<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="1.0201,2.1492,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="156.143.232.76" dst_port="80" proto="tcp" src_ip="202.192.169.15" src_port="41452"/>
      <filter dst_ip="156.143.232.76" dst_port="80" proto="udp" src_ip="202.192.169.15" src_port="41452"/>
      <from sec="1072933591" usec="0"/>
      <to sec="1072933594" usec="0"/>
    </slice>
    <from sec="1072933591" usec="0"/>
    <to sec="1072933594" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0201,2.1492,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0201,2.1492,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
    </slice>
    <from sec="49119400" usec="0"/>
    <to sec="49113592" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0201,2.1492,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0201,2.1492,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
      <filter proto="icmp"/>
      <filter proto="icmp"/>
      <filter proto="icmp"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0201,2.1492,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0201,2.1492,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="1.238.146.21" src_port="1027"/>
      <from sec="1072933557" usec="0"/>
      <to sec="1072933570" usec="0"/>
    </slice>
    <from sec="1072933557" usec="0"/>
    <to sec="1072933570" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0201,2.1492,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="7.106.196.30" src_port="1091"/>
      <from sec="1072933844" usec="0"/>
      <to sec="1072933859" usec="0"/>
    </slice>
    <from sec="1072933844" usec="0"/>
    <to sec="1072933859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0201,2.1492,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="200.52.249.50" src_port="1038"/>
      <filter dst_port="137" proto="udp" src_ip="200.52.249.50" src_port="1040"/>
      <from sec="1072933496" usec="0"/>
      <to sec="1072933918" usec="0"/>
    </slice>
    <from sec="1072933496" usec="0"/>
    <to sec="1072933918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0201,2.1492,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="214.16.157.54" src_port="1028"/>
      <filter dst_port="137" proto="udp" src_ip="214.16.157.54" src_port="1028"/>
      <filter dst_port="1434" proto="tcp" src_ip="214.16.157.54" src_port="1028"/>
      <filter dst_port="1434" proto="udp" src_ip="214.16.157.54" src_port="1028"/>
      <filter dst_port="137" proto="tcp" src_ip="214.16.157.54" src_port="1030"/>
      <filter dst_port="137" proto="udp" src_ip="214.16.157.54" src_port="1030"/>
      <filter dst_port="1434" proto="tcp" src_ip="214.16.157.54" src_port="1030"/>
      <filter dst_port="1434" proto="udp" src_ip="214.16.157.54" src_port="1030"/>
      <filter dst_port="137" proto="tcp" src_ip="214.16.157.54" src_port="1024"/>
      <filter dst_port="137" proto="udp" src_ip="214.16.157.54" src_port="1024"/>
      <filter dst_port="1434" proto="tcp" src_ip="214.16.157.54" src_port="1024"/>
      <filter dst_port="1434" proto="udp" src_ip="214.16.157.54" src_port="1024"/>
      <from sec="1072933937" usec="0"/>
      <to sec="1072933946" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="111.11.140.138" src_port="1028"/>
      <filter dst_port="137" proto="udp" src_ip="111.11.140.138" src_port="1028"/>
      <filter dst_port="1434" proto="tcp" src_ip="111.11.140.138" src_port="1028"/>
      <filter dst_port="1434" proto="udp" src_ip="111.11.140.138" src_port="1028"/>
      <filter dst_port="137" proto="tcp" src_ip="111.11.140.138" src_port="1030"/>
      <filter dst_port="137" proto="udp" src_ip="111.11.140.138" src_port="1030"/>
      <filter dst_port="1434" proto="tcp" src_ip="111.11.140.138" src_port="1030"/>
      <filter dst_port="1434" proto="udp" src_ip="111.11.140.138" src_port="1030"/>
      <filter dst_port="137" proto="tcp" src_ip="111.11.140.138" src_port="1024"/>
      <filter dst_port="137" proto="udp" src_ip="111.11.140.138" src_port="1024"/>
      <filter dst_port="1434" proto="tcp" src_ip="111.11.140.138" src_port="1024"/>
      <filter dst_port="1434" proto="udp" src_ip="111.11.140.138" src_port="1024"/>
      <from sec="1072933937" usec="0"/>
      <to sec="1072933946" usec="0"/>
    </slice>
    <from sec="1072933937" usec="0"/>
    <to sec="1072933946" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0201,2.1492,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="214.28.177.59" src_port="1028"/>
      <from sec="1072933206" usec="0"/>
      <to sec="1072933215" usec="0"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072933215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0201,2.1492,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="213.98.209.98" src_port="1027"/>
      <from sec="1072933272" usec="0"/>
      <to sec="1072933289" usec="0"/>
    </slice>
    <from sec="1072933272" usec="0"/>
    <to sec="1072933289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0201,2.1492,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="194.215.150.115" src_port="1032"/>
      <from sec="1072933234" usec="0"/>
      <to sec="1072933243" usec="0"/>
    </slice>
    <from sec="1072933234" usec="0"/>
    <to sec="1072933243" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0201,2.1492,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="111.161.113.228" src_port="1035"/>
      <from sec="1072933926" usec="0"/>
      <to sec="1072933944" usec="0"/>
    </slice>
    <from sec="1072933926" usec="0"/>
    <to sec="1072933944" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0201,2.1492,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="194.132.18.238" src_port="1030"/>
      <from sec="1072933602" usec="0"/>
      <to sec="1072933614" usec="0"/>
    </slice>
    <from sec="1072933602" usec="0"/>
    <to sec="1072933614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0201,2.1492,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="195.59.203.48"/>
      <from sec="1072933860" usec="0"/>
      <to sec="1072933868" usec="0"/>
    </slice>
    <from sec="1072933860" usec="0"/>
    <to sec="1072933868" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0201,2.1492,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="152.6.39.203" dst_port="135" proto="tcp" src_ip="5.209.39.61"/>
      <filter dst_ip="152.6.39.203" dst_port="4662" proto="tcp" src_ip="5.209.39.61"/>
      <from sec="1072933675" usec="0"/>
      <to sec="1072933692" usec="0"/>
    </slice>
    <from sec="1072933675" usec="0"/>
    <to sec="1072933692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31219,2.23102,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="49577888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31219,2.23102,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
    </slice>
    <from sec="49169288" usec="0"/>
    <to sec="49034104" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31219,2.23102,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
    </slice>
    <from sec="49349008" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31219,2.23102,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
      <filter proto="icmp"/>
      <filter proto="icmp"/>
      <filter proto="icmp"/>
    </slice>
    <from sec="49350640" usec="0"/>
    <to sec="515058192" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31219,2.23102,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
    </slice>
    <from sec="1920147490" usec="0"/>
    <to sec="171847458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31219,2.23102,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
    </slice>
    <from sec="1919897610" usec="0"/>
    <to sec="1919181889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.51816,2.40129,901,0 0 1 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
    </slice>
    <from sec="65536" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.51816,2.40129,901,0 0 1 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
    </slice>
    <from sec="1774" usec="0"/>
    <to sec="2308" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.51816,2.40129,901,0 0 1 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
    </slice>
    <from sec="515047424" usec="0"/>
    <to sec="49718560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.51816,2.40129,901,0 0 1 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
      <filter proto="icmp"/>
      <filter proto="icmp"/>
      <filter proto="icmp"/>
    </slice>
    <from sec="49720512" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.51816,2.40129,901,0 0 1 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
    </slice>
    <from sec="7667820" usec="0"/>
    <to sec="3276846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.51816,2.40129,901,0 0 1 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
    </slice>
    <from sec="2097162" usec="0"/>
    <to sec="6881388" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.872775,2.15948,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="212.84.10.130"/>
      <from sec="1072933200" usec="0"/>
      <to sec="1072934028" usec="0"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3296,2.10519,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_62{
style=filled;
color=gray75;
352[label="197.40.209.190;d;1pkt 1fpkt", shape=diamond, color=yellow];
379[label="152.160.133.17;s;4488pkt 4488fpkt", shape=diamond, color=yellow];
570[label="5.114.111.176;d;3pkt 3fpkt", shape=diamond, color=yellow];
879[label="201.130.19.147;d;1pkt 1fpkt", shape=diamond, color=yellow];
1150[label="152.160.133.17;s;4488pkt 4488fpkt", shape=hexagon, color=black];
1353[label="152.160.133.17;4802pkt 4802fpkt", shape=pentagon, color=darkviolet];
2554[label="152.160.133.17;4802pkt 4802fpkt", shape=invtriangle, color=brown];
3462[label="152.160.133.17;4803pkt 4803fpkt", shape=invhouse, color=bisque];
stat62[shape=component, label=&lt;Rules:&lt;BR/&gt;{152.160.133.17:0, *:0}[99.5838%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.6622%)&lt;BR/&gt; 49612: (0.166752%)&lt;BR/&gt; 53: (0.166752%)&lt;BR/&gt; 3473: (0.00213785%)&lt;BR/&gt; 135: (0.00213785%)&gt;];
}
352--379[label="1;1pkt 1fpkt"];
352--1150[label="1;1pkt 1fpkt"];
352--1353[label="1;1pkt 1fpkt"];
352--2554[label="1;1pkt 1fpkt"];
352--3462[label="1;1pkt 1fpkt"];
379--570[label="0.333333;1pkt 1fpkt"];
379--879[label="1;1pkt 1fpkt"];
379--1150[label="1;4488pkt 4488fpkt"];
379--1353[label="0.999777;4487pkt 4487fpkt"];
379--2554[label="0.999777;4487pkt 4487fpkt"];
379--3462[label="1;4488pkt 4488fpkt"];
570--1150[label="0.333333;1pkt 1fpkt"];
570--1353[label="0.333333;1pkt 1fpkt"];
570--2554[label="0.333333;1pkt 1fpkt"];
570--3462[label="0.333333;1pkt 1fpkt"];
879--1150[label="1;1pkt 1fpkt"];
879--1353[label="1;1pkt 1fpkt"];
879--2554[label="1;1pkt 1fpkt"];
879--3462[label="1;1pkt 1fpkt"];
1150--1353[label="0.999777;4487pkt 4487fpkt"];
1150--2554[label="0.999777;4487pkt 4487fpkt"];
1150--3462[label="1;4488pkt 4488fpkt"];
1353--2554[label="1;4802pkt 4802fpkt"];
1353--3462[label="1;4802pkt 4802fpkt"];
2554--3462[label="1;4802pkt 4802fpkt"];
</description>
    <slice>
      <filter src_ip="152.160.133.17"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.818742,2.0972,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_63{
style=filled;
color=gray75;
380[label="130.195.107.230;d;2pkt 2fpkt", shape=diamond, color=yellow];
381[label="201.222.66.81;s;1pkt 1fpkt", shape=diamond, color=yellow];
1702[label="201.222.66.81;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat63[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.222.66.81:15057, 130.195.107.230:2981}[50%]&lt;BR/&gt;{209.85.157.183:1863, 130.195.107.230:1030}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15057: (37.5%)&lt;BR/&gt; 2981: (37.5%)&lt;BR/&gt; 1863: (12.5%)&lt;BR/&gt; 1030: (12.5%)&gt;];
}
380--381[label="1;1pkt 1fpkt"];
380--1702[label="1;1pkt 1fpkt"];
381--1702[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.195.107.230" dst_port="1030" src_ip="209.85.157.183" src_port="1863"/>
      <filter dst_ip="130.195.107.230" dst_port="2981" src_ip="201.222.66.81" src_port="15057"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.872775,2.15948,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_64{
style=filled;
color=gray75;
414[label="152.6.39.134;d;12pkt 12fpkt", shape=diamond, color=yellow];
415[label="201.226.145.144;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat64[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.90.168.28:80, 152.6.39.134:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (34.6154%)&lt;BR/&gt; 4119: (7.69231%)&lt;BR/&gt; 2220: (7.69231%)&lt;BR/&gt; 8170: (3.84615%)&lt;BR/&gt; 8036: (3.84615%)&gt;];
}
414--415[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="152.6.39.134" src_ip="200.90.168.28" src_port="80"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072933278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31848,2.20296,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_66{
style=filled;
color=gray75;
518[label="130.195.243.193;d;3pkt 3fpkt", shape=diamond, color=yellow];
519[label="5.227.234.237;s;2pkt 2fpkt", shape=diamond, color=yellow];
999[label="5.227.234.237;s;2pkt 2fpkt", shape=hexagon, color=black];
stat66[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.227.234.238:5004, 130.195.243.193:2466}[33.3333%]&lt;BR/&gt;{5.227.234.237:554, 130.195.243.193:2465}[33.3333%]&lt;BR/&gt;{5.227.234.237:5004, 130.195.243.193:2468}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5004: (28.5714%)&lt;BR/&gt; 2468: (21.4286%)&lt;BR/&gt; 2465: (21.4286%)&lt;BR/&gt; 554: (21.4286%)&lt;BR/&gt; 2466: (7.14286%)&gt;];
}
518--519[label="1;2pkt 2fpkt"];
518--999[label="1;2pkt 2fpkt"];
519--999[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="130.195.243.193" dst_port="2468" src_ip="5.227.234.237" src_port="5004"/>
      <filter dst_ip="130.195.243.193" dst_port="2465" src_ip="5.227.234.237" src_port="554"/>
      <filter dst_ip="130.195.243.193" dst_port="2466" src_ip="5.227.234.238" src_port="5004"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31848,2.20296,011,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_67{
style=filled;
color=gray75;
396[label="156.143.243.232;s;12pkt 12fpkt", shape=diamond, color=yellow];
520[label="90.154.110.157;d;1pkt 1fpkt", shape=diamond, color=yellow];
549[label="23.10.123.115;d;1pkt 1fpkt", shape=diamond, color=yellow];
586[label="23.55.127.133;d;1pkt 1fpkt", shape=diamond, color=yellow];
844[label="23.48.145.76;d;2pkt 2fpkt", shape=diamond, color=yellow];
923[label="23.22.229.73;d;1pkt 1fpkt", shape=diamond, color=yellow];
973[label="156.143.243.232;s;12pkt 12fpkt", shape=hexagon, color=black];
stat67[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.143.243.232:6881, *:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (13.3333%)&lt;BR/&gt; 6883: (8.33333%)&lt;BR/&gt; 6882: (8.33333%)&lt;BR/&gt; 39767: (5%)&lt;BR/&gt; 39728: (5%)&gt;];
}
396--520[label="1;1pkt 1fpkt"];
396--549[label="1;1pkt 1fpkt"];
396--586[label="1;1pkt 1fpkt"];
396--844[label="1;2pkt 2fpkt"];
396--923[label="1;1pkt 1fpkt"];
396--973[label="1;12pkt 12fpkt"];
520--973[label="1;1pkt 1fpkt"];
549--973[label="1;1pkt 1fpkt"];
586--973[label="1;1pkt 1fpkt"];
844--973[label="1;2pkt 2fpkt"];
923--973[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="156.143.243.232" src_port="6881"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889486,2.05965,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_68{
style=filled;
color=gray75;
537[label="205.143.219.179;d;1pkt 1fpkt", shape=diamond, color=yellow];
538[label="156.143.152.163;s;12pkt 12fpkt", shape=diamond, color=yellow];
2117[label="156.143.152.163;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3139[label="156.143.152.163;12pkt 12fpkt", shape=invtriangle, color=brown];
3881[label="156.143.152.163;11pkt 11fpkt", shape=invhouse, color=bisque];
stat68[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.143.152.163:*, 4.62.196.228:80}[50%]&lt;BR/&gt;{156.143.152.163:*, 5.29.60.6:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.6667%)&lt;BR/&gt; 57785: (5.20833%)&lt;BR/&gt; 7070: (5.20833%)&lt;BR/&gt; 57876: (4.16667%)&lt;BR/&gt; 57875: (4.16667%)&gt;];
}
537--538[label="1;1pkt 1fpkt"];
537--2117[label="1;1pkt 1fpkt"];
537--3139[label="1;1pkt 1fpkt"];
537--3881[label="1;1pkt 1fpkt"];
538--2117[label="1;12pkt 12fpkt"];
538--3139[label="1;12pkt 12fpkt"];
538--3881[label="1;11pkt 11fpkt"];
2117--3139[label="1;12pkt 12fpkt"];
2117--3881[label="1;11pkt 11fpkt"];
3139--3881[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="4.62.196.228" dst_port="80" src_ip="156.143.152.163"/>
      <filter dst_ip="5.29.60.6" dst_port="80" src_ip="156.143.152.163"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072933994" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828525,2.06109,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_69{
style=filled;
color=gray75;
426[label="152.6.38.34;d;5pkt 5fpkt", shape=diamond, color=yellow];
540[label="211.114.31.85;s;5pkt 5fpkt", shape=diamond, color=yellow];
1723[label="211.114.31.85;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2845[label="211.114.31.85;4pkt 4fpkt", shape=invtriangle, color=brown];
stat69[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.114.31.85:80, 152.6.38.34:10043}[20%]&lt;BR/&gt;{211.114.31.85:80, 152.6.38.34:10044}[20%]&lt;BR/&gt;{211.114.31.85:80, 152.6.38.34:10045}[20%]&lt;BR/&gt;{211.114.31.85:80, 152.6.38.34:10046}[20%]&lt;BR/&gt;{211.114.31.85:80, 152.6.38.34:10047}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 10047: (10.5263%)&lt;BR/&gt; 10046: (10.5263%)&lt;BR/&gt; 10045: (10.5263%)&lt;BR/&gt; 10044: (10.5263%)&gt;];
}
426--540[label="1;5pkt 5fpkt"];
426--1723[label="1;5pkt 5fpkt"];
426--2845[label="1;4pkt 4fpkt"];
540--1723[label="1;5pkt 5fpkt"];
540--2845[label="1;4pkt 4fpkt"];
1723--2845[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="152.6.38.34" dst_port="10047" src_ip="211.114.31.85" src_port="80"/>
      <filter dst_ip="152.6.38.34" dst_port="10046" src_ip="211.114.31.85" src_port="80"/>
      <filter dst_ip="152.6.38.34" dst_port="10045" src_ip="211.114.31.85" src_port="80"/>
      <filter dst_ip="152.6.38.34" dst_port="10044" src_ip="211.114.31.85" src_port="80"/>
      <filter dst_ip="152.6.38.34" dst_port="10043" src_ip="211.114.31.85" src_port="80"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31848,2.20296,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_70{
style=filled;
color=gray75;
551[label="213.117.0.127;d;10pkt 10fpkt", shape=diamond, color=yellow];
552[label="213.75.248.52;s;1pkt 1fpkt", shape=diamond, color=yellow];
1098[label="213.75.248.52;s;1pkt 1fpkt", shape=hexagon, color=black];
stat70[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 213.117.0.127:0}[50%]&lt;BR/&gt;{111.230.158.10:*, 213.117.0.127:*}[20%]&lt;BR/&gt;{5.188.81.23:*, 213.117.0.127:*}[20%]&lt;BR/&gt;{192.122.139.37:*, 213.117.0.127:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (41.6667%)&lt;BR/&gt; 51799: (12.5%)&lt;BR/&gt; 37514: (12.5%)&lt;BR/&gt; 61150: (4.16667%)&lt;BR/&gt; 61121: (4.16667%)&gt;];
}
551--552[label="1;1pkt 1fpkt"];
551--1098[label="1;1pkt 1fpkt"];
552--1098[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.117.0.127" src_ip="192.122.139.37"/>
      <filter dst_ip="213.117.0.127" src_ip="5.188.81.23"/>
      <filter dst_ip="213.117.0.127" src_ip="111.230.158.10"/>
      <filter dst_ip="213.117.0.127"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828525,2.06109,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_71{
style=filled;
color=gray75;
452[label="22.84.94.124;s;14pkt 14fpkt", shape=diamond, color=yellow];
559[label="168.55.179.15;d;14pkt 14fpkt", shape=diamond, color=yellow];
1921[label="22.84.94.124;16pkt 16fpkt", shape=pentagon, color=darkviolet];
2999[label="22.84.94.124;15pkt 15fpkt", shape=invtriangle, color=brown];
stat71[shape=component, label=&lt;Rules:&lt;BR/&gt;{22.84.94.124:*, 168.55.179.15:20}[81.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (39.8305%)&lt;BR/&gt; 21: (10.1695%)&lt;BR/&gt; 33862: (3.38983%)&lt;BR/&gt; 33335: (3.38983%)&lt;BR/&gt; 33327: (3.38983%)&gt;];
}
452--559[label="1;14pkt 14fpkt"];
452--1921[label="1;14pkt 14fpkt"];
452--2999[label="0.928571;13pkt 13fpkt"];
559--1921[label="1;14pkt 14fpkt"];
559--2999[label="0.928571;13pkt 13fpkt"];
1921--2999[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="168.55.179.15" dst_port="20" src_ip="22.84.94.124"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.872775,2.15948,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="1.8.11.233"/>
      <from sec="1072933200" usec="0"/>
      <to sec="1072934028" usec="0"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.872775,2.15948,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="90.119.220.95"/>
      <from sec="1072933200" usec="0"/>
      <to sec="1072934027" usec="0"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31848,2.20296,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_75{
style=filled;
color=gray75;
592[label="156.142.204.144;d;112pkt 112fpkt", shape=diamond, color=yellow];
593[label="194.217.76.61;s;111pkt 111fpkt", shape=diamond, color=yellow];
1079[label="194.217.76.61;s;111pkt 111fpkt", shape=hexagon, color=black];
stat75[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.217.76.61:*, 156.142.204.144:3128}[99.1071%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (50%)&lt;BR/&gt; 4963: (0.449102%)&lt;BR/&gt; 4921: (0.449102%)&lt;BR/&gt; 4874: (0.449102%)&lt;BR/&gt; 4791: (0.449102%)&gt;];
}
592--593[label="1;111pkt 111fpkt"];
592--1079[label="1;111pkt 111fpkt"];
593--1079[label="1;111pkt 111fpkt"];
</description>
    <slice>
      <filter dst_ip="156.142.204.144" dst_port="3128" src_ip="194.217.76.61"/>
    </slice>
    <from sec="1072933205" usec="0"/>
    <to sec="1072933629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.872775,2.15948,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_77{
style=filled;
color=gray75;
608[label="156.143.227.100;s;62pkt 62fpkt", shape=diamond, color=yellow];
616[label="194.1.66.67;d;6pkt 6fpkt", shape=diamond, color=yellow];
stat77[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.143.227.100:*, *:80}[53.2258%]&lt;BR/&gt;{156.143.227.100:32770, *:53}[22.5806%]&lt;BR/&gt;{156.143.227.100:*, *:8080}[22.5806%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (28.6765%)&lt;BR/&gt; 53: (11.0294%)&lt;BR/&gt; 32770: (10.2941%)&lt;BR/&gt; 8080: (10.2941%)&lt;BR/&gt; 36361: (1.47059%)&gt;];
}
608--616[label="1;6pkt 6fpkt"];
608--1221[label="0.016129;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="156.143.227.100"/>
      <filter dst_port="8080" src_ip="156.143.227.100"/>
      <filter dst_port="53" src_ip="156.143.227.100" src_port="32770"/>
    </slice>
    <from sec="1072933234" usec="0"/>
    <to sec="1072933734" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.28335,2.14195,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_78{
style=filled;
color=gray75;
619[label="173.165.221.159;d;1pkt 1fpkt", shape=diamond, color=yellow];
620[label="194.137.192.68;s;1pkt 1fpkt", shape=diamond, color=yellow];
1014[label="194.137.192.68;s;1pkt 1fpkt", shape=hexagon, color=black];
1629[label="194.137.192.68;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat78[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.137.192.68:6100, 173.165.221.159:1096}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6100: (50%)&lt;BR/&gt; 1096: (50%)&gt;];
}
619--620[label="1;1pkt 1fpkt"];
619--1014[label="1;1pkt 1fpkt"];
619--1629[label="1;1pkt 1fpkt"];
620--1014[label="1;1pkt 1fpkt"];
620--1629[label="1;1pkt 1fpkt"];
1014--1629[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="173.165.221.159" dst_port="1096" src_ip="194.137.192.68" src_port="6100"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31848,2.20296,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_79{
style=filled;
color=gray75;
628[label="168.55.133.195;d;19pkt 19fpkt", shape=diamond, color=yellow];
629[label="6.215.247.198;s;1pkt 1fpkt", shape=diamond, color=yellow];
1097[label="6.215.247.198;s;1pkt 1fpkt", shape=hexagon, color=black];
stat79[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 168.55.133.195:0}[68.4211%]&lt;BR/&gt;{*:*, 168.55.133.195:25}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (61.9048%)&lt;BR/&gt; 25: (9.52381%)&lt;BR/&gt; 3453: (7.14286%)&lt;BR/&gt; 873: (7.14286%)&lt;BR/&gt; 11468: (2.38095%)&gt;];
}
628--629[label="1;1pkt 1fpkt"];
628--1097[label="1;1pkt 1fpkt"];
629--1097[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.55.133.195" dst_port="25"/>
      <filter dst_ip="168.55.133.195"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.872775,2.15948,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="194.6.239.121"/>
      <from sec="1072933200" usec="0"/>
      <to sec="1072934028" usec="0"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.872775,2.15948,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="194.32.146.55"/>
      <from sec="1072933200" usec="0"/>
      <to sec="1072934028" usec="0"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.872775,2.15948,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="212.208.51.79"/>
      <from sec="1072933200" usec="0"/>
      <to sec="1072933938" usec="0"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072933938" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.872775,2.15948,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="213.117.10.131"/>
      <from sec="1072933200" usec="0"/>
      <to sec="1072933677" usec="0"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072933677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.872775,2.15948,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="156.143.199.36"/>
      <from sec="1072933202" usec="0"/>
      <to sec="1072934028" usec="0"/>
    </slice>
    <from sec="1072933202" usec="0"/>
    <to sec="1072934028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828525,2.06109,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_85{
style=filled;
color=gray75;
546[label="156.143.12.234;s;31pkt 31fpkt", shape=diamond, color=yellow];
635[label="194.204.46.205;d;2pkt 2fpkt", shape=diamond, color=yellow];
707[label="194.218.108.140;d;1pkt 1fpkt", shape=diamond, color=yellow];
2393[label="156.143.12.234;32pkt 32fpkt", shape=pentagon, color=darkviolet];
3339[label="156.143.12.234;32pkt 32fpkt", shape=invtriangle, color=brown];
stat85[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.143.12.234:*, 212.208.223.50:80}[46.875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (22.449%)&lt;BR/&gt; 8881: (7.14286%)&lt;BR/&gt; 8885: (3.06122%)&lt;BR/&gt; 8882: (3.06122%)&lt;BR/&gt; 6881: (3.06122%)&gt;];
}
546--635[label="1;2pkt 2fpkt"];
546--707[label="1;1pkt 1fpkt"];
546--1222[label="0.0322581;1pkt 1fpkt"];
546--2393[label="1;31pkt 31fpkt"];
546--3339[label="1;31pkt 31fpkt"];
635--2393[label="1;2pkt 2fpkt"];
635--3339[label="1;2pkt 2fpkt"];
707--2393[label="1;1pkt 1fpkt"];
707--3339[label="1;1pkt 1fpkt"];
2393--3339[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="212.208.223.50" dst_port="80" src_ip="156.143.12.234"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.872775,2.15948,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_86{
style=filled;
color=gray75;
639[label="213.117.0.209;s;1363pkt 1363fpkt", shape=diamond, color=yellow];
742[label="204.170.86.182;d;1204pkt 1204fpkt", shape=diamond, color=yellow];
stat86[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.117.0.209:*, 204.170.86.182:*}[99.5598%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (0.272692%)&lt;BR/&gt; 0: (0.233736%)&lt;BR/&gt; 51193: (0.077912%)&lt;BR/&gt; 64535: (0.038956%)&lt;BR/&gt; 60886: (0.038956%)&gt;];
}
639--742[label="1;1204pkt 1204fpkt"];
</description>
    <slice>
      <filter dst_ip="204.170.86.182" src_ip="213.117.0.209"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828525,2.06109,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_87{
style=filled;
color=gray75;
730[label="213.117.0.67;s;1908pkt 1908fpkt", shape=diamond, color=yellow];
793[label="209.102.112.186;d;935pkt 935fpkt", shape=diamond, color=yellow];
1615[label="213.117.0.67;1924pkt 1924fpkt", shape=pentagon, color=darkviolet];
2763[label="213.117.0.67;1923pkt 1923fpkt", shape=invtriangle, color=brown];
stat87[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.117.0.67:53, 209.102.112.186:*}[95.3742%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50.1719%)&lt;BR/&gt; 0: (0.38864%)&lt;BR/&gt; 32768: (0.0747384%)&lt;BR/&gt; 135: (0.0597907%)&lt;BR/&gt; 13546: (0.0523169%)&gt;];
}
730--793[label="1;935pkt 935fpkt"];
730--1221[label="0.000880282;1pkt 1fpkt"];
730--1615[label="1;1908pkt 1908fpkt"];
730--2763[label="0.999476;1907pkt 1907fpkt"];
793--1615[label="1;935pkt 935fpkt"];
793--2763[label="1;935pkt 935fpkt"];
1615--2763[label="1;1923pkt 1923fpkt"];
</description>
    <slice>
      <filter dst_ip="209.102.112.186" src_ip="213.117.0.67" src_port="53"/>
    </slice>
    <from sec="1072933203" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.872775,2.15948,053,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="195.47.233.28"/>
      <from sec="1072933200" usec="0"/>
      <to sec="1072933987" usec="0"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072933987" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31848,2.20296,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_89{
style=filled;
color=gray75;
814[label="212.139.217.26;s;26pkt 26fpkt", shape=diamond, color=yellow];
819[label="194.1.65.212;d;10pkt 10fpkt", shape=diamond, color=yellow];
1168[label="212.139.217.26;s;26pkt 26fpkt", shape=hexagon, color=black];
1170[label="194.1.65.212;d;10pkt 10fpkt", shape=hexagon, color=black];
stat89[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.139.217.26:80, 194.1.65.212:*}[38.4615%]&lt;BR/&gt;{212.139.217.26:0, *:0}[34.6154%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.5%)&lt;BR/&gt; 0: (25%)&lt;BR/&gt; 53307: (2.77778%)&lt;BR/&gt; 44374: (2.77778%)&lt;BR/&gt; 34563: (2.77778%)&gt;];
}
814--819[label="1;10pkt 10fpkt"];
814--1168[label="1;26pkt 26fpkt"];
814--1170[label="1;10pkt 10fpkt"];
819--1168[label="1;10pkt 10fpkt"];
819--1170[label="1;10pkt 10fpkt"];
1168--1170[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="194.1.65.212" src_ip="212.139.217.26" src_port="80"/>
      <filter src_ip="212.139.217.26"/>
    </slice>
    <from sec="1072933221" usec="0"/>
    <to sec="1072934027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3296,2.10519,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_90{
style=filled;
color=gray75;
821[label="152.160.175.137;s;62pkt 62fpkt", shape=diamond, color=yellow];
822[label="1.209.138.146;d;60pkt 60fpkt", shape=diamond, color=yellow];
1129[label="152.160.175.137;s;62pkt 62fpkt", shape=hexagon, color=black];
1984[label="152.160.175.137;61pkt 61fpkt", shape=pentagon, color=darkviolet];
3046[label="152.160.175.137;61pkt 61fpkt", shape=invtriangle, color=brown];
3815[label="152.160.175.137;61pkt 61fpkt", shape=invhouse, color=bisque];
stat90[shape=component, label=&lt;Rules:&lt;BR/&gt;{152.160.175.137:80, 1.209.138.146:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4006: (0.817439%)&lt;BR/&gt; 4005: (0.817439%)&lt;BR/&gt; 4004: (0.817439%)&lt;BR/&gt; 4003: (0.817439%)&gt;];
}
821--822[label="1;60pkt 60fpkt"];
821--1129[label="1;62pkt 62fpkt"];
821--1984[label="1;61pkt 61fpkt"];
821--3046[label="1;61pkt 61fpkt"];
821--3815[label="1;61pkt 61fpkt"];
822--1129[label="1;60pkt 60fpkt"];
822--1984[label="0.983333;59pkt 59fpkt"];
822--3046[label="0.983333;59pkt 59fpkt"];
822--3815[label="0.983333;59pkt 59fpkt"];
1129--1984[label="1;61pkt 61fpkt"];
1129--3046[label="1;61pkt 61fpkt"];
1129--3815[label="1;61pkt 61fpkt"];
1984--3046[label="1;61pkt 61fpkt"];
1984--3815[label="1;61pkt 61fpkt"];
3046--3815[label="1;61pkt 61fpkt"];
</description>
    <slice>
      <filter dst_ip="1.209.138.146" src_ip="152.160.175.137" src_port="80"/>
    </slice>
    <from sec="1072933391" usec="0"/>
    <to sec="1072933962" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.872775,2.15948,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="200.6.51.93"/>
      <from sec="1072933511" usec="0"/>
      <to sec="1072934028" usec="0"/>
    </slice>
    <from sec="1072933511" usec="0"/>
    <to sec="1072934028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889486,2.05965,501,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_93{
style=filled;
color=gray75;
859[label="168.55.208.145;d;54pkt 54fpkt", shape=diamond, color=yellow];
860[label="203.141.132.69;s;54pkt 54fpkt", shape=diamond, color=yellow];
1637[label="203.141.132.69;53pkt 53fpkt", shape=pentagon, color=darkviolet];
2781[label="203.141.132.69;53pkt 53fpkt", shape=invtriangle, color=brown];
3631[label="203.141.132.69;53pkt 53fpkt", shape=invhouse, color=bisque];
stat93[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.141.132.69:21, 168.55.208.145:*}[88.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (44.382%)&lt;BR/&gt; 20: (5.61798%)&lt;BR/&gt; 1129: (0.93633%)&lt;BR/&gt; 1128: (0.93633%)&lt;BR/&gt; 1127: (0.93633%)&gt;];
}
859--860[label="1;54pkt 54fpkt"];
859--1637[label="1;53pkt 53fpkt"];
859--2781[label="1;53pkt 53fpkt"];
859--3631[label="1;53pkt 53fpkt"];
860--1637[label="1;53pkt 53fpkt"];
860--2781[label="1;53pkt 53fpkt"];
860--3631[label="1;53pkt 53fpkt"];
1637--2781[label="1;53pkt 53fpkt"];
1637--3631[label="1;53pkt 53fpkt"];
2781--3631[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_ip="168.55.208.145" src_ip="203.141.132.69" src_port="21"/>
    </slice>
    <from sec="1072933294" usec="0"/>
    <to sec="1072933816" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31848,2.20296,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_94{
style=filled;
color=gray75;
728[label="212.84.42.66;s;340pkt 340fpkt", shape=diamond, color=yellow];
862[label="193.147.69.87;d;44pkt 44fpkt", shape=diamond, color=yellow];
1076[label="212.84.42.66;s;340pkt 340fpkt", shape=hexagon, color=black];
stat94[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.84.42.66:0, *:0}[34.7059%]&lt;BR/&gt;{212.84.42.66:*, *:53}[34.7059%]&lt;BR/&gt;{212.84.42.66:*, *:80}[28.8235%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (32.5967%)&lt;BR/&gt; 80: (16.5746%)&lt;BR/&gt; 53: (16.2983%)&lt;BR/&gt; 123: (0.414365%)&lt;BR/&gt; 1863: (0.276243%)&gt;];
}
728--862[label="1;44pkt 44fpkt"];
728--1076[label="1;340pkt 340fpkt"];
728--1221[label="0.0205882;7pkt 7fpkt"];
728--1222[label="0.00588235;2pkt 2fpkt"];
862--1076[label="1;44pkt 44fpkt"];
862--1222[label="0.0227273;1pkt 1fpkt"];
1076--1221[label="0.0205882;7pkt 7fpkt"];
1076--1222[label="0.00588235;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="212.84.42.66"/>
      <filter dst_port="80" src_ip="212.84.42.66"/>
      <filter src_ip="212.84.42.66"/>
    </slice>
    <from sec="1072933202" usec="0"/>
    <to sec="1072934028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.872775,2.15948,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_95{
style=filled;
color=gray75;
863[label="156.143.135.157;s;17pkt 17fpkt", shape=diamond, color=yellow];
864[label="90.144.98.80;d;12pkt 12fpkt", shape=diamond, color=yellow];
stat95[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.143.135.157:80, 90.144.98.80:*}[88.2353%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.2759%)&lt;BR/&gt; 65479: (3.44828%)&lt;BR/&gt; 65223: (3.44828%)&lt;BR/&gt; 64967: (3.44828%)&lt;BR/&gt; 64711: (3.44828%)&gt;];
}
863--864[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="90.144.98.80" src_ip="156.143.135.157" src_port="80"/>
    </slice>
    <from sec="1072933593" usec="0"/>
    <to sec="1072933971" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889486,2.05965,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_96{
style=filled;
color=gray75;
866[label="130.195.99.98;d;3pkt 3fpkt", shape=diamond, color=yellow];
867[label="4.108.59.6;s;2pkt 2fpkt", shape=diamond, color=yellow];
1285[label="4.108.59.6;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2502[label="4.108.59.6;1pkt 1fpkt", shape=invtriangle, color=brown];
3420[label="4.108.59.6;1pkt 1fpkt", shape=invhouse, color=bisque];
stat96[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.173.221.130:61515, 130.195.99.98:19337}[33.3333%]&lt;BR/&gt;{4.108.59.6:2506, 130.195.99.98:19337}[33.3333%]&lt;BR/&gt;{4.108.59.6:19744, 130.195.99.98:3630}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19744: (31.25%)&lt;BR/&gt; 3630: (31.25%)&lt;BR/&gt; 19337: (18.75%)&lt;BR/&gt; 2506: (12.5%)&lt;BR/&gt; 61515: (6.25%)&gt;];
}
866--867[label="1;2pkt 2fpkt"];
866--1285[label="1;1pkt 1fpkt"];
866--2502[label="1;1pkt 1fpkt"];
866--3420[label="1;1pkt 1fpkt"];
867--1285[label="1;1pkt 1fpkt"];
867--2502[label="1;1pkt 1fpkt"];
867--3420[label="1;1pkt 1fpkt"];
1285--2502[label="1;1pkt 1fpkt"];
1285--3420[label="1;1pkt 1fpkt"];
2502--3420[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.195.99.98" dst_port="3630" src_ip="4.108.59.6" src_port="19744"/>
      <filter dst_ip="130.195.99.98" dst_port="19337" src_ip="4.108.59.6" src_port="2506"/>
      <filter dst_ip="130.195.99.98" dst_port="19337" src_ip="7.173.221.130" src_port="61515"/>
    </slice>
    <from sec="1072933691" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.872775,2.15948,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="193.51.73.198"/>
      <from sec="1072933200" usec="0"/>
      <to sec="1072934028" usec="0"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.872775,2.15948,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_98{
style=filled;
color=gray75;
877[label="213.117.2.135;d;124pkt 124fpkt", shape=diamond, color=yellow];
stat98[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 213.117.2.135:0}[97.5806%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.5806%)&lt;BR/&gt; 135: (0.806452%)&lt;BR/&gt; 58110: (0.403226%)&lt;BR/&gt; 4260: (0.403226%)&lt;BR/&gt; 3535: (0.403226%)&gt;];
}
877--1028[label="0.00806452;1pkt 1fpkt"];
877--1880[label="0.00806452;1pkt 1fpkt"];
877--2967[label="0.00806452;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.117.2.135"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.872775,2.15948,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="156.142.41.82"/>
      <from sec="1072933201" usec="0"/>
      <to sec="1072934024" usec="0"/>
    </slice>
    <from sec="1072933201" usec="0"/>
    <to sec="1072934024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.872775,2.15948,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="111.197.201.75"/>
      <from sec="1072933200" usec="0"/>
      <to sec="1072934025" usec="0"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934025" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.872775,2.15948,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_101{
style=filled;
color=gray75;
927[label="213.117.2.130;d;140pkt 140fpkt", shape=diamond, color=yellow];
stat101[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 213.117.2.130:0}[91.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (91.4286%)&lt;BR/&gt; 80: (2.5%)&lt;BR/&gt; 135: (1.78571%)&lt;BR/&gt; 64175: (0.357143%)&lt;BR/&gt; 63669: (0.357143%)&gt;];
}
927--1223[label="0.00714286;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.117.2.130"/>
    </slice>
    <from sec="1072933202" usec="0"/>
    <to sec="1072934026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.28335,2.14195,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_102{
style=filled;
color=gray75;
783[label="156.143.192.193;s;67pkt 67fpkt", shape=diamond, color=yellow];
937[label="201.174.64.55;d;25pkt 25fpkt", shape=diamond, color=yellow];
1082[label="156.143.192.193;s;54pkt 54fpkt", shape=hexagon, color=black];
2237[label="156.143.192.193;77pkt 77fpkt", shape=pentagon, color=darkviolet];
stat102[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.143.192.193:*, 201.174.64.54:80}[35.0649%]&lt;BR/&gt;{156.143.192.193:*, 201.174.64.55:80}[33.7662%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3189: (0.896861%)&lt;BR/&gt; 3168: (0.896861%)&lt;BR/&gt; 3164: (0.896861%)&lt;BR/&gt; 3157: (0.896861%)&gt;];
}
783--937[label="1;25pkt 25fpkt"];
783--1082[label="1;54pkt 54fpkt"];
783--2237[label="1;67pkt 67fpkt"];
937--1082[label="0.8;20pkt 20fpkt"];
937--2237[label="1;25pkt 25fpkt"];
1082--2237[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter dst_ip="201.174.64.54" dst_port="80" src_ip="156.143.192.193"/>
      <filter dst_ip="201.174.64.55" dst_port="80" src_ip="156.143.192.193"/>
    </slice>
    <from sec="1072933251" usec="0"/>
    <to sec="1072934058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.872775,2.15948,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_103{
style=filled;
color=gray75;
934[label="156.143.201.142;s;19pkt 19fpkt", shape=diamond, color=yellow];
945[label="194.1.70.133;d;14pkt 14fpkt", shape=diamond, color=yellow];
stat103[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.143.201.142:*, 194.1.70.133:80}[73.6842%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.4848%)&lt;BR/&gt; 3688: (3.0303%)&lt;BR/&gt; 3687: (3.0303%)&lt;BR/&gt; 3684: (3.0303%)&lt;BR/&gt; 3677: (3.0303%)&gt;];
}
934--945[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="194.1.70.133" dst_port="80" src_ip="156.143.201.142"/>
    </slice>
    <from sec="1072933212" usec="0"/>
    <to sec="1072934027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880381,2.09579,999,0 0 0 1 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_104{
style=filled;
color=gray75;
910[label="212.90.90.0;d;1pkt 1fpkt", shape=diamond, color=yellow];
949[label="209.101.1.9;s;1pkt 1fpkt", shape=diamond, color=yellow];
1306[label="209.101.1.9;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3434[label="209.101.1.9;1pkt 1fpkt", shape=invhouse, color=bisque];
stat104[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.101.1.9:2077, 212.90.90.0:2615}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2615: (50%)&lt;BR/&gt; 2077: (50%)&gt;];
}
910--949[label="1;1pkt 1fpkt"];
910--1306[label="1;1pkt 1fpkt"];
910--3434[label="1;1pkt 1fpkt"];
949--1306[label="1;1pkt 1fpkt"];
949--3434[label="1;1pkt 1fpkt"];
1306--3434[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.90.90.0" dst_port="2615" src_ip="209.101.1.9" src_port="2077"/>
    </slice>
    <from sec="1072933867" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31848,2.20296,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_105{
style=filled;
color=gray75;
881[label="213.117.1.100;s;368pkt 368fpkt", shape=diamond, color=yellow];
947[label="156.143.144.238;s;5pkt 5fpkt", shape=diamond, color=yellow];
952[label="213.57.216.21;d;6pkt 6fpkt", shape=diamond, color=yellow];
1177[label="156.143.144.238;s;5pkt 5fpkt", shape=hexagon, color=black];
stat105[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.117.1.100:53, *:*}[96.7828%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (53.776%)&lt;BR/&gt; 80: (1.95312%)&lt;BR/&gt; 32768: (1.82292%)&lt;BR/&gt; 0: (1.5625%)&lt;BR/&gt; 1024: (1.04167%)&gt;];
}
881--952[label="0.166667;1pkt 1fpkt"];
881--1221[label="0.0217391;8pkt 8fpkt"];
947--952[label="1;5pkt 5fpkt"];
947--1177[label="1;5pkt 5fpkt"];
952--1177[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="213.117.1.100" src_port="53"/>
    </slice>
    <from sec="1072933201" usec="0"/>
    <to sec="1072934028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31848,2.20296,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_106{
style=filled;
color=gray75;
954[label="156.142.229.22;d;39pkt 39fpkt", shape=diamond, color=yellow];
955[label="196.102.87.113;s;39pkt 39fpkt", shape=diamond, color=yellow];
1181[label="196.102.87.113;s;39pkt 39fpkt", shape=hexagon, color=black];
stat106[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.102.87.113:*, 156.142.229.22:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 38855: (1.28205%)&lt;BR/&gt; 38854: (1.28205%)&lt;BR/&gt; 38853: (1.28205%)&lt;BR/&gt; 38852: (1.28205%)&gt;];
}
954--955[label="1;39pkt 39fpkt"];
954--1181[label="1;39pkt 39fpkt"];
955--1181[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="156.142.229.22" dst_port="80" src_ip="196.102.87.113"/>
    </slice>
    <from sec="1072933971" usec="0"/>
    <to sec="1072933995" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3296,2.10519,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_109{
style=filled;
color=gray75;
554[label="200.73.178.235;s;5428pkt 5428fpkt", shape=diamond, color=yellow];
1021[label="200.73.178.235;s;1921pkt 1921fpkt", shape=hexagon, color=black];
2398[label="200.73.178.235;5902pkt 5902fpkt", shape=pentagon, color=darkviolet];
3341[label="200.73.178.235;5902pkt 5902fpkt", shape=invtriangle, color=brown];
4017[label="200.73.178.235;5901pkt 5901fpkt", shape=invhouse, color=bisque];
stat109[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.73.178.235:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
554--1021[label="1;1921pkt 1921fpkt"];
554--2398[label="1;5428pkt 5428fpkt"];
554--3341[label="1;5428pkt 5428fpkt"];
554--4017[label="0.999816;5427pkt 5427fpkt"];
1021--2398[label="1;1921pkt 1921fpkt"];
1021--3341[label="1;1921pkt 1921fpkt"];
1021--4017[label="0.999479;1920pkt 1920fpkt"];
2398--3341[label="1;5902pkt 5902fpkt"];
2398--4017[label="1;5901pkt 5901fpkt"];
3341--4017[label="1;5901pkt 5901fpkt"];
</description>
    <slice>
      <filter src_ip="200.73.178.235"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3296,2.10519,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_110{
style=filled;
color=gray75;
583[label="90.116.195.122;s;789pkt 789fpkt", shape=diamond, color=yellow];
1024[label="90.116.195.122;s;539pkt 539fpkt", shape=hexagon, color=black];
1911[label="90.116.195.122;859pkt 859fpkt", shape=pentagon, color=darkviolet];
2991[label="90.116.195.122;859pkt 859fpkt", shape=invtriangle, color=brown];
3781[label="90.116.195.122;858pkt 858fpkt", shape=invhouse, color=bisque];
stat110[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.116.195.122:0, *:0}[90.6868%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (90.9068%)&lt;BR/&gt; 445: (1.97234%)&lt;BR/&gt; 139: (1.97234%)&lt;BR/&gt; 137: (1.20389%)&lt;BR/&gt; 4085: (0.115266%)&gt;];
}
583--1024[label="1;539pkt 539fpkt"];
583--1911[label="1;789pkt 789fpkt"];
583--2991[label="1;789pkt 789fpkt"];
583--3781[label="0.998733;788pkt 788fpkt"];
1024--1911[label="1;539pkt 539fpkt"];
1024--2991[label="1;539pkt 539fpkt"];
1024--3781[label="1;539pkt 539fpkt"];
1911--2991[label="1;859pkt 859fpkt"];
1911--3781[label="1;858pkt 858fpkt"];
2991--3781[label="1;858pkt 858fpkt"];
</description>
    <slice>
      <filter src_ip="90.116.195.122"/>
    </slice>
    <from sec="1072933201" usec="0"/>
    <to sec="1072934097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.28961,2.1066,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_111{
style=filled;
color=gray75;
689[label="196.102.60.31;s;3pkt 3fpkt", shape=diamond, color=yellow];
1035[label="196.102.60.31;s;2pkt 2fpkt", shape=hexagon, color=black];
1422[label="196.102.60.31;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2613[label="196.102.60.31;3pkt 3fpkt", shape=invtriangle, color=brown];
stat111[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.102.60.31:80, 152.6.39.203:1346}[33.3333%]&lt;BR/&gt;{196.102.60.31:80, 152.6.39.203:1347}[33.3333%]&lt;BR/&gt;{196.102.60.31:80, 152.6.39.203:1361}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1347: (18.1818%)&lt;BR/&gt; 1346: (18.1818%)&lt;BR/&gt; 1361: (13.6364%)&gt;];
}
689--1035[label="1;2pkt 2fpkt"];
689--1422[label="1;3pkt 3fpkt"];
689--2613[label="1;3pkt 3fpkt"];
1035--1422[label="1;2pkt 2fpkt"];
1035--2613[label="1;2pkt 2fpkt"];
1422--2613[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="152.6.39.203" dst_port="1361" src_ip="196.102.60.31" src_port="80"/>
      <filter dst_ip="152.6.39.203" dst_port="1347" src_ip="196.102.60.31" src_port="80"/>
      <filter dst_ip="152.6.39.203" dst_port="1346" src_ip="196.102.60.31" src_port="80"/>
    </slice>
    <from sec="1072933407" usec="0"/>
    <to sec="1072933595" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.28961,2.1066,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_112{
style=filled;
color=gray75;
541[label="200.185.7.230;s;1pkt 1fpkt", shape=diamond, color=yellow];
1046[label="200.185.7.230;s;1pkt 1fpkt", shape=hexagon, color=black];
2378[label="200.185.7.230;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3331[label="200.185.7.230;1pkt 1fpkt", shape=invtriangle, color=brown];
stat112[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.185.7.230:1050, 152.6.39.203:4662}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 1050: (50%)&gt;];
}
541--1046[label="1;1pkt 1fpkt"];
541--2378[label="1;1pkt 1fpkt"];
541--3331[label="1;1pkt 1fpkt"];
1046--2378[label="1;1pkt 1fpkt"];
1046--3331[label="1;1pkt 1fpkt"];
2378--3331[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="152.6.39.203" dst_port="4662" src_ip="200.185.7.230" src_port="1050"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072933409" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31848,2.20296,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_113{
style=filled;
color=gray75;
556[label="200.237.101.189;s;2pkt 2fpkt", shape=diamond, color=yellow];
1069[label="200.237.101.189;s;1pkt 1fpkt", shape=hexagon, color=black];
stat113[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.237.101.189:37080, 152.6.39.203:4662}[50%]&lt;BR/&gt;{200.237.101.189:40000, 152.6.39.203:4662}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 37080: (33.3333%)&lt;BR/&gt; 40000: (16.6667%)&gt;];
}
556--1069[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="152.6.39.203" dst_port="4662" src_ip="200.237.101.189" src_port="40000"/>
      <filter dst_ip="152.6.39.203" dst_port="4662" src_ip="200.237.101.189" src_port="37080"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.28961,2.1066,020,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_114{
style=filled;
color=gray75;
762[label="212.84.13.97;s;844pkt 844fpkt", shape=diamond, color=yellow];
1070[label="212.84.13.97;s;653pkt 653fpkt", shape=hexagon, color=black];
1797[label="212.84.13.97;902pkt 902fpkt", shape=pentagon, color=darkviolet];
2905[label="212.84.13.97;901pkt 901fpkt", shape=invtriangle, color=brown];
stat114[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.84.13.97:0, *:0}[99.1141%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.1212%)&lt;BR/&gt; 135: (0.242424%)&lt;BR/&gt; 80: (0.19697%)&lt;BR/&gt; 7327: (0.0606061%)&lt;BR/&gt; 4455: (0.0606061%)&gt;];
}
762--1070[label="1;653pkt 653fpkt"];
762--1797[label="0.998815;843pkt 843fpkt"];
762--2905[label="0.99763;842pkt 842fpkt"];
1070--1797[label="0.998469;652pkt 652fpkt"];
1070--2905[label="0.998469;652pkt 652fpkt"];
1797--2905[label="1;901pkt 901fpkt"];
</description>
    <slice>
      <filter src_ip="212.84.13.97"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31848,2.20296,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_116{
style=filled;
color=gray75;
475[label="156.143.199.34;s;543pkt 543fpkt", shape=diamond, color=yellow];
1073[label="156.143.199.34;s;271pkt 271fpkt", shape=hexagon, color=black];
stat116[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.143.199.34:*, *:25}[69.4291%]&lt;BR/&gt;{156.143.199.34:25, *:*}[26.8877%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.5872%)&lt;BR/&gt; 113: (1.41278%)&lt;BR/&gt; 3111: (0.2457%)&lt;BR/&gt; 3010: (0.2457%)&lt;BR/&gt; 2821: (0.2457%)&gt;];
}
475--1073[label="1;271pkt 271fpkt"];
</description>
    <slice>
      <filter src_ip="156.143.199.34" src_port="25"/>
      <filter dst_port="25" src_ip="156.143.199.34"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.28335,2.14195,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_117{
style=filled;
color=gray75;
752[label="111.167.11.224;s;1pkt 1fpkt", shape=diamond, color=yellow];
1085[label="111.167.11.224;s;1pkt 1fpkt", shape=hexagon, color=black];
2346[label="111.167.11.224;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat117[shape=component, label=&lt;Rules:&lt;BR/&gt;{111.167.11.224:4733, 152.6.39.203:4662}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4733: (50%)&lt;BR/&gt; 4662: (50%)&gt;];
}
752--1085[label="1;1pkt 1fpkt"];
752--2346[label="1;1pkt 1fpkt"];
1085--2346[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="152.6.39.203" dst_port="4662" src_ip="111.167.11.224" src_port="4733"/>
    </slice>
    <from sec="1072933432" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31848,2.20296,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_118{
style=filled;
color=gray75;
528[label="197.76.215.179;s;1pkt 1fpkt", shape=diamond, color=yellow];
1092[label="197.76.215.179;s;1pkt 1fpkt", shape=hexagon, color=black];
stat118[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.76.215.179:4662, 152.6.39.203:1113}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 1113: (50%)&gt;];
}
528--1092[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="152.6.39.203" dst_port="1113" src_ip="197.76.215.179" src_port="4662"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31848,2.20296,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_119{
style=filled;
color=gray75;
536[label="212.208.51.107;s;2759pkt 2759fpkt", shape=diamond, color=yellow];
1094[label="212.208.51.107;s;1847pkt 1847fpkt", shape=hexagon, color=black];
stat119[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.208.51.107:1327, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1327: (50%)&gt;];
}
536--1094[label="1;1847pkt 1847fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="212.208.51.107" src_port="1327"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.28335,2.14195,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_120{
style=filled;
color=gray75;
810[label="213.117.4.115;s;689pkt 689fpkt", shape=diamond, color=yellow];
1101[label="213.117.4.115;s;547pkt 547fpkt", shape=hexagon, color=black];
1877[label="213.117.4.115;746pkt 746fpkt", shape=pentagon, color=darkviolet];
stat120[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.117.4.115:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
810--1101[label="1;547pkt 547fpkt"];
810--1877[label="1;689pkt 689fpkt"];
1101--1877[label="1;547pkt 547fpkt"];
</description>
    <slice>
      <filter src_ip="213.117.4.115"/>
    </slice>
    <from sec="1072933202" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3296,2.10519,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_121{
style=filled;
color=gray75;
658[label="212.84.42.66;d;530pkt 530fpkt", shape=diamond, color=yellow];
692[label="202.197.132.109;s;67pkt 67fpkt", shape=diamond, color=yellow];
791[label="193.147.69.87;s;52pkt 52fpkt", shape=diamond, color=yellow];
827[label="193.147.69.86;s;41pkt 41fpkt", shape=diamond, color=yellow];
1108[label="193.147.69.87;s;44pkt 44fpkt", shape=hexagon, color=black];
1373[label="4.122.33.21;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1426[label="4.50.16.32;25pkt 25fpkt", shape=pentagon, color=darkviolet];
1468[label="202.238.16.40;31pkt 31fpkt", shape=pentagon, color=darkviolet];
1687[label="209.85.67.77;16pkt 16fpkt", shape=pentagon, color=darkviolet];
1733[label="193.147.69.86;52pkt 52fpkt", shape=pentagon, color=darkviolet];
1739[label="193.147.69.87;52pkt 52fpkt", shape=pentagon, color=darkviolet];
1859[label="202.197.132.109;80pkt 80fpkt", shape=pentagon, color=darkviolet];
1864[label="6.99.209.110;13pkt 13fpkt", shape=pentagon, color=darkviolet];
2010[label="218.138.27.143;47pkt 47fpkt", shape=pentagon, color=darkviolet];
2325[label="6.99.47.216;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2350[label="6.99.47.225;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2403[label="193.153.209.237;26pkt 26fpkt", shape=pentagon, color=darkviolet];
2445[label="209.138.202.252;26pkt 26fpkt", shape=pentagon, color=darkviolet];
2569[label="4.122.33.21;1pkt 1fpkt", shape=invtriangle, color=brown];
2652[label="202.238.16.40;31pkt 31fpkt", shape=invtriangle, color=brown];
2818[label="209.85.67.77;15pkt 15fpkt", shape=invtriangle, color=brown];
2860[label="193.147.69.87;51pkt 51fpkt", shape=invtriangle, color=brown];
2949[label="202.197.132.109;79pkt 79fpkt", shape=invtriangle, color=brown];
2953[label="6.99.209.110;12pkt 12fpkt", shape=invtriangle, color=brown];
3308[label="6.99.47.225;1pkt 1fpkt", shape=invtriangle, color=brown];
3684[label="193.147.69.87;51pkt 51fpkt", shape=invhouse, color=bisque];
stat121[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 212.84.42.66:*}[59.5541%]&lt;BR/&gt;{*:53, 212.84.42.66:*}[21.0191%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.5716%)&lt;BR/&gt; 53: (7.57238%)&lt;BR/&gt; 0: (1.48478%)&lt;BR/&gt; 81: (0.371195%)&lt;BR/&gt; 443: (0.334076%)&gt;];
}
658--692[label="0.970149;65pkt 65fpkt"];
658--791[label="1;52pkt 52fpkt"];
658--827[label="1;41pkt 41fpkt"];
658--851[label="0.0151515;1pkt 1fpkt"];
658--928[label="0.0434783;1pkt 1fpkt"];
658--1108[label="1;44pkt 44fpkt"];
658--1222[label="0.00377358;2pkt 2fpkt"];
658--1373[label="1;1pkt 1fpkt"];
658--1392[label="0.0416667;1pkt 1fpkt"];
658--1410[label="0.0465116;2pkt 2fpkt"];
658--1426[label="0.24;6pkt 6fpkt"];
658--1468[label="1;31pkt 31fpkt"];
658--1594[label="0.24;6pkt 6fpkt"];
658--1606[label="0.0545455;3pkt 3fpkt"];
658--1656[label="0.0555556;1pkt 1fpkt"];
658--1687[label="0.125;2pkt 2fpkt"];
658--1704[label="0.0243902;1pkt 1fpkt"];
658--1733[label="0.769231;40pkt 40fpkt"];
658--1739[label="1;52pkt 52fpkt"];
658--1859[label="0.8125;65pkt 65fpkt"];
658--1864[label="0.923077;12pkt 12fpkt"];
658--1998[label="0.111111;2pkt 2fpkt"];
658--2010[label="0.212766;10pkt 10fpkt"];
658--2032[label="0.0526316;1pkt 1fpkt"];
658--2234[label="0.0222222;1pkt 1fpkt"];
658--2250[label="0.0227273;1pkt 1fpkt"];
658--2325[label="1;2pkt 2fpkt"];
658--2350[label="1;1pkt 1fpkt"];
658--2361[label="0.0217391;1pkt 1fpkt"];
658--2403[label="1;26pkt 26fpkt"];
658--2445[label="1;26pkt 26fpkt"];
658--2569[label="1;1pkt 1fpkt"];
658--2586[label="0.0416667;1pkt 1fpkt"];
658--2602[label="0.0465116;2pkt 2fpkt"];
658--2652[label="1;31pkt 31fpkt"];
658--2746[label="0.24;6pkt 6fpkt"];
658--2756[label="0.0555556;3pkt 3fpkt"];
658--2796[label="0.0555556;1pkt 1fpkt"];
658--2818[label="0.133333;2pkt 2fpkt"];
658--2831[label="0.025;1pkt 1fpkt"];
658--2860[label="1;51pkt 51fpkt"];
658--2949[label="0.822785;65pkt 65fpkt"];
658--2953[label="1;12pkt 12fpkt"];
658--3078[label="0.0555556;1pkt 1fpkt"];
658--3228[label="0.0222222;1pkt 1fpkt"];
658--3308[label="1;1pkt 1fpkt"];
658--3317[label="0.0217391;1pkt 1fpkt"];
658--3488[label="0.04;1pkt 1fpkt"];
658--3500[label="0.047619;2pkt 2fpkt"];
658--3639[label="0.0555556;1pkt 1fpkt"];
658--3663[label="0.0243902;1pkt 1fpkt"];
658--3684[label="1;51pkt 51fpkt"];
658--3839[label="0.0555556;1pkt 1fpkt"];
658--3939[label="0.0227273;1pkt 1fpkt"];
692--1859[label="1;67pkt 67fpkt"];
692--2949[label="0.985075;66pkt 66fpkt"];
791--1108[label="1;44pkt 44fpkt"];
791--1739[label="1;52pkt 52fpkt"];
791--2860[label="1;51pkt 51fpkt"];
791--3684[label="1;51pkt 51fpkt"];
827--1733[label="0.97561;40pkt 40fpkt"];
1108--1739[label="1;44pkt 44fpkt"];
1108--2860[label="0.977273;43pkt 43fpkt"];
1108--3684[label="0.977273;43pkt 43fpkt"];
1373--2569[label="1;1pkt 1fpkt"];
1468--2652[label="1;31pkt 31fpkt"];
1687--2818[label="1;15pkt 15fpkt"];
1739--2860[label="1;51pkt 51fpkt"];
1739--3684[label="1;51pkt 51fpkt"];
1859--2949[label="1;79pkt 79fpkt"];
1864--2953[label="1;12pkt 12fpkt"];
2350--3308[label="1;1pkt 1fpkt"];
2860--3684[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter dst_ip="212.84.42.66" src_port="80"/>
      <filter dst_ip="212.84.42.66" src_port="53"/>
    </slice>
    <from sec="1072933202" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3296,2.10519,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_122{
style=filled;
color=gray75;
624[label="156.143.7.36;s;126pkt 126fpkt", shape=diamond, color=yellow];
1112[label="156.143.7.36;s;98pkt 98fpkt", shape=hexagon, color=black];
1446[label="156.143.7.36;150pkt 150fpkt", shape=pentagon, color=darkviolet];
2634[label="156.143.7.36;150pkt 150fpkt", shape=invtriangle, color=brown];
3524[label="156.143.7.36;150pkt 150fpkt", shape=invhouse, color=bisque];
stat122[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.143.7.36:25, *:*}[67.5497%]&lt;BR/&gt;{156.143.7.36:*, *:25}[31.7881%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.6291%)&lt;BR/&gt; 1470: (0.74184%)&lt;BR/&gt; 0: (0.74184%)&lt;BR/&gt; 4770: (0.667656%)&lt;BR/&gt; 3590: (0.667656%)&gt;];
}
624--1112[label="1;98pkt 98fpkt"];
624--1446[label="0.992063;125pkt 125fpkt"];
624--2634[label="0.992063;125pkt 125fpkt"];
624--3524[label="0.992063;125pkt 125fpkt"];
1112--1446[label="1;98pkt 98fpkt"];
1112--2634[label="1;98pkt 98fpkt"];
1112--3524[label="1;98pkt 98fpkt"];
1446--2634[label="1;150pkt 150fpkt"];
1446--3524[label="1;150pkt 150fpkt"];
2634--3524[label="1;150pkt 150fpkt"];
</description>
    <slice>
      <filter src_ip="156.143.7.36" src_port="25"/>
      <filter dst_port="25" src_ip="156.143.7.36"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.28335,2.14195,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_123{
style=filled;
color=gray75;
526[label="23.81.4.131;s;1pkt 1fpkt", shape=diamond, color=yellow];
1113[label="23.81.4.131;s;1pkt 1fpkt", shape=hexagon, color=black];
1949[label="23.81.4.131;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat123[shape=component, label=&lt;Rules:&lt;BR/&gt;{23.81.4.131:3068, 152.6.39.203:4662}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 3068: (50%)&gt;];
}
526--1113[label="1;1pkt 1fpkt"];
526--1949[label="1;1pkt 1fpkt"];
1113--1949[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="152.6.39.203" dst_port="4662" src_ip="23.81.4.131" src_port="3068"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.28961,2.1066,020,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_124{
style=filled;
color=gray75;
577[label="212.84.6.197;s;2087pkt 2087fpkt", shape=diamond, color=yellow];
1117[label="212.84.6.197;s;1627pkt 1627fpkt", shape=hexagon, color=black];
2255[label="212.84.6.197;2237pkt 2237fpkt", shape=pentagon, color=darkviolet];
3241[label="212.84.6.197;2237pkt 2237fpkt", shape=invtriangle, color=brown];
stat124[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.84.6.197:0, *:0}[99.866%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.8901%)&lt;BR/&gt; 80: (0.0549585%)&lt;BR/&gt; 3388: (0.024426%)&lt;BR/&gt; 3312: (0.0183195%)&lt;BR/&gt; 4867: (0.012213%)&gt;];
}
577--1117[label="1;1627pkt 1627fpkt"];
577--2255[label="0.999521;2086pkt 2086fpkt"];
577--3241[label="0.999521;2086pkt 2086fpkt"];
1117--2255[label="0.999385;1626pkt 1626fpkt"];
1117--3241[label="0.999385;1626pkt 1626fpkt"];
2255--3241[label="1;2237pkt 2237fpkt"];
</description>
    <slice>
      <filter src_ip="212.84.6.197"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35761,2.20161,010,0 0 0 1 1 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_125{
style=filled;
color=gray75;
460[label="130.195.107.33;d;96pkt 96fpkt", shape=diamond, color=yellow];
579[label="111.234.8.149;s;1pkt 1fpkt", shape=diamond, color=yellow];
808[label="201.130.77.202;s;1pkt 1fpkt", shape=diamond, color=yellow];
809[label="111.249.144.206;s;1pkt 1fpkt", shape=diamond, color=yellow];
839[label="111.5.141.129;s;1pkt 1fpkt", shape=diamond, color=yellow];
1118[label="111.5.141.129;s;1pkt 1fpkt", shape=hexagon, color=black];
1119[label="111.234.8.149;s;1pkt 1fpkt", shape=hexagon, color=black];
1138[label="111.249.144.206;s;1pkt 1fpkt", shape=hexagon, color=black];
3954[label="201.130.77.202;1pkt 1fpkt", shape=invhouse, color=bisque];
stat125[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 130.195.107.33:6881}[46.875%]&lt;BR/&gt;{*:*, 130.195.107.33:6882}[34.375%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (25%)&lt;BR/&gt; 6882: (15.8654%)&lt;BR/&gt; 8080: (2.88462%)&lt;BR/&gt; 8881: (2.40385%)&lt;BR/&gt; 8882: (1.92308%)&gt;];
}
460--579[label="1;1pkt 1fpkt"];
460--808[label="1;1pkt 1fpkt"];
460--809[label="1;1pkt 1fpkt"];
460--839[label="1;1pkt 1fpkt"];
460--1118[label="1;1pkt 1fpkt"];
460--1119[label="1;1pkt 1fpkt"];
460--1138[label="1;1pkt 1fpkt"];
460--3954[label="1;1pkt 1fpkt"];
579--1119[label="1;1pkt 1fpkt"];
808--3954[label="1;1pkt 1fpkt"];
809--1138[label="1;1pkt 1fpkt"];
839--1118[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.195.107.33" dst_port="6881"/>
      <filter dst_ip="130.195.107.33" dst_port="6882"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.28961,2.1066,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_126{
style=filled;
color=gray75;
807[label="111.161.119.206;s;1pkt 1fpkt", shape=diamond, color=yellow];
1120[label="111.161.119.206;s;1pkt 1fpkt", shape=hexagon, color=black];
2287[label="111.161.119.206;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3266[label="111.161.119.206;1pkt 1fpkt", shape=invtriangle, color=brown];
stat126[shape=component, label=&lt;Rules:&lt;BR/&gt;{111.161.119.206:2940, 152.6.39.203:4662}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 2940: (50%)&gt;];
}
807--1120[label="1;1pkt 1fpkt"];
807--2287[label="1;1pkt 1fpkt"];
807--3266[label="1;1pkt 1fpkt"];
1120--2287[label="1;1pkt 1fpkt"];
1120--3266[label="1;1pkt 1fpkt"];
2287--3266[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="152.6.39.203" dst_port="4662" src_ip="111.161.119.206" src_port="2940"/>
    </slice>
    <from sec="1072933201" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.28961,2.1066,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_127{
style=filled;
color=gray75;
682[label="196.121.45.207;s;1pkt 1fpkt", shape=diamond, color=yellow];
1128[label="196.121.45.207;s;1pkt 1fpkt", shape=hexagon, color=black];
2290[label="196.121.45.207;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3268[label="196.121.45.207;1pkt 1fpkt", shape=invtriangle, color=brown];
stat127[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.121.45.207:2497, 152.6.39.203:4662}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 2497: (50%)&gt;];
}
682--1128[label="1;1pkt 1fpkt"];
682--2290[label="1;1pkt 1fpkt"];
682--3268[label="1;1pkt 1fpkt"];
1128--2290[label="1;1pkt 1fpkt"];
1128--3268[label="1;1pkt 1fpkt"];
2290--3268[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="152.6.39.203" dst_port="4662" src_ip="196.121.45.207" src_port="2497"/>
    </slice>
    <from sec="1072933346" usec="0"/>
    <to sec="1072934063" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.28961,2.1066,010,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
874[label="0.88.157.225;s;19pkt 19fpkt", shape=diamond, color=yellow];
1135[label="0.88.157.225;s;18pkt 18fpkt", shape=hexagon, color=black];
2352[label="0.88.157.225;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3309[label="0.88.157.225;1pkt 1fpkt", shape=invtriangle, color=brown];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.88.157.225:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1357: (5.12821%)&lt;BR/&gt; 1970: (2.5641%)&lt;BR/&gt; 1933: (2.5641%)&lt;BR/&gt; 1897: (2.5641%)&gt;];
}
874--1135[label="1;18pkt 18fpkt"];
874--2352[label="1;1pkt 1fpkt"];
874--3309[label="1;1pkt 1fpkt"];
1135--2352[label="1;1pkt 1fpkt"];
1135--3309[label="1;1pkt 1fpkt"];
2352--3309[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="0.88.157.225" src_port="80"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3296,2.10519,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_129{
style=filled;
color=gray75;
462[label="156.143.144.43;s;200pkt 200fpkt", shape=diamond, color=yellow];
463[label="194.203.17.8;d;124pkt 124fpkt", shape=diamond, color=yellow];
1136[label="156.143.144.43;s;185pkt 185fpkt", shape=hexagon, color=black];
1486[label="156.143.144.43;203pkt 203fpkt", shape=pentagon, color=darkviolet];
2663[label="156.143.144.43;203pkt 203fpkt", shape=invtriangle, color=brown];
3547[label="156.143.144.43;202pkt 202fpkt", shape=invhouse, color=bisque];
stat129[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.143.144.43:*, 194.203.17.8:80}[50.6912%]&lt;BR/&gt;{156.143.144.43:*, 111.218.17.169:80}[24.424%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1835: (0.268577%)&lt;BR/&gt; 1834: (0.268577%)&lt;BR/&gt; 1833: (0.268577%)&lt;BR/&gt; 1832: (0.268577%)&gt;];
}
462--463[label="0.887097;110pkt 110fpkt"];
462--1136[label="1;185pkt 185fpkt"];
462--1486[label="1;200pkt 200fpkt"];
462--2663[label="1;200pkt 200fpkt"];
462--3547[label="0.995;199pkt 199fpkt"];
463--1136[label="0.887097;110pkt 110fpkt"];
463--1486[label="0.887097;110pkt 110fpkt"];
463--2663[label="0.887097;110pkt 110fpkt"];
463--3547[label="0.887097;110pkt 110fpkt"];
1136--1486[label="1;185pkt 185fpkt"];
1136--2663[label="1;185pkt 185fpkt"];
1136--3547[label="0.994595;184pkt 184fpkt"];
1486--2663[label="1;203pkt 203fpkt"];
1486--3547[label="1;202pkt 202fpkt"];
2663--3547[label="1;202pkt 202fpkt"];
</description>
    <slice>
      <filter dst_ip="194.203.17.8" dst_port="80" src_ip="156.143.144.43"/>
      <filter dst_ip="111.218.17.169" dst_port="80" src_ip="156.143.144.43"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934032" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31848,2.20296,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_130{
style=filled;
color=gray75;
806[label="136.174.163.165;s;794pkt 794fpkt", shape=diamond, color=yellow];
1137[label="136.174.163.165;s;794pkt 794fpkt", shape=hexagon, color=black];
stat130[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.174.163.165:0, *:0}[96.5995%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.5995%)&lt;BR/&gt; 80: (1.70025%)&lt;BR/&gt; 59470: (0.0629723%)&lt;BR/&gt; 56071: (0.0629723%)&lt;BR/&gt; 54235: (0.0629723%)&gt;];
}
806--1137[label="1;794pkt 794fpkt"];
806--1222[label="0.00503778;4pkt 4fpkt"];
1137--1222[label="0.00503778;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="136.174.163.165"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31848,2.20296,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_131{
style=filled;
color=gray75;
835[label="218.119.114.199;s;144pkt 144fpkt", shape=diamond, color=yellow];
1146[label="218.119.114.199;s;144pkt 144fpkt", shape=hexagon, color=black];
stat131[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.119.114.199:6667, *:*}[43.75%]&lt;BR/&gt;{218.119.114.199:*, *:113}[33.3333%]&lt;BR/&gt;{218.119.114.199:*, 217.8.208.8:*}[20.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (21.875%)&lt;BR/&gt; 113: (16.6667%)&lt;BR/&gt; 1080: (2.43056%)&lt;BR/&gt; 80: (2.43056%)&lt;BR/&gt; 10080: (2.08333%)&gt;];
}
835--1146[label="1;144pkt 144fpkt"];
</description>
    <slice>
      <filter dst_ip="217.8.208.8" src_ip="218.119.114.199"/>
      <filter src_ip="218.119.114.199" src_port="6667"/>
      <filter dst_port="113" src_ip="218.119.114.199"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3296,2.10519,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_132{
style=filled;
color=gray75;
411[label="212.212.161.126;s;4730pkt 4730fpkt", shape=diamond, color=yellow];
1152[label="212.212.161.126;s;4730pkt 4730fpkt", shape=hexagon, color=black];
1933[label="212.212.161.126;5145pkt 5145fpkt", shape=pentagon, color=darkviolet];
3009[label="212.212.161.126;5145pkt 5145fpkt", shape=invtriangle, color=brown];
3795[label="212.212.161.126;5144pkt 5144fpkt", shape=invhouse, color=bisque];
stat132[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.212.161.126:1051, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1051: (50%)&gt;];
}
411--1152[label="1;4730pkt 4730fpkt"];
411--1933[label="1;4730pkt 4730fpkt"];
411--3009[label="1;4730pkt 4730fpkt"];
411--3795[label="0.999789;4729pkt 4729fpkt"];
1152--1933[label="1;4730pkt 4730fpkt"];
1152--3009[label="1;4730pkt 4730fpkt"];
1152--3795[label="0.999789;4729pkt 4729fpkt"];
1933--3009[label="1;5145pkt 5145fpkt"];
1933--3795[label="1;5144pkt 5144fpkt"];
3009--3795[label="1;5144pkt 5144fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="212.212.161.126" src_port="1051"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31848,2.20296,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_133{
style=filled;
color=gray75;
573[label="212.84.5.178;s;2032pkt 2032fpkt", shape=diamond, color=yellow];
1161[label="212.84.5.178;s;2032pkt 2032fpkt", shape=hexagon, color=black];
stat133[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.84.5.178:0, *:0}[99.8031%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.8031%)&lt;BR/&gt; 135: (0.0492126%)&lt;BR/&gt; 80: (0.0492126%)&lt;BR/&gt; 4568: (0.0246063%)&lt;BR/&gt; 3652: (0.0246063%)&gt;];
}
573--1161[label="1;2032pkt 2032fpkt"];
</description>
    <slice>
      <filter src_ip="212.84.5.178"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.28961,2.1066,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_135{
style=filled;
color=gray75;
948[label="196.97.169.188;s;1pkt 1fpkt", shape=diamond, color=yellow];
1178[label="196.97.169.188;s;1pkt 1fpkt", shape=hexagon, color=black];
2213[label="196.97.169.188;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3211[label="196.97.169.188;1pkt 1fpkt", shape=invtriangle, color=brown];
stat135[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.97.169.188:2350, 152.6.39.203:4662}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 2350: (50%)&gt;];
}
948--1178[label="1;1pkt 1fpkt"];
948--2213[label="1;1pkt 1fpkt"];
948--3211[label="1;1pkt 1fpkt"];
1178--2213[label="1;1pkt 1fpkt"];
1178--3211[label="1;1pkt 1fpkt"];
2213--3211[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="152.6.39.203" dst_port="4662" src_ip="196.97.169.188" src_port="2350"/>
    </slice>
    <from sec="1072933843" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.0"/>
    </slice>
    <from sec="1072933208" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.85.154.0"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.215.23.1"/>
    </slice>
    <from sec="1072933217" usec="0"/>
    <to sec="1072934035" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.2"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.148.242.4"/>
    </slice>
    <from sec="1072933388" usec="0"/>
    <to sec="1072933944" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.38.6.5"/>
    </slice>
    <from sec="1072933482" usec="0"/>
    <to sec="1072933520" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.5"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.6"/>
    </slice>
    <from sec="1072933207" usec="0"/>
    <to sec="1072934096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.7"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.110.134.7"/>
    </slice>
    <from sec="1072933214" usec="0"/>
    <to sec="1072934084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.818742,2.0972,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_149{
style=filled;
color=gray75;
651[label="156.143.199.7;s;219pkt 219fpkt", shape=diamond, color=yellow];
1294[label="156.143.199.7;250pkt 250fpkt", shape=pentagon, color=darkviolet];
stat149[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.143.199.7:*, *:25}[93.2%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (46.5885%)&lt;BR/&gt; 113: (3.41151%)&lt;BR/&gt; 47149: (0.21322%)&lt;BR/&gt; 46252: (0.21322%)&lt;BR/&gt; 45985: (0.21322%)&gt;];
}
651--1294[label="1;219pkt 219fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="156.143.199.7"/>
    </slice>
    <from sec="1072933201" usec="0"/>
    <to sec="1072934097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03443,2.04887,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_150{
style=filled;
color=gray75;
74[label="195.32.226.7s;189pkt 189fpkt", shape=rectangle, color=red];
1296[label="195.32.226.7;244pkt 244fpkt", shape=pentagon, color=darkviolet];
2511[label="195.32.226.7;243pkt 243fpkt", shape=invtriangle, color=brown];
3428[label="195.32.226.7;243pkt 243fpkt", shape=invhouse, color=bisque];
stat150[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.32.226.7:63985, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63985: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
74--1296[label="1;189pkt 189fpkt"];
74--2511[label="0.994709;188pkt 188fpkt"];
74--3428[label="0.994709;188pkt 188fpkt"];
1296--2511[label="1;243pkt 243fpkt"];
1296--3428[label="1;243pkt 243fpkt"];
2511--3428[label="1;243pkt 243fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="195.32.226.7" src_port="63985"/>
    </slice>
    <from sec="1072933212" usec="0"/>
    <to sec="1072933227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.8"/>
    </slice>
    <from sec="1072933203" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.9"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.74.239.10"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.201.2.12"/>
    </slice>
    <from sec="1072933202" usec="0"/>
    <to sec="1072934080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.6.28.12"/>
    </slice>
    <from sec="1072933202" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.12"/>
    </slice>
    <from sec="1072933207" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.219.108.12"/>
    </slice>
    <from sec="1072933693" usec="0"/>
    <to sec="1072933721" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.84.129.12"/>
    </slice>
    <from sec="1072933259" usec="0"/>
    <to sec="1072934009" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="111.155.40.13"/>
    </slice>
    <from sec="1072933228" usec="0"/>
    <to sec="1072933968" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.13"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.85.94.14"/>
    </slice>
    <from sec="1072933204" usec="0"/>
    <to sec="1072934054" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_162{
style=filled;
color=gray75;
1342[label="4.109.40.15;103pkt 103fpkt", shape=pentagon, color=darkviolet];
stat162[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.109.40.15:*, *:135}[50.4854%]&lt;BR/&gt;{4.109.40.15:0, *:0}[48.5437%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (48.5437%)&lt;BR/&gt; 135: (25.2427%)&lt;BR/&gt; 4948: (0.485437%)&lt;BR/&gt; 4946: (0.485437%)&lt;BR/&gt; 4768: (0.485437%)&gt;];
}
</description>
    <slice>
      <filter dst_port="135" src_ip="4.109.40.15"/>
      <filter src_ip="4.109.40.15"/>
    </slice>
    <from sec="1072933223" usec="0"/>
    <to sec="1072934093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.16"/>
    </slice>
    <from sec="1072933209" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.150.53.18"/>
    </slice>
    <from sec="1072933202" usec="0"/>
    <to sec="1072934096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.18"/>
    </slice>
    <from sec="1072933210" usec="0"/>
    <to sec="1072934093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.227.192.18"/>
    </slice>
    <from sec="1072933554" usec="0"/>
    <to sec="1072933703" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.20"/>
    </slice>
    <from sec="1072933209" usec="0"/>
    <to sec="1072934093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="108.214.111.20"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.818742,2.0972,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_169{
style=filled;
color=gray75;
918[label="209.211.39.21;s;592pkt 592fpkt", shape=diamond, color=yellow];
1374[label="209.211.39.21;640pkt 640fpkt", shape=pentagon, color=darkviolet];
stat169[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.211.39.21:1044, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1044: (50%)&gt;];
}
918--1374[label="0.996622;590pkt 590fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="209.211.39.21" src_port="1044"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.216.114.22"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_171{
style=filled;
color=gray75;
1383[label="4.110.40.23;95pkt 95fpkt", shape=pentagon, color=darkviolet];
stat171[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.110.40.23:0, *:0}[97.8947%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.8947%)&lt;BR/&gt; 135: (1.05263%)&lt;BR/&gt; 2608: (0.526316%)&lt;BR/&gt; 2051: (0.526316%)&gt;];
}
</description>
    <slice>
      <filter src_ip="4.110.40.23"/>
    </slice>
    <from sec="1072933221" usec="0"/>
    <to sec="1072934079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.23"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.24"/>
    </slice>
    <from sec="1072933202" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.25"/>
    </slice>
    <from sec="1072933203" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.26"/>
    </slice>
    <from sec="1072933207" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03443,2.04887,010,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_176{
style=filled;
color=gray75;
148[label="90.218.196.26s;222pkt 222fpkt", shape=rectangle, color=red];
1399[label="90.218.196.26;255pkt 255fpkt", shape=pentagon, color=darkviolet];
2592[label="90.218.196.26;255pkt 255fpkt", shape=invtriangle, color=brown];
3492[label="90.218.196.26;254pkt 254fpkt", shape=invhouse, color=bisque];
stat176[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.218.196.26:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4981: (0.20284%)&lt;BR/&gt; 4980: (0.20284%)&lt;BR/&gt; 4979: (0.20284%)&lt;BR/&gt; 4978: (0.20284%)&gt;];
}
148--1399[label="1;222pkt 222fpkt"];
148--2592[label="1;222pkt 222fpkt"];
148--3492[label="0.995495;221pkt 221fpkt"];
1399--2592[label="1;255pkt 255fpkt"];
1399--3492[label="1;254pkt 254fpkt"];
2592--3492[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="90.218.196.26"/>
    </slice>
    <from sec="1072933219" usec="0"/>
    <to sec="1072933243" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.37.22.27"/>
    </slice>
    <from sec="1072933212" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889486,2.05965,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_178{
style=filled;
color=gray75;
532[label="212.84.48.27;s;156pkt 156fpkt", shape=diamond, color=yellow];
1402[label="212.84.48.27;155pkt 155fpkt", shape=pentagon, color=darkviolet];
2595[label="212.84.48.27;155pkt 155fpkt", shape=invtriangle, color=brown];
3495[label="212.84.48.27;156pkt 156fpkt", shape=invhouse, color=bisque];
stat178[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.84.48.27:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
532--1402[label="1;155pkt 155fpkt"];
532--2595[label="1;155pkt 155fpkt"];
532--3495[label="1;156pkt 156fpkt"];
1402--2595[label="1;155pkt 155fpkt"];
1402--3495[label="1;155pkt 155fpkt"];
2595--3495[label="1;155pkt 155fpkt"];
</description>
    <slice>
      <filter src_ip="212.84.48.27"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.27"/>
    </slice>
    <from sec="1072933208" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.28"/>
    </slice>
    <from sec="1072933210" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.29"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.30"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.31"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.148.144.31"/>
    </slice>
    <from sec="1072933201" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_185{
style=filled;
color=gray75;
1427[label="5.163.23.32;157pkt 157fpkt", shape=pentagon, color=darkviolet];
stat185[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.163.23.32:*, *:135}[53.5032%]&lt;BR/&gt;{5.163.23.32:*, *:445}[46.4968%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (26.7516%)&lt;BR/&gt; 445: (23.2484%)&lt;BR/&gt; 65421: (0.318471%)&lt;BR/&gt; 64236: (0.318471%)&lt;BR/&gt; 64041: (0.318471%)&gt;];
}
</description>
    <slice>
      <filter dst_port="135" src_ip="5.163.23.32"/>
      <filter dst_port="445" src_ip="5.163.23.32"/>
    </slice>
    <from sec="1072933202" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.239.7.33"/>
    </slice>
    <from sec="1072933668" usec="0"/>
    <to sec="1072933677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.982506,2.05031,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_187{
style=filled;
color=gray75;
82[label="195.61.8.33s;89pkt 89fpkt", shape=rectangle, color=red];
1433[label="195.61.8.33;256pkt 256fpkt", shape=pentagon, color=darkviolet];
2621[label="195.61.8.33;256pkt 256fpkt", shape=invtriangle, color=brown];
stat187[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.61.8.33:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
82--1433[label="1;89pkt 89fpkt"];
82--2621[label="1;89pkt 89fpkt"];
1433--2621[label="1;256pkt 256fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="195.61.8.33" src_port="1025"/>
    </slice>
    <from sec="1072933442" usec="0"/>
    <to sec="1072933469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.112.77.34"/>
    </slice>
    <from sec="1072933202" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.48.91.34"/>
    </slice>
    <from sec="1072933365" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.85.152.36"/>
    </slice>
    <from sec="1072933213" usec="0"/>
    <to sec="1072934083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.4.212.36"/>
    </slice>
    <from sec="1072933230" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.10.240.36"/>
    </slice>
    <from sec="1072933221" usec="0"/>
    <to sec="1072934055" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.38"/>
    </slice>
    <from sec="1072933207" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.77.238.38"/>
    </slice>
    <from sec="1072933254" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.39"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.119.137.40"/>
    </slice>
    <from sec="1072933237" usec="0"/>
    <to sec="1072934064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.157.188.40"/>
    </slice>
    <from sec="1072933204" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.41"/>
    </slice>
    <from sec="1072933209" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.42"/>
    </slice>
    <from sec="1072933203" usec="0"/>
    <to sec="1072934093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.99.152.42"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.43"/>
    </slice>
    <from sec="1072933210" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.149.158.43"/>
    </slice>
    <from sec="1072934101" usec="0"/>
    <to sec="1072934102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.44"/>
    </slice>
    <from sec="1072933205" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.41.19.45"/>
    </slice>
    <from sec="1072933214" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.173.19.45"/>
    </slice>
    <from sec="1072933218" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.45"/>
    </slice>
    <from sec="1072933214" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03443,2.04887,010,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_207{
style=filled;
color=gray75;
150[label="72.233.95.45s;105pkt 105fpkt", shape=rectangle, color=red];
1496[label="72.233.95.45;255pkt 255fpkt", shape=pentagon, color=darkviolet];
2670[label="72.233.95.45;255pkt 255fpkt", shape=invtriangle, color=brown];
3550[label="72.233.95.45;254pkt 254fpkt", shape=invhouse, color=bisque];
stat207[shape=component, label=&lt;Rules:&lt;BR/&gt;{72.233.95.45:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 3934: (0.23015%)&lt;BR/&gt; 3933: (0.23015%)&lt;BR/&gt; 3932: (0.23015%)&lt;BR/&gt; 3931: (0.23015%)&gt;];
}
150--442[label="0.00952381;1pkt 1fpkt"];
150--508[label="0.00952381;1pkt 1fpkt"];
150--716[label="0.0117647;1pkt 1fpkt"];
150--1496[label="1;105pkt 105fpkt"];
150--2670[label="1;105pkt 105fpkt"];
150--3550[label="0.990476;104pkt 104fpkt"];
1496--2670[label="1;255pkt 255fpkt"];
1496--3550[label="1;254pkt 254fpkt"];
2670--3550[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="72.233.95.45"/>
    </slice>
    <from sec="1072933499" usec="0"/>
    <to sec="1072933524" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.209.153.45"/>
    </slice>
    <from sec="1072933209" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_209{
style=filled;
color=gray75;
1503[label="111.160.91.46;79pkt 79fpkt", shape=pentagon, color=darkviolet];
stat209[shape=component, label=&lt;Rules:&lt;BR/&gt;{111.160.91.46:*, *:445}[50.6329%]&lt;BR/&gt;{111.160.91.46:*, *:135}[49.3671%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.3165%)&lt;BR/&gt; 135: (24.6835%)&lt;BR/&gt; 3053: (1.26582%)&lt;BR/&gt; 2927: (1.26582%)&lt;BR/&gt; 4573: (0.632911%)&gt;];
}
</description>
    <slice>
      <filter dst_port="445" src_ip="111.160.91.46"/>
      <filter dst_port="135" src_ip="111.160.91.46"/>
    </slice>
    <from sec="1072933201" usec="0"/>
    <to sec="1072934014" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.249.100.46"/>
    </slice>
    <from sec="1072934040" usec="0"/>
    <to sec="1072934073" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.974271,2.08661,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_211{
style=filled;
color=gray75;
84[label="195.134.141.46s;224pkt 224fpkt", shape=rectangle, color=red];
1505[label="195.134.141.46;250pkt 250fpkt", shape=pentagon, color=darkviolet];
stat211[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.134.141.46:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
84--1505[label="0.995536;223pkt 223fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="195.134.141.46" src_port="1030"/>
    </slice>
    <from sec="1072933346" usec="0"/>
    <to sec="1072933361" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.818742,2.0972,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_212{
style=filled;
color=gray75;
873[label="6.92.138.47;s;570pkt 570fpkt", shape=diamond, color=yellow];
1507[label="6.92.138.47;617pkt 617fpkt", shape=pentagon, color=darkviolet];
stat212[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.92.138.47:1032, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1032: (50%)&gt;];
}
873--1507[label="0.996491;568pkt 568fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="6.92.138.47" src_port="1032"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.122.48.52"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072933413" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.61.126.53"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.80.70.54"/>
    </slice>
    <from sec="1072934101" usec="0"/>
    <to sec="1072934102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="157.164.252.54"/>
    </slice>
    <from sec="1072933203" usec="0"/>
    <to sec="1072933934" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.32.146.55"/>
    </slice>
    <from sec="1072933201" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="108.244.7.56"/>
    </slice>
    <from sec="1072933220" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.81.5.58"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.199.61.58"/>
    </slice>
    <from sec="1072933212" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03443,2.04887,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_222{
style=filled;
color=gray75;
91[label="214.90.24.59s;245pkt 245fpkt", shape=rectangle, color=red];
1569[label="214.90.24.59;256pkt 256fpkt", shape=pentagon, color=darkviolet];
2729[label="214.90.24.59;256pkt 256fpkt", shape=invtriangle, color=brown];
3593[label="214.90.24.59;256pkt 256fpkt", shape=invhouse, color=bisque];
stat222[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.90.24.59:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
91--1569[label="1;245pkt 245fpkt"];
91--2729[label="1;245pkt 245fpkt"];
91--3593[label="1;245pkt 245fpkt"];
1569--2729[label="1;256pkt 256fpkt"];
1569--3593[label="1;256pkt 256fpkt"];
2729--3593[label="1;256pkt 256fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.90.24.59" src_port="1029"/>
    </slice>
    <from sec="1072933426" usec="0"/>
    <to sec="1072933442" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03443,2.04887,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_223{
style=filled;
color=gray75;
93[label="20.20.224.59s;73pkt 73fpkt", shape=rectangle, color=red];
1573[label="20.20.224.59;222pkt 222fpkt", shape=pentagon, color=darkviolet];
2733[label="20.20.224.59;223pkt 223fpkt", shape=invtriangle, color=brown];
3597[label="20.20.224.59;223pkt 223fpkt", shape=invhouse, color=bisque];
stat223[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.20.224.59:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
93--1573[label="1;73pkt 73fpkt"];
93--2733[label="1;73pkt 73fpkt"];
93--3597[label="1;73pkt 73fpkt"];
1573--2733[label="1;222pkt 222fpkt"];
1573--3597[label="1;222pkt 222fpkt"];
2733--3597[label="1;223pkt 223fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="20.20.224.59" src_port="1029"/>
    </slice>
    <from sec="1072934068" usec="0"/>
    <to sec="1072934084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.109.57.60"/>
    </slice>
    <from sec="1072933236" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.201.69.60"/>
    </slice>
    <from sec="1072933325" usec="0"/>
    <to sec="1072933551" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.209.39.61"/>
    </slice>
    <from sec="1072933675" usec="0"/>
    <to sec="1072933699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="111.17.165.61"/>
    </slice>
    <from sec="1072933628" usec="0"/>
    <to sec="1072933664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.2.183.62"/>
    </slice>
    <from sec="1072934101" usec="0"/>
    <to sec="1072934102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="111.230.227.63"/>
    </slice>
    <from sec="1072933968" usec="0"/>
    <to sec="1072934012" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="156.143.5.64"/>
    </slice>
    <from sec="1072933215" usec="0"/>
    <to sec="1072934092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.64"/>
    </slice>
    <from sec="1072933212" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.83.203.64"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072933249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.28961,2.1066,504,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_234{
style=filled;
color=gray75;
445[label="130.195.107.24;d;143pkt 143fpkt", shape=diamond, color=yellow];
446[label="5.119.38.183;s;1pkt 1fpkt", shape=diamond, color=yellow];
609[label="193.168.139.26;s;57pkt 57fpkt", shape=diamond, color=yellow];
981[label="5.119.38.183;s;1pkt 1fpkt", shape=hexagon, color=black];
1397[label="193.168.139.26;64pkt 64fpkt", shape=pentagon, color=darkviolet];
1609[label="6.44.215.65;8pkt 8fpkt", shape=pentagon, color=darkviolet];
1647[label="6.44.215.70;57pkt 57fpkt", shape=pentagon, color=darkviolet];
2192[label="5.119.38.183;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2590[label="193.168.139.26;64pkt 64fpkt", shape=invtriangle, color=brown];
2759[label="6.44.215.65;7pkt 7fpkt", shape=invtriangle, color=brown];
2788[label="6.44.215.70;57pkt 57fpkt", shape=invtriangle, color=brown];
3196[label="5.119.38.183;1pkt 1fpkt", shape=invtriangle, color=brown];
stat234[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.44.215.70:80, 130.195.107.24:*}[39.8601%]&lt;BR/&gt;{193.168.139.26:443, 130.195.107.24:*}[27.972%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (32.321%)&lt;BR/&gt; 443: (17.0282%)&lt;BR/&gt; 49342: (0.542299%)&lt;BR/&gt; 9000: (0.542299%)&lt;BR/&gt; 53977: (0.433839%)&gt;];
}
445--446[label="1;1pkt 1fpkt"];
445--609[label="1;57pkt 57fpkt"];
445--981[label="1;1pkt 1fpkt"];
445--1397[label="1;64pkt 64fpkt"];
445--1609[label="1;8pkt 8fpkt"];
445--1647[label="1;57pkt 57fpkt"];
445--2192[label="1;1pkt 1fpkt"];
445--2590[label="1;64pkt 64fpkt"];
445--2759[label="1;7pkt 7fpkt"];
445--2788[label="1;57pkt 57fpkt"];
445--3196[label="1;1pkt 1fpkt"];
446--981[label="1;1pkt 1fpkt"];
446--2192[label="1;1pkt 1fpkt"];
446--3196[label="1;1pkt 1fpkt"];
609--1397[label="0.982456;56pkt 56fpkt"];
609--2590[label="0.982456;56pkt 56fpkt"];
981--2192[label="1;1pkt 1fpkt"];
981--3196[label="1;1pkt 1fpkt"];
1397--2590[label="1;64pkt 64fpkt"];
1609--2759[label="1;7pkt 7fpkt"];
1647--2788[label="1;57pkt 57fpkt"];
2192--3196[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.195.107.24" src_ip="193.168.139.26" src_port="443"/>
      <filter dst_ip="130.195.107.24" src_ip="6.44.215.70" src_port="80"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.117.0.66"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.9.42.66"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.66"/>
    </slice>
    <from sec="1072933207" usec="0"/>
    <to sec="1072934093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.251.3.67"/>
    </slice>
    <from sec="1072933224" usec="0"/>
    <to sec="1072934078" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.67"/>
    </slice>
    <from sec="1072933205" usec="0"/>
    <to sec="1072934094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.85.157.67"/>
    </slice>
    <from sec="1072933207" usec="0"/>
    <to sec="1072934092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880381,2.09579,020,0 0 0 1 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_241{
style=filled;
color=gray75;
848[label="223.62.10.24;d;2pkt 2fpkt", shape=diamond, color=yellow];
1623[label="156.143.162.67;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3609[label="156.143.5.64;1pkt 1fpkt", shape=invhouse, color=bisque];
3622[label="156.143.162.67;1pkt 1fpkt", shape=invhouse, color=bisque];
stat241[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.143.5.64:0, 223.62.10.24:0}[50%]&lt;BR/&gt;{156.143.162.67:0, 223.62.10.24:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
848--1623[label="1;1pkt 1fpkt"];
848--3609[label="1;1pkt 1fpkt"];
848--3622[label="1;1pkt 1fpkt"];
1623--3622[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="223.62.10.24" src_ip="156.143.162.67"/>
      <filter dst_ip="223.62.10.24" src_ip="156.143.5.64"/>
    </slice>
    <from sec="1072933205" usec="0"/>
    <to sec="1072934096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="111.133.104.68"/>
    </slice>
    <from sec="1072933405" usec="0"/>
    <to sec="1072933674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03443,2.04887,503,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_243{
style=filled;
color=gray75;
24[label="1.59.32.69s;2pkt 2fpkt", shape=rectangle, color=red];
1631[label="1.59.32.69;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2776[label="1.59.32.69;1pkt 1fpkt", shape=invtriangle, color=brown];
3627[label="1.59.32.69;2pkt 2fpkt", shape=invhouse, color=bisque];
stat243[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.59.32.69:1569, 213.68.207.158:80}[50%]&lt;BR/&gt;{1.59.32.69:1570, 213.68.207.158:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1570: (33.3333%)&lt;BR/&gt; 1569: (16.6667%)&gt;];
}
24--1631[label="1;1pkt 1fpkt"];
24--2776[label="1;1pkt 1fpkt"];
24--3627[label="1;2pkt 2fpkt"];
1631--2776[label="1;1pkt 1fpkt"];
1631--3627[label="1;1pkt 1fpkt"];
2776--3627[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.68.207.158" dst_port="80" src_ip="1.59.32.69" src_port="1570"/>
      <filter dst_ip="213.68.207.158" dst_port="80" src_ip="1.59.32.69" src_port="1569"/>
    </slice>
    <from sec="1072933939" usec="0"/>
    <to sec="1072933980" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.69"/>
    </slice>
    <from sec="1072933209" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.70"/>
    </slice>
    <from sec="1072933210" usec="0"/>
    <to sec="1072934097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.124.134.70"/>
    </slice>
    <from sec="1072933265" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.71"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889486,2.05965,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_248{
style=filled;
color=gray75;
929[label="216.80.45.72;s;541pkt 541fpkt", shape=diamond, color=yellow];
1657[label="216.80.45.72;590pkt 590fpkt", shape=pentagon, color=darkviolet];
2797[label="216.80.45.72;590pkt 590fpkt", shape=invtriangle, color=brown];
3640[label="216.80.45.72;590pkt 590fpkt", shape=invhouse, color=bisque];
stat248[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.80.45.72:8006, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8006: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
929--1657[label="1;541pkt 541fpkt"];
929--2797[label="1;541pkt 541fpkt"];
929--3640[label="1;541pkt 541fpkt"];
1657--2797[label="1;590pkt 590fpkt"];
1657--3640[label="1;590pkt 590fpkt"];
2797--3640[label="1;590pkt 590fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="216.80.45.72" src_port="8006"/>
    </slice>
    <from sec="1072933203" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.119.9.73"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.74"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.818742,2.0972,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_251{
style=filled;
color=gray75;
421[label="138.248.127.75;s;1pkt 1fpkt", shape=diamond, color=yellow];
1676[label="138.248.127.75;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat251[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.248.127.75:22830, 152.6.39.203:4662}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22830: (50%)&lt;BR/&gt; 4662: (50%)&gt;];
}
421--1676[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="152.6.39.203" dst_port="4662" src_ip="138.248.127.75" src_port="22830"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072933745" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.818742,2.0972,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_252{
style=filled;
color=gray75;
823[label="194.2.239.75;s;1pkt 1fpkt", shape=diamond, color=yellow];
1678[label="194.2.239.75;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat252[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.2.239.75:1108, 152.6.39.203:4662}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 1108: (50%)&gt;];
}
823--1678[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="152.6.39.203" dst_port="4662" src_ip="194.2.239.75" src_port="1108"/>
    </slice>
    <from sec="1072933458" usec="0"/>
    <to sec="1072933812" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.76"/>
    </slice>
    <from sec="1072933208" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3296,2.10519,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_254{
style=filled;
color=gray75;
395[label="156.143.243.232;d;18pkt 18fpkt", shape=diamond, color=yellow];
521[label="90.154.110.157;s;1pkt 1fpkt", shape=diamond, color=yellow];
567[label="23.56.33.181;s;2pkt 2fpkt", shape=diamond, color=yellow];
587[label="23.55.127.133;s;1pkt 1fpkt", shape=diamond, color=yellow];
845[label="23.48.145.76;s;2pkt 2fpkt", shape=diamond, color=yellow];
1006[label="23.55.127.133;s;1pkt 1fpkt", shape=hexagon, color=black];
1091[label="90.154.110.157;s;1pkt 1fpkt", shape=hexagon, color=black];
1682[label="23.48.145.76;2pkt 2fpkt", shape=pentagon, color=darkviolet];
1963[label="23.55.127.133;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2087[label="90.154.110.157;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2815[label="23.48.145.76;2pkt 2fpkt", shape=invtriangle, color=brown];
3025[label="23.55.127.133;1pkt 1fpkt", shape=invtriangle, color=brown];
3653[label="23.48.145.76;2pkt 2fpkt", shape=invhouse, color=bisque];
stat254[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 156.143.243.232:6881}[27.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6882: (10%)&lt;BR/&gt; 39728: (7.14286%)&lt;BR/&gt; 39720: (7.14286%)&lt;BR/&gt; 39603: (7.14286%)&lt;BR/&gt; 6889: (7.14286%)&gt;];
}
395--521[label="1;1pkt 1fpkt"];
395--567[label="1;2pkt 2fpkt"];
395--587[label="1;1pkt 1fpkt"];
395--845[label="1;2pkt 2fpkt"];
395--1006[label="1;1pkt 1fpkt"];
395--1091[label="1;1pkt 1fpkt"];
395--1682[label="1;2pkt 2fpkt"];
395--1963[label="1;1pkt 1fpkt"];
395--2087[label="1;1pkt 1fpkt"];
395--2815[label="1;2pkt 2fpkt"];
395--3025[label="1;1pkt 1fpkt"];
395--3653[label="1;2pkt 2fpkt"];
521--1091[label="1;1pkt 1fpkt"];
521--2087[label="1;1pkt 1fpkt"];
587--1006[label="1;1pkt 1fpkt"];
587--1963[label="1;1pkt 1fpkt"];
587--3025[label="1;1pkt 1fpkt"];
845--1682[label="1;2pkt 2fpkt"];
845--2815[label="1;2pkt 2fpkt"];
845--3653[label="1;2pkt 2fpkt"];
1006--1963[label="1;1pkt 1fpkt"];
1006--3025[label="1;1pkt 1fpkt"];
1091--2087[label="1;1pkt 1fpkt"];
1682--2815[label="1;2pkt 2fpkt"];
1682--3653[label="1;2pkt 2fpkt"];
1963--3025[label="1;1pkt 1fpkt"];
2815--3653[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="156.143.243.232" dst_port="6881"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889486,2.05965,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_255{
style=filled;
color=gray75;
893[label="156.142.71.2;d;4pkt 4fpkt", shape=diamond, color=yellow];
1686[label="193.10.253.76;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2817[label="193.10.253.76;1pkt 1fpkt", shape=invtriangle, color=brown];
3655[label="193.10.253.76;1pkt 1fpkt", shape=invhouse, color=bisque];
stat255[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.10.253.76:6667, 156.142.71.2:44335}[25%]&lt;BR/&gt;{193.10.253.76:6667, 156.142.71.2:44336}[25%]&lt;BR/&gt;{195.150.188.230:1457, 156.142.71.2:6669}[25%]&lt;BR/&gt;{195.150.188.230:2392, 156.142.71.2:6669}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (35.7143%)&lt;BR/&gt; 44336: (28.5714%)&lt;BR/&gt; 6669: (14.2857%)&lt;BR/&gt; 44335: (7.14286%)&lt;BR/&gt; 2392: (7.14286%)&gt;];
}
893--1686[label="1;1pkt 1fpkt"];
893--2817[label="1;1pkt 1fpkt"];
893--3655[label="1;1pkt 1fpkt"];
1686--2817[label="1;1pkt 1fpkt"];
1686--3655[label="1;1pkt 1fpkt"];
2817--3655[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="156.142.71.2" dst_port="6669" src_ip="195.150.188.230" src_port="2392"/>
      <filter dst_ip="156.142.71.2" dst_port="6669" src_ip="195.150.188.230" src_port="1457"/>
      <filter dst_ip="156.142.71.2" dst_port="44336" src_ip="193.10.253.76" src_port="6667"/>
      <filter dst_ip="156.142.71.2" dst_port="44335" src_ip="193.10.253.76" src_port="6667"/>
    </slice>
    <from sec="1072933207" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.77"/>
    </slice>
    <from sec="1072933208" usec="0"/>
    <to sec="1072934096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.80.217.78"/>
    </slice>
    <from sec="1072933230" usec="0"/>
    <to sec="1072934044" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889486,2.05965,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_258{
style=filled;
color=gray75;
506[label="201.138.161.79;s;2425pkt 2425fpkt", shape=diamond, color=yellow];
1695[label="201.138.161.79;2956pkt 2956fpkt", shape=pentagon, color=darkviolet];
2825[label="201.138.161.79;2956pkt 2956fpkt", shape=invtriangle, color=brown];
3660[label="201.138.161.79;2956pkt 2956fpkt", shape=invhouse, color=bisque];
stat258[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.138.161.79:1160, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1160: (50%)&gt;];
}
506--1695[label="1;2425pkt 2425fpkt"];
506--2825[label="1;2425pkt 2425fpkt"];
506--3660[label="1;2425pkt 2425fpkt"];
1695--2825[label="1;2956pkt 2956fpkt"];
1695--3660[label="1;2956pkt 2956fpkt"];
2825--3660[label="1;2956pkt 2956fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="201.138.161.79" src_port="1160"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.80"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.81"/>
    </slice>
    <from sec="1072933207" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.108.170.81"/>
    </slice>
    <from sec="1072933208" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.82"/>
    </slice>
    <from sec="1072933212" usec="0"/>
    <to sec="1072934097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.83"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.84.42.84"/>
    </slice>
    <from sec="1072933856" usec="0"/>
    <to sec="1072934090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.138.175.84"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934065" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.85"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.86"/>
    </slice>
    <from sec="1072933212" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889486,2.05965,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_269{
style=filled;
color=gray75;
886[label="109.108.94.86;s;629pkt 629fpkt", shape=diamond, color=yellow];
1735[label="109.108.94.86;691pkt 691fpkt", shape=pentagon, color=darkviolet];
2856[label="109.108.94.86;690pkt 690fpkt", shape=invtriangle, color=brown];
3680[label="109.108.94.86;690pkt 690fpkt", shape=invhouse, color=bisque];
stat269[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.108.94.86:4555, *:1434}[94.0666%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4555: (47.1296%)&lt;BR/&gt; 1434: (47.1296%)&lt;BR/&gt; 0: (5.59259%)&lt;BR/&gt; 1314: (0.0740741%)&lt;BR/&gt; 80: (0.0740741%)&gt;];
}
886--1735[label="1;629pkt 629fpkt"];
886--2856[label="0.99841;628pkt 628fpkt"];
886--3680[label="0.99841;628pkt 628fpkt"];
1735--2856[label="1;690pkt 690fpkt"];
1735--3680[label="1;690pkt 690fpkt"];
2856--3680[label="1;690pkt 690fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="109.108.94.86" src_port="4555"/>
    </slice>
    <from sec="1072933203" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.89"/>
    </slice>
    <from sec="1072933207" usec="0"/>
    <to sec="1072934094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_271{
style=filled;
color=gray75;
1764[label="193.53.69.91;113pkt 113fpkt", shape=pentagon, color=darkviolet];
stat271[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.53.69.91:0, *:0}[93.8053%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (93.8053%)&lt;BR/&gt; 135: (2.65487%)&lt;BR/&gt; 12962: (0.442478%)&lt;BR/&gt; 10161: (0.442478%)&lt;BR/&gt; 9924: (0.442478%)&gt;];
}
</description>
    <slice>
      <filter src_ip="193.53.69.91"/>
    </slice>
    <from sec="1072933212" usec="0"/>
    <to sec="1072934083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.91"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.92"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.34.156.92"/>
    </slice>
    <from sec="1072933233" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.87.8.93"/>
    </slice>
    <from sec="1072933284" usec="0"/>
    <to sec="1072933546" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.6.51.93"/>
    </slice>
    <from sec="1072933512" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.93"/>
    </slice>
    <from sec="1072933209" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.82.45.95"/>
    </slice>
    <from sec="1072933209" usec="0"/>
    <to sec="1072934076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.95"/>
    </slice>
    <from sec="1072933210" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.54.29.96"/>
    </slice>
    <from sec="1072933240" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.96"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.168.92.96"/>
    </slice>
    <from sec="1072933250" usec="0"/>
    <to sec="1072934079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.97"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.106.84.97"/>
    </slice>
    <from sec="1072933213" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.244.144.97"/>
    </slice>
    <from sec="1072933204" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.117.4.98"/>
    </slice>
    <from sec="1072933209" usec="0"/>
    <to sec="1072934072" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03443,2.04887,010,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_287{
style=filled;
color=gray75;
154[label="1.145.69.98s;200pkt 200fpkt", shape=rectangle, color=red];
1806[label="1.145.69.98;253pkt 253fpkt", shape=pentagon, color=darkviolet];
2911[label="1.145.69.98;252pkt 252fpkt", shape=invtriangle, color=brown];
3722[label="1.145.69.98;252pkt 252fpkt", shape=invhouse, color=bisque];
stat287[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.145.69.98:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4658: (0.208986%)&lt;BR/&gt; 4657: (0.208986%)&lt;BR/&gt; 4656: (0.208986%)&lt;BR/&gt; 4655: (0.208986%)&gt;];
}
154--1806[label="1;200pkt 200fpkt"];
154--2911[label="0.995;199pkt 199fpkt"];
154--3722[label="0.995;199pkt 199fpkt"];
1806--2911[label="1;252pkt 252fpkt"];
1806--3722[label="1;252pkt 252fpkt"];
2911--3722[label="1;252pkt 252fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="1.145.69.98"/>
    </slice>
    <from sec="1072934061" usec="0"/>
    <to sec="1072934086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.98"/>
    </slice>
    <from sec="1072933208" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.107.145.98"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="174.144.174.98"/>
    </slice>
    <from sec="1072933208" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="108.47.201.98"/>
    </slice>
    <from sec="1072933224" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_292{
style=filled;
color=gray75;
1814[label="4.32.228.98;95pkt 95fpkt", shape=pentagon, color=darkviolet];
stat292[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.32.228.98:0, *:0}[92.6316%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (92.6316%)&lt;BR/&gt; 135: (3.68421%)&lt;BR/&gt; 3890: (0.526316%)&lt;BR/&gt; 3514: (0.526316%)&lt;BR/&gt; 3087: (0.526316%)&gt;];
}
</description>
    <slice>
      <filter src_ip="4.32.228.98"/>
    </slice>
    <from sec="1072933220" usec="0"/>
    <to sec="1072934041" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.147.55.101"/>
    </slice>
    <from sec="1072933332" usec="0"/>
    <to sec="1072933422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.101"/>
    </slice>
    <from sec="1072933214" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.80.146.101"/>
    </slice>
    <from sec="1072933204" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.106.201.101"/>
    </slice>
    <from sec="1072933405" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.118.214.101"/>
    </slice>
    <from sec="1072933261" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.102"/>
    </slice>
    <from sec="1072933209" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.218.251.102"/>
    </slice>
    <from sec="1072933587" usec="0"/>
    <to sec="1072933724" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.104"/>
    </slice>
    <from sec="1072933207" usec="0"/>
    <to sec="1072934094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.120.128.104"/>
    </slice>
    <from sec="1072933216" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.106"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.982506,2.05031,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_303{
style=filled;
color=gray75;
110[label="213.33.192.106s;255pkt 255fpkt", shape=rectangle, color=red];
1845[label="213.33.192.106;255pkt 255fpkt", shape=pentagon, color=darkviolet];
2939[label="213.33.192.106;255pkt 255fpkt", shape=invtriangle, color=brown];
stat303[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.33.192.106:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
110--1845[label="1;255pkt 255fpkt"];
110--2939[label="1;255pkt 255fpkt"];
1845--2939[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="213.33.192.106" src_port="1025"/>
    </slice>
    <from sec="1072933311" usec="0"/>
    <to sec="1072933325" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.107"/>
    </slice>
    <from sec="1072933207" usec="0"/>
    <to sec="1072934093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.108"/>
    </slice>
    <from sec="1072933208" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.99.209.108"/>
    </slice>
    <from sec="1072933256" usec="0"/>
    <to sec="1072934024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.109"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.66.22.110"/>
    </slice>
    <from sec="1072933239" usec="0"/>
    <to sec="1072933393" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.110"/>
    </slice>
    <from sec="1072933210" usec="0"/>
    <to sec="1072934097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.111"/>
    </slice>
    <from sec="1072933210" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.112"/>
    </slice>
    <from sec="1072933208" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.113"/>
    </slice>
    <from sec="1072933210" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.818742,2.0972,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_314{
style=filled;
color=gray75;
950[label="212.84.37.174;d;3pkt 3fpkt", shape=diamond, color=yellow];
1883[label="208.48.0.116;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat314[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.48.0.113:2848, 212.84.37.174:3623}[33.3333%]&lt;BR/&gt;{208.48.0.116:2848, 212.84.37.174:3626}[33.3333%]&lt;BR/&gt;{208.48.137.155:2847, 212.84.37.174:3619}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2848: (37.5%)&lt;BR/&gt; 3626: (25%)&lt;BR/&gt; 3623: (12.5%)&lt;BR/&gt; 3619: (12.5%)&lt;BR/&gt; 2847: (12.5%)&gt;];
}
950--1883[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.84.37.174" dst_port="3619" src_ip="208.48.137.155" src_port="2847"/>
      <filter dst_ip="212.84.37.174" dst_port="3626" src_ip="208.48.0.116" src_port="2848"/>
      <filter dst_ip="212.84.37.174" dst_port="3623" src_ip="208.48.0.113" src_port="2848"/>
    </slice>
    <from sec="1072933871" usec="0"/>
    <to sec="1072934074" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.74.45.116"/>
    </slice>
    <from sec="1072933304" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.116"/>
    </slice>
    <from sec="1072933210" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.144.29.118"/>
    </slice>
    <from sec="1072933208" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.117.75.119"/>
    </slice>
    <from sec="1072933565" usec="0"/>
    <to sec="1072933716" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.120"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03443,2.04887,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_320{
style=filled;
color=gray75;
114[label="108.44.192.120s;256pkt 256fpkt", shape=rectangle, color=red];
1901[label="108.44.192.120;256pkt 256fpkt", shape=pentagon, color=darkviolet];
2982[label="108.44.192.120;255pkt 255fpkt", shape=invtriangle, color=brown];
3775[label="108.44.192.120;255pkt 255fpkt", shape=invhouse, color=bisque];
stat320[shape=component, label=&lt;Rules:&lt;BR/&gt;{108.44.192.120:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
114--1901[label="1;256pkt 256fpkt"];
114--2982[label="1;255pkt 255fpkt"];
114--3775[label="1;255pkt 255fpkt"];
1901--2982[label="1;255pkt 255fpkt"];
1901--3775[label="1;255pkt 255fpkt"];
2982--3775[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="108.44.192.120" src_port="1026"/>
    </slice>
    <from sec="1072934085" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.121"/>
    </slice>
    <from sec="1072933212" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.88.71.122"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3296,2.10519,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_323{
style=filled;
color=gray75;
615[label="130.195.108.188;d;46pkt 46fpkt", shape=diamond, color=yellow];
681[label="194.1.113.40;s;13pkt 13fpkt", shape=diamond, color=yellow];
753[label="194.242.164.123;s;2pkt 2fpkt", shape=diamond, color=yellow];
1031[label="194.1.113.40;s;10pkt 10fpkt", shape=hexagon, color=black];
1364[label="111.88.45.19;6pkt 6fpkt", shape=pentagon, color=darkviolet];
1472[label="194.1.113.40;12pkt 12fpkt", shape=pentagon, color=darkviolet];
1918[label="194.242.164.123;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2099[label="200.236.43.160;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2112[label="200.236.43.163;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2371[label="201.231.45.228;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2563[label="111.88.45.19;7pkt 7fpkt", shape=invtriangle, color=brown];
2655[label="194.1.113.40;13pkt 13fpkt", shape=invtriangle, color=brown];
2996[label="194.242.164.123;1pkt 1fpkt", shape=invtriangle, color=brown];
3129[label="200.236.43.160;5pkt 5fpkt", shape=invtriangle, color=brown];
3136[label="200.236.43.163;3pkt 3fpkt", shape=invtriangle, color=brown];
3325[label="201.231.45.228;3pkt 3fpkt", shape=invtriangle, color=brown];
3470[label="111.88.45.19;7pkt 7fpkt", shape=invhouse, color=bisque];
3785[label="194.242.164.123;1pkt 1fpkt", shape=invhouse, color=bisque];
3874[label="200.236.43.160;5pkt 5fpkt", shape=invhouse, color=bisque];
3878[label="200.236.43.163;3pkt 3fpkt", shape=invhouse, color=bisque];
4007[label="201.231.45.228;2pkt 2fpkt", shape=invhouse, color=bisque];
stat323[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.1.113.40:80, 130.195.108.188:*}[25.4902%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.351%)&lt;BR/&gt; 2460: (1.65563%)&lt;BR/&gt; 1194: (1.65563%)&lt;BR/&gt; 1189: (1.65563%)&lt;BR/&gt; 1187: (1.65563%)&gt;];
}
615--681[label="1;13pkt 13fpkt"];
615--753[label="1;2pkt 2fpkt"];
615--1031[label="1;10pkt 10fpkt"];
615--1364[label="0.166667;1pkt 1fpkt"];
615--1472[label="1;12pkt 12fpkt"];
615--1918[label="1;1pkt 1fpkt"];
615--2099[label="1;5pkt 5fpkt"];
615--2112[label="1;3pkt 3fpkt"];
615--2371[label="1;3pkt 3fpkt"];
615--2563[label="0.285714;2pkt 2fpkt"];
615--2655[label="1;13pkt 13fpkt"];
615--2996[label="1;1pkt 1fpkt"];
615--3129[label="1;5pkt 5fpkt"];
615--3136[label="1;3pkt 3fpkt"];
615--3325[label="1;3pkt 3fpkt"];
615--3470[label="0.285714;2pkt 2fpkt"];
615--3785[label="1;1pkt 1fpkt"];
615--3874[label="1;5pkt 5fpkt"];
615--3878[label="1;3pkt 3fpkt"];
615--4007[label="1;2pkt 2fpkt"];
681--1031[label="1;10pkt 10fpkt"];
681--1472[label="1;12pkt 12fpkt"];
681--2655[label="1;13pkt 13fpkt"];
753--1918[label="1;1pkt 1fpkt"];
753--2996[label="1;1pkt 1fpkt"];
753--3785[label="1;1pkt 1fpkt"];
1031--1472[label="0.9;9pkt 9fpkt"];
1031--2655[label="1;10pkt 10fpkt"];
1364--2563[label="1;6pkt 6fpkt"];
1364--3470[label="1;6pkt 6fpkt"];
1472--2655[label="1;12pkt 12fpkt"];
1918--2996[label="1;1pkt 1fpkt"];
1918--3785[label="1;1pkt 1fpkt"];
2099--3129[label="1;5pkt 5fpkt"];
2099--3874[label="1;5pkt 5fpkt"];
2112--3136[label="1;3pkt 3fpkt"];
2112--3878[label="1;3pkt 3fpkt"];
2371--3325[label="1;3pkt 3fpkt"];
2371--4007[label="1;2pkt 2fpkt"];
2563--3470[label="1;7pkt 7fpkt"];
2996--3785[label="1;1pkt 1fpkt"];
3129--3874[label="1;5pkt 5fpkt"];
3136--3878[label="1;3pkt 3fpkt"];
3325--4007[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="130.195.108.188" src_ip="194.1.113.40" src_port="80"/>
    </slice>
    <from sec="1072933292" usec="0"/>
    <to sec="1072934011" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.56.41.124"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.0.231.125"/>
    </slice>
    <from sec="1072933205" usec="0"/>
    <to sec="1072934046" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.238.250.125"/>
    </slice>
    <from sec="1072933201" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.157.160.128"/>
    </slice>
    <from sec="1072934067" usec="0"/>
    <to sec="1072934092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.160.87.130"/>
    </slice>
    <from sec="1072933202" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.65.131.130"/>
    </slice>
    <from sec="1072934101" usec="0"/>
    <to sec="1072934102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.85.34.131"/>
    </slice>
    <from sec="1072933224" usec="0"/>
    <to sec="1072934086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,011,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.143.93.131"/>
    </slice>
    <from sec="1072933208" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.154.87.132"/>
    </slice>
    <from sec="1072933228" usec="0"/>
    <to sec="1072934079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.160.26.133"/>
    </slice>
    <from sec="1072933205" usec="0"/>
    <to sec="1072933750" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.182.70.133"/>
    </slice>
    <from sec="1072933244" usec="0"/>
    <to sec="1072934092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="108.160.32.134"/>
    </slice>
    <from sec="1072933434" usec="0"/>
    <to sec="1072934016" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="108.233.101.134"/>
    </slice>
    <from sec="1072933205" usec="0"/>
    <to sec="1072933924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.29.220.136"/>
    </slice>
    <from sec="1072933233" usec="0"/>
    <to sec="1072933262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="112.165.115.138"/>
    </slice>
    <from sec="1072933827" usec="0"/>
    <to sec="1072934039" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.176.159.139"/>
    </slice>
    <from sec="1072933302" usec="0"/>
    <to sec="1072933889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.150.73.140"/>
    </slice>
    <from sec="1072934065" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.982506,2.05031,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_342{
style=filled;
color=gray75;
120[label="111.195.144.142s;255pkt 255fpkt", shape=rectangle, color=red];
2009[label="111.195.144.142;255pkt 255fpkt", shape=pentagon, color=darkviolet];
3064[label="111.195.144.142;255pkt 255fpkt", shape=invtriangle, color=brown];
stat342[shape=component, label=&lt;Rules:&lt;BR/&gt;{111.195.144.142:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
120--2009[label="1;255pkt 255fpkt"];
120--3064[label="1;255pkt 255fpkt"];
2009--3064[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="111.195.144.142" src_port="1025"/>
    </slice>
    <from sec="1072933803" usec="0"/>
    <to sec="1072933823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.82.89.144"/>
    </slice>
    <from sec="1072933216" usec="0"/>
    <to sec="1072934067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.87.3.145"/>
    </slice>
    <from sec="1072933229" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.42.16.145"/>
    </slice>
    <from sec="1072933325" usec="0"/>
    <to sec="1072934053" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889486,2.05965,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_346{
style=filled;
color=gray75;
875[label="221.92.71.145;s;520pkt 520fpkt", shape=diamond, color=yellow];
2030[label="221.92.71.145;631pkt 631fpkt", shape=pentagon, color=darkviolet];
3077[label="221.92.71.145;630pkt 630fpkt", shape=invtriangle, color=brown];
3838[label="221.92.71.145;631pkt 631fpkt", shape=invhouse, color=bisque];
stat346[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.92.71.145:1088, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1088: (50%)&gt;];
}
875--2030[label="1;520pkt 520fpkt"];
875--3077[label="1;520pkt 520fpkt"];
875--3838[label="1;520pkt 520fpkt"];
2030--3077[label="1;630pkt 630fpkt"];
2030--3838[label="1;631pkt 631fpkt"];
3077--3838[label="1;630pkt 630fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="221.92.71.145" src_port="1088"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,011,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.143.93.145"/>
    </slice>
    <from sec="1072933204" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.200.11.146"/>
    </slice>
    <from sec="1072933213" usec="0"/>
    <to sec="1072934082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.217.75.146"/>
    </slice>
    <from sec="1072933214" usec="0"/>
    <to sec="1072934090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="152.77.76.146"/>
    </slice>
    <from sec="1072933201" usec="0"/>
    <to sec="1072934094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.178.113.146"/>
    </slice>
    <from sec="1072934101" usec="0"/>
    <to sec="1072934102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828525,2.06109,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_352{
style=filled;
color=gray75;
784[label="194.78.153.146;s;2pkt 2fpkt", shape=diamond, color=yellow];
2038[label="194.78.153.146;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3081[label="194.78.153.146;1pkt 1fpkt", shape=invtriangle, color=brown];
stat352[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.78.153.146:3827, 152.6.39.203:4662}[50%]&lt;BR/&gt;{194.78.153.146:53, 152.77.254.227:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (40%)&lt;BR/&gt; 4662: (30%)&lt;BR/&gt; 3827: (30%)&gt;];
}
784--2038[label="1;2pkt 2fpkt"];
784--3081[label="1;1pkt 1fpkt"];
2038--3081[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="152.77.254.227" dst_port="53" src_ip="194.78.153.146" src_port="53"/>
      <filter dst_ip="152.6.39.203" dst_port="4662" src_ip="194.78.153.146" src_port="3827"/>
    </slice>
    <from sec="1072933270" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.247.253.149"/>
    </slice>
    <from sec="1072933204" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.141.44.152"/>
    </slice>
    <from sec="1072933703" usec="0"/>
    <to sec="1072934005" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.818742,2.0972,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_356{
style=filled;
color=gray75;
922[label="213.205.184.152;s;14pkt 14fpkt", shape=diamond, color=yellow];
2065[label="213.205.184.152;14pkt 14fpkt", shape=pentagon, color=darkviolet];
stat356[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.205.184.152:*, 168.55.129.184:*}[78.5714%]&lt;BR/&gt;{213.205.184.152:6667, *:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (14.2857%)&lt;BR/&gt; 1080: (7.14286%)&lt;BR/&gt; 80: (7.14286%)&lt;BR/&gt; 23: (7.14286%)&lt;BR/&gt; 57021: (3.57143%)&gt;];
}
922--2065[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="168.55.129.184" src_ip="213.205.184.152"/>
      <filter src_ip="213.205.184.152" src_port="6667"/>
    </slice>
    <from sec="1072933201" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.79.235.152"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.87.18.155"/>
    </slice>
    <from sec="1072933453" usec="0"/>
    <to sec="1072933550" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.232.40.155"/>
    </slice>
    <from sec="1072933209" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.216.200.155"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.177.17.160"/>
    </slice>
    <from sec="1072933281" usec="0"/>
    <to sec="1072933743" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.212.76.160"/>
    </slice>
    <from sec="1072933993" usec="0"/>
    <to sec="1072934021" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="112.20.82.162"/>
    </slice>
    <from sec="1072933519" usec="0"/>
    <to sec="1072933778" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="108.233.140.162"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="156.143.194.162"/>
    </slice>
    <from sec="1072933412" usec="0"/>
    <to sec="1072934091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="111.236.91.163"/>
    </slice>
    <from sec="1072933207" usec="0"/>
    <to sec="1072934091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.69.39.164"/>
    </slice>
    <from sec="1072933205" usec="0"/>
    <to sec="1072934067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03443,2.04887,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_369{
style=filled;
color=gray75;
125[label="111.198.178.164s;197pkt 197fpkt", shape=rectangle, color=red];
2123[label="111.198.178.164;254pkt 254fpkt", shape=pentagon, color=darkviolet];
3144[label="111.198.178.164;254pkt 254fpkt", shape=invtriangle, color=brown];
3884[label="111.198.178.164;254pkt 254fpkt", shape=invhouse, color=bisque];
stat369[shape=component, label=&lt;Rules:&lt;BR/&gt;{111.198.178.164:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
125--2123[label="1;197pkt 197fpkt"];
125--3144[label="1;197pkt 197fpkt"];
125--3884[label="1;197pkt 197fpkt"];
2123--3144[label="1;254pkt 254fpkt"];
2123--3884[label="1;254pkt 254fpkt"];
3144--3884[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="111.198.178.164" src_port="1026"/>
    </slice>
    <from sec="1072933594" usec="0"/>
    <to sec="1072933613" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.42.183.164"/>
    </slice>
    <from sec="1072933201" usec="0"/>
    <to sec="1072934076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889486,2.05965,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_371{
style=filled;
color=gray75;
523[label="198.252.220.167;s;2pkt 2fpkt", shape=diamond, color=yellow];
2137[label="198.252.220.167;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3154[label="198.252.220.167;3pkt 3fpkt", shape=invtriangle, color=brown];
3891[label="198.252.220.167;2pkt 2fpkt", shape=invhouse, color=bisque];
stat371[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.252.220.167:4672, 152.6.39.203:4672}[33.3333%]&lt;BR/&gt;{198.252.220.167:4662, 152.6.39.203:1589}[33.3333%]&lt;BR/&gt;{198.252.220.167:4662, 152.6.39.203:4957}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4672: (40%)&lt;BR/&gt; 4662: (30%)&lt;BR/&gt; 4957: (15%)&lt;BR/&gt; 1589: (15%)&gt;];
}
523--2137[label="1;2pkt 2fpkt"];
523--3154[label="1;2pkt 2fpkt"];
523--3891[label="0.5;1pkt 1fpkt"];
2137--3154[label="1;3pkt 3fpkt"];
2137--3891[label="1;2pkt 2fpkt"];
3154--3891[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="152.6.39.203" dst_port="4957" src_ip="198.252.220.167" src_port="4662"/>
      <filter dst_ip="152.6.39.203" dst_port="1589" src_ip="198.252.220.167" src_port="4662"/>
      <filter dst_ip="152.6.39.203" dst_port="4672" src_ip="198.252.220.167" src_port="4672"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072933841" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828525,2.06109,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_372{
style=filled;
color=gray75;
865[label="200.186.48.168;s;1pkt 1fpkt", shape=diamond, color=yellow];
2139[label="200.186.48.168;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3156[label="200.186.48.168;1pkt 1fpkt", shape=invtriangle, color=brown];
stat372[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.186.48.168:4539, 152.6.39.203:4662}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 4539: (50%)&gt;];
}
865--2139[label="1;1pkt 1fpkt"];
865--3156[label="1;1pkt 1fpkt"];
2139--3156[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="152.6.39.203" dst_port="4662" src_ip="200.186.48.168" src_port="4539"/>
    </slice>
    <from sec="1072933631" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.982506,2.05031,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_373{
style=filled;
color=gray75;
127[label="212.213.105.173s;219pkt 219fpkt", shape=rectangle, color=red];
2157[label="212.213.105.173;256pkt 256fpkt", shape=pentagon, color=darkviolet];
3170[label="212.213.105.173;256pkt 256fpkt", shape=invtriangle, color=brown];
stat373[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.213.105.173:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
127--2157[label="1;219pkt 219fpkt"];
127--3170[label="1;219pkt 219fpkt"];
2157--3170[label="1;256pkt 256fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="212.213.105.173" src_port="1025"/>
    </slice>
    <from sec="1072933657" usec="0"/>
    <to sec="1072933673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.238.91.177"/>
    </slice>
    <from sec="1072933227" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.208.78.178"/>
    </slice>
    <from sec="1072933243" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.137.35.180"/>
    </slice>
    <from sec="1072933220" usec="0"/>
    <to sec="1072934097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="152.160.132.180"/>
    </slice>
    <from sec="1072933261" usec="0"/>
    <to sec="1072934076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.56.33.181"/>
    </slice>
    <from sec="1072934101" usec="0"/>
    <to sec="1072934102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,053,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="111.234.147.185"/>
    </slice>
    <from sec="1072933201" usec="0"/>
    <to sec="1072934088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.16.223.187"/>
    </slice>
    <from sec="1072933241" usec="0"/>
    <to sec="1072934064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03443,2.04887,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_382{
style=filled;
color=gray75;
130[label="111.213.221.190s;44pkt 44fpkt", shape=rectangle, color=red];
2220[label="111.213.221.190;215pkt 215fpkt", shape=pentagon, color=darkviolet];
3217[label="111.213.221.190;215pkt 215fpkt", shape=invtriangle, color=brown];
3933[label="111.213.221.190;214pkt 214fpkt", shape=invhouse, color=bisque];
stat382[shape=component, label=&lt;Rules:&lt;BR/&gt;{111.213.221.190:1050, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1050: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
130--2220[label="1;44pkt 44fpkt"];
130--3217[label="1;44pkt 44fpkt"];
130--3933[label="1;44pkt 44fpkt"];
2220--3217[label="1;215pkt 215fpkt"];
2220--3933[label="1;214pkt 214fpkt"];
3217--3933[label="1;214pkt 214fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="111.213.221.190" src_port="1050"/>
    </slice>
    <from sec="1072933593" usec="0"/>
    <to sec="1072933616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.103.0.192"/>
    </slice>
    <from sec="1072933204" usec="0"/>
    <to sec="1072934076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.87.236.193"/>
    </slice>
    <from sec="1072933237" usec="0"/>
    <to sec="1072934094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.72.77.194"/>
    </slice>
    <from sec="1072933202" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_387{
style=filled;
color=gray75;
2247[label="200.16.13.195;43pkt 43fpkt", shape=pentagon, color=darkviolet];
stat387[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.16.13.195:*, *:135}[51.1628%]&lt;BR/&gt;{200.16.13.195:*, *:445}[48.8372%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (25.5814%)&lt;BR/&gt; 445: (24.4186%)&lt;BR/&gt; 4938: (1.16279%)&lt;BR/&gt; 4909: (1.16279%)&lt;BR/&gt; 4877: (1.16279%)&gt;];
}
</description>
    <slice>
      <filter dst_port="135" src_ip="200.16.13.195"/>
      <filter dst_port="445" src_ip="200.16.13.195"/>
    </slice>
    <from sec="1072933242" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="108.35.72.195"/>
    </slice>
    <from sec="1072933218" usec="0"/>
    <to sec="1072934018" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.117.0.198"/>
    </slice>
    <from sec="1072933205" usec="0"/>
    <to sec="1072934083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.86.182.198"/>
    </slice>
    <from sec="1072934101" usec="0"/>
    <to sec="1072934102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.89.65.199"/>
    </slice>
    <from sec="1072933615" usec="0"/>
    <to sec="1072934082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.130.77.202"/>
    </slice>
    <from sec="1072933205" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="137.12.206.203"/>
    </slice>
    <from sec="1072934052" usec="0"/>
    <to sec="1072934082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3296,2.10519,011,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_394{
style=filled;
color=gray75;
440[label="156.143.12.234;d;133pkt 133fpkt", shape=diamond, color=yellow];
633[label="194.218.108.140;s;1pkt 1fpkt", shape=diamond, color=yellow];
706[label="111.198.22.174;s;1pkt 1fpkt", shape=diamond, color=yellow];
761[label="194.204.46.205;s;2pkt 2fpkt", shape=diamond, color=yellow];
1047[label="111.198.22.174;s;1pkt 1fpkt", shape=hexagon, color=black];
2282[label="194.204.46.205;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3261[label="194.204.46.205;2pkt 2fpkt", shape=invtriangle, color=brown];
3959[label="194.204.46.205;2pkt 2fpkt", shape=invhouse, color=bisque];
stat394[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.47.26.43:6969, 156.143.12.234:*}[25.5639%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6969: (13.5417%)&lt;BR/&gt; 6013: (9.02778%)&lt;BR/&gt; 6000: (8.33333%)&lt;BR/&gt; 80: (4.86111%)&lt;BR/&gt; 8881: (4.51389%)&gt;];
}
440--633[label="1;1pkt 1fpkt"];
440--706[label="1;1pkt 1fpkt"];
440--761[label="1;2pkt 2fpkt"];
440--1047[label="1;1pkt 1fpkt"];
440--2282[label="1;2pkt 2fpkt"];
440--3261[label="1;2pkt 2fpkt"];
440--3959[label="1;2pkt 2fpkt"];
706--1047[label="1;1pkt 1fpkt"];
761--2282[label="1;2pkt 2fpkt"];
761--3261[label="1;2pkt 2fpkt"];
761--3959[label="1;2pkt 2fpkt"];
2282--3261[label="1;2pkt 2fpkt"];
2282--3959[label="1;2pkt 2fpkt"];
3261--3959[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="156.143.12.234" src_ip="195.47.26.43" src_port="6969"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.65.122.205"/>
    </slice>
    <from sec="1072934101" usec="0"/>
    <to sec="1072934102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="111.249.144.206"/>
    </slice>
    <from sec="1072933203" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.16.156.206"/>
    </slice>
    <from sec="1072933298" usec="0"/>
    <to sec="1072933312" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.59.20.208"/>
    </slice>
    <from sec="1072934101" usec="0"/>
    <to sec="1072934102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.217.109.208"/>
    </slice>
    <from sec="1072933636" usec="0"/>
    <to sec="1072933918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.107.162.213"/>
    </slice>
    <from sec="1072933210" usec="0"/>
    <to sec="1072934096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.137.28.214"/>
    </slice>
    <from sec="1072933205" usec="0"/>
    <to sec="1072934088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_402{
style=filled;
color=gray75;
2319[label="194.36.47.214;94pkt 94fpkt", shape=pentagon, color=darkviolet];
stat402[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.36.47.214:*, *:135}[51.0638%]&lt;BR/&gt;{194.36.47.214:*, *:445}[48.9362%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (25.5319%)&lt;BR/&gt; 445: (24.4681%)&lt;BR/&gt; 4893: (0.531915%)&lt;BR/&gt; 4892: (0.531915%)&lt;BR/&gt; 4770: (0.531915%)&gt;];
}
</description>
    <slice>
      <filter dst_port="135" src_ip="194.36.47.214"/>
      <filter dst_port="445" src_ip="194.36.47.214"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889486,2.05965,011,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_403{
style=filled;
color=gray75;
344[label="212.216.68.216;s;10029pkt 10029fpkt", shape=diamond, color=yellow];
2326[label="212.216.68.216;10930pkt 10930fpkt", shape=pentagon, color=darkviolet];
3293[label="212.216.68.216;10930pkt 10930fpkt", shape=invtriangle, color=brown];
3983[label="212.216.68.216;10930pkt 10930fpkt", shape=invhouse, color=bisque];
stat403[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.216.68.216:83, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 83: (50%)&lt;BR/&gt; 43523: (0.0186833%)&lt;BR/&gt; 39291: (0.0186833%)&lt;BR/&gt; 37507: (0.0175156%)&lt;BR/&gt; 50874: (0.0140125%)&gt;];
}
344--383[label="0.0222222;1pkt 1fpkt"];
344--2326[label="1;10029pkt 10029fpkt"];
344--3293[label="1;10029pkt 10029fpkt"];
344--3983[label="1;10029pkt 10029fpkt"];
2326--3293[label="1;10930pkt 10930fpkt"];
2326--3983[label="1;10930pkt 10930fpkt"];
3293--3983[label="1;10930pkt 10930fpkt"];
</description>
    <slice>
      <filter src_ip="212.216.68.216" src_port="83"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03443,2.04887,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_404{
style=filled;
color=gray75;
133[label="111.161.41.221s;256pkt 256fpkt", shape=rectangle, color=red];
2335[label="111.161.41.221;256pkt 256fpkt", shape=pentagon, color=darkviolet];
3300[label="111.161.41.221;256pkt 256fpkt", shape=invtriangle, color=brown];
3988[label="111.161.41.221;256pkt 256fpkt", shape=invhouse, color=bisque];
stat404[shape=component, label=&lt;Rules:&lt;BR/&gt;{111.161.41.221:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
133--2335[label="1;256pkt 256fpkt"];
133--3300[label="1;256pkt 256fpkt"];
133--3988[label="1;256pkt 256fpkt"];
2335--3300[label="1;256pkt 256fpkt"];
2335--3988[label="1;256pkt 256fpkt"];
3300--3988[label="1;256pkt 256fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="111.161.41.221" src_port="1026"/>
    </slice>
    <from sec="1072933355" usec="0"/>
    <to sec="1072933371" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_405{
style=filled;
color=gray75;
2337[label="90.115.60.221;38pkt 38fpkt", shape=pentagon, color=darkviolet];
stat405[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.115.60.221:*, *:135}[50%]&lt;BR/&gt;{90.115.60.221:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25%)&lt;BR/&gt; 135: (25%)&lt;BR/&gt; 4905: (1.31579%)&lt;BR/&gt; 4687: (1.31579%)&lt;BR/&gt; 4501: (1.31579%)&gt;];
}
</description>
    <slice>
      <filter dst_port="445" src_ip="90.115.60.221"/>
      <filter dst_port="135" src_ip="90.115.60.221"/>
    </slice>
    <from sec="1072933282" usec="0"/>
    <to sec="1072934063" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.131.77.221"/>
    </slice>
    <from sec="1072933542" usec="0"/>
    <to sec="1072934097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.117.244.222"/>
    </slice>
    <from sec="1072933331" usec="0"/>
    <to sec="1072933366" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.974271,2.08661,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_408{
style=filled;
color=gray75;
162[label="22.169.82.224s;256pkt 256fpkt", shape=rectangle, color=red];
2347[label="22.169.82.224;256pkt 256fpkt", shape=pentagon, color=darkviolet];
stat408[shape=component, label=&lt;Rules:&lt;BR/&gt;{22.169.82.224:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 52407: (0.195312%)&lt;BR/&gt; 52406: (0.195312%)&lt;BR/&gt; 52405: (0.195312%)&lt;BR/&gt; 52404: (0.195312%)&gt;];
}
162--2347[label="1;256pkt 256fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="22.169.82.224"/>
    </slice>
    <from sec="1072933552" usec="0"/>
    <to sec="1072933567" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.88.157.224"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.49.57.226"/>
    </slice>
    <from sec="1072933327" usec="0"/>
    <to sec="1072933595" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.158.178.226"/>
    </slice>
    <from sec="1072933504" usec="0"/>
    <to sec="1072933842" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="111.176.96.227"/>
    </slice>
    <from sec="1072933219" usec="0"/>
    <to sec="1072934097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03443,2.04887,010,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_413{
style=filled;
color=gray75;
164[label="1.10.22.229s;83pkt 83fpkt", shape=rectangle, color=red];
2374[label="1.10.22.229;184pkt 184fpkt", shape=pentagon, color=darkviolet];
3328[label="1.10.22.229;184pkt 184fpkt", shape=invtriangle, color=brown];
4009[label="1.10.22.229;183pkt 183fpkt", shape=invhouse, color=bisque];
stat413[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.10.22.229:*, *:21}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (50%)&lt;BR/&gt; 3917: (0.315457%)&lt;BR/&gt; 3911: (0.315457%)&lt;BR/&gt; 3906: (0.315457%)&lt;BR/&gt; 3900: (0.315457%)&gt;];
}
164--2374[label="1;83pkt 83fpkt"];
164--3328[label="1;83pkt 83fpkt"];
164--4009[label="1;83pkt 83fpkt"];
2374--3328[label="1;184pkt 184fpkt"];
2374--4009[label="1;183pkt 183fpkt"];
3328--4009[label="1;183pkt 183fpkt"];
</description>
    <slice>
      <filter dst_port="21" src_ip="1.10.22.229"/>
    </slice>
    <from sec="1072933696" usec="0"/>
    <to sec="1072933707" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.119.172.230"/>
    </slice>
    <from sec="1072933201" usec="0"/>
    <to sec="1072934062" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.218.198.230"/>
    </slice>
    <from sec="1072933202" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.74.16.231"/>
    </slice>
    <from sec="1072933208" usec="0"/>
    <to sec="1072933894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.55.82.232"/>
    </slice>
    <from sec="1072933268" usec="0"/>
    <to sec="1072933994" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889486,2.05965,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_419{
style=filled;
color=gray75;
543[label="196.135.93.232;s;1pkt 1fpkt", shape=diamond, color=yellow];
2389[label="196.135.93.232;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3337[label="196.135.93.232;1pkt 1fpkt", shape=invtriangle, color=brown];
4014[label="196.135.93.232;1pkt 1fpkt", shape=invhouse, color=bisque];
stat419[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.135.93.232:4662, 152.6.39.203:1560}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 1560: (50%)&gt;];
}
543--2389[label="1;1pkt 1fpkt"];
543--3337[label="1;1pkt 1fpkt"];
543--4014[label="1;1pkt 1fpkt"];
2389--3337[label="1;1pkt 1fpkt"];
2389--4014[label="1;1pkt 1fpkt"];
3337--4014[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="152.6.39.203" dst_port="1560" src_ip="196.135.93.232" src_port="4662"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.72.102.233"/>
    </slice>
    <from sec="1072934005" usec="0"/>
    <to sec="1072934043" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_421{
style=filled;
color=gray75;
2391[label="6.217.140.233;110pkt 110fpkt", shape=pentagon, color=darkviolet];
stat421[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.217.140.233:0, *:0}[91.8182%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (91.8182%)&lt;BR/&gt; 80: (4.09091%)&lt;BR/&gt; 62093: (0.454545%)&lt;BR/&gt; 60189: (0.454545%)&lt;BR/&gt; 59062: (0.454545%)&gt;];
}
</description>
    <slice>
      <filter src_ip="6.217.140.233"/>
    </slice>
    <from sec="1072933209" usec="0"/>
    <to sec="1072934064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.230.20.234"/>
    </slice>
    <from sec="1072933306" usec="0"/>
    <to sec="1072934071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.112.79.235"/>
    </slice>
    <from sec="1072933229" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.110.208.239"/>
    </slice>
    <from sec="1072933280" usec="0"/>
    <to sec="1072933836" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.39.8.240"/>
    </slice>
    <from sec="1072933387" usec="0"/>
    <to sec="1072934009" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828525,2.06109,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_426{
style=filled;
color=gray75;
919[label="212.220.157.241;s;522pkt 522fpkt", shape=diamond, color=yellow];
2411[label="212.220.157.241;569pkt 569fpkt", shape=pentagon, color=darkviolet];
3351[label="212.220.157.241;569pkt 569fpkt", shape=invtriangle, color=brown];
stat426[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.220.157.241:1142, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1142: (50%)&gt;];
}
919--2411[label="0.998084;521pkt 521fpkt"];
919--3351[label="0.998084;521pkt 521fpkt"];
2411--3351[label="1;569pkt 569fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="212.220.157.241" src_port="1142"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3296,2.10519,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_427{
style=filled;
color=gray75;
734[label="0.29.222.242;s;220pkt 220fpkt", shape=diamond, color=yellow];
774[label="152.6.240.147;d;207pkt 207fpkt", shape=diamond, color=yellow];
1058[label="0.29.222.242;s;220pkt 220fpkt", shape=hexagon, color=black];
2419[label="0.29.222.242;234pkt 234fpkt", shape=pentagon, color=darkviolet];
3359[label="0.29.222.242;234pkt 234fpkt", shape=invtriangle, color=brown];
4029[label="0.29.222.242;234pkt 234fpkt", shape=invhouse, color=bisque];
stat427[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.29.222.242:80, 152.6.240.147:*}[94.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49884: (0.222387%)&lt;BR/&gt; 49883: (0.222387%)&lt;BR/&gt; 49882: (0.222387%)&lt;BR/&gt; 49881: (0.222387%)&gt;];
}
734--774[label="1;207pkt 207fpkt"];
734--966[label="0.0227273;5pkt 5fpkt"];
734--1058[label="1;220pkt 220fpkt"];
734--1186[label="0.0227273;5pkt 5fpkt"];
734--2419[label="1;220pkt 220fpkt"];
734--3359[label="1;220pkt 220fpkt"];
734--4029[label="1;220pkt 220fpkt"];
774--1058[label="1;207pkt 207fpkt"];
774--2419[label="1;207pkt 207fpkt"];
774--3359[label="1;207pkt 207fpkt"];
774--4029[label="1;207pkt 207fpkt"];
1058--1186[label="0.0227273;5pkt 5fpkt"];
1058--2419[label="1;220pkt 220fpkt"];
1058--3359[label="1;220pkt 220fpkt"];
1058--4029[label="1;220pkt 220fpkt"];
2419--3359[label="1;234pkt 234fpkt"];
2419--4029[label="1;234pkt 234fpkt"];
3359--4029[label="1;234pkt 234fpkt"];
</description>
    <slice>
      <filter dst_ip="152.6.240.147" src_ip="0.29.222.242" src_port="80"/>
    </slice>
    <from sec="1072933207" usec="0"/>
    <to sec="1072934074" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828525,2.06109,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_428{
style=filled;
color=gray75;
544[label="22.88.110.243;s;1296pkt 1296fpkt", shape=diamond, color=yellow];
2421[label="22.88.110.243;1405pkt 1405fpkt", shape=pentagon, color=darkviolet];
3361[label="22.88.110.243;1405pkt 1405fpkt", shape=invtriangle, color=brown];
stat428[shape=component, label=&lt;Rules:&lt;BR/&gt;{22.88.110.243:0, *:0}[85.9886%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (86.2884%)&lt;BR/&gt; 80: (3.53142%)&lt;BR/&gt; 57: (3.3244%)&lt;BR/&gt; 1920: (0.0608865%)&lt;BR/&gt; 4855: (0.0365319%)&gt;];
}
544--1222[label="0.00385802;5pkt 5fpkt"];
544--2421[label="0.999228;1295pkt 1295fpkt"];
544--3361[label="0.999228;1295pkt 1295fpkt"];
2421--3361[label="1;1405pkt 1405fpkt"];
</description>
    <slice>
      <filter src_ip="22.88.110.243"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889486,2.05965,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_429{
style=filled;
color=gray75;
420[label="197.156.177.244;s;4887pkt 4887fpkt", shape=diamond, color=yellow];
2424[label="197.156.177.244;5309pkt 5309fpkt", shape=pentagon, color=darkviolet];
3364[label="197.156.177.244;5309pkt 5309fpkt", shape=invtriangle, color=brown];
4033[label="197.156.177.244;5309pkt 5309fpkt", shape=invhouse, color=bisque];
stat429[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.156.177.244:1099, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1099: (50%)&gt;];
}
420--2424[label="1;4887pkt 4887fpkt"];
420--3364[label="1;4887pkt 4887fpkt"];
420--4033[label="1;4887pkt 4887fpkt"];
2424--3364[label="1;5309pkt 5309fpkt"];
2424--4033[label="1;5309pkt 5309fpkt"];
3364--4033[label="1;5309pkt 5309fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="197.156.177.244" src_port="1099"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.982506,2.05031,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_430{
style=filled;
color=gray75;
140[label="214.3.41.245s;243pkt 243fpkt", shape=rectangle, color=red];
2426[label="214.3.41.245;256pkt 256fpkt", shape=pentagon, color=darkviolet];
3366[label="214.3.41.245;256pkt 256fpkt", shape=invtriangle, color=brown];
stat430[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.3.41.245:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
140--2426[label="1;243pkt 243fpkt"];
140--3366[label="1;243pkt 243fpkt"];
2426--3366[label="1;256pkt 256fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.3.41.245" src_port="1025"/>
    </slice>
    <from sec="1072933828" usec="0"/>
    <to sec="1072933843" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.974271,2.08661,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_431{
style=filled;
color=gray75;
142[label="23.202.90.246s;245pkt 245fpkt", shape=rectangle, color=red];
2431[label="23.202.90.246;256pkt 256fpkt", shape=pentagon, color=darkviolet];
stat431[shape=component, label=&lt;Rules:&lt;BR/&gt;{23.202.90.246:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
142--2431[label="1;245pkt 245fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="23.202.90.246" src_port="1029"/>
    </slice>
    <from sec="1072933853" usec="0"/>
    <to sec="1072933871" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.67.117.247"/>
    </slice>
    <from sec="1072933201" usec="0"/>
    <to sec="1072934069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03443,2.04887,010,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_433{
style=filled;
color=gray75;
166[label="22.91.16.255s;39pkt 39fpkt", shape=rectangle, color=red];
2452[label="22.91.16.255;252pkt 252fpkt", shape=pentagon, color=darkviolet];
3388[label="22.91.16.255;252pkt 252fpkt", shape=invtriangle, color=brown];
4048[label="22.91.16.255;251pkt 251fpkt", shape=invhouse, color=bisque];
stat433[shape=component, label=&lt;Rules:&lt;BR/&gt;{22.91.16.255:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 3467: (0.251889%)&lt;BR/&gt; 3466: (0.251889%)&lt;BR/&gt; 3465: (0.251889%)&lt;BR/&gt; 3464: (0.251889%)&gt;];
}
166--2452[label="1;39pkt 39fpkt"];
166--3388[label="1;39pkt 39fpkt"];
166--4048[label="1;39pkt 39fpkt"];
2452--3388[label="1;252pkt 252fpkt"];
2452--4048[label="1;251pkt 251fpkt"];
3388--4048[label="1;251pkt 251fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="22.91.16.255"/>
    </slice>
    <from sec="1072933789" usec="0"/>
    <to sec="1072933814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.446614,2.12643,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.210.56.255"/>
    </slice>
    <from sec="1072933203" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.0"/>
    </slice>
    <from sec="1072933208" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_436{
style=filled;
color=gray75;
1236[label="213.57.87.0;19pkt 19fpkt", shape=pentagon, color=darkviolet];
2457[label="213.57.87.0;20pkt 20fpkt", shape=invtriangle, color=brown];
3393[label="213.57.87.0;19pkt 19fpkt", shape=invhouse, color=bisque];
stat436[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.57.87.0:80, 130.195.107.238:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1077: (2.58621%)&lt;BR/&gt; 1076: (2.58621%)&lt;BR/&gt; 1075: (2.58621%)&lt;BR/&gt; 1071: (2.58621%)&gt;];
}
1236--2457[label="1;19pkt 19fpkt"];
1236--3393[label="1;19pkt 19fpkt"];
2457--3393[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="130.195.107.238" src_ip="213.57.87.0" src_port="80"/>
    </slice>
    <from sec="1072933931" usec="0"/>
    <to sec="1072934050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.85.154.0"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_438{
style=filled;
color=gray75;
1239[label="4.62.164.0;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2460[label="4.62.164.0;10pkt 10fpkt", shape=invtriangle, color=brown];
3395[label="4.62.164.0;10pkt 10fpkt", shape=invhouse, color=bisque];
stat438[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.62.164.0:443, *:*}[40%]&lt;BR/&gt;{4.62.164.0:80, 130.195.164.220:*}[20%]&lt;BR/&gt;{4.62.164.0:80, 173.165.182.237:*}[20%]&lt;BR/&gt;{4.62.164.0:*, 152.6.250.65:*}[20%]&lt;BR/&gt;{4.62.164.0:*, 156.143.188.117:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30%)&lt;BR/&gt; 443: (20%)&lt;BR/&gt; 4086: (5%)&lt;BR/&gt; 4084: (5%)&lt;BR/&gt; 3511: (5%)&gt;];
}
1239--2460[label="1;10pkt 10fpkt"];
1239--3395[label="1;10pkt 10fpkt"];
2460--3395[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="156.143.188.117" src_ip="4.62.164.0"/>
      <filter dst_ip="152.6.250.65" src_ip="4.62.164.0"/>
      <filter src_ip="4.62.164.0" src_port="443"/>
      <filter dst_ip="173.165.182.237" src_ip="4.62.164.0" src_port="80"/>
      <filter dst_ip="130.195.164.220" src_ip="4.62.164.0" src_port="80"/>
    </slice>
    <from sec="1072933721" usec="0"/>
    <to sec="1072934054" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.215.23.1"/>
    </slice>
    <from sec="1072933217" usec="0"/>
    <to sec="1072934035" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_440{
style=filled;
color=gray75;
1245[label="194.143.35.1;200pkt 200fpkt", shape=pentagon, color=darkviolet];
2466[label="194.143.35.1;200pkt 200fpkt", shape=invtriangle, color=brown];
stat440[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.143.35.1:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 37751: (0.25%)&lt;BR/&gt; 37748: (0.25%)&lt;BR/&gt; 37730: (0.25%)&lt;BR/&gt; 37722: (0.25%)&gt;];
}
1245--2466[label="1;200pkt 200fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.143.35.1"/>
    </slice>
    <from sec="1072933972" usec="0"/>
    <to sec="1072934007" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_441{
style=filled;
color=gray75;
1247[label="217.96.99.1;29pkt 29fpkt", shape=pentagon, color=darkviolet];
2468[label="217.96.99.1;29pkt 29fpkt", shape=invtriangle, color=brown];
3399[label="217.96.99.1;29pkt 29fpkt", shape=invhouse, color=bisque];
stat441[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.96.99.1:*, 156.142.89.194:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3489: (1.72414%)&lt;BR/&gt; 3487: (1.72414%)&lt;BR/&gt; 3486: (1.72414%)&lt;BR/&gt; 3485: (1.72414%)&gt;];
}
1247--2468[label="1;29pkt 29fpkt"];
1247--3399[label="1;29pkt 29fpkt"];
2468--3399[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="156.142.89.194" dst_port="80" src_ip="217.96.99.1"/>
    </slice>
    <from sec="1072933675" usec="0"/>
    <to sec="1072934067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_442{
style=filled;
color=gray75;
1250[label="5.97.11.2;38pkt 38fpkt", shape=pentagon, color=darkviolet];
2471[label="5.97.11.2;37pkt 37fpkt", shape=invtriangle, color=brown];
3401[label="5.97.11.2;38pkt 38fpkt", shape=invhouse, color=bisque];
stat442[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.97.11.2:*, *:135}[50%]&lt;BR/&gt;{5.97.11.2:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.2212%)&lt;BR/&gt; 135: (24.7788%)&lt;BR/&gt; 4140: (2.65487%)&lt;BR/&gt; 1939: (2.65487%)&lt;BR/&gt; 4898: (1.32743%)&gt;];
}
1250--2471[label="1;37pkt 37fpkt"];
1250--3401[label="1;38pkt 38fpkt"];
2471--3401[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="5.97.11.2"/>
      <filter dst_port="135" src_ip="5.97.11.2"/>
    </slice>
    <from sec="1072933214" usec="0"/>
    <to sec="1072934083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_443{
style=filled;
color=gray75;
1252[label="212.84.49.2;123pkt 123fpkt", shape=pentagon, color=darkviolet];
2472[label="212.84.49.2;123pkt 123fpkt", shape=invtriangle, color=brown];
stat443[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.84.49.2:0, *:0}[99.187%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.187%)&lt;BR/&gt; 1827: (0.406504%)&lt;BR/&gt; 80: (0.406504%)&gt;];
}
1252--2472[label="1;123pkt 123fpkt"];
</description>
    <slice>
      <filter src_ip="212.84.49.2"/>
    </slice>
    <from sec="1072933203" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.2"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_445{
style=filled;
color=gray75;
1257[label="193.197.108.2;60pkt 60fpkt", shape=pentagon, color=darkviolet];
2477[label="193.197.108.2;60pkt 60fpkt", shape=invtriangle, color=brown];
stat445[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.197.108.2:*, *:135}[50%]&lt;BR/&gt;{193.197.108.2:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25%)&lt;BR/&gt; 135: (25%)&lt;BR/&gt; 4929: (0.833333%)&lt;BR/&gt; 4907: (0.833333%)&lt;BR/&gt; 4876: (0.833333%)&gt;];
}
1257--2477[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="193.197.108.2"/>
      <filter dst_port="135" src_ip="193.197.108.2"/>
    </slice>
    <from sec="1072933239" usec="0"/>
    <to sec="1072933999" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_446{
style=filled;
color=gray75;
1258[label="1.16.179.2;82pkt 82fpkt", shape=pentagon, color=darkviolet];
2478[label="1.16.179.2;82pkt 82fpkt", shape=invtriangle, color=brown];
3406[label="1.16.179.2;82pkt 82fpkt", shape=invhouse, color=bisque];
stat446[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.16.179.2:*, *:445}[51.2195%]&lt;BR/&gt;{1.16.179.2:*, *:135}[48.7805%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.6098%)&lt;BR/&gt; 135: (24.3902%)&lt;BR/&gt; 4655: (1.21951%)&lt;BR/&gt; 2573: (1.21951%)&lt;BR/&gt; 2141: (1.21951%)&gt;];
}
1258--2478[label="1;82pkt 82fpkt"];
1258--3406[label="1;82pkt 82fpkt"];
2478--3406[label="1;82pkt 82fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="1.16.179.2"/>
      <filter dst_port="135" src_ip="1.16.179.2"/>
    </slice>
    <from sec="1072933208" usec="0"/>
    <to sec="1072934064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_447{
style=filled;
color=gray75;
1267[label="90.121.22.4;34pkt 34fpkt", shape=pentagon, color=darkviolet];
2487[label="90.121.22.4;34pkt 34fpkt", shape=invtriangle, color=brown];
3410[label="90.121.22.4;34pkt 34fpkt", shape=invhouse, color=bisque];
stat447[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.121.22.4:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4620: (1.47059%)&lt;BR/&gt; 4437: (1.47059%)&lt;BR/&gt; 4161: (1.47059%)&lt;BR/&gt; 3926: (1.47059%)&gt;];
}
1267--2487[label="1;34pkt 34fpkt"];
1267--3410[label="1;34pkt 34fpkt"];
2487--3410[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="90.121.22.4"/>
    </slice>
    <from sec="1072933221" usec="0"/>
    <to sec="1072933942" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_448{
style=filled;
color=gray75;
1270[label="209.85.152.4;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2490[label="209.85.152.4;1pkt 1fpkt", shape=invtriangle, color=brown];
3413[label="209.85.152.4;1pkt 1fpkt", shape=invhouse, color=bisque];
stat448[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.85.152.4:1863, 130.195.105.180:1432}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1432: (50%)&gt;];
}
1270--2490[label="1;1pkt 1fpkt"];
1270--3413[label="1;1pkt 1fpkt"];
2490--3413[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.195.105.180" dst_port="1432" src_ip="209.85.152.4" src_port="1863"/>
    </slice>
    <from sec="1072933474" usec="0"/>
    <to sec="1072933992" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_449{
style=filled;
color=gray75;
1271[label="200.86.193.4;55pkt 55fpkt", shape=pentagon, color=darkviolet];
2491[label="200.86.193.4;54pkt 54fpkt", shape=invtriangle, color=brown];
stat449[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.86.193.4:*, *:445}[50.9091%]&lt;BR/&gt;{200.86.193.4:*, *:135}[49.0909%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.6881%)&lt;BR/&gt; 135: (24.3119%)&lt;BR/&gt; 2093: (1.83486%)&lt;BR/&gt; 4888: (0.917431%)&lt;BR/&gt; 4830: (0.917431%)&gt;];
}
1271--2491[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="200.86.193.4"/>
      <filter dst_port="135" src_ip="200.86.193.4"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.148.242.4"/>
    </slice>
    <from sec="1072933388" usec="0"/>
    <to sec="1072933944" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="23.182.205.5"/>
    </slice>
    <from sec="1072933218" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828525,2.06109,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_452{
style=filled;
color=gray75;
598[label="173.165.221.168;d;68pkt 68fpkt", shape=diamond, color=yellow];
1242[label="194.10.184.0;5pkt 5fpkt", shape=pentagon, color=darkviolet];
1284[label="196.102.54.6;18pkt 18fpkt", shape=pentagon, color=darkviolet];
2071[label="194.10.184.153;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2463[label="194.10.184.0;6pkt 6fpkt", shape=invtriangle, color=brown];
2501[label="196.102.54.6;17pkt 17fpkt", shape=invtriangle, color=brown];
3109[label="194.10.184.153;2pkt 2fpkt", shape=invtriangle, color=brown];
stat452[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.102.54.6:80, 173.165.221.168:*}[26.4706%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.7395%)&lt;BR/&gt; 4646: (1.2605%)&lt;BR/&gt; 4607: (1.2605%)&lt;BR/&gt; 4561: (1.2605%)&lt;BR/&gt; 4552: (1.2605%)&gt;];
}
598--1242[label="1;5pkt 5fpkt"];
598--1284[label="1;18pkt 18fpkt"];
598--1704[label="0.0243902;1pkt 1fpkt"];
598--2071[label="1;3pkt 3fpkt"];
598--2463[label="1;6pkt 6fpkt"];
598--2501[label="1;17pkt 17fpkt"];
598--2831[label="0.025;1pkt 1fpkt"];
598--3109[label="1;2pkt 2fpkt"];
598--3663[label="0.0243902;1pkt 1fpkt"];
1242--2463[label="1;5pkt 5fpkt"];
1284--2501[label="1;17pkt 17fpkt"];
2071--3109[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="173.165.221.168" src_ip="196.102.54.6" src_port="80"/>
    </slice>
    <from sec="1072933214" usec="0"/>
    <to sec="1072934000" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.6"/>
    </slice>
    <from sec="1072933207" usec="0"/>
    <to sec="1072934096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_454{
style=filled;
color=gray75;
1287[label="6.179.85.6;40pkt 40fpkt", shape=pentagon, color=darkviolet];
2504[label="6.179.85.6;40pkt 40fpkt", shape=invtriangle, color=brown];
3422[label="6.179.85.6;40pkt 40fpkt", shape=invhouse, color=bisque];
stat454[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.179.85.6:*, *:135}[50%]&lt;BR/&gt;{6.179.85.6:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25%)&lt;BR/&gt; 135: (25%)&lt;BR/&gt; 4579: (2.5%)&lt;BR/&gt; 4978: (1.25%)&lt;BR/&gt; 4950: (1.25%)&gt;];
}
1287--2504[label="1;40pkt 40fpkt"];
1287--3422[label="1;40pkt 40fpkt"];
2504--3422[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="6.179.85.6"/>
      <filter dst_port="135" src_ip="6.179.85.6"/>
    </slice>
    <from sec="1072933207" usec="0"/>
    <to sec="1072933994" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.7"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.110.134.7"/>
    </slice>
    <from sec="1072933214" usec="0"/>
    <to sec="1072934084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_457{
style=filled;
color=gray75;
1293[label="111.64.155.7;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2509[label="111.64.155.7;7pkt 7fpkt", shape=invtriangle, color=brown];
3427[label="111.64.155.7;6pkt 6fpkt", shape=invhouse, color=bisque];
stat457[shape=component, label=&lt;Rules:&lt;BR/&gt;{111.64.155.7:80, 156.143.238.235:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1983: (7.5%)&lt;BR/&gt; 1973: (7.5%)&lt;BR/&gt; 1970: (7.5%)&lt;BR/&gt; 1969: (7.5%)&gt;];
}
1293--2509[label="1;7pkt 7fpkt"];
1293--3427[label="1;6pkt 6fpkt"];
2509--3427[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="156.143.238.235" src_ip="111.64.155.7" src_port="80"/>
    </slice>
    <from sec="1072933856" usec="0"/>
    <to sec="1072933970" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_458{
style=filled;
color=gray75;
1295[label="90.119.224.7;34pkt 34fpkt", shape=pentagon, color=darkviolet];
2510[label="90.119.224.7;34pkt 34fpkt", shape=invtriangle, color=brown];
stat458[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.119.224.7:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4869: (1.47059%)&lt;BR/&gt; 4661: (1.47059%)&lt;BR/&gt; 4601: (1.47059%)&lt;BR/&gt; 4591: (1.47059%)&gt;];
}
1295--2510[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="90.119.224.7"/>
    </slice>
    <from sec="1072933217" usec="0"/>
    <to sec="1072934019" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03443,2.04887,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_459{
style=filled;
color=gray75;
75[label="7.108.40.8s;214pkt 214fpkt", shape=rectangle, color=red];
1297[label="7.108.40.8;253pkt 253fpkt", shape=pentagon, color=darkviolet];
2512[label="7.108.40.8;253pkt 253fpkt", shape=invtriangle, color=brown];
3429[label="7.108.40.8;252pkt 252fpkt", shape=invhouse, color=bisque];
stat459[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.108.40.8:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
75--1297[label="0.995327;213pkt 213fpkt"];
75--2512[label="0.995327;213pkt 213fpkt"];
75--3429[label="0.990654;212pkt 212fpkt"];
1297--2512[label="1;253pkt 253fpkt"];
1297--3429[label="1;252pkt 252fpkt"];
2512--3429[label="1;252pkt 252fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="7.108.40.8" src_port="1025"/>
    </slice>
    <from sec="1072933599" usec="0"/>
    <to sec="1072933615" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.8"/>
    </slice>
    <from sec="1072933203" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_461{
style=filled;
color=gray75;
1301[label="6.182.131.8;64pkt 64fpkt", shape=pentagon, color=darkviolet];
2515[label="6.182.131.8;64pkt 64fpkt", shape=invtriangle, color=brown];
3432[label="6.182.131.8;63pkt 63fpkt", shape=invhouse, color=bisque];
stat461[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.182.131.8:*, *:135}[51.5625%]&lt;BR/&gt;{6.182.131.8:*, *:445}[48.4375%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (25.6545%)&lt;BR/&gt; 445: (24.3455%)&lt;BR/&gt; 4448: (1.57068%)&lt;BR/&gt; 2821: (1.57068%)&lt;BR/&gt; 4844: (0.78534%)&gt;];
}
1301--2515[label="1;64pkt 64fpkt"];
1301--3432[label="1;63pkt 63fpkt"];
2515--3432[label="1;63pkt 63fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="6.182.131.8"/>
      <filter dst_port="445" src_ip="6.182.131.8"/>
    </slice>
    <from sec="1072933205" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.101.1.9"/>
    </slice>
    <from sec="1072933868" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_463{
style=filled;
color=gray75;
1307[label="5.213.50.9;109pkt 109fpkt", shape=pentagon, color=darkviolet];
2521[label="5.213.50.9;109pkt 109fpkt", shape=invtriangle, color=brown];
stat463[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.213.50.9:0, *:0}[97.2477%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.2477%)&lt;BR/&gt; 80: (1.37615%)&lt;BR/&gt; 28659: (0.458716%)&lt;BR/&gt; 24924: (0.458716%)&lt;BR/&gt; 24005: (0.458716%)&gt;];
}
1307--2521[label="1;109pkt 109fpkt"];
</description>
    <slice>
      <filter src_ip="5.213.50.9"/>
    </slice>
    <from sec="1072933216" usec="0"/>
    <to sec="1072934094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_464{
style=filled;
color=gray75;
1312[label="156.143.192.10;16pkt 16fpkt", shape=pentagon, color=darkviolet];
2524[label="156.143.192.10;15pkt 15fpkt", shape=invtriangle, color=brown];
3436[label="156.143.192.10;15pkt 15fpkt", shape=invhouse, color=bisque];
stat464[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.143.192.10:*, 5.224.66.36:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.7391%)&lt;BR/&gt; 2578: (3.26087%)&lt;BR/&gt; 2576: (3.26087%)&lt;BR/&gt; 2575: (3.26087%)&lt;BR/&gt; 2574: (3.26087%)&gt;];
}
1312--2524[label="1;15pkt 15fpkt"];
1312--3436[label="1;15pkt 15fpkt"];
2524--3436[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="5.224.66.36" dst_port="80" src_ip="156.143.192.10"/>
    </slice>
    <from sec="1072933241" usec="0"/>
    <to sec="1072934086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.74.239.10"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.201.2.12"/>
    </slice>
    <from sec="1072933202" usec="0"/>
    <to sec="1072934080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.6.28.12"/>
    </slice>
    <from sec="1072933202" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_468{
style=filled;
color=gray75;
1322[label="200.6.50.12;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2533[label="200.6.50.12;4pkt 4fpkt", shape=invtriangle, color=brown];
3444[label="200.6.50.12;4pkt 4fpkt", shape=invhouse, color=bisque];
stat468[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.6.50.12:4662, 152.6.39.203:1452}[25%]&lt;BR/&gt;{200.6.50.12:4662, 152.6.39.203:1542}[25%]&lt;BR/&gt;{200.6.50.12:4662, 152.6.39.203:1669}[25%]&lt;BR/&gt;{200.6.50.12:4662, 152.6.39.203:4599}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 1669: (13.6364%)&lt;BR/&gt; 1542: (13.6364%)&lt;BR/&gt; 1452: (13.6364%)&lt;BR/&gt; 4599: (9.09091%)&gt;];
}
1322--2533[label="1;3pkt 3fpkt"];
1322--3444[label="1;3pkt 3fpkt"];
2533--3444[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="152.6.39.203" dst_port="4599" src_ip="200.6.50.12" src_port="4662"/>
      <filter dst_ip="152.6.39.203" dst_port="1669" src_ip="200.6.50.12" src_port="4662"/>
      <filter dst_ip="152.6.39.203" dst_port="1542" src_ip="200.6.50.12" src_port="4662"/>
      <filter dst_ip="152.6.39.203" dst_port="1452" src_ip="200.6.50.12" src_port="4662"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072933815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_469{
style=filled;
color=gray75;
1329[label="1.167.2.13;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2536[label="1.167.2.13;1pkt 1fpkt", shape=invtriangle, color=brown];
3447[label="1.167.2.13;2pkt 2fpkt", shape=invhouse, color=bisque];
stat469[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.167.2.13:1090, 152.6.39.203:4662}[50%]&lt;BR/&gt;{1.167.2.13:4948, 152.6.39.203:4662}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 1090: (37.5%)&lt;BR/&gt; 4948: (12.5%)&gt;];
}
1329--2536[label="1;1pkt 1fpkt"];
1329--3447[label="1;1pkt 1fpkt"];
2536--3447[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="152.6.39.203" dst_port="4662" src_ip="1.167.2.13" src_port="4948"/>
      <filter dst_ip="152.6.39.203" dst_port="4662" src_ip="1.167.2.13" src_port="1090"/>
    </slice>
    <from sec="1072933218" usec="0"/>
    <to sec="1072933883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.13"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_471{
style=filled;
color=gray75;
1333[label="200.14.95.13;17pkt 17fpkt", shape=pentagon, color=darkviolet];
2538[label="200.14.95.13;17pkt 17fpkt", shape=invtriangle, color=brown];
3449[label="200.14.95.13;18pkt 18fpkt", shape=invhouse, color=bisque];
stat471[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.14.95.13:80, 130.195.106.15:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2837: (2.88462%)&lt;BR/&gt; 2836: (2.88462%)&lt;BR/&gt; 2831: (2.88462%)&lt;BR/&gt; 2830: (2.88462%)&gt;];
}
1333--2538[label="1;17pkt 17fpkt"];
1333--3449[label="1;17pkt 17fpkt"];
2538--3449[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="130.195.106.15" src_ip="200.14.95.13" src_port="80"/>
    </slice>
    <from sec="1072933296" usec="0"/>
    <to sec="1072934067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.249.96.13"/>
    </slice>
    <from sec="1072933204" usec="0"/>
    <to sec="1072934093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_473{
style=filled;
color=gray75;
1344[label="202.192.169.15;75pkt 75fpkt", shape=pentagon, color=darkviolet];
2545[label="202.192.169.15;75pkt 75fpkt", shape=invtriangle, color=brown];
3455[label="202.192.169.15;75pkt 75fpkt", shape=invhouse, color=bisque];
stat473[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.192.169.15:41452, 156.143.232.76:*}[84%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41452: (42%)&lt;BR/&gt; 80: (8%)&lt;BR/&gt; 33524: (0.666667%)&lt;BR/&gt; 33523: (0.666667%)&lt;BR/&gt; 33522: (0.666667%)&gt;];
}
1344--2545[label="1;75pkt 75fpkt"];
1344--3455[label="1;75pkt 75fpkt"];
2545--3455[label="1;75pkt 75fpkt"];
</description>
    <slice>
      <filter dst_ip="156.143.232.76" src_ip="202.192.169.15" src_port="41452"/>
    </slice>
    <from sec="1072933588" usec="0"/>
    <to sec="1072933594" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_474{
style=filled;
color=gray75;
1347[label="90.65.68.16;37pkt 37fpkt", shape=pentagon, color=darkviolet];
2548[label="90.65.68.16;38pkt 38fpkt", shape=invtriangle, color=brown];
3458[label="90.65.68.16;38pkt 38fpkt", shape=invhouse, color=bisque];
stat474[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.65.68.16:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 1143: (2.65487%)&lt;BR/&gt; 4855: (1.32743%)&lt;BR/&gt; 4710: (1.32743%)&lt;BR/&gt; 4647: (1.32743%)&gt;];
}
1347--2548[label="1;37pkt 37fpkt"];
1347--3458[label="1;37pkt 37fpkt"];
2548--3458[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="90.65.68.16"/>
    </slice>
    <from sec="1072933345" usec="0"/>
    <to sec="1072934030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.16"/>
    </slice>
    <from sec="1072933209" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_476{
style=filled;
color=gray75;
1349[label="193.73.152.16;162pkt 162fpkt", shape=pentagon, color=darkviolet];
2550[label="193.73.152.16;163pkt 163fpkt", shape=invtriangle, color=brown];
3460[label="193.73.152.16;163pkt 163fpkt", shape=invhouse, color=bisque];
stat476[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.73.152.16:0, *:0}[96.9325%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.9262%)&lt;BR/&gt; 135: (0.922131%)&lt;BR/&gt; 80: (0.614754%)&lt;BR/&gt; 13215: (0.307377%)&lt;BR/&gt; 12922: (0.307377%)&gt;];
}
1349--2550[label="1;162pkt 162fpkt"];
1349--3460[label="1;162pkt 162fpkt"];
2550--3460[label="1;163pkt 163fpkt"];
</description>
    <slice>
      <filter src_ip="193.73.152.16"/>
    </slice>
    <from sec="1072933217" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_477{
style=filled;
color=gray75;
1350[label="192.23.157.16;109pkt 109fpkt", shape=pentagon, color=darkviolet];
2551[label="192.23.157.16;110pkt 110fpkt", shape=invtriangle, color=brown];
stat477[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.23.157.16:12260, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12260: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
1350--2551[label="1;109pkt 109fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="192.23.157.16" src_port="12260"/>
    </slice>
    <from sec="1072933512" usec="0"/>
    <to sec="1072933559" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_479{
style=filled;
color=gray75;
1354[label="20.3.151.17;188pkt 188fpkt", shape=pentagon, color=darkviolet];
2555[label="20.3.151.17;189pkt 189fpkt", shape=invtriangle, color=brown];
3463[label="20.3.151.17;188pkt 188fpkt", shape=invhouse, color=bisque];
stat479[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.3.151.17:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
1354--2555[label="1;188pkt 188fpkt"];
1354--3463[label="1;188pkt 188fpkt"];
2555--3463[label="1;188pkt 188fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="20.3.151.17" src_port="1025"/>
    </slice>
    <from sec="1072933422" usec="0"/>
    <to sec="1072933454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.18"/>
    </slice>
    <from sec="1072933210" usec="0"/>
    <to sec="1072934093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_482{
style=filled;
color=gray75;
1360[label="90.110.148.18;41pkt 41fpkt", shape=pentagon, color=darkviolet];
2559[label="90.110.148.18;42pkt 42fpkt", shape=invtriangle, color=brown];
stat482[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.110.148.18:*, *:135}[50%]&lt;BR/&gt;{90.110.148.18:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.3012%)&lt;BR/&gt; 135: (24.6988%)&lt;BR/&gt; 4923: (1.20482%)&lt;BR/&gt; 4746: (1.20482%)&lt;BR/&gt; 4719: (1.20482%)&gt;];
}
1360--2559[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="90.110.148.18"/>
      <filter dst_port="135" src_ip="90.110.148.18"/>
    </slice>
    <from sec="1072933224" usec="0"/>
    <to sec="1072934079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.227.192.18"/>
    </slice>
    <from sec="1072933554" usec="0"/>
    <to sec="1072933703" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_484{
style=filled;
color=gray75;
1365[label="156.143.199.19;77pkt 77fpkt", shape=pentagon, color=darkviolet];
2564[label="156.143.199.19;77pkt 77fpkt", shape=invtriangle, color=brown];
stat484[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.143.199.19:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (55.1948%)&lt;BR/&gt; 32769: (2.5974%)&lt;BR/&gt; 1024: (1.94805%)&lt;BR/&gt; 33701: (1.2987%)&lt;BR/&gt; 32772: (1.2987%)&gt;];
}
1365--2564[label="1;77pkt 77fpkt"];
</description>
    <slice>
      <filter src_ip="156.143.199.19" src_port="53"/>
    </slice>
    <from sec="1072933223" usec="0"/>
    <to sec="1072934090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.13.212.19"/>
    </slice>
    <from sec="1072933253" usec="0"/>
    <to sec="1072934058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.84.164.20"/>
    </slice>
    <from sec="1072933258" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889486,2.05965,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_487{
style=filled;
color=gray75;
757[label="130.195.106.50;d;245pkt 245fpkt", shape=diamond, color=yellow];
758[label="6.99.209.10;s;130pkt 130fpkt", shape=diamond, color=yellow];
1313[label="6.99.209.10;130pkt 130fpkt", shape=pentagon, color=darkviolet];
1372[label="108.97.24.21;26pkt 26fpkt", shape=pentagon, color=darkviolet];
2194[label="5.180.129.183;51pkt 51fpkt", shape=pentagon, color=darkviolet];
2525[label="6.99.209.10;130pkt 130fpkt", shape=invtriangle, color=brown];
2568[label="108.97.24.21;26pkt 26fpkt", shape=invtriangle, color=brown];
3198[label="5.180.129.183;51pkt 51fpkt", shape=invtriangle, color=brown];
3437[label="6.99.209.10;129pkt 129fpkt", shape=invhouse, color=bisque];
3474[label="108.97.24.21;26pkt 26fpkt", shape=invhouse, color=bisque];
3919[label="5.180.129.183;51pkt 51fpkt", shape=invhouse, color=bisque];
stat487[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.99.209.10:80, 130.195.106.50:*}[53.0612%]&lt;BR/&gt;{5.180.129.183:80, 130.195.106.50:*}[21.2245%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3236: (0.251256%)&lt;BR/&gt; 3235: (0.251256%)&lt;BR/&gt; 3234: (0.251256%)&lt;BR/&gt; 3233: (0.251256%)&gt;];
}
757--758[label="1;130pkt 130fpkt"];
757--1313[label="1;130pkt 130fpkt"];
757--1372[label="1;26pkt 26fpkt"];
757--2194[label="1;51pkt 51fpkt"];
757--2525[label="1;130pkt 130fpkt"];
757--2568[label="1;26pkt 26fpkt"];
757--3198[label="1;51pkt 51fpkt"];
757--3437[label="1;129pkt 129fpkt"];
757--3474[label="1;26pkt 26fpkt"];
757--3919[label="1;51pkt 51fpkt"];
758--1313[label="1;130pkt 130fpkt"];
758--2525[label="1;130pkt 130fpkt"];
758--3437[label="1;129pkt 129fpkt"];
1313--2525[label="1;130pkt 130fpkt"];
1313--3437[label="1;129pkt 129fpkt"];
1372--2568[label="1;26pkt 26fpkt"];
1372--3474[label="1;26pkt 26fpkt"];
2194--3198[label="1;51pkt 51fpkt"];
2194--3919[label="1;51pkt 51fpkt"];
2525--3437[label="1;129pkt 129fpkt"];
2568--3474[label="1;26pkt 26fpkt"];
3198--3919[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter dst_ip="130.195.106.50" src_ip="6.99.209.10" src_port="80"/>
      <filter dst_ip="130.195.106.50" src_ip="5.180.129.183" src_port="80"/>
    </slice>
    <from sec="1072933550" usec="0"/>
    <to sec="1072933992" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.21"/>
    </slice>
    <from sec="1072933208" usec="0"/>
    <to sec="1072934094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_489{
style=filled;
color=gray75;
1378[label="196.133.14.22;118pkt 118fpkt", shape=pentagon, color=darkviolet];
2574[label="196.133.14.22;118pkt 118fpkt", shape=invtriangle, color=brown];
3478[label="196.133.14.22;119pkt 119fpkt", shape=invhouse, color=bisque];
stat489[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.133.14.22:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 65406: (0.422535%)&lt;BR/&gt; 64864: (0.422535%)&lt;BR/&gt; 64074: (0.422535%)&lt;BR/&gt; 64060: (0.422535%)&gt;];
}
1378--2574[label="1;118pkt 118fpkt"];
1378--3478[label="1;118pkt 118fpkt"];
2574--3478[label="1;118pkt 118fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.133.14.22"/>
    </slice>
    <from sec="1072934055" usec="0"/>
    <to sec="1072934078" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.22"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_491{
style=filled;
color=gray75;
1381[label="90.122.133.22;42pkt 42fpkt", shape=pentagon, color=darkviolet];
2577[label="90.122.133.22;43pkt 43fpkt", shape=invtriangle, color=brown];
3481[label="90.122.133.22;43pkt 43fpkt", shape=invhouse, color=bisque];
stat491[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.122.133.22:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4986: (1.17188%)&lt;BR/&gt; 4966: (1.17188%)&lt;BR/&gt; 4942: (1.17188%)&lt;BR/&gt; 4881: (1.17188%)&gt;];
}
1381--2577[label="1;42pkt 42fpkt"];
1381--3481[label="1;42pkt 42fpkt"];
2577--3481[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="90.122.133.22"/>
    </slice>
    <from sec="1072933267" usec="0"/>
    <to sec="1072933783" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.23"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.24"/>
    </slice>
    <from sec="1072933202" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_494{
style=filled;
color=gray75;
1394[label="1.233.219.25;71pkt 71fpkt", shape=pentagon, color=darkviolet];
2588[label="1.233.219.25;72pkt 72fpkt", shape=invtriangle, color=brown];
stat494[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.233.219.25:*, *:135}[50%]&lt;BR/&gt;{1.233.219.25:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.1748%)&lt;BR/&gt; 135: (24.8252%)&lt;BR/&gt; 4991: (0.699301%)&lt;BR/&gt; 4762: (0.699301%)&lt;BR/&gt; 4701: (0.699301%)&gt;];
}
1394--2588[label="1;71pkt 71fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="1.233.219.25"/>
      <filter dst_port="135" src_ip="1.233.219.25"/>
    </slice>
    <from sec="1072933276" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_495{
style=filled;
color=gray75;
1396[label="152.160.132.26;28pkt 28fpkt", shape=pentagon, color=darkviolet];
2589[label="152.160.132.26;29pkt 29fpkt", shape=invtriangle, color=brown];
3490[label="152.160.132.26;28pkt 28fpkt", shape=invhouse, color=bisque];
stat495[shape=component, label=&lt;Rules:&lt;BR/&gt;{152.160.132.26:1024, *:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1024: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
1396--2589[label="1;28pkt 28fpkt"];
1396--3490[label="1;28pkt 28fpkt"];
2589--3490[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="152.160.132.26" src_port="1024"/>
    </slice>
    <from sec="1072933455" usec="0"/>
    <to sec="1072933665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.37.22.27"/>
    </slice>
    <from sec="1072933212" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.128.67.27"/>
    </slice>
    <from sec="1072933251" usec="0"/>
    <to sec="1072934096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.27"/>
    </slice>
    <from sec="1072933208" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_499{
style=filled;
color=gray75;
1407[label="5.163.118.27;43pkt 43fpkt", shape=pentagon, color=darkviolet];
2599[label="5.163.118.27;43pkt 43fpkt", shape=invtriangle, color=brown];
stat499[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.163.118.27:*, *:135}[53.4884%]&lt;BR/&gt;{5.163.118.27:*, *:445}[46.5116%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (26.7442%)&lt;BR/&gt; 445: (23.2558%)&lt;BR/&gt; 4636: (1.16279%)&lt;BR/&gt; 4635: (1.16279%)&lt;BR/&gt; 4271: (1.16279%)&gt;];
}
1407--2599[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="5.163.118.27"/>
      <filter dst_port="445" src_ip="5.163.118.27"/>
    </slice>
    <from sec="1072933234" usec="0"/>
    <to sec="1072933990" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_500{
style=filled;
color=gray75;
1411[label="200.86.41.29;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2603[label="200.86.41.29;1pkt 1fpkt", shape=invtriangle, color=brown];
stat500[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.86.41.29:4662, 152.6.39.203:1659}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 1659: (50%)&gt;];
}
1411--2603[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="152.6.39.203" dst_port="1659" src_ip="200.86.41.29" src_port="4662"/>
    </slice>
    <from sec="1072933529" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_501{
style=filled;
color=gray75;
1412[label="212.84.42.29;82pkt 82fpkt", shape=pentagon, color=darkviolet];
2604[label="212.84.42.29;82pkt 82fpkt", shape=invtriangle, color=brown];
3501[label="212.84.42.29;82pkt 82fpkt", shape=invhouse, color=bisque];
stat501[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.84.42.29:*, *:25}[36.5854%]&lt;BR/&gt;{212.84.42.29:25, *:*}[26.8293%]&lt;BR/&gt;{212.84.42.29:*, *:113}[24.3902%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (31.7073%)&lt;BR/&gt; 113: (12.1951%)&lt;BR/&gt; 0: (6.09756%)&lt;BR/&gt; 80: (3.04878%)&lt;BR/&gt; 52892: (0.609756%)&gt;];
}
1412--2604[label="1;82pkt 82fpkt"];
1412--3501[label="1;82pkt 82fpkt"];
2604--3501[label="1;82pkt 82fpkt"];
</description>
    <slice>
      <filter src_ip="212.84.42.29" src_port="25"/>
      <filter dst_port="25" src_ip="212.84.42.29"/>
      <filter dst_port="113" src_ip="212.84.42.29"/>
    </slice>
    <from sec="1072933210" usec="0"/>
    <to sec="1072934084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.29"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,053,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_503{
style=filled;
color=gray75;
1418[label="156.143.199.29;38pkt 38fpkt", shape=pentagon, color=darkviolet];
2610[label="156.143.199.29;38pkt 38fpkt", shape=invtriangle, color=brown];
3506[label="156.143.199.29;38pkt 38fpkt", shape=invhouse, color=bisque];
stat503[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.143.199.29:80, 65.55.66.0:*}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58963: (1.31579%)&lt;BR/&gt; 56455: (1.31579%)&lt;BR/&gt; 53852: (1.31579%)&lt;BR/&gt; 52437: (1.31579%)&gt;];
}
1418--2610[label="1;38pkt 38fpkt"];
1418--3506[label="1;38pkt 38fpkt"];
2610--3506[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_ip="65.55.66.0" src_ip="156.143.199.29" src_port="80"/>
    </slice>
    <from sec="1072933248" usec="0"/>
    <to sec="1072934094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.30"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3296,2.10519,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_505{
style=filled;
color=gray75;
438[label="156.143.199.68;d;939pkt 939fpkt", shape=diamond, color=yellow];
530[label="156.143.199.71;d;674pkt 674fpkt", shape=diamond, color=yellow];
729[label="209.85.154.34;s;212pkt 212fpkt", shape=diamond, color=yellow];
772[label="209.85.154.17;s;159pkt 159fpkt", shape=diamond, color=yellow];
887[label="209.85.154.24;s;110pkt 110fpkt", shape=diamond, color=yellow];
888[label="173.165.220.47;d;5pkt 5fpkt", shape=diamond, color=yellow];
1057[label="209.85.154.34;s;189pkt 189fpkt", shape=hexagon, color=black];
1166[label="209.85.154.24;s;110pkt 110fpkt", shape=hexagon, color=black];
1263[label="209.85.154.3;38pkt 38fpkt", shape=pentagon, color=darkviolet];
1291[label="200.236.103.7;41pkt 41fpkt", shape=pentagon, color=darkviolet];
1302[label="209.85.154.8;54pkt 54fpkt", shape=pentagon, color=darkviolet];
1340[label="209.85.154.14;28pkt 28fpkt", shape=pentagon, color=darkviolet];
1361[label="209.85.154.18;44pkt 44fpkt", shape=pentagon, color=darkviolet];
1388[label="209.85.154.24;110pkt 110fpkt", shape=pentagon, color=darkviolet];
1421[label="209.85.154.30;46pkt 46fpkt", shape=pentagon, color=darkviolet];
1487[label="209.85.154.43;44pkt 44fpkt", shape=pentagon, color=darkviolet];
1500[label="209.85.154.45;28pkt 28fpkt", shape=pentagon, color=darkviolet];
1568[label="193.92.114.58;32pkt 32fpkt", shape=pentagon, color=darkviolet];
1778[label="196.102.122.93;66pkt 66fpkt", shape=pentagon, color=darkviolet];
1887[label="193.179.141.117;23pkt 23fpkt", shape=pentagon, color=darkviolet];
1939[label="212.208.51.129;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2022[label="4.62.148.144;31pkt 31fpkt", shape=pentagon, color=darkviolet];
2147[label="111.238.66.170;28pkt 28fpkt", shape=pentagon, color=darkviolet];
2234[label="209.85.34.193;45pkt 45fpkt", shape=pentagon, color=darkviolet];
2280[label="111.238.88.204;17pkt 17fpkt", shape=pentagon, color=darkviolet];
2308[label="111.238.71.212;25pkt 25fpkt", shape=pentagon, color=darkviolet];
2334[label="23.112.6.221;38pkt 38fpkt", shape=pentagon, color=darkviolet];
2483[label="209.85.154.3;38pkt 38fpkt", shape=invtriangle, color=brown];
2516[label="209.85.154.8;55pkt 55fpkt", shape=invtriangle, color=brown];
2543[label="209.85.154.14;29pkt 29fpkt", shape=invtriangle, color=brown];
2560[label="209.85.154.18;45pkt 45fpkt", shape=invtriangle, color=brown];
2583[label="209.85.154.24;110pkt 110fpkt", shape=invtriangle, color=brown];
2612[label="209.85.154.30;45pkt 45fpkt", shape=invtriangle, color=brown];
2674[label="209.85.154.45;29pkt 29fpkt", shape=invtriangle, color=brown];
2728[label="193.92.114.58;32pkt 32fpkt", shape=invtriangle, color=brown];
2889[label="196.102.122.93;65pkt 65fpkt", shape=invtriangle, color=brown];
2972[label="193.179.141.117;23pkt 23fpkt", shape=invtriangle, color=brown];
3071[label="4.62.148.144;30pkt 30fpkt", shape=invtriangle, color=brown];
3161[label="111.238.66.170;28pkt 28fpkt", shape=invtriangle, color=brown];
3228[label="209.85.34.193;45pkt 45fpkt", shape=invtriangle, color=brown];
3259[label="111.238.88.204;17pkt 17fpkt", shape=invtriangle, color=brown];
3282[label="111.238.71.212;25pkt 25fpkt", shape=invtriangle, color=brown];
3433[label="209.85.154.8;55pkt 55fpkt", shape=invhouse, color=bisque];
3454[label="209.85.154.14;29pkt 29fpkt", shape=invhouse, color=bisque];
3467[label="209.85.154.18;45pkt 45fpkt", shape=invhouse, color=bisque];
3486[label="209.85.154.24;110pkt 110fpkt", shape=invhouse, color=bisque];
3508[label="209.85.154.30;45pkt 45fpkt", shape=invhouse, color=bisque];
3705[label="196.102.122.93;66pkt 66fpkt", shape=invhouse, color=bisque];
3834[label="4.62.148.144;30pkt 30fpkt", shape=invhouse, color=bisque];
3895[label="111.238.66.170;27pkt 27fpkt", shape=invhouse, color=bisque];
3939[label="209.85.34.193;44pkt 44fpkt", shape=invhouse, color=bisque];
3957[label="111.238.88.204;17pkt 17fpkt", shape=invhouse, color=bisque];
stat505[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 156.143.199.68:*}[55.4316%]&lt;BR/&gt;{*:80, 156.143.199.71:*}[39.8708%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7989%)&lt;BR/&gt; 0: (0.118315%)&lt;BR/&gt; 27133: (0.0709891%)&lt;BR/&gt; 27001: (0.0709891%)&lt;BR/&gt; 26976: (0.0709891%)&gt;];
}
438--515[label="0.0258752;17pkt 17fpkt"];
438--729[label="0.193396;41pkt 41fpkt"];
438--772[label="1;159pkt 159fpkt"];
438--813[label="0.0952381;8pkt 8fpkt"];
438--887[label="0.981818;108pkt 108fpkt"];
438--1057[label="0.195767;37pkt 37fpkt"];
438--1166[label="0.981818;108pkt 108fpkt"];
438--1263[label="0.684211;26pkt 26fpkt"];
438--1291[label="0.439024;18pkt 18fpkt"];
438--1302[label="0.981481;53pkt 53fpkt"];
438--1361[label="0.909091;40pkt 40fpkt"];
438--1388[label="0.981818;108pkt 108fpkt"];
438--1487[label="0.909091;40pkt 40fpkt"];
438--1568[label="0.5625;18pkt 18fpkt"];
438--1778[label="0.333333;22pkt 22fpkt"];
438--1887[label="0.869565;20pkt 20fpkt"];
438--1900[label="0.0434783;1pkt 1fpkt"];
438--1939[label="1;6pkt 6fpkt"];
438--2022[label="0.0645161;2pkt 2fpkt"];
438--2147[label="0.392857;11pkt 11fpkt"];
438--2172[label="0.0833333;8pkt 8fpkt"];
438--2280[label="0.823529;14pkt 14fpkt"];
438--2308[label="0.84;21pkt 21fpkt"];
438--2313[label="0.0234483;17pkt 17fpkt"];
438--2334[label="0.710526;27pkt 27fpkt"];
438--2483[label="0.684211;26pkt 26fpkt"];
438--2516[label="0.963636;53pkt 53fpkt"];
438--2560[label="0.911111;41pkt 41fpkt"];
438--2583[label="0.981818;108pkt 108fpkt"];
438--2728[label="0.5625;18pkt 18fpkt"];
438--2889[label="0.338462;22pkt 22fpkt"];
438--2972[label="0.869565;20pkt 20fpkt"];
438--2981[label="0.0434783;1pkt 1fpkt"];
438--3071[label="0.0666667;2pkt 2fpkt"];
438--3161[label="0.392857;11pkt 11fpkt"];
438--3184[label="0.0833333;8pkt 8fpkt"];
438--3259[label="0.823529;14pkt 14fpkt"];
438--3282[label="0.84;21pkt 21fpkt"];
438--3433[label="0.963636;53pkt 53fpkt"];
438--3467[label="0.911111;41pkt 41fpkt"];
438--3486[label="0.981818;108pkt 108fpkt"];
438--3705[label="0.333333;22pkt 22fpkt"];
438--3834[label="0.0666667;2pkt 2fpkt"];
438--3895[label="0.407407;11pkt 11fpkt"];
438--3957[label="0.823529;14pkt 14fpkt"];
530--729[label="0.806604;171pkt 171fpkt"];
530--813[label="0.107143;9pkt 9fpkt"];
530--1057[label="0.804233;152pkt 152fpkt"];
530--1263[label="0.263158;10pkt 10fpkt"];
530--1291[label="0.560976;23pkt 23fpkt"];
530--1340[label="0.857143;24pkt 24fpkt"];
530--1421[label="0.891304;41pkt 41fpkt"];
530--1500[label="0.857143;24pkt 24fpkt"];
530--1568[label="0.28125;9pkt 9fpkt"];
530--1778[label="0.666667;44pkt 44fpkt"];
530--1922[label="0.0192308;1pkt 1fpkt"];
530--1931[label="0.0322581;1pkt 1fpkt"];
530--2147[label="0.607143;17pkt 17fpkt"];
530--2172[label="0.09375;9pkt 9fpkt"];
530--2234[label="0.533333;24pkt 24fpkt"];
530--2280[label="0.117647;2pkt 2fpkt"];
530--2308[label="0.16;4pkt 4fpkt"];
530--2313[label="0.0148368;10pkt 10fpkt"];
530--2334[label="0.289474;11pkt 11fpkt"];
530--2483[label="0.263158;10pkt 10fpkt"];
530--2543[label="0.862069;25pkt 25fpkt"];
530--2612[label="0.888889;40pkt 40fpkt"];
530--2674[label="0.862069;25pkt 25fpkt"];
530--2728[label="0.28125;9pkt 9fpkt"];
530--2889[label="0.661538;43pkt 43fpkt"];
530--3000[label="0.0196078;1pkt 1fpkt"];
530--3161[label="0.607143;17pkt 17fpkt"];
530--3184[label="0.09375;9pkt 9fpkt"];
530--3228[label="0.533333;24pkt 24fpkt"];
530--3259[label="0.117647;2pkt 2fpkt"];
530--3282[label="0.16;4pkt 4fpkt"];
530--3454[label="0.862069;25pkt 25fpkt"];
530--3508[label="0.888889;40pkt 40fpkt"];
530--3705[label="0.666667;44pkt 44fpkt"];
530--3788[label="0.0196078;1pkt 1fpkt"];
530--3895[label="0.592593;16pkt 16fpkt"];
530--3939[label="0.545455;24pkt 24fpkt"];
530--3957[label="0.117647;2pkt 2fpkt"];
729--1057[label="1;189pkt 189fpkt"];
887--1166[label="1;110pkt 110fpkt"];
887--1388[label="0.990909;109pkt 109fpkt"];
887--2583[label="0.990909;109pkt 109fpkt"];
887--3486[label="0.990909;109pkt 109fpkt"];
888--1263[label="0.2;1pkt 1fpkt"];
888--2022[label="0.2;1pkt 1fpkt"];
888--2483[label="0.2;1pkt 1fpkt"];
888--3071[label="0.2;1pkt 1fpkt"];
888--3834[label="0.2;1pkt 1fpkt"];
1166--1388[label="0.990909;109pkt 109fpkt"];
1166--2583[label="0.990909;109pkt 109fpkt"];
1166--3486[label="0.990909;109pkt 109fpkt"];
1263--2483[label="1;38pkt 38fpkt"];
1302--2516[label="1;54pkt 54fpkt"];
1302--3433[label="1;54pkt 54fpkt"];
1340--2543[label="1;28pkt 28fpkt"];
1340--3454[label="1;28pkt 28fpkt"];
1361--2560[label="1;44pkt 44fpkt"];
1361--3467[label="1;44pkt 44fpkt"];
1388--2583[label="1;110pkt 110fpkt"];
1388--3486[label="1;110pkt 110fpkt"];
1421--2612[label="1;45pkt 45fpkt"];
1421--3508[label="1;45pkt 45fpkt"];
1500--2674[label="1;28pkt 28fpkt"];
1568--2728[label="1;32pkt 32fpkt"];
1778--2889[label="1;65pkt 65fpkt"];
1778--3705[label="1;66pkt 66fpkt"];
1887--2972[label="1;23pkt 23fpkt"];
2022--3071[label="1;30pkt 30fpkt"];
2022--3834[label="1;30pkt 30fpkt"];
2147--3161[label="1;28pkt 28fpkt"];
2147--3895[label="1;27pkt 27fpkt"];
2234--3228[label="1;45pkt 45fpkt"];
2234--3939[label="1;44pkt 44fpkt"];
2280--3259[label="1;17pkt 17fpkt"];
2280--3957[label="1;17pkt 17fpkt"];
2308--3282[label="1;25pkt 25fpkt"];
2516--3433[label="1;55pkt 55fpkt"];
2543--3454[label="1;29pkt 29fpkt"];
2560--3467[label="1;45pkt 45fpkt"];
2583--3486[label="1;110pkt 110fpkt"];
2612--3508[label="1;45pkt 45fpkt"];
2889--3705[label="1;65pkt 65fpkt"];
3071--3834[label="1;30pkt 30fpkt"];
3161--3895[label="1;27pkt 27fpkt"];
3228--3939[label="1;44pkt 44fpkt"];
3259--3957[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="156.143.199.68" src_port="80"/>
      <filter dst_ip="156.143.199.71" src_port="80"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.31"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.148.144.31"/>
    </slice>
    <from sec="1072933201" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_508{
style=filled;
color=gray75;
1430[label="5.27.113.32;129pkt 129fpkt", shape=pentagon, color=darkviolet];
2619[label="5.27.113.32;128pkt 128fpkt", shape=invtriangle, color=brown];
3513[label="5.27.113.32;129pkt 129fpkt", shape=invhouse, color=bisque];
stat508[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.27.113.32:0, *:0}[96.124%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.114%)&lt;BR/&gt; 80: (1.5544%)&lt;BR/&gt; 63272: (0.388601%)&lt;BR/&gt; 56786: (0.388601%)&lt;BR/&gt; 36572: (0.388601%)&gt;];
}
1430--2619[label="1;128pkt 128fpkt"];
1430--3513[label="1;129pkt 129fpkt"];
2619--3513[label="1;128pkt 128fpkt"];
</description>
    <slice>
      <filter src_ip="5.27.113.32"/>
    </slice>
    <from sec="1072933228" usec="0"/>
    <to sec="1072934081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_509{
style=filled;
color=gray75;
1434[label="1.17.74.33;70pkt 70fpkt", shape=pentagon, color=darkviolet];
2622[label="1.17.74.33;69pkt 69fpkt", shape=invtriangle, color=brown];
3514[label="1.17.74.33;69pkt 69fpkt", shape=invhouse, color=bisque];
stat509[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.17.74.33:*, *:135}[50%]&lt;BR/&gt;{1.17.74.33:*, *:445}[50%]&lt;BR/&gt;{1.17.74.33:*, 156.142.159.145:*}[24.2857%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.2404%)&lt;BR/&gt; 135: (24.7596%)&lt;BR/&gt; 1463: (1.44231%)&lt;BR/&gt; 4967: (0.721154%)&lt;BR/&gt; 4816: (0.721154%)&gt;];
}
1434--2622[label="1;69pkt 69fpkt"];
1434--3514[label="1;69pkt 69fpkt"];
2622--3514[label="1;69pkt 69fpkt"];
</description>
    <slice>
      <filter dst_ip="156.142.159.145" src_ip="1.17.74.33"/>
      <filter dst_port="445" src_ip="1.17.74.33"/>
      <filter dst_port="135" src_ip="1.17.74.33"/>
    </slice>
    <from sec="1072933261" usec="0"/>
    <to sec="1072934068" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_510{
style=filled;
color=gray75;
1437[label="209.85.157.33;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2626[label="209.85.157.33;5pkt 5fpkt", shape=invtriangle, color=brown];
3518[label="209.85.157.33;5pkt 5fpkt", shape=invhouse, color=bisque];
stat510[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.85.157.33:1863, 156.142.215.46:2998}[20%]&lt;BR/&gt;{209.85.157.33:1863, 130.195.221.56:3052}[20%]&lt;BR/&gt;{209.85.157.33:1863, 130.195.208.76:1048}[20%]&lt;BR/&gt;{209.85.157.33:1863, 152.6.70.152:53402}[20%]&lt;BR/&gt;{209.85.157.33:1863, 130.195.107.234:3091}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 53402: (10.7143%)&lt;BR/&gt; 3091: (10.7143%)&lt;BR/&gt; 3052: (10.7143%)&lt;BR/&gt; 2998: (10.7143%)&gt;];
}
1437--2626[label="1;4pkt 4fpkt"];
1437--3518[label="1;4pkt 4fpkt"];
2626--3518[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="130.195.107.234" dst_port="3091" src_ip="209.85.157.33" src_port="1863"/>
      <filter dst_ip="152.6.70.152" dst_port="53402" src_ip="209.85.157.33" src_port="1863"/>
      <filter dst_ip="130.195.208.76" dst_port="1048" src_ip="209.85.157.33" src_port="1863"/>
      <filter dst_ip="130.195.221.56" dst_port="3052" src_ip="209.85.157.33" src_port="1863"/>
      <filter dst_ip="156.142.215.46" dst_port="2998" src_ip="209.85.157.33" src_port="1863"/>
    </slice>
    <from sec="1072933204" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="23.48.91.34"/>
    </slice>
    <from sec="1072933365" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_512{
style=filled;
color=gray75;
1442[label="201.4.127.34;86pkt 86fpkt", shape=pentagon, color=darkviolet];
2630[label="201.4.127.34;87pkt 87fpkt", shape=invtriangle, color=brown];
3521[label="201.4.127.34;87pkt 87fpkt", shape=invhouse, color=bisque];
stat512[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.4.127.34:*, *:445}[50.5747%]&lt;BR/&gt;{201.4.127.34:*, *:135}[49.4253%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.3846%)&lt;BR/&gt; 135: (24.6154%)&lt;BR/&gt; 2359: (1.15385%)&lt;BR/&gt; 4960: (0.576923%)&lt;BR/&gt; 4813: (0.576923%)&gt;];
}
1442--2630[label="1;86pkt 86fpkt"];
1442--3521[label="1;86pkt 86fpkt"];
2630--3521[label="1;87pkt 87fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="201.4.127.34"/>
      <filter dst_port="135" src_ip="201.4.127.34"/>
    </slice>
    <from sec="1072933209" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_513{
style=filled;
color=gray75;
1443[label="156.143.199.34;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2631[label="156.143.199.34;2pkt 2fpkt", shape=invtriangle, color=brown];
3522[label="156.143.199.34;2pkt 2fpkt", shape=invhouse, color=bisque];
stat513[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.143.199.34:25, 1.80.37.25:3636}[50%]&lt;BR/&gt;{156.143.199.34:25, 1.127.101.235:3655}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 3655: (25%)&lt;BR/&gt; 3636: (25%)&gt;];
}
1443--2631[label="1;2pkt 2fpkt"];
1443--3522[label="1;2pkt 2fpkt"];
2631--3522[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="1.127.101.235" dst_port="3655" src_ip="156.143.199.34" src_port="25"/>
      <filter dst_ip="1.80.37.25" dst_port="3636" src_ip="156.143.199.34" src_port="25"/>
    </slice>
    <from sec="1072934101" usec="0"/>
    <to sec="1072934102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_514{
style=filled;
color=gray75;
1444[label="194.36.136.35;103pkt 103fpkt", shape=pentagon, color=darkviolet];
2632[label="194.36.136.35;104pkt 104fpkt", shape=invtriangle, color=brown];
3523[label="194.36.136.35;104pkt 104fpkt", shape=invhouse, color=bisque];
stat514[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.36.136.35:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
1444--2632[label="1;103pkt 103fpkt"];
1444--3523[label="1;103pkt 103fpkt"];
2632--3523[label="1;104pkt 104fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.36.136.35" src_port="1026"/>
    </slice>
    <from sec="1072933463" usec="0"/>
    <to sec="1072933482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="23.4.212.36"/>
    </slice>
    <from sec="1072933230" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.37"/>
    </slice>
    <from sec="1072933208" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_517{
style=filled;
color=gray75;
1454[label="1.6.111.37;86pkt 86fpkt", shape=pentagon, color=darkviolet];
2640[label="1.6.111.37;87pkt 87fpkt", shape=invtriangle, color=brown];
3529[label="1.6.111.37;87pkt 87fpkt", shape=invhouse, color=bisque];
stat517[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.6.111.37:*, *:445}[50.5747%]&lt;BR/&gt;{1.6.111.37:*, *:135}[49.4253%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.3846%)&lt;BR/&gt; 135: (24.6154%)&lt;BR/&gt; 4910: (0.576923%)&lt;BR/&gt; 4908: (0.576923%)&lt;BR/&gt; 4765: (0.576923%)&gt;];
}
1454--2640[label="1;86pkt 86fpkt"];
1454--3529[label="1;86pkt 86fpkt"];
2640--3529[label="1;87pkt 87fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="1.6.111.37"/>
      <filter dst_port="135" src_ip="1.6.111.37"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_518{
style=filled;
color=gray75;
1455[label="210.65.164.37;261pkt 261fpkt", shape=pentagon, color=darkviolet];
2641[label="210.65.164.37;261pkt 261fpkt", shape=invtriangle, color=brown];
3530[label="210.65.164.37;261pkt 261fpkt", shape=invhouse, color=bisque];
stat518[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.65.164.37:0, *:0}[94.636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.636%)&lt;BR/&gt; 80: (1.72414%)&lt;BR/&gt; 135: (0.957854%)&lt;BR/&gt; 65514: (0.191571%)&lt;BR/&gt; 57612: (0.191571%)&gt;];
}
1455--2641[label="1;261pkt 261fpkt"];
1455--3530[label="1;261pkt 261fpkt"];
2641--3530[label="1;261pkt 261fpkt"];
</description>
    <slice>
      <filter src_ip="210.65.164.37"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.38"/>
    </slice>
    <from sec="1072933207" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_520{
style=filled;
color=gray75;
1460[label="90.107.108.38;50pkt 50fpkt", shape=pentagon, color=darkviolet];
2645[label="90.107.108.38;49pkt 49fpkt", shape=invtriangle, color=brown];
3533[label="90.107.108.38;49pkt 49fpkt", shape=invhouse, color=bisque];
stat520[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.107.108.38:*, *:445}[78%]&lt;BR/&gt;{90.107.108.38:0, *:0}[22%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (38.8514%)&lt;BR/&gt; 0: (22.2973%)&lt;BR/&gt; 4983: (1.01351%)&lt;BR/&gt; 4811: (1.01351%)&lt;BR/&gt; 4756: (1.01351%)&gt;];
}
1460--2645[label="1;49pkt 49fpkt"];
1460--3533[label="1;49pkt 49fpkt"];
2645--3533[label="1;49pkt 49fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="90.107.108.38"/>
      <filter src_ip="90.107.108.38"/>
    </slice>
    <from sec="1072933223" usec="0"/>
    <to sec="1072934072" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_521{
style=filled;
color=gray75;
1461[label="200.104.153.38;90pkt 90fpkt", shape=pentagon, color=darkviolet];
2646[label="200.104.153.38;89pkt 89fpkt", shape=invtriangle, color=brown];
3534[label="200.104.153.38;90pkt 90fpkt", shape=invhouse, color=bisque];
stat521[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.104.153.38:*, *:445}[51.1111%]&lt;BR/&gt;{200.104.153.38:*, *:135}[48.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.6506%)&lt;BR/&gt; 135: (24.3494%)&lt;BR/&gt; 4349: (1.11524%)&lt;BR/&gt; 3682: (1.11524%)&lt;BR/&gt; 3419: (1.11524%)&gt;];
}
1461--2646[label="1;89pkt 89fpkt"];
1461--3534[label="1;90pkt 90fpkt"];
2646--3534[label="1;89pkt 89fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="200.104.153.38"/>
      <filter dst_port="135" src_ip="200.104.153.38"/>
    </slice>
    <from sec="1072933207" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.77.238.38"/>
    </slice>
    <from sec="1072933254" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_523{
style=filled;
color=gray75;
1463[label="201.98.240.38;39pkt 39fpkt", shape=pentagon, color=darkviolet];
2648[label="201.98.240.38;40pkt 40fpkt", shape=invtriangle, color=brown];
3536[label="201.98.240.38;39pkt 39fpkt", shape=invhouse, color=bisque];
stat523[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.98.240.38:*, *:135}[52.5%]&lt;BR/&gt;{201.98.240.38:*, *:445}[47.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (25.8475%)&lt;BR/&gt; 445: (24.1525%)&lt;BR/&gt; 1134: (2.54237%)&lt;BR/&gt; 4896: (1.27119%)&lt;BR/&gt; 4777: (1.27119%)&gt;];
}
1463--2648[label="1;39pkt 39fpkt"];
1463--3536[label="1;39pkt 39fpkt"];
2648--3536[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="201.98.240.38"/>
      <filter dst_port="445" src_ip="201.98.240.38"/>
    </slice>
    <from sec="1072933203" usec="0"/>
    <to sec="1072934092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_524{
style=filled;
color=gray75;
1467[label="7.84.176.39;50pkt 50fpkt", shape=pentagon, color=darkviolet];
2651[label="7.84.176.39;50pkt 50fpkt", shape=invtriangle, color=brown];
3539[label="7.84.176.39;50pkt 50fpkt", shape=invhouse, color=bisque];
stat524[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.84.176.39:*, *:445}[52%]&lt;BR/&gt;{7.84.176.39:*, *:135}[48%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (26%)&lt;BR/&gt; 135: (24%)&lt;BR/&gt; 4977: (1%)&lt;BR/&gt; 4955: (1%)&lt;BR/&gt; 4949: (1%)&gt;];
}
1467--2651[label="1;50pkt 50fpkt"];
1467--3539[label="1;50pkt 50fpkt"];
2651--3539[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="7.84.176.39"/>
      <filter dst_port="135" src_ip="7.84.176.39"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.157.188.40"/>
    </slice>
    <from sec="1072933204" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_526{
style=filled;
color=gray75;
1476[label="195.145.31.41;161pkt 161fpkt", shape=pentagon, color=darkviolet];
2657[label="195.145.31.41;160pkt 160fpkt", shape=invtriangle, color=brown];
3542[label="195.145.31.41;161pkt 161fpkt", shape=invhouse, color=bisque];
stat526[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.145.31.41:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
1476--2657[label="1;160pkt 160fpkt"];
1476--3542[label="1;161pkt 161fpkt"];
2657--3542[label="1;160pkt 160fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="195.145.31.41" src_port="1030"/>
    </slice>
    <from sec="1072934080" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.42"/>
    </slice>
    <from sec="1072933203" usec="0"/>
    <to sec="1072934093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_528{
style=filled;
color=gray75;
1482[label="1.39.202.42;50pkt 50fpkt", shape=pentagon, color=darkviolet];
2661[label="1.39.202.42;51pkt 51fpkt", shape=invtriangle, color=brown];
3545[label="1.39.202.42;50pkt 50fpkt", shape=invhouse, color=bisque];
stat528[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.39.202.42:*, *:445}[50.9804%]&lt;BR/&gt;{1.39.202.42:*, *:135}[49.0196%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.8278%)&lt;BR/&gt; 135: (24.1722%)&lt;BR/&gt; 4879: (0.993377%)&lt;BR/&gt; 4704: (0.993377%)&lt;BR/&gt; 4618: (0.993377%)&gt;];
}
1482--2661[label="1;50pkt 50fpkt"];
1482--3545[label="1;50pkt 50fpkt"];
2661--3545[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="1.39.202.42"/>
      <filter dst_port="135" src_ip="1.39.202.42"/>
    </slice>
    <from sec="1072933217" usec="0"/>
    <to sec="1072934091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.149.158.43"/>
    </slice>
    <from sec="1072934101" usec="0"/>
    <to sec="1072934102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_530{
style=filled;
color=gray75;
1491[label="213.232.179.44;193pkt 193fpkt", shape=pentagon, color=darkviolet];
2666[label="213.232.179.44;193pkt 193fpkt", shape=invtriangle, color=brown];
3548[label="213.232.179.44;192pkt 192fpkt", shape=invhouse, color=bisque];
stat530[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.232.179.44:64485, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64485: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
1491--2666[label="1;193pkt 193fpkt"];
1491--3548[label="1;192pkt 192fpkt"];
2666--3548[label="1;192pkt 192fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="213.232.179.44" src_port="64485"/>
    </slice>
    <from sec="1072933878" usec="0"/>
    <to sec="1072933909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.45"/>
    </slice>
    <from sec="1072933214" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_532{
style=filled;
color=gray75;
1498[label="4.115.102.45;75pkt 75fpkt", shape=pentagon, color=darkviolet];
2672[label="4.115.102.45;75pkt 75fpkt", shape=invtriangle, color=brown];
3552[label="4.115.102.45;75pkt 75fpkt", shape=invhouse, color=bisque];
stat532[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.115.102.45:*, *:445}[50.6667%]&lt;BR/&gt;{4.115.102.45:*, *:135}[49.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.3333%)&lt;BR/&gt; 135: (24.6667%)&lt;BR/&gt; 1327: (1.33333%)&lt;BR/&gt; 4855: (0.666667%)&lt;BR/&gt; 4846: (0.666667%)&gt;];
}
1498--2672[label="1;75pkt 75fpkt"];
1498--3552[label="1;75pkt 75fpkt"];
2672--3552[label="1;75pkt 75fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="4.115.102.45"/>
      <filter dst_port="135" src_ip="4.115.102.45"/>
    </slice>
    <from sec="1072933210" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.209.153.45"/>
    </slice>
    <from sec="1072933209" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_534{
style=filled;
color=gray75;
1508[label="194.145.211.47;119pkt 119fpkt", shape=pentagon, color=darkviolet];
2678[label="194.145.211.47;119pkt 119fpkt", shape=invtriangle, color=brown];
3556[label="194.145.211.47;118pkt 118fpkt", shape=invhouse, color=bisque];
stat534[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.145.211.47:0, *:0}[96.6387%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.6292%)&lt;BR/&gt; 80: (1.68539%)&lt;BR/&gt; 63115: (0.421348%)&lt;BR/&gt; 56604: (0.421348%)&lt;BR/&gt; 15272: (0.421348%)&gt;];
}
1508--2678[label="1;119pkt 119fpkt"];
1508--3556[label="1;118pkt 118fpkt"];
2678--3556[label="1;118pkt 118fpkt"];
</description>
    <slice>
      <filter src_ip="194.145.211.47"/>
    </slice>
    <from sec="1072933238" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_535{
style=filled;
color=gray75;
1509[label="201.19.216.47;57pkt 57fpkt", shape=pentagon, color=darkviolet];
2679[label="201.19.216.47;57pkt 57fpkt", shape=invtriangle, color=brown];
3557[label="201.19.216.47;57pkt 57fpkt", shape=invhouse, color=bisque];
stat535[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.19.216.47:*, *:135}[52.6316%]&lt;BR/&gt;{201.19.216.47:*, *:445}[47.3684%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (26.3158%)&lt;BR/&gt; 445: (23.6842%)&lt;BR/&gt; 4673: (0.877193%)&lt;BR/&gt; 4614: (0.877193%)&lt;BR/&gt; 4562: (0.877193%)&gt;];
}
1509--2679[label="1;57pkt 57fpkt"];
1509--3557[label="1;57pkt 57fpkt"];
2679--3557[label="1;57pkt 57fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="201.19.216.47"/>
      <filter dst_port="445" src_ip="201.19.216.47"/>
    </slice>
    <from sec="1072933266" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_536{
style=filled;
color=gray75;
1512[label="5.163.27.48;49pkt 49fpkt", shape=pentagon, color=darkviolet];
2682[label="5.163.27.48;48pkt 48fpkt", shape=invtriangle, color=brown];
stat536[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.163.27.48:*, *:445}[51.0204%]&lt;BR/&gt;{5.163.27.48:*, *:135}[48.9796%]&lt;BR/&gt;{5.163.27.48:*, 152.6.140.60:*}[24.4898%]&lt;BR/&gt;{5.163.27.48:*, 152.183.240.70:*}[20.4082%]&lt;BR/&gt;{5.163.27.48:*, 152.205.5.169:*}[20.4082%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.7732%)&lt;BR/&gt; 135: (24.2268%)&lt;BR/&gt; 4730: (1.03093%)&lt;BR/&gt; 4645: (1.03093%)&lt;BR/&gt; 4544: (1.03093%)&gt;];
}
1512--2682[label="1;48pkt 48fpkt"];
</description>
    <slice>
      <filter dst_ip="152.6.140.60" src_ip="5.163.27.48"/>
      <filter dst_ip="152.205.5.169" src_ip="5.163.27.48"/>
      <filter dst_ip="152.183.240.70" src_ip="5.163.27.48"/>
      <filter dst_port="445" src_ip="5.163.27.48"/>
      <filter dst_port="135" src_ip="5.163.27.48"/>
    </slice>
    <from sec="1072933207" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_537{
style=filled;
color=gray75;
1516[label="200.183.220.48;42pkt 42fpkt", shape=pentagon, color=darkviolet];
2686[label="200.183.220.48;42pkt 42fpkt", shape=invtriangle, color=brown];
3561[label="200.183.220.48;43pkt 43fpkt", shape=invhouse, color=bisque];
stat537[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.183.220.48:*, *:135}[51.1628%]&lt;BR/&gt;{200.183.220.48:*, *:445}[48.8372%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (25.1969%)&lt;BR/&gt; 445: (24.8031%)&lt;BR/&gt; 4959: (1.1811%)&lt;BR/&gt; 4749: (1.1811%)&lt;BR/&gt; 4594: (1.1811%)&gt;];
}
1516--2686[label="1;42pkt 42fpkt"];
1516--3561[label="1;42pkt 42fpkt"];
2686--3561[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="200.183.220.48"/>
      <filter dst_port="445" src_ip="200.183.220.48"/>
    </slice>
    <from sec="1072933215" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_538{
style=filled;
color=gray75;
1518[label="194.196.113.49;193pkt 193fpkt", shape=pentagon, color=darkviolet];
2688[label="194.196.113.49;193pkt 193fpkt", shape=invtriangle, color=brown];
stat538[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.196.113.49:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 51020: (0.259067%)&lt;BR/&gt; 51017: (0.259067%)&lt;BR/&gt; 51013: (0.259067%)&lt;BR/&gt; 51008: (0.259067%)&gt;];
}
1518--2688[label="1;193pkt 193fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.196.113.49"/>
    </slice>
    <from sec="1072933483" usec="0"/>
    <to sec="1072933514" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_539{
style=filled;
color=gray75;
1519[label="192.147.138.49;164pkt 164fpkt", shape=pentagon, color=darkviolet];
2689[label="192.147.138.49;164pkt 164fpkt", shape=invtriangle, color=brown];
3563[label="192.147.138.49;154pkt 154fpkt", shape=invhouse, color=bisque];
stat539[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.147.138.49:1044, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1044: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
1519--2689[label="1;164pkt 164fpkt"];
1519--3563[label="0.993506;153pkt 153fpkt"];
2689--3563[label="0.993506;153pkt 153fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="192.147.138.49" src_port="1044"/>
    </slice>
    <from sec="1072933993" usec="0"/>
    <to sec="1072934022" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_540{
style=filled;
color=gray75;
1520[label="201.5.168.49;39pkt 39fpkt", shape=pentagon, color=darkviolet];
2690[label="201.5.168.49;39pkt 39fpkt", shape=invtriangle, color=brown];
stat540[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.5.168.49:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4984: (1.28205%)&lt;BR/&gt; 4975: (1.28205%)&lt;BR/&gt; 4972: (1.28205%)&lt;BR/&gt; 4969: (1.28205%)&gt;];
}
1520--2690[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="201.5.168.49"/>
    </slice>
    <from sec="1072933209" usec="0"/>
    <to sec="1072934096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_541{
style=filled;
color=gray75;
1522[label="197.156.241.49;151pkt 151fpkt", shape=pentagon, color=darkviolet];
2692[label="197.156.241.49;151pkt 151fpkt", shape=invtriangle, color=brown];
3565[label="197.156.241.49;151pkt 151fpkt", shape=invhouse, color=bisque];
stat541[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.156.241.49:0, *:0}[97.351%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.351%)&lt;BR/&gt; 135: (1.3245%)&lt;BR/&gt; 57180: (0.331126%)&lt;BR/&gt; 53077: (0.331126%)&lt;BR/&gt; 21371: (0.331126%)&gt;];
}
1522--2692[label="1;151pkt 151fpkt"];
1522--3565[label="1;151pkt 151fpkt"];
2692--3565[label="1;151pkt 151fpkt"];
</description>
    <slice>
      <filter src_ip="197.156.241.49"/>
    </slice>
    <from sec="1072933207" usec="0"/>
    <to sec="1072934096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_543{
style=filled;
color=gray75;
1527[label="90.109.211.50;43pkt 43fpkt", shape=pentagon, color=darkviolet];
2695[label="90.109.211.50;43pkt 43fpkt", shape=invtriangle, color=brown];
3568[label="90.109.211.50;43pkt 43fpkt", shape=invhouse, color=bisque];
stat543[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.109.211.50:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4971: (1.16279%)&lt;BR/&gt; 4879: (1.16279%)&lt;BR/&gt; 4842: (1.16279%)&lt;BR/&gt; 4747: (1.16279%)&gt;];
}
1527--2695[label="1;43pkt 43fpkt"];
1527--3568[label="1;43pkt 43fpkt"];
2695--3568[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="90.109.211.50"/>
    </slice>
    <from sec="1072933259" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_544{
style=filled;
color=gray75;
1532[label="196.132.201.51;131pkt 131fpkt", shape=pentagon, color=darkviolet];
2698[label="196.132.201.51;132pkt 132fpkt", shape=invtriangle, color=brown];
3570[label="196.132.201.51;132pkt 132fpkt", shape=invhouse, color=bisque];
stat544[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.132.201.51:5972, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5972: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
1532--2698[label="1;131pkt 131fpkt"];
1532--3570[label="1;131pkt 131fpkt"];
2698--3570[label="1;132pkt 132fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.132.201.51" src_port="5972"/>
    </slice>
    <from sec="1072933429" usec="0"/>
    <to sec="1072933453" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881959,2.12442,999,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_545{
style=filled;
color=gray75;
516[label="196.122.48.52;s;1pkt 1fpkt", shape=diamond, color=yellow];
2700[label="196.122.48.52;1pkt 1fpkt", shape=invtriangle, color=brown];
stat545[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.122.48.52:1648, 152.6.39.203:4662}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 1648: (50%)&gt;];
}
516--2700[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="152.6.39.203" dst_port="4662" src_ip="196.122.48.52" src_port="1648"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072933413" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_546{
style=filled;
color=gray75;
1535[label="209.85.75.52;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2701[label="209.85.75.52;11pkt 11fpkt", shape=invtriangle, color=brown];
3572[label="209.85.75.52;10pkt 10fpkt", shape=invhouse, color=bisque];
stat546[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.85.75.52:80, *:*}[63.6364%]&lt;BR/&gt;{209.85.75.52:443, *:*}[36.3636%]&lt;BR/&gt;{209.85.75.52:*, 152.6.70.67:*}[27.2727%]&lt;BR/&gt;{209.85.75.52:*, 152.6.248.104:*}[27.2727%]&lt;BR/&gt;{209.85.75.52:*, 152.6.248.229:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30.6452%)&lt;BR/&gt; 443: (19.3548%)&lt;BR/&gt; 2968: (4.83871%)&lt;BR/&gt; 2964: (4.83871%)&lt;BR/&gt; 2189: (4.83871%)&gt;];
}
1535--2701[label="1;10pkt 10fpkt"];
1535--3572[label="1;10pkt 10fpkt"];
2701--3572[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="152.6.248.229" src_ip="209.85.75.52"/>
      <filter dst_ip="152.6.248.104" src_ip="209.85.75.52"/>
      <filter dst_ip="152.6.70.67" src_ip="209.85.75.52"/>
      <filter src_ip="209.85.75.52" src_port="80"/>
      <filter src_ip="209.85.75.52" src_port="443"/>
    </slice>
    <from sec="1072933456" usec="0"/>
    <to sec="1072933915" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_547{
style=filled;
color=gray75;
1536[label="194.196.114.52;251pkt 251fpkt", shape=pentagon, color=darkviolet];
2702[label="194.196.114.52;252pkt 252fpkt", shape=invtriangle, color=brown];
stat547[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.196.114.52:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
1536--2702[label="1;251pkt 251fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.196.114.52" src_port="1026"/>
    </slice>
    <from sec="1072934031" usec="0"/>
    <to sec="1072934058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_548{
style=filled;
color=gray75;
1538[label="5.188.160.52;38pkt 38fpkt", shape=pentagon, color=darkviolet];
2704[label="5.188.160.52;39pkt 39fpkt", shape=invtriangle, color=brown];
3573[label="5.188.160.52;38pkt 38fpkt", shape=invhouse, color=bisque];
stat548[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.188.160.52:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4939: (1.30435%)&lt;BR/&gt; 4937: (1.30435%)&lt;BR/&gt; 4936: (1.30435%)&lt;BR/&gt; 4912: (1.30435%)&gt;];
}
1538--2704[label="1;38pkt 38fpkt"];
1538--3573[label="1;38pkt 38fpkt"];
2704--3573[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="5.188.160.52"/>
    </slice>
    <from sec="1072933207" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_549{
style=filled;
color=gray75;
1539[label="111.196.203.52;152pkt 152fpkt", shape=pentagon, color=darkviolet];
2705[label="111.196.203.52;153pkt 153fpkt", shape=invtriangle, color=brown];
stat549[shape=component, label=&lt;Rules:&lt;BR/&gt;{111.196.203.52:1091, *:137}[92.1569%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1091: (46.0656%)&lt;BR/&gt; 1035: (3.93443%)&gt;];
}
1539--2705[label="1;152pkt 152fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="111.196.203.52" src_port="1091"/>
    </slice>
    <from sec="1072933527" usec="0"/>
    <to sec="1072933909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.75.248.52"/>
    </slice>
    <from sec="1072933201" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_551{
style=filled;
color=gray75;
1542[label="6.94.141.53;55pkt 55fpkt", shape=pentagon, color=darkviolet];
2708[label="6.94.141.53;56pkt 56fpkt", shape=invtriangle, color=brown];
3576[label="6.94.141.53;55pkt 55fpkt", shape=invhouse, color=bisque];
stat551[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.94.141.53:*, *:135}[50%]&lt;BR/&gt;{6.94.141.53:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.3012%)&lt;BR/&gt; 135: (24.6988%)&lt;BR/&gt; 4982: (0.903614%)&lt;BR/&gt; 4977: (0.903614%)&lt;BR/&gt; 4968: (0.903614%)&gt;];
}
1542--2708[label="1;55pkt 55fpkt"];
1542--3576[label="1;55pkt 55fpkt"];
2708--3576[label="1;55pkt 55fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="6.94.141.53"/>
      <filter dst_port="135" src_ip="6.94.141.53"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_552{
style=filled;
color=gray75;
1547[label="192.22.133.54;100pkt 100fpkt", shape=pentagon, color=darkviolet];
2710[label="192.22.133.54;101pkt 101fpkt", shape=invtriangle, color=brown];
stat552[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.22.133.54:60151, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60151: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
1547--2710[label="1;100pkt 100fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="192.22.133.54" src_port="60151"/>
    </slice>
    <from sec="1072933924" usec="0"/>
    <to sec="1072933940" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="157.164.252.54"/>
    </slice>
    <from sec="1072933203" usec="0"/>
    <to sec="1072933934" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.32.146.55"/>
    </slice>
    <from sec="1072933201" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_555{
style=filled;
color=gray75;
1553[label="111.82.7.56;205pkt 205fpkt", shape=pentagon, color=darkviolet];
2715[label="111.82.7.56;206pkt 206fpkt", shape=invtriangle, color=brown];
3582[label="111.82.7.56;206pkt 206fpkt", shape=invhouse, color=bisque];
stat555[shape=component, label=&lt;Rules:&lt;BR/&gt;{111.82.7.56:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
1553--2715[label="1;205pkt 205fpkt"];
1553--3582[label="1;205pkt 205fpkt"];
2715--3582[label="1;206pkt 206fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="111.82.7.56" src_port="1027"/>
    </slice>
    <from sec="1072933240" usec="0"/>
    <to sec="1072933279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="108.244.7.56"/>
    </slice>
    <from sec="1072933220" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_557{
style=filled;
color=gray75;
1558[label="209.85.152.56;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2719[label="209.85.152.56;5pkt 5fpkt", shape=invtriangle, color=brown];
stat557[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.85.152.56:1863, 130.195.221.58:3062}[20%]&lt;BR/&gt;{209.85.152.56:1863, 130.195.221.58:3067}[20%]&lt;BR/&gt;{209.85.152.56:1863, 130.195.221.58:3068}[20%]&lt;BR/&gt;{209.85.152.56:1863, 130.195.221.58:3071}[20%]&lt;BR/&gt;{209.85.152.56:1863, 130.195.221.58:3076}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3076: (11.1111%)&lt;BR/&gt; 3071: (11.1111%)&lt;BR/&gt; 3068: (11.1111%)&lt;BR/&gt; 3067: (11.1111%)&gt;];
}
1558--2719[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="130.195.221.58" dst_port="3076" src_ip="209.85.152.56" src_port="1863"/>
      <filter dst_ip="130.195.221.58" dst_port="3071" src_ip="209.85.152.56" src_port="1863"/>
      <filter dst_ip="130.195.221.58" dst_port="3068" src_ip="209.85.152.56" src_port="1863"/>
      <filter dst_ip="130.195.221.58" dst_port="3067" src_ip="209.85.152.56" src_port="1863"/>
      <filter dst_ip="130.195.221.58" dst_port="3062" src_ip="209.85.152.56" src_port="1863"/>
    </slice>
    <from sec="1072933440" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_558{
style=filled;
color=gray75;
1559[label="201.222.178.56;51pkt 51fpkt", shape=pentagon, color=darkviolet];
2720[label="201.222.178.56;52pkt 52fpkt", shape=invtriangle, color=brown];
stat558[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.222.178.56:0, *:0}[44.2308%]&lt;BR/&gt;{201.222.178.56:*, *:135}[30.7692%]&lt;BR/&gt;{201.222.178.56:*, *:445}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (44.6602%)&lt;BR/&gt; 135: (15.0485%)&lt;BR/&gt; 445: (12.6214%)&lt;BR/&gt; 4963: (0.970874%)&lt;BR/&gt; 4801: (0.970874%)&gt;];
}
1559--2720[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="201.222.178.56"/>
      <filter dst_port="445" src_ip="201.222.178.56"/>
      <filter src_ip="201.222.178.56"/>
    </slice>
    <from sec="1072933370" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_559{
style=filled;
color=gray75;
1564[label="200.99.74.58;57pkt 57fpkt", shape=pentagon, color=darkviolet];
2724[label="200.99.74.58;57pkt 57fpkt", shape=invtriangle, color=brown];
3589[label="200.99.74.58;56pkt 56fpkt", shape=invhouse, color=bisque];
stat559[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.99.74.58:*, *:135}[50.8772%]&lt;BR/&gt;{200.99.74.58:*, *:445}[49.1228%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (25.2941%)&lt;BR/&gt; 445: (24.7059%)&lt;BR/&gt; 4995: (0.882353%)&lt;BR/&gt; 4880: (0.882353%)&lt;BR/&gt; 4875: (0.882353%)&gt;];
}
1564--2724[label="1;57pkt 57fpkt"];
1564--3589[label="1;56pkt 56fpkt"];
2724--3589[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="200.99.74.58"/>
      <filter dst_port="445" src_ip="200.99.74.58"/>
    </slice>
    <from sec="1072933324" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889486,2.05965,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_560{
style=filled;
color=gray75;
760[label="156.143.202.96;d;107pkt 107fpkt", shape=diamond, color=yellow];
1338[label="6.249.105.14;7pkt 7fpkt", shape=pentagon, color=darkviolet];
1572[label="6.22.118.59;12pkt 12fpkt", shape=pentagon, color=darkviolet];
1999[label="221.152.52.141;18pkt 18fpkt", shape=pentagon, color=darkviolet];
2732[label="6.22.118.59;13pkt 13fpkt", shape=invtriangle, color=brown];
3596[label="6.22.118.59;12pkt 12fpkt", shape=invhouse, color=bisque];
stat560[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.168.101.9:80, 156.143.202.96:*}[46.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.929%)&lt;BR/&gt; 0: (1.77515%)&lt;BR/&gt; 2574: (1.18343%)&lt;BR/&gt; 2552: (1.18343%)&lt;BR/&gt; 2551: (1.18343%)&gt;];
}
760--846[label="0.00934579;1pkt 1fpkt"];
760--887[label="0.0186916;2pkt 2fpkt"];
760--1166[label="0.0186916;2pkt 2fpkt"];
760--1263[label="0.0263158;1pkt 1fpkt"];
760--1338[label="1;7pkt 7fpkt"];
760--1388[label="0.00934579;1pkt 1fpkt"];
760--1541[label="0.047619;1pkt 1fpkt"];
760--1572[label="0.25;3pkt 3fpkt"];
760--1584[label="0.00934579;1pkt 1fpkt"];
760--1999[label="1;18pkt 18fpkt"];
760--2095[label="0.0392157;2pkt 2fpkt"];
760--2483[label="0.0263158;1pkt 1fpkt"];
760--2583[label="0.00934579;1pkt 1fpkt"];
760--2732[label="0.230769;3pkt 3fpkt"];
760--2739[label="0.00934579;1pkt 1fpkt"];
760--3127[label="0.0392157;2pkt 2fpkt"];
760--3486[label="0.00934579;1pkt 1fpkt"];
760--3596[label="0.25;3pkt 3fpkt"];
760--3604[label="0.00934579;1pkt 1fpkt"];
1572--2732[label="1;12pkt 12fpkt"];
1572--3596[label="1;12pkt 12fpkt"];
2732--3596[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="156.143.202.96" src_ip="6.168.101.9" src_port="80"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934078" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_561{
style=filled;
color=gray75;
1578[label="193.86.97.60;109pkt 109fpkt", shape=pentagon, color=darkviolet];
2736[label="193.86.97.60;110pkt 110fpkt", shape=invtriangle, color=brown];
3600[label="193.86.97.60;110pkt 110fpkt", shape=invhouse, color=bisque];
stat561[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.86.97.60:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1578--2736[label="1;109pkt 109fpkt"];
1578--3600[label="1;109pkt 109fpkt"];
2736--3600[label="1;110pkt 110fpkt"];
</description>
    <slice>
      <filter src_ip="193.86.97.60"/>
    </slice>
    <from sec="1072933451" usec="0"/>
    <to sec="1072934096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.2.183.62"/>
    </slice>
    <from sec="1072934101" usec="0"/>
    <to sec="1072934102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_563{
style=filled;
color=gray75;
1590[label="109.54.248.62;80pkt 80fpkt", shape=pentagon, color=darkviolet];
2742[label="109.54.248.62;80pkt 80fpkt", shape=invtriangle, color=brown];
3607[label="109.54.248.62;79pkt 79fpkt", shape=invhouse, color=bisque];
stat563[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.54.248.62:*, *:135}[50%]&lt;BR/&gt;{109.54.248.62:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.1046%)&lt;BR/&gt; 135: (24.8954%)&lt;BR/&gt; 4948: (0.627615%)&lt;BR/&gt; 4947: (0.627615%)&lt;BR/&gt; 4800: (0.627615%)&gt;];
}
1590--2742[label="1;80pkt 80fpkt"];
1590--3607[label="1;79pkt 79fpkt"];
2742--3607[label="1;79pkt 79fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="109.54.248.62"/>
      <filter dst_port="135" src_ip="109.54.248.62"/>
    </slice>
    <from sec="1072933201" usec="0"/>
    <to sec="1072934097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_564{
style=filled;
color=gray75;
1592[label="213.81.3.63;159pkt 159fpkt", shape=pentagon, color=darkviolet];
2744[label="213.81.3.63;159pkt 159fpkt", shape=invtriangle, color=brown];
stat564[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.81.3.63:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
1592--2744[label="1;159pkt 159fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="213.81.3.63" src_port="1027"/>
    </slice>
    <from sec="1072933880" usec="0"/>
    <to sec="1072933908" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="156.143.5.64"/>
    </slice>
    <from sec="1072933215" usec="0"/>
    <to sec="1072934092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_566{
style=filled;
color=gray75;
1599[label="156.143.36.64;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2749[label="156.143.36.64;7pkt 7fpkt", shape=invtriangle, color=brown];
3610[label="156.143.36.64;7pkt 7fpkt", shape=invhouse, color=bisque];
stat566[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.143.36.64:*, 193.142.158.57:80}[28.5714%]&lt;BR/&gt;{156.143.36.64:*, 209.85.66.225:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.8571%)&lt;BR/&gt; 64976: (7.14286%)&lt;BR/&gt; 64975: (7.14286%)&lt;BR/&gt; 64973: (7.14286%)&lt;BR/&gt; 64971: (7.14286%)&gt;];
}
1599--2749[label="1;7pkt 7fpkt"];
1599--3610[label="1;7pkt 7fpkt"];
2749--3610[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="209.85.66.225" src_ip="156.143.36.64"/>
      <filter dst_ip="193.142.158.57" dst_port="80" src_ip="156.143.36.64"/>
    </slice>
    <from sec="1072933509" usec="0"/>
    <to sec="1072934014" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.64"/>
    </slice>
    <from sec="1072933212" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_568{
style=filled;
color=gray75;
1603[label="6.177.198.64;177pkt 177fpkt", shape=pentagon, color=darkviolet];
2753[label="6.177.198.64;176pkt 176fpkt", shape=invtriangle, color=brown];
3613[label="6.177.198.64;177pkt 177fpkt", shape=invhouse, color=bisque];
stat568[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.177.198.64:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
1603--2753[label="1;176pkt 176fpkt"];
1603--3613[label="1;177pkt 177fpkt"];
2753--3613[label="1;176pkt 176fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="6.177.198.64" src_port="1028"/>
    </slice>
    <from sec="1072933303" usec="0"/>
    <to sec="1072933331" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.83.203.64"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072933249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_570{
style=filled;
color=gray75;
1605[label="111.216.14.65;142pkt 142fpkt", shape=pentagon, color=darkviolet];
2755[label="111.216.14.65;141pkt 141fpkt", shape=invtriangle, color=brown];
3614[label="111.216.14.65;142pkt 142fpkt", shape=invhouse, color=bisque];
stat570[shape=component, label=&lt;Rules:&lt;BR/&gt;{111.216.14.65:0, *:0}[98.5915%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.5882%)&lt;BR/&gt; 80: (0.705882%)&lt;BR/&gt; 35892: (0.352941%)&lt;BR/&gt; 10988: (0.352941%)&gt;];
}
1605--2755[label="1;141pkt 141fpkt"];
1605--3614[label="1;142pkt 142fpkt"];
2755--3614[label="1;141pkt 141fpkt"];
</description>
    <slice>
      <filter src_ip="111.216.14.65"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_571{
style=filled;
color=gray75;
1607[label="194.142.133.65;146pkt 146fpkt", shape=pentagon, color=darkviolet];
2757[label="194.142.133.65;145pkt 145fpkt", shape=invtriangle, color=brown];
3615[label="194.142.133.65;145pkt 145fpkt", shape=invhouse, color=bisque];
stat571[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.142.133.65:33021, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33021: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
1607--2757[label="1;145pkt 145fpkt"];
1607--3615[label="1;145pkt 145fpkt"];
2757--3615[label="1;145pkt 145fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.142.133.65" src_port="33021"/>
    </slice>
    <from sec="1072933478" usec="0"/>
    <to sec="1072933504" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.9.42.66"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_573{
style=filled;
color=gray75;
1612[label="109.51.68.66;109pkt 109fpkt", shape=pentagon, color=darkviolet];
2761[label="109.51.68.66;108pkt 108fpkt", shape=invtriangle, color=brown];
stat573[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.51.68.66:0, *:0}[94.4954%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.47%)&lt;BR/&gt; 80: (2.76498%)&lt;BR/&gt; 17763: (0.460829%)&lt;BR/&gt; 17755: (0.460829%)&lt;BR/&gt; 17745: (0.460829%)&gt;];
}
1612--2761[label="1;108pkt 108fpkt"];
</description>
    <slice>
      <filter src_ip="109.51.68.66"/>
    </slice>
    <from sec="1072933216" usec="0"/>
    <to sec="1072934046" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.81.22.67"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.67"/>
    </slice>
    <from sec="1072933205" usec="0"/>
    <to sec="1072934094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="156.143.162.67"/>
    </slice>
    <from sec="1072933205" usec="0"/>
    <to sec="1072934096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889486,2.05965,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_577{
style=filled;
color=gray75;
852[label="156.143.201.142;d;22pkt 22fpkt", shape=diamond, color=yellow];
869[label="194.1.70.133;s;14pkt 14fpkt", shape=diamond, color=yellow];
1625[label="208.48.40.68;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1961[label="194.1.70.133;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2039[label="200.90.162.146;49pkt 49fpkt", shape=pentagon, color=darkviolet];
2771[label="208.48.40.68;1pkt 1fpkt", shape=invtriangle, color=brown];
3024[label="194.1.70.133;14pkt 14fpkt", shape=invtriangle, color=brown];
3082[label="200.90.162.146;49pkt 49fpkt", shape=invtriangle, color=brown];
3624[label="208.48.40.68;2pkt 2fpkt", shape=invhouse, color=bisque];
3804[label="194.1.70.133;14pkt 14fpkt", shape=invhouse, color=bisque];
stat577[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.90.162.146:80, 152.6.39.203:*}[66.6667%]&lt;BR/&gt;{194.1.70.133:80, 156.143.201.142:*}[20.2899%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.6111%)&lt;BR/&gt; 0: (2.77778%)&lt;BR/&gt; 3688: (1.38889%)&lt;BR/&gt; 3687: (1.38889%)&lt;BR/&gt; 3684: (1.38889%)&gt;];
}
852--869[label="1;14pkt 14fpkt"];
852--1625[label="1;1pkt 1fpkt"];
852--1961[label="1;14pkt 14fpkt"];
852--2039[label="0.136364;3pkt 3fpkt"];
852--2771[label="1;1pkt 1fpkt"];
852--3024[label="1;14pkt 14fpkt"];
852--3082[label="0.136364;3pkt 3fpkt"];
852--3624[label="0.5;1pkt 1fpkt"];
852--3804[label="1;14pkt 14fpkt"];
869--1961[label="1;14pkt 14fpkt"];
869--3024[label="1;14pkt 14fpkt"];
869--3804[label="1;14pkt 14fpkt"];
1625--2771[label="1;1pkt 1fpkt"];
1625--3624[label="1;1pkt 1fpkt"];
1961--3024[label="1;14pkt 14fpkt"];
1961--3804[label="1;14pkt 14fpkt"];
2039--3082[label="1;49pkt 49fpkt"];
2771--3624[label="1;1pkt 1fpkt"];
3024--3804[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="152.6.39.203" src_ip="200.90.162.146" src_port="80"/>
      <filter dst_ip="156.143.201.142" src_ip="194.1.70.133" src_port="80"/>
    </slice>
    <from sec="1072933207" usec="0"/>
    <to sec="1072934096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="111.133.104.68"/>
    </slice>
    <from sec="1072933405" usec="0"/>
    <to sec="1072933674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_579{
style=filled;
color=gray75;
1627[label="209.85.152.68;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2773[label="209.85.152.68;1pkt 1fpkt", shape=invtriangle, color=brown];
stat579[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.85.152.68:1863, 152.6.209.77:1103}[50%]&lt;BR/&gt;{209.85.152.68:1863, 152.6.209.77:2257}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1103: (33.3333%)&lt;BR/&gt; 2257: (16.6667%)&gt;];
}
1627--2773[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="152.6.209.77" dst_port="2257" src_ip="209.85.152.68" src_port="1863"/>
      <filter dst_ip="152.6.209.77" dst_port="1103" src_ip="209.85.152.68" src_port="1863"/>
    </slice>
    <from sec="1072933296" usec="0"/>
    <to sec="1072933599" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_580{
style=filled;
color=gray75;
1628[label="1.4.178.68;223pkt 223fpkt", shape=pentagon, color=darkviolet];
2774[label="1.4.178.68;222pkt 222fpkt", shape=invtriangle, color=brown];
stat580[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.4.178.68:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
1628--2774[label="1;222pkt 222fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="1.4.178.68" src_port="1026"/>
    </slice>
    <from sec="1072933441" usec="0"/>
    <to sec="1072933476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.11.38.69"/>
    </slice>
    <from sec="1072933201" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_582{
style=filled;
color=gray75;
1633[label="193.216.54.69;35pkt 35fpkt", shape=pentagon, color=darkviolet];
2778[label="193.216.54.69;35pkt 35fpkt", shape=invtriangle, color=brown];
stat582[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.216.54.69:*, *:135}[51.4286%]&lt;BR/&gt;{193.216.54.69:*, *:445}[48.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (25.7143%)&lt;BR/&gt; 445: (24.2857%)&lt;BR/&gt; 4644: (1.42857%)&lt;BR/&gt; 4565: (1.42857%)&lt;BR/&gt; 4076: (1.42857%)&gt;];
}
1633--2778[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="193.216.54.69"/>
      <filter dst_port="445" src_ip="193.216.54.69"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.69"/>
    </slice>
    <from sec="1072933209" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_584{
style=filled;
color=gray75;
1635[label="195.40.83.69;197pkt 197fpkt", shape=pentagon, color=darkviolet];
2780[label="195.40.83.69;197pkt 197fpkt", shape=invtriangle, color=brown];
3630[label="195.40.83.69;196pkt 196fpkt", shape=invhouse, color=bisque];
stat584[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.40.83.69:2086, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2086: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
1635--2780[label="1;197pkt 197fpkt"];
1635--3630[label="1;196pkt 196fpkt"];
2780--3630[label="1;196pkt 196fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="195.40.83.69" src_port="2086"/>
    </slice>
    <from sec="1072933327" usec="0"/>
    <to sec="1072933360" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_585{
style=filled;
color=gray75;
1640[label="212.84.42.70;65pkt 65fpkt", shape=pentagon, color=darkviolet];
2782[label="212.84.42.70;65pkt 65fpkt", shape=invtriangle, color=brown];
3632[label="212.84.42.70;64pkt 64fpkt", shape=invhouse, color=bisque];
stat585[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.84.42.70:80, *:*}[52.3077%]&lt;BR/&gt;{212.84.42.70:0, *:0}[47.6923%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (47.4227%)&lt;BR/&gt; 80: (26.2887%)&lt;BR/&gt; 64908: (0.773196%)&lt;BR/&gt; 64509: (0.773196%)&lt;BR/&gt; 64465: (0.773196%)&gt;];
}
1640--2782[label="1;65pkt 65fpkt"];
1640--3632[label="1;64pkt 64fpkt"];
2782--3632[label="1;64pkt 64fpkt"];
</description>
    <slice>
      <filter src_ip="212.84.42.70" src_port="80"/>
      <filter src_ip="212.84.42.70"/>
    </slice>
    <from sec="1072933319" usec="0"/>
    <to sec="1072934069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.70"/>
    </slice>
    <from sec="1072933210" usec="0"/>
    <to sec="1072934097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_587{
style=filled;
color=gray75;
1643[label="193.9.116.70;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2785[label="193.9.116.70;3pkt 3fpkt", shape=invtriangle, color=brown];
3635[label="193.9.116.70;4pkt 4fpkt", shape=invhouse, color=bisque];
stat587[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.9.116.70:5050, 168.55.173.60:64463}[25%]&lt;BR/&gt;{193.9.116.70:5050, 168.55.180.69:1055}[25%]&lt;BR/&gt;{193.9.116.70:23, 168.55.173.136:2648}[25%]&lt;BR/&gt;{193.9.116.70:5050, 168.55.172.215:1074}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (36.3636%)&lt;BR/&gt; 2648: (13.6364%)&lt;BR/&gt; 1074: (13.6364%)&lt;BR/&gt; 1055: (13.6364%)&lt;BR/&gt; 23: (13.6364%)&gt;];
}
1643--2785[label="1;3pkt 3fpkt"];
1643--3635[label="1;4pkt 4fpkt"];
2785--3635[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="168.55.172.215" dst_port="1074" src_ip="193.9.116.70" src_port="5050"/>
      <filter dst_ip="168.55.173.136" dst_port="2648" src_ip="193.9.116.70" src_port="23"/>
      <filter dst_ip="168.55.180.69" dst_port="1055" src_ip="193.9.116.70" src_port="5050"/>
      <filter dst_ip="168.55.173.60" dst_port="64463" src_ip="193.9.116.70" src_port="5050"/>
    </slice>
    <from sec="1072933203" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.124.134.70"/>
    </slice>
    <from sec="1072933265" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_589{
style=filled;
color=gray75;
1648[label="212.84.42.71;55pkt 55fpkt", shape=pentagon, color=darkviolet];
2789[label="212.84.42.71;55pkt 55fpkt", shape=invtriangle, color=brown];
stat589[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.84.42.71:80, *:*}[54.5455%]&lt;BR/&gt;{212.84.42.71:0, *:0}[45.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (45.4545%)&lt;BR/&gt; 80: (27.2727%)&lt;BR/&gt; 4978: (0.909091%)&lt;BR/&gt; 4957: (0.909091%)&lt;BR/&gt; 4875: (0.909091%)&gt;];
}
1648--2789[label="1;55pkt 55fpkt"];
</description>
    <slice>
      <filter src_ip="212.84.42.71" src_port="80"/>
      <filter src_ip="212.84.42.71"/>
    </slice>
    <from sec="1072933227" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.71"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_591{
style=filled;
color=gray75;
1650[label="193.9.116.71;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2791[label="193.9.116.71;1pkt 1fpkt", shape=invtriangle, color=brown];
stat591[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.9.116.71:5050, 168.55.138.134:1105}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (50%)&lt;BR/&gt; 1105: (50%)&gt;];
}
1650--2791[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.55.138.134" dst_port="1105" src_ip="193.9.116.71" src_port="5050"/>
    </slice>
    <from sec="1072933203" usec="0"/>
    <to sec="1072934089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_593{
style=filled;
color=gray75;
1653[label="7.110.192.71;48pkt 48fpkt", shape=pentagon, color=darkviolet];
2794[label="7.110.192.71;47pkt 47fpkt", shape=invtriangle, color=brown];
stat593[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.110.192.71:*, *:445}[52.0833%]&lt;BR/&gt;{7.110.192.71:*, *:135}[47.9167%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (26.3158%)&lt;BR/&gt; 135: (23.6842%)&lt;BR/&gt; 4639: (1.05263%)&lt;BR/&gt; 4637: (1.05263%)&lt;BR/&gt; 4278: (1.05263%)&gt;];
}
1653--2794[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="7.110.192.71"/>
      <filter dst_port="135" src_ip="7.110.192.71"/>
    </slice>
    <from sec="1072933236" usec="0"/>
    <to sec="1072934076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_594{
style=filled;
color=gray75;
1655[label="171.193.218.71;105pkt 105fpkt", shape=pentagon, color=darkviolet];
2795[label="171.193.218.71;104pkt 104fpkt", shape=invtriangle, color=brown];
stat594[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.193.218.71:0, *:0}[86.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (86.6029%)&lt;BR/&gt; 80: (6.69856%)&lt;BR/&gt; 59654: (0.478469%)&lt;BR/&gt; 58254: (0.478469%)&lt;BR/&gt; 58239: (0.478469%)&gt;];
}
1655--2795[label="1;104pkt 104fpkt"];
</description>
    <slice>
      <filter src_ip="171.193.218.71"/>
    </slice>
    <from sec="1072933260" usec="0"/>
    <to sec="1072934041" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889486,2.05965,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_595{
style=filled;
color=gray75;
782[label="156.143.227.100;d;89pkt 89fpkt", shape=diamond, color=yellow];
1618[label="194.1.66.67;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2150[label="200.236.100.171;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2310[label="196.123.150.212;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2315[label="196.123.150.213;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2765[label="194.1.66.67;5pkt 5fpkt", shape=invtriangle, color=brown];
3620[label="194.1.66.67;5pkt 5fpkt", shape=invhouse, color=bisque];
stat595[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 156.143.227.100:*}[64.5161%]&lt;BR/&gt;{*:53, 156.143.227.100:32770}[21.5054%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.5854%)&lt;BR/&gt; 32770: (8.13008%)&lt;BR/&gt; 53: (8.13008%)&lt;BR/&gt; 8080: (5.28455%)&lt;BR/&gt; 36361: (1.62602%)&gt;];
}
782--1618[label="1;6pkt 6fpkt"];
782--1656[label="0.0555556;1pkt 1fpkt"];
782--2150[label="0.5;4pkt 4fpkt"];
782--2250[label="0.0227273;1pkt 1fpkt"];
782--2310[label="1;8pkt 8fpkt"];
782--2315[label="1;2pkt 2fpkt"];
782--2765[label="1;5pkt 5fpkt"];
782--2796[label="0.0555556;1pkt 1fpkt"];
782--3620[label="1;5pkt 5fpkt"];
782--3639[label="0.0555556;1pkt 1fpkt"];
1618--2765[label="1;5pkt 5fpkt"];
1618--3620[label="1;5pkt 5fpkt"];
2765--3620[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="156.143.227.100" src_port="80"/>
      <filter dst_ip="156.143.227.100" dst_port="32770" src_port="53"/>
    </slice>
    <from sec="1072933234" usec="0"/>
    <to sec="1072934086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3296,2.10519,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_596{
style=filled;
color=gray75;
701[label="130.195.107.138;d;70pkt 70fpkt", shape=diamond, color=yellow];
740[label="130.195.108.207;d;84pkt 84fpkt", shape=diamond, color=yellow];
781[label="209.207.249.53;s;13pkt 13fpkt", shape=diamond, color=yellow];
1081[label="209.207.249.53;s;13pkt 13fpkt", shape=hexagon, color=black];
1457[label="209.207.250.37;17pkt 17fpkt", shape=pentagon, color=darkviolet];
1638[label="193.179.140.69;94pkt 94fpkt", shape=pentagon, color=darkviolet];
1660[label="193.179.140.72;51pkt 51fpkt", shape=pentagon, color=darkviolet];
2643[label="209.207.250.37;17pkt 17fpkt", shape=invtriangle, color=brown];
2800[label="193.179.140.72;50pkt 50fpkt", shape=invtriangle, color=brown];
3643[label="193.179.140.72;51pkt 51fpkt", shape=invhouse, color=bisque];
stat596[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.179.140.69:80, 130.195.107.138:*}[46.6321%]&lt;BR/&gt;{193.179.140.72:80, 130.195.108.207:*}[25.3886%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.6087%)&lt;BR/&gt; 443: (7.28261%)&lt;BR/&gt; 5617: (0.434783%)&lt;BR/&gt; 5615: (0.434783%)&lt;BR/&gt; 5614: (0.434783%)&gt;];
}
701--851[label="0.0151515;1pkt 1fpkt"];
701--1638[label="0.757143;53pkt 53fpkt"];
740--781[label="1;13pkt 13fpkt"];
740--1081[label="1;13pkt 13fpkt"];
740--1457[label="1;17pkt 17fpkt"];
740--1638[label="0.047619;4pkt 4fpkt"];
740--1660[label="0.960784;49pkt 49fpkt"];
740--2643[label="1;17pkt 17fpkt"];
740--2800[label="0.96;48pkt 48fpkt"];
740--3643[label="0.960784;49pkt 49fpkt"];
781--1081[label="1;13pkt 13fpkt"];
1457--2643[label="1;17pkt 17fpkt"];
1660--2800[label="1;50pkt 50fpkt"];
1660--3643[label="1;51pkt 51fpkt"];
2800--3643[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter dst_ip="130.195.107.138" src_ip="193.179.140.69" src_port="80"/>
      <filter dst_ip="130.195.108.207" src_ip="193.179.140.72" src_port="80"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_597{
style=filled;
color=gray75;
1661[label="90.114.175.72;43pkt 43fpkt", shape=pentagon, color=darkviolet];
2801[label="90.114.175.72;43pkt 43fpkt", shape=invtriangle, color=brown];
3644[label="90.114.175.72;42pkt 42fpkt", shape=invhouse, color=bisque];
stat597[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.114.175.72:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4705: (1.17188%)&lt;BR/&gt; 4647: (1.17188%)&lt;BR/&gt; 4274: (1.17188%)&lt;BR/&gt; 4123: (1.17188%)&gt;];
}
1661--2801[label="1;43pkt 43fpkt"];
1661--3644[label="1;42pkt 42fpkt"];
2801--3644[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="90.114.175.72"/>
    </slice>
    <from sec="1072933203" usec="0"/>
    <to sec="1072934051" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_598{
style=filled;
color=gray75;
1662[label="200.55.201.72;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2802[label="200.55.201.72;1pkt 1fpkt", shape=invtriangle, color=brown];
3645[label="200.55.201.72;1pkt 1fpkt", shape=invhouse, color=bisque];
stat598[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.55.201.72:3934, 213.117.7.62:8106}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8106: (50%)&lt;BR/&gt; 3934: (50%)&gt;];
}
1662--2802[label="1;1pkt 1fpkt"];
1662--3645[label="1;1pkt 1fpkt"];
2802--3645[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.117.7.62" dst_port="8106" src_ip="200.55.201.72" src_port="3934"/>
    </slice>
    <from sec="1072933645" usec="0"/>
    <to sec="1072933805" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_599{
style=filled;
color=gray75;
1667[label="130.230.137.73;160pkt 160fpkt", shape=pentagon, color=darkviolet];
2805[label="130.230.137.73;160pkt 160fpkt", shape=invtriangle, color=brown];
3647[label="130.230.137.73;160pkt 160fpkt", shape=invhouse, color=bisque];
stat599[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.230.137.73:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1667--2805[label="1;160pkt 160fpkt"];
1667--3647[label="1;160pkt 160fpkt"];
2805--3647[label="1;160pkt 160fpkt"];
</description>
    <slice>
      <filter src_ip="130.230.137.73"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_600{
style=filled;
color=gray75;
1674[label="196.68.20.75;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2811[label="196.68.20.75;2pkt 2fpkt", shape=invtriangle, color=brown];
3650[label="196.68.20.75;1pkt 1fpkt", shape=invhouse, color=bisque];
stat600[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.68.20.75:1367, 152.6.39.203:4662}[50%]&lt;BR/&gt;{196.68.20.75:4672, 152.6.39.203:4672}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (37.5%)&lt;BR/&gt; 1367: (37.5%)&lt;BR/&gt; 4672: (25%)&gt;];
}
1674--2811[label="1;1pkt 1fpkt"];
1674--3650[label="1;1pkt 1fpkt"];
2811--3650[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="152.6.39.203" dst_port="4672" src_ip="196.68.20.75" src_port="4672"/>
      <filter dst_ip="152.6.39.203" dst_port="4662" src_ip="196.68.20.75" src_port="1367"/>
    </slice>
    <from sec="1072933828" usec="0"/>
    <to sec="1072933935" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_601{
style=filled;
color=gray75;
1675[label="108.2.81.75;111pkt 111fpkt", shape=pentagon, color=darkviolet];
2812[label="108.2.81.75;111pkt 111fpkt", shape=invtriangle, color=brown];
stat601[shape=component, label=&lt;Rules:&lt;BR/&gt;{108.2.81.75:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1675--2812[label="1;111pkt 111fpkt"];
</description>
    <slice>
      <filter src_ip="108.2.81.75"/>
    </slice>
    <from sec="1072933215" usec="0"/>
    <to sec="1072934088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_602{
style=filled;
color=gray75;
1685[label="156.143.232.76;12pkt 12fpkt", shape=pentagon, color=darkviolet];
2816[label="156.143.232.76;11pkt 11fpkt", shape=invtriangle, color=brown];
3654[label="156.143.232.76;12pkt 12fpkt", shape=invhouse, color=bisque];
stat602[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.143.232.76:80, 131.220.204.185:*}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 47910: (4.28571%)&lt;BR/&gt; 47866: (4.28571%)&lt;BR/&gt; 47812: (4.28571%)&lt;BR/&gt; 47811: (4.28571%)&gt;];
}
1685--2816[label="1;11pkt 11fpkt"];
1685--3654[label="1;12pkt 12fpkt"];
2816--3654[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="131.220.204.185" src_ip="156.143.232.76" src_port="80"/>
    </slice>
    <from sec="1072933222" usec="0"/>
    <to sec="1072934062" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.77"/>
    </slice>
    <from sec="1072933208" usec="0"/>
    <to sec="1072934096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_604{
style=filled;
color=gray75;
1690[label="194.135.97.78;195pkt 195fpkt", shape=pentagon, color=darkviolet];
2821[label="194.135.97.78;194pkt 194fpkt", shape=invtriangle, color=brown];
3656[label="194.135.97.78;195pkt 195fpkt", shape=invhouse, color=bisque];
stat604[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.135.97.78:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 50943: (0.256849%)&lt;BR/&gt; 50940: (0.256849%)&lt;BR/&gt; 50937: (0.256849%)&lt;BR/&gt; 50934: (0.256849%)&gt;];
}
1690--2821[label="1;194pkt 194fpkt"];
1690--3656[label="1;195pkt 195fpkt"];
2821--3656[label="1;194pkt 194fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.135.97.78"/>
    </slice>
    <from sec="1072934016" usec="0"/>
    <to sec="1072934047" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_605{
style=filled;
color=gray75;
1693[label="194.212.4.79;144pkt 144fpkt", shape=pentagon, color=darkviolet];
2823[label="194.212.4.79;144pkt 144fpkt", shape=invtriangle, color=brown];
3658[label="194.212.4.79;144pkt 144fpkt", shape=invhouse, color=bisque];
stat605[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.212.4.79:0, *:0}[97.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.2222%)&lt;BR/&gt; 80: (1.38889%)&lt;BR/&gt; 58286: (0.347222%)&lt;BR/&gt; 51310: (0.347222%)&lt;BR/&gt; 47130: (0.347222%)&gt;];
}
1693--2823[label="1;144pkt 144fpkt"];
1693--3658[label="1;144pkt 144fpkt"];
2823--3658[label="1;144pkt 144fpkt"];
</description>
    <slice>
      <filter src_ip="194.212.4.79"/>
    </slice>
    <from sec="1072933225" usec="0"/>
    <to sec="1072934078" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.80"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_607{
style=filled;
color=gray75;
1700[label="212.84.42.81;31pkt 31fpkt", shape=pentagon, color=darkviolet];
2828[label="212.84.42.81;31pkt 31fpkt", shape=invtriangle, color=brown];
3661[label="212.84.42.81;31pkt 31fpkt", shape=invhouse, color=bisque];
stat607[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.84.42.81:80, 6.44.183.76:*}[93.5484%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 38116: (1.6129%)&lt;BR/&gt; 38115: (1.6129%)&lt;BR/&gt; 4815: (1.6129%)&lt;BR/&gt; 4778: (1.6129%)&gt;];
}
1700--2828[label="1;31pkt 31fpkt"];
1700--3661[label="1;31pkt 31fpkt"];
2828--3661[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="6.44.183.76" src_ip="212.84.42.81" src_port="80"/>
    </slice>
    <from sec="1072933202" usec="0"/>
    <to sec="1072934069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.81"/>
    </slice>
    <from sec="1072933207" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_609{
style=filled;
color=gray75;
1705[label="111.197.156.81;119pkt 119fpkt", shape=pentagon, color=darkviolet];
2832[label="111.197.156.81;118pkt 118fpkt", shape=invtriangle, color=brown];
stat609[shape=component, label=&lt;Rules:&lt;BR/&gt;{111.197.156.81:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1705--2832[label="1;118pkt 118fpkt"];
</description>
    <slice>
      <filter src_ip="111.197.156.81"/>
    </slice>
    <from sec="1072933306" usec="0"/>
    <to sec="1072934013" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_610{
style=filled;
color=gray75;
1708[label="5.132.208.81;64pkt 64fpkt", shape=pentagon, color=darkviolet];
2834[label="5.132.208.81;63pkt 63fpkt", shape=invtriangle, color=brown];
3664[label="5.132.208.81;64pkt 64fpkt", shape=invhouse, color=bisque];
stat610[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.132.208.81:*, *:135}[51.5625%]&lt;BR/&gt;{5.132.208.81:*, *:445}[48.4375%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (25.6545%)&lt;BR/&gt; 445: (24.3455%)&lt;BR/&gt; 4883: (1.57068%)&lt;BR/&gt; 4669: (1.57068%)&lt;BR/&gt; 4315: (1.57068%)&gt;];
}
1708--2834[label="1;63pkt 63fpkt"];
1708--3664[label="1;64pkt 64fpkt"];
2834--3664[label="1;63pkt 63fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="5.132.208.81"/>
      <filter dst_port="445" src_ip="5.132.208.81"/>
    </slice>
    <from sec="1072933233" usec="0"/>
    <to sec="1072934096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.82"/>
    </slice>
    <from sec="1072933212" usec="0"/>
    <to sec="1072934097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_612{
style=filled;
color=gray75;
1711[label="209.85.157.82;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2836[label="209.85.157.82;2pkt 2fpkt", shape=invtriangle, color=brown];
3666[label="209.85.157.82;3pkt 3fpkt", shape=invhouse, color=bisque];
stat612[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.85.157.82:1863, 130.195.182.10:3030}[33.3333%]&lt;BR/&gt;{209.85.157.82:1863, 173.165.192.56:2399}[33.3333%]&lt;BR/&gt;{209.85.157.82:1863, 130.195.221.96:4356}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3030: (18.75%)&lt;BR/&gt; 2399: (18.75%)&lt;BR/&gt; 4356: (12.5%)&gt;];
}
1711--2836[label="1;2pkt 2fpkt"];
1711--3666[label="1;3pkt 3fpkt"];
2836--3666[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="130.195.221.96" dst_port="4356" src_ip="209.85.157.82" src_port="1863"/>
      <filter dst_ip="173.165.192.56" dst_port="2399" src_ip="209.85.157.82" src_port="1863"/>
      <filter dst_ip="130.195.182.10" dst_port="3030" src_ip="209.85.157.82" src_port="1863"/>
    </slice>
    <from sec="1072933224" usec="0"/>
    <to sec="1072934088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.83"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_615{
style=filled;
color=gray75;
1717[label="194.143.182.83;186pkt 186fpkt", shape=pentagon, color=darkviolet];
2840[label="194.143.182.83;185pkt 185fpkt", shape=invtriangle, color=brown];
3669[label="194.143.182.83;186pkt 186fpkt", shape=invhouse, color=bisque];
stat615[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.143.182.83:44159, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 44159: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
1717--2840[label="1;185pkt 185fpkt"];
1717--3669[label="1;186pkt 186fpkt"];
2840--3669[label="1;185pkt 185fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.143.182.83" src_port="44159"/>
    </slice>
    <from sec="1072933422" usec="0"/>
    <to sec="1072933450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_616{
style=filled;
color=gray75;
1718[label="7.82.198.83;37pkt 37fpkt", shape=pentagon, color=darkviolet];
2841[label="7.82.198.83;36pkt 36fpkt", shape=invtriangle, color=brown];
stat616[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.82.198.83:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4989: (1.36986%)&lt;BR/&gt; 4979: (1.36986%)&lt;BR/&gt; 4835: (1.36986%)&lt;BR/&gt; 4806: (1.36986%)&gt;];
}
1718--2841[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="7.82.198.83"/>
    </slice>
    <from sec="1072933214" usec="0"/>
    <to sec="1072934084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.138.175.84"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934065" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.85"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_619{
style=filled;
color=gray75;
1725[label="193.56.80.85;56pkt 56fpkt", shape=pentagon, color=darkviolet];
2847[label="193.56.80.85;55pkt 55fpkt", shape=invtriangle, color=brown];
3673[label="193.56.80.85;56pkt 56fpkt", shape=invhouse, color=bisque];
stat619[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.56.80.85:*, 156.143.196.159:113}[48.2143%]&lt;BR/&gt;{193.56.80.85:25, 156.143.196.159:*}[48.2143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (24.2515%)&lt;BR/&gt; 25: (24.2515%)&lt;BR/&gt; 53: (1.49701%)&lt;BR/&gt; 58173: (0.898204%)&lt;BR/&gt; 58172: (0.898204%)&gt;];
}
1725--2847[label="1;55pkt 55fpkt"];
1725--3673[label="1;56pkt 56fpkt"];
2847--3673[label="1;55pkt 55fpkt"];
</description>
    <slice>
      <filter dst_ip="156.143.196.159" src_ip="193.56.80.85" src_port="25"/>
      <filter dst_ip="156.143.196.159" dst_port="113" src_ip="193.56.80.85"/>
    </slice>
    <from sec="1072933626" usec="0"/>
    <to sec="1072933633" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_620{
style=filled;
color=gray75;
1728[label="201.222.164.85;42pkt 42fpkt", shape=pentagon, color=darkviolet];
2850[label="201.222.164.85;41pkt 41fpkt", shape=invtriangle, color=brown];
stat620[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.222.164.85:*, *:445}[52.381%]&lt;BR/&gt;{201.222.164.85:*, *:135}[47.619%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (26.506%)&lt;BR/&gt; 135: (23.494%)&lt;BR/&gt; 4776: (1.20482%)&lt;BR/&gt; 4762: (1.20482%)&lt;BR/&gt; 4378: (1.20482%)&gt;];
}
1728--2850[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="201.222.164.85"/>
      <filter dst_port="135" src_ip="201.222.164.85"/>
    </slice>
    <from sec="1072933203" usec="0"/>
    <to sec="1072934096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_621{
style=filled;
color=gray75;
1729[label="212.2.166.85;115pkt 115fpkt", shape=pentagon, color=darkviolet];
2851[label="212.2.166.85;114pkt 114fpkt", shape=invtriangle, color=brown];
stat621[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.2.166.85:2011, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2011: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
1729--2851[label="1;114pkt 114fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="212.2.166.85" src_port="2011"/>
    </slice>
    <from sec="1072933597" usec="0"/>
    <to sec="1072934058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_622{
style=filled;
color=gray75;
1730[label="111.227.184.85;226pkt 226fpkt", shape=pentagon, color=darkviolet];
2852[label="111.227.184.85;225pkt 225fpkt", shape=invtriangle, color=brown];
3676[label="111.227.184.85;226pkt 226fpkt", shape=invhouse, color=bisque];
stat622[shape=component, label=&lt;Rules:&lt;BR/&gt;{111.227.184.85:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
1730--2852[label="1;225pkt 225fpkt"];
1730--3676[label="1;226pkt 226fpkt"];
2852--3676[label="1;225pkt 225fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="111.227.184.85" src_port="1029"/>
    </slice>
    <from sec="1072933861" usec="0"/>
    <to sec="1072933897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_623{
style=filled;
color=gray75;
1731[label="201.83.225.85;46pkt 46fpkt", shape=pentagon, color=darkviolet];
2853[label="201.83.225.85;45pkt 45fpkt", shape=invtriangle, color=brown];
3677[label="201.83.225.85;45pkt 45fpkt", shape=invhouse, color=bisque];
stat623[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.83.225.85:0, *:0}[97.8261%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.7941%)&lt;BR/&gt; 11002: (1.10294%)&lt;BR/&gt; 179: (1.10294%)&gt;];
}
1731--2853[label="1;45pkt 45fpkt"];
1731--3677[label="1;45pkt 45fpkt"];
2853--3677[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter src_ip="201.83.225.85"/>
    </slice>
    <from sec="1072933204" usec="0"/>
    <to sec="1072934092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.86"/>
    </slice>
    <from sec="1072933212" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_625{
style=filled;
color=gray75;
1738[label="7.80.214.86;95pkt 95fpkt", shape=pentagon, color=darkviolet];
2859[label="7.80.214.86;94pkt 94fpkt", shape=invtriangle, color=brown];
3683[label="7.80.214.86;94pkt 94fpkt", shape=invhouse, color=bisque];
stat625[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.80.214.86:0, *:0}[65.2632%]&lt;BR/&gt;{7.80.214.86:*, *:135}[34.7368%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (65.0177%)&lt;BR/&gt; 135: (17.4912%)&lt;BR/&gt; 2155: (1.06007%)&lt;BR/&gt; 4772: (0.530035%)&lt;BR/&gt; 4454: (0.530035%)&gt;];
}
1738--2859[label="1;94pkt 94fpkt"];
1738--3683[label="1;94pkt 94fpkt"];
2859--3683[label="1;94pkt 94fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="7.80.214.86"/>
      <filter src_ip="7.80.214.86"/>
    </slice>
    <from sec="1072933220" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_626{
style=filled;
color=gray75;
1741[label="7.110.161.87;83pkt 83fpkt", shape=pentagon, color=darkviolet];
2862[label="7.110.161.87;82pkt 82fpkt", shape=invtriangle, color=brown];
3686[label="7.110.161.87;82pkt 82fpkt", shape=invhouse, color=bisque];
stat626[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.110.161.87:*, *:445}[54.2169%]&lt;BR/&gt;{7.110.161.87:*, *:135}[45.7831%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (27.3279%)&lt;BR/&gt; 135: (22.6721%)&lt;BR/&gt; 4347: (1.21457%)&lt;BR/&gt; 4138: (1.21457%)&lt;BR/&gt; 3453: (1.21457%)&gt;];
}
1741--2862[label="1;82pkt 82fpkt"];
1741--3686[label="1;82pkt 82fpkt"];
2862--3686[label="1;82pkt 82fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="7.110.161.87"/>
      <filter dst_port="135" src_ip="7.110.161.87"/>
    </slice>
    <from sec="1072933209" usec="0"/>
    <to sec="1072934048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_627{
style=filled;
color=gray75;
1743[label="212.84.9.88;180pkt 180fpkt", shape=pentagon, color=darkviolet];
2864[label="212.84.9.88;179pkt 179fpkt", shape=invtriangle, color=brown];
3687[label="212.84.9.88;179pkt 179fpkt", shape=invhouse, color=bisque];
stat627[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.84.9.88:0, *:0}[97.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.7695%)&lt;BR/&gt; 80: (1.11524%)&lt;BR/&gt; 50787: (0.27881%)&lt;BR/&gt; 8719: (0.27881%)&lt;BR/&gt; 3134: (0.27881%)&gt;];
}
1743--2864[label="1;179pkt 179fpkt"];
1743--3687[label="1;179pkt 179fpkt"];
2864--3687[label="1;179pkt 179fpkt"];
</description>
    <slice>
      <filter src_ip="212.84.9.88"/>
    </slice>
    <from sec="1072933204" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_628{
style=filled;
color=gray75;
1749[label="5.221.238.88;65pkt 65fpkt", shape=pentagon, color=darkviolet];
2868[label="5.221.238.88;64pkt 64fpkt", shape=invtriangle, color=brown];
stat628[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.221.238.88:*, *:445}[52.3077%]&lt;BR/&gt;{5.221.238.88:*, *:135}[47.6923%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (26.3566%)&lt;BR/&gt; 135: (23.6434%)&lt;BR/&gt; 3107: (1.55039%)&lt;BR/&gt; 1225: (1.55039%)&lt;BR/&gt; 4996: (0.775194%)&gt;];
}
1749--2868[label="1;64pkt 64fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="5.221.238.88"/>
      <filter dst_port="135" src_ip="5.221.238.88"/>
    </slice>
    <from sec="1072933204" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.89"/>
    </slice>
    <from sec="1072933207" usec="0"/>
    <to sec="1072934094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.43.86.89"/>
    </slice>
    <from sec="1072933202" usec="0"/>
    <to sec="1072934073" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_631{
style=filled;
color=gray75;
1753[label="211.66.109.89;171pkt 171fpkt", shape=pentagon, color=darkviolet];
2872[label="211.66.109.89;170pkt 170fpkt", shape=invtriangle, color=brown];
3693[label="211.66.109.89;171pkt 171fpkt", shape=invhouse, color=bisque];
stat631[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.66.109.89:0, *:0}[95.3216%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.3125%)&lt;BR/&gt; 80: (1.46484%)&lt;BR/&gt; 135: (0.878906%)&lt;BR/&gt; 24518: (0.292969%)&lt;BR/&gt; 21698: (0.292969%)&gt;];
}
1753--2872[label="1;170pkt 170fpkt"];
1753--3693[label="1;171pkt 171fpkt"];
2872--3693[label="1;170pkt 170fpkt"];
</description>
    <slice>
      <filter src_ip="211.66.109.89"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,501,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_632{
style=filled;
color=gray75;
1754[label="203.141.132.89;20pkt 20fpkt", shape=pentagon, color=darkviolet];
2873[label="203.141.132.89;19pkt 19fpkt", shape=invtriangle, color=brown];
stat632[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.141.132.89:21, 168.55.208.151:*}[50%]&lt;BR/&gt;{203.141.132.89:21, 168.55.132.212:*}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (50%)&lt;BR/&gt; 1099: (5.12821%)&lt;BR/&gt; 1097: (5.12821%)&lt;BR/&gt; 1087: (3.84615%)&lt;BR/&gt; 33512: (2.5641%)&gt;];
}
1754--2873[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="168.55.208.151" src_ip="203.141.132.89" src_port="21"/>
      <filter dst_ip="168.55.132.212" src_ip="203.141.132.89" src_port="21"/>
    </slice>
    <from sec="1072933202" usec="0"/>
    <to sec="1072933464" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_633{
style=filled;
color=gray75;
1762[label="212.84.9.91;258pkt 258fpkt", shape=pentagon, color=darkviolet];
2878[label="212.84.9.91;257pkt 257fpkt", shape=invtriangle, color=brown];
3697[label="212.84.9.91;257pkt 257fpkt", shape=invhouse, color=bisque];
stat633[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.84.9.91:0, *:0}[96.8992%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.8912%)&lt;BR/&gt; 80: (1.1658%)&lt;BR/&gt; 135: (0.388601%)&lt;BR/&gt; 17066: (0.194301%)&lt;BR/&gt; 4514: (0.194301%)&gt;];
}
1762--2878[label="1;257pkt 257fpkt"];
1762--3697[label="1;257pkt 257fpkt"];
2878--3697[label="1;257pkt 257fpkt"];
</description>
    <slice>
      <filter src_ip="212.84.9.91"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.91"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_635{
style=filled;
color=gray75;
1772[label="152.160.132.92;43pkt 43fpkt", shape=pentagon, color=darkviolet];
2884[label="152.160.132.92;42pkt 42fpkt", shape=invtriangle, color=brown];
stat635[shape=component, label=&lt;Rules:&lt;BR/&gt;{152.160.132.92:25, *:*}[34.8837%]&lt;BR/&gt;{152.160.132.92:*, *:113}[32.5581%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (17.0588%)&lt;BR/&gt; 113: (16.4706%)&lt;BR/&gt; 53: (15.2941%)&lt;BR/&gt; 65534: (5.88235%)&lt;BR/&gt; 0: (2.35294%)&gt;];
}
1772--2884[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter src_ip="152.160.132.92" src_port="25"/>
      <filter dst_port="113" src_ip="152.160.132.92"/>
    </slice>
    <from sec="1072933205" usec="0"/>
    <to sec="1072934069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.6.51.93"/>
    </slice>
    <from sec="1072933512" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.93"/>
    </slice>
    <from sec="1072933209" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.94"/>
    </slice>
    <from sec="1072933210" usec="0"/>
    <to sec="1072934094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_639{
style=filled;
color=gray75;
1780[label="193.9.116.94;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2892[label="193.9.116.94;2pkt 2fpkt", shape=invtriangle, color=brown];
3707[label="193.9.116.94;1pkt 1fpkt", shape=invhouse, color=bisque];
stat639[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.9.116.94:5050, 130.195.105.75:1050}[50%]&lt;BR/&gt;{193.9.116.94:5050, 168.55.239.80:1118}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (50%)&lt;BR/&gt; 1050: (30%)&lt;BR/&gt; 1118: (20%)&gt;];
}
1780--2892[label="1;2pkt 2fpkt"];
1780--3707[label="1;1pkt 1fpkt"];
2892--3707[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.55.239.80" dst_port="1118" src_ip="193.9.116.94" src_port="5050"/>
      <filter dst_ip="130.195.105.75" dst_port="1050" src_ip="193.9.116.94" src_port="5050"/>
    </slice>
    <from sec="1072933277" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_640{
style=filled;
color=gray75;
1781[label="213.229.137.94;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2893[label="213.229.137.94;3pkt 3fpkt", shape=invtriangle, color=brown];
3708[label="213.229.137.94;3pkt 3fpkt", shape=invhouse, color=bisque];
stat640[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.229.137.94:3166, 212.84.23.174:80}[25%]&lt;BR/&gt;{213.229.137.94:3168, 212.84.23.174:80}[25%]&lt;BR/&gt;{213.229.137.94:4977, 212.84.23.174:80}[25%]&lt;BR/&gt;{213.229.137.94:4979, 212.84.23.174:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4979: (15%)&lt;BR/&gt; 3168: (15%)&lt;BR/&gt; 3166: (15%)&lt;BR/&gt; 4977: (5%)&gt;];
}
1781--2893[label="1;3pkt 3fpkt"];
1781--3708[label="1;3pkt 3fpkt"];
2893--3708[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="212.84.23.174" dst_port="80" src_ip="213.229.137.94" src_port="4979"/>
      <filter dst_ip="212.84.23.174" dst_port="80" src_ip="213.229.137.94" src_port="4977"/>
      <filter dst_ip="212.84.23.174" dst_port="80" src_ip="213.229.137.94" src_port="3168"/>
      <filter dst_ip="212.84.23.174" dst_port="80" src_ip="213.229.137.94" src_port="3166"/>
    </slice>
    <from sec="1072933439" usec="0"/>
    <to sec="1072933835" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_641{
style=filled;
color=gray75;
1783[label="194.42.219.94;140pkt 140fpkt", shape=pentagon, color=darkviolet];
2895[label="194.42.219.94;139pkt 139fpkt", shape=invtriangle, color=brown];
3710[label="194.42.219.94;139pkt 139fpkt", shape=invhouse, color=bisque];
stat641[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.42.219.94:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
1783--2895[label="1;139pkt 139fpkt"];
1783--3710[label="1;139pkt 139fpkt"];
2895--3710[label="1;139pkt 139fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.42.219.94" src_port="1030"/>
    </slice>
    <from sec="1072933789" usec="0"/>
    <to sec="1072933803" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_642{
style=filled;
color=gray75;
1787[label="7.108.129.95;51pkt 51fpkt", shape=pentagon, color=darkviolet];
2897[label="7.108.129.95;51pkt 51fpkt", shape=invtriangle, color=brown];
3712[label="7.108.129.95;50pkt 50fpkt", shape=invhouse, color=bisque];
stat642[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.108.129.95:*, *:135}[50.9804%]&lt;BR/&gt;{7.108.129.95:*, *:445}[49.0196%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (25.3289%)&lt;BR/&gt; 445: (24.6711%)&lt;BR/&gt; 3364: (1.97368%)&lt;BR/&gt; 4950: (0.986842%)&lt;BR/&gt; 4914: (0.986842%)&gt;];
}
1787--2897[label="1;51pkt 51fpkt"];
1787--3712[label="1;50pkt 50fpkt"];
2897--3712[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="7.108.129.95"/>
      <filter dst_port="445" src_ip="7.108.129.95"/>
    </slice>
    <from sec="1072933232" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889486,2.05965,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_643{
style=filled;
color=gray75;
464[label="194.203.17.8;s;124pkt 124fpkt", shape=diamond, color=yellow];
489[label="173.165.60.196;d;261pkt 261fpkt", shape=diamond, color=yellow];
767[label="156.143.144.43;d;227pkt 227fpkt", shape=diamond, color=yellow];
1260[label="111.214.57.3;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1305[label="6.99.209.8;11pkt 11fpkt", shape=pentagon, color=darkviolet];
1341[label="194.203.17.15;25pkt 25fpkt", shape=pentagon, color=darkviolet];
1790[label="6.86.21.96;37pkt 37fpkt", shape=pentagon, color=darkviolet];
1799[label="209.85.74.97;25pkt 25fpkt", shape=pentagon, color=darkviolet];
1964[label="202.119.171.133;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2170[label="209.34.76.177;38pkt 38fpkt", shape=pentagon, color=darkviolet];
2480[label="111.214.57.3;1pkt 1fpkt", shape=invtriangle, color=brown];
2519[label="6.99.209.8;11pkt 11fpkt", shape=invtriangle, color=brown];
2544[label="194.203.17.15;25pkt 25fpkt", shape=invtriangle, color=brown];
2900[label="6.86.21.96;36pkt 36fpkt", shape=invtriangle, color=brown];
3026[label="202.119.171.133;4pkt 4fpkt", shape=invtriangle, color=brown];
3182[label="209.34.76.177;38pkt 38fpkt", shape=invtriangle, color=brown];
3715[label="6.86.21.96;37pkt 37fpkt", shape=invhouse, color=bisque];
3805[label="202.119.171.133;5pkt 5fpkt", shape=invhouse, color=bisque];
3910[label="209.34.76.177;37pkt 37fpkt", shape=invhouse, color=bisque];
stat643[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 173.165.60.196:*}[45.4073%]&lt;BR/&gt;{*:80, 156.143.144.43:*}[38.9948%]&lt;BR/&gt;{194.203.17.8:80, *:*}[21.4905%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8418%)&lt;BR/&gt; 16803: (0.21097%)&lt;BR/&gt; 16750: (0.21097%)&lt;BR/&gt; 16742: (0.21097%)&lt;BR/&gt; 16737: (0.21097%)&gt;];
}
464--767[label="0.887097;110pkt 110fpkt"];
489--612[label="0.00383142;1pkt 1fpkt"];
489--678[label="0.00854701;1pkt 1fpkt"];
489--692[label="0.0298507;2pkt 2fpkt"];
489--714[label="0.0232558;1pkt 1fpkt"];
489--851[label="0.030303;2pkt 2fpkt"];
489--1029[label="0.00854701;1pkt 1fpkt"];
489--1260[label="1;1pkt 1fpkt"];
489--1275[label="0.0169492;2pkt 2fpkt"];
489--1305[label="0.0909091;1pkt 1fpkt"];
489--1320[label="0.0454545;1pkt 1fpkt"];
489--1341[label="0.04;1pkt 1fpkt"];
489--1602[label="0.0625;1pkt 1fpkt"];
489--1771[label="0.0212766;1pkt 1fpkt"];
489--1790[label="1;37pkt 37fpkt"];
489--1799[label="0.04;1pkt 1fpkt"];
489--1859[label="0.025;2pkt 2fpkt"];
489--1888[label="0.00383142;1pkt 1fpkt"];
489--1964[label="0.2;1pkt 1fpkt"];
489--2170[label="0.0263158;1pkt 1fpkt"];
489--2480[label="1;1pkt 1fpkt"];
489--2494[label="0.0169492;2pkt 2fpkt"];
489--2519[label="0.0909091;1pkt 1fpkt"];
489--2531[label="0.0434783;1pkt 1fpkt"];
489--2544[label="0.04;1pkt 1fpkt"];
489--2752[label="0.0625;1pkt 1fpkt"];
489--2900[label="1;36pkt 36fpkt"];
489--2949[label="0.0126582;1pkt 1fpkt"];
489--2973[label="0.00383142;1pkt 1fpkt"];
489--3026[label="0.25;1pkt 1fpkt"];
489--3182[label="0.0263158;1pkt 1fpkt"];
489--3414[label="0.0169492;2pkt 2fpkt"];
489--3443[label="0.0434783;1pkt 1fpkt"];
489--3612[label="0.0625;1pkt 1fpkt"];
489--3715[label="1;37pkt 37fpkt"];
489--3766[label="0.00383142;1pkt 1fpkt"];
489--3805[label="0.2;1pkt 1fpkt"];
767--796[label="0.00440529;1pkt 1fpkt"];
767--1341[label="0.96;24pkt 24fpkt"];
767--2544[label="0.96;24pkt 24fpkt"];
1260--2480[label="1;1pkt 1fpkt"];
1305--2519[label="1;11pkt 11fpkt"];
1341--2544[label="1;25pkt 25fpkt"];
1790--2900[label="1;36pkt 36fpkt"];
1790--3715[label="1;37pkt 37fpkt"];
1964--3026[label="1;4pkt 4fpkt"];
1964--3805[label="1;5pkt 5fpkt"];
2170--3182[label="1;38pkt 38fpkt"];
2170--3910[label="1;37pkt 37fpkt"];
2900--3715[label="1;36pkt 36fpkt"];
3026--3805[label="1;4pkt 4fpkt"];
3182--3910[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter src_ip="194.203.17.8" src_port="80"/>
      <filter dst_ip="173.165.60.196" src_port="80"/>
      <filter dst_ip="156.143.144.43" src_port="80"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.96"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_645{
style=filled;
color=gray75;
1794[label="90.113.147.96;72pkt 72fpkt", shape=pentagon, color=darkviolet];
2903[label="90.113.147.96;71pkt 71fpkt", shape=invtriangle, color=brown];
3718[label="90.113.147.96;71pkt 71fpkt", shape=invhouse, color=bisque];
stat645[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.113.147.96:*, *:445}[55.5556%]&lt;BR/&gt;{90.113.147.96:0, *:0}[38.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (38.3178%)&lt;BR/&gt; 445: (28.0374%)&lt;BR/&gt; 80: (2.80374%)&lt;BR/&gt; 4977: (0.700935%)&lt;BR/&gt; 4961: (0.700935%)&gt;];
}
1794--2903[label="1;71pkt 71fpkt"];
1794--3718[label="1;71pkt 71fpkt"];
2903--3718[label="1;71pkt 71fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="90.113.147.96"/>
      <filter src_ip="90.113.147.96"/>
    </slice>
    <from sec="1072933204" usec="0"/>
    <to sec="1072934094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.29.1.97"/>
    </slice>
    <from sec="1072933640" usec="0"/>
    <to sec="1072933661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.97"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_648{
style=filled;
color=gray75;
1801[label="90.107.99.97;41pkt 41fpkt", shape=pentagon, color=darkviolet];
2907[label="90.107.99.97;41pkt 41fpkt", shape=invtriangle, color=brown];
stat648[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.107.99.97:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4957: (1.21951%)&lt;BR/&gt; 4908: (1.21951%)&lt;BR/&gt; 4749: (1.21951%)&lt;BR/&gt; 4718: (1.21951%)&gt;];
}
1801--2907[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="90.107.99.97"/>
    </slice>
    <from sec="1072933205" usec="0"/>
    <to sec="1072933533" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.244.144.97"/>
    </slice>
    <from sec="1072933204" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_650{
style=filled;
color=gray75;
1804[label="7.85.166.97;41pkt 41fpkt", shape=pentagon, color=darkviolet];
2910[label="7.85.166.97;40pkt 40fpkt", shape=invtriangle, color=brown];
3721[label="7.85.166.97;41pkt 41fpkt", shape=invhouse, color=bisque];
stat650[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.85.166.97:*, *:445}[51.2195%]&lt;BR/&gt;{7.85.166.97:*, *:135}[48.7805%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.8197%)&lt;BR/&gt; 135: (24.1803%)&lt;BR/&gt; 4945: (1.22951%)&lt;BR/&gt; 4890: (1.22951%)&lt;BR/&gt; 4681: (1.22951%)&gt;];
}
1804--2910[label="1;40pkt 40fpkt"];
1804--3721[label="1;41pkt 41fpkt"];
2910--3721[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="7.85.166.97"/>
      <filter dst_port="135" src_ip="7.85.166.97"/>
    </slice>
    <from sec="1072933213" usec="0"/>
    <to sec="1072934059" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.98"/>
    </slice>
    <from sec="1072933208" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="23.107.145.98"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="108.47.201.98"/>
    </slice>
    <from sec="1072933224" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_654{
style=filled;
color=gray75;
1812[label="6.99.209.98;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2916[label="6.99.209.98;3pkt 3fpkt", shape=invtriangle, color=brown];
3727[label="6.99.209.98;4pkt 4fpkt", shape=invhouse, color=bisque];
stat654[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.99.209.98:80, 156.143.192.10:2573}[25%]&lt;BR/&gt;{6.99.209.98:80, 156.143.192.10:2574}[25%]&lt;BR/&gt;{6.99.209.98:80, 130.195.106.50:3464}[25%]&lt;BR/&gt;{6.99.209.98:80, 130.195.106.50:3466}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3466: (13.6364%)&lt;BR/&gt; 3464: (13.6364%)&lt;BR/&gt; 2574: (13.6364%)&lt;BR/&gt; 2573: (9.09091%)&gt;];
}
1812--2916[label="1;3pkt 3fpkt"];
1812--3727[label="1;4pkt 4fpkt"];
2916--3727[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="130.195.106.50" dst_port="3466" src_ip="6.99.209.98" src_port="80"/>
      <filter dst_ip="130.195.106.50" dst_port="3464" src_ip="6.99.209.98" src_port="80"/>
      <filter dst_ip="156.143.192.10" dst_port="2574" src_ip="6.99.209.98" src_port="80"/>
      <filter dst_ip="156.143.192.10" dst_port="2573" src_ip="6.99.209.98" src_port="80"/>
    </slice>
    <from sec="1072934049" usec="0"/>
    <to sec="1072934052" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_655{
style=filled;
color=gray75;
1815[label="1.80.21.99;184pkt 184fpkt", shape=pentagon, color=darkviolet];
2918[label="1.80.21.99;184pkt 184fpkt", shape=invtriangle, color=brown];
stat655[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.80.21.99:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
1815--2918[label="1;184pkt 184fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="1.80.21.99" src_port="1027"/>
    </slice>
    <from sec="1072933659" usec="0"/>
    <to sec="1072933696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_656{
style=filled;
color=gray75;
1818[label="193.18.165.99;21pkt 21fpkt", shape=pentagon, color=darkviolet];
2920[label="193.18.165.99;21pkt 21fpkt", shape=invtriangle, color=brown];
3729[label="193.18.165.99;21pkt 21fpkt", shape=invhouse, color=bisque];
stat656[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.18.165.99:*, *:25}[61.9048%]&lt;BR/&gt;{193.18.165.99:53, *:53}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (33.3333%)&lt;BR/&gt; 25: (30.9524%)&lt;BR/&gt; 65306: (2.38095%)&lt;BR/&gt; 22951: (2.38095%)&lt;BR/&gt; 22721: (2.38095%)&gt;];
}
1818--2920[label="1;21pkt 21fpkt"];
1818--3729[label="1;21pkt 21fpkt"];
2920--3729[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="193.18.165.99"/>
      <filter dst_port="53" src_ip="193.18.165.99" src_port="53"/>
    </slice>
    <from sec="1072934036" usec="0"/>
    <to sec="1072934070" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889486,2.05965,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_657{
style=filled;
color=gray75;
939[label="156.143.58.50;d;26pkt 26fpkt", shape=diamond, color=yellow];
943[label="6.44.180.85;s;13pkt 13fpkt", shape=diamond, color=yellow];
1819[label="193.179.136.100;52pkt 52fpkt", shape=pentagon, color=darkviolet];
2921[label="193.179.136.100;51pkt 51fpkt", shape=invtriangle, color=brown];
3730[label="193.179.136.100;51pkt 51fpkt", shape=invhouse, color=bisque];
stat657[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 156.143.58.50:*}[41.791%]&lt;BR/&gt;{193.179.136.100:80, 156.142.46.209:*}[38.806%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2506: (1.03627%)&lt;BR/&gt; 2498: (1.03627%)&lt;BR/&gt; 2496: (1.03627%)&lt;BR/&gt; 2492: (1.03627%)&gt;];
}
939--943[label="1;13pkt 13fpkt"];
939--1819[label="0.423077;11pkt 11fpkt"];
939--2921[label="0.423077;11pkt 11fpkt"];
939--3730[label="0.423077;11pkt 11fpkt"];
1819--2921[label="1;51pkt 51fpkt"];
1819--3730[label="1;51pkt 51fpkt"];
2921--3730[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter dst_ip="156.143.58.50" src_port="80"/>
      <filter dst_ip="156.142.46.209" src_ip="193.179.136.100" src_port="80"/>
    </slice>
    <from sec="1072933300" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.106.201.101"/>
    </slice>
    <from sec="1072933405" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.102"/>
    </slice>
    <from sec="1072933209" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.17.184.102"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_661{
style=filled;
color=gray75;
1828[label="156.143.237.102;322pkt 322fpkt", shape=pentagon, color=darkviolet];
2926[label="156.143.237.102;320pkt 320fpkt", shape=invtriangle, color=brown];
3733[label="156.143.237.102;320pkt 320fpkt", shape=invhouse, color=bisque];
stat661[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.143.237.102:0, *:0}[98.7578%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.7526%)&lt;BR/&gt; 80: (0.623701%)&lt;BR/&gt; 35434: (0.155925%)&lt;BR/&gt; 35433: (0.155925%)&lt;BR/&gt; 35429: (0.155925%)&gt;];
}
1828--2926[label="1;320pkt 320fpkt"];
1828--3733[label="1;320pkt 320fpkt"];
2926--3733[label="1;320pkt 320fpkt"];
</description>
    <slice>
      <filter src_ip="156.143.237.102"/>
    </slice>
    <from sec="1072933235" usec="0"/>
    <to sec="1072934078" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.104"/>
    </slice>
    <from sec="1072933207" usec="0"/>
    <to sec="1072934094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.120.128.104"/>
    </slice>
    <from sec="1072933216" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_664{
style=filled;
color=gray75;
1834[label="193.2.132.104;171pkt 171fpkt", shape=pentagon, color=darkviolet];
2931[label="193.2.132.104;170pkt 170fpkt", shape=invtriangle, color=brown];
stat664[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.2.132.104:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
1834--2931[label="1;170pkt 170fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="193.2.132.104" src_port="1028"/>
    </slice>
    <from sec="1072933309" usec="0"/>
    <to sec="1072933336" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_665{
style=filled;
color=gray75;
1836[label="130.230.137.105;166pkt 166fpkt", shape=pentagon, color=darkviolet];
2932[label="130.230.137.105;165pkt 165fpkt", shape=invtriangle, color=brown];
3738[label="130.230.137.105;165pkt 165fpkt", shape=invhouse, color=bisque];
stat665[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.230.137.105:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1836--2932[label="1;165pkt 165fpkt"];
1836--3738[label="1;165pkt 165fpkt"];
2932--3738[label="1;165pkt 165fpkt"];
</description>
    <slice>
      <filter src_ip="130.230.137.105"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3296,2.10519,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_666{
style=filled;
color=gray75;
363[label="130.195.107.243;d;30pkt 30fpkt", shape=diamond, color=yellow];
364[label="194.215.93.195;s;2pkt 2fpkt", shape=diamond, color=yellow];
648[label="4.110.198.77;s;1pkt 1fpkt", shape=diamond, color=yellow];
915[label="194.157.188.40;s;1pkt 1fpkt", shape=diamond, color=yellow];
1016[label="194.215.93.195;s;2pkt 2fpkt", shape=hexagon, color=black];
1157[label="194.157.188.40;s;1pkt 1fpkt", shape=hexagon, color=black];
1839[label="194.151.206.105;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2249[label="194.215.93.195;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2935[label="194.151.206.105;1pkt 1fpkt", shape=invtriangle, color=brown];
3237[label="194.215.93.195;2pkt 2fpkt", shape=invtriangle, color=brown];
3741[label="194.151.206.105;1pkt 1fpkt", shape=invhouse, color=bisque];
stat666[shape=component, label=&lt;Rules:&lt;BR/&gt;{111.238.66.26:*, 130.195.107.243:*}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9154: (11.3636%)&lt;BR/&gt; 8881: (11.3636%)&lt;BR/&gt; 8882: (9.09091%)&lt;BR/&gt; 7802: (5.68182%)&lt;BR/&gt; 3306: (5.68182%)&gt;];
}
363--364[label="1;2pkt 2fpkt"];
363--648[label="1;1pkt 1fpkt"];
363--915[label="1;1pkt 1fpkt"];
363--1016[label="1;2pkt 2fpkt"];
363--1157[label="1;1pkt 1fpkt"];
363--1839[label="1;1pkt 1fpkt"];
363--2249[label="1;2pkt 2fpkt"];
363--2935[label="1;1pkt 1fpkt"];
363--3237[label="1;2pkt 2fpkt"];
363--3741[label="1;1pkt 1fpkt"];
364--1016[label="1;2pkt 2fpkt"];
364--2249[label="1;2pkt 2fpkt"];
364--3237[label="1;2pkt 2fpkt"];
915--1157[label="1;1pkt 1fpkt"];
1016--2249[label="1;2pkt 2fpkt"];
1016--3237[label="1;2pkt 2fpkt"];
1839--2935[label="1;1pkt 1fpkt"];
1839--3741[label="1;1pkt 1fpkt"];
2249--3237[label="1;2pkt 2fpkt"];
2935--3741[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.195.107.243" src_ip="111.238.66.26"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_667{
style=filled;
color=gray75;
1840[label="4.110.213.105;94pkt 94fpkt", shape=pentagon, color=darkviolet];
2936[label="4.110.213.105;94pkt 94fpkt", shape=invtriangle, color=brown];
stat667[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.110.213.105:0, *:0}[96.8085%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.8085%)&lt;BR/&gt; 135: (1.59574%)&lt;BR/&gt; 3754: (0.531915%)&lt;BR/&gt; 1836: (0.531915%)&lt;BR/&gt; 1368: (0.531915%)&gt;];
}
1840--2936[label="1;94pkt 94fpkt"];
</description>
    <slice>
      <filter src_ip="4.110.213.105"/>
    </slice>
    <from sec="1072933203" usec="0"/>
    <to sec="1072934093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_668{
style=filled;
color=gray75;
1842[label="5.81.11.106;114pkt 114fpkt", shape=pentagon, color=darkviolet];
2937[label="5.81.11.106;113pkt 113fpkt", shape=invtriangle, color=brown];
3742[label="5.81.11.106;113pkt 113fpkt", shape=invhouse, color=bisque];
stat668[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.81.11.106:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1842--2937[label="1;113pkt 113fpkt"];
1842--3742[label="1;113pkt 113fpkt"];
2937--3742[label="1;113pkt 113fpkt"];
</description>
    <slice>
      <filter src_ip="5.81.11.106"/>
    </slice>
    <from sec="1072933214" usec="0"/>
    <to sec="1072933968" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.106"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3296,2.10519,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_671{
style=filled;
color=gray75;
313[label="173.165.186.224;d;110pkt 110fpkt", shape=diamond, color=yellow];
498[label="152.6.26.173;d;38pkt 38fpkt", shape=diamond, color=yellow];
499[label="5.29.11.165;s;5pkt 5fpkt", shape=diamond, color=yellow];
578[label="152.6.226.15;d;71pkt 71fpkt", shape=diamond, color=yellow];
580[label="4.62.170.95;s;38pkt 38fpkt", shape=diamond, color=yellow];
1010[label="5.29.11.165;s;4pkt 4fpkt", shape=hexagon, color=black];
1464[label="5.29.49.39;37pkt 37fpkt", shape=pentagon, color=darkviolet];
1704[label="209.34.82.81;41pkt 41fpkt", shape=pentagon, color=darkviolet];
1766[label="4.62.179.91;11pkt 11fpkt", shape=pentagon, color=darkviolet];
1788[label="4.62.170.95;39pkt 39fpkt", shape=pentagon, color=darkviolet];
1851[label="209.34.80.107;46pkt 46fpkt", shape=pentagon, color=darkviolet];
2180[label="4.62.170.179;30pkt 30fpkt", shape=pentagon, color=darkviolet];
2649[label="5.29.49.39;38pkt 38fpkt", shape=invtriangle, color=brown];
2831[label="209.34.82.81;40pkt 40fpkt", shape=invtriangle, color=brown];
2881[label="4.62.179.91;10pkt 10fpkt", shape=invtriangle, color=brown];
2898[label="4.62.170.95;39pkt 39fpkt", shape=invtriangle, color=brown];
2942[label="209.34.80.107;45pkt 45fpkt", shape=invtriangle, color=brown];
3189[label="4.62.170.179;30pkt 30fpkt", shape=invtriangle, color=brown];
3537[label="5.29.49.39;37pkt 37fpkt", shape=invhouse, color=bisque];
3663[label="209.34.82.81;41pkt 41fpkt", shape=invhouse, color=bisque];
3713[label="4.62.170.95;39pkt 39fpkt", shape=invhouse, color=bisque];
3746[label="209.34.80.107;46pkt 46fpkt", shape=invhouse, color=bisque];
3885[label="5.29.11.165;8pkt 8fpkt", shape=invhouse, color=bisque];
stat671[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 173.165.186.224:*}[39.4928%]&lt;BR/&gt;{*:80, 152.6.226.15:*}[25.3623%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8221%)&lt;BR/&gt; 1293: (0.474496%)&lt;BR/&gt; 1401: (0.415184%)&lt;BR/&gt; 1211: (0.415184%)&lt;BR/&gt; 4020: (0.355872%)&gt;];
}
313--454[label="0.00909091;1pkt 1fpkt"];
313--580[label="0.947368;36pkt 36fpkt"];
313--1414[label="0.00909091;1pkt 1fpkt"];
313--1646[label="0.09375;3pkt 3fpkt"];
313--1704[label="0.0731707;3pkt 3fpkt"];
313--1766[label="0.272727;3pkt 3fpkt"];
313--1788[label="0.923077;36pkt 36fpkt"];
313--1851[label="0.5;23pkt 23fpkt"];
313--2180[label="0.966667;29pkt 29fpkt"];
313--2606[label="0.00909091;1pkt 1fpkt"];
313--2831[label="0.075;3pkt 3fpkt"];
313--2881[label="0.3;3pkt 3fpkt"];
313--2898[label="0.923077;36pkt 36fpkt"];
313--2942[label="0.511111;23pkt 23fpkt"];
313--3189[label="0.966667;29pkt 29fpkt"];
313--3503[label="0.00909091;1pkt 1fpkt"];
313--3663[label="0.0731707;3pkt 3fpkt"];
313--3713[label="0.923077;36pkt 36fpkt"];
313--3746[label="0.5;23pkt 23fpkt"];
498--499[label="1;5pkt 5fpkt"];
498--1010[label="1;4pkt 4fpkt"];
498--1646[label="0.0625;2pkt 2fpkt"];
498--1704[label="0.0263158;1pkt 1fpkt"];
498--1766[label="0.272727;3pkt 3fpkt"];
498--1851[label="0.236842;9pkt 9fpkt"];
498--2022[label="0.0645161;2pkt 2fpkt"];
498--2831[label="0.0263158;1pkt 1fpkt"];
498--2881[label="0.3;3pkt 3fpkt"];
498--2942[label="0.236842;9pkt 9fpkt"];
498--3071[label="0.0666667;2pkt 2fpkt"];
498--3663[label="0.0263158;1pkt 1fpkt"];
498--3746[label="0.236842;9pkt 9fpkt"];
498--3834[label="0.0666667;2pkt 2fpkt"];
498--3885[label="1;8pkt 8fpkt"];
499--3885[label="1;5pkt 5fpkt"];
578--1464[label="1;37pkt 37fpkt"];
578--1851[label="0.0652174;3pkt 3fpkt"];
578--2022[label="0.0645161;2pkt 2fpkt"];
578--2649[label="1;38pkt 38fpkt"];
578--2942[label="0.0666667;3pkt 3fpkt"];
578--3071[label="0.0666667;2pkt 2fpkt"];
578--3537[label="1;37pkt 37fpkt"];
578--3746[label="0.0652174;3pkt 3fpkt"];
578--3834[label="0.0666667;2pkt 2fpkt"];
580--1788[label="1;38pkt 38fpkt"];
580--2898[label="1;38pkt 38fpkt"];
580--3713[label="1;38pkt 38fpkt"];
1010--3885[label="0.75;3pkt 3fpkt"];
1464--2649[label="1;37pkt 37fpkt"];
1464--3537[label="1;37pkt 37fpkt"];
1704--2831[label="1;40pkt 40fpkt"];
1704--3663[label="1;41pkt 41fpkt"];
1766--2881[label="1;10pkt 10fpkt"];
1788--2898[label="1;39pkt 39fpkt"];
1788--3713[label="1;39pkt 39fpkt"];
1851--2942[label="1;45pkt 45fpkt"];
1851--3746[label="1;46pkt 46fpkt"];
2180--3189[label="1;30pkt 30fpkt"];
2649--3537[label="1;37pkt 37fpkt"];
2831--3663[label="1;40pkt 40fpkt"];
2898--3713[label="1;39pkt 39fpkt"];
2942--3746[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter dst_ip="173.165.186.224" src_port="80"/>
      <filter dst_ip="152.6.226.15" src_port="80"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.108"/>
    </slice>
    <from sec="1072933208" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.99.209.108"/>
    </slice>
    <from sec="1072933256" usec="0"/>
    <to sec="1072934024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.109"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.66.22.110"/>
    </slice>
    <from sec="1072933239" usec="0"/>
    <to sec="1072933393" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.110"/>
    </slice>
    <from sec="1072933210" usec="0"/>
    <to sec="1072934097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889486,2.05965,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_677{
style=filled;
color=gray75;
594[label="22.220.154.110;s;291pkt 291fpkt", shape=diamond, color=yellow];
663[label="152.6.88.198;d;304pkt 304fpkt", shape=diamond, color=yellow];
1639[label="193.138.174.69;6pkt 6fpkt", shape=pentagon, color=darkviolet];
1863[label="22.220.154.110;306pkt 306fpkt", shape=pentagon, color=darkviolet];
2952[label="22.220.154.110;306pkt 306fpkt", shape=invtriangle, color=brown];
3753[label="22.220.154.110;306pkt 306fpkt", shape=invhouse, color=bisque];
stat677[shape=component, label=&lt;Rules:&lt;BR/&gt;{22.220.154.110:*, 152.6.88.198:80}[95.9375%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8354%)&lt;BR/&gt; 0: (0.329164%)&lt;BR/&gt; 57854: (0.164582%)&lt;BR/&gt; 57853: (0.164582%)&lt;BR/&gt; 57852: (0.164582%)&gt;];
}
594--663[label="1;291pkt 291fpkt"];
594--1222[label="0.0309278;9pkt 9fpkt"];
594--1863[label="0.996564;290pkt 290fpkt"];
594--2952[label="0.996564;290pkt 290fpkt"];
594--3753[label="0.996564;290pkt 290fpkt"];
663--1222[label="0.0296053;9pkt 9fpkt"];
663--1639[label="1;6pkt 6fpkt"];
663--1863[label="0.953947;290pkt 290fpkt"];
663--2952[label="0.953947;290pkt 290fpkt"];
663--3753[label="0.953947;290pkt 290fpkt"];
1863--2952[label="1;306pkt 306fpkt"];
1863--3753[label="1;306pkt 306fpkt"];
2952--3753[label="1;306pkt 306fpkt"];
</description>
    <slice>
      <filter dst_ip="152.6.88.198" dst_port="80" src_ip="22.220.154.110"/>
    </slice>
    <from sec="1072933205" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.111"/>
    </slice>
    <from sec="1072933210" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_679{
style=filled;
color=gray75;
1867[label="1.3.182.111;198pkt 198fpkt", shape=pentagon, color=darkviolet];
2955[label="1.3.182.111;197pkt 197fpkt", shape=invtriangle, color=brown];
3755[label="1.3.182.111;198pkt 198fpkt", shape=invhouse, color=bisque];
stat679[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.3.182.111:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
1867--2955[label="1;197pkt 197fpkt"];
1867--3755[label="1;198pkt 198fpkt"];
2955--3755[label="1;197pkt 197fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="1.3.182.111" src_port="1025"/>
    </slice>
    <from sec="1072933323" usec="0"/>
    <to sec="1072933357" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.112"/>
    </slice>
    <from sec="1072933208" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_681{
style=filled;
color=gray75;
1870[label="111.216.52.113;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2958[label="111.216.52.113;10pkt 10fpkt", shape=invtriangle, color=brown];
stat681[shape=component, label=&lt;Rules:&lt;BR/&gt;{111.216.52.113:80, 130.195.58.135:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1278: (5%)&lt;BR/&gt; 1276: (5%)&lt;BR/&gt; 1275: (5%)&lt;BR/&gt; 1267: (5%)&gt;];
}
1870--2958[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="130.195.58.135" src_ip="111.216.52.113" src_port="80"/>
    </slice>
    <from sec="1072933256" usec="0"/>
    <to sec="1072934045" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.113"/>
    </slice>
    <from sec="1072933210" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_683{
style=filled;
color=gray75;
1873[label="109.16.46.114;226pkt 226fpkt", shape=pentagon, color=darkviolet];
2961[label="109.16.46.114;226pkt 226fpkt", shape=invtriangle, color=brown];
3758[label="109.16.46.114;225pkt 225fpkt", shape=invhouse, color=bisque];
stat683[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.16.46.114:0, *:0}[99.5575%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.5569%)&lt;BR/&gt; 58760: (0.221566%)&lt;BR/&gt; 80: (0.221566%)&gt;];
}
1873--2961[label="1;226pkt 226fpkt"];
1873--3758[label="1;225pkt 225fpkt"];
2961--3758[label="1;225pkt 225fpkt"];
</description>
    <slice>
      <filter src_ip="109.16.46.114"/>
    </slice>
    <from sec="1072933215" usec="0"/>
    <to sec="1072934086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,501,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_684{
style=filled;
color=gray75;
1874[label="193.245.70.114;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2962[label="193.245.70.114;11pkt 11fpkt", shape=invtriangle, color=brown];
3759[label="193.245.70.114;10pkt 10fpkt", shape=invhouse, color=bisque];
stat684[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.245.70.114:21, *:*}[36.3636%]&lt;BR/&gt;{193.245.70.114:*, 173.165.186.9:*}[27.2727%]&lt;BR/&gt;{193.245.70.114:*, 173.165.241.74:*}[27.2727%]&lt;BR/&gt;{193.245.70.114:*, 173.165.201.107:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (17.1875%)&lt;BR/&gt; 33218: (4.6875%)&lt;BR/&gt; 23703: (4.6875%)&lt;BR/&gt; 23649: (4.6875%)&lt;BR/&gt; 17241: (4.6875%)&gt;];
}
1874--2962[label="1;11pkt 11fpkt"];
1874--3759[label="1;10pkt 10fpkt"];
2962--3759[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="173.165.201.107" src_ip="193.245.70.114"/>
      <filter dst_ip="173.165.241.74" src_ip="193.245.70.114"/>
      <filter dst_ip="173.165.186.9" src_ip="193.245.70.114"/>
      <filter src_ip="193.245.70.114" src_port="21"/>
    </slice>
    <from sec="1072933202" usec="0"/>
    <to sec="1072933807" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_685{
style=filled;
color=gray75;
1875[label="200.212.137.114;55pkt 55fpkt", shape=pentagon, color=darkviolet];
2963[label="200.212.137.114;54pkt 54fpkt", shape=invtriangle, color=brown];
3760[label="200.212.137.114;54pkt 54fpkt", shape=invhouse, color=bisque];
stat685[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.212.137.114:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4851: (0.920245%)&lt;BR/&gt; 4816: (0.920245%)&lt;BR/&gt; 4794: (0.920245%)&lt;BR/&gt; 4772: (0.920245%)&gt;];
}
1875--2963[label="1;54pkt 54fpkt"];
1875--3760[label="1;54pkt 54fpkt"];
2963--3760[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="200.212.137.114"/>
    </slice>
    <from sec="1072933230" usec="0"/>
    <to sec="1072934097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889486,2.05965,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_686{
style=filled;
color=gray75;
883[label="156.143.233.114;s;178pkt 178fpkt", shape=diamond, color=yellow];
1876[label="156.143.233.114;185pkt 185fpkt", shape=pentagon, color=darkviolet];
2964[label="156.143.233.114;184pkt 184fpkt", shape=invtriangle, color=brown];
3761[label="156.143.233.114;184pkt 184fpkt", shape=invhouse, color=bisque];
stat686[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.143.233.114:63171, *:53}[48.9247%]&lt;BR/&gt;{156.143.233.114:*, *:25}[28.4946%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (26.0602%)&lt;BR/&gt; 63171: (24.6922%)&lt;BR/&gt; 25: (18.5363%)&lt;BR/&gt; 113: (5.40356%)&lt;BR/&gt; 57894: (0.273598%)&gt;];
}
883--1221[label="0.0280899;5pkt 5fpkt"];
883--1876[label="0.994382;177pkt 177fpkt"];
883--2964[label="0.988764;176pkt 176fpkt"];
883--3761[label="0.988764;176pkt 176fpkt"];
1876--2964[label="1;184pkt 184fpkt"];
1876--3761[label="1;184pkt 184fpkt"];
2964--3761[label="1;184pkt 184fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="156.143.233.114"/>
      <filter dst_port="53" src_ip="156.143.233.114" src_port="63171"/>
    </slice>
    <from sec="1072933201" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_687{
style=filled;
color=gray75;
1878[label="90.119.4.115;57pkt 57fpkt", shape=pentagon, color=darkviolet];
2965[label="90.119.4.115;57pkt 57fpkt", shape=invtriangle, color=brown];
3762[label="90.119.4.115;56pkt 56fpkt", shape=invhouse, color=bisque];
stat687[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.119.4.115:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4240: (1.76471%)&lt;BR/&gt; 4997: (0.882353%)&lt;BR/&gt; 4905: (0.882353%)&lt;BR/&gt; 4899: (0.882353%)&gt;];
}
1878--2965[label="1;57pkt 57fpkt"];
1878--3762[label="1;56pkt 56fpkt"];
2965--3762[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="90.119.4.115"/>
    </slice>
    <from sec="1072933261" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_688{
style=filled;
color=gray75;
1879[label="193.76.68.115;250pkt 250fpkt", shape=pentagon, color=darkviolet];
2966[label="193.76.68.115;250pkt 250fpkt", shape=invtriangle, color=brown];
stat688[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.76.68.115:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
1879--2966[label="1;250pkt 250fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="193.76.68.115" src_port="1025"/>
    </slice>
    <from sec="1072933303" usec="0"/>
    <to sec="1072933342" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_689{
style=filled;
color=gray75;
1881[label="200.96.88.115;88pkt 88fpkt", shape=pentagon, color=darkviolet];
2968[label="200.96.88.115;88pkt 88fpkt", shape=invtriangle, color=brown];
3763[label="200.96.88.115;87pkt 87fpkt", shape=invhouse, color=bisque];
stat689[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.96.88.115:*, *:135}[50%]&lt;BR/&gt;{200.96.88.115:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.0951%)&lt;BR/&gt; 135: (24.9049%)&lt;BR/&gt; 4738: (0.570342%)&lt;BR/&gt; 4730: (0.570342%)&lt;BR/&gt; 4705: (0.570342%)&gt;];
}
1881--2968[label="1;88pkt 88fpkt"];
1881--3763[label="1;87pkt 87fpkt"];
2968--3763[label="1;87pkt 87fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="200.96.88.115"/>
      <filter dst_port="135" src_ip="200.96.88.115"/>
    </slice>
    <from sec="1072933263" usec="0"/>
    <to sec="1072933990" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_690{
style=filled;
color=gray75;
1882[label="193.21.123.115;309pkt 309fpkt", shape=pentagon, color=darkviolet];
2969[label="193.21.123.115;309pkt 309fpkt", shape=invtriangle, color=brown];
3764[label="193.21.123.115;308pkt 308fpkt", shape=invhouse, color=bisque];
stat690[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.21.123.115:0, *:0}[94.1748%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.1685%)&lt;BR/&gt; 135: (1.45788%)&lt;BR/&gt; 80: (1.45788%)&lt;BR/&gt; 63755: (0.161987%)&lt;BR/&gt; 62430: (0.161987%)&gt;];
}
1882--2969[label="1;309pkt 309fpkt"];
1882--3764[label="1;308pkt 308fpkt"];
2969--3764[label="1;308pkt 308fpkt"];
</description>
    <slice>
      <filter src_ip="193.21.123.115"/>
    </slice>
    <from sec="1072933213" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.116"/>
    </slice>
    <from sec="1072933210" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_692{
style=filled;
color=gray75;
1892[label="204.135.227.118;64pkt 64fpkt", shape=pentagon, color=darkviolet];
2975[label="204.135.227.118;64pkt 64fpkt", shape=invtriangle, color=brown];
3768[label="204.135.227.118;64pkt 64fpkt", shape=invhouse, color=bisque];
stat692[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.135.227.118:*, 156.142.90.151:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2443: (0.78125%)&lt;BR/&gt; 2441: (0.78125%)&lt;BR/&gt; 2437: (0.78125%)&lt;BR/&gt; 2435: (0.78125%)&gt;];
}
1892--2975[label="1;64pkt 64fpkt"];
1892--3768[label="1;64pkt 64fpkt"];
2975--3768[label="1;64pkt 64fpkt"];
</description>
    <slice>
      <filter dst_ip="156.142.90.151" dst_port="80" src_ip="204.135.227.118"/>
    </slice>
    <from sec="1072933450" usec="0"/>
    <to sec="1072933505" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.117.75.119"/>
    </slice>
    <from sec="1072933565" usec="0"/>
    <to sec="1072933716" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_694{
style=filled;
color=gray75;
1896[label="197.156.221.119;124pkt 124fpkt", shape=pentagon, color=darkviolet];
2978[label="197.156.221.119;123pkt 123fpkt", shape=invtriangle, color=brown];
3771[label="197.156.221.119;123pkt 123fpkt", shape=invhouse, color=bisque];
stat694[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.156.221.119:1048, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1048: (50%)&gt;];
}
1896--2978[label="1;123pkt 123fpkt"];
1896--3771[label="1;123pkt 123fpkt"];
2978--3771[label="1;123pkt 123fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="197.156.221.119" src_port="1048"/>
    </slice>
    <from sec="1072933213" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_695{
style=filled;
color=gray75;
1897[label="0.12.10.120;167pkt 167fpkt", shape=pentagon, color=darkviolet];
2979[label="0.12.10.120;167pkt 167fpkt", shape=invtriangle, color=brown];
3772[label="0.12.10.120;166pkt 166fpkt", shape=invhouse, color=bisque];
stat695[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.12.10.120:60123, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60123: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
1897--2979[label="1;167pkt 167fpkt"];
1897--3772[label="1;166pkt 166fpkt"];
2979--3772[label="1;166pkt 166fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="0.12.10.120" src_port="60123"/>
    </slice>
    <from sec="1072933527" usec="0"/>
    <to sec="1072933554" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.120"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.121"/>
    </slice>
    <from sec="1072933212" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.88.71.122"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_700{
style=filled;
color=gray75;
1910[label="209.85.152.122;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2990[label="209.85.152.122;4pkt 4fpkt", shape=invtriangle, color=brown];
3780[label="209.85.152.122;3pkt 3fpkt", shape=invhouse, color=bisque];
stat700[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.85.152.122:1863, 130.195.221.50:3015}[25%]&lt;BR/&gt;{209.85.152.122:1863, 130.195.221.58:3074}[25%]&lt;BR/&gt;{209.85.152.122:1863, 130.195.221.58:3075}[25%]&lt;BR/&gt;{209.85.152.122:1863, 130.195.221.58:3078}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3078: (13.6364%)&lt;BR/&gt; 3075: (13.6364%)&lt;BR/&gt; 3074: (13.6364%)&lt;BR/&gt; 3015: (9.09091%)&gt;];
}
1910--2990[label="1;4pkt 4fpkt"];
1910--3780[label="1;3pkt 3fpkt"];
2990--3780[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="130.195.221.58" dst_port="3078" src_ip="209.85.152.122" src_port="1863"/>
      <filter dst_ip="130.195.221.58" dst_port="3075" src_ip="209.85.152.122" src_port="1863"/>
      <filter dst_ip="130.195.221.58" dst_port="3074" src_ip="209.85.152.122" src_port="1863"/>
      <filter dst_ip="130.195.221.50" dst_port="3015" src_ip="209.85.152.122" src_port="1863"/>
    </slice>
    <from sec="1072934017" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_701{
style=filled;
color=gray75;
1912[label="219.3.224.122;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2992[label="219.3.224.122;2pkt 2fpkt", shape=invtriangle, color=brown];
stat701[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.3.224.122:3056, 156.142.64.142:41001}[50%]&lt;BR/&gt;{219.3.224.122:44885, 156.142.64.142:44812}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 44885: (25%)&lt;BR/&gt; 44812: (25%)&lt;BR/&gt; 41001: (25%)&lt;BR/&gt; 3056: (25%)&gt;];
}
1912--2992[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="156.142.64.142" dst_port="44812" src_ip="219.3.224.122" src_port="44885"/>
      <filter dst_ip="156.142.64.142" dst_port="41001" src_ip="219.3.224.122" src_port="3056"/>
    </slice>
    <from sec="1072933201" usec="0"/>
    <to sec="1072934080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_702{
style=filled;
color=gray75;
1917[label="90.106.164.123;47pkt 47fpkt", shape=pentagon, color=darkviolet];
2995[label="90.106.164.123;47pkt 47fpkt", shape=invtriangle, color=brown];
stat702[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.106.164.123:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4859: (1.06383%)&lt;BR/&gt; 4702: (1.06383%)&lt;BR/&gt; 4292: (1.06383%)&lt;BR/&gt; 4266: (1.06383%)&gt;];
}
1917--2995[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="90.106.164.123"/>
    </slice>
    <from sec="1072933369" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.56.41.124"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_704{
style=filled;
color=gray75;
1923[label="109.109.204.124;124pkt 124fpkt", shape=pentagon, color=darkviolet];
3001[label="109.109.204.124;124pkt 124fpkt", shape=invtriangle, color=brown];
3789[label="109.109.204.124;123pkt 123fpkt", shape=invhouse, color=bisque];
stat704[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.109.204.124:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1923--3001[label="1;124pkt 124fpkt"];
1923--3789[label="1;123pkt 123fpkt"];
3001--3789[label="1;123pkt 123fpkt"];
</description>
    <slice>
      <filter src_ip="109.109.204.124"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934074" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_705{
style=filled;
color=gray75;
1925[label="193.9.116.125;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3002[label="193.9.116.125;3pkt 3fpkt", shape=invtriangle, color=brown];
stat705[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.9.116.125:5050, 168.55.138.132:3598}[33.3333%]&lt;BR/&gt;{193.9.116.125:25, 130.195.104.183:3017}[33.3333%]&lt;BR/&gt;{193.9.116.125:23, 168.55.179.188:3142}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (16.6667%)&lt;BR/&gt; 3598: (16.6667%)&lt;BR/&gt; 3142: (16.6667%)&lt;BR/&gt; 3017: (16.6667%)&lt;BR/&gt; 25: (16.6667%)&gt;];
}
1925--3002[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="168.55.179.188" dst_port="3142" src_ip="193.9.116.125" src_port="23"/>
      <filter dst_ip="130.195.104.183" dst_port="3017" src_ip="193.9.116.125" src_port="25"/>
      <filter dst_ip="168.55.138.132" dst_port="3598" src_ip="193.9.116.125" src_port="5050"/>
    </slice>
    <from sec="1072933240" usec="0"/>
    <to sec="1072934082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889486,2.05965,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_706{
style=filled;
color=gray75;
932[label="7.103.72.126;s;31pkt 31fpkt", shape=diamond, color=yellow];
1929[label="7.103.72.126;32pkt 32fpkt", shape=pentagon, color=darkviolet];
3005[label="7.103.72.126;32pkt 32fpkt", shape=invtriangle, color=brown];
3791[label="7.103.72.126;32pkt 32fpkt", shape=invhouse, color=bisque];
stat706[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.103.72.126:*, 213.117.30.136:5324}[90.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5324: (46.4567%)&lt;BR/&gt; 5322: (1.9685%)&lt;BR/&gt; 5321: (1.5748%)&lt;BR/&gt; 1393: (1.5748%)&lt;BR/&gt; 1390: (1.5748%)&gt;];
}
932--1929[label="0.967742;30pkt 30fpkt"];
932--3005[label="0.967742;30pkt 30fpkt"];
932--3791[label="0.967742;30pkt 30fpkt"];
1929--3005[label="1;32pkt 32fpkt"];
1929--3791[label="1;32pkt 32fpkt"];
3005--3791[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="213.117.30.136" dst_port="5324" src_ip="7.103.72.126"/>
    </slice>
    <from sec="1072933205" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_707{
style=filled;
color=gray75;
1930[label="200.16.89.126;36pkt 36fpkt", shape=pentagon, color=darkviolet];
3006[label="200.16.89.126;35pkt 35fpkt", shape=invtriangle, color=brown];
3792[label="200.16.89.126;35pkt 35fpkt", shape=invhouse, color=bisque];
stat707[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.16.89.126:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4905: (1.41509%)&lt;BR/&gt; 4898: (1.41509%)&lt;BR/&gt; 4853: (1.41509%)&lt;BR/&gt; 4840: (1.41509%)&gt;];
}
1930--3006[label="1;35pkt 35fpkt"];
1930--3792[label="1;35pkt 35fpkt"];
3006--3792[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="200.16.89.126"/>
    </slice>
    <from sec="1072933205" usec="0"/>
    <to sec="1072933824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_708{
style=filled;
color=gray75;
1932[label="111.163.142.126;88pkt 88fpkt", shape=pentagon, color=darkviolet];
3008[label="111.163.142.126;88pkt 88fpkt", shape=invtriangle, color=brown];
3794[label="111.163.142.126;87pkt 87fpkt", shape=invhouse, color=bisque];
stat708[shape=component, label=&lt;Rules:&lt;BR/&gt;{111.163.142.126:*, *:135}[50%]&lt;BR/&gt;{111.163.142.126:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.0951%)&lt;BR/&gt; 135: (24.9049%)&lt;BR/&gt; 4580: (0.570342%)&lt;BR/&gt; 4567: (0.570342%)&lt;BR/&gt; 4540: (0.570342%)&gt;];
}
1932--3008[label="1;88pkt 88fpkt"];
1932--3794[label="1;87pkt 87fpkt"];
3008--3794[label="1;87pkt 87fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="111.163.142.126"/>
      <filter dst_port="135" src_ip="111.163.142.126"/>
    </slice>
    <from sec="1072933205" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_709{
style=filled;
color=gray75;
1935[label="111.253.34.128;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3011[label="111.253.34.128;1pkt 1fpkt", shape=invtriangle, color=brown];
stat709[shape=component, label=&lt;Rules:&lt;BR/&gt;{111.253.34.128:80, 156.143.147.222:22853}[50%]&lt;BR/&gt;{111.253.34.128:80, 156.143.147.222:26988}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 26988: (33.3333%)&lt;BR/&gt; 22853: (16.6667%)&gt;];
}
1935--3011[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="156.143.147.222" dst_port="26988" src_ip="111.253.34.128" src_port="80"/>
      <filter dst_ip="156.143.147.222" dst_port="22853" src_ip="111.253.34.128" src_port="80"/>
    </slice>
    <from sec="1072934045" usec="0"/>
    <to sec="1072934090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_710{
style=filled;
color=gray75;
1940[label="194.169.65.129;184pkt 184fpkt", shape=pentagon, color=darkviolet];
3013[label="194.169.65.129;184pkt 184fpkt", shape=invtriangle, color=brown];
3798[label="194.169.65.129;183pkt 183fpkt", shape=invhouse, color=bisque];
stat710[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.169.65.129:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
1940--3013[label="1;184pkt 184fpkt"];
1940--3798[label="1;183pkt 183fpkt"];
3013--3798[label="1;183pkt 183fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.169.65.129" src_port="1025"/>
    </slice>
    <from sec="1072933797" usec="0"/>
    <to sec="1072933831" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_711{
style=filled;
color=gray75;
1942[label="6.13.136.129;75pkt 75fpkt", shape=pentagon, color=darkviolet];
3014[label="6.13.136.129;75pkt 75fpkt", shape=invtriangle, color=brown];
3799[label="6.13.136.129;74pkt 74fpkt", shape=invhouse, color=bisque];
stat711[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.13.136.129:*, *:135}[50.6667%]&lt;BR/&gt;{6.13.136.129:*, *:445}[49.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (25.2232%)&lt;BR/&gt; 445: (24.7768%)&lt;BR/&gt; 4993: (0.669643%)&lt;BR/&gt; 4975: (0.669643%)&lt;BR/&gt; 4780: (0.669643%)&gt;];
}
1942--3014[label="1;75pkt 75fpkt"];
1942--3799[label="1;74pkt 74fpkt"];
3014--3799[label="1;74pkt 74fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="6.13.136.129"/>
      <filter dst_port="445" src_ip="6.13.136.129"/>
    </slice>
    <from sec="1072933205" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_712{
style=filled;
color=gray75;
1943[label="0.88.144.129;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3015[label="0.88.144.129;3pkt 3fpkt", shape=invtriangle, color=brown];
3800[label="0.88.144.129;3pkt 3fpkt", shape=invhouse, color=bisque];
stat712[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.88.144.129:80, 213.117.29.32:1420}[33.3333%]&lt;BR/&gt;{0.88.144.129:80, 130.195.115.85:1641}[33.3333%]&lt;BR/&gt;{0.88.144.129:80, 152.128.104.99:1093}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1641: (16.6667%)&lt;BR/&gt; 1420: (16.6667%)&lt;BR/&gt; 1093: (16.6667%)&gt;];
}
1943--3015[label="1;3pkt 3fpkt"];
1943--3800[label="1;3pkt 3fpkt"];
3015--3800[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="152.128.104.99" dst_port="1093" src_ip="0.88.144.129" src_port="80"/>
      <filter dst_ip="130.195.115.85" dst_port="1641" src_ip="0.88.144.129" src_port="80"/>
      <filter dst_ip="213.117.29.32" dst_port="1420" src_ip="0.88.144.129" src_port="80"/>
    </slice>
    <from sec="1072933202" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_713{
style=filled;
color=gray75;
1952[label="90.122.66.131;44pkt 44fpkt", shape=pentagon, color=darkviolet];
3017[label="90.122.66.131;44pkt 44fpkt", shape=invtriangle, color=brown];
3801[label="90.122.66.131;43pkt 43fpkt", shape=invhouse, color=bisque];
stat713[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.122.66.131:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 2744: (2.29008%)&lt;BR/&gt; 4933: (1.14504%)&lt;BR/&gt; 4467: (1.14504%)&lt;BR/&gt; 4236: (1.14504%)&gt;];
}
1952--3017[label="1;44pkt 44fpkt"];
1952--3801[label="1;43pkt 43fpkt"];
3017--3801[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="90.122.66.131"/>
    </slice>
    <from sec="1072933438" usec="0"/>
    <to sec="1072934032" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="108.160.32.134"/>
    </slice>
    <from sec="1072933434" usec="0"/>
    <to sec="1072934016" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="108.233.101.134"/>
    </slice>
    <from sec="1072933205" usec="0"/>
    <to sec="1072933924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_716{
style=filled;
color=gray75;
1969[label="168.52.246.134;109pkt 109fpkt", shape=pentagon, color=darkviolet];
3032[label="168.52.246.134;108pkt 108fpkt", shape=invtriangle, color=brown];
stat716[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.52.246.134:0, *:0}[90.8257%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (90.7834%)&lt;BR/&gt; 135: (2.76498%)&lt;BR/&gt; 80: (1.84332%)&lt;BR/&gt; 42725: (0.460829%)&lt;BR/&gt; 42715: (0.460829%)&gt;];
}
1969--3032[label="1;108pkt 108fpkt"];
</description>
    <slice>
      <filter src_ip="168.52.246.134"/>
    </slice>
    <from sec="1072933209" usec="0"/>
    <to sec="1072934093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_717{
style=filled;
color=gray75;
1972[label="201.33.88.135;75pkt 75fpkt", shape=pentagon, color=darkviolet];
3035[label="201.33.88.135;75pkt 75fpkt", shape=invtriangle, color=brown];
3810[label="201.33.88.135;74pkt 74fpkt", shape=invhouse, color=bisque];
stat717[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.33.88.135:*, *:135}[52%]&lt;BR/&gt;{201.33.88.135:*, *:445}[48%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (25.8929%)&lt;BR/&gt; 445: (24.1071%)&lt;BR/&gt; 4984: (0.669643%)&lt;BR/&gt; 4843: (0.669643%)&lt;BR/&gt; 4796: (0.669643%)&gt;];
}
1972--3035[label="1;75pkt 75fpkt"];
1972--3810[label="1;74pkt 74fpkt"];
3035--3810[label="1;74pkt 74fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="201.33.88.135"/>
      <filter dst_port="445" src_ip="201.33.88.135"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_718{
style=filled;
color=gray75;
1974[label="108.115.38.136;104pkt 104fpkt", shape=pentagon, color=darkviolet];
3036[label="108.115.38.136;104pkt 104fpkt", shape=invtriangle, color=brown];
3811[label="108.115.38.136;103pkt 103fpkt", shape=invhouse, color=bisque];
stat718[shape=component, label=&lt;Rules:&lt;BR/&gt;{108.115.38.136:22284, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22284: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
1974--3036[label="1;104pkt 104fpkt"];
1974--3811[label="1;103pkt 103fpkt"];
3036--3811[label="1;103pkt 103fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="108.115.38.136" src_port="22284"/>
    </slice>
    <from sec="1072934010" usec="0"/>
    <to sec="1072934026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_719{
style=filled;
color=gray75;
1975[label="196.114.42.136;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3037[label="196.114.42.136;2pkt 2fpkt", shape=invtriangle, color=brown];
3812[label="196.114.42.136;1pkt 1fpkt", shape=invhouse, color=bisque];
stat719[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.114.42.136:4099, 152.6.39.203:4662}[50%]&lt;BR/&gt;{196.114.42.136:4662, 152.6.39.203:1801}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 1801: (30%)&lt;BR/&gt; 4099: (20%)&gt;];
}
1975--3037[label="1;2pkt 2fpkt"];
1975--3812[label="1;1pkt 1fpkt"];
3037--3812[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="152.6.39.203" dst_port="1801" src_ip="196.114.42.136" src_port="4662"/>
      <filter dst_ip="152.6.39.203" dst_port="4662" src_ip="196.114.42.136" src_port="4099"/>
    </slice>
    <from sec="1072933935" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.129.83.136"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.29.220.136"/>
    </slice>
    <from sec="1072933233" usec="0"/>
    <to sec="1072933262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_722{
style=filled;
color=gray75;
1981[label="90.117.20.137;55pkt 55fpkt", shape=pentagon, color=darkviolet];
3043[label="90.117.20.137;54pkt 54fpkt", shape=invtriangle, color=brown];
stat722[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.117.20.137:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4749: (0.917431%)&lt;BR/&gt; 4726: (0.917431%)&lt;BR/&gt; 4712: (0.917431%)&lt;BR/&gt; 4707: (0.917431%)&gt;];
}
1981--3043[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="90.117.20.137"/>
    </slice>
    <from sec="1072933210" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_723{
style=filled;
color=gray75;
1983[label="23.235.103.137;164pkt 164fpkt", shape=pentagon, color=darkviolet];
3045[label="23.235.103.137;163pkt 163fpkt", shape=invtriangle, color=brown];
stat723[shape=component, label=&lt;Rules:&lt;BR/&gt;{23.235.103.137:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
1983--3045[label="1;163pkt 163fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="23.235.103.137" src_port="1026"/>
    </slice>
    <from sec="1072933993" usec="0"/>
    <to sec="1072934020" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_724{
style=filled;
color=gray75;
1986[label="5.114.11.138;112pkt 112fpkt", shape=pentagon, color=darkviolet];
3048[label="5.114.11.138;112pkt 112fpkt", shape=invtriangle, color=brown];
3817[label="5.114.11.138;111pkt 111fpkt", shape=invhouse, color=bisque];
stat724[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.114.11.138:*, *:135}[50%]&lt;BR/&gt;{5.114.11.138:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.0746%)&lt;BR/&gt; 135: (24.9254%)&lt;BR/&gt; 3288: (0.895522%)&lt;BR/&gt; 3061: (0.895522%)&lt;BR/&gt; 4991: (0.447761%)&gt;];
}
1986--3048[label="1;112pkt 112fpkt"];
1986--3817[label="1;111pkt 111fpkt"];
3048--3817[label="1;111pkt 111fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="5.114.11.138"/>
      <filter dst_port="135" src_ip="5.114.11.138"/>
    </slice>
    <from sec="1072933203" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_725{
style=filled;
color=gray75;
1987[label="7.105.75.138;74pkt 74fpkt", shape=pentagon, color=darkviolet];
3049[label="7.105.75.138;74pkt 74fpkt", shape=invtriangle, color=brown];
3818[label="7.105.75.138;74pkt 74fpkt", shape=invhouse, color=bisque];
stat725[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.105.75.138:*, *:135}[52.7027%]&lt;BR/&gt;{7.105.75.138:*, *:445}[47.2973%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (26.3514%)&lt;BR/&gt; 445: (23.6486%)&lt;BR/&gt; 4987: (0.675676%)&lt;BR/&gt; 4928: (0.675676%)&lt;BR/&gt; 4879: (0.675676%)&gt;];
}
1987--3049[label="1;74pkt 74fpkt"];
1987--3818[label="1;74pkt 74fpkt"];
3049--3818[label="1;74pkt 74fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="7.105.75.138"/>
      <filter dst_port="445" src_ip="7.105.75.138"/>
    </slice>
    <from sec="1072933248" usec="0"/>
    <to sec="1072934096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.176.159.139"/>
    </slice>
    <from sec="1072933302" usec="0"/>
    <to sec="1072933889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_728{
style=filled;
color=gray75;
1997[label="5.114.81.140;64pkt 64fpkt", shape=pentagon, color=darkviolet];
3056[label="5.114.81.140;64pkt 64fpkt", shape=invtriangle, color=brown];
stat728[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.114.81.140:*, *:445}[51.5625%]&lt;BR/&gt;{5.114.81.140:*, *:135}[48.4375%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.7812%)&lt;BR/&gt; 135: (24.2188%)&lt;BR/&gt; 4957: (0.78125%)&lt;BR/&gt; 4850: (0.78125%)&lt;BR/&gt; 4841: (0.78125%)&gt;];
}
1997--3056[label="1;64pkt 64fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="5.114.81.140"/>
      <filter dst_port="135" src_ip="5.114.81.140"/>
    </slice>
    <from sec="1072933323" usec="0"/>
    <to sec="1072934062" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_729{
style=filled;
color=gray75;
2000[label="5.250.69.141;215pkt 215fpkt", shape=pentagon, color=darkviolet];
3057[label="5.250.69.141;215pkt 215fpkt", shape=invtriangle, color=brown];
3822[label="5.250.69.141;215pkt 215fpkt", shape=invhouse, color=bisque];
stat729[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.250.69.141:0, *:0}[98.1395%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.1395%)&lt;BR/&gt; 80: (0.930233%)&lt;BR/&gt; 61560: (0.232558%)&lt;BR/&gt; 42886: (0.232558%)&lt;BR/&gt; 18839: (0.232558%)&gt;];
}
2000--3057[label="1;215pkt 215fpkt"];
2000--3822[label="1;215pkt 215fpkt"];
3057--3822[label="1;215pkt 215fpkt"];
</description>
    <slice>
      <filter src_ip="5.250.69.141"/>
    </slice>
    <from sec="1072933203" usec="0"/>
    <to sec="1072934097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_730{
style=filled;
color=gray75;
2001[label="194.45.77.141;52pkt 52fpkt", shape=pentagon, color=darkviolet];
3058[label="194.45.77.141;51pkt 51fpkt", shape=invtriangle, color=brown];
3823[label="194.45.77.141;51pkt 51fpkt", shape=invhouse, color=bisque];
stat730[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.45.77.141:*, *:135}[50%]&lt;BR/&gt;{194.45.77.141:*, *:445}[50%]&lt;BR/&gt;{194.45.77.141:*, 152.160.5.76:*}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.3247%)&lt;BR/&gt; 135: (24.6753%)&lt;BR/&gt; 4986: (0.974026%)&lt;BR/&gt; 4972: (0.974026%)&lt;BR/&gt; 4956: (0.974026%)&gt;];
}
2001--3058[label="1;51pkt 51fpkt"];
2001--3823[label="1;51pkt 51fpkt"];
3058--3823[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter dst_ip="152.160.5.76" src_ip="194.45.77.141"/>
      <filter dst_port="445" src_ip="194.45.77.141"/>
      <filter dst_port="135" src_ip="194.45.77.141"/>
    </slice>
    <from sec="1072933296" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_731{
style=filled;
color=gray75;
2003[label="201.19.212.141;48pkt 48fpkt", shape=pentagon, color=darkviolet];
3060[label="201.19.212.141;48pkt 48fpkt", shape=invtriangle, color=brown];
3825[label="201.19.212.141;48pkt 48fpkt", shape=invhouse, color=bisque];
stat731[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.19.212.141:*, *:135}[52.0833%]&lt;BR/&gt;{201.19.212.141:*, *:445}[47.9167%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (26.0417%)&lt;BR/&gt; 445: (23.9583%)&lt;BR/&gt; 4845: (1.04167%)&lt;BR/&gt; 4775: (1.04167%)&lt;BR/&gt; 4546: (1.04167%)&gt;];
}
2003--3060[label="1;48pkt 48fpkt"];
2003--3825[label="1;48pkt 48fpkt"];
3060--3825[label="1;48pkt 48fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="201.19.212.141"/>
      <filter dst_port="445" src_ip="201.19.212.141"/>
    </slice>
    <from sec="1072933241" usec="0"/>
    <to sec="1072934092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_732{
style=filled;
color=gray75;
2004[label="201.53.24.142;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3061[label="201.53.24.142;1pkt 1fpkt", shape=invtriangle, color=brown];
3826[label="201.53.24.142;2pkt 2fpkt", shape=invhouse, color=bisque];
stat732[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.53.24.142:26884, 156.142.143.198:80}[50%]&lt;BR/&gt;{201.53.24.142:26885, 156.142.143.198:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 26885: (30%)&lt;BR/&gt; 26884: (20%)&gt;];
}
2004--3061[label="1;1pkt 1fpkt"];
2004--3826[label="1;2pkt 2fpkt"];
3061--3826[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="156.142.143.198" dst_port="80" src_ip="201.53.24.142" src_port="26885"/>
      <filter dst_ip="156.142.143.198" dst_port="80" src_ip="201.53.24.142" src_port="26884"/>
    </slice>
    <from sec="1072933991" usec="0"/>
    <to sec="1072934015" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_733{
style=filled;
color=gray75;
2018[label="195.134.109.144;105pkt 105fpkt", shape=pentagon, color=darkviolet];
3069[label="195.134.109.144;105pkt 105fpkt", shape=invtriangle, color=brown];
3831[label="195.134.109.144;104pkt 104fpkt", shape=invhouse, color=bisque];
stat733[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.134.109.144:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2018--3069[label="1;105pkt 105fpkt"];
2018--3831[label="1;104pkt 104fpkt"];
3069--3831[label="1;104pkt 104fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="195.134.109.144" src_port="1027"/>
    </slice>
    <from sec="1072933314" usec="0"/>
    <to sec="1072933331" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_734{
style=filled;
color=gray75;
2019[label="210.152.129.144;99pkt 99fpkt", shape=pentagon, color=darkviolet];
3070[label="210.152.129.144;98pkt 98fpkt", shape=invtriangle, color=brown];
3832[label="210.152.129.144;99pkt 99fpkt", shape=invhouse, color=bisque];
stat734[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.152.129.144:0, *:0}[93.9394%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (93.9189%)&lt;BR/&gt; 135: (1.52027%)&lt;BR/&gt; 80: (1.52027%)&lt;BR/&gt; 44860: (0.506757%)&lt;BR/&gt; 44394: (0.506757%)&gt;];
}
2019--3070[label="1;98pkt 98fpkt"];
2019--3832[label="1;99pkt 99fpkt"];
3070--3832[label="1;98pkt 98fpkt"];
</description>
    <slice>
      <filter src_ip="210.152.129.144"/>
    </slice>
    <from sec="1072933261" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.235.161.144"/>
    </slice>
    <from sec="1072933682" usec="0"/>
    <to sec="1072933730" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="22.87.3.145"/>
    </slice>
    <from sec="1072933229" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_737{
style=filled;
color=gray75;
2028[label="217.17.23.145;98pkt 98fpkt", shape=pentagon, color=darkviolet];
3075[label="217.17.23.145;97pkt 97fpkt", shape=invtriangle, color=brown];
stat737[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.17.23.145:0, *:0}[94.898%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.8718%)&lt;BR/&gt; 80: (2.05128%)&lt;BR/&gt; 36920: (0.512821%)&lt;BR/&gt; 34940: (0.512821%)&lt;BR/&gt; 34897: (0.512821%)&gt;];
}
2028--3075[label="1;97pkt 97fpkt"];
</description>
    <slice>
      <filter src_ip="217.17.23.145"/>
    </slice>
    <from sec="1072933224" usec="0"/>
    <to sec="1072934092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_738{
style=filled;
color=gray75;
2036[label="111.145.99.146;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3079[label="111.145.99.146;1pkt 1fpkt", shape=invtriangle, color=brown];
3840[label="111.145.99.146;1pkt 1fpkt", shape=invhouse, color=bisque];
stat738[shape=component, label=&lt;Rules:&lt;BR/&gt;{111.145.99.146:1401, 130.165.52.54:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1401: (50%)&gt;];
}
2036--3079[label="1;1pkt 1fpkt"];
2036--3840[label="1;1pkt 1fpkt"];
3079--3840[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.165.52.54" dst_port="1434" src_ip="111.145.99.146" src_port="1401"/>
    </slice>
    <from sec="1072934101" usec="0"/>
    <to sec="1072934102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="72.178.113.146"/>
    </slice>
    <from sec="1072934101" usec="0"/>
    <to sec="1072934102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_740{
style=filled;
color=gray75;
2041[label="90.115.52.147;50pkt 50fpkt", shape=pentagon, color=darkviolet];
3084[label="90.115.52.147;50pkt 50fpkt", shape=invtriangle, color=brown];
3843[label="90.115.52.147;50pkt 50fpkt", shape=invhouse, color=bisque];
stat740[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.115.52.147:*, *:445}[52%]&lt;BR/&gt;{90.115.52.147:*, *:135}[48%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (26%)&lt;BR/&gt; 135: (24%)&lt;BR/&gt; 1080: (2%)&lt;BR/&gt; 4793: (1%)&lt;BR/&gt; 4392: (1%)&gt;];
}
2041--3084[label="1;50pkt 50fpkt"];
2041--3843[label="1;50pkt 50fpkt"];
3084--3843[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="90.115.52.147"/>
      <filter dst_port="135" src_ip="90.115.52.147"/>
    </slice>
    <from sec="1072933201" usec="0"/>
    <to sec="1072934093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_742{
style=filled;
color=gray75;
2048[label="203.86.91.148;129pkt 129fpkt", shape=pentagon, color=darkviolet];
3091[label="203.86.91.148;128pkt 128fpkt", shape=invtriangle, color=brown];
3847[label="203.86.91.148;128pkt 128fpkt", shape=invhouse, color=bisque];
stat742[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.86.91.148:0, *:0}[96.8992%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.8831%)&lt;BR/&gt; 80: (1.16883%)&lt;BR/&gt; 40066: (0.38961%)&lt;BR/&gt; 36113: (0.38961%)&lt;BR/&gt; 33872: (0.38961%)&gt;];
}
2048--3091[label="1;128pkt 128fpkt"];
2048--3847[label="1;128pkt 128fpkt"];
3091--3847[label="1;128pkt 128fpkt"];
</description>
    <slice>
      <filter src_ip="203.86.91.148"/>
    </slice>
    <from sec="1072933224" usec="0"/>
    <to sec="1072934089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="111.176.114.148"/>
    </slice>
    <from sec="1072933711" usec="0"/>
    <to sec="1072933731" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_744{
style=filled;
color=gray75;
2052[label="108.136.80.149;183pkt 183fpkt", shape=pentagon, color=darkviolet];
3095[label="108.136.80.149;182pkt 182fpkt", shape=invtriangle, color=brown];
3851[label="108.136.80.149;183pkt 183fpkt", shape=invhouse, color=bisque];
stat744[shape=component, label=&lt;Rules:&lt;BR/&gt;{108.136.80.149:1125, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1125: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2052--3095[label="1;182pkt 182fpkt"];
2052--3851[label="1;183pkt 183fpkt"];
3095--3851[label="1;182pkt 182fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="108.136.80.149" src_port="1125"/>
    </slice>
    <from sec="1072933922" usec="0"/>
    <to sec="1072933951" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_745{
style=filled;
color=gray75;
2057[label="156.143.178.150;51pkt 51fpkt", shape=pentagon, color=darkviolet];
3098[label="156.143.178.150;51pkt 51fpkt", shape=invtriangle, color=brown];
stat745[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.143.178.150:*, 5.30.106.171:25}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (33.3333%)&lt;BR/&gt; 53: (14.7059%)&lt;BR/&gt; 1024: (8.82353%)&lt;BR/&gt; 113: (1.96078%)&lt;BR/&gt; 60559: (0.980392%)&gt;];
}
2057--3098[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter dst_ip="5.30.106.171" dst_port="25" src_ip="156.143.178.150"/>
    </slice>
    <from sec="1072933294" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_746{
style=filled;
color=gray75;
2058[label="200.186.224.150;48pkt 48fpkt", shape=pentagon, color=darkviolet];
3099[label="200.186.224.150;48pkt 48fpkt", shape=invtriangle, color=brown];
3854[label="200.186.224.150;48pkt 48fpkt", shape=invhouse, color=bisque];
stat746[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.186.224.150:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4968: (1.04167%)&lt;BR/&gt; 4887: (1.04167%)&lt;BR/&gt; 4841: (1.04167%)&lt;BR/&gt; 4778: (1.04167%)&gt;];
}
2058--3099[label="1;48pkt 48fpkt"];
2058--3854[label="1;48pkt 48fpkt"];
3099--3854[label="1;48pkt 48fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="200.186.224.150"/>
    </slice>
    <from sec="1072933207" usec="0"/>
    <to sec="1072934087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,502,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_747{
style=filled;
color=gray75;
2061[label="218.208.125.151;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3101[label="218.208.125.151;1pkt 1fpkt", shape=invtriangle, color=brown];
stat747[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.208.125.151:22, 168.55.179.8:64878}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64878: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
2061--3101[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.55.179.8" dst_port="64878" src_ip="218.208.125.151" src_port="22"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934037" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_748{
style=filled;
color=gray75;
2062[label="5.163.234.151;79pkt 79fpkt", shape=pentagon, color=darkviolet];
3102[label="5.163.234.151;78pkt 78fpkt", shape=invtriangle, color=brown];
3857[label="5.163.234.151;79pkt 79fpkt", shape=invhouse, color=bisque];
stat748[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.163.234.151:*, *:445}[51.8987%]&lt;BR/&gt;{5.163.234.151:*, *:135}[48.1013%]&lt;BR/&gt;{5.163.234.151:*, 156.143.118.100:*}[22.7848%]&lt;BR/&gt;{5.163.234.151:*, 156.142.100.128:*}[21.519%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (26.0593%)&lt;BR/&gt; 135: (23.9407%)&lt;BR/&gt; 4788: (1.27119%)&lt;BR/&gt; 4998: (0.635593%)&lt;BR/&gt; 4979: (0.635593%)&gt;];
}
2062--3102[label="1;78pkt 78fpkt"];
2062--3857[label="1;79pkt 79fpkt"];
3102--3857[label="1;78pkt 78fpkt"];
</description>
    <slice>
      <filter dst_ip="156.143.118.100" src_ip="5.163.234.151"/>
      <filter dst_ip="156.142.100.128" src_ip="5.163.234.151"/>
      <filter dst_port="445" src_ip="5.163.234.151"/>
      <filter dst_port="135" src_ip="5.163.234.151"/>
    </slice>
    <from sec="1072933232" usec="0"/>
    <to sec="1072934010" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.141.44.152"/>
    </slice>
    <from sec="1072933703" usec="0"/>
    <to sec="1072934005" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_750{
style=filled;
color=gray75;
2064[label="109.56.86.152;114pkt 114fpkt", shape=pentagon, color=darkviolet];
3104[label="109.56.86.152;113pkt 113fpkt", shape=invtriangle, color=brown];
3859[label="109.56.86.152;113pkt 113fpkt", shape=invhouse, color=bisque];
stat750[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.56.86.152:0, *:0}[98.2456%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.2353%)&lt;BR/&gt; 80: (0.882353%)&lt;BR/&gt; 59056: (0.441176%)&lt;BR/&gt; 58018: (0.441176%)&gt;];
}
2064--3104[label="1;113pkt 113fpkt"];
2064--3859[label="1;113pkt 113fpkt"];
3104--3859[label="1;113pkt 113fpkt"];
</description>
    <slice>
      <filter src_ip="109.56.86.152"/>
    </slice>
    <from sec="1072933213" usec="0"/>
    <to sec="1072934096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_751{
style=filled;
color=gray75;
2073[label="201.5.73.154;76pkt 76fpkt", shape=pentagon, color=darkviolet];
3110[label="201.5.73.154;76pkt 76fpkt", shape=invtriangle, color=brown];
stat751[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.5.73.154:*, *:135}[51.3158%]&lt;BR/&gt;{201.5.73.154:*, *:445}[48.6842%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (25.6579%)&lt;BR/&gt; 445: (24.3421%)&lt;BR/&gt; 2590: (1.31579%)&lt;BR/&gt; 5000: (0.657895%)&lt;BR/&gt; 4885: (0.657895%)&gt;];
}
2073--3110[label="1;76pkt 76fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="201.5.73.154"/>
      <filter dst_port="445" src_ip="201.5.73.154"/>
    </slice>
    <from sec="1072933244" usec="0"/>
    <to sec="1072934096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_752{
style=filled;
color=gray75;
2074[label="4.62.164.154;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3111[label="4.62.164.154;6pkt 6fpkt", shape=invtriangle, color=brown];
3863[label="4.62.164.154;6pkt 6fpkt", shape=invhouse, color=bisque];
stat752[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.62.164.154:443, *:*}[50%]&lt;BR/&gt;{4.62.164.154:80, 130.195.206.98:*}[33.3333%]&lt;BR/&gt;{4.62.164.154:*, 152.128.13.165:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (25%)&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 2726: (8.33333%)&lt;BR/&gt; 2722: (8.33333%)&lt;BR/&gt; 2199: (8.33333%)&gt;];
}
2074--3111[label="1;6pkt 6fpkt"];
2074--3863[label="1;6pkt 6fpkt"];
3111--3863[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="152.128.13.165" src_ip="4.62.164.154"/>
      <filter src_ip="4.62.164.154" src_port="443"/>
      <filter dst_ip="130.195.206.98" src_ip="4.62.164.154" src_port="80"/>
    </slice>
    <from sec="1072933224" usec="0"/>
    <to sec="1072933973" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_753{
style=filled;
color=gray75;
2075[label="168.52.215.154;180pkt 180fpkt", shape=pentagon, color=darkviolet];
3112[label="168.52.215.154;181pkt 181fpkt", shape=invtriangle, color=brown];
3864[label="168.52.215.154;180pkt 180fpkt", shape=invhouse, color=bisque];
stat753[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.52.215.154:0, *:0}[94.4751%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.4547%)&lt;BR/&gt; 135: (1.94085%)&lt;BR/&gt; 80: (0.831793%)&lt;BR/&gt; 63114: (0.277264%)&lt;BR/&gt; 58517: (0.277264%)&gt;];
}
2075--3112[label="1;180pkt 180fpkt"];
2075--3864[label="1;180pkt 180fpkt"];
3112--3864[label="1;180pkt 180fpkt"];
</description>
    <slice>
      <filter src_ip="168.52.215.154"/>
    </slice>
    <from sec="1072933212" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.232.40.155"/>
    </slice>
    <from sec="1072933209" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_755{
style=filled;
color=gray75;
2078[label="214.14.176.155;122pkt 122fpkt", shape=pentagon, color=darkviolet];
3114[label="214.14.176.155;121pkt 121fpkt", shape=invtriangle, color=brown];
3865[label="214.14.176.155;121pkt 121fpkt", shape=invhouse, color=bisque];
stat755[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.14.176.155:1035, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1035: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2078--3114[label="1;121pkt 121fpkt"];
2078--3865[label="1;121pkt 121fpkt"];
3114--3865[label="1;121pkt 121fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.14.176.155" src_port="1035"/>
    </slice>
    <from sec="1072933600" usec="0"/>
    <to sec="1072933614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_756{
style=filled;
color=gray75;
2083[label="6.176.132.156;59pkt 59fpkt", shape=pentagon, color=darkviolet];
3118[label="6.176.132.156;58pkt 58fpkt", shape=invtriangle, color=brown];
3868[label="6.176.132.156;58pkt 58fpkt", shape=invhouse, color=bisque];
stat756[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.176.132.156:*, *:445}[52.5424%]&lt;BR/&gt;{6.176.132.156:*, *:135}[47.4576%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (26.5714%)&lt;BR/&gt; 135: (23.4286%)&lt;BR/&gt; 4998: (0.857143%)&lt;BR/&gt; 4922: (0.857143%)&lt;BR/&gt; 4884: (0.857143%)&gt;];
}
2083--3118[label="1;58pkt 58fpkt"];
2083--3868[label="1;58pkt 58fpkt"];
3118--3868[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="6.176.132.156"/>
      <filter dst_port="135" src_ip="6.176.132.156"/>
    </slice>
    <from sec="1072933215" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_758{
style=filled;
color=gray75;
2089[label="156.143.135.157;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3122[label="156.143.135.157;1pkt 1fpkt", shape=invtriangle, color=brown];
3871[label="156.143.135.157;1pkt 1fpkt", shape=invhouse, color=bisque];
stat758[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.143.135.157:80, 90.144.98.80:63431}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63431: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2089--3122[label="1;1pkt 1fpkt"];
2089--3871[label="1;1pkt 1fpkt"];
3122--3871[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="90.144.98.80" dst_port="63431" src_ip="156.143.135.157" src_port="80"/>
    </slice>
    <from sec="1072934101" usec="0"/>
    <to sec="1072934102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_759{
style=filled;
color=gray75;
2091[label="193.76.1.158;106pkt 106fpkt", shape=pentagon, color=darkviolet];
3123[label="193.76.1.158;106pkt 106fpkt", shape=invtriangle, color=brown];
stat759[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.76.1.158:0, *:0}[96.2264%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.2264%)&lt;BR/&gt; 80: (1.88679%)&lt;BR/&gt; 52484: (0.471698%)&lt;BR/&gt; 52227: (0.471698%)&lt;BR/&gt; 47315: (0.471698%)&gt;];
}
2091--3123[label="1;106pkt 106fpkt"];
</description>
    <slice>
      <filter src_ip="193.76.1.158"/>
    </slice>
    <from sec="1072933204" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_760{
style=filled;
color=gray75;
2092[label="194.208.65.158;135pkt 135fpkt", shape=pentagon, color=darkviolet];
3124[label="194.208.65.158;134pkt 134fpkt", shape=invtriangle, color=brown];
3872[label="194.208.65.158;135pkt 135fpkt", shape=invhouse, color=bisque];
stat760[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.208.65.158:65343, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65343: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2092--3124[label="1;134pkt 134fpkt"];
2092--3872[label="1;135pkt 135fpkt"];
3124--3872[label="1;134pkt 134fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.208.65.158" src_port="65343"/>
    </slice>
    <from sec="1072933449" usec="0"/>
    <to sec="1072933471" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_761{
style=filled;
color=gray75;
2103[label="5.29.49.161;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3130[label="5.29.49.161;9pkt 9fpkt", shape=invtriangle, color=brown];
3875[label="5.29.49.161;8pkt 8fpkt", shape=invhouse, color=bisque];
stat761[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.29.49.161:80, 152.6.38.195:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59615: (5.76923%)&lt;BR/&gt; 59611: (5.76923%)&lt;BR/&gt; 59601: (5.76923%)&lt;BR/&gt; 59599: (5.76923%)&gt;];
}
2103--3130[label="1;9pkt 9fpkt"];
2103--3875[label="1;8pkt 8fpkt"];
3130--3875[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="152.6.38.195" src_ip="5.29.49.161" src_port="80"/>
    </slice>
    <from sec="1072933528" usec="0"/>
    <to sec="1072933539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889486,2.05965,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_762{
style=filled;
color=gray75;
749[label="152.6.39.0;d;58pkt 58fpkt", shape=diamond, color=yellow];
815[label="156.142.66.84;d;71pkt 71fpkt", shape=diamond, color=yellow];
1346[label="201.96.24.16;57pkt 57fpkt", shape=pentagon, color=darkviolet];
1528[label="5.29.21.51;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2107[label="5.29.21.162;51pkt 51fpkt", shape=pentagon, color=darkviolet];
2547[label="201.96.24.16;57pkt 57fpkt", shape=invtriangle, color=brown];
2696[label="5.29.21.51;12pkt 12fpkt", shape=invtriangle, color=brown];
3134[label="5.29.21.162;51pkt 51fpkt", shape=invtriangle, color=brown];
3457[label="201.96.24.16;57pkt 57fpkt", shape=invhouse, color=bisque];
3569[label="5.29.21.51;12pkt 12fpkt", shape=invhouse, color=bisque];
stat762[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 152.6.39.0:*}[30.6452%]&lt;BR/&gt;{201.96.24.16:*, *:445}[30.6452%]&lt;BR/&gt;{5.29.21.162:80, *:*}[27.4194%]&lt;BR/&gt;{*:80, 156.142.66.84:*}[22.5806%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.0023%)&lt;BR/&gt; 445: (19.6796%)&lt;BR/&gt; 0: (2.28833%)&lt;BR/&gt; 53: (1.94508%)&lt;BR/&gt; 4888: (1.83066%)&gt;];
}
749--1528[label="0.454545;5pkt 5fpkt"];
749--1704[label="0.0487805;2pkt 2fpkt"];
749--2107[label="0.666667;34pkt 34fpkt"];
749--2696[label="0.5;6pkt 6fpkt"];
749--2831[label="0.025;1pkt 1fpkt"];
749--3134[label="0.666667;34pkt 34fpkt"];
749--3569[label="0.5;6pkt 6fpkt"];
749--3663[label="0.0487805;2pkt 2fpkt"];
815--847[label="0.0232558;1pkt 1fpkt"];
815--1165[label="0.0232558;1pkt 1fpkt"];
815--1346[label="0.0175439;1pkt 1fpkt"];
815--1410[label="0.0232558;1pkt 1fpkt"];
815--1436[label="0.028169;2pkt 2fpkt"];
815--1528[label="0.454545;5pkt 5fpkt"];
815--1606[label="0.0181818;1pkt 1fpkt"];
815--1851[label="0.0217391;1pkt 1fpkt"];
815--2022[label="0.0645161;2pkt 2fpkt"];
815--2107[label="0.333333;17pkt 17fpkt"];
815--2250[label="0.0227273;1pkt 1fpkt"];
815--2547[label="0.0175439;1pkt 1fpkt"];
815--2602[label="0.0232558;1pkt 1fpkt"];
815--2625[label="0.028169;2pkt 2fpkt"];
815--2696[label="0.416667;5pkt 5fpkt"];
815--2756[label="0.0185185;1pkt 1fpkt"];
815--3071[label="0.0666667;2pkt 2fpkt"];
815--3134[label="0.333333;17pkt 17fpkt"];
815--3457[label="0.0175439;1pkt 1fpkt"];
815--3500[label="0.0238095;1pkt 1fpkt"];
815--3517[label="0.028169;2pkt 2fpkt"];
815--3569[label="0.416667;5pkt 5fpkt"];
815--3746[label="0.0217391;1pkt 1fpkt"];
815--3834[label="0.0666667;2pkt 2fpkt"];
1346--2547[label="1;57pkt 57fpkt"];
1346--3457[label="1;57pkt 57fpkt"];
1528--2696[label="1;11pkt 11fpkt"];
1528--3569[label="1;11pkt 11fpkt"];
2107--3134[label="1;51pkt 51fpkt"];
2547--3457[label="1;57pkt 57fpkt"];
2696--3569[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="201.96.24.16"/>
      <filter src_ip="5.29.21.162" src_port="80"/>
      <filter dst_ip="156.142.66.84" src_port="80"/>
      <filter dst_ip="152.6.39.0" src_port="80"/>
    </slice>
    <from sec="1072933222" usec="0"/>
    <to sec="1072934048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_763{
style=filled;
color=gray75;
2108[label="201.106.32.162;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3135[label="201.106.32.162;4pkt 4fpkt", shape=invtriangle, color=brown];
3877[label="201.106.32.162;4pkt 4fpkt", shape=invhouse, color=bisque];
stat763[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.106.32.162:1619, 168.55.178.232:80}[25%]&lt;BR/&gt;{201.106.32.162:1620, 168.55.178.232:80}[25%]&lt;BR/&gt;{201.106.32.162:1621, 168.55.178.232:80}[25%]&lt;BR/&gt;{201.106.32.162:1622, 168.55.178.232:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1622: (12.5%)&lt;BR/&gt; 1621: (12.5%)&lt;BR/&gt; 1620: (12.5%)&lt;BR/&gt; 1619: (12.5%)&gt;];
}
2108--3135[label="1;4pkt 4fpkt"];
2108--3877[label="1;4pkt 4fpkt"];
3135--3877[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="168.55.178.232" dst_port="80" src_ip="201.106.32.162" src_port="1622"/>
      <filter dst_ip="168.55.178.232" dst_port="80" src_ip="201.106.32.162" src_port="1621"/>
      <filter dst_ip="168.55.178.232" dst_port="80" src_ip="201.106.32.162" src_port="1620"/>
      <filter dst_ip="168.55.178.232" dst_port="80" src_ip="201.106.32.162" src_port="1619"/>
    </slice>
    <from sec="1072933230" usec="0"/>
    <to sec="1072933328" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_764{
style=filled;
color=gray75;
2113[label="1.80.46.163;116pkt 116fpkt", shape=pentagon, color=darkviolet];
3137[label="1.80.46.163;116pkt 116fpkt", shape=invtriangle, color=brown];
3879[label="1.80.46.163;116pkt 116fpkt", shape=invhouse, color=bisque];
stat764[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.80.46.163:65065, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65065: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2113--3137[label="1;116pkt 116fpkt"];
2113--3879[label="1;116pkt 116fpkt"];
3137--3879[label="1;116pkt 116fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="1.80.46.163" src_port="65065"/>
    </slice>
    <from sec="1072933985" usec="0"/>
    <to sec="1072934013" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.69.39.164"/>
    </slice>
    <from sec="1072933205" usec="0"/>
    <to sec="1072934067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_767{
style=filled;
color=gray75;
2122[label="23.81.157.164;141pkt 141fpkt", shape=pentagon, color=darkviolet];
3143[label="23.81.157.164;141pkt 141fpkt", shape=invtriangle, color=brown];
stat767[shape=component, label=&lt;Rules:&lt;BR/&gt;{23.81.157.164:1032, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1032: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2122--3143[label="1;141pkt 141fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="23.81.157.164" src_port="1032"/>
    </slice>
    <from sec="1072933970" usec="0"/>
    <to sec="1072933992" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_768{
style=filled;
color=gray75;
2126[label="4.109.234.164;100pkt 100fpkt", shape=pentagon, color=darkviolet];
3145[label="4.109.234.164;100pkt 100fpkt", shape=invtriangle, color=brown];
stat768[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.109.234.164:0, *:0}[99%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99%)&lt;BR/&gt; 4144: (0.5%)&lt;BR/&gt; 80: (0.5%)&gt;];
}
2126--3145[label="1;100pkt 100fpkt"];
</description>
    <slice>
      <filter src_ip="4.109.234.164"/>
    </slice>
    <from sec="1072933230" usec="0"/>
    <to sec="1072934076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_769{
style=filled;
color=gray75;
2128[label="111.5.130.165;168pkt 168fpkt", shape=pentagon, color=darkviolet];
3146[label="111.5.130.165;168pkt 168fpkt", shape=invtriangle, color=brown];
stat769[shape=component, label=&lt;Rules:&lt;BR/&gt;{111.5.130.165:63421, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63421: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2128--3146[label="1;168pkt 168fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="111.5.130.165" src_port="63421"/>
    </slice>
    <from sec="1072933285" usec="0"/>
    <to sec="1072933311" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828525,2.06109,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_770{
style=filled;
color=gray75;
769[label="212.139.217.22;d;145pkt 145fpkt", shape=diamond, color=yellow];
2129[label="4.179.1.166;293pkt 293fpkt", shape=pentagon, color=darkviolet];
3147[label="4.179.1.166;293pkt 293fpkt", shape=invtriangle, color=brown];
stat770[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.179.1.166:0, *:0}[64.6789%]&lt;BR/&gt;{*:*, 212.139.217.22:*}[33.2569%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (81.3953%)&lt;BR/&gt; 25: (5.60876%)&lt;BR/&gt; 80: (1.64159%)&lt;BR/&gt; 135: (1.23119%)&lt;BR/&gt; 10113: (0.205198%)&gt;];
}
769--1223[label="0.00689655;1pkt 1fpkt"];
769--1436[label="0.00689655;1pkt 1fpkt"];
769--2129[label="0.0137931;2pkt 2fpkt"];
769--2625[label="0.00689655;1pkt 1fpkt"];
769--3147[label="0.0137931;2pkt 2fpkt"];
769--3517[label="0.00689655;1pkt 1fpkt"];
2129--3147[label="1;293pkt 293fpkt"];
</description>
    <slice>
      <filter dst_ip="212.139.217.22"/>
      <filter src_ip="4.179.1.166"/>
    </slice>
    <from sec="1072933201" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_771{
style=filled;
color=gray75;
2130[label="0.64.20.166;121pkt 121fpkt", shape=pentagon, color=darkviolet];
3148[label="0.64.20.166;121pkt 121fpkt", shape=invtriangle, color=brown];
3886[label="0.64.20.166;120pkt 120fpkt", shape=invhouse, color=bisque];
stat771[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.64.20.166:0, *:0}[97.5207%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.5138%)&lt;BR/&gt; 80: (1.24309%)&lt;BR/&gt; 2813: (0.414365%)&lt;BR/&gt; 2180: (0.414365%)&lt;BR/&gt; 1636: (0.414365%)&gt;];
}
2130--3148[label="1;121pkt 121fpkt"];
2130--3886[label="1;120pkt 120fpkt"];
3148--3886[label="1;120pkt 120fpkt"];
</description>
    <slice>
      <filter src_ip="0.64.20.166"/>
    </slice>
    <from sec="1072933226" usec="0"/>
    <to sec="1072934096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_772{
style=filled;
color=gray75;
2131[label="90.111.27.166;50pkt 50fpkt", shape=pentagon, color=darkviolet];
3149[label="90.111.27.166;50pkt 50fpkt", shape=invtriangle, color=brown];
stat772[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.111.27.166:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4390: (1%)&lt;BR/&gt; 4387: (1%)&lt;BR/&gt; 4382: (1%)&lt;BR/&gt; 4381: (1%)&gt;];
}
2131--3149[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="90.111.27.166"/>
    </slice>
    <from sec="1072933256" usec="0"/>
    <to sec="1072934086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3296,2.10519,053,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_773{
style=filled;
color=gray75;
747[label="194.1.65.212;s;53pkt 53fpkt", shape=diamond, color=yellow];
780[label="212.139.217.26;d;90pkt 90fpkt", shape=diamond, color=yellow];
889[label="212.139.217.25;d;167pkt 167fpkt", shape=diamond, color=yellow];
1127[label="194.1.65.212;s;42pkt 42fpkt", shape=hexagon, color=black];
1265[label="4.70.163.3;129pkt 129fpkt", shape=pentagon, color=darkviolet];
2133[label="212.226.128.166;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2485[label="4.70.163.3;129pkt 129fpkt", shape=invtriangle, color=brown];
3150[label="212.226.128.166;10pkt 10fpkt", shape=invtriangle, color=brown];
3409[label="4.70.163.3;129pkt 129fpkt", shape=invhouse, color=bisque];
3887[label="212.226.128.166;10pkt 10fpkt", shape=invhouse, color=bisque];
stat773[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.70.163.3:0, *:0}[29.4271%]&lt;BR/&gt;{*:53, 212.139.217.25:44977}[27.0833%]&lt;BR/&gt;{*:*, *:80}[24.4792%]&lt;BR/&gt;{*:*, 212.139.217.26:*}[23.4375%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (49.0247%)&lt;BR/&gt; 80: (16.3849%)&lt;BR/&gt; 53: (8.12744%)&lt;BR/&gt; 44977: (6.76203%)&lt;BR/&gt; 25: (0.780234%)&gt;];
}
747--780[label="1;53pkt 53fpkt"];
747--1127[label="1;42pkt 42fpkt"];
747--1222[label="0.0566038;3pkt 3fpkt"];
780--1127[label="1;42pkt 42fpkt"];
780--1222[label="0.0444444;4pkt 4fpkt"];
780--1265[label="0.0222222;2pkt 2fpkt"];
780--2133[label="0.4;4pkt 4fpkt"];
780--2485[label="0.0222222;2pkt 2fpkt"];
780--3150[label="0.4;4pkt 4fpkt"];
780--3409[label="0.0222222;2pkt 2fpkt"];
780--3887[label="0.4;4pkt 4fpkt"];
889--928[label="0.0434783;1pkt 1fpkt"];
889--1392[label="0.0416667;1pkt 1fpkt"];
889--1410[label="0.0232558;1pkt 1fpkt"];
889--1436[label="0.0179641;3pkt 3fpkt"];
889--1560[label="0.047619;1pkt 1fpkt"];
889--1761[label="0.05;1pkt 1fpkt"];
889--2032[label="0.0526316;1pkt 1fpkt"];
889--2133[label="0.6;6pkt 6fpkt"];
889--2250[label="0.0227273;1pkt 1fpkt"];
889--2302[label="0.0103093;1pkt 1fpkt"];
889--2586[label="0.0416667;1pkt 1fpkt"];
889--2602[label="0.0232558;1pkt 1fpkt"];
889--2625[label="0.0179641;3pkt 3fpkt"];
889--2721[label="0.047619;1pkt 1fpkt"];
889--2877[label="0.0526316;1pkt 1fpkt"];
889--3078[label="0.0555556;1pkt 1fpkt"];
889--3150[label="0.6;6pkt 6fpkt"];
889--3277[label="0.0103093;1pkt 1fpkt"];
889--3488[label="0.04;1pkt 1fpkt"];
889--3500[label="0.0238095;1pkt 1fpkt"];
889--3517[label="0.0179641;3pkt 3fpkt"];
889--3586[label="0.047619;1pkt 1fpkt"];
889--3696[label="0.0526316;1pkt 1fpkt"];
889--3839[label="0.0555556;1pkt 1fpkt"];
889--3887[label="0.6;6pkt 6fpkt"];
889--3971[label="0.0104167;1pkt 1fpkt"];
1127--1222[label="0.0714286;3pkt 3fpkt"];
1265--2485[label="1;129pkt 129fpkt"];
1265--3409[label="1;129pkt 129fpkt"];
2133--3150[label="1;10pkt 10fpkt"];
2133--3887[label="1;10pkt 10fpkt"];
2485--3409[label="1;129pkt 129fpkt"];
3150--3887[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="212.139.217.26"/>
      <filter dst_port="80"/>
      <filter src_ip="4.70.163.3"/>
      <filter dst_ip="212.139.217.25" dst_port="44977" src_port="53"/>
    </slice>
    <from sec="1072933205" usec="0"/>
    <to sec="1072934064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_775{
style=filled;
color=gray75;
2141[label="192.114.89.168;169pkt 169fpkt", shape=pentagon, color=darkviolet];
3157[label="192.114.89.168;169pkt 169fpkt", shape=invtriangle, color=brown];
3893[label="192.114.89.168;169pkt 169fpkt", shape=invhouse, color=bisque];
stat775[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.114.89.168:33335, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33335: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2141--3157[label="1;169pkt 169fpkt"];
2141--3893[label="1;169pkt 169fpkt"];
3157--3893[label="1;169pkt 169fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="192.114.89.168" src_port="33335"/>
    </slice>
    <from sec="1072933296" usec="0"/>
    <to sec="1072933323" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_776{
style=filled;
color=gray75;
2143[label="156.143.206.168;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3158[label="156.143.206.168;3pkt 3fpkt", shape=invtriangle, color=brown];
3894[label="156.143.206.168;3pkt 3fpkt", shape=invhouse, color=bisque];
stat776[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.143.206.168:53051, 192.123.68.59:1223}[33.3333%]&lt;BR/&gt;{156.143.206.168:64949, 90.12.67.72:8207}[33.3333%]&lt;BR/&gt;{156.143.206.168:53016, 1.54.164.205:2880}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64949: (16.6667%)&lt;BR/&gt; 53051: (16.6667%)&lt;BR/&gt; 53016: (16.6667%)&lt;BR/&gt; 8207: (16.6667%)&lt;BR/&gt; 2880: (16.6667%)&gt;];
}
2143--3158[label="1;3pkt 3fpkt"];
2143--3894[label="1;3pkt 3fpkt"];
3158--3894[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="1.54.164.205" dst_port="2880" src_ip="156.143.206.168" src_port="53016"/>
      <filter dst_ip="90.12.67.72" dst_port="8207" src_ip="156.143.206.168" src_port="64949"/>
      <filter dst_ip="192.123.68.59" dst_port="1223" src_ip="156.143.206.168" src_port="53051"/>
    </slice>
    <from sec="1072933220" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3296,2.10519,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_777{
style=filled;
color=gray75;
607[label="152.6.131.32;d;152pkt 152fpkt", shape=diamond, color=yellow];
678[label="194.203.17.5;s;117pkt 117fpkt", shape=diamond, color=yellow];
1029[label="194.203.17.5;s;117pkt 117fpkt", shape=hexagon, color=black];
1275[label="194.203.17.5;118pkt 118fpkt", shape=pentagon, color=darkviolet];
1320[label="194.203.17.12;22pkt 22fpkt", shape=pentagon, color=darkviolet];
2148[label="111.238.83.170;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2494[label="194.203.17.5;118pkt 118fpkt", shape=invtriangle, color=brown];
2531[label="194.203.17.12;23pkt 23fpkt", shape=invtriangle, color=brown];
3162[label="111.238.83.170;1pkt 1fpkt", shape=invtriangle, color=brown];
3414[label="194.203.17.5;118pkt 118fpkt", shape=invhouse, color=bisque];
3443[label="194.203.17.12;23pkt 23fpkt", shape=invhouse, color=bisque];
3896[label="111.238.83.170;1pkt 1fpkt", shape=invhouse, color=bisque];
stat777[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.203.17.5:80, 152.6.131.32:*}[74.359%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9383%)&lt;BR/&gt; 1565: (0.369914%)&lt;BR/&gt; 1563: (0.369914%)&lt;BR/&gt; 1561: (0.369914%)&lt;BR/&gt; 1559: (0.369914%)&gt;];
}
607--678[label="0.991453;116pkt 116fpkt"];
607--1029[label="0.991453;116pkt 116fpkt"];
607--1275[label="0.983051;116pkt 116fpkt"];
607--1320[label="0.909091;20pkt 20fpkt"];
607--2148[label="1;1pkt 1fpkt"];
607--2494[label="0.983051;116pkt 116fpkt"];
607--2531[label="0.913043;21pkt 21fpkt"];
607--3162[label="1;1pkt 1fpkt"];
607--3414[label="0.983051;116pkt 116fpkt"];
607--3443[label="0.913043;21pkt 21fpkt"];
607--3896[label="1;1pkt 1fpkt"];
678--1029[label="1;117pkt 117fpkt"];
678--1275[label="1;117pkt 117fpkt"];
678--2494[label="1;117pkt 117fpkt"];
678--3414[label="1;117pkt 117fpkt"];
1029--1275[label="1;117pkt 117fpkt"];
1029--2494[label="1;117pkt 117fpkt"];
1029--3414[label="1;117pkt 117fpkt"];
1275--2494[label="1;118pkt 118fpkt"];
1275--3414[label="1;118pkt 118fpkt"];
1320--2531[label="1;22pkt 22fpkt"];
1320--3443[label="1;22pkt 22fpkt"];
2148--3162[label="1;1pkt 1fpkt"];
2148--3896[label="1;1pkt 1fpkt"];
2494--3414[label="1;118pkt 118fpkt"];
2531--3443[label="1;23pkt 23fpkt"];
3162--3896[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="152.6.131.32" src_ip="194.203.17.5" src_port="80"/>
    </slice>
    <from sec="1072933233" usec="0"/>
    <to sec="1072934006" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_778{
style=filled;
color=gray75;
2149[label="1.1.66.171;149pkt 149fpkt", shape=pentagon, color=darkviolet];
3163[label="1.1.66.171;149pkt 149fpkt", shape=invtriangle, color=brown];
stat778[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.1.66.171:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2149--3163[label="1;149pkt 149fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="1.1.66.171" src_port="1028"/>
    </slice>
    <from sec="1072933685" usec="0"/>
    <to sec="1072933708" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3296,2.10519,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_779{
style=filled;
color=gray75;
491[label="205.87.171.55;s;91pkt 91fpkt", shape=diamond, color=yellow];
596[label="213.68.210.145;d;210pkt 210fpkt", shape=diamond, color=yellow];
799[label="205.87.171.37;s;2pkt 2fpkt", shape=diamond, color=yellow];
1026[label="205.87.171.55;s;65pkt 65fpkt", shape=hexagon, color=black];
1449[label="193.122.212.36;39pkt 39fpkt", shape=pentagon, color=darkviolet];
1456[label="205.87.171.37;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2636[label="193.122.212.36;40pkt 40fpkt", shape=invtriangle, color=brown];
2642[label="205.87.171.37;1pkt 1fpkt", shape=invtriangle, color=brown];
3525[label="193.122.212.36;40pkt 40fpkt", shape=invhouse, color=bisque];
3531[label="205.87.171.37;1pkt 1fpkt", shape=invhouse, color=bisque];
stat779[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.87.171.55:80, 213.68.210.145:*}[40.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.0816%)&lt;BR/&gt; 0: (1.42857%)&lt;BR/&gt; 56697: (0.510204%)&lt;BR/&gt; 57473: (0.408163%)&lt;BR/&gt; 57472: (0.408163%)&gt;];
}
491--596[label="1;91pkt 91fpkt"];
491--1026[label="1;65pkt 65fpkt"];
596--799[label="1;2pkt 2fpkt"];
596--1026[label="1;65pkt 65fpkt"];
596--1449[label="0.641026;25pkt 25fpkt"];
596--1456[label="1;1pkt 1fpkt"];
596--2153[label="0.0454545;1pkt 1fpkt"];
596--2233[label="0.185185;5pkt 5fpkt"];
596--2636[label="0.625;25pkt 25fpkt"];
596--2642[label="1;1pkt 1fpkt"];
596--3166[label="0.0454545;1pkt 1fpkt"];
596--3525[label="0.625;25pkt 25fpkt"];
596--3531[label="1;1pkt 1fpkt"];
596--3899[label="0.047619;1pkt 1fpkt"];
799--1456[label="1;1pkt 1fpkt"];
799--2642[label="1;1pkt 1fpkt"];
799--3531[label="1;1pkt 1fpkt"];
1449--2636[label="1;39pkt 39fpkt"];
1449--3525[label="1;39pkt 39fpkt"];
1456--2642[label="1;1pkt 1fpkt"];
1456--3531[label="1;1pkt 1fpkt"];
2636--3525[label="1;40pkt 40fpkt"];
2642--3531[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.68.210.145" src_ip="205.87.171.55" src_port="80"/>
    </slice>
    <from sec="1072933213" usec="0"/>
    <to sec="1072934021" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_780{
style=filled;
color=gray75;
2155[label="200.248.251.172;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3168[label="200.248.251.172;2pkt 2fpkt", shape=invtriangle, color=brown];
3900[label="200.248.251.172;3pkt 3fpkt", shape=invhouse, color=bisque];
stat780[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.248.251.172:80, 130.195.11.23:1145}[33.3333%]&lt;BR/&gt;{200.248.251.172:80, 130.195.11.23:1146}[33.3333%]&lt;BR/&gt;{200.248.251.172:80, 130.195.11.23:1147}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1147: (21.4286%)&lt;BR/&gt; 1146: (21.4286%)&lt;BR/&gt; 1145: (7.14286%)&gt;];
}
2155--3168[label="1;2pkt 2fpkt"];
2155--3900[label="1;2pkt 2fpkt"];
3168--3900[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="130.195.11.23" dst_port="1147" src_ip="200.248.251.172" src_port="80"/>
      <filter dst_ip="130.195.11.23" dst_port="1146" src_ip="200.248.251.172" src_port="80"/>
      <filter dst_ip="130.195.11.23" dst_port="1145" src_ip="200.248.251.172" src_port="80"/>
    </slice>
    <from sec="1072933436" usec="0"/>
    <to sec="1072933469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_782{
style=filled;
color=gray75;
2164[label="109.81.40.176;91pkt 91fpkt", shape=pentagon, color=darkviolet];
3176[label="109.81.40.176;91pkt 91fpkt", shape=invtriangle, color=brown];
3904[label="109.81.40.176;91pkt 91fpkt", shape=invhouse, color=bisque];
stat782[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.81.40.176:*, *:445}[50.5495%]&lt;BR/&gt;{109.81.40.176:*, *:135}[49.4505%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.2747%)&lt;BR/&gt; 135: (24.7253%)&lt;BR/&gt; 4934: (0.549451%)&lt;BR/&gt; 4921: (0.549451%)&lt;BR/&gt; 4893: (0.549451%)&gt;];
}
2164--3176[label="1;91pkt 91fpkt"];
2164--3904[label="1;91pkt 91fpkt"];
3176--3904[label="1;91pkt 91fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="109.81.40.176"/>
      <filter dst_port="135" src_ip="109.81.40.176"/>
    </slice>
    <from sec="1072933255" usec="0"/>
    <to sec="1072934082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_783{
style=filled;
color=gray75;
2167[label="194.37.134.176;148pkt 148fpkt", shape=pentagon, color=darkviolet];
3179[label="194.37.134.176;148pkt 148fpkt", shape=invtriangle, color=brown];
3907[label="194.37.134.176;148pkt 148fpkt", shape=invhouse, color=bisque];
stat783[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.37.134.176:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2167--3179[label="1;148pkt 148fpkt"];
2167--3907[label="1;148pkt 148fpkt"];
3179--3907[label="1;148pkt 148fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.37.134.176" src_port="1026"/>
    </slice>
    <from sec="1072933672" usec="0"/>
    <to sec="1072933696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_784{
style=filled;
color=gray75;
2168[label="209.23.180.176;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3180[label="209.23.180.176;4pkt 4fpkt", shape=invtriangle, color=brown];
3908[label="209.23.180.176;4pkt 4fpkt", shape=invhouse, color=bisque];
stat784[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.23.180.176:80, 130.195.8.112:53189}[25%]&lt;BR/&gt;{209.23.180.176:80, 130.195.8.112:53190}[25%]&lt;BR/&gt;{209.23.180.176:80, 130.195.8.112:53191}[25%]&lt;BR/&gt;{209.23.180.176:80, 130.195.8.112:53192}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53192: (12.5%)&lt;BR/&gt; 53191: (12.5%)&lt;BR/&gt; 53190: (12.5%)&lt;BR/&gt; 53189: (12.5%)&gt;];
}
2168--3180[label="1;4pkt 4fpkt"];
2168--3908[label="1;4pkt 4fpkt"];
3180--3908[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="130.195.8.112" dst_port="53192" src_ip="209.23.180.176" src_port="80"/>
      <filter dst_ip="130.195.8.112" dst_port="53191" src_ip="209.23.180.176" src_port="80"/>
      <filter dst_ip="130.195.8.112" dst_port="53190" src_ip="209.23.180.176" src_port="80"/>
      <filter dst_ip="130.195.8.112" dst_port="53189" src_ip="209.23.180.176" src_port="80"/>
    </slice>
    <from sec="1072933529" usec="0"/>
    <to sec="1072933544" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_785{
style=filled;
color=gray75;
2169[label="6.163.2.177;40pkt 40fpkt", shape=pentagon, color=darkviolet];
3181[label="6.163.2.177;40pkt 40fpkt", shape=invtriangle, color=brown];
3909[label="6.163.2.177;39pkt 39fpkt", shape=invhouse, color=bisque];
stat785[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.163.2.177:*, *:135}[50%]&lt;BR/&gt;{6.163.2.177:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.2101%)&lt;BR/&gt; 135: (24.7899%)&lt;BR/&gt; 4905: (1.2605%)&lt;BR/&gt; 4892: (1.2605%)&lt;BR/&gt; 4857: (1.2605%)&gt;];
}
2169--3181[label="1;40pkt 40fpkt"];
2169--3909[label="1;39pkt 39fpkt"];
3181--3909[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="6.163.2.177"/>
      <filter dst_port="135" src_ip="6.163.2.177"/>
    </slice>
    <from sec="1072933221" usec="0"/>
    <to sec="1072933636" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.238.91.177"/>
    </slice>
    <from sec="1072933227" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_787{
style=filled;
color=gray75;
2174[label="5.188.110.177;116pkt 116fpkt", shape=pentagon, color=darkviolet];
3185[label="5.188.110.177;116pkt 116fpkt", shape=invtriangle, color=brown];
3912[label="5.188.110.177;115pkt 115fpkt", shape=invhouse, color=bisque];
stat787[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.188.110.177:0, *:0}[98.2759%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.2709%)&lt;BR/&gt; 80: (0.864553%)&lt;BR/&gt; 65014: (0.432277%)&lt;BR/&gt; 64942: (0.432277%)&gt;];
}
2174--3185[label="1;116pkt 116fpkt"];
2174--3912[label="1;115pkt 115fpkt"];
3185--3912[label="1;115pkt 115fpkt"];
</description>
    <slice>
      <filter src_ip="5.188.110.177"/>
    </slice>
    <from sec="1072933231" usec="0"/>
    <to sec="1072934080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.208.78.178"/>
    </slice>
    <from sec="1072933243" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_789{
style=filled;
color=gray75;
2179[label="213.98.146.179;121pkt 121fpkt", shape=pentagon, color=darkviolet];
3188[label="213.98.146.179;121pkt 121fpkt", shape=invtriangle, color=brown];
stat789[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.98.146.179:0, *:0}[95.0413%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.0413%)&lt;BR/&gt; 80: (2.47934%)&lt;BR/&gt; 21809: (0.413223%)&lt;BR/&gt; 20430: (0.413223%)&lt;BR/&gt; 10302: (0.413223%)&gt;];
}
2179--3188[label="1;121pkt 121fpkt"];
</description>
    <slice>
      <filter src_ip="213.98.146.179"/>
    </slice>
    <from sec="1072933251" usec="0"/>
    <to sec="1072934091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_790{
style=filled;
color=gray75;
2182[label="90.234.1.180;128pkt 128fpkt", shape=pentagon, color=darkviolet];
3191[label="90.234.1.180;128pkt 128fpkt", shape=invtriangle, color=brown];
stat790[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.234.1.180:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2182--3191[label="1;128pkt 128fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="90.234.1.180" src_port="1027"/>
    </slice>
    <from sec="1072933280" usec="0"/>
    <to sec="1072933294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="23.56.33.181"/>
    </slice>
    <from sec="1072934101" usec="0"/>
    <to sec="1072934102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_793{
style=filled;
color=gray75;
2191[label="7.102.162.182;71pkt 71fpkt", shape=pentagon, color=darkviolet];
3195[label="7.102.162.182;71pkt 71fpkt", shape=invtriangle, color=brown];
3917[label="7.102.162.182;71pkt 71fpkt", shape=invhouse, color=bisque];
stat793[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.102.162.182:*, *:445}[52.1127%]&lt;BR/&gt;{7.102.162.182:*, *:135}[47.8873%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (26.0563%)&lt;BR/&gt; 135: (23.9437%)&lt;BR/&gt; 3299: (1.40845%)&lt;BR/&gt; 4844: (0.704225%)&lt;BR/&gt; 4668: (0.704225%)&gt;];
}
2191--3195[label="1;71pkt 71fpkt"];
2191--3917[label="1;71pkt 71fpkt"];
3195--3917[label="1;71pkt 71fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="7.102.162.182"/>
      <filter dst_port="135" src_ip="7.102.162.182"/>
    </slice>
    <from sec="1072933313" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_794{
style=filled;
color=gray75;
2193[label="192.228.105.183;60pkt 60fpkt", shape=pentagon, color=darkviolet];
3197[label="192.228.105.183;60pkt 60fpkt", shape=invtriangle, color=brown];
stat794[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.228.105.183:*, *:135}[50%]&lt;BR/&gt;{192.228.105.183:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25%)&lt;BR/&gt; 135: (25%)&lt;BR/&gt; 4922: (0.833333%)&lt;BR/&gt; 4856: (0.833333%)&lt;BR/&gt; 4739: (0.833333%)&gt;];
}
2193--3197[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="192.228.105.183"/>
      <filter dst_port="135" src_ip="192.228.105.183"/>
    </slice>
    <from sec="1072933212" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_795{
style=filled;
color=gray75;
2198[label="208.50.80.184;134pkt 134fpkt", shape=pentagon, color=darkviolet];
3201[label="208.50.80.184;134pkt 134fpkt", shape=invtriangle, color=brown];
stat795[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.50.80.184:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2198--3201[label="1;134pkt 134fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.50.80.184" src_port="1027"/>
    </slice>
    <from sec="1072933400" usec="0"/>
    <to sec="1072933424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_796{
style=filled;
color=gray75;
2204[label="111.158.22.186;150pkt 150fpkt", shape=pentagon, color=darkviolet];
3204[label="111.158.22.186;150pkt 150fpkt", shape=invtriangle, color=brown];
3924[label="111.158.22.186;150pkt 150fpkt", shape=invhouse, color=bisque];
stat796[shape=component, label=&lt;Rules:&lt;BR/&gt;{111.158.22.186:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2204--3204[label="1;150pkt 150fpkt"];
2204--3924[label="1;150pkt 150fpkt"];
3204--3924[label="1;150pkt 150fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="111.158.22.186" src_port="1025"/>
    </slice>
    <from sec="1072933560" usec="0"/>
    <to sec="1072933584" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_797{
style=filled;
color=gray75;
2205[label="194.196.122.186;154pkt 154fpkt", shape=pentagon, color=darkviolet];
3205[label="194.196.122.186;154pkt 154fpkt", shape=invtriangle, color=brown];
3925[label="194.196.122.186;154pkt 154fpkt", shape=invhouse, color=bisque];
stat797[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.196.122.186:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2205--3205[label="1;154pkt 154fpkt"];
2205--3925[label="1;154pkt 154fpkt"];
3205--3925[label="1;154pkt 154fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.196.122.186" src_port="1029"/>
    </slice>
    <from sec="1072933814" usec="0"/>
    <to sec="1072933838" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_798{
style=filled;
color=gray75;
2206[label="193.32.142.186;56pkt 56fpkt", shape=pentagon, color=darkviolet];
3206[label="193.32.142.186;56pkt 56fpkt", shape=invtriangle, color=brown];
stat798[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.32.142.186:*, *:445}[51.7857%]&lt;BR/&gt;{193.32.142.186:*, *:135}[48.2143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.8929%)&lt;BR/&gt; 135: (24.1071%)&lt;BR/&gt; 4956: (0.892857%)&lt;BR/&gt; 4931: (0.892857%)&lt;BR/&gt; 4915: (0.892857%)&gt;];
}
2206--3206[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="193.32.142.186"/>
      <filter dst_port="135" src_ip="193.32.142.186"/>
    </slice>
    <from sec="1072933221" usec="0"/>
    <to sec="1072933967" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_799{
style=filled;
color=gray75;
2207[label="221.148.168.186;30pkt 30fpkt", shape=pentagon, color=darkviolet];
3207[label="221.148.168.186;30pkt 30fpkt", shape=invtriangle, color=brown];
3926[label="221.148.168.186;29pkt 29fpkt", shape=invhouse, color=bisque];
stat799[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.148.168.186:80, 152.6.39.178:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3455: (1.68539%)&lt;BR/&gt; 3452: (1.68539%)&lt;BR/&gt; 3447: (1.68539%)&lt;BR/&gt; 3446: (1.68539%)&gt;];
}
2207--3207[label="1;30pkt 30fpkt"];
2207--3926[label="1;29pkt 29fpkt"];
3207--3926[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="152.6.39.178" src_ip="221.148.168.186" src_port="80"/>
    </slice>
    <from sec="1072933970" usec="0"/>
    <to sec="1072934085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_800{
style=filled;
color=gray75;
2208[label="212.90.170.186;121pkt 121fpkt", shape=pentagon, color=darkviolet];
3208[label="212.90.170.186;121pkt 121fpkt", shape=invtriangle, color=brown];
stat800[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.90.170.186:0, *:0}[89.2562%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (89.2562%)&lt;BR/&gt; 80: (5.3719%)&lt;BR/&gt; 63814: (0.413223%)&lt;BR/&gt; 58833: (0.413223%)&lt;BR/&gt; 53504: (0.413223%)&gt;];
}
2208--3208[label="1;121pkt 121fpkt"];
</description>
    <slice>
      <filter src_ip="212.90.170.186"/>
    </slice>
    <from sec="1072933224" usec="0"/>
    <to sec="1072934086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_801{
style=filled;
color=gray75;
2211[label="159.161.158.187;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3210[label="159.161.158.187;2pkt 2fpkt", shape=invtriangle, color=brown];
3927[label="159.161.158.187;2pkt 2fpkt", shape=invhouse, color=bisque];
stat801[shape=component, label=&lt;Rules:&lt;BR/&gt;{159.161.158.187:80, 130.195.195.194:63032}[50%]&lt;BR/&gt;{159.161.158.187:80, 130.195.195.194:63042}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63042: (25%)&lt;BR/&gt; 63032: (25%)&gt;];
}
2211--3210[label="1;2pkt 2fpkt"];
2211--3927[label="1;2pkt 2fpkt"];
3210--3927[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="130.195.195.194" dst_port="63042" src_ip="159.161.158.187" src_port="80"/>
      <filter dst_ip="130.195.195.194" dst_port="63032" src_ip="159.161.158.187" src_port="80"/>
    </slice>
    <from sec="1072933248" usec="0"/>
    <to sec="1072933811" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_802{
style=filled;
color=gray75;
2214[label="200.69.187.188;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3212[label="200.69.187.188;3pkt 3fpkt", shape=invtriangle, color=brown];
3929[label="200.69.187.188;2pkt 2fpkt", shape=invhouse, color=bisque];
stat802[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.69.187.188:0, 156.143.38.108:0}[33.3333%]&lt;BR/&gt;{200.69.187.188:1460, 156.143.38.108:25}[33.3333%]&lt;BR/&gt;{200.69.187.188:3537, 156.143.38.108:25}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (37.5%)&lt;BR/&gt; 0: (25%)&lt;BR/&gt; 3537: (18.75%)&lt;BR/&gt; 1460: (18.75%)&gt;];
}
2214--3212[label="1;3pkt 3fpkt"];
2214--3929[label="1;2pkt 2fpkt"];
3212--3929[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="156.143.38.108" dst_port="25" src_ip="200.69.187.188" src_port="3537"/>
      <filter dst_ip="156.143.38.108" dst_port="25" src_ip="200.69.187.188" src_port="1460"/>
      <filter dst_ip="156.143.38.108" src_ip="200.69.187.188"/>
    </slice>
    <from sec="1072933302" usec="0"/>
    <to sec="1072933782" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_804{
style=filled;
color=gray75;
2216[label="90.119.108.190;51pkt 51fpkt", shape=pentagon, color=darkviolet];
3214[label="90.119.108.190;51pkt 51fpkt", shape=invtriangle, color=brown];
3931[label="90.119.108.190;51pkt 51fpkt", shape=invhouse, color=bisque];
stat804[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.119.108.190:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4700: (1.96078%)&lt;BR/&gt; 3209: (1.96078%)&lt;BR/&gt; 4993: (0.980392%)&lt;BR/&gt; 4977: (0.980392%)&gt;];
}
2216--3214[label="1;51pkt 51fpkt"];
2216--3931[label="1;51pkt 51fpkt"];
3214--3931[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="90.119.108.190"/>
    </slice>
    <from sec="1072933201" usec="0"/>
    <to sec="1072934090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_805{
style=filled;
color=gray75;
2217[label="111.30.147.190;44pkt 44fpkt", shape=pentagon, color=darkviolet];
3215[label="111.30.147.190;44pkt 44fpkt", shape=invtriangle, color=brown];
3932[label="111.30.147.190;43pkt 43fpkt", shape=invhouse, color=bisque];
stat805[shape=component, label=&lt;Rules:&lt;BR/&gt;{111.30.147.190:*, *:135}[50%]&lt;BR/&gt;{111.30.147.190:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.1908%)&lt;BR/&gt; 135: (24.8092%)&lt;BR/&gt; 4914: (1.14504%)&lt;BR/&gt; 4824: (1.14504%)&lt;BR/&gt; 4768: (1.14504%)&gt;];
}
2217--3215[label="1;44pkt 44fpkt"];
2217--3932[label="1;43pkt 43fpkt"];
3215--3932[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="111.30.147.190"/>
      <filter dst_port="135" src_ip="111.30.147.190"/>
    </slice>
    <from sec="1072933248" usec="0"/>
    <to sec="1072933998" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_806{
style=filled;
color=gray75;
2226[label="90.228.195.191;230pkt 230fpkt", shape=pentagon, color=darkviolet];
3222[label="90.228.195.191;230pkt 230fpkt", shape=invtriangle, color=brown];
3938[label="90.228.195.191;229pkt 229fpkt", shape=invhouse, color=bisque];
stat806[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.228.195.191:1430, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1430: (50%)&gt;];
}
2226--3222[label="1;230pkt 230fpkt"];
2226--3938[label="1;229pkt 229fpkt"];
3222--3938[label="1;229pkt 229fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="90.228.195.191" src_port="1430"/>
    </slice>
    <from sec="1072933210" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_807{
style=filled;
color=gray75;
2228[label="108.46.30.192;103pkt 103fpkt", shape=pentagon, color=darkviolet];
3223[label="108.46.30.192;103pkt 103fpkt", shape=invtriangle, color=brown];
stat807[shape=component, label=&lt;Rules:&lt;BR/&gt;{108.46.30.192:1858, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1858: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
2228--3223[label="1;103pkt 103fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="108.46.30.192" src_port="1858"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_808{
style=filled;
color=gray75;
2230[label="6.163.52.192;247pkt 247fpkt", shape=pentagon, color=darkviolet];
3225[label="6.163.52.192;247pkt 247fpkt", shape=invtriangle, color=brown];
stat808[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.163.52.192:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 26051: (0.202429%)&lt;BR/&gt; 26049: (0.202429%)&lt;BR/&gt; 26047: (0.202429%)&lt;BR/&gt; 26045: (0.202429%)&gt;];
}
2230--3225[label="1;247pkt 247fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="6.163.52.192"/>
    </slice>
    <from sec="1072933375" usec="0"/>
    <to sec="1072933414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_809{
style=filled;
color=gray75;
2231[label="90.234.68.192;122pkt 122fpkt", shape=pentagon, color=darkviolet];
3226[label="90.234.68.192;122pkt 122fpkt", shape=invtriangle, color=brown];
stat809[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.234.68.192:1039, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1039: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2231--3226[label="1;122pkt 122fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="90.234.68.192" src_port="1039"/>
    </slice>
    <from sec="1072933483" usec="0"/>
    <to sec="1072933507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_810{
style=filled;
color=gray75;
2232[label="6.179.82.192;48pkt 48fpkt", shape=pentagon, color=darkviolet];
3227[label="6.179.82.192;48pkt 48fpkt", shape=invtriangle, color=brown];
stat810[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.179.82.192:*, *:135}[50%]&lt;BR/&gt;{6.179.82.192:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25%)&lt;BR/&gt; 135: (25%)&lt;BR/&gt; 4915: (1.04167%)&lt;BR/&gt; 4584: (1.04167%)&lt;BR/&gt; 4354: (1.04167%)&gt;];
}
2232--3227[label="1;48pkt 48fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="6.179.82.192"/>
      <filter dst_port="135" src_ip="6.179.82.192"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_812{
style=filled;
color=gray75;
2238[label="1.4.210.193;67pkt 67fpkt", shape=pentagon, color=darkviolet];
3231[label="1.4.210.193;67pkt 67fpkt", shape=invtriangle, color=brown];
3941[label="1.4.210.193;66pkt 66fpkt", shape=invhouse, color=bisque];
stat812[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.4.210.193:*, *:135}[56.7164%]&lt;BR/&gt;{1.4.210.193:*, *:445}[43.2836%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (28.25%)&lt;BR/&gt; 445: (21.75%)&lt;BR/&gt; 4681: (0.75%)&lt;BR/&gt; 4568: (0.75%)&lt;BR/&gt; 4539: (0.75%)&gt;];
}
2238--3231[label="1;67pkt 67fpkt"];
2238--3941[label="1;66pkt 66fpkt"];
3231--3941[label="1;66pkt 66fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="1.4.210.193"/>
      <filter dst_port="445" src_ip="1.4.210.193"/>
    </slice>
    <from sec="1072933217" usec="0"/>
    <to sec="1072934097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_813{
style=filled;
color=gray75;
2240[label="212.223.11.194;90pkt 90fpkt", shape=pentagon, color=darkviolet];
3232[label="212.223.11.194;90pkt 90fpkt", shape=invtriangle, color=brown];
3942[label="212.223.11.194;89pkt 89fpkt", shape=invhouse, color=bisque];
stat813[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.223.11.194:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4958: (0.557621%)&lt;BR/&gt; 4901: (0.557621%)&lt;BR/&gt; 4865: (0.557621%)&lt;BR/&gt; 4827: (0.557621%)&gt;];
}
2240--3232[label="1;90pkt 90fpkt"];
2240--3942[label="1;89pkt 89fpkt"];
3232--3942[label="1;89pkt 89fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="212.223.11.194"/>
    </slice>
    <from sec="1072933204" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="108.35.72.195"/>
    </slice>
    <from sec="1072933218" usec="0"/>
    <to sec="1072934018" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="22.86.182.198"/>
    </slice>
    <from sec="1072934101" usec="0"/>
    <to sec="1072934102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_817{
style=filled;
color=gray75;
2261[label="213.113.113.199;78pkt 78fpkt", shape=pentagon, color=darkviolet];
3244[label="213.113.113.199;78pkt 78fpkt", shape=invtriangle, color=brown];
3947[label="213.113.113.199;78pkt 78fpkt", shape=invhouse, color=bisque];
stat817[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.113.113.199:0, *:0}[98.7179%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.7179%)&lt;BR/&gt; 1969: (0.641026%)&lt;BR/&gt; 135: (0.641026%)&gt;];
}
2261--3244[label="1;78pkt 78fpkt"];
2261--3947[label="1;78pkt 78fpkt"];
3244--3947[label="1;78pkt 78fpkt"];
</description>
    <slice>
      <filter src_ip="213.113.113.199"/>
    </slice>
    <from sec="1072933235" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889486,2.05965,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_818{
style=filled;
color=gray75;
703[label="168.55.179.88;d;300pkt 300fpkt", shape=diamond, color=yellow];
802[label="194.240.244.199;s;126pkt 126fpkt", shape=diamond, color=yellow];
803[label="200.212.149.152;s;129pkt 129fpkt", shape=diamond, color=yellow];
1556[label="6.249.100.56;4pkt 4fpkt", shape=pentagon, color=darkviolet];
1557[label="212.173.150.56;21pkt 21fpkt", shape=pentagon, color=darkviolet];
1995[label="112.39.232.139;21pkt 21fpkt", shape=pentagon, color=darkviolet];
2262[label="194.240.244.199;135pkt 135fpkt", shape=pentagon, color=darkviolet];
2718[label="6.249.100.56;5pkt 5fpkt", shape=invtriangle, color=brown];
3055[label="112.39.232.139;21pkt 21fpkt", shape=invtriangle, color=brown];
3245[label="194.240.244.199;135pkt 135fpkt", shape=invtriangle, color=brown];
3585[label="6.249.100.56;5pkt 5fpkt", shape=invhouse, color=bisque];
3821[label="112.39.232.139;21pkt 21fpkt", shape=invhouse, color=bisque];
3948[label="194.240.244.199;134pkt 134fpkt", shape=invhouse, color=bisque];
stat818[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.240.244.199:*, 168.55.179.88:25}[41.2844%]&lt;BR/&gt;{200.212.149.152:*, 168.55.179.88:25}[39.4495%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.5809%)&lt;BR/&gt; 80: (1.41911%)&lt;BR/&gt; 4475: (0.425733%)&lt;BR/&gt; 4646: (0.331126%)&lt;BR/&gt; 4588: (0.331126%)&gt;];
}
703--802[label="1;126pkt 126fpkt"];
703--803[label="1;129pkt 129fpkt"];
703--818[label="0.0172414;1pkt 1fpkt"];
703--856[label="0.0169492;1pkt 1fpkt"];
703--1556[label="0.25;1pkt 1fpkt"];
703--1557[label="0.333333;7pkt 7fpkt"];
703--1560[label="0.047619;1pkt 1fpkt"];
703--1905[label="0.015625;1pkt 1fpkt"];
703--1979[label="0.111111;1pkt 1fpkt"];
703--1995[label="1;21pkt 21fpkt"];
703--2262[label="0.933333;126pkt 126fpkt"];
703--2314[label="0.0526316;1pkt 1fpkt"];
703--2718[label="0.2;1pkt 1fpkt"];
703--2721[label="0.047619;1pkt 1fpkt"];
703--2985[label="0.015873;1pkt 1fpkt"];
703--3055[label="1;21pkt 21fpkt"];
703--3245[label="0.933333;126pkt 126fpkt"];
703--3286[label="0.0526316;1pkt 1fpkt"];
703--3585[label="0.2;1pkt 1fpkt"];
703--3586[label="0.047619;1pkt 1fpkt"];
703--3821[label="1;21pkt 21fpkt"];
703--3948[label="0.932836;125pkt 125fpkt"];
703--3978[label="0.0555556;1pkt 1fpkt"];
802--2262[label="1;126pkt 126fpkt"];
802--3245[label="1;126pkt 126fpkt"];
802--3948[label="0.992063;125pkt 125fpkt"];
1556--2718[label="1;4pkt 4fpkt"];
1556--3585[label="1;4pkt 4fpkt"];
1995--3055[label="1;21pkt 21fpkt"];
1995--3821[label="1;21pkt 21fpkt"];
2262--3245[label="1;135pkt 135fpkt"];
2262--3948[label="1;134pkt 134fpkt"];
2718--3585[label="1;5pkt 5fpkt"];
3055--3821[label="1;21pkt 21fpkt"];
3245--3948[label="1;134pkt 134fpkt"];
</description>
    <slice>
      <filter dst_ip="168.55.179.88" dst_port="25" src_ip="194.240.244.199"/>
      <filter dst_ip="168.55.179.88" dst_port="25" src_ip="200.212.149.152"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889486,2.05965,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_819{
style=filled;
color=gray75;
442[label="218.119.114.196;d;656pkt 656fpkt", shape=diamond, color=yellow];
508[label="218.119.114.199;d;375pkt 375fpkt", shape=diamond, color=yellow];
708[label="217.8.208.87;s;182pkt 182fpkt", shape=diamond, color=yellow];
716[label="218.119.114.192;d;85pkt 85fpkt", shape=diamond, color=yellow];
718[label="217.8.208.86;s;197pkt 197fpkt", shape=diamond, color=yellow];
735[label="217.8.208.8;s;176pkt 176fpkt", shape=diamond, color=yellow];
878[label="217.8.208.13;s;45pkt 45fpkt", shape=diamond, color=yellow];
1261[label="22.190.78.3;20pkt 20fpkt", shape=pentagon, color=darkviolet];
1304[label="217.8.208.8;190pkt 190fpkt", shape=pentagon, color=darkviolet];
1355[label="217.8.208.17;45pkt 45fpkt", shape=pentagon, color=darkviolet];
1713[label="217.8.208.82;42pkt 42fpkt", shape=pentagon, color=darkviolet];
1737[label="217.8.208.86;212pkt 212fpkt", shape=pentagon, color=darkviolet];
1742[label="217.8.208.87;197pkt 197fpkt", shape=pentagon, color=darkviolet];
1748[label="22.185.223.88;8pkt 8fpkt", shape=pentagon, color=darkviolet];
1976[label="217.9.52.136;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2195[label="217.8.208.183;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2245[label="214.130.247.194;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2263[label="217.9.52.200;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2481[label="22.190.78.3;19pkt 19fpkt", shape=invtriangle, color=brown];
2518[label="217.8.208.8;190pkt 190fpkt", shape=invtriangle, color=brown];
2858[label="217.8.208.86;211pkt 211fpkt", shape=invtriangle, color=brown];
2863[label="217.8.208.87;197pkt 197fpkt", shape=invtriangle, color=brown];
3038[label="217.9.52.136;1pkt 1fpkt", shape=invtriangle, color=brown];
3234[label="214.130.247.194;5pkt 5fpkt", shape=invtriangle, color=brown];
3246[label="217.9.52.200;3pkt 3fpkt", shape=invtriangle, color=brown];
3408[label="22.190.78.3;20pkt 20fpkt", shape=invhouse, color=bisque];
3682[label="217.8.208.86;211pkt 211fpkt", shape=invhouse, color=bisque];
3949[label="217.9.52.200;3pkt 3fpkt", shape=invhouse, color=bisque];
4002[label="111.176.96.227;1pkt 1fpkt", shape=invhouse, color=bisque];
stat819[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 218.119.114.199:*}[32.9906%]&lt;BR/&gt;{*:113, 218.119.114.196:*}[26.5638%]&lt;BR/&gt;{*:*, 218.119.114.196:6667}[23.9931%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (22.3517%)&lt;BR/&gt; 6667: (19.9455%)&lt;BR/&gt; 6668: (3.96489%)&lt;BR/&gt; 6666: (1.46792%)&lt;BR/&gt; 80: (0.317797%)&gt;];
}
442--708[label="0.923077;168pkt 168fpkt"];
442--718[label="1;197pkt 197fpkt"];
442--735[label="0.511364;90pkt 90fpkt"];
442--878[label="0.666667;30pkt 30fpkt"];
442--1261[label="0.5;10pkt 10fpkt"];
442--1304[label="0.473684;90pkt 90fpkt"];
442--1355[label="0.955556;43pkt 43fpkt"];
442--1496[label="0.00392157;1pkt 1fpkt"];
442--1713[label="0.952381;40pkt 40fpkt"];
442--1737[label="0.929245;197pkt 197fpkt"];
442--1742[label="0.847716;167pkt 167fpkt"];
442--1748[label="1;8pkt 8fpkt"];
442--1908[label="0.00401606;1pkt 1fpkt"];
442--2195[label="0.25;1pkt 1fpkt"];
442--2263[label="0.333333;1pkt 1fpkt"];
442--2452[label="0.00396825;1pkt 1fpkt"];
442--2481[label="0.473684;9pkt 9fpkt"];
442--2518[label="0.473684;90pkt 90fpkt"];
442--2670[label="0.00392157;1pkt 1fpkt"];
442--2858[label="0.92891;196pkt 196fpkt"];
442--2863[label="0.847716;167pkt 167fpkt"];
442--2988[label="0.00403226;1pkt 1fpkt"];
442--3246[label="0.333333;1pkt 1fpkt"];
442--3388[label="0.00396825;1pkt 1fpkt"];
442--3408[label="0.5;10pkt 10fpkt"];
442--3550[label="0.00393701;1pkt 1fpkt"];
442--3682[label="0.92891;196pkt 196fpkt"];
442--3949[label="0.333333;1pkt 1fpkt"];
442--4048[label="0.00398406;1pkt 1fpkt"];
508--708[label="0.0769231;14pkt 14fpkt"];
508--735[label="0.420455;74pkt 74fpkt"];
508--878[label="0.177778;8pkt 8fpkt"];
508--1261[label="0.4;8pkt 8fpkt"];
508--1304[label="0.389474;74pkt 74fpkt"];
508--1496[label="0.00392157;1pkt 1fpkt"];
508--1742[label="0.071066;14pkt 14fpkt"];
508--1908[label="0.00401606;1pkt 1fpkt"];
508--2195[label="0.75;3pkt 3fpkt"];
508--2245[label="1;5pkt 5fpkt"];
508--2452[label="0.00396825;1pkt 1fpkt"];
508--2481[label="0.421053;8pkt 8fpkt"];
508--2518[label="0.389474;74pkt 74fpkt"];
508--2670[label="0.00392157;1pkt 1fpkt"];
508--2863[label="0.071066;14pkt 14fpkt"];
508--2988[label="0.00403226;1pkt 1fpkt"];
508--3234[label="1;5pkt 5fpkt"];
508--3388[label="0.00396825;1pkt 1fpkt"];
508--3408[label="0.4;8pkt 8fpkt"];
508--3550[label="0.00393701;1pkt 1fpkt"];
508--4048[label="0.00398406;1pkt 1fpkt"];
708--1742[label="0.994505;181pkt 181fpkt"];
708--2863[label="0.994505;181pkt 181fpkt"];
716--735[label="0.141176;12pkt 12fpkt"];
716--878[label="0.155556;7pkt 7fpkt"];
716--1304[label="0.141176;12pkt 12fpkt"];
716--1496[label="0.0117647;1pkt 1fpkt"];
716--1908[label="0.0117647;1pkt 1fpkt"];
716--1976[label="1;1pkt 1fpkt"];
716--2263[label="0.666667;2pkt 2fpkt"];
716--2452[label="0.0117647;1pkt 1fpkt"];
716--2518[label="0.141176;12pkt 12fpkt"];
716--2670[label="0.0117647;1pkt 1fpkt"];
716--2988[label="0.0117647;1pkt 1fpkt"];
716--3038[label="1;1pkt 1fpkt"];
716--3246[label="0.666667;2pkt 2fpkt"];
716--3388[label="0.0117647;1pkt 1fpkt"];
716--3550[label="0.0117647;1pkt 1fpkt"];
716--3949[label="0.666667;2pkt 2fpkt"];
716--4002[label="1;1pkt 1fpkt"];
716--4048[label="0.0117647;1pkt 1fpkt"];
718--1737[label="1;197pkt 197fpkt"];
718--2858[label="0.994924;196pkt 196fpkt"];
718--3682[label="0.994924;196pkt 196fpkt"];
735--1304[label="1;176pkt 176fpkt"];
735--2518[label="1;176pkt 176fpkt"];
1261--2481[label="1;19pkt 19fpkt"];
1261--3408[label="1;20pkt 20fpkt"];
1304--2518[label="1;190pkt 190fpkt"];
1737--2858[label="1;211pkt 211fpkt"];
1737--3682[label="1;211pkt 211fpkt"];
1742--2863[label="1;197pkt 197fpkt"];
1976--3038[label="1;1pkt 1fpkt"];
2245--3234[label="1;5pkt 5fpkt"];
2263--3246[label="1;3pkt 3fpkt"];
2263--3949[label="1;3pkt 3fpkt"];
2481--3408[label="1;19pkt 19fpkt"];
2858--3682[label="1;211pkt 211fpkt"];
3246--3949[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="218.119.114.199"/>
      <filter dst_ip="218.119.114.196" src_port="113"/>
      <filter dst_ip="218.119.114.196" dst_port="6667"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_820{
style=filled;
color=gray75;
2265[label="6.232.131.200;139pkt 139fpkt", shape=pentagon, color=darkviolet];
3248[label="6.232.131.200;139pkt 139fpkt", shape=invtriangle, color=brown];
stat820[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.232.131.200:0, *:0}[94.2446%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.2446%)&lt;BR/&gt; 135: (2.51799%)&lt;BR/&gt; 62272: (0.359712%)&lt;BR/&gt; 62202: (0.359712%)&lt;BR/&gt; 60855: (0.359712%)&gt;];
}
2265--3248[label="1;139pkt 139fpkt"];
</description>
    <slice>
      <filter src_ip="6.232.131.200"/>
    </slice>
    <from sec="1072933222" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3296,2.10519,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_821{
style=filled;
color=gray75;
487[label="156.142.70.209;d;74pkt 74fpkt", shape=diamond, color=yellow];
488[label="193.150.182.0;s;59pkt 59fpkt", shape=diamond, color=yellow];
992[label="193.150.182.0;s;48pkt 48fpkt", shape=hexagon, color=black];
1241[label="193.150.182.0;217pkt 217fpkt", shape=pentagon, color=darkviolet];
2268[label="209.13.45.201;27pkt 27fpkt", shape=pentagon, color=darkviolet];
2462[label="193.150.182.0;217pkt 217fpkt", shape=invtriangle, color=brown];
3249[label="209.13.45.201;27pkt 27fpkt", shape=invtriangle, color=brown];
3397[label="193.150.182.0;217pkt 217fpkt", shape=invhouse, color=bisque];
3951[label="209.13.45.201;26pkt 26fpkt", shape=invhouse, color=bisque];
stat821[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.150.182.0:80, 156.142.70.209:*}[88.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.4627%)&lt;BR/&gt; 443: (5.31798%)&lt;BR/&gt; 2822: (0.274123%)&lt;BR/&gt; 2821: (0.274123%)&lt;BR/&gt; 2820: (0.274123%)&gt;];
}
487--488[label="0.966102;57pkt 57fpkt"];
487--1241[label="0.77027;57pkt 57fpkt"];
487--2268[label="0.62963;17pkt 17fpkt"];
487--2462[label="0.77027;57pkt 57fpkt"];
487--3249[label="0.62963;17pkt 17fpkt"];
487--3397[label="0.77027;57pkt 57fpkt"];
487--3951[label="0.653846;17pkt 17fpkt"];
488--992[label="0.0208333;1pkt 1fpkt"];
488--1241[label="0.983051;58pkt 58fpkt"];
488--2462[label="0.983051;58pkt 58fpkt"];
488--3397[label="0.983051;58pkt 58fpkt"];
992--1241[label="0.979167;47pkt 47fpkt"];
992--2462[label="0.979167;47pkt 47fpkt"];
992--3397[label="0.979167;47pkt 47fpkt"];
1241--2462[label="1;217pkt 217fpkt"];
1241--3397[label="1;217pkt 217fpkt"];
2268--3249[label="1;27pkt 27fpkt"];
2268--3951[label="1;26pkt 26fpkt"];
2462--3397[label="1;217pkt 217fpkt"];
3249--3951[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="156.142.70.209" src_ip="193.150.182.0" src_port="80"/>
    </slice>
    <from sec="1072933205" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_822{
style=filled;
color=gray75;
2272[label="221.52.39.202;141pkt 141fpkt", shape=pentagon, color=darkviolet];
3253[label="221.52.39.202;141pkt 141fpkt", shape=invtriangle, color=brown];
stat822[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.52.39.202:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2272--3253[label="1;141pkt 141fpkt"];
</description>
    <slice>
      <filter src_ip="221.52.39.202"/>
    </slice>
    <from sec="1072933203" usec="0"/>
    <to sec="1072934083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.130.77.202"/>
    </slice>
    <from sec="1072933205" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_824{
style=filled;
color=gray75;
2274[label="109.83.78.202;55pkt 55fpkt", shape=pentagon, color=darkviolet];
3255[label="109.83.78.202;55pkt 55fpkt", shape=invtriangle, color=brown];
stat824[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.83.78.202:*, *:135}[50.9091%]&lt;BR/&gt;{109.83.78.202:*, *:445}[49.0909%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (25.4545%)&lt;BR/&gt; 445: (24.5455%)&lt;BR/&gt; 4805: (0.909091%)&lt;BR/&gt; 4797: (0.909091%)&lt;BR/&gt; 4441: (0.909091%)&gt;];
}
2274--3255[label="1;55pkt 55fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="109.83.78.202"/>
      <filter dst_port="445" src_ip="109.83.78.202"/>
    </slice>
    <from sec="1072933213" usec="0"/>
    <to sec="1072934097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_825{
style=filled;
color=gray75;
2276[label="175.43.86.203;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3256[label="175.43.86.203;11pkt 11fpkt", shape=invtriangle, color=brown];
3955[label="175.43.86.203;11pkt 11fpkt", shape=invhouse, color=bisque];
stat825[shape=component, label=&lt;Rules:&lt;BR/&gt;{175.43.86.203:80, 212.84.25.36:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1954: (4.54545%)&lt;BR/&gt; 1953: (4.54545%)&lt;BR/&gt; 1952: (4.54545%)&lt;BR/&gt; 1950: (4.54545%)&gt;];
}
2276--3256[label="1;11pkt 11fpkt"];
2276--3955[label="1;11pkt 11fpkt"];
3256--3955[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="212.84.25.36" src_ip="175.43.86.203" src_port="80"/>
    </slice>
    <from sec="1072933830" usec="0"/>
    <to sec="1072934093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_826{
style=filled;
color=gray75;
2279[label="212.84.49.204;225pkt 225fpkt", shape=pentagon, color=darkviolet];
3258[label="212.84.49.204;225pkt 225fpkt", shape=invtriangle, color=brown];
3956[label="212.84.49.204;225pkt 225fpkt", shape=invhouse, color=bisque];
stat826[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.84.49.204:0, *:0}[97.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.7778%)&lt;BR/&gt; 135: (0.666667%)&lt;BR/&gt; 80: (0.444444%)&lt;BR/&gt; 4207: (0.222222%)&lt;BR/&gt; 3658: (0.222222%)&gt;];
}
2279--3258[label="1;225pkt 225fpkt"];
2279--3956[label="1;225pkt 225fpkt"];
3258--3956[label="1;225pkt 225fpkt"];
</description>
    <slice>
      <filter src_ip="212.84.49.204"/>
    </slice>
    <from sec="1072933209" usec="0"/>
    <to sec="1072934094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.65.122.205"/>
    </slice>
    <from sec="1072934101" usec="0"/>
    <to sec="1072934102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="111.249.144.206"/>
    </slice>
    <from sec="1072933203" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_829{
style=filled;
color=gray75;
2293[label="212.84.3.208;100pkt 100fpkt", shape=pentagon, color=darkviolet];
3271[label="212.84.3.208;100pkt 100fpkt", shape=invtriangle, color=brown];
3966[label="212.84.3.208;100pkt 100fpkt", shape=invhouse, color=bisque];
stat829[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.84.3.208:0, *:0}[94%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94%)&lt;BR/&gt; 80: (2.5%)&lt;BR/&gt; 4522: (0.5%)&lt;BR/&gt; 4184: (0.5%)&lt;BR/&gt; 3025: (0.5%)&gt;];
}
2293--3271[label="1;100pkt 100fpkt"];
2293--3966[label="1;100pkt 100fpkt"];
3271--3966[label="1;100pkt 100fpkt"];
</description>
    <slice>
      <filter src_ip="212.84.3.208"/>
    </slice>
    <from sec="1072933215" usec="0"/>
    <to sec="1072934084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.217.109.208"/>
    </slice>
    <from sec="1072933636" usec="0"/>
    <to sec="1072933918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_831{
style=filled;
color=gray75;
2300[label="156.143.6.209;23pkt 23fpkt", shape=pentagon, color=darkviolet];
3275[label="156.143.6.209;23pkt 23fpkt", shape=invtriangle, color=brown];
3970[label="156.143.6.209;23pkt 23fpkt", shape=invhouse, color=bisque];
stat831[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.143.6.209:*, *:80}[91.3043%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.6522%)&lt;BR/&gt; 5190: (2.17391%)&lt;BR/&gt; 1303: (2.17391%)&lt;BR/&gt; 1302: (2.17391%)&lt;BR/&gt; 1300: (2.17391%)&gt;];
}
2300--3275[label="1;23pkt 23fpkt"];
2300--3970[label="1;23pkt 23fpkt"];
3275--3970[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="156.143.6.209"/>
    </slice>
    <from sec="1072933236" usec="0"/>
    <to sec="1072934080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,501,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_832{
style=filled;
color=gray75;
2301[label="5.23.115.209;16pkt 16fpkt", shape=pentagon, color=darkviolet];
3276[label="5.23.115.209;16pkt 16fpkt", shape=invtriangle, color=brown];
stat832[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.23.115.209:21, 173.165.72.26:*}[62.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (31.25%)&lt;BR/&gt; 58957: (3.125%)&lt;BR/&gt; 58940: (3.125%)&lt;BR/&gt; 58929: (3.125%)&lt;BR/&gt; 58918: (3.125%)&gt;];
}
2301--3276[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="173.165.72.26" src_ip="5.23.115.209" src_port="21"/>
    </slice>
    <from sec="1072933771" usec="0"/>
    <to sec="1072933787" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_833{
style=filled;
color=gray75;
2304[label="90.132.41.211;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3278[label="90.132.41.211;7pkt 7fpkt", shape=invtriangle, color=brown];
3972[label="90.132.41.211;7pkt 7fpkt", shape=invhouse, color=bisque];
stat833[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.132.41.211:1515, 212.84.25.36:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1515: (50%)&lt;BR/&gt; 1374: (7.14286%)&lt;BR/&gt; 1361: (7.14286%)&lt;BR/&gt; 1343: (7.14286%)&lt;BR/&gt; 1318: (7.14286%)&gt;];
}
2304--3278[label="1;7pkt 7fpkt"];
2304--3972[label="1;7pkt 7fpkt"];
3278--3972[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="212.84.25.36" src_ip="90.132.41.211" src_port="1515"/>
    </slice>
    <from sec="1072933674" usec="0"/>
    <to sec="1072934087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_834{
style=filled;
color=gray75;
2305[label="6.180.50.211;75pkt 75fpkt", shape=pentagon, color=darkviolet];
3279[label="6.180.50.211;75pkt 75fpkt", shape=invtriangle, color=brown];
3973[label="6.180.50.211;74pkt 74fpkt", shape=invhouse, color=bisque];
stat834[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.180.50.211:*, *:135}[50.6667%]&lt;BR/&gt;{6.180.50.211:*, *:445}[49.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (25.2232%)&lt;BR/&gt; 445: (24.7768%)&lt;BR/&gt; 4882: (0.669643%)&lt;BR/&gt; 4857: (0.669643%)&lt;BR/&gt; 4730: (0.669643%)&gt;];
}
2305--3279[label="1;75pkt 75fpkt"];
2305--3973[label="1;74pkt 74fpkt"];
3279--3973[label="1;74pkt 74fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="6.180.50.211"/>
      <filter dst_port="445" src_ip="6.180.50.211"/>
    </slice>
    <from sec="1072933228" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_835{
style=filled;
color=gray75;
2306[label="201.246.80.211;56pkt 56fpkt", shape=pentagon, color=darkviolet];
3280[label="201.246.80.211;56pkt 56fpkt", shape=invtriangle, color=brown];
3974[label="201.246.80.211;56pkt 56fpkt", shape=invhouse, color=bisque];
stat835[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.246.80.211:*, *:445}[51.7857%]&lt;BR/&gt;{201.246.80.211:*, *:135}[48.2143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.8929%)&lt;BR/&gt; 135: (24.1071%)&lt;BR/&gt; 1210: (1.78571%)&lt;BR/&gt; 4834: (0.892857%)&lt;BR/&gt; 4817: (0.892857%)&gt;];
}
2306--3280[label="1;56pkt 56fpkt"];
2306--3974[label="1;56pkt 56fpkt"];
3280--3974[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="201.246.80.211"/>
      <filter dst_port="135" src_ip="201.246.80.211"/>
    </slice>
    <from sec="1072933210" usec="0"/>
    <to sec="1072934018" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_836{
style=filled;
color=gray75;
2307[label="194.1.65.212;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3281[label="194.1.65.212;1pkt 1fpkt", shape=invtriangle, color=brown];
3975[label="194.1.65.212;1pkt 1fpkt", shape=invhouse, color=bisque];
stat836[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.1.65.212:40000, 212.139.217.26:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 40000: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2307--3281[label="1;1pkt 1fpkt"];
2307--3975[label="1;1pkt 1fpkt"];
3281--3975[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.139.217.26" dst_port="80" src_ip="194.1.65.212" src_port="40000"/>
    </slice>
    <from sec="1072934101" usec="0"/>
    <to sec="1072934102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_837{
style=filled;
color=gray75;
2309[label="156.143.147.212;27pkt 27fpkt", shape=pentagon, color=darkviolet];
3283[label="156.143.147.212;27pkt 27fpkt", shape=invtriangle, color=brown];
3976[label="156.143.147.212;27pkt 27fpkt", shape=invhouse, color=bisque];
stat837[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.143.147.212:*, 202.97.174.159:80}[44.4444%]&lt;BR/&gt;{156.143.147.212:*, 211.89.122.248:80}[37.037%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.1481%)&lt;BR/&gt; 37354: (1.85185%)&lt;BR/&gt; 27090: (1.85185%)&lt;BR/&gt; 27088: (1.85185%)&lt;BR/&gt; 27080: (1.85185%)&gt;];
}
2309--3283[label="1;27pkt 27fpkt"];
2309--3976[label="1;27pkt 27fpkt"];
3283--3976[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="202.97.174.159" dst_port="80" src_ip="156.143.147.212"/>
      <filter dst_ip="211.89.122.248" dst_port="80" src_ip="156.143.147.212"/>
    </slice>
    <from sec="1072933418" usec="0"/>
    <to sec="1072934079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_838{
style=filled;
color=gray75;
2323[label="205.218.198.215;250pkt 250fpkt", shape=pentagon, color=darkviolet];
3291[label="205.218.198.215;250pkt 250fpkt", shape=invtriangle, color=brown];
3981[label="205.218.198.215;250pkt 250fpkt", shape=invhouse, color=bisque];
stat838[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.218.198.215:1045, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1045: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2323--3291[label="1;250pkt 250fpkt"];
2323--3981[label="1;250pkt 250fpkt"];
3291--3981[label="1;250pkt 250fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="205.218.198.215" src_port="1045"/>
    </slice>
    <from sec="1072933492" usec="0"/>
    <to sec="1072933531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_839{
style=filled;
color=gray75;
2327[label="208.41.12.217;130pkt 130fpkt", shape=pentagon, color=darkviolet];
3294[label="208.41.12.217;130pkt 130fpkt", shape=invtriangle, color=brown];
3984[label="208.41.12.217;129pkt 129fpkt", shape=invhouse, color=bisque];
stat839[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.41.12.217:1043, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1043: (50%)&gt;];
}
2327--3294[label="1;130pkt 130fpkt"];
2327--3984[label="1;129pkt 129fpkt"];
3294--3984[label="1;129pkt 129fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="208.41.12.217" src_port="1043"/>
    </slice>
    <from sec="1072933218" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_840{
style=filled;
color=gray75;
2328[label="4.73.46.217;115pkt 115fpkt", shape=pentagon, color=darkviolet];
3295[label="4.73.46.217;115pkt 115fpkt", shape=invtriangle, color=brown];
stat840[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.73.46.217:0, *:0}[93.913%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (93.913%)&lt;BR/&gt; 80: (2.6087%)&lt;BR/&gt; 63416: (0.434783%)&lt;BR/&gt; 55198: (0.434783%)&lt;BR/&gt; 52946: (0.434783%)&gt;];
}
2328--3295[label="1;115pkt 115fpkt"];
</description>
    <slice>
      <filter src_ip="4.73.46.217"/>
    </slice>
    <from sec="1072933212" usec="0"/>
    <to sec="1072934096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_841{
style=filled;
color=gray75;
2331[label="90.106.21.219;44pkt 44fpkt", shape=pentagon, color=darkviolet];
3297[label="90.106.21.219;44pkt 44fpkt", shape=invtriangle, color=brown];
stat841[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.106.21.219:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4951: (1.13636%)&lt;BR/&gt; 4739: (1.13636%)&lt;BR/&gt; 4737: (1.13636%)&lt;BR/&gt; 4702: (1.13636%)&gt;];
}
2331--3297[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="90.106.21.219"/>
    </slice>
    <from sec="1072933270" usec="0"/>
    <to sec="1072934036" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889486,2.05965,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_842{
style=filled;
color=gray75;
824[label="152.6.240.141;d;143pkt 143fpkt", shape=diamond, color=yellow];
1732[label="6.90.249.85;20pkt 20fpkt", shape=pentagon, color=darkviolet];
2333[label="6.90.249.219;24pkt 24fpkt", shape=pentagon, color=darkviolet];
2854[label="6.90.249.85;19pkt 19fpkt", shape=invtriangle, color=brown];
3299[label="6.90.249.219;24pkt 24fpkt", shape=invtriangle, color=brown];
3678[label="6.90.249.85;19pkt 19fpkt", shape=invhouse, color=bisque];
3987[label="6.90.249.219;24pkt 24fpkt", shape=invhouse, color=bisque];
stat842[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 152.6.240.141:*}[71.0692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.1245%)&lt;BR/&gt; 53: (5.67766%)&lt;BR/&gt; 0: (4.0293%)&lt;BR/&gt; 32925: (0.732601%)&lt;BR/&gt; 1887: (0.732601%)&gt;];
}
824--1732[label="0.55;11pkt 11fpkt"];
824--1771[label="0.0425532;2pkt 2fpkt"];
824--2010[label="0.0212766;1pkt 1fpkt"];
824--2333[label="0.708333;17pkt 17fpkt"];
824--2854[label="0.526316;10pkt 10fpkt"];
824--3299[label="0.708333;17pkt 17fpkt"];
824--3678[label="0.526316;10pkt 10fpkt"];
824--3987[label="0.708333;17pkt 17fpkt"];
1732--2854[label="1;19pkt 19fpkt"];
1732--3678[label="1;19pkt 19fpkt"];
2333--3299[label="1;24pkt 24fpkt"];
2333--3987[label="1;24pkt 24fpkt"];
2854--3678[label="1;19pkt 19fpkt"];
3299--3987[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="152.6.240.141" src_port="80"/>
    </slice>
    <from sec="1072933227" usec="0"/>
    <to sec="1072934064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="22.131.77.221"/>
    </slice>
    <from sec="1072933542" usec="0"/>
    <to sec="1072934097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_844{
style=filled;
color=gray75;
2341[label="211.76.111.222;112pkt 112fpkt", shape=pentagon, color=darkviolet];
3304[label="211.76.111.222;112pkt 112fpkt", shape=invtriangle, color=brown];
3992[label="211.76.111.222;111pkt 111fpkt", shape=invhouse, color=bisque];
stat844[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.76.111.222:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2341--3304[label="1;112pkt 112fpkt"];
2341--3992[label="1;111pkt 111fpkt"];
3304--3992[label="1;111pkt 111fpkt"];
</description>
    <slice>
      <filter src_ip="211.76.111.222"/>
    </slice>
    <from sec="1072933212" usec="0"/>
    <to sec="1072934092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_845{
style=filled;
color=gray75;
2356[label="22.171.14.226;187pkt 187fpkt", shape=pentagon, color=darkviolet];
3313[label="22.171.14.226;187pkt 187fpkt", shape=invtriangle, color=brown];
3997[label="22.171.14.226;186pkt 186fpkt", shape=invhouse, color=bisque];
stat845[shape=component, label=&lt;Rules:&lt;BR/&gt;{22.171.14.226:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2356--3313[label="1;187pkt 187fpkt"];
2356--3997[label="1;186pkt 186fpkt"];
3313--3997[label="1;186pkt 186fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="22.171.14.226" src_port="1029"/>
    </slice>
    <from sec="1072933925" usec="0"/>
    <to sec="1072933938" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_846{
style=filled;
color=gray75;
2359[label="201.5.73.226;64pkt 64fpkt", shape=pentagon, color=darkviolet];
3315[label="201.5.73.226;64pkt 64fpkt", shape=invtriangle, color=brown];
3999[label="201.5.73.226;63pkt 63fpkt", shape=invhouse, color=bisque];
stat846[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.5.73.226:*, *:445}[53.125%]&lt;BR/&gt;{201.5.73.226:*, *:135}[46.875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (26.7016%)&lt;BR/&gt; 135: (23.2984%)&lt;BR/&gt; 4996: (0.78534%)&lt;BR/&gt; 4978: (0.78534%)&lt;BR/&gt; 4917: (0.78534%)&gt;];
}
2359--3315[label="1;64pkt 64fpkt"];
2359--3999[label="1;63pkt 63fpkt"];
3315--3999[label="1;63pkt 63fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="201.5.73.226"/>
      <filter dst_port="135" src_ip="201.5.73.226"/>
    </slice>
    <from sec="1072933204" usec="0"/>
    <to sec="1072934015" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_847{
style=filled;
color=gray75;
2363[label="22.178.171.226;53pkt 53fpkt", shape=pentagon, color=darkviolet];
3318[label="22.178.171.226;53pkt 53fpkt", shape=invtriangle, color=brown];
stat847[shape=component, label=&lt;Rules:&lt;BR/&gt;{22.178.171.226:*, *:445}[50.9434%]&lt;BR/&gt;{22.178.171.226:*, *:135}[49.0566%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.4717%)&lt;BR/&gt; 135: (24.5283%)&lt;BR/&gt; 4896: (0.943396%)&lt;BR/&gt; 4722: (0.943396%)&lt;BR/&gt; 4597: (0.943396%)&gt;];
}
2363--3318[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="22.178.171.226"/>
      <filter dst_port="135" src_ip="22.178.171.226"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934035" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_848{
style=filled;
color=gray75;
2365[label="194.128.241.226;114pkt 114fpkt", shape=pentagon, color=darkviolet];
3319[label="194.128.241.226;114pkt 114fpkt", shape=invtriangle, color=brown];
4001[label="194.128.241.226;114pkt 114fpkt", shape=invhouse, color=bisque];
stat848[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.128.241.226:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2365--3319[label="1;114pkt 114fpkt"];
2365--4001[label="1;114pkt 114fpkt"];
3319--4001[label="1;114pkt 114fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.128.241.226" src_port="1027"/>
    </slice>
    <from sec="1072933434" usec="0"/>
    <to sec="1072933456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="111.176.96.227"/>
    </slice>
    <from sec="1072933219" usec="0"/>
    <to sec="1072934097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_850{
style=filled;
color=gray75;
2368[label="200.212.133.227;44pkt 44fpkt", shape=pentagon, color=darkviolet];
3322[label="200.212.133.227;44pkt 44fpkt", shape=invtriangle, color=brown];
4004[label="200.212.133.227;44pkt 44fpkt", shape=invhouse, color=bisque];
stat850[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.212.133.227:*, *:135}[50%]&lt;BR/&gt;{200.212.133.227:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25%)&lt;BR/&gt; 135: (25%)&lt;BR/&gt; 4942: (1.13636%)&lt;BR/&gt; 4877: (1.13636%)&lt;BR/&gt; 4708: (1.13636%)&gt;];
}
2368--3322[label="1;44pkt 44fpkt"];
2368--4004[label="1;44pkt 44fpkt"];
3322--4004[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="200.212.133.227"/>
      <filter dst_port="135" src_ip="200.212.133.227"/>
    </slice>
    <from sec="1072933224" usec="0"/>
    <to sec="1072934013" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_851{
style=filled;
color=gray75;
2377[label="213.57.219.229;245pkt 245fpkt", shape=pentagon, color=darkviolet];
3330[label="213.57.219.229;245pkt 245fpkt", shape=invtriangle, color=brown];
4011[label="213.57.219.229;244pkt 244fpkt", shape=invhouse, color=bisque];
stat851[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.57.219.229:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2377--3330[label="1;245pkt 245fpkt"];
2377--4011[label="1;244pkt 244fpkt"];
3330--4011[label="1;244pkt 244fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="213.57.219.229" src_port="1026"/>
    </slice>
    <from sec="1072933847" usec="0"/>
    <to sec="1072933886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_852{
style=filled;
color=gray75;
2379[label="221.52.149.230;139pkt 139fpkt", shape=pentagon, color=darkviolet];
3332[label="221.52.149.230;139pkt 139fpkt", shape=invtriangle, color=brown];
4012[label="221.52.149.230;139pkt 139fpkt", shape=invhouse, color=bisque];
stat852[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.52.149.230:0, *:0}[94.2446%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.2446%)&lt;BR/&gt; 135: (2.8777%)&lt;BR/&gt; 15728: (0.359712%)&lt;BR/&gt; 13610: (0.359712%)&lt;BR/&gt; 10920: (0.359712%)&gt;];
}
2379--3332[label="1;139pkt 139fpkt"];
2379--4012[label="1;139pkt 139fpkt"];
3332--4012[label="1;139pkt 139fpkt"];
</description>
    <slice>
      <filter src_ip="221.52.149.230"/>
    </slice>
    <from sec="1072933212" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_853{
style=filled;
color=gray75;
2385[label="23.61.18.231;170pkt 170fpkt", shape=pentagon, color=darkviolet];
3334[label="23.61.18.231;170pkt 170fpkt", shape=invtriangle, color=brown];
stat853[shape=component, label=&lt;Rules:&lt;BR/&gt;{23.61.18.231:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 37734: (0.294118%)&lt;BR/&gt; 37696: (0.294118%)&lt;BR/&gt; 37665: (0.294118%)&lt;BR/&gt; 37661: (0.294118%)&gt;];
}
2385--3334[label="1;170pkt 170fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="23.61.18.231"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072933229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_854{
style=filled;
color=gray75;
2386[label="200.17.82.231;82pkt 82fpkt", shape=pentagon, color=darkviolet];
3335[label="200.17.82.231;82pkt 82fpkt", shape=invtriangle, color=brown];
stat854[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.17.82.231:*, *:445}[51.2195%]&lt;BR/&gt;{200.17.82.231:*, *:135}[48.7805%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.6098%)&lt;BR/&gt; 135: (24.3902%)&lt;BR/&gt; 3401: (1.21951%)&lt;BR/&gt; 2370: (1.21951%)&lt;BR/&gt; 4991: (0.609756%)&gt;];
}
2386--3335[label="1;82pkt 82fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="200.17.82.231"/>
      <filter dst_port="135" src_ip="200.17.82.231"/>
    </slice>
    <from sec="1072933203" usec="0"/>
    <to sec="1072934021" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_855{
style=filled;
color=gray75;
2387[label="194.141.215.231;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3336[label="194.141.215.231;1pkt 1fpkt", shape=invtriangle, color=brown];
4013[label="194.141.215.231;1pkt 1fpkt", shape=invhouse, color=bisque];
stat855[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.141.215.231:3160, 156.142.196.232:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3160: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
2387--3336[label="1;1pkt 1fpkt"];
2387--4013[label="1;1pkt 1fpkt"];
3336--4013[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="156.142.196.232" dst_port="25" src_ip="194.141.215.231" src_port="3160"/>
    </slice>
    <from sec="1072933364" usec="0"/>
    <to sec="1072933818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.112.79.235"/>
    </slice>
    <from sec="1072933229" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_857{
style=filled;
color=gray75;
2399[label="211.37.151.236;95pkt 95fpkt", shape=pentagon, color=darkviolet];
3342[label="211.37.151.236;95pkt 95fpkt", shape=invtriangle, color=brown];
4018[label="211.37.151.236;94pkt 94fpkt", shape=invhouse, color=bisque];
stat857[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.37.151.236:0, *:0}[91.5789%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (91.5493%)&lt;BR/&gt; 135: (2.11268%)&lt;BR/&gt; 80: (2.11268%)&lt;BR/&gt; 63215: (0.528169%)&lt;BR/&gt; 14151: (0.528169%)&gt;];
}
2399--3342[label="1;95pkt 95fpkt"];
2399--4018[label="1;94pkt 94fpkt"];
3342--4018[label="1;94pkt 94fpkt"];
</description>
    <slice>
      <filter src_ip="211.37.151.236"/>
    </slice>
    <from sec="1072933219" usec="0"/>
    <to sec="1072934080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_858{
style=filled;
color=gray75;
2400[label="109.89.164.236;120pkt 120fpkt", shape=pentagon, color=darkviolet];
3343[label="109.89.164.236;120pkt 120fpkt", shape=invtriangle, color=brown];
4019[label="109.89.164.236;120pkt 120fpkt", shape=invhouse, color=bisque];
stat858[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.89.164.236:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2400--3343[label="1;120pkt 120fpkt"];
2400--4019[label="1;120pkt 120fpkt"];
3343--4019[label="1;120pkt 120fpkt"];
</description>
    <slice>
      <filter src_ip="109.89.164.236"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_859{
style=filled;
color=gray75;
2402[label="212.9.179.237;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3344[label="212.9.179.237;2pkt 2fpkt", shape=invtriangle, color=brown];
4020[label="212.9.179.237;2pkt 2fpkt", shape=invhouse, color=bisque];
stat859[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.9.179.237:80, 156.143.25.0:33318}[50%]&lt;BR/&gt;{212.9.179.237:80, 156.143.25.0:33447}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33447: (25%)&lt;BR/&gt; 33318: (25%)&gt;];
}
2402--3344[label="1;2pkt 2fpkt"];
2402--4020[label="1;2pkt 2fpkt"];
3344--4020[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="156.143.25.0" dst_port="33447" src_ip="212.9.179.237" src_port="80"/>
      <filter dst_ip="156.143.25.0" dst_port="33318" src_ip="212.9.179.237" src_port="80"/>
    </slice>
    <from sec="1072933463" usec="0"/>
    <to sec="1072933544" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_860{
style=filled;
color=gray75;
2405[label="7.110.28.239;82pkt 82fpkt", shape=pentagon, color=darkviolet];
3346[label="7.110.28.239;82pkt 82fpkt", shape=invtriangle, color=brown];
4022[label="7.110.28.239;82pkt 82fpkt", shape=invhouse, color=bisque];
stat860[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.110.28.239:*, *:445}[53.6585%]&lt;BR/&gt;{7.110.28.239:*, *:135}[46.3415%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (26.8293%)&lt;BR/&gt; 135: (23.1707%)&lt;BR/&gt; 2486: (1.21951%)&lt;BR/&gt; 1182: (1.21951%)&lt;BR/&gt; 4954: (0.609756%)&gt;];
}
2405--3346[label="1;82pkt 82fpkt"];
2405--4022[label="1;82pkt 82fpkt"];
3346--4022[label="1;82pkt 82fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="7.110.28.239"/>
      <filter dst_port="135" src_ip="7.110.28.239"/>
    </slice>
    <from sec="1072933260" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.39.8.240"/>
    </slice>
    <from sec="1072933387" usec="0"/>
    <to sec="1072934009" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_862{
style=filled;
color=gray75;
2409[label="156.143.29.241;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3349[label="156.143.29.241;6pkt 6fpkt", shape=invtriangle, color=brown];
4023[label="156.143.29.241;5pkt 5fpkt", shape=invhouse, color=bisque];
stat862[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.143.29.241:80, 1.135.164.242:*}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.2941%)&lt;BR/&gt; 3995: (8.82353%)&lt;BR/&gt; 3994: (8.82353%)&lt;BR/&gt; 3993: (8.82353%)&lt;BR/&gt; 3992: (8.82353%)&gt;];
}
2409--3349[label="1;6pkt 6fpkt"];
2409--4023[label="1;5pkt 5fpkt"];
3349--4023[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="1.135.164.242" src_ip="156.143.29.241" src_port="80"/>
    </slice>
    <from sec="1072933699" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_863{
style=filled;
color=gray75;
2410[label="109.60.137.241;103pkt 103fpkt", shape=pentagon, color=darkviolet];
3350[label="109.60.137.241;103pkt 103fpkt", shape=invtriangle, color=brown];
4024[label="109.60.137.241;102pkt 102fpkt", shape=invhouse, color=bisque];
stat863[shape=component, label=&lt;Rules:&lt;BR/&gt;{109.60.137.241:13057, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13057: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
2410--3350[label="1;103pkt 103fpkt"];
2410--4024[label="1;102pkt 102fpkt"];
3350--4024[label="1;102pkt 102fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="109.60.137.241" src_port="13057"/>
    </slice>
    <from sec="1072933222" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_864{
style=filled;
color=gray75;
2413[label="204.153.2.242;535pkt 535fpkt", shape=pentagon, color=darkviolet];
3353[label="204.153.2.242;535pkt 535fpkt", shape=invtriangle, color=brown];
4026[label="204.153.2.242;534pkt 534fpkt", shape=invhouse, color=bisque];
stat864[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.153.2.242:1466, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1466: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
2413--3353[label="1;535pkt 535fpkt"];
2413--4026[label="1;534pkt 534fpkt"];
3353--4026[label="1;534pkt 534fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="204.153.2.242" src_port="1466"/>
    </slice>
    <from sec="1072933204" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_865{
style=filled;
color=gray75;
2416[label="200.98.136.242;45pkt 45fpkt", shape=pentagon, color=darkviolet];
3356[label="200.98.136.242;45pkt 45fpkt", shape=invtriangle, color=brown];
stat865[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.98.136.242:*, *:445}[51.1111%]&lt;BR/&gt;{200.98.136.242:*, *:135}[48.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.5556%)&lt;BR/&gt; 135: (24.4444%)&lt;BR/&gt; 4996: (1.11111%)&lt;BR/&gt; 4970: (1.11111%)&lt;BR/&gt; 4928: (1.11111%)&gt;];
}
2416--3356[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="200.98.136.242"/>
      <filter dst_port="135" src_ip="200.98.136.242"/>
    </slice>
    <from sec="1072933208" usec="0"/>
    <to sec="1072933987" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_866{
style=filled;
color=gray75;
2433[label="204.15.96.247;127pkt 127fpkt", shape=pentagon, color=darkviolet];
3372[label="204.15.96.247;127pkt 127fpkt", shape=invtriangle, color=brown];
4038[label="204.15.96.247;126pkt 126fpkt", shape=invhouse, color=bisque];
stat866[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.15.96.247:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 51048: (0.394737%)&lt;BR/&gt; 51044: (0.394737%)&lt;BR/&gt; 51040: (0.394737%)&lt;BR/&gt; 51036: (0.394737%)&gt;];
}
2433--3372[label="1;127pkt 127fpkt"];
2433--4038[label="1;126pkt 126fpkt"];
3372--4038[label="1;126pkt 126fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="204.15.96.247"/>
    </slice>
    <from sec="1072934001" usec="0"/>
    <to sec="1072934023" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_867{
style=filled;
color=gray75;
2434[label="6.252.101.247;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3373[label="6.252.101.247;1pkt 1fpkt", shape=invtriangle, color=brown];
stat867[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.252.101.247:80, 212.84.25.69:3667}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3667: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2434--3373[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.84.25.69" dst_port="3667" src_ip="6.252.101.247" src_port="80"/>
    </slice>
    <from sec="1072934097" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.67.117.247"/>
    </slice>
    <from sec="1072933201" usec="0"/>
    <to sec="1072934069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565959,2.08941,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_869{
style=filled;
color=gray75;
2438[label="5.223.148.249;66pkt 66fpkt", shape=pentagon, color=darkviolet];
3376[label="5.223.148.249;66pkt 66fpkt", shape=invtriangle, color=brown];
4040[label="5.223.148.249;65pkt 65fpkt", shape=invhouse, color=bisque];
stat869[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.223.148.249:*, *:135}[50%]&lt;BR/&gt;{5.223.148.249:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.1269%)&lt;BR/&gt; 135: (24.8731%)&lt;BR/&gt; 4913: (0.761421%)&lt;BR/&gt; 4909: (0.761421%)&lt;BR/&gt; 4906: (0.761421%)&gt;];
}
2438--3376[label="1;66pkt 66fpkt"];
2438--4040[label="1;65pkt 65fpkt"];
3376--4040[label="1;65pkt 65fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="5.223.148.249"/>
      <filter dst_port="135" src_ip="5.223.148.249"/>
    </slice>
    <from sec="1072933204" usec="0"/>
    <to sec="1072934085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_871{
style=filled;
color=gray75;
2441[label="111.4.23.250;495pkt 495fpkt", shape=pentagon, color=darkviolet];
3379[label="111.4.23.250;495pkt 495fpkt", shape=invtriangle, color=brown];
stat871[shape=component, label=&lt;Rules:&lt;BR/&gt;{111.4.23.250:1389, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1389: (50%)&gt;];
}
2441--3379[label="1;495pkt 495fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="111.4.23.250" src_port="1389"/>
    </slice>
    <from sec="1072933203" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_872{
style=filled;
color=gray75;
2444[label="210.112.30.251;94pkt 94fpkt", shape=pentagon, color=darkviolet];
3381[label="210.112.30.251;94pkt 94fpkt", shape=invtriangle, color=brown];
stat872[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.112.30.251:0, *:0}[95.7447%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.7447%)&lt;BR/&gt; 135: (1.06383%)&lt;BR/&gt; 80: (1.06383%)&lt;BR/&gt; 65043: (0.531915%)&lt;BR/&gt; 62463: (0.531915%)&gt;];
}
2444--3381[label="1;94pkt 94fpkt"];
</description>
    <slice>
      <filter src_ip="210.112.30.251"/>
    </slice>
    <from sec="1072933219" usec="0"/>
    <to sec="1072934071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.464305,2.09082,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_873{
style=filled;
color=gray75;
2447[label="201.98.50.253;43pkt 43fpkt", shape=pentagon, color=darkviolet];
3383[label="201.98.50.253;43pkt 43fpkt", shape=invtriangle, color=brown];
stat873[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.98.50.253:*, *:445}[51.1628%]&lt;BR/&gt;{201.98.50.253:*, *:135}[48.8372%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.5814%)&lt;BR/&gt; 135: (24.4186%)&lt;BR/&gt; 4903: (1.16279%)&lt;BR/&gt; 4859: (1.16279%)&lt;BR/&gt; 4829: (1.16279%)&gt;];
}
2447--3383[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="201.98.50.253"/>
      <filter dst_port="135" src_ip="201.98.50.253"/>
    </slice>
    <from sec="1072933207" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.554055,2.15328,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.210.56.255"/>
    </slice>
    <from sec="1072933203" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.0"/>
    </slice>
    <from sec="1072933208" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="209.85.154.0"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.2"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.6"/>
    </slice>
    <from sec="1072933207" usec="0"/>
    <to sec="1072934096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.7"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="90.110.134.7"/>
    </slice>
    <from sec="1072933214" usec="0"/>
    <to sec="1072934084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.8"/>
    </slice>
    <from sec="1072933203" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.74.239.10"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.201.2.12"/>
    </slice>
    <from sec="1072933202" usec="0"/>
    <to sec="1072934080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.13"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.18"/>
    </slice>
    <from sec="1072933210" usec="0"/>
    <to sec="1072934093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.13.212.19"/>
    </slice>
    <from sec="1072933253" usec="0"/>
    <to sec="1072934058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.21"/>
    </slice>
    <from sec="1072933208" usec="0"/>
    <to sec="1072934094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.22"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.641644,2.15191,999,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_889{
style=filled;
color=gray75;
2579[label="212.139.217.22;99pkt 99fpkt", shape=invtriangle, color=brown];
3483[label="212.139.217.22;98pkt 98fpkt", shape=invhouse, color=bisque];
stat889[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.139.217.22:25, *:*}[61.6162%]&lt;BR/&gt;{212.139.217.22:0, *:0}[20.202%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (30.7107%)&lt;BR/&gt; 0: (20.3046%)&lt;BR/&gt; 60189: (0.507614%)&lt;BR/&gt; 56852: (0.507614%)&lt;BR/&gt; 42608: (0.507614%)&gt;];
}
2579--3483[label="1;98pkt 98fpkt"];
</description>
    <slice>
      <filter src_ip="212.139.217.22" src_port="25"/>
      <filter src_ip="212.139.217.22"/>
    </slice>
    <from sec="1072933208" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.24"/>
    </slice>
    <from sec="1072933202" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.37.22.27"/>
    </slice>
    <from sec="1072933212" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551539,2.12504,999,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_892{
style=filled;
color=gray75;
1403[label="194.128.67.27;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3496[label="194.128.67.27;1pkt 1fpkt", shape=invhouse, color=bisque];
stat892[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.128.67.27:2500, 156.143.206.168:52309}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52309: (50%)&lt;BR/&gt; 2500: (50%)&gt;];
}
1403--3496[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="156.143.206.168" dst_port="52309" src_ip="194.128.67.27" src_port="2500"/>
    </slice>
    <from sec="1072933251" usec="0"/>
    <to sec="1072934096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.27"/>
    </slice>
    <from sec="1072933208" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.641644,2.15191,020,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_894{
style=filled;
color=gray75;
2601[label="173.195.244.27;333pkt 333fpkt", shape=invtriangle, color=brown];
3499[label="173.195.244.27;334pkt 334fpkt", shape=invhouse, color=bisque];
stat894[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.195.244.27:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2601--3499[label="1;333pkt 333fpkt"];
</description>
    <slice>
      <filter src_ip="173.195.244.27"/>
    </slice>
    <from sec="1072933207" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.29"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.30"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.31"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.148.144.31"/>
    </slice>
    <from sec="1072933201" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="23.48.91.34"/>
    </slice>
    <from sec="1072933365" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.37"/>
    </slice>
    <from sec="1072933208" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.38"/>
    </slice>
    <from sec="1072933207" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="20.77.238.38"/>
    </slice>
    <from sec="1072933254" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.157.188.40"/>
    </slice>
    <from sec="1072933204" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.42"/>
    </slice>
    <from sec="1072933203" usec="0"/>
    <to sec="1072934093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.209.153.45"/>
    </slice>
    <from sec="1072933209" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.224.228.45"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.122.48.52"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072933413" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.75.248.52"/>
    </slice>
    <from sec="1072933201" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551539,2.12504,010,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_909{
style=filled;
color=gray75;
1544[label="200.86.32.54;55pkt 55fpkt", shape=pentagon, color=darkviolet];
3578[label="200.86.32.54;55pkt 55fpkt", shape=invhouse, color=bisque];
stat909[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.86.32.54:*, *:445}[50.9091%]&lt;BR/&gt;{200.86.32.54:*, *:135}[49.0909%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.4545%)&lt;BR/&gt; 135: (24.5455%)&lt;BR/&gt; 4917: (0.909091%)&lt;BR/&gt; 4891: (0.909091%)&lt;BR/&gt; 4712: (0.909091%)&gt;];
}
1544--3578[label="1;55pkt 55fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="200.86.32.54"/>
      <filter dst_port="135" src_ip="200.86.32.54"/>
    </slice>
    <from sec="1072933220" usec="0"/>
    <to sec="1072934091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.32.146.55"/>
    </slice>
    <from sec="1072933201" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551539,2.12504,010,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_911{
style=filled;
color=gray75;
1552[label="7.107.184.55;87pkt 87fpkt", shape=pentagon, color=darkviolet];
3581[label="7.107.184.55;87pkt 87fpkt", shape=invhouse, color=bisque];
stat911[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.107.184.55:*, *:445}[50.5747%]&lt;BR/&gt;{7.107.184.55:*, *:135}[49.4253%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.2874%)&lt;BR/&gt; 135: (24.7126%)&lt;BR/&gt; 1367: (1.14943%)&lt;BR/&gt; 4960: (0.574713%)&lt;BR/&gt; 4920: (0.574713%)&gt;];
}
1552--3581[label="1;87pkt 87fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="7.107.184.55"/>
      <filter dst_port="135" src_ip="7.107.184.55"/>
    </slice>
    <from sec="1072933221" usec="0"/>
    <to sec="1072934089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="108.244.7.56"/>
    </slice>
    <from sec="1072933220" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="23.81.5.58"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.109.78.58"/>
    </slice>
    <from sec="1072933201" usec="0"/>
    <to sec="1072934089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889486,2.05965,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_915{
style=filled;
color=gray75;
637[label="209.6.31.61;s;264pkt 264fpkt", shape=diamond, color=yellow];
770[label="168.55.224.41;d;10pkt 10fpkt", shape=diamond, color=yellow];
850[label="168.55.160.5;d;97pkt 97fpkt", shape=diamond, color=yellow];
880[label="208.72.77.194;s;1pkt 1fpkt", shape=diamond, color=yellow];
891[label="212.84.24.71;d;100pkt 100fpkt", shape=diamond, color=yellow];
920[label="4.72.201.14;s;4pkt 4fpkt", shape=diamond, color=yellow];
931[label="168.55.160.1;d;92pkt 92fpkt", shape=diamond, color=yellow];
1895[label="109.89.82.119;43pkt 43fpkt", shape=pentagon, color=darkviolet];
2229[label="208.231.49.192;48pkt 48fpkt", shape=pentagon, color=darkviolet];
2295[label="208.231.49.208;28pkt 28fpkt", shape=pentagon, color=darkviolet];
2430[label="4.43.86.246;20pkt 20fpkt", shape=pentagon, color=darkviolet];
2977[label="109.89.82.119;42pkt 42fpkt", shape=invtriangle, color=brown];
3224[label="208.231.49.192;48pkt 48fpkt", shape=invtriangle, color=brown];
3272[label="208.231.49.208;28pkt 28fpkt", shape=invtriangle, color=brown];
3370[label="4.43.86.246;20pkt 20fpkt", shape=invtriangle, color=brown];
3602[label="209.6.31.61;227pkt 227fpkt", shape=invhouse, color=bisque];
3770[label="109.89.82.119;42pkt 42fpkt", shape=invhouse, color=bisque];
3967[label="208.231.49.208;28pkt 28fpkt", shape=invhouse, color=bisque];
stat915[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.6.31.61:*, *:25}[46.7557%]&lt;BR/&gt;{*:*, 168.55.160.5:*}[20.9924%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (47.0228%)&lt;BR/&gt; 53: (2.32049%)&lt;BR/&gt; 0: (0.437828%)&lt;BR/&gt; 6667: (0.30648%)&lt;BR/&gt; 11930: (0.262697%)&gt;];
}
637--638[label="0.00757576;2pkt 2fpkt"];
637--655[label="0.0151515;4pkt 4fpkt"];
637--656[label="0.00378788;1pkt 1fpkt"];
637--661[label="0.00456621;1pkt 1fpkt"];
637--696[label="0.00378788;1pkt 1fpkt"];
637--763[label="0.0138889;3pkt 3fpkt"];
637--770[label="0.2;2pkt 2fpkt"];
637--850[label="0.360825;35pkt 35fpkt"];
637--891[label="0.45;45pkt 45fpkt"];
637--926[label="0.00378788;1pkt 1fpkt"];
637--931[label="0.445652;41pkt 41fpkt"];
637--1078[label="0.00961538;1pkt 1fpkt"];
637--1204[label="0.00961538;1pkt 1fpkt"];
637--1221[label="0.00757576;2pkt 2fpkt"];
637--3602[label="1;227pkt 227fpkt"];
770--880[label="1;1pkt 1fpkt"];
770--920[label="0.25;1pkt 1fpkt"];
770--1221[label="0.1;1pkt 1fpkt"];
770--3602[label="0.2;2pkt 2fpkt"];
850--856[label="0.0169492;1pkt 1fpkt"];
850--857[label="0.0208333;1pkt 1fpkt"];
850--1264[label="0.0206186;2pkt 2fpkt"];
850--1895[label="0.186047;8pkt 8fpkt"];
850--1905[label="0.015625;1pkt 1fpkt"];
850--2229[label="0.125;6pkt 6fpkt"];
850--2295[label="0.178571;5pkt 5fpkt"];
850--2430[label="0.15;3pkt 3fpkt"];
850--2484[label="0.0206186;2pkt 2fpkt"];
850--2977[label="0.190476;8pkt 8fpkt"];
850--2985[label="0.015873;1pkt 1fpkt"];
850--3224[label="0.125;6pkt 6fpkt"];
850--3272[label="0.178571;5pkt 5fpkt"];
850--3370[label="0.15;3pkt 3fpkt"];
850--3602[label="0.360825;35pkt 35fpkt"];
850--3770[label="0.190476;8pkt 8fpkt"];
850--3967[label="0.178571;5pkt 5fpkt"];
891--2229[label="0.145833;7pkt 7fpkt"];
891--2295[label="0.178571;5pkt 5fpkt"];
891--2430[label="0.15;3pkt 3fpkt"];
891--3224[label="0.145833;7pkt 7fpkt"];
891--3272[label="0.178571;5pkt 5fpkt"];
891--3370[label="0.15;3pkt 3fpkt"];
891--3602[label="0.4;40pkt 40fpkt"];
891--3967[label="0.178571;5pkt 5fpkt"];
931--1895[label="0.162791;7pkt 7fpkt"];
931--2229[label="0.125;6pkt 6fpkt"];
931--2295[label="0.178571;5pkt 5fpkt"];
931--2430[label="0.15;3pkt 3fpkt"];
931--2977[label="0.166667;7pkt 7fpkt"];
931--3224[label="0.125;6pkt 6fpkt"];
931--3272[label="0.178571;5pkt 5fpkt"];
931--3370[label="0.15;3pkt 3fpkt"];
931--3602[label="0.391304;36pkt 36fpkt"];
931--3770[label="0.166667;7pkt 7fpkt"];
931--3967[label="0.178571;5pkt 5fpkt"];
1895--2977[label="1;42pkt 42fpkt"];
1895--3770[label="1;42pkt 42fpkt"];
2229--3224[label="1;48pkt 48fpkt"];
2295--3272[label="1;28pkt 28fpkt"];
2295--3967[label="1;28pkt 28fpkt"];
2430--3370[label="1;20pkt 20fpkt"];
2977--3770[label="1;42pkt 42fpkt"];
3272--3967[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="168.55.160.5"/>
      <filter dst_port="25" src_ip="209.6.31.61"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551539,2.12504,010,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_916{
style=filled;
color=gray75;
1586[label="5.213.75.62;57pkt 57fpkt", shape=pentagon, color=darkviolet];
3605[label="5.213.75.62;58pkt 58fpkt", shape=invhouse, color=bisque];
stat916[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.213.75.62:*, *:445}[51.7241%]&lt;BR/&gt;{5.213.75.62:*, *:135}[48.2759%]&lt;BR/&gt;{5.213.75.62:*, 156.143.145.224:*}[24.1379%]&lt;BR/&gt;{5.213.75.62:*, 156.143.189.250:*}[20.6897%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.6522%)&lt;BR/&gt; 135: (24.3478%)&lt;BR/&gt; 4889: (0.869565%)&lt;BR/&gt; 4847: (0.869565%)&lt;BR/&gt; 4803: (0.869565%)&gt;];
}
1586--3605[label="1;57pkt 57fpkt"];
</description>
    <slice>
      <filter dst_ip="156.143.145.224" src_ip="5.213.75.62"/>
      <filter dst_ip="156.143.189.250" src_ip="5.213.75.62"/>
      <filter dst_port="445" src_ip="5.213.75.62"/>
      <filter dst_port="135" src_ip="5.213.75.62"/>
    </slice>
    <from sec="1072933202" usec="0"/>
    <to sec="1072934090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.211.214.63"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.9.42.66"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="7.81.22.67"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.67"/>
    </slice>
    <from sec="1072933205" usec="0"/>
    <to sec="1072934094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="111.133.104.68"/>
    </slice>
    <from sec="1072933405" usec="0"/>
    <to sec="1072933674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="109.11.38.69"/>
    </slice>
    <from sec="1072933201" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.69"/>
    </slice>
    <from sec="1072933209" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.70"/>
    </slice>
    <from sec="1072933210" usec="0"/>
    <to sec="1072934097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.71"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.76"/>
    </slice>
    <from sec="1072933208" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.81"/>
    </slice>
    <from sec="1072933207" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.82"/>
    </slice>
    <from sec="1072933212" usec="0"/>
    <to sec="1072934097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.83"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.138.175.84"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934065" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.86"/>
    </slice>
    <from sec="1072933212" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.43.86.89"/>
    </slice>
    <from sec="1072933202" usec="0"/>
    <to sec="1072934073" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.91"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.87.8.93"/>
    </slice>
    <from sec="1072933284" usec="0"/>
    <to sec="1072933546" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.6.51.93"/>
    </slice>
    <from sec="1072933512" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.93"/>
    </slice>
    <from sec="1072933209" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.54.29.96"/>
    </slice>
    <from sec="1072933240" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.96"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.178.125.97"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.98"/>
    </slice>
    <from sec="1072933208" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="23.107.145.98"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="108.47.201.98"/>
    </slice>
    <from sec="1072933224" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="90.106.201.101"/>
    </slice>
    <from sec="1072933405" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.102"/>
    </slice>
    <from sec="1072933209" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.104"/>
    </slice>
    <from sec="1072933207" usec="0"/>
    <to sec="1072934094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.120.128.104"/>
    </slice>
    <from sec="1072933216" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.106"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.108"/>
    </slice>
    <from sec="1072933208" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="7.99.209.108"/>
    </slice>
    <from sec="1072933256" usec="0"/>
    <to sec="1072934024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.110"/>
    </slice>
    <from sec="1072933210" usec="0"/>
    <to sec="1072934097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.111"/>
    </slice>
    <from sec="1072933210" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.113"/>
    </slice>
    <from sec="1072933210" usec="0"/>
    <to sec="1072934098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.116"/>
    </slice>
    <from sec="1072933210" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.117.75.119"/>
    </slice>
    <from sec="1072933565" usec="0"/>
    <to sec="1072933716" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.120"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.88.71.122"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551539,2.12504,002,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_957{
style=filled;
color=gray75;
1913[label="90.77.4.123;216pkt 216fpkt", shape=pentagon, color=darkviolet];
3782[label="90.77.4.123;198pkt 198fpkt", shape=invhouse, color=bisque];
stat957[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.77.4.123:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
1913--3782[label="1;198pkt 198fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="90.77.4.123" src_port="1025"/>
    </slice>
    <from sec="1072933623" usec="0"/>
    <to sec="1072933659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="195.56.41.124"/>
    </slice>
    <from sec="1072933211" usec="0"/>
    <to sec="1072934092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="7.0.231.125"/>
    </slice>
    <from sec="1072933205" usec="0"/>
    <to sec="1072934046" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="108.233.101.134"/>
    </slice>
    <from sec="1072933205" usec="0"/>
    <to sec="1072933924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.29.220.136"/>
    </slice>
    <from sec="1072933233" usec="0"/>
    <to sec="1072933262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.176.159.139"/>
    </slice>
    <from sec="1072933302" usec="0"/>
    <to sec="1072933889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551539,2.12504,010,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_963{
style=filled;
color=gray75;
2021[label="7.111.137.144;88pkt 88fpkt", shape=pentagon, color=darkviolet];
3833[label="7.111.137.144;87pkt 87fpkt", shape=invhouse, color=bisque];
stat963[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.111.137.144:*, *:445}[51.1364%]&lt;BR/&gt;{7.111.137.144:*, *:135}[48.8636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.4286%)&lt;BR/&gt; 135: (24.5714%)&lt;BR/&gt; 2754: (1.14286%)&lt;BR/&gt; 1107: (1.14286%)&lt;BR/&gt; 1051: (1.14286%)&gt;];
}
2021--3833[label="1;87pkt 87fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="7.111.137.144"/>
      <filter dst_port="135" src_ip="7.111.137.144"/>
    </slice>
    <from sec="1072933213" usec="0"/>
    <to sec="1072934061" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="6.235.161.144"/>
    </slice>
    <from sec="1072933682" usec="0"/>
    <to sec="1072933730" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="72.178.113.146"/>
    </slice>
    <from sec="1072934101" usec="0"/>
    <to sec="1072934102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551539,2.12504,503,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_966{
style=filled;
color=gray75;
2050[label="111.176.114.148;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3849[label="111.176.114.148;1pkt 1fpkt", shape=invhouse, color=bisque];
stat966[shape=component, label=&lt;Rules:&lt;BR/&gt;{111.176.114.148:10208, 173.165.168.175:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10208: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2050--3849[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="173.165.168.175" dst_port="80" src_ip="111.176.114.148" src_port="10208"/>
    </slice>
    <from sec="1072933711" usec="0"/>
    <to sec="1072933731" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.108.29.151"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,502,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.208.125.151"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934037" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.141.44.152"/>
    </slice>
    <from sec="1072933703" usec="0"/>
    <to sec="1072934005" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="90.79.235.152"/>
    </slice>
    <from sec="1072933206" usec="0"/>
    <to sec="1072934077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="145.49.85.156"/>
    </slice>
    <from sec="1072933231" usec="0"/>
    <to sec="1072934099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.112.170.179"/>
    </slice>
    <from sec="1072933201" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="5.119.38.183"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.59.210.183"/>
    </slice>
    <from sec="1072933200" usec="0"/>
    <to sec="1072934102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.97.169.188"/>
    </slice>
    <from sec="1072933843" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="108.35.72.195"/>
    </slice>
    <from sec="1072933218" usec="0"/>
    <to sec="1072934018" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="6.226.108.200"/>
    </slice>
    <from sec="1072933700" usec="0"/>
    <to sec="1072933843" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="220.65.122.205"/>
    </slice>
    <from sec="1072934101" usec="0"/>
    <to sec="1072934102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="23.57.6.206"/>
    </slice>
    <from sec="1072933201" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="111.249.144.206"/>
    </slice>
    <from sec="1072933203" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.121.45.207"/>
    </slice>
    <from sec="1072933346" usec="0"/>
    <to sec="1072934063" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.217.109.208"/>
    </slice>
    <from sec="1072933636" usec="0"/>
    <to sec="1072933918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="153.129.148.219"/>
    </slice>
    <from sec="1072934028" usec="0"/>
    <to sec="1072934048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="22.131.77.221"/>
    </slice>
    <from sec="1072933542" usec="0"/>
    <to sec="1072934097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.628962,2.18652,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.112.79.235"/>
    </slice>
    <from sec="1072933229" usec="0"/>
    <to sec="1072934100" usec="0"/>
  </anomaly>

</admd:annotation>
