{
style=filled;
color=gray75;
2680[label="153.0.198.68;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3877[label="153.0.198.68;4pkt 4fpkt", shape=invtriangle, color=brown];
stat523[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.0.198.68:2294, 212.185.178.139:1863}[25%]&lt;BR/&gt;{153.0.198.68:2313, 212.185.178.199:1863}[25%]&lt;BR/&gt;{153.0.198.68:2298, 209.235.220.131:110}[25%]&lt;BR/&gt;{153.0.198.68:2308, 209.235.220.131:110}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (25%)&lt;BR/&gt; 110: (25%)&lt;BR/&gt; 2313: (12.5%)&lt;BR/&gt; 2308: (12.5%)&lt;BR/&gt; 2298: (12.5%)&gt;];
}
2680--3877[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="209.235.220.131" dst_port="110" src_ip="153.0.198.68" src_port="2308"/>
      <filter dst_ip="209.235.220.131" dst_port="110" src_ip="153.0.198.68" src_port="2298"/>
      <filter dst_ip="212.185.178.199" dst_port="1863" src_ip="153.0.198.68" src_port="2313"/>
      <filter dst_ip="212.185.178.139" dst_port="1863" src_ip="153.0.198.68" src_port="2294"/>
    </slice>
    <from sec="1063083652" usec="0"/>
    <to sec="1063084341" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.868607,1.33356,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_524{
style=filled;
color=gray75;
694[label="168.160.5.12;d;108pkt 108fpkt", shape=diamond, color=yellow];
2440[label="216.130.67.28;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2688[label="197.228.151.69;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3150[label="218.138.140.156;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3748[label="216.130.67.28;1pkt 1fpkt", shape=invtriangle, color=brown];
3881[label="197.228.151.69;1pkt 1fpkt", shape=invtriangle, color=brown];
4151[label="218.138.140.156;3pkt 3fpkt", shape=invtriangle, color=brown];
4462[label="216.130.67.28;1pkt 1fpkt", shape=invhouse, color=bisque];
4531[label="197.228.151.69;1pkt 1fpkt", shape=invhouse, color=bisque];
4658[label="218.138.140.156;3pkt 3fpkt", shape=invhouse, color=bisque];
stat524[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, 168.160.5.12:*}[94.4954%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (47.561%)&lt;BR/&gt; 4671: (1.62602%)&lt;BR/&gt; 4644: (1.62602%)&lt;BR/&gt; 4589: (1.62602%)&lt;BR/&gt; 4394: (1.62602%)&gt;];
}
694--861[label="0.0526316;3pkt 3fpkt"];
694--1180[label="0.00925926;1pkt 1fpkt"];
694--1182[label="0.00925926;1pkt 1fpkt"];
694--1651[label="0.00925926;1pkt 1fpkt"];
694--1710[label="0.0526316;3pkt 3fpkt"];
694--1945[label="0.00925926;1pkt 1fpkt"];
694--1946[label="0.00925926;1pkt 1fpkt"];
694--2154[label="0.00925926;1pkt 1fpkt"];
694--2155[label="0.00925926;1pkt 1fpkt"];
694--2390[label="0.0483871;3pkt 3fpkt"];
694--2440[label="1;1pkt 1fpkt"];
694--2688[label="1;1pkt 1fpkt"];
694--3150[label="0.666667;2pkt 2fpkt"];
694--3158[label="0.5;1pkt 1fpkt"];
694--3587[label="0.00925926;1pkt 1fpkt"];
694--3723[label="0.047619;3pkt 3fpkt"];
694--3748[label="1;1pkt 1fpkt"];
694--3881[label="1;1pkt 1fpkt"];
694--4151[label="0.666667;2pkt 2fpkt"];
694--4447[label="0.0483871;3pkt 3fpkt"];
694--4462[label="1;1pkt 1fpkt"];
694--4531[label="1;1pkt 1fpkt"];
694--4658[label="0.666667;2pkt 2fpkt"];
2440--3748[label="1;1pkt 1fpkt"];
2440--4462[label="1;1pkt 1fpkt"];
2688--3881[label="1;1pkt 1fpkt"];
2688--4531[label="1;1pkt 1fpkt"];
3150--4151[label="1;3pkt 3fpkt"];
3150--4658[label="1;3pkt 3fpkt"];
3748--4462[label="1;1pkt 1fpkt"];
3881--4531[label="1;1pkt 1fpkt"];
4151--4658[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="168.160.5.12" src_port="25"/>
    </slice>
    <from sec="1063083607" usec="0"/>
    <to sec="1063084497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_525{
style=filled;
color=gray75;
2691[label="194.101.209.69;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3882[label="194.101.209.69;10pkt 10fpkt", shape=invtriangle, color=brown];
stat525[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.101.209.69:443, 174.22.130.43:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1352: (5%)&lt;BR/&gt; 1351: (5%)&lt;BR/&gt; 1350: (5%)&lt;BR/&gt; 1348: (5%)&gt;];
}
2691--3882[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="174.22.130.43" src_ip="194.101.209.69" src_port="443"/>
    </slice>
    <from sec="1063084459" usec="0"/>
    <to sec="1063084499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_526{
style=filled;
color=gray75;
2694[label="31.85.116.70;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3883[label="31.85.116.70;3pkt 3fpkt", shape=invtriangle, color=brown];
4532[label="31.85.116.70;3pkt 3fpkt", shape=invhouse, color=bisque];
stat526[shape=component, label=&lt;Rules:&lt;BR/&gt;{31.85.116.70:80, 174.22.133.53:3850}[33.3333%]&lt;BR/&gt;{31.85.116.70:80, 174.22.152.26:49579}[33.3333%]&lt;BR/&gt;{31.85.116.70:80, 174.22.152.26:49587}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49587: (16.6667%)&lt;BR/&gt; 49579: (16.6667%)&lt;BR/&gt; 3850: (16.6667%)&gt;];
}
2694--3883[label="1;3pkt 3fpkt"];
2694--4532[label="1;3pkt 3fpkt"];
3883--4532[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="174.22.152.26" dst_port="49587" src_ip="31.85.116.70" src_port="80"/>
      <filter dst_ip="174.22.152.26" dst_port="49579" src_ip="31.85.116.70" src_port="80"/>
      <filter dst_ip="174.22.133.53" dst_port="3850" src_ip="31.85.116.70" src_port="80"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.123.76.71"/>
    </slice>
    <from sec="1063083601" usec="0"/>
    <to sec="1063084460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_528{
style=filled;
color=gray75;
2706[label="30.58.114.72;145pkt 145fpkt", shape=pentagon, color=darkviolet];
3891[label="30.58.114.72;145pkt 145fpkt", shape=invtriangle, color=brown];
4536[label="30.58.114.72;145pkt 145fpkt", shape=invhouse, color=bisque];
stat528[shape=component, label=&lt;Rules:&lt;BR/&gt;{30.58.114.72:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2706--3891[label="1;145pkt 145fpkt"];
2706--4536[label="1;145pkt 145fpkt"];
3891--4536[label="1;145pkt 145fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="30.58.114.72" src_port="1026"/>
    </slice>
    <from sec="1063083607" usec="0"/>
    <to sec="1063083631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_529{
style=filled;
color=gray75;
2708[label="168.162.147.72;184pkt 184fpkt", shape=pentagon, color=darkviolet];
3892[label="168.162.147.72;185pkt 185fpkt", shape=invtriangle, color=brown];
stat529[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.162.147.72:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2708--3892[label="1;184pkt 184fpkt"];
</description>
    <slice>
      <filter src_ip="168.162.147.72"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_531{
style=filled;
color=gray75;
2710[label="209.192.209.72;34pkt 34fpkt", shape=pentagon, color=darkviolet];
3894[label="209.192.209.72;34pkt 34fpkt", shape=invtriangle, color=brown];
4538[label="209.192.209.72;34pkt 34fpkt", shape=invhouse, color=bisque];
stat531[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.192.209.72:80, 131.41.130.82:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4814: (1.47059%)&lt;BR/&gt; 4812: (1.47059%)&lt;BR/&gt; 4810: (1.47059%)&lt;BR/&gt; 4808: (1.47059%)&gt;];
}
2710--3894[label="1;34pkt 34fpkt"];
2710--4538[label="1;34pkt 34fpkt"];
3894--4538[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="131.41.130.82" src_ip="209.192.209.72" src_port="80"/>
    </slice>
    <from sec="1063083642" usec="0"/>
    <to sec="1063083813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_532{
style=filled;
color=gray75;
2711[label="205.57.3.73;178pkt 178fpkt", shape=pentagon, color=darkviolet];
3895[label="205.57.3.73;177pkt 177fpkt", shape=invtriangle, color=brown];
stat532[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.57.3.73:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2711--3895[label="1;177pkt 177fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="205.57.3.73" src_port="1025"/>
    </slice>
    <from sec="1063084228" usec="0"/>
    <to sec="1063084257" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.27.76.74"/>
    </slice>
    <from sec="1063084160" usec="0"/>
    <to sec="1063084255" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.242.65.75"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_536{
style=filled;
color=gray75;
2729[label="206.150.139.75;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3907[label="206.150.139.75;2pkt 2fpkt", shape=invtriangle, color=brown];
4542[label="206.150.139.75;1pkt 1fpkt", shape=invhouse, color=bisque];
stat536[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.150.139.75:80, 133.150.195.110:1203}[50%]&lt;BR/&gt;{206.150.139.75:80, 133.150.195.110:1204}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1204: (30%)&lt;BR/&gt; 1203: (20%)&gt;];
}
2729--3907[label="1;2pkt 2fpkt"];
2729--4542[label="1;1pkt 1fpkt"];
3907--4542[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.150.195.110" dst_port="1204" src_ip="206.150.139.75" src_port="80"/>
      <filter dst_ip="133.150.195.110" dst_port="1203" src_ip="206.150.139.75" src_port="80"/>
    </slice>
    <from sec="1063083847" usec="0"/>
    <to sec="1063083895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_537{
style=filled;
color=gray75;
2746[label="193.179.66.80;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3913[label="193.179.66.80;1pkt 1fpkt", shape=invtriangle, color=brown];
stat537[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.179.66.80:554, 131.41.53.67:1757}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1757: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
2746--3913[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.41.53.67" dst_port="1757" src_ip="193.179.66.80" src_port="554"/>
    </slice>
    <from sec="1063083608" usec="0"/>
    <to sec="1063083753" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_539{
style=filled;
color=gray75;
2751[label="195.176.33.81;101pkt 101fpkt", shape=pentagon, color=darkviolet];
3916[label="195.176.33.81;101pkt 101fpkt", shape=invtriangle, color=brown];
stat539[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.176.33.81:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 33620: (0.49505%)&lt;BR/&gt; 33617: (0.49505%)&lt;BR/&gt; 33614: (0.49505%)&lt;BR/&gt; 33611: (0.49505%)&gt;];
}
2751--3916[label="1;101pkt 101fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="195.176.33.81"/>
    </slice>
    <from sec="1063083730" usec="0"/>
    <to sec="1063083751" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_540{
style=filled;
color=gray75;
2753[label="205.239.51.81;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3918[label="205.239.51.81;1pkt 1fpkt", shape=invtriangle, color=brown];
stat540[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.239.51.81:0, 209.161.1.246:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2753--3918[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.161.1.246" src_ip="205.239.51.81"/>
    </slice>
    <from sec="1063084412" usec="0"/>
    <to sec="1063084492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_541{
style=filled;
color=gray75;
2756[label="84.212.62.81;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3921[label="84.212.62.81;1pkt 1fpkt", shape=invtriangle, color=brown];
stat541[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.212.62.81:80, 133.150.117.113:63258}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63258: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2756--3921[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.150.117.113" dst_port="63258" src_ip="84.212.62.81" src_port="80"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_544{
style=filled;
color=gray75;
2767[label="29.193.253.82;173pkt 173fpkt", shape=pentagon, color=darkviolet];
3929[label="29.193.253.82;173pkt 173fpkt", shape=invtriangle, color=brown];
4551[label="29.193.253.82;173pkt 173fpkt", shape=invhouse, color=bisque];
stat544[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.193.253.82:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2767--3929[label="1;173pkt 173fpkt"];
2767--4551[label="1;173pkt 173fpkt"];
3929--4551[label="1;173pkt 173fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="29.193.253.82" src_port="1027"/>
    </slice>
    <from sec="1063083735" usec="0"/>
    <to sec="1063083762" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_545{
style=filled;
color=gray75;
2769[label="31.92.27.83;101pkt 101fpkt", shape=pentagon, color=darkviolet];
3931[label="31.92.27.83;101pkt 101fpkt", shape=invtriangle, color=brown];
stat545[shape=component, label=&lt;Rules:&lt;BR/&gt;{31.92.27.83:0, *:0}[94.0594%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.0594%)&lt;BR/&gt; 80: (2.47525%)&lt;BR/&gt; 44603: (0.49505%)&lt;BR/&gt; 38015: (0.49505%)&lt;BR/&gt; 36073: (0.49505%)&gt;];
}
2769--3931[label="1;101pkt 101fpkt"];
</description>
    <slice>
      <filter src_ip="31.92.27.83"/>
    </slice>
    <from sec="1063083651" usec="0"/>
    <to sec="1063084499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_546{
style=filled;
color=gray75;
2771[label="85.91.92.83;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3933[label="85.91.92.83;2pkt 2fpkt", shape=invtriangle, color=brown];
4554[label="85.91.92.83;2pkt 2fpkt", shape=invhouse, color=bisque];
stat546[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.91.92.83:25, 133.150.161.64:51664}[50%]&lt;BR/&gt;{85.91.92.83:25, 133.150.61.116:35747}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 51664: (25%)&lt;BR/&gt; 35747: (25%)&gt;];
}
2771--3933[label="1;2pkt 2fpkt"];
2771--4554[label="1;2pkt 2fpkt"];
3933--4554[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="133.150.61.116" dst_port="35747" src_ip="85.91.92.83" src_port="25"/>
      <filter dst_ip="133.150.161.64" dst_port="51664" src_ip="85.91.92.83" src_port="25"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_547{
style=filled;
color=gray75;
2777[label="212.185.176.84;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3938[label="212.185.176.84;1pkt 1fpkt", shape=invtriangle, color=brown];
4557[label="212.185.176.84;1pkt 1fpkt", shape=invhouse, color=bisque];
stat547[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.185.176.84:80, 208.173.2.40:30651}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 30651: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2777--3938[label="1;1pkt 1fpkt"];
2777--4557[label="1;1pkt 1fpkt"];
3938--4557[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.173.2.40" dst_port="30651" src_ip="212.185.176.84" src_port="80"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_548{
style=filled;
color=gray75;
2781[label="204.105.142.85;252pkt 252fpkt", shape=pentagon, color=darkviolet];
3939[label="204.105.142.85;252pkt 252fpkt", shape=invtriangle, color=brown];
stat548[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.105.142.85:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 35262: (0.198413%)&lt;BR/&gt; 35259: (0.198413%)&lt;BR/&gt; 35256: (0.198413%)&lt;BR/&gt; 35247: (0.198413%)&gt;];
}
2781--3939[label="1;252pkt 252fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="204.105.142.85"/>
    </slice>
    <from sec="1063084193" usec="0"/>
    <to sec="1063084207" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_549{
style=filled;
color=gray75;
2791[label="65.47.232.87;123pkt 123fpkt", shape=pentagon, color=darkviolet];
3942[label="65.47.232.87;123pkt 123fpkt", shape=invtriangle, color=brown];
4558[label="65.47.232.87;122pkt 122fpkt", shape=invhouse, color=bisque];
stat549[shape=component, label=&lt;Rules:&lt;BR/&gt;{65.47.232.87:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2791--3942[label="1;123pkt 123fpkt"];
2791--4558[label="1;122pkt 122fpkt"];
3942--4558[label="1;122pkt 122fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="65.47.232.87" src_port="1030"/>
    </slice>
    <from sec="1063083601" usec="0"/>
    <to sec="1063083621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.26.43.91"/>
    </slice>
    <from sec="1063083608" usec="0"/>
    <to sec="1063084489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_552{
style=filled;
color=gray75;
2808[label="218.225.39.92;227pkt 227fpkt", shape=pentagon, color=darkviolet];
3950[label="218.225.39.92;226pkt 226fpkt", shape=invtriangle, color=brown];
stat552[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.225.39.92:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2808--3950[label="1;226pkt 226fpkt"];
</description>
    <slice>
      <filter src_ip="218.225.39.92"/>
    </slice>
    <from sec="1063083607" usec="0"/>
    <to sec="1063084486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_553{
style=filled;
color=gray75;
2810[label="31.69.137.92;118pkt 118fpkt", shape=pentagon, color=darkviolet];
3951[label="31.69.137.92;117pkt 117fpkt", shape=invtriangle, color=brown];
4562[label="31.69.137.92;118pkt 118fpkt", shape=invhouse, color=bisque];
stat553[shape=component, label=&lt;Rules:&lt;BR/&gt;{31.69.137.92:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2810--3951[label="1;117pkt 117fpkt"];
2810--4562[label="1;118pkt 118fpkt"];
3951--4562[label="1;117pkt 117fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="31.69.137.92" src_port="1026"/>
    </slice>
    <from sec="1063084244" usec="0"/>
    <to sec="1063084264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.138.250.92"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_555{
style=filled;
color=gray75;
2813[label="206.128.7.93;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3953[label="206.128.7.93;1pkt 1fpkt", shape=invtriangle, color=brown];
stat555[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.128.7.93:80, 208.173.0.145:15699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15699: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2813--3953[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.173.0.145" dst_port="15699" src_ip="206.128.7.93" src_port="80"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_557{
style=filled;
color=gray75;
2818[label="205.228.180.93;254pkt 254fpkt", shape=pentagon, color=darkviolet];
3956[label="205.228.180.93;253pkt 253fpkt", shape=invtriangle, color=brown];
stat557[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.228.180.93:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2818--3956[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="205.228.180.93" src_port="1027"/>
    </slice>
    <from sec="1063083987" usec="0"/>
    <to sec="1063084001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.132.187.93"/>
    </slice>
    <from sec="1063084044" usec="0"/>
    <to sec="1063084099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.137.77.94"/>
    </slice>
    <from sec="1063083602" usec="0"/>
    <to sec="1063084500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.66.114.94"/>
    </slice>
    <from sec="1063084234" usec="0"/>
    <to sec="1063084241" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_562{
style=filled;
color=gray75;
2839[label="212.185.182.98;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3970[label="212.185.182.98;1pkt 1fpkt", shape=invtriangle, color=brown];
4572[label="212.185.182.98;1pkt 1fpkt", shape=invhouse, color=bisque];
stat562[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.185.182.98:1863, 208.96.193.239:50324}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50324: (50%)&lt;BR/&gt; 1863: (50%)&gt;];
}
2839--3970[label="1;1pkt 1fpkt"];
2839--4572[label="1;1pkt 1fpkt"];
3970--4572[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.96.193.239" dst_port="50324" src_ip="212.185.182.98" src_port="1863"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_563{
style=filled;
color=gray75;
2845[label="64.15.185.99;138pkt 138fpkt", shape=pentagon, color=darkviolet];
3973[label="64.15.185.99;137pkt 137fpkt", shape=invtriangle, color=brown];
4574[label="64.15.185.99;137pkt 137fpkt", shape=invhouse, color=bisque];
stat563[shape=component, label=&lt;Rules:&lt;BR/&gt;{64.15.185.99:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 58184: (0.364078%)&lt;BR/&gt; 58183: (0.364078%)&lt;BR/&gt; 58182: (0.364078%)&lt;BR/&gt; 58181: (0.364078%)&gt;];
}
2845--3973[label="1;137pkt 137fpkt"];
2845--4574[label="1;137pkt 137fpkt"];
3973--4574[label="1;137pkt 137fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="64.15.185.99"/>
    </slice>
    <from sec="1063083937" usec="0"/>
    <to sec="1063083959" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_564{
style=filled;
color=gray75;
2848[label="87.42.67.100;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3975[label="87.42.67.100;1pkt 1fpkt", shape=invtriangle, color=brown];
4575[label="87.42.67.100;1pkt 1fpkt", shape=invhouse, color=bisque];
stat564[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.42.67.100:2904, 208.173.34.187:25}[50%]&lt;BR/&gt;{87.42.67.100:2902, 208.173.34.219:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2904: (37.5%)&lt;BR/&gt; 25: (37.5%)&lt;BR/&gt; 2902: (12.5%)&lt;BR/&gt; 53: (12.5%)&gt;];
}
2848--3975[label="1;1pkt 1fpkt"];
2848--4575[label="1;1pkt 1fpkt"];
3975--4575[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.173.34.219" dst_port="53" src_ip="87.42.67.100" src_port="2902"/>
      <filter dst_ip="208.173.34.187" dst_port="25" src_ip="87.42.67.100" src_port="2904"/>
    </slice>
    <from sec="1063084218" usec="0"/>
    <to sec="1063084328" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_565{
style=filled;
color=gray75;
2858[label="218.204.51.103;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3982[label="218.204.51.103;2pkt 2fpkt", shape=invtriangle, color=brown];
stat565[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.204.51.103:80, 209.161.5.4:32897}[50%]&lt;BR/&gt;{218.204.51.103:80, 209.161.5.4:32911}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 32911: (25%)&lt;BR/&gt; 32897: (25%)&gt;];
}
2858--3982[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="209.161.5.4" dst_port="32911" src_ip="218.204.51.103" src_port="80"/>
      <filter dst_ip="209.161.5.4" dst_port="32897" src_ip="218.204.51.103" src_port="80"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.130.41.105"/>
    </slice>
    <from sec="1063084110" usec="0"/>
    <to sec="1063084138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_567{
style=filled;
color=gray75;
2874[label="86.180.31.106;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3992[label="86.180.31.106;1pkt 1fpkt", shape=invtriangle, color=brown];
stat567[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.180.31.106:80, 208.173.2.40:30653}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 30653: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2874--3992[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.173.2.40" dst_port="30653" src_ip="86.180.31.106" src_port="80"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_568{
style=filled;
color=gray75;
2875[label="29.140.58.106;196pkt 196fpkt", shape=pentagon, color=darkviolet];
3993[label="29.140.58.106;196pkt 196fpkt", shape=invtriangle, color=brown];
stat568[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.140.58.106:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2875--3993[label="1;196pkt 196fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="29.140.58.106" src_port="1029"/>
    </slice>
    <from sec="1063084040" usec="0"/>
    <to sec="1063084076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_569{
style=filled;
color=gray75;
2878[label="29.194.250.106;160pkt 160fpkt", shape=pentagon, color=darkviolet];
3995[label="29.194.250.106;159pkt 159fpkt", shape=invtriangle, color=brown];
4582[label="29.194.250.106;159pkt 159fpkt", shape=invhouse, color=bisque];
stat569[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.194.250.106:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 16280: (0.313808%)&lt;BR/&gt; 16248: (0.313808%)&lt;BR/&gt; 16068: (0.313808%)&lt;BR/&gt; 16032: (0.313808%)&gt;];
}
2878--3995[label="1;159pkt 159fpkt"];
2878--4582[label="1;159pkt 159fpkt"];
3995--4582[label="1;159pkt 159fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="29.194.250.106"/>
    </slice>
    <from sec="1063083769" usec="0"/>
    <to sec="1063083794" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_570{
style=filled;
color=gray75;
2883[label="209.173.18.108;193pkt 193fpkt", shape=pentagon, color=darkviolet];
3998[label="209.173.18.108;192pkt 192fpkt", shape=invtriangle, color=brown];
4583[label="209.173.18.108;192pkt 192fpkt", shape=invhouse, color=bisque];
stat570[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.173.18.108:10247, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10247: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2883--3998[label="1;192pkt 192fpkt"];
2883--4583[label="1;192pkt 192fpkt"];
3998--4583[label="1;192pkt 192fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="209.173.18.108" src_port="10247"/>
    </slice>
    <from sec="1063084198" usec="0"/>
    <to sec="1063084230" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_571{
style=filled;
color=gray75;
2886[label="192.226.151.108;105pkt 105fpkt", shape=pentagon, color=darkviolet];
4001[label="192.226.151.108;104pkt 104fpkt", shape=invtriangle, color=brown];
4585[label="192.226.151.108;104pkt 104fpkt", shape=invhouse, color=bisque];
stat571[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.226.151.108:0, *:0}[93.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (93.2907%)&lt;BR/&gt; 80: (2.8754%)&lt;BR/&gt; 58522: (0.479233%)&lt;BR/&gt; 57196: (0.479233%)&lt;BR/&gt; 55639: (0.479233%)&gt;];
}
2886--4001[label="1;104pkt 104fpkt"];
2886--4585[label="1;104pkt 104fpkt"];
4001--4585[label="1;104pkt 104fpkt"];
</description>
    <slice>
      <filter src_ip="192.226.151.108"/>
    </slice>
    <from sec="1063083625" usec="0"/>
    <to sec="1063084460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.211.50.110"/>
    </slice>
    <from sec="1063083601" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_573{
style=filled;
color=gray75;
2893[label="197.18.74.110;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4007[label="197.18.74.110;4pkt 4fpkt", shape=invtriangle, color=brown];
4589[label="197.18.74.110;4pkt 4fpkt", shape=invhouse, color=bisque];
stat573[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.18.74.110:80, 208.173.0.145:15615}[25%]&lt;BR/&gt;{197.18.74.110:80, 208.173.0.145:15675}[25%]&lt;BR/&gt;{197.18.74.110:80, 208.173.0.145:15684}[25%]&lt;BR/&gt;{197.18.74.110:80, 208.173.0.145:15694}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 15694: (12.5%)&lt;BR/&gt; 15684: (12.5%)&lt;BR/&gt; 15675: (12.5%)&lt;BR/&gt; 15615: (12.5%)&gt;];
}
2893--4007[label="1;4pkt 4fpkt"];
2893--4589[label="1;4pkt 4fpkt"];
4007--4589[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="208.173.0.145" dst_port="15694" src_ip="197.18.74.110" src_port="80"/>
      <filter dst_ip="208.173.0.145" dst_port="15684" src_ip="197.18.74.110" src_port="80"/>
      <filter dst_ip="208.173.0.145" dst_port="15675" src_ip="197.18.74.110" src_port="80"/>
      <filter dst_ip="208.173.0.145" dst_port="15615" src_ip="197.18.74.110" src_port="80"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.194.98.110"/>
    </slice>
    <from sec="1063083601" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_575{
style=filled;
color=gray75;
2898[label="212.185.183.110;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4010[label="212.185.183.110;3pkt 3fpkt", shape=invtriangle, color=brown];
stat575[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.185.183.110:1863, 131.41.5.30:4346}[25%]&lt;BR/&gt;{212.185.183.110:1863, 133.150.62.85:20572}[25%]&lt;BR/&gt;{212.185.183.110:1863, 153.0.39.113:3017}[25%]&lt;BR/&gt;{212.185.183.110:1863, 131.41.206.167:1035}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4346: (14.2857%)&lt;BR/&gt; 3017: (14.2857%)&lt;BR/&gt; 1035: (14.2857%)&lt;BR/&gt; 20572: (7.14286%)&gt;];
}
2898--4010[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="131.41.206.167" dst_port="1035" src_ip="212.185.183.110" src_port="1863"/>
      <filter dst_ip="153.0.39.113" dst_port="3017" src_ip="212.185.183.110" src_port="1863"/>
      <filter dst_ip="133.150.62.85" dst_port="20572" src_ip="212.185.183.110" src_port="1863"/>
      <filter dst_ip="131.41.5.30" dst_port="4346" src_ip="212.185.183.110" src_port="1863"/>
    </slice>
    <from sec="1063083607" usec="0"/>
    <to sec="1063084490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_576{
style=filled;
color=gray75;
2905[label="80.28.73.111;153pkt 153fpkt", shape=pentagon, color=darkviolet];
4014[label="80.28.73.111;152pkt 152fpkt", shape=invtriangle, color=brown];
4591[label="80.28.73.111;152pkt 152fpkt", shape=invhouse, color=bisque];
stat576[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.28.73.111:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2905--4014[label="1;152pkt 152fpkt"];
2905--4591[label="1;152pkt 152fpkt"];
4014--4591[label="1;152pkt 152fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="80.28.73.111" src_port="1027"/>
    </slice>
    <from sec="1063083625" usec="0"/>
    <to sec="1063083649" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_579{
style=filled;
color=gray75;
2921[label="195.166.0.114;161pkt 161fpkt", shape=pentagon, color=darkviolet];
4023[label="195.166.0.114;160pkt 160fpkt", shape=invtriangle, color=brown];
stat579[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.166.0.114:13720, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13720: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2921--4023[label="1;160pkt 160fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="195.166.0.114" src_port="13720"/>
    </slice>
    <from sec="1063083694" usec="0"/>
    <to sec="1063083719" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.144.134.115"/>
    </slice>
    <from sec="1063083619" usec="0"/>
    <to sec="1063084450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_581{
style=filled;
color=gray75;
2936[label="153.0.49.117;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4035[label="153.0.49.117;2pkt 2fpkt", shape=invtriangle, color=brown];
stat581[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.0.49.117:2288, 212.213.101.28:80}[50%]&lt;BR/&gt;{153.0.49.117:2274, 85.21.211.214:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2288: (25%)&lt;BR/&gt; 2274: (25%)&gt;];
}
2936--4035[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="85.21.211.214" dst_port="80" src_ip="153.0.49.117" src_port="2274"/>
      <filter dst_ip="212.213.101.28" dst_port="80" src_ip="153.0.49.117" src_port="2288"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_582{
style=filled;
color=gray75;
2945[label="209.221.26.119;40pkt 40fpkt", shape=pentagon, color=darkviolet];
4039[label="209.221.26.119;39pkt 39fpkt", shape=invtriangle, color=brown];
stat582[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.221.26.119:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2693: (2.53165%)&lt;BR/&gt; 4904: (1.26582%)&lt;BR/&gt; 4861: (1.26582%)&lt;BR/&gt; 4798: (1.26582%)&gt;];
}
2945--4039[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="209.221.26.119"/>
    </slice>
    <from sec="1063083657" usec="0"/>
    <to sec="1063084481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_583{
style=filled;
color=gray75;
2946[label="86.180.31.119;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4040[label="86.180.31.119;4pkt 4fpkt", shape=invtriangle, color=brown];
stat583[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.180.31.119:80, 208.173.2.40:30642}[25%]&lt;BR/&gt;{86.180.31.119:80, 208.173.2.40:30646}[25%]&lt;BR/&gt;{86.180.31.119:80, 208.173.2.40:30648}[25%]&lt;BR/&gt;{86.180.31.119:80, 208.173.2.40:30655}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 30655: (12.5%)&lt;BR/&gt; 30648: (12.5%)&lt;BR/&gt; 30646: (12.5%)&lt;BR/&gt; 30642: (12.5%)&gt;];
}
2946--4040[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="208.173.2.40" dst_port="30655" src_ip="86.180.31.119" src_port="80"/>
      <filter dst_ip="208.173.2.40" dst_port="30648" src_ip="86.180.31.119" src_port="80"/>
      <filter dst_ip="208.173.2.40" dst_port="30646" src_ip="86.180.31.119" src_port="80"/>
      <filter dst_ip="208.173.2.40" dst_port="30642" src_ip="86.180.31.119" src_port="80"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.179.178.125"/>
    </slice>
    <from sec="1063083601" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="31.52.50.126"/>
    </slice>
    <from sec="1063084289" usec="0"/>
    <to sec="1063084462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="86.164.128.126"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_589{
style=filled;
color=gray75;
2974[label="192.38.51.127;253pkt 253fpkt", shape=pentagon, color=darkviolet];
4056[label="192.38.51.127;252pkt 252fpkt", shape=invtriangle, color=brown];
4611[label="192.38.51.127;253pkt 253fpkt", shape=invhouse, color=bisque];
stat589[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.38.51.127:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2974--4056[label="1;252pkt 252fpkt"];
2974--4611[label="1;253pkt 253fpkt"];
4056--4611[label="1;252pkt 252fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="192.38.51.127" src_port="1027"/>
    </slice>
    <from sec="1063083664" usec="0"/>
    <to sec="1063083679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_590{
style=filled;
color=gray75;
2986[label="217.129.165.129;100pkt 100fpkt", shape=pentagon, color=darkviolet];
4061[label="217.129.165.129;99pkt 99fpkt", shape=invtriangle, color=brown];
stat590[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.129.165.129:0, *:0}[95%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.9749%)&lt;BR/&gt; 80: (2.51256%)&lt;BR/&gt; 43131: (0.502513%)&lt;BR/&gt; 36688: (0.502513%)&lt;BR/&gt; 33648: (0.502513%)&gt;];
}
2986--4061[label="1;99pkt 99fpkt"];
</description>
    <slice>
      <filter src_ip="217.129.165.129"/>
    </slice>
    <from sec="1063083622" usec="0"/>
    <to sec="1063084496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_591{
style=filled;
color=gray75;
2996[label="208.123.226.130;169pkt 169fpkt", shape=pentagon, color=darkviolet];
4064[label="208.123.226.130;168pkt 168fpkt", shape=invtriangle, color=brown];
4616[label="208.123.226.130;169pkt 169fpkt", shape=invhouse, color=bisque];
stat591[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.123.226.130:1064, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1064: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2996--4064[label="1;168pkt 168fpkt"];
2996--4616[label="1;169pkt 169fpkt"];
4064--4616[label="1;168pkt 168fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.123.226.130" src_port="1064"/>
    </slice>
    <from sec="1063084445" usec="0"/>
    <to sec="1063084481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_592{
style=filled;
color=gray75;
3026[label="212.248.34.135;202pkt 202fpkt", shape=pentagon, color=darkviolet];
4079[label="212.248.34.135;202pkt 202fpkt", shape=invtriangle, color=brown];
stat592[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.248.34.135:0, *:0}[92.5743%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (92.5743%)&lt;BR/&gt; 135: (1.9802%)&lt;BR/&gt; 80: (1.73267%)&lt;BR/&gt; 63918: (0.247525%)&lt;BR/&gt; 62460: (0.247525%)&gt;];
}
3026--4079[label="1;202pkt 202fpkt"];
</description>
    <slice>
      <filter src_ip="212.248.34.135"/>
    </slice>
    <from sec="1063083610" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="80.111.106.135"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_594{
style=filled;
color=gray75;
3032[label="205.149.92.136;222pkt 222fpkt", shape=pentagon, color=darkviolet];
4083[label="205.149.92.136;221pkt 221fpkt", shape=invtriangle, color=brown];
stat594[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.149.92.136:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3032--4083[label="1;221pkt 221fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="205.149.92.136" src_port="1025"/>
    </slice>
    <from sec="1063083947" usec="0"/>
    <to sec="1063083984" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_595{
style=filled;
color=gray75;
3038[label="206.128.8.137;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4086[label="206.128.8.137;1pkt 1fpkt", shape=invtriangle, color=brown];
stat595[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.128.8.137:80, 168.160.36.104:3285}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3285: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3038--4086[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.160.36.104" dst_port="3285" src_ip="206.128.8.137" src_port="80"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="207.208.245.138"/>
    </slice>
    <from sec="1063083602" usec="0"/>
    <to sec="1063084486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_597{
style=filled;
color=gray75;
3051[label="202.132.5.139;155pkt 155fpkt", shape=pentagon, color=darkviolet];
4094[label="202.132.5.139;155pkt 155fpkt", shape=invtriangle, color=brown];
4631[label="202.132.5.139;155pkt 155fpkt", shape=invhouse, color=bisque];
stat597[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.132.5.139:1044, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1044: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3051--4094[label="1;155pkt 155fpkt"];
3051--4631[label="1;155pkt 155fpkt"];
4094--4631[label="1;155pkt 155fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.132.5.139" src_port="1044"/>
    </slice>
    <from sec="1063084149" usec="0"/>
    <to sec="1063084174" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.868607,1.33356,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_598{
style=filled;
color=gray75;
568[label="153.0.184.164;d;174pkt 174fpkt", shape=diamond, color=yellow];
2359[label="31.59.66.14;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2520[label="31.186.82.39;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2572[label="84.113.218.49;25pkt 25fpkt", shape=pentagon, color=darkviolet];
3052[label="206.83.88.139;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3061[label="213.198.186.140;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3708[label="31.59.66.14;5pkt 5fpkt", shape=invtriangle, color=brown];
3819[label="84.113.218.49;25pkt 25fpkt", shape=invtriangle, color=brown];
4095[label="206.83.88.139;2pkt 2fpkt", shape=invtriangle, color=brown];
4098[label="213.198.186.140;10pkt 10fpkt", shape=invtriangle, color=brown];
4632[label="206.83.88.139;2pkt 2fpkt", shape=invhouse, color=bisque];
4634[label="213.198.186.140;9pkt 9fpkt", shape=invhouse, color=bisque];
stat598[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 153.0.184.164:*}[80.4598%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.75%)&lt;BR/&gt; 2221: (6.06618%)&lt;BR/&gt; 1801: (0.735294%)&lt;BR/&gt; 1446: (0.735294%)&lt;BR/&gt; 1353: (0.735294%)&gt;];
}
568--573[label="0.0114943;2pkt 2fpkt"];
568--679[label="0.00819672;1pkt 1fpkt"];
568--852[label="0.5;1pkt 1fpkt"];
568--1540[label="0.0287356;5pkt 5fpkt"];
568--1667[label="0.021978;2pkt 2fpkt"];
568--1693[label="0.5;1pkt 1fpkt"];
568--1905[label="0.00819672;1pkt 1fpkt"];
568--2207[label="0.00574713;1pkt 1fpkt"];
568--2359[label="1;5pkt 5fpkt"];
568--2520[label="1;3pkt 3fpkt"];
568--2572[label="1;25pkt 25fpkt"];
568--2584[label="0.212121;7pkt 7fpkt"];
568--2786[label="0.00735294;1pkt 1fpkt"];
568--3052[label="1;2pkt 2fpkt"];
568--3061[label="1;10pkt 10fpkt"];
568--3143[label="0.0153846;1pkt 1fpkt"];
568--3562[label="0.0114943;2pkt 2fpkt"];
568--3597[label="0.0287356;5pkt 5fpkt"];
568--3708[label="1;5pkt 5fpkt"];
568--3819[label="1;25pkt 25fpkt"];
568--4095[label="1;2pkt 2fpkt"];
568--4098[label="1;10pkt 10fpkt"];
568--4147[label="0.0153846;1pkt 1fpkt"];
568--4367[label="0.0114943;2pkt 2fpkt"];
568--4632[label="1;2pkt 2fpkt"];
568--4634[label="1;9pkt 9fpkt"];
568--4655[label="0.0153846;1pkt 1fpkt"];
2359--3708[label="1;5pkt 5fpkt"];
2572--3819[label="1;25pkt 25fpkt"];
3052--4095[label="1;2pkt 2fpkt"];
3052--4632[label="1;2pkt 2fpkt"];
3061--4098[label="1;10pkt 10fpkt"];
3061--4634[label="1;9pkt 9fpkt"];
4095--4632[label="1;2pkt 2fpkt"];
4098--4634[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="153.0.184.164" src_port="80"/>
    </slice>
    <from sec="1063083607" usec="0"/>
    <to sec="1063084429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_599{
style=filled;
color=gray75;
3055[label="209.150.105.139;80pkt 80fpkt", shape=pentagon, color=darkviolet];
4096[label="209.150.105.139;80pkt 80fpkt", shape=invtriangle, color=brown];
4633[label="209.150.105.139;79pkt 79fpkt", shape=invhouse, color=bisque];
stat599[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.150.105.139:0, *:0}[85%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (84.9372%)&lt;BR/&gt; 80: (4.39331%)&lt;BR/&gt; 135: (2.51046%)&lt;BR/&gt; 42992: (0.627615%)&lt;BR/&gt; 41990: (0.627615%)&gt;];
}
3055--4096[label="1;80pkt 80fpkt"];
3055--4633[label="1;79pkt 79fpkt"];
4096--4633[label="1;79pkt 79fpkt"];
</description>
    <slice>
      <filter src_ip="209.150.105.139"/>
    </slice>
    <from sec="1063083619" usec="0"/>
    <to sec="1063084500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="207.111.85.141"/>
    </slice>
    <from sec="1063083969" usec="0"/>
    <to sec="1063084317" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.36.32.144"/>
    </slice>
    <from sec="1063083645" usec="0"/>
    <to sec="1063084465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_602{
style=filled;
color=gray75;
3080[label="207.67.242.144;123pkt 123fpkt", shape=pentagon, color=darkviolet];
4106[label="207.67.242.144;122pkt 122fpkt", shape=invtriangle, color=brown];
stat602[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.67.242.144:*, 208.173.1.16:80}[26.8293%]&lt;BR/&gt;{207.67.242.144:*, 208.173.1.35:80}[26.8293%]&lt;BR/&gt;{207.67.242.144:*, 133.150.162.57:80}[26.8293%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.4082%)&lt;BR/&gt; 0: (19.1837%)&lt;BR/&gt; 60917: (0.408163%)&lt;BR/&gt; 60876: (0.408163%)&lt;BR/&gt; 60846: (0.408163%)&gt;];
}
3080--4106[label="1;122pkt 122fpkt"];
</description>
    <slice>
      <filter dst_ip="133.150.162.57" dst_port="80" src_ip="207.67.242.144"/>
      <filter dst_ip="208.173.1.35" dst_port="80" src_ip="207.67.242.144"/>
      <filter dst_ip="208.173.1.16" dst_port="80" src_ip="207.67.242.144"/>
    </slice>
    <from sec="1063083682" usec="0"/>
    <to sec="1063084343" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_603{
style=filled;
color=gray75;
3085[label="212.185.70.145;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4109[label="212.185.70.145;15pkt 15fpkt", shape=invtriangle, color=brown];
stat603[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.185.70.145:80, 133.150.186.150:*}[46.6667%]&lt;BR/&gt;{212.185.70.145:80, 133.150.188.84:*}[26.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51404: (3.33333%)&lt;BR/&gt; 51399: (3.33333%)&lt;BR/&gt; 51397: (3.33333%)&lt;BR/&gt; 51394: (3.33333%)&gt;];
}
3085--4109[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="133.150.186.150" src_ip="212.185.70.145" src_port="80"/>
      <filter dst_ip="133.150.188.84" src_ip="212.185.70.145" src_port="80"/>
    </slice>
    <from sec="1063083697" usec="0"/>
    <to sec="1063084499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_604{
style=filled;
color=gray75;
3086[label="206.128.108.145;11pkt 11fpkt", shape=pentagon, color=darkviolet];
4110[label="206.128.108.145;11pkt 11fpkt", shape=invtriangle, color=brown];
stat604[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.128.108.145:80, 153.0.75.67:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1538: (4.54545%)&lt;BR/&gt; 1537: (4.54545%)&lt;BR/&gt; 1536: (4.54545%)&lt;BR/&gt; 1535: (4.54545%)&gt;];
}
3086--4110[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="153.0.75.67" src_ip="206.128.108.145" src_port="80"/>
    </slice>
    <from sec="1063083854" usec="0"/>
    <to sec="1063084479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_605{
style=filled;
color=gray75;
3097[label="196.25.128.147;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4116[label="196.25.128.147;6pkt 6fpkt", shape=invtriangle, color=brown];
4641[label="196.25.128.147;6pkt 6fpkt", shape=invhouse, color=bisque];
stat605[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.25.128.147:80, 208.162.196.104:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1131: (8.33333%)&lt;BR/&gt; 1130: (8.33333%)&lt;BR/&gt; 1129: (8.33333%)&lt;BR/&gt; 1128: (8.33333%)&gt;];
}
3097--4116[label="1;6pkt 6fpkt"];
3097--4641[label="1;6pkt 6fpkt"];
4116--4641[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="208.162.196.104" src_ip="196.25.128.147" src_port="80"/>
    </slice>
    <from sec="1063083638" usec="0"/>
    <to sec="1063083652" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="64.20.243.147"/>
    </slice>
    <from sec="1063083601" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_607{
style=filled;
color=gray75;
3101[label="86.197.5.148;20pkt 20fpkt", shape=pentagon, color=darkviolet];
4119[label="86.197.5.148;20pkt 20fpkt", shape=invtriangle, color=brown];
stat607[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.197.5.148:25, 168.160.33.50:*}[55%]&lt;BR/&gt;{86.197.5.148:25, 168.160.43.98:*}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 65455: (2.5%)&lt;BR/&gt; 65416: (2.5%)&lt;BR/&gt; 65400: (2.5%)&lt;BR/&gt; 65390: (2.5%)&gt;];
}
3101--4119[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="168.160.33.50" src_ip="86.197.5.148" src_port="25"/>
      <filter dst_ip="168.160.43.98" src_ip="86.197.5.148" src_port="25"/>
    </slice>
    <from sec="1063083602" usec="0"/>
    <to sec="1063084483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.219.64.148"/>
    </slice>
    <from sec="1063083611" usec="0"/>
    <to sec="1063084492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_609{
style=filled;
color=gray75;
3106[label="29.157.124.148;180pkt 180fpkt", shape=pentagon, color=darkviolet];
4123[label="29.157.124.148;180pkt 180fpkt", shape=invtriangle, color=brown];
4643[label="29.157.124.148;179pkt 179fpkt", shape=invhouse, color=bisque];
stat609[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.157.124.148:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3106--4123[label="1;180pkt 180fpkt"];
3106--4643[label="1;179pkt 179fpkt"];
4123--4643[label="1;179pkt 179fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="29.157.124.148" src_port="1029"/>
    </slice>
    <from sec="1063084466" usec="0"/>
    <to sec="1063084498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.209.217.148"/>
    </slice>
    <from sec="1063083601" usec="0"/>
    <to sec="1063084484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_611{
style=filled;
color=gray75;
3114[label="193.72.104.150;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4129[label="193.72.104.150;14pkt 14fpkt", shape=invtriangle, color=brown];
4647[label="193.72.104.150;14pkt 14fpkt", shape=invhouse, color=bisque];
stat611[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.72.104.150:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3114--4129[label="1;14pkt 14fpkt"];
3114--4647[label="1;14pkt 14fpkt"];
4129--4647[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter src_ip="193.72.104.150"/>
    </slice>
    <from sec="1063083641" usec="0"/>
    <to sec="1063084486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.868607,1.33356,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_612{
style=filled;
color=gray75;
863[label="133.150.117.90;d;21pkt 21fpkt", shape=diamond, color=yellow];
1361[label="80.217.233.150;s;4pkt 4fpkt", shape=diamond, color=yellow];
2640[label="86.241.115.61;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3116[label="80.217.233.150;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4131[label="80.217.233.150;6pkt 6fpkt", shape=invtriangle, color=brown];
4648[label="80.217.233.150;6pkt 6fpkt", shape=invhouse, color=bisque];
stat612[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.241.115.61:80, 133.150.117.90:*}[30.4348%]&lt;BR/&gt;{80.217.233.150:80, *:*}[26.087%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1602: (5.10204%)&lt;BR/&gt; 1601: (5.10204%)&lt;BR/&gt; 1600: (5.10204%)&lt;BR/&gt; 1599: (5.10204%)&gt;];
}
863--1045[label="0.0952381;2pkt 2fpkt"];
863--1361[label="1;4pkt 4fpkt"];
863--2007[label="0.0952381;2pkt 2fpkt"];
863--2207[label="0.047619;1pkt 1fpkt"];
863--2640[label="1;6pkt 6fpkt"];
863--3116[label="0.666667;4pkt 4fpkt"];
863--4131[label="0.666667;4pkt 4fpkt"];
863--4648[label="0.666667;4pkt 4fpkt"];
1361--3116[label="1;4pkt 4fpkt"];
1361--4131[label="1;4pkt 4fpkt"];
1361--4648[label="1;4pkt 4fpkt"];
3116--4131[label="1;6pkt 6fpkt"];
3116--4648[label="1;6pkt 6fpkt"];
4131--4648[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="80.217.233.150" src_port="80"/>
      <filter dst_ip="133.150.117.90" src_ip="86.241.115.61" src_port="80"/>
    </slice>
    <from sec="1063084146" usec="0"/>
    <to sec="1063084432" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_613{
style=filled;
color=gray75;
3126[label="208.106.234.151;26pkt 26fpkt", shape=pentagon, color=darkviolet];
4135[label="208.106.234.151;26pkt 26fpkt", shape=invtriangle, color=brown];
4650[label="208.106.234.151;26pkt 26fpkt", shape=invhouse, color=bisque];
stat613[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.106.234.151:80, *:*}[57.6923%]&lt;BR/&gt;{208.106.234.151:0, *:0}[34.6154%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (34.6154%)&lt;BR/&gt; 80: (28.8462%)&lt;BR/&gt; 135: (3.84615%)&lt;BR/&gt; 4240: (1.92308%)&lt;BR/&gt; 3428: (1.92308%)&gt;];
}
3126--4135[label="1;26pkt 26fpkt"];
3126--4650[label="1;26pkt 26fpkt"];
4135--4650[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter src_ip="208.106.234.151" src_port="80"/>
      <filter src_ip="208.106.234.151"/>
    </slice>
    <from sec="1063083616" usec="0"/>
    <to sec="1063084457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_614{
style=filled;
color=gray75;
3138[label="196.42.186.153;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4144[label="196.42.186.153;1pkt 1fpkt", shape=invtriangle, color=brown];
4653[label="196.42.186.153;1pkt 1fpkt", shape=invhouse, color=bisque];
stat614[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.42.186.153:35725, 153.0.9.207:20}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35725: (50%)&lt;BR/&gt; 20: (50%)&gt;];
}
3138--4144[label="1;1pkt 1fpkt"];
3138--4653[label="1;1pkt 1fpkt"];
4144--4653[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="153.0.9.207" dst_port="20" src_ip="196.42.186.153" src_port="35725"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.108.166.155"/>
    </slice>
    <from sec="1063083602" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_617{
style=filled;
color=gray75;
3155[label="194.5.144.157;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4153[label="194.5.144.157;1pkt 1fpkt", shape=invtriangle, color=brown];
4660[label="194.5.144.157;1pkt 1fpkt", shape=invhouse, color=bisque];
stat617[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.5.144.157:36604, 209.150.108.72:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 36604: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
3155--4153[label="1;1pkt 1fpkt"];
3155--4660[label="1;1pkt 1fpkt"];
4153--4660[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.150.108.72" dst_port="25" src_ip="194.5.144.157" src_port="36604"/>
    </slice>
    <from sec="1063083607" usec="0"/>
    <to sec="1063083617" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_618{
style=filled;
color=gray75;
3157[label="84.75.83.158;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4154[label="84.75.83.158;4pkt 4fpkt", shape=invtriangle, color=brown];
stat618[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.75.83.158:80, 208.173.34.211:30647}[25%]&lt;BR/&gt;{84.75.83.158:80, 208.173.34.211:30653}[25%]&lt;BR/&gt;{84.75.83.158:80, 208.173.34.211:30778}[25%]&lt;BR/&gt;{84.75.83.158:80, 208.173.34.211:30781}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 30781: (12.5%)&lt;BR/&gt; 30778: (12.5%)&lt;BR/&gt; 30653: (12.5%)&lt;BR/&gt; 30647: (12.5%)&gt;];
}
3157--4154[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="208.173.34.211" dst_port="30781" src_ip="84.75.83.158" src_port="80"/>
      <filter dst_ip="208.173.34.211" dst_port="30778" src_ip="84.75.83.158" src_port="80"/>
      <filter dst_ip="208.173.34.211" dst_port="30653" src_ip="84.75.83.158" src_port="80"/>
      <filter dst_ip="208.173.34.211" dst_port="30647" src_ip="84.75.83.158" src_port="80"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_619{
style=filled;
color=gray75;
3178[label="142.124.176.161;254pkt 254fpkt", shape=pentagon, color=darkviolet];
4164[label="142.124.176.161;253pkt 253fpkt", shape=invtriangle, color=brown];
4664[label="142.124.176.161;253pkt 253fpkt", shape=invhouse, color=bisque];
stat619[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.124.176.161:64778, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64778: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3178--4164[label="1;253pkt 253fpkt"];
3178--4664[label="1;253pkt 253fpkt"];
4164--4664[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="142.124.176.161" src_port="64778"/>
    </slice>
    <from sec="1063083753" usec="0"/>
    <to sec="1063083794" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_620{
style=filled;
color=gray75;
3179[label="212.185.178.161;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4165[label="212.185.178.161;2pkt 2fpkt", shape=invtriangle, color=brown];
4665[label="212.185.178.161;2pkt 2fpkt", shape=invhouse, color=bisque];
stat620[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.185.178.161:1863, 174.22.74.10:1353}[50%]&lt;BR/&gt;{212.185.178.161:1863, 131.184.1.146:2655}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 2655: (25%)&lt;BR/&gt; 1353: (25%)&gt;];
}
3179--4165[label="1;2pkt 2fpkt"];
3179--4665[label="1;2pkt 2fpkt"];
4165--4665[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="131.184.1.146" dst_port="2655" src_ip="212.185.178.161" src_port="1863"/>
      <filter dst_ip="174.22.74.10" dst_port="1353" src_ip="212.185.178.161" src_port="1863"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_621{
style=filled;
color=gray75;
3194[label="87.33.17.164;42pkt 42fpkt", shape=pentagon, color=darkviolet];
4172[label="87.33.17.164;42pkt 42fpkt", shape=invtriangle, color=brown];
stat621[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.33.17.164:*, 131.53.164.100:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3218: (1.19048%)&lt;BR/&gt; 3217: (1.19048%)&lt;BR/&gt; 3216: (1.19048%)&lt;BR/&gt; 3215: (1.19048%)&gt;];
}
3194--4172[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_ip="131.53.164.100" dst_port="80" src_ip="87.33.17.164"/>
    </slice>
    <from sec="1063084254" usec="0"/>
    <to sec="1063084324" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_622{
style=filled;
color=gray75;
3201[label="64.243.2.165;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4174[label="64.243.2.165;6pkt 6fpkt", shape=invtriangle, color=brown];
stat622[shape=component, label=&lt;Rules:&lt;BR/&gt;{64.243.2.165:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3201--4174[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="64.243.2.165" src_port="1027"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_624{
style=filled;
color=gray75;
3215[label="197.193.10.167;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4181[label="197.193.10.167;7pkt 7fpkt", shape=invtriangle, color=brown];
stat624[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.193.10.167:80, 131.184.172.78:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 38093: (7.14286%)&lt;BR/&gt; 38052: (7.14286%)&lt;BR/&gt; 38043: (7.14286%)&lt;BR/&gt; 38042: (7.14286%)&gt;];
}
3215--4181[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="131.184.172.78" src_ip="197.193.10.167" src_port="80"/>
    </slice>
    <from sec="1063084417" usec="0"/>
    <to sec="1063084487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_625{
style=filled;
color=gray75;
3221[label="86.197.16.168;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4184[label="86.197.16.168;1pkt 1fpkt", shape=invtriangle, color=brown];
stat625[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.197.16.168:80, 208.173.0.145:15679}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15679: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3221--4184[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.173.0.145" dst_port="15679" src_ip="86.197.16.168" src_port="80"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_628{
style=filled;
color=gray75;
3228[label="208.119.241.168;216pkt 216fpkt", shape=pentagon, color=darkviolet];
4187[label="208.119.241.168;216pkt 216fpkt", shape=invtriangle, color=brown];
stat628[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.119.241.168:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3228--4187[label="1;216pkt 216fpkt"];
</description>
    <slice>
      <filter src_ip="208.119.241.168"/>
    </slice>
    <from sec="1063083816" usec="0"/>
    <to sec="1063083821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_629{
style=filled;
color=gray75;
3232[label="86.34.2.170;128pkt 128fpkt", shape=pentagon, color=darkviolet];
4188[label="86.34.2.170;128pkt 128fpkt", shape=invtriangle, color=brown];
4675[label="86.34.2.170;127pkt 127fpkt", shape=invhouse, color=bisque];
stat629[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.34.2.170:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 56999: (0.391645%)&lt;BR/&gt; 56997: (0.391645%)&lt;BR/&gt; 56996: (0.391645%)&lt;BR/&gt; 56992: (0.391645%)&gt;];
}
3232--4188[label="1;128pkt 128fpkt"];
3232--4675[label="1;127pkt 127fpkt"];
4188--4675[label="1;127pkt 127fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="86.34.2.170"/>
    </slice>
    <from sec="1063083680" usec="0"/>
    <to sec="1063083718" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.13.25.171"/>
    </slice>
    <from sec="1063084310" usec="0"/>
    <to sec="1063084317" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_631{
style=filled;
color=gray75;
3240[label="212.185.183.171;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4191[label="212.185.183.171;3pkt 3fpkt", shape=invtriangle, color=brown];
4676[label="212.185.183.171;2pkt 2fpkt", shape=invhouse, color=bisque];
stat631[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.185.183.171:1863, 131.41.206.8:50994}[33.3333%]&lt;BR/&gt;{212.185.183.171:1863, 217.163.212.38:3004}[33.3333%]&lt;BR/&gt;{212.185.183.171:1863, 217.163.212.91:3047}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 50994: (18.75%)&lt;BR/&gt; 3004: (18.75%)&lt;BR/&gt; 3047: (12.5%)&gt;];
}
3240--4191[label="1;3pkt 3fpkt"];
3240--4676[label="1;2pkt 2fpkt"];
4191--4676[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="217.163.212.91" dst_port="3047" src_ip="212.185.183.171" src_port="1863"/>
      <filter dst_ip="217.163.212.38" dst_port="3004" src_ip="212.185.183.171" src_port="1863"/>
      <filter dst_ip="131.41.206.8" dst_port="50994" src_ip="212.185.183.171" src_port="1863"/>
    </slice>
    <from sec="1063083601" usec="0"/>
    <to sec="1063084500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_632{
style=filled;
color=gray75;
3244[label="216.194.26.172;101pkt 101fpkt", shape=pentagon, color=darkviolet];
4193[label="216.194.26.172;101pkt 101fpkt", shape=invtriangle, color=brown];
stat632[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.194.26.172:0, *:0}[98.0198%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.0198%)&lt;BR/&gt; 80: (0.990099%)&lt;BR/&gt; 14316: (0.49505%)&lt;BR/&gt; 13091: (0.49505%)&gt;];
}
3244--4193[label="1;101pkt 101fpkt"];
</description>
    <slice>
      <filter src_ip="216.194.26.172"/>
    </slice>
    <from sec="1063083606" usec="0"/>
    <to sec="1063084494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_633{
style=filled;
color=gray75;
3249[label="205.237.139.172;124pkt 124fpkt", shape=pentagon, color=darkviolet];
4195[label="205.237.139.172;123pkt 123fpkt", shape=invtriangle, color=brown];
4677[label="205.237.139.172;123pkt 123fpkt", shape=invhouse, color=bisque];
stat633[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.237.139.172:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3249--4195[label="1;123pkt 123fpkt"];
3249--4677[label="1;123pkt 123fpkt"];
4195--4677[label="1;123pkt 123fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="205.237.139.172" src_port="1026"/>
    </slice>
    <from sec="1063083728" usec="0"/>
    <to sec="1063083748" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_636{
style=filled;
color=gray75;
3257[label="212.185.183.173;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4202[label="212.185.183.173;4pkt 4fpkt", shape=invtriangle, color=brown];
stat636[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.185.183.173:1863, 217.163.213.43:33515}[25%]&lt;BR/&gt;{212.185.183.173:1863, 174.22.164.69:3882}[25%]&lt;BR/&gt;{212.185.183.173:1863, 208.162.194.82:1848}[25%]&lt;BR/&gt;{212.185.183.173:1863, 209.150.108.199:1789}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 33515: (12.5%)&lt;BR/&gt; 3882: (12.5%)&lt;BR/&gt; 1848: (12.5%)&lt;BR/&gt; 1789: (12.5%)&gt;];
}
3257--4202[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="209.150.108.199" dst_port="1789" src_ip="212.185.183.173" src_port="1863"/>
      <filter dst_ip="208.162.194.82" dst_port="1848" src_ip="212.185.183.173" src_port="1863"/>
      <filter dst_ip="174.22.164.69" dst_port="3882" src_ip="212.185.183.173" src_port="1863"/>
      <filter dst_ip="217.163.213.43" dst_port="33515" src_ip="212.185.183.173" src_port="1863"/>
    </slice>
    <from sec="1063083605" usec="0"/>
    <to sec="1063084493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_637{
style=filled;
color=gray75;
3259[label="206.35.1.174;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4204[label="206.35.1.174;2pkt 2fpkt", shape=invtriangle, color=brown];
stat637[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.35.1.174:80, 133.150.14.1:1821}[50%]&lt;BR/&gt;{206.35.1.174:80, 133.150.14.1:1830}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1830: (25%)&lt;BR/&gt; 1821: (25%)&gt;];
}
3259--4204[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="133.150.14.1" dst_port="1830" src_ip="206.35.1.174" src_port="80"/>
      <filter dst_ip="133.150.14.1" dst_port="1821" src_ip="206.35.1.174" src_port="80"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.48.14.174"/>
    </slice>
    <from sec="1063083667" usec="0"/>
    <to sec="1063084453" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_639{
style=filled;
color=gray75;
3261[label="205.204.52.174;121pkt 121fpkt", shape=pentagon, color=darkviolet];
4206[label="205.204.52.174;121pkt 121fpkt", shape=invtriangle, color=brown];
stat639[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.204.52.174:0, *:0}[96.6942%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.6942%)&lt;BR/&gt; 80: (1.65289%)&lt;BR/&gt; 39806: (0.413223%)&lt;BR/&gt; 39392: (0.413223%)&lt;BR/&gt; 35952: (0.413223%)&gt;];
}
3261--4206[label="1;121pkt 121fpkt"];
</description>
    <slice>
      <filter src_ip="205.204.52.174"/>
    </slice>
    <from sec="1063083613" usec="0"/>
    <to sec="1063084497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_640{
style=filled;
color=gray75;
3267[label="209.132.8.175;103pkt 103fpkt", shape=pentagon, color=darkviolet];
4209[label="209.132.8.175;103pkt 103fpkt", shape=invtriangle, color=brown];
stat640[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.132.8.175:0, *:0}[96.1165%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.1165%)&lt;BR/&gt; 80: (1.94175%)&lt;BR/&gt; 32911: (0.485437%)&lt;BR/&gt; 21572: (0.485437%)&lt;BR/&gt; 20977: (0.485437%)&gt;];
}
3267--4209[label="1;103pkt 103fpkt"];
</description>
    <slice>
      <filter src_ip="209.132.8.175"/>
    </slice>
    <from sec="1063083608" usec="0"/>
    <to sec="1063084495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_641{
style=filled;
color=gray75;
3284[label="85.79.141.177;159pkt 159fpkt", shape=pentagon, color=darkviolet];
4213[label="85.79.141.177;159pkt 159fpkt", shape=invtriangle, color=brown];
stat641[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.79.141.177:0, *:0}[91.8239%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (91.8239%)&lt;BR/&gt; 135: (2.20126%)&lt;BR/&gt; 80: (1.88679%)&lt;BR/&gt; 64254: (0.314465%)&lt;BR/&gt; 61942: (0.314465%)&gt;];
}
3284--4213[label="1;159pkt 159fpkt"];
</description>
    <slice>
      <filter src_ip="85.79.141.177"/>
    </slice>
    <from sec="1063083641" usec="0"/>
    <to sec="1063084499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.128.118.178"/>
    </slice>
    <from sec="1063083604" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_643{
style=filled;
color=gray75;
3291[label="172.190.122.178;241pkt 241fpkt", shape=pentagon, color=darkviolet];
4217[label="172.190.122.178;240pkt 240fpkt", shape=invtriangle, color=brown];
4686[label="172.190.122.178;241pkt 241fpkt", shape=invhouse, color=bisque];
stat643[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.190.122.178:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3291--4217[label="1;240pkt 240fpkt"];
3291--4686[label="1;241pkt 241fpkt"];
4217--4686[label="1;240pkt 240fpkt"];
</description>
    <slice>
      <filter src_ip="172.190.122.178"/>
    </slice>
    <from sec="1063083602" usec="0"/>
    <to sec="1063084500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_644{
style=filled;
color=gray75;
3294[label="219.10.239.178;24pkt 24fpkt", shape=pentagon, color=darkviolet];
4218[label="219.10.239.178;23pkt 23fpkt", shape=invtriangle, color=brown];
4687[label="219.10.239.178;24pkt 24fpkt", shape=invhouse, color=bisque];
stat644[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.10.239.178:80, 131.41.239.97:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49289: (2.11268%)&lt;BR/&gt; 49288: (2.11268%)&lt;BR/&gt; 49287: (2.11268%)&lt;BR/&gt; 49286: (2.11268%)&gt;];
}
3294--4218[label="1;23pkt 23fpkt"];
3294--4687[label="1;24pkt 24fpkt"];
4218--4687[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="131.41.239.97" src_ip="219.10.239.178" src_port="80"/>
    </slice>
    <from sec="1063083875" usec="0"/>
    <to sec="1063083888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.868607,1.33356,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_645{
style=filled;
color=gray75;
517[label="217.163.212.57;d;835pkt 835fpkt", shape=diamond, color=yellow];
3091[label="207.9.101.146;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3297[label="86.232.168.179;27pkt 27fpkt", shape=pentagon, color=darkviolet];
3370[label="86.232.168.193;25pkt 25fpkt", shape=pentagon, color=darkviolet];
4113[label="207.9.101.146;16pkt 16fpkt", shape=invtriangle, color=brown];
4219[label="86.232.168.179;27pkt 27fpkt", shape=invtriangle, color=brown];
4640[label="207.9.101.146;17pkt 17fpkt", shape=invhouse, color=bisque];
stat645[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 217.163.212.57:0}[42.5684%]&lt;BR/&gt;{*:445, 217.163.212.57:*}[37.3365%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (37.1369%)&lt;BR/&gt; 445: (17.583%)&lt;BR/&gt; 7131: (7.52075%)&lt;BR/&gt; 139: (5.13485%)&lt;BR/&gt; 25: (0.93361%)&gt;];
}
517--603[label="0.0011976;1pkt 1fpkt"];
517--725[label="0.0011976;1pkt 1fpkt"];
517--733[label="0.0011976;1pkt 1fpkt"];
517--1034[label="0.0416667;1pkt 1fpkt"];
517--1588[label="0.0011976;1pkt 1fpkt"];
517--1591[label="0.0011976;1pkt 1fpkt"];
517--1926[label="0.0416667;1pkt 1fpkt"];
517--2179[label="0.0416667;1pkt 1fpkt"];
517--2202[label="0.0011976;1pkt 1fpkt"];
517--2575[label="0.0011976;1pkt 1fpkt"];
517--3091[label="0.882353;15pkt 15fpkt"];
517--3095[label="0.0011976;1pkt 1fpkt"];
517--3297[label="0.925926;25pkt 25fpkt"];
517--3370[label="0.92;23pkt 23fpkt"];
517--3821[label="0.0011976;1pkt 1fpkt"];
517--4113[label="0.875;14pkt 14fpkt"];
517--4115[label="0.0011976;1pkt 1fpkt"];
517--4219[label="0.925926;25pkt 25fpkt"];
517--4640[label="0.882353;15pkt 15fpkt"];
3091--4113[label="1;16pkt 16fpkt"];
3091--4640[label="1;17pkt 17fpkt"];
3297--4219[label="1;27pkt 27fpkt"];
4113--4640[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="217.163.212.57" src_port="445"/>
      <filter dst_ip="217.163.212.57"/>
    </slice>
    <from sec="1063083601" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_646{
style=filled;
color=gray75;
3306[label="87.43.86.181;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4224[label="87.43.86.181;3pkt 3fpkt", shape=invtriangle, color=brown];
stat646[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.43.86.181:30578, 133.150.117.97:80}[33.3333%]&lt;BR/&gt;{87.43.86.181:30581, 133.150.117.97:80}[33.3333%]&lt;BR/&gt;{87.43.86.181:30583, 133.150.117.97:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 30583: (16.6667%)&lt;BR/&gt; 30581: (16.6667%)&lt;BR/&gt; 30578: (16.6667%)&gt;];
}
3306--4224[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="133.150.117.97" dst_port="80" src_ip="87.43.86.181" src_port="30583"/>
      <filter dst_ip="133.150.117.97" dst_port="80" src_ip="87.43.86.181" src_port="30581"/>
      <filter dst_ip="133.150.117.97" dst_port="80" src_ip="87.43.86.181" src_port="30578"/>
    </slice>
    <from sec="1063083927" usec="0"/>
    <to sec="1063083953" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.167.124.182"/>
    </slice>
    <from sec="1063083601" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_648{
style=filled;
color=gray75;
3312[label="213.206.129.182;204pkt 204fpkt", shape=pentagon, color=darkviolet];
4228[label="213.206.129.182;204pkt 204fpkt", shape=invtriangle, color=brown];
4693[label="213.206.129.182;203pkt 203fpkt", shape=invhouse, color=bisque];
stat648[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.206.129.182:0, *:0}[94.6078%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.599%)&lt;BR/&gt; 80: (1.473%)&lt;BR/&gt; 135: (1.2275%)&lt;BR/&gt; 25955: (0.245499%)&lt;BR/&gt; 24771: (0.245499%)&gt;];
}
3312--4228[label="1;204pkt 204fpkt"];
3312--4693[label="1;203pkt 203fpkt"];
4228--4693[label="1;203pkt 203fpkt"];
</description>
    <slice>
      <filter src_ip="213.206.129.182"/>
    </slice>
    <from sec="1063083606" usec="0"/>
    <to sec="1063084498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_649{
style=filled;
color=gray75;
3321[label="212.185.183.183;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4232[label="212.185.183.183;1pkt 1fpkt", shape=invtriangle, color=brown];
stat649[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.185.183.183:1863, 153.0.237.74:3280}[50%]&lt;BR/&gt;{212.185.183.183:1863, 131.184.14.94:1036}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3280: (33.3333%)&lt;BR/&gt; 1036: (16.6667%)&gt;];
}
3321--4232[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.184.14.94" dst_port="1036" src_ip="212.185.183.183" src_port="1863"/>
      <filter dst_ip="153.0.237.74" dst_port="3280" src_ip="212.185.183.183" src_port="1863"/>
    </slice>
    <from sec="1063083634" usec="0"/>
    <to sec="1063084494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.149.201.183"/>
    </slice>
    <from sec="1063084152" usec="0"/>
    <to sec="1063084500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="207.32.148.184"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.868607,1.33356,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_652{
style=filled;
color=gray75;
1297[label="31.108.178.184;s;552pkt 552fpkt", shape=diamond, color=yellow];
3326[label="31.108.178.184;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4237[label="31.108.178.184;3pkt 3fpkt", shape=invtriangle, color=brown];
4695[label="31.108.178.184;3pkt 3fpkt", shape=invhouse, color=bisque];
stat652[shape=component, label=&lt;Rules:&lt;BR/&gt;{31.108.178.184:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1297--4237[label="0.333333;1pkt 1fpkt"];
1297--4695[label="0.333333;1pkt 1fpkt"];
3326--4237[label="1;2pkt 2fpkt"];
3326--4695[label="1;2pkt 2fpkt"];
4237--4695[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="31.108.178.184"/>
    </slice>
    <from sec="1063083605" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.236.183.184"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_654{
style=filled;
color=gray75;
3343[label="194.153.20.188;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4245[label="194.153.20.188;3pkt 3fpkt", shape=invtriangle, color=brown];
4699[label="194.153.20.188;3pkt 3fpkt", shape=invhouse, color=bisque];
stat654[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.153.20.188:80, 133.150.203.109:38319}[25%]&lt;BR/&gt;{194.153.20.188:80, 133.150.203.109:38320}[25%]&lt;BR/&gt;{194.153.20.188:80, 133.150.203.109:38321}[25%]&lt;BR/&gt;{194.153.20.188:80, 133.150.203.109:38322}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 38322: (15%)&lt;BR/&gt; 38321: (15%)&lt;BR/&gt; 38320: (15%)&lt;BR/&gt; 38319: (5%)&gt;];
}
3343--4245[label="1;3pkt 3fpkt"];
3343--4699[label="1;3pkt 3fpkt"];
4245--4699[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="133.150.203.109" dst_port="38322" src_ip="194.153.20.188" src_port="80"/>
      <filter dst_ip="133.150.203.109" dst_port="38321" src_ip="194.153.20.188" src_port="80"/>
      <filter dst_ip="133.150.203.109" dst_port="38320" src_ip="194.153.20.188" src_port="80"/>
      <filter dst_ip="133.150.203.109" dst_port="38319" src_ip="194.153.20.188" src_port="80"/>
    </slice>
    <from sec="1063084465" usec="0"/>
    <to sec="1063084471" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_655{
style=filled;
color=gray75;
3344[label="204.112.50.188;205pkt 205fpkt", shape=pentagon, color=darkviolet];
4246[label="204.112.50.188;205pkt 205fpkt", shape=invtriangle, color=brown];
4700[label="204.112.50.188;204pkt 204fpkt", shape=invhouse, color=bisque];
stat655[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.112.50.188:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3344--4246[label="1;205pkt 205fpkt"];
3344--4700[label="1;204pkt 204fpkt"];
4246--4700[label="1;204pkt 204fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="204.112.50.188" src_port="1025"/>
    </slice>
    <from sec="1063083685" usec="0"/>
    <to sec="1063083718" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_657{
style=filled;
color=gray75;
3357[label="131.140.58.192;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4252[label="131.140.58.192;14pkt 14fpkt", shape=invtriangle, color=brown];
4704[label="131.140.58.192;14pkt 14fpkt", shape=invhouse, color=bisque];
stat657[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.140.58.192:*, *:25}[73.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (43.0233%)&lt;BR/&gt; 80: (6.97674%)&lt;BR/&gt; 62737: (3.48837%)&lt;BR/&gt; 62734: (3.48837%)&lt;BR/&gt; 62477: (3.48837%)&gt;];
}
3357--4252[label="1;14pkt 14fpkt"];
3357--4704[label="1;14pkt 14fpkt"];
4252--4704[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="131.140.58.192"/>
    </slice>
    <from sec="1063083777" usec="0"/>
    <to sec="1063084373" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="30.34.64.193"/>
    </slice>
    <from sec="1063083787" usec="0"/>
    <to sec="1063084499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.25.75.193"/>
    </slice>
    <from sec="1063084331" usec="0"/>
    <to sec="1063084424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_660{
style=filled;
color=gray75;
3371[label="87.39.232.193;161pkt 161fpkt", shape=pentagon, color=darkviolet];
4261[label="87.39.232.193;160pkt 160fpkt", shape=invtriangle, color=brown];
stat660[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.39.232.193:65314, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65314: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3371--4261[label="1;160pkt 160fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="87.39.232.193" src_port="65314"/>
    </slice>
    <from sec="1063084063" usec="0"/>
    <to sec="1063084091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_662{
style=filled;
color=gray75;
3387[label="206.29.6.198;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4271[label="206.29.6.198;1pkt 1fpkt", shape=invtriangle, color=brown];
stat662[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.29.6.198:80, 208.173.2.40:30647}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 30647: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3387--4271[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.173.2.40" dst_port="30647" src_ip="206.29.6.198" src_port="80"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_663{
style=filled;
color=gray75;
3388[label="134.209.63.198;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4272[label="134.209.63.198;1pkt 1fpkt", shape=invtriangle, color=brown];
4714[label="134.209.63.198;2pkt 2fpkt", shape=invhouse, color=bisque];
stat663[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.209.63.198:80, 153.0.248.72:1246}[50%]&lt;BR/&gt;{134.209.63.198:80, 153.0.248.72:1247}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1247: (30%)&lt;BR/&gt; 1246: (20%)&gt;];
}
3388--4272[label="1;1pkt 1fpkt"];
3388--4714[label="1;2pkt 2fpkt"];
4272--4714[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="153.0.248.72" dst_port="1247" src_ip="134.209.63.198" src_port="80"/>
      <filter dst_ip="153.0.248.72" dst_port="1246" src_ip="134.209.63.198" src_port="80"/>
    </slice>
    <from sec="1063083683" usec="0"/>
    <to sec="1063083731" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_664{
style=filled;
color=gray75;
3392[label="212.185.178.198;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4275[label="212.185.178.198;2pkt 2fpkt", shape=invtriangle, color=brown];
stat664[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.185.178.198:1863, 217.163.213.188:3170}[50%]&lt;BR/&gt;{212.185.178.198:1863, 217.163.212.221:65522}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 65522: (25%)&lt;BR/&gt; 3170: (25%)&gt;];
}
3392--4275[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="217.163.212.221" dst_port="65522" src_ip="212.185.178.198" src_port="1863"/>
      <filter dst_ip="217.163.213.188" dst_port="3170" src_ip="212.185.178.198" src_port="1863"/>
    </slice>
    <from sec="1063084327" usec="0"/>
    <to sec="1063084499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.18.198.199"/>
    </slice>
    <from sec="1063083603" usec="0"/>
    <to sec="1063083855" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_666{
style=filled;
color=gray75;
3399[label="84.202.22.200;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4279[label="84.202.22.200;9pkt 9fpkt", shape=invtriangle, color=brown];
4715[label="84.202.22.200;9pkt 9fpkt", shape=invhouse, color=bisque];
stat666[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.202.22.200:80, 217.163.215.42:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51589: (5.55556%)&lt;BR/&gt; 51587: (5.55556%)&lt;BR/&gt; 51586: (5.55556%)&lt;BR/&gt; 51585: (5.55556%)&gt;];
}
3399--4279[label="1;9pkt 9fpkt"];
3399--4715[label="1;9pkt 9fpkt"];
4279--4715[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="217.163.215.42" src_ip="84.202.22.200" src_port="80"/>
    </slice>
    <from sec="1063084163" usec="0"/>
    <to sec="1063084197" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_667{
style=filled;
color=gray75;
3401[label="86.197.28.200;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4280[label="86.197.28.200;1pkt 1fpkt", shape=invtriangle, color=brown];
stat667[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.197.28.200:80, 208.173.0.145:15698}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15698: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3401--4280[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.173.0.145" dst_port="15698" src_ip="86.197.28.200" src_port="80"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_668{
style=filled;
color=gray75;
3405[label="197.176.12.201;117pkt 117fpkt", shape=pentagon, color=darkviolet];
4282[label="197.176.12.201;117pkt 117fpkt", shape=invtriangle, color=brown];
stat668[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.176.12.201:1024, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1024: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3405--4282[label="1;117pkt 117fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.176.12.201" src_port="1024"/>
    </slice>
    <from sec="1063084263" usec="0"/>
    <to sec="1063084282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="152.113.20.201"/>
    </slice>
    <from sec="1063083601" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_670{
style=filled;
color=gray75;
3410[label="85.81.84.201;94pkt 94fpkt", shape=pentagon, color=darkviolet];
4285[label="85.81.84.201;93pkt 93fpkt", shape=invtriangle, color=brown];
stat670[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.81.84.201:0, *:0}[69.1489%]&lt;BR/&gt;{85.81.84.201:*, *:80}[30.8511%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (68.984%)&lt;BR/&gt; 80: (15.508%)&lt;BR/&gt; 4596: (0.534759%)&lt;BR/&gt; 4436: (0.534759%)&lt;BR/&gt; 4404: (0.534759%)&gt;];
}
3410--4285[label="1;93pkt 93fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="85.81.84.201"/>
      <filter src_ip="85.81.84.201"/>
    </slice>
    <from sec="1063083616" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_671{
style=filled;
color=gray75;
3415[label="208.211.70.202;28pkt 28fpkt", shape=pentagon, color=darkviolet];
4288[label="208.211.70.202;28pkt 28fpkt", shape=invtriangle, color=brown];
4719[label="208.211.70.202;28pkt 28fpkt", shape=invhouse, color=bisque];
stat671[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.211.70.202:*, 208.173.3.0:25}[50%]&lt;BR/&gt;{208.211.70.202:*, 208.173.3.3:25}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 46838: (1.78571%)&lt;BR/&gt; 46837: (1.78571%)&lt;BR/&gt; 46835: (1.78571%)&lt;BR/&gt; 46833: (1.78571%)&gt;];
}
3415--4288[label="1;28pkt 28fpkt"];
3415--4719[label="1;28pkt 28fpkt"];
4288--4719[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="208.173.3.3" dst_port="25" src_ip="208.211.70.202"/>
      <filter dst_ip="208.173.3.0" dst_port="25" src_ip="208.211.70.202"/>
    </slice>
    <from sec="1063083726" usec="0"/>
    <to sec="1063084496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.35.186.202"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="64.27.28.204"/>
    </slice>
    <from sec="1063083605" usec="0"/>
    <to sec="1063084500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_674{
style=filled;
color=gray75;
3424[label="205.51.100.204;243pkt 243fpkt", shape=pentagon, color=darkviolet];
4297[label="205.51.100.204;243pkt 243fpkt", shape=invtriangle, color=brown];
stat674[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.51.100.204:63511, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63511: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3424--4297[label="1;243pkt 243fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="205.51.100.204" src_port="63511"/>
    </slice>
    <from sec="1063083648" usec="0"/>
    <to sec="1063083686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.868607,1.33356,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_675{
style=filled;
color=gray75;
1083[label="133.151.78.96;d;157pkt 157fpkt", shape=diamond, color=yellow];
2983[label="31.33.46.129;58pkt 58fpkt", shape=pentagon, color=darkviolet];
4060[label="31.33.46.129;57pkt 57fpkt", shape=invtriangle, color=brown];
4614[label="31.33.46.129;58pkt 58fpkt", shape=invhouse, color=bisque];
stat675[shape=component, label=&lt;Rules:&lt;BR/&gt;{31.33.46.129:80, 133.151.78.96:*}[35.8025%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3939%)&lt;BR/&gt; 53: (1.21212%)&lt;BR/&gt; 3503: (0.606061%)&lt;BR/&gt; 3494: (0.606061%)&lt;BR/&gt; 3382: (0.606061%)&gt;];
}
1083--1127[label="0.0521739;6pkt 6fpkt"];
1083--1307[label="0.0136986;1pkt 1fpkt"];
1083--1662[label="0.0272727;3pkt 3fpkt"];
1083--1717[label="0.0382166;6pkt 6fpkt"];
1083--1824[label="0.0380952;4pkt 4fpkt"];
1083--1848[label="0.0425532;6pkt 6fpkt"];
1083--1849[label="0.0382166;6pkt 6fpkt"];
1083--1912[label="0.0487805;6pkt 6fpkt"];
1083--2207[label="0.0382166;6pkt 6fpkt"];
1083--2219[label="0.00636943;1pkt 1fpkt"];
1083--2253[label="0.00636943;1pkt 1fpkt"];
1083--2267[label="0.00636943;1pkt 1fpkt"];
1083--2674[label="0.04;6pkt 6fpkt"];
1083--2684[label="0.0465116;6pkt 6fpkt"];
1083--2704[label="0.048;6pkt 6fpkt"];
1083--2713[label="0.0397351;6pkt 6fpkt"];
1083--2983[label="0.913793;53pkt 53fpkt"];
1083--3098[label="0.0127389;2pkt 2fpkt"];
1083--3425[label="0.0166667;1pkt 1fpkt"];
1083--3872[label="0.0402685;6pkt 6fpkt"];
1083--3896[label="0.0397351;6pkt 6fpkt"];
1083--4060[label="0.912281;52pkt 52fpkt"];
1083--4117[label="0.0127389;2pkt 2fpkt"];
1083--4298[label="0.0166667;1pkt 1fpkt"];
1083--4528[label="0.0402685;6pkt 6fpkt"];
1083--4614[label="0.913793;53pkt 53fpkt"];
2983--4060[label="1;57pkt 57fpkt"];
2983--4614[label="1;58pkt 58fpkt"];
4060--4614[label="1;57pkt 57fpkt"];
</description>
    <slice>
      <filter dst_ip="133.151.78.96" src_ip="31.33.46.129" src_port="80"/>
    </slice>
    <from sec="1063083601" usec="0"/>
    <to sec="1063084498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_676{
style=filled;
color=gray75;
3429[label="31.22.81.205;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4300[label="31.22.81.205;1pkt 1fpkt", shape=invtriangle, color=brown];
4725[label="31.22.81.205;1pkt 1fpkt", shape=invhouse, color=bisque];
stat676[shape=component, label=&lt;Rules:&lt;BR/&gt;{31.22.81.205:113, 208.173.34.161:45355}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 45355: (50%)&lt;BR/&gt; 113: (50%)&gt;];
}
3429--4300[label="1;1pkt 1fpkt"];
3429--4725[label="1;1pkt 1fpkt"];
4300--4725[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.173.34.161" dst_port="45355" src_ip="31.22.81.205" src_port="113"/>
    </slice>
    <from sec="1063083720" usec="0"/>
    <to sec="1063083779" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.185.178.206"/>
    </slice>
    <from sec="1063083612" usec="0"/>
    <to sec="1063084311" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,501,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_678{
style=filled;
color=gray75;
3435[label="153.0.9.207;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4304[label="153.0.9.207;13pkt 13fpkt", shape=invtriangle, color=brown];
4727[label="153.0.9.207;14pkt 14fpkt", shape=invhouse, color=bisque];
stat678[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.0.9.207:21, *:*}[50%]&lt;BR/&gt;{153.0.9.207:*, 38.4.194.92:*}[42.8571%]&lt;BR/&gt;{153.0.9.207:*, 65.128.232.136:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (25.6098%)&lt;BR/&gt; 20: (7.31707%)&lt;BR/&gt; 55161: (3.65854%)&lt;BR/&gt; 48920: (3.65854%)&lt;BR/&gt; 48916: (3.65854%)&gt;];
}
3435--4304[label="1;13pkt 13fpkt"];
3435--4727[label="1;14pkt 14fpkt"];
4304--4727[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="38.4.194.92" src_ip="153.0.9.207"/>
      <filter dst_ip="65.128.232.136" src_ip="153.0.9.207"/>
      <filter src_ip="153.0.9.207" src_port="21"/>
    </slice>
    <from sec="1063083693" usec="0"/>
    <to sec="1063084411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_679{
style=filled;
color=gray75;
3438[label="217.213.192.207;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4305[label="217.213.192.207;14pkt 14fpkt", shape=invtriangle, color=brown];
4728[label="217.213.192.207;14pkt 14fpkt", shape=invhouse, color=bisque];
stat679[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.213.192.207:443, 133.150.62.168:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1077: (3.57143%)&lt;BR/&gt; 1076: (3.57143%)&lt;BR/&gt; 1075: (3.57143%)&lt;BR/&gt; 1074: (3.57143%)&gt;];
}
3438--4305[label="1;14pkt 14fpkt"];
3438--4728[label="1;14pkt 14fpkt"];
4305--4728[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="133.150.62.168" src_ip="217.213.192.207" src_port="443"/>
    </slice>
    <from sec="1063083925" usec="0"/>
    <to sec="1063083935" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_680{
style=filled;
color=gray75;
3439[label="194.153.27.208;33pkt 33fpkt", shape=pentagon, color=darkviolet];
4306[label="194.153.27.208;32pkt 32fpkt", shape=invtriangle, color=brown];
4729[label="194.153.27.208;33pkt 33fpkt", shape=invhouse, color=bisque];
stat680[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.153.27.208:80, 153.0.74.1:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1148: (1.53061%)&lt;BR/&gt; 1147: (1.53061%)&lt;BR/&gt; 1146: (1.53061%)&lt;BR/&gt; 1145: (1.53061%)&gt;];
}
3439--4306[label="1;32pkt 32fpkt"];
3439--4729[label="1;33pkt 33fpkt"];
4306--4729[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="153.0.74.1" src_ip="194.153.27.208" src_port="80"/>
    </slice>
    <from sec="1063083620" usec="0"/>
    <to sec="1063083627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_681{
style=filled;
color=gray75;
3451[label="213.232.147.210;192pkt 192fpkt", shape=pentagon, color=darkviolet];
4310[label="213.232.147.210;191pkt 191fpkt", shape=invtriangle, color=brown];
4730[label="213.232.147.210;191pkt 191fpkt", shape=invhouse, color=bisque];
stat681[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.232.147.210:0, *:0}[94.7917%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.7735%)&lt;BR/&gt; 80: (2.61324%)&lt;BR/&gt; 63316: (0.261324%)&lt;BR/&gt; 62584: (0.261324%)&lt;BR/&gt; 60480: (0.261324%)&gt;];
}
3451--4310[label="1;191pkt 191fpkt"];
3451--4730[label="1;191pkt 191fpkt"];
4310--4730[label="0.994764;190pkt 190fpkt"];
</description>
    <slice>
      <filter src_ip="213.232.147.210"/>
    </slice>
    <from sec="1063083612" usec="0"/>
    <to sec="1063084482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_682{
style=filled;
color=gray75;
3458[label="84.127.191.211;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4315[label="84.127.191.211;2pkt 2fpkt", shape=invtriangle, color=brown];
stat682[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.127.191.211:0, 131.184.172.8:0}[33.3333%]&lt;BR/&gt;{84.127.191.211:0, 131.184.172.9:0}[33.3333%]&lt;BR/&gt;{84.127.191.211:0, 133.150.153.15:0}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3458--4315[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="133.150.153.15" src_ip="84.127.191.211"/>
      <filter dst_ip="131.184.172.9" src_ip="84.127.191.211"/>
      <filter dst_ip="131.184.172.8" src_ip="84.127.191.211"/>
    </slice>
    <from sec="1063083727" usec="0"/>
    <to sec="1063084470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_683{
style=filled;
color=gray75;
3460[label="208.173.34.212;51pkt 51fpkt", shape=pentagon, color=darkviolet];
4317[label="208.173.34.212;51pkt 51fpkt", shape=invtriangle, color=brown];
4733[label="208.173.34.212;51pkt 51fpkt", shape=invhouse, color=bisque];
stat683[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.173.34.212:80, *:*}[66.6667%]&lt;BR/&gt;{208.173.34.212:0, *:0}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 0: (33.3333%)&lt;BR/&gt; 65273: (0.980392%)&lt;BR/&gt; 64770: (0.980392%)&lt;BR/&gt; 64670: (0.980392%)&gt;];
}
3460--4317[label="1;51pkt 51fpkt"];
3460--4733[label="1;51pkt 51fpkt"];
4317--4733[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter src_ip="208.173.34.212" src_port="80"/>
      <filter src_ip="208.173.34.212"/>
    </slice>
    <from sec="1063083606" usec="0"/>
    <to sec="1063084496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_684{
style=filled;
color=gray75;
3466[label="65.155.190.213;18pkt 18fpkt", shape=pentagon, color=darkviolet];
4319[label="65.155.190.213;18pkt 18fpkt", shape=invtriangle, color=brown];
stat684[shape=component, label=&lt;Rules:&lt;BR/&gt;{65.155.190.213:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 2370: (2.77778%)&lt;BR/&gt; 2369: (2.77778%)&lt;BR/&gt; 2368: (2.77778%)&lt;BR/&gt; 2367: (2.77778%)&gt;];
}
3466--4319[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="65.155.190.213"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.200.9.214"/>
    </slice>
    <from sec="1063083758" usec="0"/>
    <to sec="1063084478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_686{
style=filled;
color=gray75;
3471[label="219.75.136.214;171pkt 171fpkt", shape=pentagon, color=darkviolet];
4322[label="219.75.136.214;171pkt 171fpkt", shape=invtriangle, color=brown];
4735[label="219.75.136.214;171pkt 171fpkt", shape=invhouse, color=bisque];
stat686[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.75.136.214:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 56862: (0.292398%)&lt;BR/&gt; 56858: (0.292398%)&lt;BR/&gt; 56854: (0.292398%)&lt;BR/&gt; 56850: (0.292398%)&gt;];
}
3471--4322[label="1;171pkt 171fpkt"];
3471--4735[label="1;171pkt 171fpkt"];
4322--4735[label="1;171pkt 171fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="219.75.136.214"/>
    </slice>
    <from sec="1063084467" usec="0"/>
    <to sec="1063084494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_688{
style=filled;
color=gray75;
3482[label="86.197.17.217;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4329[label="86.197.17.217;7pkt 7fpkt", shape=invtriangle, color=brown];
4739[label="86.197.17.217;7pkt 7fpkt", shape=invhouse, color=bisque];
stat688[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.197.17.217:80, 208.173.2.40:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 30389: (6.81818%)&lt;BR/&gt; 30267: (6.81818%)&lt;BR/&gt; 30179: (6.81818%)&lt;BR/&gt; 29976: (6.81818%)&gt;];
}
3482--4329[label="1;7pkt 7fpkt"];
3482--4739[label="1;7pkt 7fpkt"];
4329--4739[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="208.173.2.40" src_ip="86.197.17.217" src_port="80"/>
    </slice>
    <from sec="1063084432" usec="0"/>
    <to sec="1063084484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="65.25.6.218"/>
    </slice>
    <from sec="1063083601" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_690{
style=filled;
color=gray75;
3495[label="218.197.37.220;247pkt 247fpkt", shape=pentagon, color=darkviolet];
4338[label="218.197.37.220;246pkt 246fpkt", shape=invtriangle, color=brown];
4741[label="218.197.37.220;246pkt 246fpkt", shape=invhouse, color=bisque];
stat690[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.197.37.220:1032, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1032: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3495--4338[label="1;246pkt 246fpkt"];
3495--4741[label="1;246pkt 246fpkt"];
4338--4741[label="1;246pkt 246fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="218.197.37.220" src_port="1032"/>
    </slice>
    <from sec="1063084412" usec="0"/>
    <to sec="1063084451" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_691{
style=filled;
color=gray75;
3496[label="208.173.48.220;60pkt 60fpkt", shape=pentagon, color=darkviolet];
4339[label="208.173.48.220;60pkt 60fpkt", shape=invtriangle, color=brown];
stat691[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.173.48.220:0, *:0}[63.3333%]&lt;BR/&gt;{208.173.48.220:80, *:*}[21.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (63.3333%)&lt;BR/&gt; 80: (10.8333%)&lt;BR/&gt; 135: (3.33333%)&lt;BR/&gt; 53: (3.33333%)&lt;BR/&gt; 49887: (0.833333%)&gt;];
}
3496--4339[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter src_ip="208.173.48.220" src_port="80"/>
      <filter src_ip="208.173.48.220"/>
    </slice>
    <from sec="1063083629" usec="0"/>
    <to sec="1063084487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_694{
style=filled;
color=gray75;
3522[label="86.1.181.226;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4350[label="86.1.181.226;3pkt 3fpkt", shape=invtriangle, color=brown];
4744[label="86.1.181.226;3pkt 3fpkt", shape=invhouse, color=bisque];
stat694[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.1.181.226:80, 153.0.9.164:30219}[33.3333%]&lt;BR/&gt;{86.1.181.226:80, 153.0.9.164:30220}[33.3333%]&lt;BR/&gt;{86.1.181.226:80, 153.0.9.164:30221}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 30221: (16.6667%)&lt;BR/&gt; 30220: (16.6667%)&lt;BR/&gt; 30219: (16.6667%)&gt;];
}
3522--4350[label="1;3pkt 3fpkt"];
3522--4744[label="1;3pkt 3fpkt"];
4350--4744[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="153.0.9.164" dst_port="30221" src_ip="86.1.181.226" src_port="80"/>
      <filter dst_ip="153.0.9.164" dst_port="30220" src_ip="86.1.181.226" src_port="80"/>
      <filter dst_ip="153.0.9.164" dst_port="30219" src_ip="86.1.181.226" src_port="80"/>
    </slice>
    <from sec="1063084444" usec="0"/>
    <to sec="1063084460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="80.2.191.227"/>
    </slice>
    <from sec="1063083601" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_696{
style=filled;
color=gray75;
3532[label="131.53.74.228;291pkt 291fpkt", shape=pentagon, color=darkviolet];
4354[label="131.53.74.228;291pkt 291fpkt", shape=invtriangle, color=brown];
stat696[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.53.74.228:0, *:0}[99.6564%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.6564%)&lt;BR/&gt; 3391: (0.171821%)&lt;BR/&gt; 80: (0.171821%)&gt;];
}
3532--4354[label="1;291pkt 291fpkt"];
</description>
    <slice>
      <filter src_ip="131.53.74.228"/>
    </slice>
    <from sec="1063083604" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_698{
style=filled;
color=gray75;
3537[label="56.243.98.229;244pkt 244fpkt", shape=pentagon, color=darkviolet];
4357[label="56.243.98.229;244pkt 244fpkt", shape=invtriangle, color=brown];
stat698[shape=component, label=&lt;Rules:&lt;BR/&gt;{56.243.98.229:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3537--4357[label="1;244pkt 244fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="56.243.98.229" src_port="1027"/>
    </slice>
    <from sec="1063084234" usec="0"/>
    <to sec="1063084274" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_699{
style=filled;
color=gray75;
3538[label="86.72.112.229;44pkt 44fpkt", shape=pentagon, color=darkviolet];
4358[label="86.72.112.229;44pkt 44fpkt", shape=invtriangle, color=brown];
4747[label="86.72.112.229;44pkt 44fpkt", shape=invhouse, color=bisque];
stat699[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.72.112.229:80, 133.151.187.36:*}[95.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57835: (1.13636%)&lt;BR/&gt; 4752: (1.13636%)&lt;BR/&gt; 4751: (1.13636%)&lt;BR/&gt; 4749: (1.13636%)&gt;];
}
3538--4358[label="1;44pkt 44fpkt"];
3538--4747[label="1;44pkt 44fpkt"];
4358--4747[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="133.151.187.36" src_ip="86.72.112.229" src_port="80"/>
    </slice>
    <from sec="1063083630" usec="0"/>
    <to sec="1063084500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_700{
style=filled;
color=gray75;
3550[label="84.15.128.232;352pkt 352fpkt", shape=pentagon, color=darkviolet];
4363[label="84.15.128.232;351pkt 351fpkt", shape=invtriangle, color=brown];
4751[label="84.15.128.232;351pkt 351fpkt", shape=invhouse, color=bisque];
stat700[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.15.128.232:0, *:0}[97.4432%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.4383%)&lt;BR/&gt; 80: (1.13852%)&lt;BR/&gt; 49770: (0.142315%)&lt;BR/&gt; 49658: (0.142315%)&lt;BR/&gt; 45192: (0.142315%)&gt;];
}
3550--4363[label="1;351pkt 351fpkt"];
3550--4751[label="1;351pkt 351fpkt"];
4363--4751[label="1;351pkt 351fpkt"];
</description>
    <slice>
      <filter src_ip="84.15.128.232"/>
    </slice>
    <from sec="1063083605" usec="0"/>
    <to sec="1063084498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_701{
style=filled;
color=gray75;
3563[label="31.110.112.234;145pkt 145fpkt", shape=pentagon, color=darkviolet];
4368[label="31.110.112.234;145pkt 145fpkt", shape=invtriangle, color=brown];
stat701[shape=component, label=&lt;Rules:&lt;BR/&gt;{31.110.112.234:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3563--4368[label="1;145pkt 145fpkt"];
</description>
    <slice>
      <filter src_ip="31.110.112.234"/>
    </slice>
    <from sec="1063083602" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.5.142.234"/>
    </slice>
    <from sec="1063084253" usec="0"/>
    <to sec="1063084292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_704{
style=filled;
color=gray75;
3576[label="192.106.161.236;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4375[label="192.106.161.236;13pkt 13fpkt", shape=invtriangle, color=brown];
stat704[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.106.161.236:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3576--4375[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter src_ip="192.106.161.236"/>
    </slice>
    <from sec="1063083682" usec="0"/>
    <to sec="1063084484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.16.103.239"/>
    </slice>
    <from sec="1063083601" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="80.216.120.243"/>
    </slice>
    <from sec="1063083607" usec="0"/>
    <to sec="1063084497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_707{
style=filled;
color=gray75;
3616[label="86.182.44.244;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4396[label="86.182.44.244;5pkt 5fpkt", shape=invtriangle, color=brown];
4765[label="86.182.44.244;4pkt 4fpkt", shape=invhouse, color=bisque];
stat707[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.182.44.244:80, 131.184.76.65:57150}[20%]&lt;BR/&gt;{86.182.44.244:80, 133.150.122.18:1025}[20%]&lt;BR/&gt;{86.182.44.244:80, 133.150.122.18:1026}[20%]&lt;BR/&gt;{86.182.44.244:80, 131.184.75.64:1931}[20%]&lt;BR/&gt;{86.182.44.244:80, 131.184.75.64:1932}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57150: (10.7143%)&lt;BR/&gt; 1932: (10.7143%)&lt;BR/&gt; 1931: (10.7143%)&lt;BR/&gt; 1026: (10.7143%)&gt;];
}
3616--4396[label="1;5pkt 5fpkt"];
3616--4765[label="1;4pkt 4fpkt"];
4396--4765[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="131.184.75.64" dst_port="1932" src_ip="86.182.44.244" src_port="80"/>
      <filter dst_ip="131.184.75.64" dst_port="1931" src_ip="86.182.44.244" src_port="80"/>
      <filter dst_ip="133.150.122.18" dst_port="1026" src_ip="86.182.44.244" src_port="80"/>
      <filter dst_ip="133.150.122.18" dst_port="1025" src_ip="86.182.44.244" src_port="80"/>
      <filter dst_ip="131.184.76.65" dst_port="57150" src_ip="86.182.44.244" src_port="80"/>
    </slice>
    <from sec="1063083617" usec="0"/>
    <to sec="1063084231" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.478973,1.36786,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_709{
style=filled;
color=gray75;
3632[label="65.142.175.248;99pkt 99fpkt", shape=pentagon, color=darkviolet];
4400[label="65.142.175.248;98pkt 98fpkt", shape=invtriangle, color=brown];
stat709[shape=component, label=&lt;Rules:&lt;BR/&gt;{65.142.175.248:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 33996: (0.507614%)&lt;BR/&gt; 33993: (0.507614%)&lt;BR/&gt; 33989: (0.507614%)&lt;BR/&gt; 33986: (0.507614%)&gt;];
}
3632--4400[label="1;98pkt 98fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="65.142.175.248"/>
    </slice>
    <from sec="1063083601" usec="0"/>
    <to sec="1063083617" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.77.104.250"/>
    </slice>
    <from sec="1063084417" usec="0"/>
    <to sec="1063084428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.693969,1.38227,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_711{
style=filled;
color=gray75;
3639[label="205.247.133.250;184pkt 184fpkt", shape=pentagon, color=darkviolet];
4403[label="205.247.133.250;184pkt 184fpkt", shape=invtriangle, color=brown];
4771[label="205.247.133.250;183pkt 183fpkt", shape=invhouse, color=bisque];
stat711[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.247.133.250:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3639--4403[label="1;184pkt 184fpkt"];
3639--4771[label="1;183pkt 183fpkt"];
4403--4771[label="1;183pkt 183fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="205.247.133.250" src_port="1025"/>
    </slice>
    <from sec="1063083689" usec="0"/>
    <to sec="1063083718" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.2.1.255"/>
    </slice>
    <from sec="1063083601" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609559,1.42804,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="64.155.120.255"/>
    </slice>
    <from sec="1063083625" usec="0"/>
    <to sec="1063084495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746376,1.47091,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.42.193.0"/>
    </slice>
    <from sec="1063083985" usec="0"/>
    <to sec="1063084015" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746376,1.47091,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.232.94.2"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746376,1.47091,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="80.77.123.5"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746376,1.47091,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="206.68.190.34"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746376,1.47091,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="152.116.130.36"/>
    </slice>
    <from sec="1063083615" usec="0"/>
    <to sec="1063084473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746376,1.47091,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="153.0.97.54"/>
    </slice>
    <from sec="1063083693" usec="0"/>
    <to sec="1063084497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746376,1.47091,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.192.193.61"/>
    </slice>
    <from sec="1063083747" usec="0"/>
    <to sec="1063083756" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746376,1.47091,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.100.75.67"/>
    </slice>
    <from sec="1063084150" usec="0"/>
    <to sec="1063084168" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746376,1.47091,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.151.16.75"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746376,1.47091,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="153.0.198.82"/>
    </slice>
    <from sec="1063083611" usec="0"/>
    <to sec="1063084493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746376,1.47091,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="29.26.43.91"/>
    </slice>
    <from sec="1063083608" usec="0"/>
    <to sec="1063084489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746376,1.47091,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.66.114.94"/>
    </slice>
    <from sec="1063084234" usec="0"/>
    <to sec="1063084241" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746376,1.47091,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.243.30.102"/>
    </slice>
    <from sec="1063084304" usec="0"/>
    <to sec="1063084333" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746376,1.47091,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.211.50.110"/>
    </slice>
    <from sec="1063083601" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746376,1.47091,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="86.164.128.126"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644151,1.41257,503,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_730{
style=filled;
color=gray75;
3111[label="209.173.46.150;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4646[label="209.173.46.150;3pkt 3fpkt", shape=invhouse, color=bisque];
stat730[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.173.46.150:46923, 131.184.44.179:80}[33.3333%]&lt;BR/&gt;{209.173.46.150:47043, 131.184.44.179:80}[33.3333%]&lt;BR/&gt;{209.173.46.150:47219, 131.184.44.179:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 47219: (20%)&lt;BR/&gt; 47043: (20%)&lt;BR/&gt; 46923: (10%)&gt;];
}
3111--4646[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="131.184.44.179" dst_port="80" src_ip="209.173.46.150" src_port="47219"/>
      <filter dst_ip="131.184.44.179" dst_port="80" src_ip="209.173.46.150" src_port="47043"/>
      <filter dst_ip="131.184.44.179" dst_port="80" src_ip="209.173.46.150" src_port="46923"/>
    </slice>
    <from sec="1063084223" usec="0"/>
    <to sec="1063084240" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746376,1.47091,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="86.97.238.166"/>
    </slice>
    <from sec="1063084376" usec="0"/>
    <to sec="1063084434" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746376,1.47091,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.167.124.182"/>
    </slice>
    <from sec="1063083601" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746376,1.47091,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="29.149.201.183"/>
    </slice>
    <from sec="1063084152" usec="0"/>
    <to sec="1063084500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746376,1.47091,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.236.183.184"/>
    </slice>
    <from sec="1063084500" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746376,1.47091,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="38.25.75.193"/>
    </slice>
    <from sec="1063084331" usec="0"/>
    <to sec="1063084424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746376,1.47091,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.170.181.200"/>
    </slice>
    <from sec="1063084216" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746376,1.47091,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.202.138.226"/>
    </slice>
    <from sec="1063084048" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746376,1.47091,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="80.2.191.227"/>
    </slice>
    <from sec="1063083601" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746376,1.47091,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.5.142.231"/>
    </slice>
    <from sec="1063084295" usec="0"/>
    <to sec="1063084315" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746376,1.47091,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.5.142.234"/>
    </slice>
    <from sec="1063084253" usec="0"/>
    <to sec="1063084292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746376,1.47091,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="30.109.48.240"/>
    </slice>
    <from sec="1063083601" usec="0"/>
    <to sec="1063084501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746376,1.47091,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.200.96.240"/>
    </slice>
    <from sec="1063083602" usec="0"/>
    <to sec="1063084500" usec="0"/>
  </anomaly>

</admd:annotation>
