<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="0.863363,1.44108,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
    </slice>
    <from sec="48122112" usec="0"/>
    <to sec="96" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.863363,1.44108,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.863363,1.44108,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="160.206.50.44" dst_port="1861" proto="tcp" src_ip="220.66.241.142" src_port="1863"/>
      <from sec="1065762857" usec="0"/>
      <to sec="1065762884" usec="0"/>
    </slice>
    <from sec="1065762856" usec="0"/>
    <to sec="1065762884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.863363,1.44108,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="217.160.231.182" dst_port="80" proto="tcp" src_ip="160.243.168.167" src_port="1254"/>
      <filter dst_ip="217.160.231.182" dst_port="80" proto="udp" src_ip="160.243.168.167" src_port="1254"/>
      <filter dst_ip="217.160.231.182" dst_port="1434" proto="tcp" src_ip="160.243.168.167" src_port="1254"/>
      <filter dst_ip="217.160.231.182" dst_port="1434" proto="udp" src_ip="160.243.168.167" src_port="1254"/>
      <filter dst_ip="217.160.231.182" dst_port="80" proto="tcp" src_ip="160.243.168.167" src_port="1214"/>
      <filter dst_ip="217.160.231.182" dst_port="80" proto="udp" src_ip="160.243.168.167" src_port="1214"/>
      <filter dst_ip="217.160.231.182" dst_port="1434" proto="tcp" src_ip="160.243.168.167" src_port="1214"/>
      <filter dst_ip="217.160.231.182" dst_port="1434" proto="udp" src_ip="160.243.168.167" src_port="1214"/>
      <from sec="1065762653" usec="0"/>
      <to sec="1065762660" usec="0"/>
    </slice>
    <from sec="1065762653" usec="0"/>
    <to sec="1065762660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.863363,1.44108,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
      <filter proto="icmp"/>
      <filter proto="icmp"/>
      <filter proto="icmp"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.863363,1.44108,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
      <filter proto="icmp"/>
      <filter proto="icmp"/>
      <filter proto="icmp"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.863363,1.44108,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.863363,1.44108,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="34.206.129.124" src_port="1025"/>
      <from sec="1065762095" usec="0"/>
      <to sec="1065762106" usec="0"/>
    </slice>
    <from sec="1065762095" usec="0"/>
    <to sec="1065762106" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.863363,1.44108,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="160.206.33.149" dst_port="137" proto="tcp" src_ip="201.2.249.185" src_port="1029"/>
      <filter dst_ip="160.206.33.149" dst_port="137" proto="udp" src_ip="201.2.249.185" src_port="1029"/>
      <filter dst_ip="160.206.33.149" dst_port="80" proto="tcp" src_ip="201.2.249.185" src_port="1029"/>
      <filter dst_ip="160.206.33.149" dst_port="80" proto="udp" src_ip="201.2.249.185" src_port="1029"/>
      <from sec="1065762085" usec="0"/>
      <to sec="1065762088" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="160.206.33.149" dst_port="137" proto="tcp" src_ip="34.178.113.185" src_port="1029"/>
      <filter dst_ip="160.206.33.149" dst_port="137" proto="udp" src_ip="34.178.113.185" src_port="1029"/>
      <filter dst_ip="160.206.33.149" dst_port="80" proto="tcp" src_ip="34.178.113.185" src_port="1029"/>
      <filter dst_ip="160.206.33.149" dst_port="80" proto="udp" src_ip="34.178.113.185" src_port="1029"/>
      <from sec="1065762086" usec="0"/>
      <to sec="1065762088" usec="0"/>
    </slice>
    <from sec="1065762085" usec="0"/>
    <to sec="1065762088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.863363,1.44108,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="200.35.25.252" src_port="1025"/>
      <from sec="1065762738" usec="0"/>
      <to sec="1065762746" usec="0"/>
    </slice>
    <from sec="1065762738" usec="0"/>
    <to sec="1065762746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.863363,1.44108,504,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="194.28.43.52" dst_port="445" proto="tcp" src_ip="34.133.115.224"/>
      <filter dst_ip="194.28.43.52" dst_port="443" proto="tcp" src_ip="34.133.115.224"/>
      <from sec="1065762000" usec="0"/>
      <to sec="1065762031" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="194.28.43.52" dst_port="445" proto="tcp" src_ip="217.58.251.72"/>
      <filter dst_ip="194.28.43.52" dst_port="443" proto="tcp" src_ip="217.58.251.72"/>
      <from sec="1065762013" usec="0"/>
      <to sec="1065762018" usec="0"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762031" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.863363,1.44108,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="192.108.129.3" src_port="1028"/>
      <filter dst_port="137" proto="udp" src_ip="192.108.129.3" src_port="1028"/>
      <filter dst_port="137" proto="tcp" src_ip="192.108.129.3" src_port="1027"/>
      <filter dst_port="137" proto="udp" src_ip="192.108.129.3" src_port="1027"/>
      <filter dst_port="137" proto="tcp" src_ip="192.108.129.3" src_port="1033"/>
      <filter dst_port="137" proto="udp" src_ip="192.108.129.3" src_port="1033"/>
      <filter dst_port="137" proto="tcp" src_ip="192.108.129.3" src_port="1071"/>
      <filter dst_port="137" proto="udp" src_ip="192.108.129.3" src_port="1071"/>
      <from sec="1065762769" usec="0"/>
      <to sec="1065762776" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="34.48.170.235" src_port="1028"/>
      <filter dst_port="137" proto="udp" src_ip="34.48.170.235" src_port="1028"/>
      <filter dst_port="137" proto="tcp" src_ip="34.48.170.235" src_port="1027"/>
      <filter dst_port="137" proto="udp" src_ip="34.48.170.235" src_port="1027"/>
      <filter dst_port="137" proto="tcp" src_ip="34.48.170.235" src_port="1033"/>
      <filter dst_port="137" proto="udp" src_ip="34.48.170.235" src_port="1033"/>
      <filter dst_port="137" proto="tcp" src_ip="34.48.170.235" src_port="1071"/>
      <filter dst_port="137" proto="udp" src_ip="34.48.170.235" src_port="1071"/>
      <from sec="1065762769" usec="0"/>
      <to sec="1065762776" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="201.193.20.154" src_port="1028"/>
      <filter dst_port="137" proto="udp" src_ip="201.193.20.154" src_port="1028"/>
      <filter dst_port="137" proto="tcp" src_ip="201.193.20.154" src_port="1027"/>
      <filter dst_port="137" proto="udp" src_ip="201.193.20.154" src_port="1027"/>
      <filter dst_port="137" proto="tcp" src_ip="201.193.20.154" src_port="1033"/>
      <filter dst_port="137" proto="udp" src_ip="201.193.20.154" src_port="1033"/>
      <filter dst_port="137" proto="tcp" src_ip="201.193.20.154" src_port="1071"/>
      <filter dst_port="137" proto="udp" src_ip="201.193.20.154" src_port="1071"/>
      <from sec="1065762771" usec="0"/>
      <to sec="1065762776" usec="0"/>
    </slice>
    <from sec="1065762769" usec="0"/>
    <to sec="1065762776" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.649619,1.25615,901,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_44{
style=filled;
color=gray75;
322[label="151.41.45.92;d;15pkt 15fpkt", shape=diamond, color=yellow];
324[label="193.21.244.216;s;8pkt 8fpkt", shape=diamond, color=yellow];
3064[label="193.21.244.216;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3697[label="193.21.244.216;8pkt 8fpkt", shape=invtriangle, color=brown];
stat44[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.234.163.179:80, 151.41.45.92:*}[46.6667%]&lt;BR/&gt;{193.21.244.216:1503, 151.41.45.92:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1503: (15.3846%)&lt;BR/&gt; 0: (10.2564%)&lt;BR/&gt; 80: (8.97436%)&lt;BR/&gt; 49609: (5.12821%)&lt;BR/&gt; 49608: (5.12821%)&gt;];
}
322--324[label="1;8pkt 8fpkt"];
322--3064[label="1;8pkt 8fpkt"];
322--3697[label="1;8pkt 8fpkt"];
324--3064[label="1;8pkt 8fpkt"];
324--3697[label="1;8pkt 8fpkt"];
3064--3697[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="151.41.45.92" src_ip="193.21.244.216" src_port="1503"/>
      <filter dst_ip="151.41.45.92" src_ip="34.234.163.179" src_port="80"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.781888,1.2483,901,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_47{
style=filled;
color=gray75;
403[label="160.206.244.108;d;2pkt 2fpkt", shape=diamond, color=yellow];
404[label="196.68.241.21;s;2pkt 2fpkt", shape=diamond, color=yellow];
1425[label="196.68.241.21;s;2pkt 2fpkt", shape=hexagon, color=black];
2169[label="196.68.241.21;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat47[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.68.241.21:554, 160.206.244.108:2770}[50%]&lt;BR/&gt;{196.68.241.21:11254, 160.206.244.108:6972}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11254: (25%)&lt;BR/&gt; 6972: (25%)&lt;BR/&gt; 2770: (25%)&lt;BR/&gt; 554: (25%)&gt;];
}
403--404[label="1;2pkt 2fpkt"];
403--1425[label="1;2pkt 2fpkt"];
403--2169[label="1;2pkt 2fpkt"];
404--1425[label="1;2pkt 2fpkt"];
404--2169[label="1;2pkt 2fpkt"];
1425--2169[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="160.206.244.108" dst_port="6972" src_ip="196.68.241.21" src_port="11254"/>
      <filter dst_ip="160.206.244.108" dst_port="2770" src_ip="196.68.241.21" src_port="554"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702349,1.38617,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="217.58.248.246"/>
      <from sec="1065762000" usec="0"/>
      <to sec="1065762828" usec="0"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.649619,1.25615,901,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_49{
style=filled;
color=gray75;
453[label="137.101.88.12;d;1pkt 1fpkt", shape=diamond, color=yellow];
454[label="197.161.99.67;s;1pkt 1fpkt", shape=diamond, color=yellow];
2406[label="197.161.99.67;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3377[label="197.161.99.67;1pkt 1fpkt", shape=invtriangle, color=brown];
stat49[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.161.99.67:1836, 137.101.88.12:33402}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33402: (50%)&lt;BR/&gt; 1836: (50%)&gt;];
}
453--454[label="1;1pkt 1fpkt"];
453--2406[label="1;1pkt 1fpkt"];
453--3377[label="1;1pkt 1fpkt"];
454--2406[label="1;1pkt 1fpkt"];
454--3377[label="1;1pkt 1fpkt"];
2406--3377[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="137.101.88.12" dst_port="33402" src_ip="197.161.99.67" src_port="1836"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702349,1.38617,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_53{
style=filled;
color=gray75;
323[label="193.21.244.216;d;7pkt 7fpkt", shape=diamond, color=yellow];
565[label="151.41.45.92;s;10pkt 10fpkt", shape=diamond, color=yellow];
stat53[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.41.45.92:*, 193.21.244.216:1503}[30%]&lt;BR/&gt;{151.41.45.92:*, *:1863}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1503: (17.6471%)&lt;BR/&gt; 1863: (8.82353%)&lt;BR/&gt; 49609: (5.88235%)&lt;BR/&gt; 49608: (5.88235%)&lt;BR/&gt; 5015: (5.88235%)&gt;];
}
323--565[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_port="1863" src_ip="151.41.45.92"/>
      <filter dst_ip="193.21.244.216" dst_port="1503" src_ip="151.41.45.92"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.781888,1.2483,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_54{
style=filled;
color=gray75;
358[label="202.7.111.244;d;1pkt 1fpkt", shape=diamond, color=yellow];
574[label="151.41.194.103;s;1pkt 1fpkt", shape=diamond, color=yellow];
1468[label="151.41.194.103;s;1pkt 1fpkt", shape=hexagon, color=black];
2579[label="151.41.194.103;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat54[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.41.194.103:49282, 202.7.111.244:9002}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49282: (50%)&lt;BR/&gt; 9002: (50%)&gt;];
}
358--574[label="1;1pkt 1fpkt"];
358--1468[label="1;1pkt 1fpkt"];
358--2579[label="1;1pkt 1fpkt"];
574--1468[label="1;1pkt 1fpkt"];
574--2579[label="1;1pkt 1fpkt"];
1468--2579[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="202.7.111.244" dst_port="9002" src_ip="151.41.194.103" src_port="49282"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702349,1.38617,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="8.192.93.142"/>
      <from sec="1065762000" usec="0"/>
      <to sec="1065762828" usec="0"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702349,1.38617,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_57{
style=filled;
color=gray75;
624[label="217.58.244.84;s;2098pkt 2098fpkt", shape=diamond, color=yellow];
stat57[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.58.244.84:0, *:0}[99.714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.714%)&lt;BR/&gt; 80: (0.142993%)&lt;BR/&gt; 32450: (0.0238322%)&lt;BR/&gt; 4989: (0.0238322%)&lt;BR/&gt; 4983: (0.0238322%)&gt;];
}
624--2006[label="0.000476644;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="217.58.244.84"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.877619,1.34467,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_58{
style=filled;
color=gray75;
652[label="216.224.195.191;d;7pkt 7fpkt", shape=diamond, color=yellow];
653[label="196.82.34.189;s;6pkt 6fpkt", shape=diamond, color=yellow];
1451[label="196.82.34.189;s;6pkt 6fpkt", shape=hexagon, color=black];
stat58[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.82.34.189:*, 216.224.195.191:113}[28.5714%]&lt;BR/&gt;{196.82.34.189:20, 216.224.195.191:*}[28.5714%]&lt;BR/&gt;{196.82.34.189:21, 216.224.195.191:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (15.7895%)&lt;BR/&gt; 21: (15.7895%)&lt;BR/&gt; 20: (15.7895%)&lt;BR/&gt; 47717: (7.89474%)&lt;BR/&gt; 47716: (7.89474%)&gt;];
}
652--653[label="1;6pkt 6fpkt"];
652--1451[label="1;6pkt 6fpkt"];
653--1451[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="216.224.195.191" src_ip="196.82.34.189" src_port="21"/>
      <filter dst_ip="216.224.195.191" src_ip="196.82.34.189" src_port="20"/>
      <filter dst_ip="216.224.195.191" dst_port="113" src_ip="196.82.34.189"/>
    </slice>
    <from sec="1065762004" usec="0"/>
    <to sec="1065762719" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.781888,1.2483,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_60{
style=filled;
color=gray75;
702[label="160.206.33.54;d;174pkt 174fpkt", shape=diamond, color=yellow];
705[label="211.92.49.107;s;130pkt 130fpkt", shape=diamond, color=yellow];
1462[label="211.92.49.107;s;75pkt 75fpkt", shape=hexagon, color=black];
2599[label="211.92.49.107;252pkt 252fpkt", shape=pentagon, color=darkviolet];
stat60[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.92.49.107:80, 160.206.33.54:*}[85.1351%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2583: (0.316957%)&lt;BR/&gt; 3217: (0.237718%)&lt;BR/&gt; 3215: (0.237718%)&lt;BR/&gt; 3213: (0.237718%)&gt;];
}
702--705[label="1;130pkt 130fpkt"];
702--1462[label="0.0133333;1pkt 1fpkt"];
702--2006[label="0.00574713;1pkt 1fpkt"];
702--2599[label="0.747126;130pkt 130fpkt"];
705--1462[label="0.0133333;1pkt 1fpkt"];
705--2006[label="0.00769231;1pkt 1fpkt"];
705--2599[label="1;130pkt 130fpkt"];
1462--2006[label="0.08;6pkt 6fpkt"];
1462--2599[label="1;75pkt 75fpkt"];
</description>
    <slice>
      <filter dst_ip="160.206.33.54" src_ip="211.92.49.107" src_port="80"/>
    </slice>
    <from sec="1065762151" usec="0"/>
    <to sec="1065762682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702349,1.38617,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="217.58.241.143"/>
      <from sec="1065762000" usec="0"/>
      <to sec="1065762828" usec="0"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702349,1.38617,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="137.130.10.62"/>
      <from sec="1065762000" usec="0"/>
      <to sec="1065762828" usec="0"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702349,1.38617,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="34.132.176.131"/>
      <from sec="1065762194" usec="0"/>
      <to sec="1065762305" usec="0"/>
    </slice>
    <from sec="1065762194" usec="0"/>
    <to sec="1065762305" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.781888,1.2483,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_64{
style=filled;
color=gray75;
827[label="165.120.63.46;d;7pkt 7fpkt", shape=diamond, color=yellow];
828[label="202.87.113.209;s;6pkt 6fpkt", shape=diamond, color=yellow];
1510[label="165.120.63.46;d;6pkt 6fpkt", shape=hexagon, color=black];
3030[label="202.87.113.209;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat64[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.87.113.209:*, 165.120.63.46:25}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 43631: (8%)&lt;BR/&gt; 43630: (8%)&lt;BR/&gt; 43629: (8%)&lt;BR/&gt; 43628: (8%)&gt;];
}
827--828[label="1;6pkt 6fpkt"];
827--1510[label="1;6pkt 6fpkt"];
827--3030[label="1;6pkt 6fpkt"];
828--1510[label="1;6pkt 6fpkt"];
828--3030[label="1;6pkt 6fpkt"];
1510--3030[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="165.120.63.46" dst_port="25" src_ip="202.87.113.209"/>
    </slice>
    <from sec="1065762236" usec="0"/>
    <to sec="1065762425" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702349,1.38617,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="216.207.170.23"/>
      <from sec="1065762000" usec="0"/>
      <to sec="1065762824" usec="0"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702349,1.38617,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="217.58.250.51"/>
      <from sec="1065762000" usec="0"/>
      <to sec="1065762828" usec="0"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.877619,1.34467,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_67{
style=filled;
color=gray75;
732[label="201.26.35.16;s;2pkt 2fpkt", shape=diamond, color=yellow];
845[label="151.41.177.209;d;4pkt 4fpkt", shape=diamond, color=yellow];
1609[label="201.26.35.16;s;2pkt 2fpkt", shape=hexagon, color=black];
stat67[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.26.35.16:8754, 151.41.177.209:6970}[25%]&lt;BR/&gt;{201.26.35.16:16588, 151.41.177.209:6970}[25%]&lt;BR/&gt;{201.26.35.26:554, 151.41.177.209:4840}[25%]&lt;BR/&gt;{201.26.35.26:554, 151.41.177.209:4855}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6970: (37.5%)&lt;BR/&gt; 16588: (18.75%)&lt;BR/&gt; 8754: (18.75%)&lt;BR/&gt; 554: (12.5%)&lt;BR/&gt; 4855: (6.25%)&gt;];
}
732--845[label="1;2pkt 2fpkt"];
732--1609[label="1;2pkt 2fpkt"];
845--1609[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="151.41.177.209" dst_port="4855" src_ip="201.26.35.26" src_port="554"/>
      <filter dst_ip="151.41.177.209" dst_port="4840" src_ip="201.26.35.26" src_port="554"/>
      <filter dst_ip="151.41.177.209" dst_port="6970" src_ip="201.26.35.16" src_port="16588"/>
      <filter dst_ip="151.41.177.209" dst_port="6970" src_ip="201.26.35.16" src_port="8754"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702349,1.38617,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="210.7.131.120"/>
      <from sec="1065762000" usec="0"/>
      <to sec="1065762827" usec="0"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702349,1.38617,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_73{
style=filled;
color=gray75;
1044[label="216.207.172.216;d;136pkt 136fpkt", shape=diamond, color=yellow];
stat73[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 216.207.172.216:0}[95.5882%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.5882%)&lt;BR/&gt; 80: (2.20588%)&lt;BR/&gt; 61455: (0.367647%)&lt;BR/&gt; 53847: (0.367647%)&lt;BR/&gt; 52554: (0.367647%)&gt;];
}
1044--1999[label="0.00735294;1pkt 1fpkt"];
1044--2030[label="0.00735294;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="216.207.172.216"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.781888,1.2483,901,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_74{
style=filled;
color=gray75;
587[label="151.41.240.194;d;719pkt 719fpkt", shape=diamond, color=yellow];
640[label="8.230.45.37;s;1pkt 1fpkt", shape=diamond, color=yellow];
955[label="165.120.4.119;d;156pkt 156fpkt", shape=diamond, color=yellow];
1048[label="202.10.188.168;s;1pkt 1fpkt", shape=diamond, color=yellow];
1445[label="8.230.45.37;s;1pkt 1fpkt", shape=hexagon, color=black];
1625[label="165.120.4.119;d;156pkt 156fpkt", shape=hexagon, color=black];
1701[label="202.10.188.168;s;1pkt 1fpkt", shape=hexagon, color=black];
2748[label="91.70.60.141;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2895[label="90.116.211.175;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3158[label="202.87.64.243;9pkt 9fpkt", shape=pentagon, color=darkviolet];
stat74[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 151.41.240.194:3531}[65.5443%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3531: (27.8928%)&lt;BR/&gt; 53: (13.9229%)&lt;BR/&gt; 0: (3.95108%)&lt;BR/&gt; 1071: (3.10442%)&lt;BR/&gt; 25: (0.940734%)&gt;];
}
587--640[label="1;1pkt 1fpkt"];
587--1445[label="1;1pkt 1fpkt"];
587--2007[label="0.00139082;1pkt 1fpkt"];
587--2895[label="1;8pkt 8fpkt"];
587--3158[label="0.111111;1pkt 1fpkt"];
640--1445[label="1;1pkt 1fpkt"];
955--1048[label="1;1pkt 1fpkt"];
955--1625[label="1;156pkt 156fpkt"];
955--1701[label="1;1pkt 1fpkt"];
955--2748[label="0.181818;2pkt 2fpkt"];
955--3158[label="0.111111;1pkt 1fpkt"];
1048--1625[label="1;1pkt 1fpkt"];
1048--1701[label="1;1pkt 1fpkt"];
1625--1701[label="1;1pkt 1fpkt"];
1625--2748[label="0.181818;2pkt 2fpkt"];
1625--3158[label="0.111111;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="151.41.240.194" dst_port="3531"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.781888,1.2483,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_76{
style=filled;
color=gray75;
1060[label="216.207.174.146;s;56pkt 56fpkt", shape=diamond, color=yellow];
1079[label="70.195.0.151;d;1pkt 1fpkt", shape=diamond, color=yellow];
1720[label="70.195.0.151;d;1pkt 1fpkt", shape=hexagon, color=black];
2775[label="216.207.174.146;61pkt 61fpkt", shape=pentagon, color=darkviolet];
stat76[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.207.174.146:0, *:0}[90.3226%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (91.5966%)&lt;BR/&gt; 80: (2.52101%)&lt;BR/&gt; 135: (1.68067%)&lt;BR/&gt; 4042: (0.840336%)&lt;BR/&gt; 3227: (0.840336%)&gt;];
}
1060--1079[label="1;1pkt 1fpkt"];
1060--1720[label="1;1pkt 1fpkt"];
1060--2006[label="0.0178571;1pkt 1fpkt"];
1060--2775[label="0.982143;55pkt 55fpkt"];
1079--1720[label="1;1pkt 1fpkt"];
1079--2775[label="1;1pkt 1fpkt"];
1720--2775[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="216.207.174.146"/>
    </slice>
    <from sec="1065762006" usec="0"/>
    <to sec="1065762900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702349,1.38617,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_77{
style=filled;
color=gray75;
1091[label="143.234.143.161;d;8pkt 8fpkt", shape=diamond, color=yellow];
1092[label="216.128.146.17;s;8pkt 8fpkt", shape=diamond, color=yellow];
stat77[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.128.146.17:80, 143.234.143.161:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1801: (6.25%)&lt;BR/&gt; 1800: (6.25%)&lt;BR/&gt; 1799: (6.25%)&lt;BR/&gt; 1798: (6.25%)&gt;];
}
1091--1092[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="143.234.143.161" src_ip="216.128.146.17" src_port="80"/>
    </slice>
    <from sec="1065762394" usec="0"/>
    <to sec="1065762555" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702349,1.38617,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="217.58.236.122"/>
      <from sec="1065762000" usec="0"/>
      <to sec="1065762828" usec="0"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702349,1.38617,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="216.207.189.83"/>
      <from sec="1065762000" usec="0"/>
      <to sec="1065762825" usec="0"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702349,1.38617,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_82{
style=filled;
color=gray75;
1195[label="217.54.170.145;d;1pkt 1fpkt", shape=diamond, color=yellow];
1196[label="70.157.42.8;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat82[shape=component, label=&lt;Rules:&lt;BR/&gt;{70.157.42.8:6699, 217.54.170.145:1587}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1587: (50%)&gt;];
}
1195--1196[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="217.54.170.145" dst_port="1587" src_ip="70.157.42.8" src_port="6699"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702349,1.38617,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_83{
style=filled;
color=gray75;
1203[label="155.169.4.162;s;520pkt 520fpkt", shape=diamond, color=yellow];
stat83[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.169.4.162:0, *:0}[97.1154%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.1154%)&lt;BR/&gt; 80: (1.44231%)&lt;BR/&gt; 36093: (0.0961538%)&lt;BR/&gt; 33955: (0.0961538%)&lt;BR/&gt; 32810: (0.0961538%)&gt;];
}
1203--1988[label="0.00384615;2pkt 2fpkt"];
1203--1999[label="0.00192308;1pkt 1fpkt"];
1203--2019[label="0.00384615;2pkt 2fpkt"];
1203--2030[label="0.00192308;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="155.169.4.162"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.781888,1.2483,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_84{
style=filled;
color=gray75;
443[label="165.120.48.144;d;6pkt 6fpkt", shape=diamond, color=yellow];
444[label="216.87.228.228;s;2pkt 2fpkt", shape=diamond, color=yellow];
1234[label="209.90.25.227;s;4pkt 4fpkt", shape=diamond, color=yellow];
1391[label="165.120.48.144;d;6pkt 6fpkt", shape=hexagon, color=black];
1598[label="216.87.228.228;s;2pkt 2fpkt", shape=hexagon, color=black];
3115[label="216.87.228.228;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat84[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.90.25.227:873, 165.120.48.144:*}[66.6667%]&lt;BR/&gt;{216.87.228.228:873, 165.120.48.144:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 873: (50%)&lt;BR/&gt; 32999: (11.3636%)&lt;BR/&gt; 32959: (11.3636%)&lt;BR/&gt; 33760: (6.81818%)&lt;BR/&gt; 33735: (6.81818%)&gt;];
}
443--444[label="1;2pkt 2fpkt"];
443--1234[label="1;4pkt 4fpkt"];
443--1391[label="1;6pkt 6fpkt"];
443--1598[label="1;2pkt 2fpkt"];
443--3115[label="1;2pkt 2fpkt"];
444--1391[label="1;2pkt 2fpkt"];
444--1598[label="1;2pkt 2fpkt"];
444--3115[label="1;2pkt 2fpkt"];
1234--1391[label="1;4pkt 4fpkt"];
1391--1598[label="1;2pkt 2fpkt"];
1391--3115[label="1;2pkt 2fpkt"];
1598--3115[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="165.120.48.144" src_ip="209.90.25.227" src_port="873"/>
      <filter dst_ip="165.120.48.144" src_ip="216.87.228.228" src_port="873"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702349,1.38617,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_86{
style=filled;
color=gray75;
1189[label="165.120.25.158;d;68pkt 68fpkt", shape=diamond, color=yellow];
1273[label="214.138.128.149;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat86[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.152.196.176:53, 165.120.25.158:*}[89.8551%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (44.2857%)&lt;BR/&gt; 21: (2.14286%)&lt;BR/&gt; 6667: (1.42857%)&lt;BR/&gt; 6665: (1.42857%)&lt;BR/&gt; 1403: (1.42857%)&gt;];
}
1189--1273[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="165.120.25.158" src_ip="220.152.196.176" src_port="53"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702349,1.38617,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="194.42.139.149"/>
      <from sec="1065762001" usec="0"/>
      <to sec="1065762826" usec="0"/>
    </slice>
    <from sec="1065762001" usec="0"/>
    <to sec="1065762826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702349,1.38617,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_88{
style=filled;
color=gray75;
1128[label="91.70.32.29;s;95pkt 95fpkt", shape=diamond, color=yellow];
1284[label="165.120.24.175;d;81pkt 81fpkt", shape=diamond, color=yellow];
1310[label="165.120.13.87;d;89pkt 89fpkt", shape=diamond, color=yellow];
stat88[shape=component, label=&lt;Rules:&lt;BR/&gt;{91.70.32.29:25, 165.120.13.87:*}[28.8235%]&lt;BR/&gt;{91.70.32.29:25, 165.120.24.175:*}[27.0588%]&lt;BR/&gt;{91.70.32.40:25, 165.120.13.87:*}[23.5294%]&lt;BR/&gt;{91.70.32.40:25, 165.120.24.175:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.8113%)&lt;BR/&gt; 61357: (0.377358%)&lt;BR/&gt; 61352: (0.377358%)&lt;BR/&gt; 61347: (0.377358%)&lt;BR/&gt; 61345: (0.377358%)&gt;];
}
1128--1284[label="0.567901;46pkt 46fpkt"];
1128--1310[label="0.550562;49pkt 49fpkt"];
</description>
    <slice>
      <filter dst_ip="165.120.13.87" src_ip="91.70.32.29" src_port="25"/>
      <filter dst_ip="165.120.24.175" src_ip="91.70.32.29" src_port="25"/>
      <filter dst_ip="165.120.13.87" src_ip="91.70.32.40" src_port="25"/>
      <filter dst_ip="165.120.24.175" src_ip="91.70.32.40" src_port="25"/>
    </slice>
    <from sec="1065762002" usec="0"/>
    <to sec="1065762828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702349,1.38617,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="10.131.13.198"/>
      <from sec="1065762770" usec="0"/>
      <to sec="1065762826" usec="0"/>
    </slice>
    <from sec="1065762770" usec="0"/>
    <to sec="1065762826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.702349,1.38617,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="216.165.75.72"/>
      <from sec="1065762779" usec="0"/>
      <to sec="1065762820" usec="0"/>
    </slice>
    <from sec="1065762779" usec="0"/>
    <to sec="1065762820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.877619,1.34467,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_102{
style=filled;
color=gray75;
699[label="10.141.42.133;s;9256pkt 9256fpkt", shape=diamond, color=yellow];
1461[label="10.141.42.133;s;9256pkt 9256fpkt", shape=hexagon, color=black];
stat102[shape=component, label=&lt;Rules:&lt;BR/&gt;{10.141.42.133:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
699--1461[label="1;9256pkt 9256fpkt"];
</description>
    <slice>
      <filter src_ip="10.141.42.133"/>
    </slice>
    <from sec="1065762121" usec="0"/>
    <to sec="1065762828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.877619,1.34467,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_105{
style=filled;
color=gray75;
632[label="155.169.4.160;s;2330pkt 2330fpkt", shape=diamond, color=yellow];
1485[label="155.169.4.160;s;2107pkt 2107fpkt", shape=hexagon, color=black];
stat105[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.169.4.160:0, *:0}[96.5665%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.5968%)&lt;BR/&gt; 80: (1.7016%)&lt;BR/&gt; 65152: (0.0225378%)&lt;BR/&gt; 64956: (0.0225378%)&lt;BR/&gt; 64781: (0.0225378%)&gt;];
}
632--728[label="0.010929;2pkt 2fpkt"];
632--1485[label="1;2107pkt 2107fpkt"];
632--1988[label="0.00494382;11pkt 11fpkt"];
632--1999[label="0.00231481;5pkt 5fpkt"];
632--2019[label="0.00494382;11pkt 11fpkt"];
632--2030[label="0.00231589;5pkt 5fpkt"];
1485--1988[label="0.00522069;11pkt 11fpkt"];
1485--1999[label="0.00237304;5pkt 5fpkt"];
1485--2019[label="0.00522069;11pkt 11fpkt"];
1485--2030[label="0.00237304;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="155.169.4.160"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.877619,1.34467,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_106{
style=filled;
color=gray75;
518[label="10.141.41.57;s;3003pkt 3003fpkt", shape=diamond, color=yellow];
1491[label="10.141.41.57;s;3003pkt 3003fpkt", shape=hexagon, color=black];
stat106[shape=component, label=&lt;Rules:&lt;BR/&gt;{10.141.41.57:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
518--1491[label="1;3003pkt 3003fpkt"];
</description>
    <slice>
      <filter src_ip="10.141.41.57"/>
    </slice>
    <from sec="1065762001" usec="0"/>
    <to sec="1065762211" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.877619,1.34467,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_107{
style=filled;
color=gray75;
707[label="137.130.5.230;d;407pkt 407fpkt", shape=diamond, color=yellow];
1515[label="137.130.5.230;d;407pkt 407fpkt", shape=hexagon, color=black];
stat107[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 137.130.5.230:25}[99.2629%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.6314%)&lt;BR/&gt; 0: (0.737101%)&lt;BR/&gt; 63718: (0.2457%)&lt;BR/&gt; 4158: (0.2457%)&lt;BR/&gt; 3820: (0.2457%)&gt;];
}
707--1515[label="1;407pkt 407fpkt"];
</description>
    <slice>
      <filter dst_ip="137.130.5.230" dst_port="25"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.877619,1.34467,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_109{
style=filled;
color=gray75;
842[label="220.168.19.137;s;76pkt 76fpkt", shape=diamond, color=yellow];
1199[label="216.224.192.188;d;4pkt 4fpkt", shape=diamond, color=yellow];
1538[label="220.168.19.137;s;53pkt 53fpkt", shape=hexagon, color=black];
stat109[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.168.19.137:110, *:*}[97.4359%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (49.2481%)&lt;BR/&gt; 2694: (1.12782%)&lt;BR/&gt; 2047: (1.12782%)&lt;BR/&gt; 4159: (0.75188%)&lt;BR/&gt; 4157: (0.75188%)&gt;];
}
842--1199[label="0.5;2pkt 2fpkt"];
842--1538[label="1;53pkt 53fpkt"];
1199--1538[label="0.25;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="220.168.19.137" src_port="110"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.877619,1.34467,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_112{
style=filled;
color=gray75;
362[label="165.120.29.138;d;19pkt 19fpkt", shape=diamond, color=yellow];
576[label="8.212.109.83;s;1pkt 1fpkt", shape=diamond, color=yellow];
749[label="71.18.67.185;s;1pkt 1fpkt", shape=diamond, color=yellow];
754[label="129.181.94.112;s;1pkt 1fpkt", shape=diamond, color=yellow];
1287[label="8.230.55.46;s;1pkt 1fpkt", shape=diamond, color=yellow];
1517[label="165.120.29.138;d;11pkt 11fpkt", shape=hexagon, color=black];
1545[label="129.181.94.112;s;1pkt 1fpkt", shape=hexagon, color=black];
1590[label="8.212.109.83;s;1pkt 1fpkt", shape=hexagon, color=black];
stat112[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.21.156.101:*, 165.120.29.138:36561}[26.3158%]&lt;BR/&gt;{*:6882, 165.120.29.138:*}[26.3158%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 36561: (9.72222%)&lt;BR/&gt; 6882: (9.72222%)&lt;BR/&gt; 6881: (9.72222%)&lt;BR/&gt; 37922: (5.55556%)&lt;BR/&gt; 36850: (5.55556%)&gt;];
}
362--576[label="1;1pkt 1fpkt"];
362--749[label="1;1pkt 1fpkt"];
362--754[label="1;1pkt 1fpkt"];
362--1287[label="1;1pkt 1fpkt"];
362--1517[label="1;11pkt 11fpkt"];
362--1545[label="1;1pkt 1fpkt"];
362--1590[label="1;1pkt 1fpkt"];
576--1517[label="1;1pkt 1fpkt"];
576--1590[label="1;1pkt 1fpkt"];
749--1517[label="1;1pkt 1fpkt"];
754--1517[label="1;1pkt 1fpkt"];
754--1545[label="1;1pkt 1fpkt"];
1287--1517[label="1;1pkt 1fpkt"];
1517--1545[label="1;1pkt 1fpkt"];
1517--1590[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="165.120.29.138" src_port="6882"/>
      <filter dst_ip="165.120.29.138" dst_port="36561" src_ip="203.21.156.101"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.877619,1.34467,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_113{
style=filled;
color=gray75;
761[label="137.130.5.243;d;415pkt 415fpkt", shape=diamond, color=yellow];
1546[label="137.130.5.243;d;198pkt 198fpkt", shape=hexagon, color=black];
stat113[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 137.130.5.243:25}[98.7952%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.2659%)&lt;BR/&gt; 0: (1.46819%)&lt;BR/&gt; 39766: (0.326264%)&lt;BR/&gt; 2975: (0.326264%)&lt;BR/&gt; 63668: (0.244698%)&gt;];
}
761--1546[label="1;198pkt 198fpkt"];
</description>
    <slice>
      <filter dst_ip="137.130.5.243" dst_port="25"/>
    </slice>
    <from sec="1065762001" usec="0"/>
    <to sec="1065762827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.877619,1.34467,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_117{
style=filled;
color=gray75;
549[label="89.10.224.25;s;17pkt 17fpkt", shape=diamond, color=yellow];
1565[label="89.10.224.25;s;17pkt 17fpkt", shape=hexagon, color=black];
stat117[shape=component, label=&lt;Rules:&lt;BR/&gt;{89.10.224.25:80, 137.157.87.8:*}[47.0588%]&lt;BR/&gt;{89.10.224.25:80, 143.234.139.216:*}[29.4118%]&lt;BR/&gt;{89.10.224.25:80, 143.234.189.105:*}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3991: (2.94118%)&lt;BR/&gt; 3989: (2.94118%)&lt;BR/&gt; 3987: (2.94118%)&lt;BR/&gt; 3985: (2.94118%)&gt;];
}
549--1565[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="137.157.87.8" src_ip="89.10.224.25" src_port="80"/>
      <filter dst_ip="143.234.139.216" src_ip="89.10.224.25" src_port="80"/>
      <filter dst_ip="143.234.189.105" src_ip="89.10.224.25" src_port="80"/>
    </slice>
    <from sec="1065762745" usec="0"/>
    <to sec="1065762824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.877619,1.34467,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_121{
style=filled;
color=gray75;
510[label="10.141.41.88;s;10793pkt 10793fpkt", shape=diamond, color=yellow];
1622[label="10.141.41.88;s;6235pkt 6235fpkt", shape=hexagon, color=black];
stat121[shape=component, label=&lt;Rules:&lt;BR/&gt;{10.141.41.88:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
510--1622[label="1;6235pkt 6235fpkt"];
</description>
    <slice>
      <filter src_ip="10.141.41.88"/>
    </slice>
    <from sec="1065762001" usec="0"/>
    <to sec="1065762828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.877619,1.34467,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_126{
style=filled;
color=gray75;
740[label="210.7.131.123;d;62pkt 62fpkt", shape=diamond, color=yellow];
767[label="210.7.131.124;d;132pkt 132fpkt", shape=diamond, color=yellow];
1297[label="192.227.152.78;s;4pkt 4fpkt", shape=diamond, color=yellow];
1623[label="210.7.131.124;d;94pkt 94fpkt", shape=hexagon, color=black];
1684[label="210.7.131.123;d;62pkt 62fpkt", shape=hexagon, color=black];
1893[label="192.227.152.78;s;4pkt 4fpkt", shape=hexagon, color=black];
stat126[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 210.7.131.123:*}[31.9588%]&lt;BR/&gt;{217.154.2.126:*, 210.7.131.124:6667}[23.1959%]&lt;BR/&gt;{217.154.2.126:113, 210.7.131.124:*}[23.1959%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (19.4134%)&lt;BR/&gt; 113: (10.7542%)&lt;BR/&gt; 6664: (3.35196%)&lt;BR/&gt; 6663: (3.35196%)&lt;BR/&gt; 6660: (3.35196%)&gt;];
}
740--1297[label="0.25;1pkt 1fpkt"];
740--1684[label="1;62pkt 62fpkt"];
740--1893[label="0.25;1pkt 1fpkt"];
767--1297[label="0.75;3pkt 3fpkt"];
767--1623[label="1;94pkt 94fpkt"];
767--1893[label="0.75;3pkt 3fpkt"];
767--2007[label="0.00757576;1pkt 1fpkt"];
1297--1623[label="0.75;3pkt 3fpkt"];
1297--1684[label="0.25;1pkt 1fpkt"];
1297--1893[label="1;4pkt 4fpkt"];
1623--1893[label="0.75;3pkt 3fpkt"];
1623--2007[label="0.0106383;1pkt 1fpkt"];
1684--1893[label="0.25;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.7.131.123"/>
      <filter dst_ip="210.7.131.124" src_ip="217.154.2.126" src_port="113"/>
      <filter dst_ip="210.7.131.124" dst_port="6667" src_ip="217.154.2.126"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.877619,1.34467,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
753[label="217.58.250.48;s;936pkt 936fpkt", shape=diamond, color=yellow];
1690[label="217.58.250.48;s;648pkt 648fpkt", shape=hexagon, color=black];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.58.250.48:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
753--1690[label="1;648pkt 648fpkt"];
</description>
    <slice>
      <filter src_ip="217.58.250.48"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.877619,1.34467,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_131{
style=filled;
color=gray75;
871[label="220.66.241.156;s;2pkt 2fpkt", shape=diamond, color=yellow];
1716[label="220.66.241.156;s;2pkt 2fpkt", shape=hexagon, color=black];
stat131[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.66.241.156:1863, 137.157.139.24:1093}[50%]&lt;BR/&gt;{220.66.241.156:1863, 137.157.141.88:2020}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 2020: (25%)&lt;BR/&gt; 1093: (25%)&gt;];
}
871--1716[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="137.157.141.88" dst_port="2020" src_ip="220.66.241.156" src_port="1863"/>
      <filter dst_ip="137.157.139.24" dst_port="1093" src_ip="220.66.241.156" src_port="1863"/>
    </slice>
    <from sec="1065762013" usec="0"/>
    <to sec="1065762390" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.877619,1.34467,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_132{
style=filled;
color=gray75;
570[label="137.130.38.183;d;165pkt 165fpkt", shape=diamond, color=yellow];
1731[label="137.130.38.183;d;146pkt 146fpkt", shape=hexagon, color=black];
stat132[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 137.130.38.183:3681}[37.5758%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3681: (19.1318%)&lt;BR/&gt; 3531: (12.3794%)&lt;BR/&gt; 1214: (3.21543%)&lt;BR/&gt; 2005: (2.57235%)&lt;BR/&gt; 0: (2.57235%)&gt;];
}
570--1731[label="1;146pkt 146fpkt"];
</description>
    <slice>
      <filter dst_ip="137.130.38.183" dst_port="3681"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.877619,1.34467,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_134{
style=filled;
color=gray75;
1113[label="220.66.241.197;s;6pkt 6fpkt", shape=diamond, color=yellow];
1734[label="220.66.241.197;s;6pkt 6fpkt", shape=hexagon, color=black];
stat134[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.66.241.197:1863, 137.157.140.3:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 37687: (8.33333%)&lt;BR/&gt; 3045: (8.33333%)&lt;BR/&gt; 2234: (8.33333%)&lt;BR/&gt; 1649: (8.33333%)&gt;];
}
1113--1734[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="137.157.140.3" src_ip="220.66.241.197" src_port="1863"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.877619,1.34467,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_135{
style=filled;
color=gray75;
967[label="151.41.15.104;s;54pkt 54fpkt", shape=diamond, color=yellow];
1759[label="151.41.15.104;s;50pkt 50fpkt", shape=hexagon, color=black];
stat135[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.41.15.104:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 63585: (0.961538%)&lt;BR/&gt; 60527: (0.961538%)&lt;BR/&gt; 57828: (0.961538%)&lt;BR/&gt; 55907: (0.961538%)&gt;];
}
967--1759[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter src_ip="151.41.15.104" src_port="25"/>
    </slice>
    <from sec="1065762005" usec="0"/>
    <to sec="1065762825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.877619,1.34467,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_136{
style=filled;
color=gray75;
1008[label="10.141.41.58;s;6102pkt 6102fpkt", shape=diamond, color=yellow];
1771[label="10.141.41.58;s;6102pkt 6102fpkt", shape=hexagon, color=black];
stat136[shape=component, label=&lt;Rules:&lt;BR/&gt;{10.141.41.58:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1008--1771[label="1;6102pkt 6102fpkt"];
</description>
    <slice>
      <filter src_ip="10.141.41.58"/>
    </slice>
    <from sec="1065762359" usec="0"/>
    <to sec="1065762828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.877619,1.34467,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_137{
style=filled;
color=gray75;
832[label="91.12.146.141;s;879pkt 879fpkt", shape=diamond, color=yellow];
1785[label="91.12.146.141;s;846pkt 846fpkt", shape=hexagon, color=black];
stat137[shape=component, label=&lt;Rules:&lt;BR/&gt;{91.12.146.141:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
832--1785[label="1;846pkt 846fpkt"];
</description>
    <slice>
      <filter src_ip="91.12.146.141"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.781888,1.2483,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_139{
style=filled;
color=gray75;
1116[label="162.234.44.59;s;189pkt 189fpkt", shape=diamond, color=yellow];
1795[label="162.234.44.59;s;156pkt 156fpkt", shape=hexagon, color=black];
2374[label="162.234.44.59;208pkt 208fpkt", shape=pentagon, color=darkviolet];
stat139[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.234.44.59:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1116--1795[label="1;156pkt 156fpkt"];
1116--2374[label="1;189pkt 189fpkt"];
1795--2374[label="1;156pkt 156fpkt"];
</description>
    <slice>
      <filter src_ip="162.234.44.59"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.781888,1.2483,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_140{
style=filled;
color=gray75;
604[label="203.201.25.42;s;1102pkt 1102fpkt", shape=diamond, color=yellow];
1798[label="203.201.25.42;s;1102pkt 1102fpkt", shape=hexagon, color=black];
2278[label="203.201.25.42;1200pkt 1200fpkt", shape=pentagon, color=darkviolet];
stat140[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.201.25.42:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
604--1798[label="1;1102pkt 1102fpkt"];
604--2278[label="1;1102pkt 1102fpkt"];
1798--2278[label="1;1102pkt 1102fpkt"];
</description>
    <slice>
      <filter src_ip="203.201.25.42"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.877619,1.34467,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_141{
style=filled;
color=gray75;
471[label="10.141.42.136;s;3627pkt 3627fpkt", shape=diamond, color=yellow];
1806[label="10.141.42.136;s;3186pkt 3186fpkt", shape=hexagon, color=black];
stat141[shape=component, label=&lt;Rules:&lt;BR/&gt;{10.141.42.136:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
471--1806[label="1;3186pkt 3186fpkt"];
</description>
    <slice>
      <filter src_ip="10.141.42.136"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.877619,1.34467,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_147{
style=filled;
color=gray75;
1011[label="10.141.41.123;s;6048pkt 6048fpkt", shape=diamond, color=yellow];
1855[label="10.141.41.123;s;4526pkt 4526fpkt", shape=hexagon, color=black];
stat147[shape=component, label=&lt;Rules:&lt;BR/&gt;{10.141.41.123:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1011--1855[label="1;4526pkt 4526fpkt"];
</description>
    <slice>
      <filter src_ip="10.141.41.123"/>
    </slice>
    <from sec="1065762369" usec="0"/>
    <to sec="1065762828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.877619,1.34467,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_150{
style=filled;
color=gray75;
1353[label="201.21.151.3;s;254pkt 254fpkt", shape=diamond, color=yellow];
1911[label="201.21.151.3;s;254pkt 254fpkt", shape=hexagon, color=black];
stat150[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.21.151.3:*, *:8080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 2336: (0.19685%)&lt;BR/&gt; 2335: (0.19685%)&lt;BR/&gt; 2334: (0.19685%)&lt;BR/&gt; 2333: (0.19685%)&gt;];
}
1353--1911[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="8080" src_ip="201.21.151.3"/>
    </slice>
    <from sec="1065762723" usec="0"/>
    <to sec="1065762742" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.649619,1.25615,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_151{
style=filled;
color=gray75;
1295[label="151.88.71.130;d;84pkt 84fpkt", shape=diamond, color=yellow];
2357[label="88.57.24.55;18pkt 18fpkt", shape=pentagon, color=darkviolet];
2460[label="88.57.56.77;15pkt 15fpkt", shape=pentagon, color=darkviolet];
3399[label="88.57.56.77;15pkt 15fpkt", shape=invtriangle, color=brown];
stat151[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 151.88.71.130:56518}[42.2018%]&lt;BR/&gt;{*:80, *:*}[39.4495%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 53: (23.1061%)&lt;BR/&gt; 56518: (17.4242%)&lt;BR/&gt; 25: (1.51515%)&lt;BR/&gt; 0: (1.51515%)&gt;];
}
1295--2357[label="0.111111;2pkt 2fpkt"];
1295--2460[label="0.4;6pkt 6fpkt"];
1295--2658[label="0.0666667;1pkt 1fpkt"];
1295--3399[label="0.4;6pkt 6fpkt"];
2460--3399[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter src_port="80"/>
      <filter dst_ip="151.88.71.130" dst_port="56518" src_port="53"/>
    </slice>
    <from sec="1065762006" usec="0"/>
    <to sec="1065762897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.87.0.0"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.765852,1.35159,503,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_160{
style=filled;
color=gray75;
0[label="220.66.53.1s;2pkt 2fpkt", shape=rectangle, color=red];
2061[label="220.66.53.1;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat160[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.66.53.1:80, 143.234.139.139:1141}[50%]&lt;BR/&gt;{220.66.53.1:80, 143.234.139.139:1142}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1142: (25%)&lt;BR/&gt; 1141: (25%)&gt;];
}
0--2061[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="143.234.139.139" dst_port="1142" src_ip="220.66.53.1" src_port="80"/>
      <filter dst_ip="143.234.139.139" dst_port="1141" src_ip="220.66.53.1" src_port="80"/>
    </slice>
    <from sec="1065762111" usec="0"/>
    <to sec="1065762149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.4.137.2"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.105.63.3"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.176.130.4"/>
    </slice>
    <from sec="1065762363" usec="0"/>
    <to sec="1065762874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.104.12.5"/>
    </slice>
    <from sec="1065762020" usec="0"/>
    <to sec="1065762898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_166{
style=filled;
color=gray75;
2097[label="195.153.120.6;174pkt 174fpkt", shape=pentagon, color=darkviolet];
stat166[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.153.120.6:0, *:0}[97.7011%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.7011%)&lt;BR/&gt; 80: (1.14943%)&lt;BR/&gt; 54270: (0.287356%)&lt;BR/&gt; 38728: (0.287356%)&lt;BR/&gt; 22897: (0.287356%)&gt;];
}
</description>
    <slice>
      <filter src_ip="195.153.120.6"/>
    </slice>
    <from sec="1065762005" usec="0"/>
    <to sec="1065762898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.207.170.6"/>
    </slice>
    <from sec="1065762028" usec="0"/>
    <to sec="1065762897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.237.191.9"/>
    </slice>
    <from sec="1065762015" usec="0"/>
    <to sec="1065762877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.36.241.9"/>
    </slice>
    <from sec="1065762001" usec="0"/>
    <to sec="1065762895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.202.212.10"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.41.45.14"/>
    </slice>
    <from sec="1065762001" usec="0"/>
    <to sec="1065762896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.102.66.14"/>
    </slice>
    <from sec="1065762313" usec="0"/>
    <to sec="1065762440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.2.35.15"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762443" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.137.40.15"/>
    </slice>
    <from sec="1065762290" usec="0"/>
    <to sec="1065762329" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.227.151.17"/>
    </slice>
    <from sec="1065762007" usec="0"/>
    <to sec="1065762888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.176.250.17"/>
    </slice>
    <from sec="1065762425" usec="0"/>
    <to sec="1065762476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.92.92.18"/>
    </slice>
    <from sec="1065762206" usec="0"/>
    <to sec="1065762220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.14.71.21"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_180{
style=filled;
color=gray75;
2167[label="197.218.74.21;126pkt 126fpkt", shape=pentagon, color=darkviolet];
stat180[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.218.74.21:0, *:0}[96.8254%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.8254%)&lt;BR/&gt; 135: (0.793651%)&lt;BR/&gt; 80: (0.793651%)&lt;BR/&gt; 46075: (0.396825%)&lt;BR/&gt; 31907: (0.396825%)&gt;];
}
</description>
    <slice>
      <filter src_ip="197.218.74.21"/>
    </slice>
    <from sec="1065762010" usec="0"/>
    <to sec="1065762900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.140.71.22"/>
    </slice>
    <from sec="1065762387" usec="0"/>
    <to sec="1065762741" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.201.80.22"/>
    </slice>
    <from sec="1065762412" usec="0"/>
    <to sec="1065762431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.15.130.22"/>
    </slice>
    <from sec="1065762456" usec="0"/>
    <to sec="1065762479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.72.47.26"/>
    </slice>
    <from sec="1065762256" usec="0"/>
    <to sec="1065762491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_185{
style=filled;
color=gray75;
2194[label="91.34.162.27;257pkt 257fpkt", shape=pentagon, color=darkviolet];
stat185[shape=component, label=&lt;Rules:&lt;BR/&gt;{91.34.162.27:0, *:0}[94.1634%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.1634%)&lt;BR/&gt; 80: (2.33463%)&lt;BR/&gt; 135: (0.583658%)&lt;BR/&gt; 64782: (0.194553%)&lt;BR/&gt; 64427: (0.194553%)&gt;];
}
</description>
    <slice>
      <filter src_ip="91.34.162.27"/>
    </slice>
    <from sec="1065762002" usec="0"/>
    <to sec="1065762899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.76.201.27"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.14.193.28"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.13.88.29"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.87.114.30"/>
    </slice>
    <from sec="1065762030" usec="0"/>
    <to sec="1065762900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.76.150.30"/>
    </slice>
    <from sec="1065762002" usec="0"/>
    <to sec="1065762900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.61.156.30"/>
    </slice>
    <from sec="1065762246" usec="0"/>
    <to sec="1065762670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="71.170.212.32"/>
    </slice>
    <from sec="1065762002" usec="0"/>
    <to sec="1065762889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.146.233.32"/>
    </slice>
    <from sec="1065762007" usec="0"/>
    <to sec="1065762900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.66.244.33"/>
    </slice>
    <from sec="1065762016" usec="0"/>
    <to sec="1065762898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.182.235.35"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.765852,1.35159,020,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_199{
style=filled;
color=gray75;
113[label="217.180.81.38s;254pkt 254fpkt", shape=rectangle, color=red];
2256[label="217.180.81.38;254pkt 254fpkt", shape=pentagon, color=darkviolet];
stat199[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.180.81.38:0, *:0}[99.6063%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.6063%)&lt;BR/&gt; 3797: (0.19685%)&lt;BR/&gt; 135: (0.19685%)&gt;];
}
113--2256[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter src_ip="217.180.81.38"/>
    </slice>
    <from sec="1065762384" usec="0"/>
    <to sec="1065762395" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.66.244.38"/>
    </slice>
    <from sec="1065762010" usec="0"/>
    <to sec="1065762898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.200.153.39"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.10.191.39"/>
    </slice>
    <from sec="1065762121" usec="0"/>
    <to sec="1065762594" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.48.232.39"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.217.64.41"/>
    </slice>
    <from sec="1065762237" usec="0"/>
    <to sec="1065762267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.16.21.42"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.66.245.42"/>
    </slice>
    <from sec="1065762010" usec="0"/>
    <to sec="1065762878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_208{
style=filled;
color=gray75;
3170[label="88.75.137.245;126pkt 126fpkt", shape=pentagon, color=darkviolet];
stat208[shape=component, label=&lt;Rules:&lt;BR/&gt;{88.75.137.245:0, *:0}[93.6508%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (93.6508%)&lt;BR/&gt; 80: (2.38095%)&lt;BR/&gt; 135: (0.793651%)&lt;BR/&gt; 4067: (0.396825%)&lt;BR/&gt; 4004: (0.396825%)&gt;];
}
</description>
    <slice>
      <filter src_ip="88.75.137.245"/>
    </slice>
    <from sec="1065762015" usec="0"/>
    <to sec="1065762880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.164.52.43"/>
    </slice>
    <from sec="1065762686" usec="0"/>
    <to sec="1065762707" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.112.169.43"/>
    </slice>
    <from sec="1065762009" usec="0"/>
    <to sec="1065762900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="150.148.170.43"/>
    </slice>
    <from sec="1065762063" usec="0"/>
    <to sec="1065762094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.66.244.44"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.215.161.45"/>
    </slice>
    <from sec="1065762001" usec="0"/>
    <to sec="1065762094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.96.20.46"/>
    </slice>
    <from sec="1065762631" usec="0"/>
    <to sec="1065762883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.158.164.47"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.235.121.48"/>
    </slice>
    <from sec="1065762273" usec="0"/>
    <to sec="1065762744" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821039,1.31649,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_217{
style=filled;
color=gray75;
66[label="217.121.46.49s;252pkt 252fpkt", shape=rectangle, color=red];
2321[label="217.121.46.49;251pkt 251fpkt", shape=pentagon, color=darkviolet];
3330[label="217.121.46.49;252pkt 252fpkt", shape=invtriangle, color=brown];
stat217[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.121.46.49:60646, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60646: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
66--2321[label="1;251pkt 251fpkt"];
66--3330[label="1;252pkt 252fpkt"];
2321--3330[label="1;251pkt 251fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="217.121.46.49" src_port="60646"/>
    </slice>
    <from sec="1065762594" usec="0"/>
    <to sec="1065762609" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_218{
style=filled;
color=gray75;
2323[label="221.51.64.49;116pkt 116fpkt", shape=pentagon, color=darkviolet];
stat218[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.51.64.49:0, *:0}[91.3793%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (91.3793%)&lt;BR/&gt; 80: (4.31034%)&lt;BR/&gt; 35257: (0.431034%)&lt;BR/&gt; 34010: (0.431034%)&lt;BR/&gt; 32616: (0.431034%)&gt;];
}
</description>
    <slice>
      <filter src_ip="221.51.64.49"/>
    </slice>
    <from sec="1065762021" usec="0"/>
    <to sec="1065762891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.59.28.50"/>
    </slice>
    <from sec="1065762011" usec="0"/>
    <to sec="1065762900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.78.212.53"/>
    </slice>
    <from sec="1065762007" usec="0"/>
    <to sec="1065762900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.41.213.53"/>
    </slice>
    <from sec="1065762009" usec="0"/>
    <to sec="1065762900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.109.8.59"/>
    </slice>
    <from sec="1065762003" usec="0"/>
    <to sec="1065762900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.105.63.59"/>
    </slice>
    <from sec="1065762111" usec="0"/>
    <to sec="1065762767" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.14.177.63"/>
    </slice>
    <from sec="1065762007" usec="0"/>
    <to sec="1065762898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.649619,1.25615,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_227{
style=filled;
color=gray75;
860[label="143.234.90.163;d;164pkt 164fpkt", shape=diamond, color=yellow];
902[label="142.132.5.65;s;80pkt 80fpkt", shape=diamond, color=yellow];
1170[label="220.59.87.16;s;24pkt 24fpkt", shape=diamond, color=yellow];
2144[label="220.59.87.16;23pkt 23fpkt", shape=pentagon, color=darkviolet];
2396[label="142.132.5.65;80pkt 80fpkt", shape=pentagon, color=darkviolet];
3374[label="142.132.5.65;80pkt 80fpkt", shape=invtriangle, color=brown];
stat227[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.132.5.65:80, 143.234.90.163:*}[48.7805%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6674%)&lt;BR/&gt; 1693: (0.554324%)&lt;BR/&gt; 1754: (0.443459%)&lt;BR/&gt; 1753: (0.443459%)&lt;BR/&gt; 1752: (0.443459%)&gt;];
}
860--869[label="0.0304878;5pkt 5fpkt"];
860--902[label="1;80pkt 80fpkt"];
860--1170[label="1;24pkt 24fpkt"];
860--1316[label="0.015873;1pkt 1fpkt"];
860--1429[label="0.0243902;4pkt 4fpkt"];
860--1599[label="0.0129032;2pkt 2fpkt"];
860--1675[label="0.00609756;1pkt 1fpkt"];
860--1830[label="0.0208333;3pkt 3fpkt"];
860--1886[label="0.0243902;4pkt 4fpkt"];
860--1986[label="0.00609756;1pkt 1fpkt"];
860--2000[label="0.00609756;1pkt 1fpkt"];
860--2006[label="0.00609756;1pkt 1fpkt"];
860--2031[label="0.00609756;1pkt 1fpkt"];
860--2048[label="0.00609756;1pkt 1fpkt"];
860--2140[label="0.00609756;1pkt 1fpkt"];
860--2144[label="1;23pkt 23fpkt"];
860--2396[label="1;80pkt 80fpkt"];
860--2568[label="0.0217391;2pkt 2fpkt"];
860--2662[label="0.0121951;2pkt 2fpkt"];
860--2839[label="0.0140845;1pkt 1fpkt"];
860--3043[label="0.0182927;3pkt 3fpkt"];
860--3239[label="0.00609756;1pkt 1fpkt"];
860--3374[label="1;80pkt 80fpkt"];
860--3441[label="0.0217391;2pkt 2fpkt"];
860--3575[label="0.0140845;1pkt 1fpkt"];
860--3838[label="0.0217391;2pkt 2fpkt"];
902--2396[label="1;80pkt 80fpkt"];
902--3374[label="1;80pkt 80fpkt"];
1170--2144[label="1;23pkt 23fpkt"];
2396--3374[label="1;80pkt 80fpkt"];
</description>
    <slice>
      <filter dst_ip="143.234.90.163" src_ip="142.132.5.65" src_port="80"/>
    </slice>
    <from sec="1065762002" usec="0"/>
    <to sec="1065762807" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_228{
style=filled;
color=gray75;
2399[label="220.10.167.65;167pkt 167fpkt", shape=pentagon, color=darkviolet];
stat228[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.10.167.65:0, *:0}[97.006%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.006%)&lt;BR/&gt; 80: (1.1976%)&lt;BR/&gt; 52409: (0.299401%)&lt;BR/&gt; 49086: (0.299401%)&lt;BR/&gt; 34227: (0.299401%)&gt;];
}
</description>
    <slice>
      <filter src_ip="220.10.167.65"/>
    </slice>
    <from sec="1065762004" usec="0"/>
    <to sec="1065762900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.18.91.66"/>
    </slice>
    <from sec="1065762317" usec="0"/>
    <to sec="1065762339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.225.33.67"/>
    </slice>
    <from sec="1065762083" usec="0"/>
    <to sec="1065762087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.578298,1.29289,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_231{
style=filled;
color=gray75;
1214[label="89.96.66.67;s;578pkt 578fpkt", shape=diamond, color=yellow];
2404[label="89.96.66.67;610pkt 610fpkt", shape=pentagon, color=darkviolet];
stat231[shape=component, label=&lt;Rules:&lt;BR/&gt;{89.96.66.67:0, *:0}[98.8525%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.8215%)&lt;BR/&gt; 80: (0.589226%)&lt;BR/&gt; 64975: (0.0841751%)&lt;BR/&gt; 57880: (0.0841751%)&lt;BR/&gt; 57806: (0.0841751%)&gt;];
}
1214--2404[label="1;578pkt 578fpkt"];
</description>
    <slice>
      <filter src_ip="89.96.66.67"/>
    </slice>
    <from sec="1065762003" usec="0"/>
    <to sec="1065762893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.163.42.68"/>
    </slice>
    <from sec="1065762002" usec="0"/>
    <to sec="1065762890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.98.86.68"/>
    </slice>
    <from sec="1065762529" usec="0"/>
    <to sec="1065762899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.41.195.68"/>
    </slice>
    <from sec="1065762005" usec="0"/>
    <to sec="1065762897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.66.245.68"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.7.104.71"/>
    </slice>
    <from sec="1065762019" usec="0"/>
    <to sec="1065762897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.183.83.74"/>
    </slice>
    <from sec="1065762212" usec="0"/>
    <to sec="1065762234" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.41.101.74"/>
    </slice>
    <from sec="1065762116" usec="0"/>
    <to sec="1065762899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="71.117.102.74"/>
    </slice>
    <from sec="1065762028" usec="0"/>
    <to sec="1065762895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.66.245.74"/>
    </slice>
    <from sec="1065762002" usec="0"/>
    <to sec="1065762882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.578298,1.29289,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_242{
style=filled;
color=gray75;
936[label="217.58.253.74;s;850pkt 850fpkt", shape=diamond, color=yellow];
2454[label="217.58.253.74;905pkt 905fpkt", shape=pentagon, color=darkviolet];
stat242[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.58.253.74:0, *:0}[98.7845%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.7464%)&lt;BR/&gt; 80: (0.626781%)&lt;BR/&gt; 47392: (0.0569801%)&lt;BR/&gt; 30106: (0.0569801%)&lt;BR/&gt; 4973: (0.0569801%)&gt;];
}
936--1986[label="0.00352941;3pkt 3fpkt"];
936--2454[label="1;850pkt 850fpkt"];
</description>
    <slice>
      <filter src_ip="217.58.253.74"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.92.64.75"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.158.175.77"/>
    </slice>
    <from sec="1065762539" usec="0"/>
    <to sec="1065762898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.57.6.78"/>
    </slice>
    <from sec="1065762078" usec="0"/>
    <to sec="1065762691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.73.252.78"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.110.77.80"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.32.88.80"/>
    </slice>
    <from sec="1065762288" usec="0"/>
    <to sec="1065762305" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.174.153.80"/>
    </slice>
    <from sec="1065762341" usec="0"/>
    <to sec="1065762382" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.47.118.83"/>
    </slice>
    <from sec="1065762686" usec="0"/>
    <to sec="1065762870" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.765852,1.35159,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_252{
style=filled;
color=gray75;
75[label="201.26.97.84s;507pkt 507fpkt", shape=rectangle, color=red];
2494[label="201.26.97.84;507pkt 507fpkt", shape=pentagon, color=darkviolet];
stat252[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.26.97.84:1030, *:137}[50.2959%]&lt;BR/&gt;{201.26.97.84:1029, *:137}[49.7041%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1030: (25.1479%)&lt;BR/&gt; 1029: (24.8521%)&gt;];
}
75--427[label="0.00218341;1pkt 1fpkt"];
75--2494[label="1;507pkt 507fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.26.97.84" src_port="1030"/>
      <filter dst_port="137" src_ip="201.26.97.84" src_port="1029"/>
    </slice>
    <from sec="1065762254" usec="0"/>
    <to sec="1065762485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.58.244.84"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_254{
style=filled;
color=gray75;
2499[label="216.144.104.85;137pkt 137fpkt", shape=pentagon, color=darkviolet];
stat254[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.144.104.85:0, *:0}[99.2701%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.2701%)&lt;BR/&gt; 6449: (0.364964%)&lt;BR/&gt; 135: (0.364964%)&gt;];
}
</description>
    <slice>
      <filter src_ip="216.144.104.85"/>
    </slice>
    <from sec="1065762011" usec="0"/>
    <to sec="1065762896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_255{
style=filled;
color=gray75;
2500[label="217.60.235.85;212pkt 212fpkt", shape=pentagon, color=darkviolet];
stat255[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.60.235.85:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
</description>
    <slice>
      <filter src_ip="217.60.235.85"/>
    </slice>
    <from sec="1065762008" usec="0"/>
    <to sec="1065762893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.47.78.86"/>
    </slice>
    <from sec="1065762002" usec="0"/>
    <to sec="1065762889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.164.103.90"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.41.45.92"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_260{
style=filled;
color=gray75;
2530[label="195.43.147.92;147pkt 147fpkt", shape=pentagon, color=darkviolet];
stat260[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.43.147.92:0, *:0}[93.8776%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (93.8776%)&lt;BR/&gt; 135: (2.04082%)&lt;BR/&gt; 80: (1.02041%)&lt;BR/&gt; 55778: (0.340136%)&lt;BR/&gt; 52857: (0.340136%)&gt;];
}
</description>
    <slice>
      <filter src_ip="195.43.147.92"/>
    </slice>
    <from sec="1065762006" usec="0"/>
    <to sec="1065762900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="10.141.42.94"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.131.221.100"/>
    </slice>
    <from sec="1065762173" usec="0"/>
    <to sec="1065762766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.70.58.101"/>
    </slice>
    <from sec="1065762004" usec="0"/>
    <to sec="1065762893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.146.226.101"/>
    </slice>
    <from sec="1065762514" usec="0"/>
    <to sec="1065762900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.114.12.103"/>
    </slice>
    <from sec="1065762476" usec="0"/>
    <to sec="1065762900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.82.38.104"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.71.76.104"/>
    </slice>
    <from sec="1065762266" usec="0"/>
    <to sec="1065762326" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.207.170.104"/>
    </slice>
    <from sec="1065762004" usec="0"/>
    <to sec="1065762899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.243.7.105"/>
    </slice>
    <from sec="1065762001" usec="0"/>
    <to sec="1065762900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.118.119.111"/>
    </slice>
    <from sec="1065762036" usec="0"/>
    <to sec="1065762058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.57.48.112"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.49.163.115"/>
    </slice>
    <from sec="1065762059" usec="0"/>
    <to sec="1065762895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.245.212.115"/>
    </slice>
    <from sec="1065762020" usec="0"/>
    <to sec="1065762899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_276{
style=filled;
color=gray75;
2630[label="89.100.11.116;177pkt 177fpkt", shape=pentagon, color=darkviolet];
stat276[shape=component, label=&lt;Rules:&lt;BR/&gt;{89.100.11.116:0, *:0}[92.0904%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (92.0904%)&lt;BR/&gt; 135: (2.54237%)&lt;BR/&gt; 80: (1.41243%)&lt;BR/&gt; 33466: (0.282486%)&lt;BR/&gt; 32429: (0.282486%)&gt;];
}
</description>
    <slice>
      <filter src_ip="89.100.11.116"/>
    </slice>
    <from sec="1065762011" usec="0"/>
    <to sec="1065762889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_280{
style=filled;
color=gray75;
2652[label="33.89.50.122;113pkt 113fpkt", shape=pentagon, color=darkviolet];
stat280[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.89.50.122:0, *:0}[92.0354%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (92.0354%)&lt;BR/&gt; 80: (3.09735%)&lt;BR/&gt; 135: (0.884956%)&lt;BR/&gt; 36826: (0.442478%)&lt;BR/&gt; 34213: (0.442478%)&gt;];
}
</description>
    <slice>
      <filter src_ip="33.89.50.122"/>
    </slice>
    <from sec="1065762003" usec="0"/>
    <to sec="1065762889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.66.245.125"/>
    </slice>
    <from sec="1065762018" usec="0"/>
    <to sec="1065762888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.3.6.126"/>
    </slice>
    <from sec="1065762005" usec="0"/>
    <to sec="1065762894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.66.241.129"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.649619,1.25615,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_284{
style=filled;
color=gray75;
373[label="137.88.59.131;s;5075pkt 5075fpkt", shape=diamond, color=yellow];
2684[label="137.88.59.131;5504pkt 5504fpkt", shape=pentagon, color=darkviolet];
3495[label="137.88.59.131;5504pkt 5504fpkt", shape=invtriangle, color=brown];
stat284[shape=component, label=&lt;Rules:&lt;BR/&gt;{137.88.59.131:0, *:0}[99.8728%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.8694%)&lt;BR/&gt; 59506: (0.0652863%)&lt;BR/&gt; 53: (0.0652863%)&gt;];
}
373--2684[label="1;5075pkt 5075fpkt"];
373--3495[label="1;5075pkt 5075fpkt"];
2684--3495[label="1;5504pkt 5504fpkt"];
</description>
    <slice>
      <filter src_ip="137.88.59.131"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_285{
style=filled;
color=gray75;
2685[label="89.124.148.131;94pkt 94fpkt", shape=pentagon, color=darkviolet];
stat285[shape=component, label=&lt;Rules:&lt;BR/&gt;{89.124.148.131:0, *:0}[89.3617%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (89.3617%)&lt;BR/&gt; 135: (2.65957%)&lt;BR/&gt; 80: (2.65957%)&lt;BR/&gt; 30798: (0.531915%)&lt;BR/&gt; 27918: (0.531915%)&gt;];
}
</description>
    <slice>
      <filter src_ip="89.124.148.131"/>
    </slice>
    <from sec="1065762005" usec="0"/>
    <to sec="1065762888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_286{
style=filled;
color=gray75;
2707[label="33.77.224.134;178pkt 178fpkt", shape=pentagon, color=darkviolet];
stat286[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.77.224.134:0, *:0}[96.0674%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.0674%)&lt;BR/&gt; 135: (1.40449%)&lt;BR/&gt; 80: (0.561798%)&lt;BR/&gt; 58055: (0.280899%)&lt;BR/&gt; 52657: (0.280899%)&gt;];
}
</description>
    <slice>
      <filter src_ip="33.77.224.134"/>
    </slice>
    <from sec="1065762005" usec="0"/>
    <to sec="1065762892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.117.160.136"/>
    </slice>
    <from sec="1065762244" usec="0"/>
    <to sec="1065762899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.25.91.137"/>
    </slice>
    <from sec="1065762302" usec="0"/>
    <to sec="1065762322" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_289{
style=filled;
color=gray75;
2728[label="91.109.47.138;284pkt 284fpkt", shape=pentagon, color=darkviolet];
stat289[shape=component, label=&lt;Rules:&lt;BR/&gt;{91.109.47.138:0, *:0}[94.7183%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.7183%)&lt;BR/&gt; 135: (1.40845%)&lt;BR/&gt; 80: (1.23239%)&lt;BR/&gt; 62916: (0.176056%)&lt;BR/&gt; 62833: (0.176056%)&gt;];
}
</description>
    <slice>
      <filter src_ip="91.109.47.138"/>
    </slice>
    <from sec="1065762005" usec="0"/>
    <to sec="1065762898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.158.237.138"/>
    </slice>
    <from sec="1065762576" usec="0"/>
    <to sec="1065762779" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.66.241.140"/>
    </slice>
    <from sec="1065762414" usec="0"/>
    <to sec="1065762898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.210.146.142"/>
    </slice>
    <from sec="1065762200" usec="0"/>
    <to sec="1065762249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821039,1.31649,020,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_295{
style=filled;
color=gray75;
87[label="217.180.80.144s;197pkt 197fpkt", shape=rectangle, color=red];
2762[label="217.180.80.144;200pkt 200fpkt", shape=pentagon, color=darkviolet];
3536[label="217.180.80.144;200pkt 200fpkt", shape=invtriangle, color=brown];
stat295[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.180.80.144:0, *:0}[99.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.665%)&lt;BR/&gt; 4558: (0.167504%)&lt;BR/&gt; 135: (0.167504%)&gt;];
}
87--2762[label="1;197pkt 197fpkt"];
87--3536[label="1;197pkt 197fpkt"];
2762--3536[label="1;200pkt 200fpkt"];
</description>
    <slice>
      <filter src_ip="217.180.80.144"/>
    </slice>
    <from sec="1065762251" usec="0"/>
    <to sec="1065762263" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="71.247.249.144"/>
    </slice>
    <from sec="1065762520" usec="0"/>
    <to sec="1065762687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.110.76.145"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_298{
style=filled;
color=gray75;
2776[label="220.193.198.146;98pkt 98fpkt", shape=pentagon, color=darkviolet];
stat298[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.193.198.146:0, *:0}[96.9388%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.9388%)&lt;BR/&gt; 135: (1.02041%)&lt;BR/&gt; 4604: (0.510204%)&lt;BR/&gt; 3366: (0.510204%)&lt;BR/&gt; 2717: (0.510204%)&gt;];
}
</description>
    <slice>
      <filter src_ip="220.193.198.146"/>
    </slice>
    <from sec="1065762032" usec="0"/>
    <to sec="1065762897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.174.159.147"/>
    </slice>
    <from sec="1065762013" usec="0"/>
    <to sec="1065762897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_300{
style=filled;
color=gray75;
2790[label="216.174.159.149;170pkt 170fpkt", shape=pentagon, color=darkviolet];
stat300[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.174.159.149:0, *:0}[97.6471%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.6471%)&lt;BR/&gt; 80: (1.17647%)&lt;BR/&gt; 59346: (0.294118%)&lt;BR/&gt; 48462: (0.294118%)&lt;BR/&gt; 47923: (0.294118%)&gt;];
}
</description>
    <slice>
      <filter src_ip="216.174.159.149"/>
    </slice>
    <from sec="1065762008" usec="0"/>
    <to sec="1065762798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.53.103.154"/>
    </slice>
    <from sec="1065762020" usec="0"/>
    <to sec="1065762897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_304{
style=filled;
color=gray75;
2824[label="89.97.84.160;108pkt 108fpkt", shape=pentagon, color=darkviolet];
stat304[shape=component, label=&lt;Rules:&lt;BR/&gt;{89.97.84.160:0, *:0}[92.5926%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (92.5926%)&lt;BR/&gt; 80: (3.7037%)&lt;BR/&gt; 64060: (0.462963%)&lt;BR/&gt; 10077: (0.462963%)&lt;BR/&gt; 9979: (0.462963%)&gt;];
}
</description>
    <slice>
      <filter src_ip="89.97.84.160"/>
    </slice>
    <from sec="1065762079" usec="0"/>
    <to sec="1065762861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.164.126.162"/>
    </slice>
    <from sec="1065762392" usec="0"/>
    <to sec="1065762412" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.10.238.162"/>
    </slice>
    <from sec="1065762008" usec="0"/>
    <to sec="1065762876" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.198.86.163"/>
    </slice>
    <from sec="1065762146" usec="0"/>
    <to sec="1065762179" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_308{
style=filled;
color=gray75;
2848[label="33.79.44.166;109pkt 109fpkt", shape=pentagon, color=darkviolet];
stat308[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.79.44.166:0, *:0}[92.6606%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (92.6606%)&lt;BR/&gt; 135: (3.66972%)&lt;BR/&gt; 22495: (0.458716%)&lt;BR/&gt; 21311: (0.458716%)&lt;BR/&gt; 19876: (0.458716%)&gt;];
}
</description>
    <slice>
      <filter src_ip="33.79.44.166"/>
    </slice>
    <from sec="1065762007" usec="0"/>
    <to sec="1065762881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.216.192.170"/>
    </slice>
    <from sec="1065762453" usec="0"/>
    <to sec="1065762510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.66.245.174"/>
    </slice>
    <from sec="1065762005" usec="0"/>
    <to sec="1065762897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.90.34.177"/>
    </slice>
    <from sec="1065762015" usec="0"/>
    <to sec="1065762894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.54.173.179"/>
    </slice>
    <from sec="1065762080" usec="0"/>
    <to sec="1065762771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.200.176.179"/>
    </slice>
    <from sec="1065762076" usec="0"/>
    <to sec="1065762094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.91.49.182"/>
    </slice>
    <from sec="1065762108" usec="0"/>
    <to sec="1065762535" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="71.18.67.185"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.2.249.185"/>
    </slice>
    <from sec="1065762073" usec="0"/>
    <to sec="1065762088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.54.172.189"/>
    </slice>
    <from sec="1065762129" usec="0"/>
    <to sec="1065762899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.46.212.193"/>
    </slice>
    <from sec="1065762018" usec="0"/>
    <to sec="1065762898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.9.68.194"/>
    </slice>
    <from sec="1065762843" usec="0"/>
    <to sec="1065762874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.130.78.194"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762313" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.252.11.196"/>
    </slice>
    <from sec="1065762030" usec="0"/>
    <to sec="1065762413" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.90.25.196"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_328{
style=filled;
color=gray75;
2999[label="202.80.102.200;151pkt 151fpkt", shape=pentagon, color=darkviolet];
stat328[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.80.102.200:0, *:0}[94.0397%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.0397%)&lt;BR/&gt; 80: (2.64901%)&lt;BR/&gt; 43818: (0.331126%)&lt;BR/&gt; 34350: (0.331126%)&lt;BR/&gt; 33956: (0.331126%)&gt;];
}
</description>
    <slice>
      <filter src_ip="202.80.102.200"/>
    </slice>
    <from sec="1065762002" usec="0"/>
    <to sec="1065762900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.58.251.200"/>
    </slice>
    <from sec="1065762004" usec="0"/>
    <to sec="1065762893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.210.32.204"/>
    </slice>
    <from sec="1065762243" usec="0"/>
    <to sec="1065762284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.125.173.204"/>
    </slice>
    <from sec="1065762003" usec="0"/>
    <to sec="1065762900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.649619,1.25615,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_333{
style=filled;
color=gray75;
1191[label="151.41.177.209;s;5pkt 5fpkt", shape=diamond, color=yellow];
3032[label="151.41.177.209;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3679[label="151.41.177.209;5pkt 5fpkt", shape=invtriangle, color=brown];
stat333[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.41.177.209:2952, 220.66.245.125:1863}[20%]&lt;BR/&gt;{151.41.177.209:6970, 192.168.1.11:8754}[20%]&lt;BR/&gt;{151.41.177.209:6970, 192.168.1.11:16588}[20%]&lt;BR/&gt;{151.41.177.209:4866, 193.73.13.76:554}[20%]&lt;BR/&gt;{151.41.177.209:6970, 193.73.13.76:554}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6970: (30%)&lt;BR/&gt; 554: (20%)&lt;BR/&gt; 16588: (10%)&lt;BR/&gt; 8754: (10%)&lt;BR/&gt; 4866: (10%)&gt;];
}
1191--3032[label="1;5pkt 5fpkt"];
1191--3679[label="1;5pkt 5fpkt"];
3032--3679[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="193.73.13.76" dst_port="554" src_ip="151.41.177.209" src_port="6970"/>
      <filter dst_ip="193.73.13.76" dst_port="554" src_ip="151.41.177.209" src_port="4866"/>
      <filter dst_ip="192.168.1.11" dst_port="16588" src_ip="151.41.177.209" src_port="6970"/>
      <filter dst_ip="192.168.1.11" dst_port="8754" src_ip="151.41.177.209" src_port="6970"/>
      <filter dst_ip="220.66.245.125" dst_port="1863" src_ip="151.41.177.209" src_port="2952"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821039,1.31649,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_334{
style=filled;
color=gray75;
101[label="34.74.41.211s;237pkt 237fpkt", shape=rectangle, color=red];
3041[label="34.74.41.211;255pkt 255fpkt", shape=pentagon, color=darkviolet];
3685[label="34.74.41.211;255pkt 255fpkt", shape=invtriangle, color=brown];
stat334[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.74.41.211:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
101--3041[label="1;237pkt 237fpkt"];
101--3685[label="1;237pkt 237fpkt"];
3041--3685[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="34.74.41.211" src_port="1027"/>
    </slice>
    <from sec="1065762607" usec="0"/>
    <to sec="1065762626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.46.214.211"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.66.41.212"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_337{
style=filled;
color=gray75;
3090[label="33.77.148.221;136pkt 136fpkt", shape=pentagon, color=darkviolet];
stat337[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.77.148.221:0, *:0}[97.0588%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.0588%)&lt;BR/&gt; 80: (1.47059%)&lt;BR/&gt; 59957: (0.367647%)&lt;BR/&gt; 39765: (0.367647%)&lt;BR/&gt; 25128: (0.367647%)&gt;];
}
</description>
    <slice>
      <filter src_ip="33.77.148.221"/>
    </slice>
    <from sec="1065762024" usec="0"/>
    <to sec="1065762884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.83.2.224"/>
    </slice>
    <from sec="1065762252" usec="0"/>
    <to sec="1065762662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.82.86.224"/>
    </slice>
    <from sec="1065762007" usec="0"/>
    <to sec="1065762893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.765852,1.35159,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_340{
style=filled;
color=gray75;
76[label="201.92.2.93s;125pkt 125fpkt", shape=rectangle, color=red];
2532[label="201.92.2.93;131pkt 131fpkt", shape=pentagon, color=darkviolet];
stat340[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.92.2.93:1029, *:137}[61.7925%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1029: (34.1797%)&lt;BR/&gt; 1042: (8.00781%)&lt;BR/&gt; 1026: (7.8125%)&gt;];
}
76--2532[label="0.352;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.92.2.93" src_port="1029"/>
    </slice>
    <from sec="1065762508" usec="0"/>
    <to sec="1065762530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.163.35.234"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.110.230.238"/>
    </slice>
    <from sec="1065762003" usec="0"/>
    <to sec="1065762899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.104.52.240"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.128.219.243"/>
    </slice>
    <from sec="1065762478" usec="0"/>
    <to sec="1065762496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.43.82.245"/>
    </slice>
    <from sec="1065762396" usec="0"/>
    <to sec="1065762430" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.224.32.248"/>
    </slice>
    <from sec="1065762035" usec="0"/>
    <to sec="1065762900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.182.187.249"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.46.209.250"/>
    </slice>
    <from sec="1065762472" usec="0"/>
    <to sec="1065762535" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_352{
style=filled;
color=gray75;
3180[label="210.19.215.250;141pkt 141fpkt", shape=pentagon, color=darkviolet];
stat352[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.19.215.250:0, *:0}[93.617%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (93.617%)&lt;BR/&gt; 80: (3.19149%)&lt;BR/&gt; 42854: (0.35461%)&lt;BR/&gt; 41310: (0.35461%)&lt;BR/&gt; 40822: (0.35461%)&gt;];
}
</description>
    <slice>
      <filter src_ip="210.19.215.250"/>
    </slice>
    <from sec="1065762007" usec="0"/>
    <to sec="1065762897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.134.252.250"/>
    </slice>
    <from sec="1065762061" usec="0"/>
    <to sec="1065762881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="150.65.25.252"/>
    </slice>
    <from sec="1065762864" usec="0"/>
    <to sec="1065762883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.408767,1.35487,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.84.46.254"/>
    </slice>
    <from sec="1065762003" usec="0"/>
    <to sec="1065762893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.643066,1.41136,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.87.0.0"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.78424,1.34452,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_357{
style=filled;
color=gray75;
2054[label="210.250.40.0;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3194[label="210.250.40.0;1pkt 1fpkt", shape=invtriangle, color=brown];
3760[label="210.250.40.0;2pkt 2fpkt", shape=invhouse, color=bisque];
stat357[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.250.40.0:80, 137.157.211.40:54567}[50%]&lt;BR/&gt;{210.250.40.0:80, 137.157.211.40:54568}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54568: (37.5%)&lt;BR/&gt; 54567: (12.5%)&gt;];
}
2054--3194[label="1;1pkt 1fpkt"];
2054--3760[label="1;1pkt 1fpkt"];
3194--3760[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="137.157.211.40" dst_port="54568" src_ip="210.250.40.0" src_port="80"/>
      <filter dst_ip="137.157.211.40" dst_port="54567" src_ip="210.250.40.0" src_port="80"/>
    </slice>
    <from sec="1065762519" usec="0"/>
    <to sec="1065762524" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.643066,1.41136,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.42.140.0"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762747" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_359{
style=filled;
color=gray75;
2065[label="93.240.193.1;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3200[label="93.240.193.1;9pkt 9fpkt", shape=invtriangle, color=brown];
stat359[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.240.193.1:33525, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33525: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2065--3200[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="93.240.193.1" src_port="33525"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.78424,1.34452,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_360{
style=filled;
color=gray75;
2090[label="202.61.136.5;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3212[label="202.61.136.5;1pkt 1fpkt", shape=invtriangle, color=brown];
3763[label="202.61.136.5;1pkt 1fpkt", shape=invhouse, color=bisque];
stat360[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.61.136.5:80, 143.234.189.33:1135}[50%]&lt;BR/&gt;{202.61.136.5:80, 160.206.107.225:2228}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1135: (37.5%)&lt;BR/&gt; 2228: (12.5%)&gt;];
}
2090--3212[label="1;1pkt 1fpkt"];
2090--3763[label="1;1pkt 1fpkt"];
3212--3763[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.206.107.225" dst_port="2228" src_ip="202.61.136.5" src_port="80"/>
      <filter dst_ip="143.234.189.33" dst_port="1135" src_ip="202.61.136.5" src_port="80"/>
    </slice>
    <from sec="1065762603" usec="0"/>
    <to sec="1065762853" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_361{
style=filled;
color=gray75;
2091[label="34.162.233.5;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3213[label="34.162.233.5;3pkt 3fpkt", shape=invtriangle, color=brown];
stat361[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.162.233.5:80, 137.130.196.44:15171}[33.3333%]&lt;BR/&gt;{34.162.233.5:53721, 160.206.117.139:4275}[33.3333%]&lt;BR/&gt;{34.162.233.5:80, 217.168.159.209:10339}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 53721: (16.6667%)&lt;BR/&gt; 15171: (16.6667%)&lt;BR/&gt; 10339: (16.6667%)&lt;BR/&gt; 4275: (16.6667%)&gt;];
}
2091--3213[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="217.168.159.209" dst_port="10339" src_ip="34.162.233.5" src_port="80"/>
      <filter dst_ip="160.206.117.139" dst_port="4275" src_ip="34.162.233.5" src_port="53721"/>
      <filter dst_ip="137.130.196.44" dst_port="15171" src_ip="34.162.233.5" src_port="80"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.78424,1.34452,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_362{
style=filled;
color=gray75;
2096[label="201.206.74.6;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3215[label="201.206.74.6;4pkt 4fpkt", shape=invtriangle, color=brown];
3764[label="201.206.74.6;3pkt 3fpkt", shape=invhouse, color=bisque];
stat362[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.206.74.6:3560, 216.207.169.136:23604}[25%]&lt;BR/&gt;{201.206.74.6:3565, 216.207.169.136:23604}[25%]&lt;BR/&gt;{201.206.74.6:21121, 216.207.169.136:3007}[25%]&lt;BR/&gt;{201.206.74.6:21121, 216.207.169.136:3016}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21121: (27.2727%)&lt;BR/&gt; 23604: (22.7273%)&lt;BR/&gt; 3565: (13.6364%)&lt;BR/&gt; 3016: (13.6364%)&lt;BR/&gt; 3007: (13.6364%)&gt;];
}
2096--3215[label="1;4pkt 4fpkt"];
2096--3764[label="1;3pkt 3fpkt"];
3215--3764[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="216.207.169.136" dst_port="3016" src_ip="201.206.74.6" src_port="21121"/>
      <filter dst_ip="216.207.169.136" dst_port="3007" src_ip="201.206.74.6" src_port="21121"/>
      <filter dst_ip="216.207.169.136" dst_port="23604" src_ip="201.206.74.6" src_port="3565"/>
      <filter dst_ip="216.207.169.136" dst_port="23604" src_ip="201.206.74.6" src_port="3560"/>
    </slice>
    <from sec="1065762799" usec="0"/>
    <to sec="1065762849" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.643066,1.41136,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.23.177.8"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.643066,1.41136,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.202.212.10"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_366{
style=filled;
color=gray75;
2122[label="217.58.250.11;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3227[label="217.58.250.11;1pkt 1fpkt", shape=invtriangle, color=brown];
stat366[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.58.250.11:53, 216.21.106.244:38708}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 38708: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
2122--3227[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="216.21.106.244" dst_port="38708" src_ip="217.58.250.11" src_port="53"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.78424,1.34452,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_368{
style=filled;
color=gray75;
2128[label="88.68.255.12;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3233[label="88.68.255.12;4pkt 4fpkt", shape=invtriangle, color=brown];
3768[label="88.68.255.12;4pkt 4fpkt", shape=invhouse, color=bisque];
stat368[shape=component, label=&lt;Rules:&lt;BR/&gt;{88.68.255.12:80, 137.157.140.87:1124}[25%]&lt;BR/&gt;{88.68.255.12:80, 137.157.140.87:1125}[25%]&lt;BR/&gt;{88.68.255.12:80, 137.157.140.87:1126}[25%]&lt;BR/&gt;{88.68.255.12:80, 137.157.140.87:1127}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1127: (12.5%)&lt;BR/&gt; 1126: (12.5%)&lt;BR/&gt; 1125: (12.5%)&lt;BR/&gt; 1124: (12.5%)&gt;];
}
2128--3233[label="1;4pkt 4fpkt"];
2128--3768[label="1;4pkt 4fpkt"];
3233--3768[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="137.157.140.87" dst_port="1127" src_ip="88.68.255.12" src_port="80"/>
      <filter dst_ip="137.157.140.87" dst_port="1126" src_ip="88.68.255.12" src_port="80"/>
      <filter dst_ip="137.157.140.87" dst_port="1125" src_ip="88.68.255.12" src_port="80"/>
      <filter dst_ip="137.157.140.87" dst_port="1124" src_ip="88.68.255.12" src_port="80"/>
    </slice>
    <from sec="1065762483" usec="0"/>
    <to sec="1065762773" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.643066,1.41136,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="88.102.66.14"/>
    </slice>
    <from sec="1065762313" usec="0"/>
    <to sec="1065762440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_371{
style=filled;
color=gray75;
2146[label="220.66.9.17;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3242[label="220.66.9.17;11pkt 11fpkt", shape=invtriangle, color=brown];
stat371[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.66.9.17:80, 143.234.51.133:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1474: (4.54545%)&lt;BR/&gt; 1460: (4.54545%)&lt;BR/&gt; 1459: (4.54545%)&lt;BR/&gt; 1458: (4.54545%)&gt;];
}
2146--3242[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="143.234.51.133" src_ip="220.66.9.17" src_port="80"/>
    </slice>
    <from sec="1065762839" usec="0"/>
    <to sec="1065762887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_372{
style=filled;
color=gray75;
2161[label="203.92.101.20;104pkt 104fpkt", shape=pentagon, color=darkviolet];
3246[label="203.92.101.20;103pkt 103fpkt", shape=invtriangle, color=brown];
stat372[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.92.101.20:4942, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4942: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2161--3246[label="1;103pkt 103fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="203.92.101.20" src_port="4942"/>
    </slice>
    <from sec="1065762656" usec="0"/>
    <to sec="1065762681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.643066,1.41136,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.122.150.20"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_374{
style=filled;
color=gray75;
2172[label="88.105.63.22;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3252[label="88.105.63.22;1pkt 1fpkt", shape=invtriangle, color=brown];
stat374[shape=component, label=&lt;Rules:&lt;BR/&gt;{88.105.63.22:80, 143.234.187.23:1179}[50%]&lt;BR/&gt;{88.105.63.22:80, 143.234.186.169:4425}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1179: (33.3333%)&lt;BR/&gt; 4425: (16.6667%)&gt;];
}
2172--3252[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.234.186.169" dst_port="4425" src_ip="88.105.63.22" src_port="80"/>
      <filter dst_ip="143.234.187.23" dst_port="1179" src_ip="88.105.63.22" src_port="80"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_375{
style=filled;
color=gray75;
2178[label="216.207.171.22;102pkt 102fpkt", shape=pentagon, color=darkviolet];
3254[label="216.207.171.22;102pkt 102fpkt", shape=invtriangle, color=brown];
stat375[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.207.171.22:0, *:0}[97.0588%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.0588%)&lt;BR/&gt; 80: (1.47059%)&lt;BR/&gt; 4991: (0.490196%)&lt;BR/&gt; 4032: (0.490196%)&lt;BR/&gt; 3789: (0.490196%)&gt;];
}
2178--3254[label="1;102pkt 102fpkt"];
</description>
    <slice>
      <filter src_ip="216.207.171.22"/>
    </slice>
    <from sec="1065762010" usec="0"/>
    <to sec="1065762891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_376{
style=filled;
color=gray75;
2185[label="137.214.27.25;195pkt 195fpkt", shape=pentagon, color=darkviolet];
3257[label="137.214.27.25;196pkt 196fpkt", shape=invtriangle, color=brown];
stat376[shape=component, label=&lt;Rules:&lt;BR/&gt;{137.214.27.25:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2185--3257[label="1;195pkt 195fpkt"];
</description>
    <slice>
      <filter src_ip="137.214.27.25"/>
    </slice>
    <from sec="1065762011" usec="0"/>
    <to sec="1065762900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.643066,1.41136,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.14.193.28"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.643066,1.41136,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="70.146.233.32"/>
    </slice>
    <from sec="1065762007" usec="0"/>
    <to sec="1065762900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_379{
style=filled;
color=gray75;
2231[label="202.61.157.33;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3279[label="202.61.157.33;2pkt 2fpkt", shape=invtriangle, color=brown];
stat379[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.61.157.33:80, 143.234.162.65:1851}[50%]&lt;BR/&gt;{202.61.157.33:80, 143.234.162.65:1852}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1852: (25%)&lt;BR/&gt; 1851: (25%)&gt;];
}
2231--3279[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="143.234.162.65" dst_port="1852" src_ip="202.61.157.33" src_port="80"/>
      <filter dst_ip="143.234.162.65" dst_port="1851" src_ip="202.61.157.33" src_port="80"/>
    </slice>
    <from sec="1065762238" usec="0"/>
    <to sec="1065762333" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,501,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_380{
style=filled;
color=gray75;
2234[label="195.16.21.34;30pkt 30fpkt", shape=pentagon, color=darkviolet];
3280[label="195.16.21.34;31pkt 31fpkt", shape=invtriangle, color=brown];
stat380[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.16.21.34:21, 165.120.85.141:*}[25.8065%]&lt;BR/&gt;{195.16.21.34:21, 165.120.85.148:*}[25.8065%]&lt;BR/&gt;{195.16.21.34:21, 165.120.85.153:*}[25.8065%]&lt;BR/&gt;{195.16.21.34:21, 165.120.21.80:*}[22.5806%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (50%)&lt;BR/&gt; 63781: (1.63934%)&lt;BR/&gt; 63776: (1.63934%)&lt;BR/&gt; 63773: (1.63934%)&lt;BR/&gt; 63768: (1.63934%)&gt;];
}
2234--3280[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="165.120.85.153" src_ip="195.16.21.34" src_port="21"/>
      <filter dst_ip="165.120.85.148" src_ip="195.16.21.34" src_port="21"/>
      <filter dst_ip="165.120.85.141" src_ip="195.16.21.34" src_port="21"/>
      <filter dst_ip="165.120.21.80" src_ip="195.16.21.34" src_port="21"/>
    </slice>
    <from sec="1065762457" usec="0"/>
    <to sec="1065762900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.78424,1.34452,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_381{
style=filled;
color=gray75;
2239[label="192.117.233.34;213pkt 213fpkt", shape=pentagon, color=darkviolet];
3285[label="192.117.233.34;214pkt 214fpkt", shape=invtriangle, color=brown];
3781[label="192.117.233.34;214pkt 214fpkt", shape=invhouse, color=bisque];
stat381[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.117.233.34:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2239--3285[label="1;213pkt 213fpkt"];
2239--3781[label="1;213pkt 213fpkt"];
3285--3781[label="1;214pkt 214fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="192.117.233.34" src_port="1028"/>
    </slice>
    <from sec="1065762233" usec="0"/>
    <to sec="1065762268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,011,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_383{
style=filled;
color=gray75;
2253[label="208.33.65.37;358pkt 358fpkt", shape=pentagon, color=darkviolet];
3294[label="208.33.65.37;357pkt 357fpkt", shape=invtriangle, color=brown];
stat383[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.33.65.37:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3035: (0.559441%)&lt;BR/&gt; 1261: (0.41958%)&lt;BR/&gt; 19045: (0.27972%)&lt;BR/&gt; 9927: (0.27972%)&lt;BR/&gt; 4094: (0.27972%)&gt;];
}
2253--3294[label="1;357pkt 357fpkt"];
</description>
    <slice>
      <filter src_ip="208.33.65.37"/>
    </slice>
    <from sec="1065762248" usec="0"/>
    <to sec="1065762898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.643066,1.41136,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="70.48.232.39"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_385{
style=filled;
color=gray75;
2290[label="71.118.221.44;20pkt 20fpkt", shape=pentagon, color=darkviolet];
3311[label="71.118.221.44;20pkt 20fpkt", shape=invtriangle, color=brown];
stat385[shape=component, label=&lt;Rules:&lt;BR/&gt;{71.118.221.44:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 3264: (2.5%)&lt;BR/&gt; 3263: (2.5%)&lt;BR/&gt; 3262: (2.5%)&lt;BR/&gt; 3261: (2.5%)&gt;];
}
2290--3311[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="71.118.221.44"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_387{
style=filled;
color=gray75;
2300[label="151.41.45.46;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3318[label="151.41.45.46;1pkt 1fpkt", shape=invtriangle, color=brown];
stat387[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.41.45.46:2503, 154.245.36.85:21}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2503: (50%)&lt;BR/&gt; 21: (50%)&gt;];
}
2300--3318[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="154.245.36.85" dst_port="21" src_ip="151.41.45.46" src_port="2503"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_388{
style=filled;
color=gray75;
2301[label="218.75.62.46;101pkt 101fpkt", shape=pentagon, color=darkviolet];
3319[label="218.75.62.46;101pkt 101fpkt", shape=invtriangle, color=brown];
stat388[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.75.62.46:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2301--3319[label="1;101pkt 101fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="218.75.62.46" src_port="1028"/>
    </slice>
    <from sec="1065762273" usec="0"/>
    <to sec="1065762291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821039,1.31649,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_389{
style=filled;
color=gray75;
64[label="129.181.83.47s;184pkt 184fpkt", shape=rectangle, color=red];
2306[label="129.181.83.47;252pkt 252fpkt", shape=pentagon, color=darkviolet];
3321[label="129.181.83.47;253pkt 253fpkt", shape=invtriangle, color=brown];
stat389[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.181.83.47:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
64--2306[label="0.994565;183pkt 183fpkt"];
64--3321[label="1;184pkt 184fpkt"];
2306--3321[label="1;252pkt 252fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="129.181.83.47" src_port="1028"/>
    </slice>
    <from sec="1065762595" usec="0"/>
    <to sec="1065762609" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_390{
style=filled;
color=gray75;
2317[label="91.92.189.48;33pkt 33fpkt", shape=pentagon, color=darkviolet];
3327[label="91.92.189.48;34pkt 34fpkt", shape=invtriangle, color=brown];
stat390[shape=component, label=&lt;Rules:&lt;BR/&gt;{91.92.189.48:80, 160.206.137.176:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1130: (1.49254%)&lt;BR/&gt; 1129: (1.49254%)&lt;BR/&gt; 1128: (1.49254%)&lt;BR/&gt; 1127: (1.49254%)&gt;];
}
2317--3327[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="160.206.137.176" src_ip="91.92.189.48" src_port="80"/>
    </slice>
    <from sec="1065762049" usec="0"/>
    <to sec="1065762061" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_391{
style=filled;
color=gray75;
2330[label="91.115.13.50;97pkt 97fpkt", shape=pentagon, color=darkviolet];
3334[label="91.115.13.50;98pkt 98fpkt", shape=invtriangle, color=brown];
stat391[shape=component, label=&lt;Rules:&lt;BR/&gt;{91.115.13.50:0, *:0}[94.898%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.8718%)&lt;BR/&gt; 80: (1.53846%)&lt;BR/&gt; 135: (1.02564%)&lt;BR/&gt; 53109: (0.512821%)&lt;BR/&gt; 52771: (0.512821%)&gt;];
}
2330--3334[label="1;97pkt 97fpkt"];
</description>
    <slice>
      <filter src_ip="91.115.13.50"/>
    </slice>
    <from sec="1065762032" usec="0"/>
    <to sec="1065762894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.643066,1.41136,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.59.28.50"/>
    </slice>
    <from sec="1065762011" usec="0"/>
    <to sec="1065762900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_394{
style=filled;
color=gray75;
2350[label="194.183.21.54;114pkt 114fpkt", shape=pentagon, color=darkviolet];
3346[label="194.183.21.54;114pkt 114fpkt", shape=invtriangle, color=brown];
stat394[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.183.21.54:0, *:0}[91.2281%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (91.2281%)&lt;BR/&gt; 135: (3.94737%)&lt;BR/&gt; 44341: (0.438596%)&lt;BR/&gt; 41454: (0.438596%)&lt;BR/&gt; 41133: (0.438596%)&gt;];
}
2350--3346[label="1;114pkt 114fpkt"];
</description>
    <slice>
      <filter src_ip="194.183.21.54"/>
    </slice>
    <from sec="1065762011" usec="0"/>
    <to sec="1065762880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.78424,1.34452,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_395{
style=filled;
color=gray75;
2355[label="216.23.201.54;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3351[label="216.23.201.54;1pkt 1fpkt", shape=invtriangle, color=brown];
3799[label="216.23.201.54;1pkt 1fpkt", shape=invhouse, color=bisque];
stat395[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.23.201.54:2753, 217.58.237.137:2754}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2754: (50%)&lt;BR/&gt; 2753: (50%)&gt;];
}
2355--3351[label="1;1pkt 1fpkt"];
2355--3799[label="1;1pkt 1fpkt"];
3351--3799[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="217.58.237.137" dst_port="2754" src_ip="216.23.201.54" src_port="2753"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_396{
style=filled;
color=gray75;
2358[label="208.196.42.55;141pkt 141fpkt", shape=pentagon, color=darkviolet];
3353[label="208.196.42.55;142pkt 142fpkt", shape=invtriangle, color=brown];
stat396[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.196.42.55:0, *:0}[92.9577%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (92.9329%)&lt;BR/&gt; 135: (2.4735%)&lt;BR/&gt; 80: (1.06007%)&lt;BR/&gt; 61937: (0.353357%)&lt;BR/&gt; 60751: (0.353357%)&gt;];
}
2358--3353[label="1;141pkt 141fpkt"];
</description>
    <slice>
      <filter src_ip="208.196.42.55"/>
    </slice>
    <from sec="1065762007" usec="0"/>
    <to sec="1065762825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_397{
style=filled;
color=gray75;
2361[label="193.84.60.56;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3355[label="193.84.60.56;11pkt 11fpkt", shape=invtriangle, color=brown];
stat397[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.84.60.56:80, 143.234.90.84:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52834: (4.7619%)&lt;BR/&gt; 52833: (4.7619%)&lt;BR/&gt; 52832: (4.7619%)&lt;BR/&gt; 52831: (4.7619%)&gt;];
}
2361--3355[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="143.234.90.84" src_ip="193.84.60.56" src_port="80"/>
    </slice>
    <from sec="1065762782" usec="0"/>
    <to sec="1065762809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.78424,1.34452,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_398{
style=filled;
color=gray75;
2368[label="10.141.41.58;14pkt 14fpkt", shape=pentagon, color=darkviolet];
3359[label="10.141.41.58;14pkt 14fpkt", shape=invtriangle, color=brown];
3803[label="10.141.41.58;14pkt 14fpkt", shape=invhouse, color=bisque];
stat398[shape=component, label=&lt;Rules:&lt;BR/&gt;{10.141.41.58:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2368--3359[label="1;14pkt 14fpkt"];
2368--3803[label="1;14pkt 14fpkt"];
3359--3803[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter src_ip="10.141.41.58"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.643066,1.41136,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="89.109.8.59"/>
    </slice>
    <from sec="1065762003" usec="0"/>
    <to sec="1065762900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_400{
style=filled;
color=gray75;
2394[label="91.248.68.64;20pkt 20fpkt", shape=pentagon, color=darkviolet];
3372[label="91.248.68.64;20pkt 20fpkt", shape=invtriangle, color=brown];
stat400[shape=component, label=&lt;Rules:&lt;BR/&gt;{91.248.68.64:80, 143.234.75.131:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1286: (2.5%)&lt;BR/&gt; 1285: (2.5%)&lt;BR/&gt; 1283: (2.5%)&lt;BR/&gt; 1282: (2.5%)&gt;];
}
2394--3372[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="143.234.75.131" src_ip="91.248.68.64" src_port="80"/>
    </slice>
    <from sec="1065762342" usec="0"/>
    <to sec="1065762632" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.78424,1.34452,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_402{
style=filled;
color=gray75;
2414[label="216.200.164.68;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3379[label="216.200.164.68;1pkt 1fpkt", shape=invtriangle, color=brown];
3813[label="216.200.164.68;1pkt 1fpkt", shape=invhouse, color=bisque];
stat402[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.200.164.68:0, 217.54.91.1:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2414--3379[label="1;1pkt 1fpkt"];
2414--3813[label="1;1pkt 1fpkt"];
3379--3813[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="217.54.91.1" src_ip="216.200.164.68"/>
    </slice>
    <from sec="1065762840" usec="0"/>
    <to sec="1065762863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_403{
style=filled;
color=gray75;
2420[label="91.198.154.69;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3381[label="91.198.154.69;1pkt 1fpkt", shape=invtriangle, color=brown];
stat403[shape=component, label=&lt;Rules:&lt;BR/&gt;{91.198.154.69:1935, 217.58.237.82:2431}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2431: (50%)&lt;BR/&gt; 1935: (50%)&gt;];
}
2420--3381[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="217.58.237.82" dst_port="2431" src_ip="91.198.154.69" src_port="1935"/>
    </slice>
    <from sec="1065762726" usec="0"/>
    <to sec="1065762900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_404{
style=filled;
color=gray75;
2424[label="217.180.91.70;255pkt 255fpkt", shape=pentagon, color=darkviolet];
3384[label="217.180.91.70;255pkt 255fpkt", shape=invtriangle, color=brown];
stat404[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.180.91.70:0, *:0}[99.6078%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.6078%)&lt;BR/&gt; 4516: (0.196078%)&lt;BR/&gt; 135: (0.196078%)&gt;];
}
2424--3384[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter src_ip="217.180.91.70"/>
    </slice>
    <from sec="1065762369" usec="0"/>
    <to sec="1065762380" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.643066,1.41136,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.92.64.75"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_407{
style=filled;
color=gray75;
2457[label="88.102.102.76;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3397[label="88.102.102.76;1pkt 1fpkt", shape=invtriangle, color=brown];
stat407[shape=component, label=&lt;Rules:&lt;BR/&gt;{88.102.102.76:80, 143.234.51.133:4084}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4084: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2457--3397[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.234.51.133" dst_port="4084" src_ip="88.102.102.76" src_port="80"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.643066,1.41136,501,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="70.158.175.77"/>
    </slice>
    <from sec="1065762539" usec="0"/>
    <to sec="1065762898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.643066,1.41136,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.47.118.83"/>
    </slice>
    <from sec="1065762686" usec="0"/>
    <to sec="1065762870" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.649619,1.25615,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_412{
style=filled;
color=gray75;
1240[label="217.54.172.115;d;80pkt 80fpkt", shape=diamond, color=yellow];
2271[label="89.46.104.41;38pkt 38fpkt", shape=pentagon, color=darkviolet];
2390[label="88.68.216.62;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3370[label="88.68.216.62;3pkt 3fpkt", shape=invtriangle, color=brown];
stat412[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 217.54.172.115:0}[28.2828%]&lt;BR/&gt;{89.46.104.41:80, 217.54.172.115:*}[25.2525%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.2903%)&lt;BR/&gt; 0: (22.5806%)&lt;BR/&gt; 135: (2.41935%)&lt;BR/&gt; 1770: (1.20968%)&lt;BR/&gt; 1766: (1.20968%)&gt;];
}
1240--1811[label="0.0125;1pkt 1fpkt"];
1240--1959[label="0.0125;1pkt 1fpkt"];
1240--1999[label="0.0125;1pkt 1fpkt"];
1240--2030[label="0.0125;1pkt 1fpkt"];
1240--2271[label="0.526316;20pkt 20fpkt"];
1240--2335[label="0.184211;7pkt 7fpkt"];
1240--2390[label="0.666667;2pkt 2fpkt"];
1240--3370[label="0.666667;2pkt 2fpkt"];
2390--3370[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="217.54.172.115" src_ip="89.46.104.41" src_port="80"/>
      <filter dst_ip="217.54.172.115"/>
    </slice>
    <from sec="1065762074" usec="0"/>
    <to sec="1065762900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.78424,1.34452,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_413{
style=filled;
color=gray75;
2498[label="154.245.36.85;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3413[label="154.245.36.85;1pkt 1fpkt", shape=invtriangle, color=brown];
3824[label="154.245.36.85;1pkt 1fpkt", shape=invhouse, color=bisque];
stat413[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.245.36.85:21, 151.41.45.46:2503}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2503: (50%)&lt;BR/&gt; 21: (50%)&gt;];
}
2498--3413[label="1;1pkt 1fpkt"];
2498--3824[label="1;1pkt 1fpkt"];
3413--3824[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="151.41.45.46" dst_port="2503" src_ip="154.245.36.85" src_port="21"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.78424,1.34452,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_414{
style=filled;
color=gray75;
2503[label="194.30.135.86;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3414[label="194.30.135.86;4pkt 4fpkt", shape=invtriangle, color=brown];
3825[label="194.30.135.86;4pkt 4fpkt", shape=invhouse, color=bisque];
stat414[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.30.135.86:80, 137.157.136.89:1608}[25%]&lt;BR/&gt;{194.30.135.86:80, 137.157.136.89:1609}[25%]&lt;BR/&gt;{194.30.135.86:80, 137.157.136.89:1610}[25%]&lt;BR/&gt;{194.30.135.86:80, 137.157.136.89:1614}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1614: (12.5%)&lt;BR/&gt; 1610: (12.5%)&lt;BR/&gt; 1609: (12.5%)&lt;BR/&gt; 1608: (12.5%)&gt;];
}
2503--3414[label="1;4pkt 4fpkt"];
2503--3825[label="1;4pkt 4fpkt"];
3414--3825[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="137.157.136.89" dst_port="1614" src_ip="194.30.135.86" src_port="80"/>
      <filter dst_ip="137.157.136.89" dst_port="1610" src_ip="194.30.135.86" src_port="80"/>
      <filter dst_ip="137.157.136.89" dst_port="1609" src_ip="194.30.135.86" src_port="80"/>
      <filter dst_ip="137.157.136.89" dst_port="1608" src_ip="194.30.135.86" src_port="80"/>
    </slice>
    <from sec="1065762885" usec="0"/>
    <to sec="1065762896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_416{
style=filled;
color=gray75;
2517[label="33.59.28.89;132pkt 132fpkt", shape=pentagon, color=darkviolet];
3422[label="33.59.28.89;132pkt 132fpkt", shape=invtriangle, color=brown];
stat416[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.59.28.89:0, *:0}[96.9697%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.9697%)&lt;BR/&gt; 80: (1.51515%)&lt;BR/&gt; 65135: (0.378788%)&lt;BR/&gt; 62006: (0.378788%)&lt;BR/&gt; 60673: (0.378788%)&gt;];
}
2517--3422[label="1;132pkt 132fpkt"];
</description>
    <slice>
      <filter src_ip="33.59.28.89"/>
    </slice>
    <from sec="1065762006" usec="0"/>
    <to sec="1065762890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.643066,1.41136,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="151.41.45.92"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.643066,1.41136,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="91.70.58.101"/>
    </slice>
    <from sec="1065762004" usec="0"/>
    <to sec="1065762893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.643066,1.41136,501,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="70.146.226.101"/>
    </slice>
    <from sec="1065762514" usec="0"/>
    <to sec="1065762900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.643066,1.41136,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="91.82.38.104"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.643066,1.41136,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="88.243.7.105"/>
    </slice>
    <from sec="1065762001" usec="0"/>
    <to sec="1065762900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.78424,1.34452,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_422{
style=filled;
color=gray75;
2598[label="34.194.37.107;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3451[label="34.194.37.107;1pkt 1fpkt", shape=invtriangle, color=brown];
3843[label="34.194.37.107;1pkt 1fpkt", shape=invhouse, color=bisque];
stat422[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.194.37.107:7026, 217.54.86.45:1533}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7026: (50%)&lt;BR/&gt; 1533: (50%)&gt;];
}
2598--3451[label="1;1pkt 1fpkt"];
2598--3843[label="1;1pkt 1fpkt"];
3451--3843[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="217.54.86.45" dst_port="1533" src_ip="34.194.37.107" src_port="7026"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762035" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.78424,1.34452,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_423{
style=filled;
color=gray75;
2604[label="34.204.237.108;232pkt 232fpkt", shape=pentagon, color=darkviolet];
3454[label="34.204.237.108;232pkt 232fpkt", shape=invtriangle, color=brown];
3845[label="34.204.237.108;232pkt 232fpkt", shape=invhouse, color=bisque];
stat423[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.204.237.108:64711, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64711: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2604--3454[label="1;232pkt 232fpkt"];
2604--3845[label="1;232pkt 232fpkt"];
3454--3845[label="1;232pkt 232fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="34.204.237.108" src_port="64711"/>
    </slice>
    <from sec="1065762446" usec="0"/>
    <to sec="1065762491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.643066,1.41136,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.118.119.111"/>
    </slice>
    <from sec="1065762036" usec="0"/>
    <to sec="1065762058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.643066,1.41136,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.245.212.115"/>
    </slice>
    <from sec="1065762020" usec="0"/>
    <to sec="1065762899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_426{
style=filled;
color=gray75;
2632[label="195.131.103.116;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3464[label="195.131.103.116;4pkt 4fpkt", shape=invtriangle, color=brown];
stat426[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.131.103.116:80, 137.101.49.214:4641}[25%]&lt;BR/&gt;{195.131.103.116:80, 137.101.49.214:4642}[25%]&lt;BR/&gt;{195.131.103.116:80, 137.101.49.214:4653}[25%]&lt;BR/&gt;{195.131.103.116:80, 137.101.49.214:4654}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4654: (12.5%)&lt;BR/&gt; 4653: (12.5%)&lt;BR/&gt; 4642: (12.5%)&lt;BR/&gt; 4641: (12.5%)&gt;];
}
2632--3464[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="137.101.49.214" dst_port="4654" src_ip="195.131.103.116" src_port="80"/>
      <filter dst_ip="137.101.49.214" dst_port="4653" src_ip="195.131.103.116" src_port="80"/>
      <filter dst_ip="137.101.49.214" dst_port="4642" src_ip="195.131.103.116" src_port="80"/>
      <filter dst_ip="137.101.49.214" dst_port="4641" src_ip="195.131.103.116" src_port="80"/>
    </slice>
    <from sec="1065762816" usec="0"/>
    <to sec="1065762878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821039,1.31649,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_427{
style=filled;
color=gray75;
55[label="34.186.164.20s;161pkt 161fpkt", shape=rectangle, color=red];
2163[label="34.186.164.20;218pkt 218fpkt", shape=pentagon, color=darkviolet];
2644[label="203.161.137.119;128pkt 128fpkt", shape=pentagon, color=darkviolet];
3248[label="34.186.164.20;217pkt 217fpkt", shape=invtriangle, color=brown];
3474[label="203.161.137.119;128pkt 128fpkt", shape=invtriangle, color=brown];
stat427[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.186.164.20:1026, *:137}[63.0058%]&lt;BR/&gt;{203.161.137.119:1046, *:137}[36.9942%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1026: (32.277%)&lt;BR/&gt; 1046: (17.723%)&gt;];
}
55--2163[label="0.714286;115pkt 115fpkt"];
55--2644[label="0.359375;46pkt 46fpkt"];
55--3248[label="0.714286;115pkt 115fpkt"];
55--3474[label="0.359375;46pkt 46fpkt"];
2163--3248[label="1;217pkt 217fpkt"];
2644--3474[label="1;128pkt 128fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="34.186.164.20" src_port="1026"/>
      <filter dst_port="137" src_ip="203.161.137.119" src_port="1046"/>
    </slice>
    <from sec="1065762247" usec="0"/>
    <to sec="1065762272" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_428{
style=filled;
color=gray75;
2646[label="202.232.68.120;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3476[label="202.232.68.120;8pkt 8fpkt", shape=invtriangle, color=brown];
stat428[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.232.68.120:80, 151.41.46.69:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4334: (6.25%)&lt;BR/&gt; 4315: (6.25%)&lt;BR/&gt; 4314: (6.25%)&lt;BR/&gt; 4313: (6.25%)&gt;];
}
2646--3476[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="151.41.46.69" src_ip="202.232.68.120" src_port="80"/>
    </slice>
    <from sec="1065762785" usec="0"/>
    <to sec="1065762854" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_429{
style=filled;
color=gray75;
2655[label="10.141.41.123;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3480[label="10.141.41.123;10pkt 10fpkt", shape=invtriangle, color=brown];
stat429[shape=component, label=&lt;Rules:&lt;BR/&gt;{10.141.41.123:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2655--3480[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="10.141.41.123"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_430{
style=filled;
color=gray75;
2666[label="88.60.73.128;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3484[label="88.60.73.128;2pkt 2fpkt", shape=invtriangle, color=brown];
stat430[shape=component, label=&lt;Rules:&lt;BR/&gt;{88.60.73.128:80, 217.168.158.185:54005}[50%]&lt;BR/&gt;{88.60.73.128:80, 217.168.158.185:54184}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54184: (25%)&lt;BR/&gt; 54005: (25%)&gt;];
}
2666--3484[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="217.168.158.185" dst_port="54184" src_ip="88.60.73.128" src_port="80"/>
      <filter dst_ip="217.168.158.185" dst_port="54005" src_ip="88.60.73.128" src_port="80"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_431{
style=filled;
color=gray75;
2668[label="195.184.129.128;124pkt 124fpkt", shape=pentagon, color=darkviolet];
3485[label="195.184.129.128;124pkt 124fpkt", shape=invtriangle, color=brown];
stat431[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.184.129.128:0, *:0}[97.5806%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.5806%)&lt;BR/&gt; 80: (1.20968%)&lt;BR/&gt; 38887: (0.403226%)&lt;BR/&gt; 38217: (0.403226%)&lt;BR/&gt; 31757: (0.403226%)&gt;];
}
2668--3485[label="1;124pkt 124fpkt"];
</description>
    <slice>
      <filter src_ip="195.184.129.128"/>
    </slice>
    <from sec="1065762154" usec="0"/>
    <to sec="1065762899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.78424,1.34452,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_432{
style=filled;
color=gray75;
2674[label="71.64.116.129;128pkt 128fpkt", shape=pentagon, color=darkviolet];
3489[label="71.64.116.129;128pkt 128fpkt", shape=invtriangle, color=brown];
3853[label="71.64.116.129;127pkt 127fpkt", shape=invhouse, color=bisque];
stat432[shape=component, label=&lt;Rules:&lt;BR/&gt;{71.64.116.129:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2674--3489[label="1;128pkt 128fpkt"];
2674--3853[label="1;127pkt 127fpkt"];
3489--3853[label="1;127pkt 127fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="71.64.116.129" src_port="1031"/>
    </slice>
    <from sec="1065762067" usec="0"/>
    <to sec="1065762087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.78424,1.34452,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_433{
style=filled;
color=gray75;
2686[label="220.66.241.131;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3496[label="220.66.241.131;2pkt 2fpkt", shape=invtriangle, color=brown];
3854[label="220.66.241.131;2pkt 2fpkt", shape=invhouse, color=bisque];
stat433[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.66.241.131:1863, 217.54.170.137:1199}[50%]&lt;BR/&gt;{220.66.241.131:1863, 143.234.119.138:1917}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1917: (25%)&lt;BR/&gt; 1199: (25%)&gt;];
}
2686--3496[label="1;2pkt 2fpkt"];
2686--3854[label="1;2pkt 2fpkt"];
3496--3854[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="143.234.119.138" dst_port="1917" src_ip="220.66.241.131" src_port="1863"/>
      <filter dst_ip="217.54.170.137" dst_port="1199" src_ip="220.66.241.131" src_port="1863"/>
    </slice>
    <from sec="1065762072" usec="0"/>
    <to sec="1065762896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_434{
style=filled;
color=gray75;
2697[label="71.247.249.132;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3501[label="71.247.249.132;6pkt 6fpkt", shape=invtriangle, color=brown];
stat434[shape=component, label=&lt;Rules:&lt;BR/&gt;{71.247.249.132:80, 160.206.235.121:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1141: (8.33333%)&lt;BR/&gt; 1129: (8.33333%)&lt;BR/&gt; 1128: (8.33333%)&lt;BR/&gt; 1114: (8.33333%)&gt;];
}
2697--3501[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="160.206.235.121" src_ip="71.247.249.132" src_port="80"/>
    </slice>
    <from sec="1065762308" usec="0"/>
    <to sec="1065762667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.78424,1.34452,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_435{
style=filled;
color=gray75;
2699[label="10.141.42.133;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3502[label="10.141.42.133;10pkt 10fpkt", shape=invtriangle, color=brown];
3858[label="10.141.42.133;10pkt 10fpkt", shape=invhouse, color=bisque];
stat435[shape=component, label=&lt;Rules:&lt;BR/&gt;{10.141.42.133:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2699--3502[label="1;10pkt 10fpkt"];
2699--3858[label="1;10pkt 10fpkt"];
3502--3858[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="10.141.42.133"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_437{
style=filled;
color=gray75;
2726[label="217.52.236.137;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3513[label="217.52.236.137;1pkt 1fpkt", shape=invtriangle, color=brown];
stat437[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.52.236.137:110, 143.234.217.86:49152}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49152: (50%)&lt;BR/&gt; 110: (50%)&gt;];
}
2726--3513[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.234.217.86" dst_port="49152" src_ip="217.52.236.137" src_port="110"/>
    </slice>
    <from sec="1065762794" usec="0"/>
    <to sec="1065762816" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.643066,1.41136,010,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.158.237.138"/>
    </slice>
    <from sec="1065762576" usec="0"/>
    <to sec="1065762779" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_439{
style=filled;
color=gray75;
2745[label="88.116.217.140;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3525[label="88.116.217.140;1pkt 1fpkt", shape=invtriangle, color=brown];
stat439[shape=component, label=&lt;Rules:&lt;BR/&gt;{88.116.217.140:1280, 151.41.224.235:24779}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24779: (50%)&lt;BR/&gt; 1280: (50%)&gt;];
}
2745--3525[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="151.41.224.235" dst_port="24779" src_ip="88.116.217.140" src_port="1280"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.78424,1.34452,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_440{
style=filled;
color=gray75;
2752[label="88.116.217.141;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3530[label="88.116.217.141;1pkt 1fpkt", shape=invtriangle, color=brown];
3866[label="88.116.217.141;1pkt 1fpkt", shape=invhouse, color=bisque];
stat440[shape=component, label=&lt;Rules:&lt;BR/&gt;{88.116.217.141:2075, 151.41.224.235:24779}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24779: (50%)&lt;BR/&gt; 2075: (50%)&gt;];
}
2752--3530[label="1;1pkt 1fpkt"];
2752--3866[label="1;1pkt 1fpkt"];
3530--3866[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="151.41.224.235" dst_port="24779" src_ip="88.116.217.141" src_port="2075"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_441{
style=filled;
color=gray75;
2757[label="154.245.149.143;118pkt 118fpkt", shape=pentagon, color=darkviolet];
3532[label="154.245.149.143;118pkt 118fpkt", shape=invtriangle, color=brown];
stat441[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.245.149.143:0, *:0}[91.5254%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (91.5254%)&lt;BR/&gt; 135: (3.81356%)&lt;BR/&gt; 4612: (0.423729%)&lt;BR/&gt; 4543: (0.423729%)&lt;BR/&gt; 3892: (0.423729%)&gt;];
}
2757--3532[label="1;118pkt 118fpkt"];
</description>
    <slice>
      <filter src_ip="154.245.149.143"/>
    </slice>
    <from sec="1065762004" usec="0"/>
    <to sec="1065762900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_442{
style=filled;
color=gray75;
2759[label="91.90.225.143;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3533[label="91.90.225.143;2pkt 2fpkt", shape=invtriangle, color=brown];
stat442[shape=component, label=&lt;Rules:&lt;BR/&gt;{91.90.225.143:2972, 151.41.43.36:1434}[50%]&lt;BR/&gt;{91.90.225.143:2972, 137.41.120.44:1434}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2972: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
2759--3533[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="137.41.120.44" dst_port="1434" src_ip="91.90.225.143" src_port="2972"/>
      <filter dst_ip="151.41.43.36" dst_port="1434" src_ip="91.90.225.143" src_port="2972"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.643066,1.41136,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="71.247.249.144"/>
    </slice>
    <from sec="1065762520" usec="0"/>
    <to sec="1065762687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_444{
style=filled;
color=gray75;
2777[label="217.128.12.147;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3543[label="217.128.12.147;1pkt 1fpkt", shape=invtriangle, color=brown];
stat444[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.128.12.147:0, 217.149.74.132:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2777--3543[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="217.149.74.132" src_ip="217.128.12.147"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_445{
style=filled;
color=gray75;
2783[label="220.66.245.148;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3546[label="220.66.245.148;7pkt 7fpkt", shape=invtriangle, color=brown];
stat445[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.66.245.148:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 49816: (7.14286%)&lt;BR/&gt; 32776: (7.14286%)&lt;BR/&gt; 3154: (7.14286%)&lt;BR/&gt; 3074: (7.14286%)&gt;];
}
2783--3546[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter src_ip="220.66.245.148" src_port="1863"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_446{
style=filled;
color=gray75;
2794[label="216.220.10.150;27pkt 27fpkt", shape=pentagon, color=darkviolet];
3550[label="216.220.10.150;27pkt 27fpkt", shape=invtriangle, color=brown];
stat446[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.220.10.150:*, *:17300}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 17300: (50%)&lt;BR/&gt; 4270: (1.85185%)&lt;BR/&gt; 4252: (1.85185%)&lt;BR/&gt; 4251: (1.85185%)&lt;BR/&gt; 4250: (1.85185%)&gt;];
}
2794--3550[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_port="17300" src_ip="216.220.10.150"/>
    </slice>
    <from sec="1065762340" usec="0"/>
    <to sec="1065762373" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_448{
style=filled;
color=gray75;
2816[label="216.215.8.156;232pkt 232fpkt", shape=pentagon, color=darkviolet];
3563[label="216.215.8.156;232pkt 232fpkt", shape=invtriangle, color=brown];
stat448[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.215.8.156:0, *:0}[94.3966%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.3966%)&lt;BR/&gt; 80: (2.80172%)&lt;BR/&gt; 59056: (0.215517%)&lt;BR/&gt; 58542: (0.215517%)&lt;BR/&gt; 58220: (0.215517%)&gt;];
}
2816--3563[label="1;232pkt 232fpkt"];
</description>
    <slice>
      <filter src_ip="216.215.8.156"/>
    </slice>
    <from sec="1065762001" usec="0"/>
    <to sec="1065762900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.78424,1.34452,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_449{
style=filled;
color=gray75;
2827[label="88.57.37.161;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3569[label="88.57.37.161;6pkt 6fpkt", shape=invtriangle, color=brown];
3883[label="88.57.37.161;6pkt 6fpkt", shape=invhouse, color=bisque];
stat449[shape=component, label=&lt;Rules:&lt;BR/&gt;{88.57.37.161:80, 143.234.147.4:*}[50%]&lt;BR/&gt;{88.57.37.161:80, 217.54.92.178:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58709: (8.33333%)&lt;BR/&gt; 4887: (8.33333%)&lt;BR/&gt; 4886: (8.33333%)&lt;BR/&gt; 1483: (8.33333%)&gt;];
}
2827--3569[label="1;6pkt 6fpkt"];
2827--3883[label="1;6pkt 6fpkt"];
3569--3883[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="143.234.147.4" src_ip="88.57.37.161" src_port="80"/>
      <filter dst_ip="217.54.92.178" src_ip="88.57.37.161" src_port="80"/>
    </slice>
    <from sec="1065762121" usec="0"/>
    <to sec="1065762893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.643066,1.41136,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="91.198.86.163"/>
    </slice>
    <from sec="1065762146" usec="0"/>
    <to sec="1065762179" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.78424,1.34452,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_451{
style=filled;
color=gray75;
2842[label="137.88.56.164;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3577[label="137.88.56.164;10pkt 10fpkt", shape=invtriangle, color=brown];
3885[label="137.88.56.164;10pkt 10fpkt", shape=invhouse, color=bisque];
stat451[shape=component, label=&lt;Rules:&lt;BR/&gt;{137.88.56.164:*, *:25}[70%]&lt;BR/&gt;{137.88.56.164:80, 91.161.104.127:*}[20%]&lt;BR/&gt;{137.88.56.164:*, 140.209.34.35:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (35%)&lt;BR/&gt; 80: (10%)&lt;BR/&gt; 54617: (5%)&lt;BR/&gt; 54491: (5%)&lt;BR/&gt; 54244: (5%)&gt;];
}
2842--3577[label="1;10pkt 10fpkt"];
2842--3885[label="1;10pkt 10fpkt"];
3577--3885[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="140.209.34.35" src_ip="137.88.56.164"/>
      <filter dst_port="25" src_ip="137.88.56.164"/>
      <filter dst_ip="91.161.104.127" src_ip="137.88.56.164" src_port="80"/>
    </slice>
    <from sec="1065762057" usec="0"/>
    <to sec="1065762872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_452{
style=filled;
color=gray75;
2850[label="210.171.50.167;191pkt 191fpkt", shape=pentagon, color=darkviolet];
3580[label="210.171.50.167;191pkt 191fpkt", shape=invtriangle, color=brown];
stat452[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.171.50.167:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2850--3580[label="1;191pkt 191fpkt"];
</description>
    <slice>
      <filter src_ip="210.171.50.167"/>
    </slice>
    <from sec="1065762001" usec="0"/>
    <to sec="1065762896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_453{
style=filled;
color=gray75;
2854[label="88.57.3.168;22pkt 22fpkt", shape=pentagon, color=darkviolet];
3583[label="88.57.3.168;22pkt 22fpkt", shape=invtriangle, color=brown];
stat453[shape=component, label=&lt;Rules:&lt;BR/&gt;{88.57.3.168:80, 143.234.186.24:*}[54.5455%]&lt;BR/&gt;{88.57.3.168:80, 143.234.189.96:*}[22.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50867: (2.27273%)&lt;BR/&gt; 9171: (2.27273%)&lt;BR/&gt; 1878: (2.27273%)&lt;BR/&gt; 1867: (2.27273%)&gt;];
}
2854--3583[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="143.234.186.24" src_ip="88.57.3.168" src_port="80"/>
      <filter dst_ip="143.234.189.96" src_ip="88.57.3.168" src_port="80"/>
    </slice>
    <from sec="1065762005" usec="0"/>
    <to sec="1065762893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_454{
style=filled;
color=gray75;
2857[label="93.209.229.168;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3584[label="93.209.229.168;2pkt 2fpkt", shape=invtriangle, color=brown];
stat454[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.209.229.168:2300, 217.54.77.132:2303}[50%]&lt;BR/&gt;{93.209.229.168:2300, 217.54.77.190:2302}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2300: (50%)&lt;BR/&gt; 2303: (25%)&lt;BR/&gt; 2302: (25%)&gt;];
}
2857--3584[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="217.54.77.190" dst_port="2302" src_ip="93.209.229.168" src_port="2300"/>
      <filter dst_ip="217.54.77.132" dst_port="2303" src_ip="93.209.229.168" src_port="2300"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_456{
style=filled;
color=gray75;
2863[label="220.66.241.169;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3589[label="220.66.241.169;5pkt 5fpkt", shape=invtriangle, color=brown];
stat456[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.66.241.169:1863, 137.157.137.18:49612}[20%]&lt;BR/&gt;{220.66.241.169:1863, 143.234.75.131:1284}[20%]&lt;BR/&gt;{220.66.241.169:1863, 216.207.168.162:3676}[20%]&lt;BR/&gt;{220.66.241.169:1863, 137.157.139.169:1092}[20%]&lt;BR/&gt;{220.66.241.169:1863, 216.207.168.191:3080}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 49612: (10%)&lt;BR/&gt; 3676: (10%)&lt;BR/&gt; 3080: (10%)&lt;BR/&gt; 1284: (10%)&gt;];
}
2863--3589[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="216.207.168.191" dst_port="3080" src_ip="220.66.241.169" src_port="1863"/>
      <filter dst_ip="137.157.139.169" dst_port="1092" src_ip="220.66.241.169" src_port="1863"/>
      <filter dst_ip="216.207.168.162" dst_port="3676" src_ip="220.66.241.169" src_port="1863"/>
      <filter dst_ip="143.234.75.131" dst_port="1284" src_ip="220.66.241.169" src_port="1863"/>
      <filter dst_ip="137.157.137.18" dst_port="49612" src_ip="220.66.241.169" src_port="1863"/>
    </slice>
    <from sec="1065762081" usec="0"/>
    <to sec="1065762806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.78424,1.34452,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_457{
style=filled;
color=gray75;
2868[label="202.61.152.170;32pkt 32fpkt", shape=pentagon, color=darkviolet];
3592[label="202.61.152.170;32pkt 32fpkt", shape=invtriangle, color=brown];
3888[label="202.61.152.170;32pkt 32fpkt", shape=invhouse, color=bisque];
stat457[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.61.152.170:80, 137.157.136.215:*}[37.5%]&lt;BR/&gt;{202.61.152.170:80, 137.157.136.76:*}[21.875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2197: (1.5625%)&lt;BR/&gt; 2196: (1.5625%)&lt;BR/&gt; 2191: (1.5625%)&lt;BR/&gt; 2190: (1.5625%)&gt;];
}
2868--3592[label="1;32pkt 32fpkt"];
2868--3888[label="1;32pkt 32fpkt"];
3592--3888[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="137.157.136.215" src_ip="202.61.152.170" src_port="80"/>
      <filter dst_ip="137.157.136.76" src_ip="202.61.152.170" src_port="80"/>
    </slice>
    <from sec="1065762067" usec="0"/>
    <to sec="1065762852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_458{
style=filled;
color=gray75;
2879[label="33.45.168.172;128pkt 128fpkt", shape=pentagon, color=darkviolet];
3598[label="33.45.168.172;128pkt 128fpkt", shape=invtriangle, color=brown];
stat458[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.45.168.172:0, *:0}[93.75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (93.75%)&lt;BR/&gt; 135: (3.125%)&lt;BR/&gt; 33625: (0.390625%)&lt;BR/&gt; 33063: (0.390625%)&lt;BR/&gt; 27561: (0.390625%)&gt;];
}
2879--3598[label="1;128pkt 128fpkt"];
</description>
    <slice>
      <filter src_ip="33.45.168.172"/>
    </slice>
    <from sec="1065762014" usec="0"/>
    <to sec="1065762899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_459{
style=filled;
color=gray75;
2881[label="92.25.27.173;236pkt 236fpkt", shape=pentagon, color=darkviolet];
3599[label="92.25.27.173;236pkt 236fpkt", shape=invtriangle, color=brown];
stat459[shape=component, label=&lt;Rules:&lt;BR/&gt;{92.25.27.173:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2881--3599[label="1;236pkt 236fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="92.25.27.173" src_port="1026"/>
    </slice>
    <from sec="1065762604" usec="0"/>
    <to sec="1065762642" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_463{
style=filled;
color=gray75;
2904[label="194.99.128.178;119pkt 119fpkt", shape=pentagon, color=darkviolet];
3614[label="194.99.128.178;119pkt 119fpkt", shape=invtriangle, color=brown];
stat463[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.99.128.178:0, *:0}[89.916%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (89.916%)&lt;BR/&gt; 135: (3.36134%)&lt;BR/&gt; 80: (1.68067%)&lt;BR/&gt; 65062: (0.420168%)&lt;BR/&gt; 64989: (0.420168%)&gt;];
}
2904--3614[label="1;119pkt 119fpkt"];
</description>
    <slice>
      <filter src_ip="194.99.128.178"/>
    </slice>
    <from sec="1065762010" usec="0"/>
    <to sec="1065762898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_465{
style=filled;
color=gray75;
2921[label="220.66.241.182;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3621[label="220.66.241.182;1pkt 1fpkt", shape=invtriangle, color=brown];
stat465[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.66.241.182:1863, 137.157.128.165:1096}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1096: (50%)&gt;];
}
2921--3621[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="137.157.128.165" dst_port="1096" src_ip="220.66.241.182" src_port="1863"/>
    </slice>
    <from sec="1065762375" usec="0"/>
    <to sec="1065762624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_466{
style=filled;
color=gray75;
2926[label="70.209.172.184;20pkt 20fpkt", shape=pentagon, color=darkviolet];
3626[label="70.209.172.184;20pkt 20fpkt", shape=invtriangle, color=brown];
stat466[shape=component, label=&lt;Rules:&lt;BR/&gt;{70.209.172.184:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 52140: (2.5%)&lt;BR/&gt; 52139: (2.5%)&lt;BR/&gt; 52138: (2.5%)&lt;BR/&gt; 52137: (2.5%)&gt;];
}
2926--3626[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="70.209.172.184"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.643066,1.41136,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="71.18.67.185"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.78424,1.34452,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_468{
style=filled;
color=gray75;
2931[label="165.98.138.185;24pkt 24fpkt", shape=pentagon, color=darkviolet];
3630[label="165.98.138.185;24pkt 24fpkt", shape=invtriangle, color=brown];
3900[label="165.98.138.185;24pkt 24fpkt", shape=invhouse, color=bisque];
stat468[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.98.138.185:80, 137.101.49.214:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4625: (2.08333%)&lt;BR/&gt; 4624: (2.08333%)&lt;BR/&gt; 4623: (2.08333%)&lt;BR/&gt; 4622: (2.08333%)&gt;];
}
2931--3630[label="1;24pkt 24fpkt"];
2931--3900[label="1;24pkt 24fpkt"];
3630--3900[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="137.101.49.214" src_ip="165.98.138.185" src_port="80"/>
    </slice>
    <from sec="1065762728" usec="0"/>
    <to sec="1065762769" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_471{
style=filled;
color=gray75;
2946[label="217.54.173.188;21pkt 21fpkt", shape=pentagon, color=darkviolet];
3638[label="217.54.173.188;21pkt 21fpkt", shape=invtriangle, color=brown];
stat471[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.54.173.188:25, 200.48.109.106:*}[23.8095%]&lt;BR/&gt;{217.54.173.188:25, 201.206.149.126:*}[23.8095%]&lt;BR/&gt;{217.54.173.188:*, *:25}[23.8095%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (47.619%)&lt;BR/&gt; 123: (4.7619%)&lt;BR/&gt; 65023: (2.38095%)&lt;BR/&gt; 64722: (2.38095%)&lt;BR/&gt; 52187: (2.38095%)&gt;];
}
2946--3638[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="217.54.173.188"/>
      <filter dst_ip="201.206.149.126" src_ip="217.54.173.188" src_port="25"/>
      <filter dst_ip="200.48.109.106" src_ip="217.54.173.188" src_port="25"/>
    </slice>
    <from sec="1065762010" usec="0"/>
    <to sec="1065762882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_472{
style=filled;
color=gray75;
2954[label="210.248.108.190;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3642[label="210.248.108.190;1pkt 1fpkt", shape=invtriangle, color=brown];
stat472[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.248.108.190:25, 218.226.132.224:3322}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3322: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
2954--3642[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="218.226.132.224" dst_port="3322" src_ip="210.248.108.190" src_port="25"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_473{
style=filled;
color=gray75;
2963[label="202.87.11.193;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3647[label="202.87.11.193;1pkt 1fpkt", shape=invtriangle, color=brown];
stat473[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.87.11.193:80, 165.120.29.118:1363}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1363: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2963--3647[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="165.120.29.118" dst_port="1363" src_ip="202.87.11.193" src_port="80"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_474{
style=filled;
color=gray75;
2968[label="68.90.169.193;143pkt 143fpkt", shape=pentagon, color=darkviolet];
3650[label="68.90.169.193;143pkt 143fpkt", shape=invtriangle, color=brown];
stat474[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.90.169.193:64435, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64435: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2968--3650[label="1;143pkt 143fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="68.90.169.193" src_port="64435"/>
    </slice>
    <from sec="1065762205" usec="0"/>
    <to sec="1065762228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.78424,1.34452,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_475{
style=filled;
color=gray75;
2979[label="91.46.214.195;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3656[label="91.46.214.195;3pkt 3fpkt", shape=invtriangle, color=brown];
3912[label="91.46.214.195;3pkt 3fpkt", shape=invhouse, color=bisque];
stat475[shape=component, label=&lt;Rules:&lt;BR/&gt;{91.46.214.195:80, 217.58.238.95:37192}[33.3333%]&lt;BR/&gt;{91.46.214.195:80, 165.120.29.118:1367}[33.3333%]&lt;BR/&gt;{91.46.214.195:80, 165.120.29.119:1924}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37192: (16.6667%)&lt;BR/&gt; 1924: (16.6667%)&lt;BR/&gt; 1367: (16.6667%)&gt;];
}
2979--3656[label="1;3pkt 3fpkt"];
2979--3912[label="1;3pkt 3fpkt"];
3656--3912[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="165.120.29.119" dst_port="1924" src_ip="91.46.214.195" src_port="80"/>
      <filter dst_ip="165.120.29.118" dst_port="1367" src_ip="91.46.214.195" src_port="80"/>
      <filter dst_ip="217.58.238.95" dst_port="37192" src_ip="91.46.214.195" src_port="80"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.643066,1.41136,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.90.25.196"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_477{
style=filled;
color=gray75;
2984[label="197.32.86.196;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3659[label="197.32.86.196;1pkt 1fpkt", shape=invtriangle, color=brown];
stat477[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.32.86.196:36334, 160.206.84.208:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 36334: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
2984--3659[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.206.84.208" dst_port="25" src_ip="197.32.86.196" src_port="36334"/>
    </slice>
    <from sec="1065762669" usec="0"/>
    <to sec="1065762704" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_479{
style=filled;
color=gray75;
2997[label="48.10.48.200;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3664[label="48.10.48.200;2pkt 2fpkt", shape=invtriangle, color=brown];
stat479[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.10.48.200:80, 217.58.238.27:21936}[50%]&lt;BR/&gt;{48.10.48.200:80, 217.58.238.27:21939}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 21939: (25%)&lt;BR/&gt; 21936: (25%)&gt;];
}
2997--3664[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="217.58.238.27" dst_port="21939" src_ip="48.10.48.200" src_port="80"/>
      <filter dst_ip="217.58.238.27" dst_port="21936" src_ip="48.10.48.200" src_port="80"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_481{
style=filled;
color=gray75;
3009[label="217.58.251.203;343pkt 343fpkt", shape=pentagon, color=darkviolet];
3670[label="217.58.251.203;343pkt 343fpkt", shape=invtriangle, color=brown];
stat481[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.58.251.203:0, *:0}[97.6676%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.6676%)&lt;BR/&gt; 80: (0.874636%)&lt;BR/&gt; 135: (0.291545%)&lt;BR/&gt; 64261: (0.145773%)&lt;BR/&gt; 18497: (0.145773%)&gt;];
}
3009--3670[label="1;343pkt 343fpkt"];
</description>
    <slice>
      <filter src_ip="217.58.251.203"/>
    </slice>
    <from sec="1065762002" usec="0"/>
    <to sec="1065762900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_482{
style=filled;
color=gray75;
3020[label="201.231.152.207;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3674[label="201.231.152.207;3pkt 3fpkt", shape=invtriangle, color=brown];
stat482[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.231.152.207:48651, 137.68.167.228:139}[33.3333%]&lt;BR/&gt;{201.231.152.207:48663, 137.68.167.230:139}[33.3333%]&lt;BR/&gt;{201.231.152.207:48669, 137.68.167.247:139}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 48669: (16.6667%)&lt;BR/&gt; 48663: (16.6667%)&lt;BR/&gt; 48651: (16.6667%)&gt;];
}
3020--3674[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="137.68.167.247" dst_port="139" src_ip="201.231.152.207" src_port="48669"/>
      <filter dst_ip="137.68.167.230" dst_port="139" src_ip="201.231.152.207" src_port="48663"/>
      <filter dst_ip="137.68.167.228" dst_port="139" src_ip="201.231.152.207" src_port="48651"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.78424,1.34452,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_483{
style=filled;
color=gray75;
3036[label="89.94.168.210;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3681[label="89.94.168.210;3pkt 3fpkt", shape=invtriangle, color=brown];
3923[label="89.94.168.210;3pkt 3fpkt", shape=invhouse, color=bisque];
stat483[shape=component, label=&lt;Rules:&lt;BR/&gt;{89.94.168.210:80, 160.206.176.121:3588}[33.3333%]&lt;BR/&gt;{89.94.168.210:80, 160.206.176.121:3589}[33.3333%]&lt;BR/&gt;{89.94.168.210:80, 160.206.176.121:3590}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3590: (16.6667%)&lt;BR/&gt; 3589: (16.6667%)&lt;BR/&gt; 3588: (16.6667%)&gt;];
}
3036--3681[label="1;3pkt 3fpkt"];
3036--3923[label="1;3pkt 3fpkt"];
3681--3923[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="160.206.176.121" dst_port="3590" src_ip="89.94.168.210" src_port="80"/>
      <filter dst_ip="160.206.176.121" dst_port="3589" src_ip="89.94.168.210" src_port="80"/>
      <filter dst_ip="160.206.176.121" dst_port="3588" src_ip="89.94.168.210" src_port="80"/>
    </slice>
    <from sec="1065762455" usec="0"/>
    <to sec="1065762504" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_484{
style=filled;
color=gray75;
3039[label="151.41.12.211;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3683[label="151.41.12.211;1pkt 1fpkt", shape=invtriangle, color=brown];
stat484[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.41.12.211:44647, 210.250.20.137:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 44647: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
3039--3683[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.250.20.137" dst_port="25" src_ip="151.41.12.211" src_port="44647"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.643066,1.41136,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.66.41.212"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_487{
style=filled;
color=gray75;
3080[label="34.105.82.220;162pkt 162fpkt", shape=pentagon, color=darkviolet];
3709[label="34.105.82.220;162pkt 162fpkt", shape=invtriangle, color=brown];
stat487[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.105.82.220:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3080--3709[label="1;162pkt 162fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="34.105.82.220" src_port="1031"/>
    </slice>
    <from sec="1065762652" usec="0"/>
    <to sec="1065762677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_488{
style=filled;
color=gray75;
3085[label="201.25.208.220;143pkt 143fpkt", shape=pentagon, color=darkviolet];
3711[label="201.25.208.220;143pkt 143fpkt", shape=invtriangle, color=brown];
stat488[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.25.208.220:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 51020: (0.34965%)&lt;BR/&gt; 51014: (0.34965%)&lt;BR/&gt; 51007: (0.34965%)&lt;BR/&gt; 51001: (0.34965%)&gt;];
}
3085--3711[label="1;143pkt 143fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.25.208.220"/>
    </slice>
    <from sec="1065762223" usec="0"/>
    <to sec="1065762248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_489{
style=filled;
color=gray75;
3087[label="91.70.44.221;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3712[label="91.70.44.221;17pkt 17fpkt", shape=invtriangle, color=brown];
stat489[shape=component, label=&lt;Rules:&lt;BR/&gt;{91.70.44.221:80, 143.234.149.213:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1568: (2.94118%)&lt;BR/&gt; 1567: (2.94118%)&lt;BR/&gt; 1566: (2.94118%)&lt;BR/&gt; 1565: (2.94118%)&gt;];
}
3087--3712[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="143.234.149.213" src_ip="91.70.44.221" src_port="80"/>
    </slice>
    <from sec="1065762848" usec="0"/>
    <to sec="1065762898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_491{
style=filled;
color=gray75;
3104[label="216.207.171.224;69pkt 69fpkt", shape=pentagon, color=darkviolet];
3719[label="216.207.171.224;69pkt 69fpkt", shape=invtriangle, color=brown];
stat491[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.207.171.224:0, *:0}[92.7536%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (92.7536%)&lt;BR/&gt; 135: (2.17391%)&lt;BR/&gt; 80: (1.44928%)&lt;BR/&gt; 4744: (0.724638%)&lt;BR/&gt; 4227: (0.724638%)&gt;];
}
3104--3719[label="1;69pkt 69fpkt"];
</description>
    <slice>
      <filter src_ip="216.207.171.224"/>
    </slice>
    <from sec="1065762055" usec="0"/>
    <to sec="1065762873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_494{
style=filled;
color=gray75;
3129[label="194.201.6.233;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3729[label="194.201.6.233;2pkt 2fpkt", shape=invtriangle, color=brown];
stat494[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.201.6.233:4476, 137.130.191.90:1434}[50%]&lt;BR/&gt;{194.201.6.233:4476, 216.224.11.200:1434}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4476: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
3129--3729[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="216.224.11.200" dst_port="1434" src_ip="194.201.6.233" src_port="4476"/>
      <filter dst_ip="137.130.191.90" dst_port="1434" src_ip="194.201.6.233" src_port="4476"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.643066,1.41136,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.163.35.234"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_497{
style=filled;
color=gray75;
3148[label="202.47.8.240;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3742[label="202.47.8.240;9pkt 9fpkt", shape=invtriangle, color=brown];
stat497[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.47.8.240:80, 216.224.209.93:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 48044: (5.55556%)&lt;BR/&gt; 48042: (5.55556%)&lt;BR/&gt; 48041: (5.55556%)&lt;BR/&gt; 48040: (5.55556%)&gt;];
}
3148--3742[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="216.224.209.93" src_ip="202.47.8.240" src_port="80"/>
    </slice>
    <from sec="1065762881" usec="0"/>
    <to sec="1065762894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.643066,1.41136,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="70.104.52.240"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.643066,1.41136,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.182.187.249"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.643066,1.41136,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="91.46.209.250"/>
    </slice>
    <from sec="1065762472" usec="0"/>
    <to sec="1065762535" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.504645,1.31986,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_501{
style=filled;
color=gray75;
3189[label="209.106.114.255;130pkt 130fpkt", shape=pentagon, color=darkviolet];
3757[label="209.106.114.255;130pkt 130fpkt", shape=invtriangle, color=brown];
stat501[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.106.114.255:0, *:0}[93.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (93.0769%)&lt;BR/&gt; 135: (2.30769%)&lt;BR/&gt; 80: (1.15385%)&lt;BR/&gt; 41295: (0.384615%)&lt;BR/&gt; 40996: (0.384615%)&gt;];
}
3189--3757[label="1;130pkt 130fpkt"];
</description>
    <slice>
      <filter src_ip="209.106.114.255"/>
    </slice>
    <from sec="1065762006" usec="0"/>
    <to sec="1065762885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828446,1.46673,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.87.0.0"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828446,1.46673,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="90.42.140.0"/>
    </slice>
    <from sec="1065762013" usec="0"/>
    <to sec="1065762747" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828446,1.46673,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.202.212.10"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828446,1.46673,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="70.48.232.39"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828446,1.46673,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="203.193.18.68"/>
    </slice>
    <from sec="1065762269" usec="0"/>
    <to sec="1065762422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828446,1.46673,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="203.92.64.75"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828446,1.46673,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.47.118.83"/>
    </slice>
    <from sec="1065762686" usec="0"/>
    <to sec="1065762867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828446,1.46673,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="91.82.38.104"/>
    </slice>
    <from sec="1065762900" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828446,1.46673,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.135.108.117"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828446,1.46673,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="70.159.221.137"/>
    </slice>
    <from sec="1065762000" usec="0"/>
    <to sec="1065762901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828446,1.46673,010,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.158.237.138"/>
    </slice>
    <from sec="1065762576" usec="0"/>
    <to sec="1065762779" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828446,1.46673,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="88.102.122.140"/>
    </slice>
    <from sec="1065762277" usec="0"/>
    <to sec="1065762296" usec="0"/>
  </anomaly>

</admd:annotation>
