<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="0.689601,1.94406,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="208.47.114.89" dst_port="80" proto="tcp" src_ip="52.218.192.1" src_port="33371"/>
      <from sec="1075698842" usec="0"/>
      <to sec="1075698846" usec="0"/>
    </slice>
    <from sec="1075698839" usec="0"/>
    <to sec="1075698846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="143.110.92.171" dst_port="25" proto="tcp" src_ip="73.3.158.2" src_port="2908"/>
      <from sec="1075698165" usec="0"/>
      <to sec="1075698172" usec="0"/>
    </slice>
    <from sec="1075698165" usec="0"/>
    <to sec="1075698172" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="209.43.83.45" dst_port="6970" proto="udp" src_ip="196.66.194.102" src_port="13014"/>
      <from sec="1075698490" usec="0"/>
      <to sec="1075698498" usec="0"/>
    </slice>
    <from sec="1075698490" usec="0"/>
    <to sec="1075698498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="143.110.92.171" dst_port="25" proto="tcp" src_ip="201.73.229.143" src_port="23268"/>
      <from sec="1075698533" usec="0"/>
      <to sec="1075698538" usec="0"/>
    </slice>
    <from sec="1075698533" usec="0"/>
    <to sec="1075698538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="148.180.220.21" dst_port="4467" proto="tcp" src_ip="50.150.192.159" src_port="80"/>
      <filter dst_ip="148.180.220.21" dst_port="39302" proto="tcp" src_ip="50.150.192.159" src_port="80"/>
      <filter dst_ip="148.180.220.21" dst_port="39307" proto="tcp" src_ip="50.150.192.159" src_port="80"/>
      <filter dst_ip="148.180.220.21" dst_port="39309" proto="tcp" src_ip="50.150.192.159" src_port="80"/>
      <filter dst_ip="164.229.211.220" dst_port="4467" proto="tcp" src_ip="50.150.192.159" src_port="80"/>
      <filter dst_ip="164.229.211.220" dst_port="39302" proto="tcp" src_ip="50.150.192.159" src_port="80"/>
      <filter dst_ip="164.229.211.220" dst_port="39307" proto="tcp" src_ip="50.150.192.159" src_port="80"/>
      <filter dst_ip="164.229.211.220" dst_port="39309" proto="tcp" src_ip="50.150.192.159" src_port="80"/>
      <from sec="1075698351" usec="0"/>
      <to sec="1075698357" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="148.180.220.21" dst_port="4467" proto="tcp" src_ip="49.121.208.192" src_port="80"/>
      <filter dst_ip="148.180.220.21" dst_port="39302" proto="tcp" src_ip="49.121.208.192" src_port="80"/>
      <filter dst_ip="148.180.220.21" dst_port="39307" proto="tcp" src_ip="49.121.208.192" src_port="80"/>
      <filter dst_ip="148.180.220.21" dst_port="39309" proto="tcp" src_ip="49.121.208.192" src_port="80"/>
      <filter dst_ip="164.229.211.220" dst_port="4467" proto="tcp" src_ip="49.121.208.192" src_port="80"/>
      <filter dst_ip="164.229.211.220" dst_port="39302" proto="tcp" src_ip="49.121.208.192" src_port="80"/>
      <filter dst_ip="164.229.211.220" dst_port="39307" proto="tcp" src_ip="49.121.208.192" src_port="80"/>
      <filter dst_ip="164.229.211.220" dst_port="39309" proto="tcp" src_ip="49.121.208.192" src_port="80"/>
      <from sec="1075698356" usec="0"/>
      <to sec="1075698358" usec="0"/>
    </slice>
    <from sec="1075698351" usec="0"/>
    <to sec="1075698358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="135" proto="tcp" src_ip="73.135.138.218" src_port="80"/>
      <filter dst_port="445" proto="tcp" src_ip="73.135.138.218" src_port="80"/>
      <filter dst_port="139" proto="tcp" src_ip="73.135.138.218" src_port="80"/>
      <from sec="1075698832" usec="0"/>
      <to sec="1075698901" usec="0"/>
    </slice>
    <from sec="1075698832" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="122.242.104.5" dst_port="80" proto="tcp" src_ip="143.111.92.229" src_port="1417"/>
      <filter dst_ip="122.242.104.5" dst_port="80" proto="tcp" src_ip="143.111.92.229" src_port="1418"/>
      <from sec="1075698859" usec="0"/>
      <to sec="1075698888" usec="0"/>
    </slice>
    <from sec="1075698859" usec="0"/>
    <to sec="1075698888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="201.24.181.104" dst_port="80" proto="tcp" src_ip="143.111.92.248" src_port="3577"/>
      <filter dst_ip="201.24.181.104" dst_port="25" proto="tcp" src_ip="143.111.92.248" src_port="3577"/>
      <filter dst_ip="201.24.181.104" dst_port="80" proto="tcp" src_ip="143.111.92.248" src_port="3579"/>
      <filter dst_ip="201.24.181.104" dst_port="25" proto="tcp" src_ip="143.111.92.248" src_port="3579"/>
      <filter dst_ip="201.24.181.104" dst_port="80" proto="tcp" src_ip="143.111.92.248" src_port="1952"/>
      <filter dst_ip="201.24.181.104" dst_port="25" proto="tcp" src_ip="143.111.92.248" src_port="1952"/>
      <filter dst_ip="143.110.230.200" dst_port="80" proto="tcp" src_ip="143.111.92.248" src_port="3577"/>
      <filter dst_ip="143.110.230.200" dst_port="25" proto="tcp" src_ip="143.111.92.248" src_port="3577"/>
      <filter dst_ip="143.110.230.200" dst_port="80" proto="tcp" src_ip="143.111.92.248" src_port="3579"/>
      <filter dst_ip="143.110.230.200" dst_port="25" proto="tcp" src_ip="143.111.92.248" src_port="3579"/>
      <filter dst_ip="143.110.230.200" dst_port="80" proto="tcp" src_ip="143.111.92.248" src_port="1952"/>
      <filter dst_ip="143.110.230.200" dst_port="25" proto="tcp" src_ip="143.111.92.248" src_port="1952"/>
      <from sec="1075698686" usec="0"/>
      <to sec="1075698689" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="201.24.181.104" dst_port="80" proto="tcp" src_ip="204.9.1.5" src_port="3577"/>
      <filter dst_ip="201.24.181.104" dst_port="25" proto="tcp" src_ip="204.9.1.5" src_port="3577"/>
      <filter dst_ip="201.24.181.104" dst_port="80" proto="tcp" src_ip="204.9.1.5" src_port="3579"/>
      <filter dst_ip="201.24.181.104" dst_port="25" proto="tcp" src_ip="204.9.1.5" src_port="3579"/>
      <filter dst_ip="201.24.181.104" dst_port="80" proto="tcp" src_ip="204.9.1.5" src_port="1952"/>
      <filter dst_ip="201.24.181.104" dst_port="25" proto="tcp" src_ip="204.9.1.5" src_port="1952"/>
      <filter dst_ip="143.110.230.200" dst_port="80" proto="tcp" src_ip="204.9.1.5" src_port="3577"/>
      <filter dst_ip="143.110.230.200" dst_port="25" proto="tcp" src_ip="204.9.1.5" src_port="3577"/>
      <filter dst_ip="143.110.230.200" dst_port="80" proto="tcp" src_ip="204.9.1.5" src_port="3579"/>
      <filter dst_ip="143.110.230.200" dst_port="25" proto="tcp" src_ip="204.9.1.5" src_port="3579"/>
      <filter dst_ip="143.110.230.200" dst_port="80" proto="tcp" src_ip="204.9.1.5" src_port="1952"/>
      <filter dst_ip="143.110.230.200" dst_port="25" proto="tcp" src_ip="204.9.1.5" src_port="1952"/>
      <from sec="1075698689" usec="0"/>
      <to sec="1075698693" usec="0"/>
    </slice>
    <from sec="1075698686" usec="0"/>
    <to sec="1075698693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="143.111.88.101" dst_port="17491" proto="tcp" src_ip="213.174.80.228" src_port="80"/>
      <filter dst_ip="143.110.36.106" dst_port="17491" proto="tcp" src_ip="213.174.80.228" src_port="80"/>
      <filter dst_ip="143.111.88.102" dst_port="17491" proto="tcp" src_ip="213.174.80.228" src_port="80"/>
      <filter dst_ip="143.111.28.137" dst_port="17491" proto="tcp" src_ip="213.174.80.228" src_port="80"/>
      <from sec="1075698476" usec="0"/>
      <to sec="1075698879" usec="0"/>
    </slice>
    <from sec="1075698476" usec="0"/>
    <to sec="1075698879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="209.36.37.179" src_ip="209.76.147.20"/>
      <from sec="1075698187" usec="0"/>
      <to sec="1075698846" usec="0"/>
    </slice>
    <from sec="1075698187" usec="0"/>
    <to sec="1075698846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="219.214.5.152" dst_port="80" proto="tcp" src_ip="143.111.89.66" src_port="3871"/>
      <filter dst_ip="215.106.229.234" dst_port="80" proto="tcp" src_ip="143.111.89.66" src_port="3871"/>
      <from sec="1075698149" usec="0"/>
      <to sec="1075698847" usec="0"/>
    </slice>
    <from sec="1075698149" usec="0"/>
    <to sec="1075698847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="210.154.41.3" src_port="1025"/>
      <from sec="1075698220" usec="0"/>
      <to sec="1075698231" usec="0"/>
    </slice>
    <from sec="1075698220" usec="0"/>
    <to sec="1075698231" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="75.4.197.8" src_port="1031"/>
      <from sec="1075698449" usec="0"/>
      <to sec="1075698477" usec="0"/>
    </slice>
    <from sec="1075698449" usec="0"/>
    <to sec="1075698477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="35.146.155.10" src_port="1025"/>
      <from sec="1075698893" usec="0"/>
      <to sec="1075698901" usec="0"/>
    </slice>
    <from sec="1075698893" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="203.76.94.17" src_port="1025"/>
      <from sec="1075698682" usec="0"/>
      <to sec="1075698692" usec="0"/>
    </slice>
    <from sec="1075698682" usec="0"/>
    <to sec="1075698692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="192.170.129.35" src_port="64581"/>
      <from sec="1075698678" usec="0"/>
      <to sec="1075698684" usec="0"/>
    </slice>
    <from sec="1075698678" usec="0"/>
    <to sec="1075698685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="203.30.34.41" src_port="1031"/>
      <from sec="1075698483" usec="0"/>
      <to sec="1075698491" usec="0"/>
    </slice>
    <from sec="1075698483" usec="0"/>
    <to sec="1075698491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="164.229.135.173" dst_port="137" proto="tcp" src_ip="197.169.115.45" src_port="1025"/>
      <filter dst_ip="164.229.135.173" dst_port="137" proto="udp" src_ip="197.169.115.45" src_port="1025"/>
      <filter dst_ip="164.229.135.173" dst_port="137" proto="tcp" src_ip="197.169.115.45" src_port="80"/>
      <filter dst_ip="164.229.135.173" dst_port="137" proto="udp" src_ip="197.169.115.45" src_port="80"/>
      <from sec="1075698000" usec="0"/>
      <to sec="1075698008" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="164.229.135.173" dst_port="137" proto="tcp" src_ip="203.83.39.45" src_port="1025"/>
      <filter dst_ip="164.229.135.173" dst_port="137" proto="udp" src_ip="203.83.39.45" src_port="1025"/>
      <filter dst_ip="164.229.135.173" dst_port="137" proto="tcp" src_ip="203.83.39.45" src_port="80"/>
      <filter dst_ip="164.229.135.173" dst_port="137" proto="udp" src_ip="203.83.39.45" src_port="80"/>
      <from sec="1075698000" usec="0"/>
      <to sec="1075698006" usec="0"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698008" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="220.152.15.48" src_port="11618"/>
      <from sec="1075698615" usec="0"/>
      <to sec="1075698630" usec="0"/>
    </slice>
    <from sec="1075698615" usec="0"/>
    <to sec="1075698630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="203.29.195.53" src_port="1081"/>
      <from sec="1075698420" usec="0"/>
      <to sec="1075698442" usec="0"/>
    </slice>
    <from sec="1075698420" usec="0"/>
    <to sec="1075698442" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="73.219.89.58" src_port="1029"/>
      <filter dst_port="137" proto="udp" src_ip="73.219.89.58" src_port="1029"/>
      <from sec="1075698182" usec="0"/>
      <to sec="1075698188" usec="0"/>
    </slice>
    <from sec="1075698182" usec="0"/>
    <to sec="1075698188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="209.208.225.63" src_port="33285"/>
      <from sec="1075698622" usec="0"/>
      <to sec="1075698630" usec="0"/>
    </slice>
    <from sec="1075698622" usec="0"/>
    <to sec="1075698630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="32.192.22.64" src_port="1028"/>
      <from sec="1075698302" usec="0"/>
      <to sec="1075698364" usec="0"/>
    </slice>
    <from sec="1075698302" usec="0"/>
    <to sec="1075698364" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="209.133.108.222" dst_port="137" proto="tcp" src_ip="203.8.168.64" src_port="64817"/>
      <filter dst_ip="209.133.108.222" dst_port="137" proto="udp" src_ip="203.8.168.64" src_port="64817"/>
      <from sec="1075698742" usec="0"/>
      <to sec="1075698760" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="209.133.108.222" dst_port="137" proto="tcp" src_ip="49.120.72.64" src_port="64817"/>
      <filter dst_ip="209.133.108.222" dst_port="137" proto="udp" src_ip="49.120.72.64" src_port="64817"/>
      <from sec="1075698739" usec="0"/>
      <to sec="1075698760" usec="0"/>
    </slice>
    <from sec="1075698739" usec="0"/>
    <to sec="1075698760" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="73.220.244.66" src_port="1030"/>
      <filter dst_port="137" proto="udp" src_ip="73.220.244.66" src_port="1030"/>
      <from sec="1075698859" usec="0"/>
      <to sec="1075698874" usec="0"/>
    </slice>
    <from sec="1075698859" usec="0"/>
    <to sec="1075698874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="73.100.87.72" src_port="1028"/>
      <from sec="1075698276" usec="0"/>
      <to sec="1075698286" usec="0"/>
    </slice>
    <from sec="1075698276" usec="0"/>
    <to sec="1075698286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="203.94.145.73" src_port="5011"/>
      <from sec="1075698448" usec="0"/>
      <to sec="1075698475" usec="0"/>
    </slice>
    <from sec="1075698448" usec="0"/>
    <to sec="1075698475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="202.140.230.74" src_port="3150"/>
      <from sec="1075698407" usec="0"/>
      <to sec="1075698414" usec="0"/>
    </slice>
    <from sec="1075698407" usec="0"/>
    <to sec="1075698414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="203.75.235.87" src_port="49114"/>
      <from sec="1075698016" usec="0"/>
      <to sec="1075698023" usec="0"/>
    </slice>
    <from sec="1075698016" usec="0"/>
    <to sec="1075698023" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="203.26.66.93" src_port="1031"/>
      <from sec="1075698475" usec="0"/>
      <to sec="1075698495" usec="0"/>
    </slice>
    <from sec="1075698475" usec="0"/>
    <to sec="1075698495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="203.19.84.94" src_port="1026"/>
      <from sec="1075698300" usec="0"/>
      <to sec="1075698308" usec="0"/>
    </slice>
    <from sec="1075698300" usec="0"/>
    <to sec="1075698308" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="34.76.101.94" src_port="48712"/>
      <from sec="1075698215" usec="0"/>
      <to sec="1075698239" usec="0"/>
    </slice>
    <from sec="1075698215" usec="0"/>
    <to sec="1075698239" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="203.50.65.103" src_port="54955"/>
      <from sec="1075698247" usec="0"/>
      <to sec="1075698256" usec="0"/>
    </slice>
    <from sec="1075698247" usec="0"/>
    <to sec="1075698258" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="195.81.212.104" src_port="1025"/>
      <from sec="1075698664" usec="0"/>
      <to sec="1075698674" usec="0"/>
    </slice>
    <from sec="1075698664" usec="0"/>
    <to sec="1075698674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="73.26.248.110" src_port="1033"/>
      <from sec="1075698725" usec="0"/>
      <to sec="1075698749" usec="0"/>
    </slice>
    <from sec="1075698725" usec="0"/>
    <to sec="1075698749" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="34.206.228.112" src_port="25281"/>
      <filter dst_port="137" proto="udp" src_ip="34.206.228.112" src_port="25281"/>
      <filter dst_port="137" proto="tcp" src_ip="34.206.228.112" src_port="1863"/>
      <filter dst_port="137" proto="udp" src_ip="34.206.228.112" src_port="1863"/>
      <from sec="1075698865" usec="0"/>
      <to sec="1075698872" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="213.217.12.112" src_port="25281"/>
      <filter dst_port="137" proto="udp" src_ip="213.217.12.112" src_port="25281"/>
      <filter dst_port="137" proto="tcp" src_ip="213.217.12.112" src_port="1863"/>
      <filter dst_port="137" proto="udp" src_ip="213.217.12.112" src_port="1863"/>
      <from sec="1075698867" usec="0"/>
      <to sec="1075698872" usec="0"/>
    </slice>
    <from sec="1075698865" usec="0"/>
    <to sec="1075698872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="209.36.37.67" dst_port="137" proto="tcp" src_ip="52.218.192.116" src_port="1025"/>
      <filter dst_ip="209.36.37.67" dst_port="137" proto="udp" src_ip="52.218.192.116" src_port="1025"/>
      <filter dst_ip="209.36.37.67" dst_port="137" proto="tcp" src_ip="52.218.192.116" src_port="80"/>
      <filter dst_ip="209.36.37.67" dst_port="137" proto="udp" src_ip="52.218.192.116" src_port="80"/>
      <from sec="1075698560" usec="0"/>
      <to sec="1075698588" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="209.36.37.67" dst_port="137" proto="tcp" src_ip="194.46.232.116" src_port="1025"/>
      <filter dst_ip="209.36.37.67" dst_port="137" proto="udp" src_ip="194.46.232.116" src_port="1025"/>
      <filter dst_ip="209.36.37.67" dst_port="137" proto="tcp" src_ip="194.46.232.116" src_port="80"/>
      <filter dst_ip="209.36.37.67" dst_port="137" proto="udp" src_ip="194.46.232.116" src_port="80"/>
      <from sec="1075698561" usec="0"/>
      <to sec="1075698588" usec="0"/>
    </slice>
    <from sec="1075698560" usec="0"/>
    <to sec="1075698588" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="48.110.134.142" src_port="1026"/>
      <from sec="1075698674" usec="0"/>
      <to sec="1075698693" usec="0"/>
    </slice>
    <from sec="1075698674" usec="0"/>
    <to sec="1075698693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="203.10.13.150" src_port="1029"/>
      <from sec="1075698413" usec="0"/>
      <to sec="1075698428" usec="0"/>
    </slice>
    <from sec="1075698413" usec="0"/>
    <to sec="1075698428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="143.111.244.7" dst_port="137" proto="tcp" src_ip="35.179.129.164" src_port="27679"/>
      <filter dst_ip="143.111.244.7" dst_port="137" proto="udp" src_ip="35.179.129.164" src_port="27679"/>
      <filter dst_ip="143.111.244.7" dst_port="137" proto="tcp" src_ip="35.179.129.164" src_port="80"/>
      <filter dst_ip="143.111.244.7" dst_port="137" proto="udp" src_ip="35.179.129.164" src_port="80"/>
      <from sec="1075698285" usec="0"/>
      <to sec="1075698293" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="143.111.244.7" dst_port="137" proto="tcp" src_ip="49.113.145.164" src_port="27679"/>
      <filter dst_ip="143.111.244.7" dst_port="137" proto="udp" src_ip="49.113.145.164" src_port="27679"/>
      <filter dst_ip="143.111.244.7" dst_port="137" proto="tcp" src_ip="49.113.145.164" src_port="80"/>
      <filter dst_ip="143.111.244.7" dst_port="137" proto="udp" src_ip="49.113.145.164" src_port="80"/>
      <from sec="1075698289" usec="0"/>
      <to sec="1075698291" usec="0"/>
    </slice>
    <from sec="1075698285" usec="0"/>
    <to sec="1075698293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="137.37.215.74" dst_port="137" proto="tcp" src_ip="34.78.5.170" src_port="1025"/>
      <filter dst_ip="137.37.215.74" dst_port="137" proto="udp" src_ip="34.78.5.170" src_port="1025"/>
      <filter dst_ip="137.37.215.74" dst_port="80" proto="tcp" src_ip="34.78.5.170" src_port="1025"/>
      <filter dst_ip="137.37.215.74" dst_port="80" proto="udp" src_ip="34.78.5.170" src_port="1025"/>
      <from sec="1075698525" usec="0"/>
      <to sec="1075698539" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="137.37.215.74" dst_port="137" proto="tcp" src_ip="75.5.29.36" src_port="1025"/>
      <filter dst_ip="137.37.215.74" dst_port="137" proto="udp" src_ip="75.5.29.36" src_port="1025"/>
      <filter dst_ip="137.37.215.74" dst_port="80" proto="tcp" src_ip="75.5.29.36" src_port="1025"/>
      <filter dst_ip="137.37.215.74" dst_port="80" proto="udp" src_ip="75.5.29.36" src_port="1025"/>
      <from sec="1075698527" usec="0"/>
      <to sec="1075698536" usec="0"/>
    </slice>
    <from sec="1075698525" usec="0"/>
    <to sec="1075698540" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="200.166.30.187" src_port="1027"/>
      <from sec="1075698427" usec="0"/>
      <to sec="1075698450" usec="0"/>
    </slice>
    <from sec="1075698427" usec="0"/>
    <to sec="1075698450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="73.103.33.193" src_port="10001"/>
      <from sec="1075698023" usec="0"/>
      <to sec="1075698031" usec="0"/>
    </slice>
    <from sec="1075698023" usec="0"/>
    <to sec="1075698031" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="143.111.228.171" dst_port="137" proto="tcp" src_ip="203.23.90.214" src_port="1026"/>
      <filter dst_ip="143.111.228.171" dst_port="137" proto="udp" src_ip="203.23.90.214" src_port="1026"/>
      <filter dst_ip="143.111.228.171" dst_port="137" proto="tcp" src_ip="203.23.90.214" src_port="80"/>
      <filter dst_ip="143.111.228.171" dst_port="137" proto="udp" src_ip="203.23.90.214" src_port="80"/>
      <from sec="1075698504" usec="0"/>
      <to sec="1075698512" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="143.111.228.171" dst_port="137" proto="tcp" src_ip="213.217.14.214" src_port="1026"/>
      <filter dst_ip="143.111.228.171" dst_port="137" proto="udp" src_ip="213.217.14.214" src_port="1026"/>
      <filter dst_ip="143.111.228.171" dst_port="137" proto="tcp" src_ip="213.217.14.214" src_port="80"/>
      <filter dst_ip="143.111.228.171" dst_port="137" proto="udp" src_ip="213.217.14.214" src_port="80"/>
      <from sec="1075698504" usec="0"/>
      <to sec="1075698510" usec="0"/>
    </slice>
    <from sec="1075698504" usec="0"/>
    <to sec="1075698512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="50.40.75.218" src_port="1026"/>
      <from sec="1075698056" usec="0"/>
      <to sec="1075698091" usec="0"/>
    </slice>
    <from sec="1075698056" usec="0"/>
    <to sec="1075698091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="53.1.168.219" src_port="43461"/>
      <filter dst_port="137" proto="udp" src_ip="53.1.168.219" src_port="43461"/>
      <filter dst_port="137" proto="tcp" src_ip="53.1.168.219" src_port="1863"/>
      <filter dst_port="137" proto="udp" src_ip="53.1.168.219" src_port="1863"/>
      <from sec="1075698443" usec="0"/>
      <to sec="1075698449" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="213.217.8.219" src_port="43461"/>
      <filter dst_port="137" proto="udp" src_ip="213.217.8.219" src_port="43461"/>
      <filter dst_port="137" proto="tcp" src_ip="213.217.8.219" src_port="1863"/>
      <filter dst_port="137" proto="udp" src_ip="213.217.8.219" src_port="1863"/>
      <from sec="1075698442" usec="0"/>
      <to sec="1075698448" usec="0"/>
    </slice>
    <from sec="1075698442" usec="0"/>
    <to sec="1075698449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="203.76.139.231" src_port="61399"/>
      <from sec="1075698594" usec="0"/>
      <to sec="1075698608" usec="0"/>
    </slice>
    <from sec="1075698594" usec="0"/>
    <to sec="1075698608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="192.170.91.243" src_port="1027"/>
      <filter dst_port="137" proto="udp" src_ip="192.170.91.243" src_port="1027"/>
      <filter dst_port="1434" proto="tcp" src_ip="192.170.91.243" src_port="1027"/>
      <filter dst_port="1434" proto="udp" src_ip="192.170.91.243" src_port="1027"/>
      <filter dst_port="137" proto="tcp" src_ip="192.170.91.243" src_port="1028"/>
      <filter dst_port="137" proto="udp" src_ip="192.170.91.243" src_port="1028"/>
      <filter dst_port="1434" proto="tcp" src_ip="192.170.91.243" src_port="1028"/>
      <filter dst_port="1434" proto="udp" src_ip="192.170.91.243" src_port="1028"/>
      <from sec="1075698319" usec="0"/>
      <to sec="1075698329" usec="0"/>
    </slice>
    <from sec="1075698319" usec="0"/>
    <to sec="1075698329" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="51.100.66.245" src_port="1031"/>
      <from sec="1075698154" usec="0"/>
      <to sec="1075698162" usec="0"/>
    </slice>
    <from sec="1075698154" usec="0"/>
    <to sec="1075698162" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="203.8.181.175"/>
      <from sec="1075698000" usec="0"/>
      <to sec="1075698008" usec="0"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698008" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="139" proto="tcp" src_ip="192.8.54.234" src_port="80"/>
      <from sec="1075698395" usec="0"/>
      <to sec="1075698419" usec="0"/>
    </slice>
    <from sec="1075698395" usec="0"/>
    <to sec="1075698421" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.689601,1.94406,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="203.8.117.249"/>
      <from sec="1075698373" usec="0"/>
      <to sec="1075698380" usec="0"/>
    </slice>
    <from sec="1075698372" usec="0"/>
    <to sec="1075698380" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.977467,1.96681,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="137.37.215.74" dst_port="137" proto="tcp" src_ip="34.78.5.170" src_port="1025"/>
      <filter dst_ip="137.37.215.74" dst_port="137" proto="udp" src_ip="34.78.5.170" src_port="1025"/>
      <filter dst_ip="137.37.215.74" dst_port="80" proto="tcp" src_ip="34.78.5.170" src_port="1025"/>
      <filter dst_ip="137.37.215.74" dst_port="80" proto="udp" src_ip="34.78.5.170" src_port="1025"/>
      <from sec="1075698525" usec="0"/>
      <to sec="1075698539" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="137.37.215.74" dst_port="137" proto="tcp" src_ip="75.5.29.36" src_port="1025"/>
      <filter dst_ip="137.37.215.74" dst_port="137" proto="udp" src_ip="75.5.29.36" src_port="1025"/>
      <filter dst_ip="137.37.215.74" dst_port="80" proto="tcp" src_ip="75.5.29.36" src_port="1025"/>
      <filter dst_ip="137.37.215.74" dst_port="80" proto="udp" src_ip="75.5.29.36" src_port="1025"/>
      <from sec="1075698527" usec="0"/>
      <to sec="1075698536" usec="0"/>
    </slice>
    <from sec="1075698525" usec="0"/>
    <to sec="1075698539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02483,1.85499,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_56{
style=filled;
color=gray75;
170[label="73.26.170.15s;118pkt 118fpkt", shape=rectangle, color=red];
391[label="73.26.170.15s;59pkt 59fpkt", shape=ellipse, color=green];
2774[label="73.26.170.15;154pkt 154fpkt", shape=pentagon, color=darkviolet];
stat56[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.26.170.15:1033, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1033: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
170--391[label="1;59pkt 59fpkt"];
170--2774[label="0.991525;117pkt 117fpkt"];
391--2774[label="0.983051;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="73.26.170.15" src_port="1033"/>
    </slice>
    <from sec="1075698864" usec="0"/>
    <to sec="1075698889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.977467,1.96681,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="209.36.37.1" dst_port="137" proto="tcp" src_ip="202.104.247.23" src_port="1064"/>
      <filter dst_ip="209.36.37.1" dst_port="137" proto="udp" src_ip="202.104.247.23" src_port="1064"/>
      <filter dst_ip="209.36.37.1" dst_port="137" proto="tcp" src_ip="202.104.247.23" src_port="80"/>
      <filter dst_ip="209.36.37.1" dst_port="137" proto="udp" src_ip="202.104.247.23" src_port="80"/>
      <from sec="1075698357" usec="0"/>
      <to sec="1075698365" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="209.36.37.1" dst_port="137" proto="tcp" src_ip="201.129.59.23" src_port="1064"/>
      <filter dst_ip="209.36.37.1" dst_port="137" proto="udp" src_ip="201.129.59.23" src_port="1064"/>
      <filter dst_ip="209.36.37.1" dst_port="137" proto="tcp" src_ip="201.129.59.23" src_port="80"/>
      <filter dst_ip="209.36.37.1" dst_port="137" proto="udp" src_ip="201.129.59.23" src_port="80"/>
      <from sec="1075698358" usec="0"/>
      <to sec="1075698365" usec="0"/>
    </slice>
    <from sec="1075698357" usec="0"/>
    <to sec="1075698365" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08014,1.82579,002,1 1 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_58{
style=filled;
color=gray75;
194[label="73.130.101.48s;181pkt 181fpkt", shape=rectangle, color=red];
400[label="73.130.101.48s;115pkt 115fpkt", shape=ellipse, color=green];
2955[label="73.130.101.48;221pkt 221fpkt", shape=pentagon, color=darkviolet];
4123[label="73.130.101.48;222pkt 222fpkt", shape=invtriangle, color=brown];
stat58[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.130.101.48:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
194--400[label="1;115pkt 115fpkt"];
194--2955[label="0.994475;180pkt 180fpkt"];
194--4123[label="1;181pkt 181fpkt"];
400--2955[label="1;115pkt 115fpkt"];
400--4123[label="1;115pkt 115fpkt"];
2955--4123[label="1;221pkt 221fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="73.130.101.48" src_port="1028"/>
    </slice>
    <from sec="1075698155" usec="0"/>
    <to sec="1075698192" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07587,1.92714,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_59{
style=filled;
color=gray75;
195[label="50.110.138.48s;206pkt 206fpkt", shape=rectangle, color=red];
401[label="50.110.138.48s;136pkt 136fpkt", shape=ellipse, color=green];
stat59[shape=component, label=&lt;Rules:&lt;BR/&gt;{50.110.138.48:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
195--401[label="1;136pkt 136fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="50.110.138.48" src_port="1027"/>
    </slice>
    <from sec="1075698239" usec="0"/>
    <to sec="1075698277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08014,1.82579,002,1 1 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_61{
style=filled;
color=gray75;
199[label="53.128.109.53s;253pkt 253fpkt", shape=rectangle, color=red];
404[label="53.128.109.53s;242pkt 242fpkt", shape=ellipse, color=green];
2994[label="53.128.109.53;252pkt 252fpkt", shape=pentagon, color=darkviolet];
4141[label="53.128.109.53;253pkt 253fpkt", shape=invtriangle, color=brown];
stat61[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.128.109.53:1187, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1187: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
199--404[label="1;242pkt 242fpkt"];
199--2994[label="1;252pkt 252fpkt"];
199--4141[label="1;253pkt 253fpkt"];
404--2994[label="0.995868;241pkt 241fpkt"];
404--4141[label="1;242pkt 242fpkt"];
2994--4141[label="1;252pkt 252fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="53.128.109.53" src_port="1187"/>
    </slice>
    <from sec="1075698025" usec="0"/>
    <to sec="1075698040" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.977467,1.96681,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="213.217.211.67" dst_port="137" proto="tcp" src_ip="51.101.52.68" src_port="1026"/>
      <filter dst_ip="213.217.211.67" dst_port="137" proto="udp" src_ip="51.101.52.68" src_port="1026"/>
      <filter dst_ip="213.217.211.67" dst_port="80" proto="tcp" src_ip="51.101.52.68" src_port="1026"/>
      <filter dst_ip="213.217.211.67" dst_port="80" proto="udp" src_ip="51.101.52.68" src_port="1026"/>
      <from sec="1075698380" usec="0"/>
      <to sec="1075698394" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="213.217.211.67" dst_port="137" proto="tcp" src_ip="143.111.156.68" src_port="1026"/>
      <filter dst_ip="213.217.211.67" dst_port="137" proto="udp" src_ip="143.111.156.68" src_port="1026"/>
      <filter dst_ip="213.217.211.67" dst_port="80" proto="tcp" src_ip="143.111.156.68" src_port="1026"/>
      <filter dst_ip="213.217.211.67" dst_port="80" proto="udp" src_ip="143.111.156.68" src_port="1026"/>
      <from sec="1075698380" usec="0"/>
      <to sec="1075698391" usec="0"/>
    </slice>
    <from sec="1075698380" usec="0"/>
    <to sec="1075698394" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02483,1.85499,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_72{
style=filled;
color=gray75;
257[label="202.131.54.124s;253pkt 253fpkt", shape=rectangle, color=red];
429[label="202.131.54.124s;253pkt 253fpkt", shape=ellipse, color=green];
3388[label="202.131.54.124;253pkt 253fpkt", shape=pentagon, color=darkviolet];
stat72[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.131.54.124:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
257--429[label="1;253pkt 253fpkt"];
257--3388[label="1;253pkt 253fpkt"];
429--3388[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.131.54.124" src_port="1031"/>
    </slice>
    <from sec="1075698322" usec="0"/>
    <to sec="1075698339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07587,1.92714,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_73{
style=filled;
color=gray75;
259[label="218.122.55.127s;137pkt 137fpkt", shape=rectangle, color=red];
431[label="218.122.55.127s;53pkt 53fpkt", shape=ellipse, color=green];
stat73[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.122.55.127:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
259--431[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="218.122.55.127" src_port="1027"/>
    </slice>
    <from sec="1075698337" usec="0"/>
    <to sec="1075698358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08014,1.82579,002,1 1 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_76{
style=filled;
color=gray75;
273[label="202.132.240.149s;202pkt 202fpkt", shape=rectangle, color=red];
437[label="202.132.240.149s;177pkt 177fpkt", shape=ellipse, color=green];
3522[label="202.132.240.149;201pkt 201fpkt", shape=pentagon, color=darkviolet];
4425[label="202.132.240.149;202pkt 202fpkt", shape=invtriangle, color=brown];
stat76[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.132.240.149:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
273--437[label="1;177pkt 177fpkt"];
273--3522[label="1;201pkt 201fpkt"];
273--4425[label="1;202pkt 202fpkt"];
437--3522[label="1;177pkt 177fpkt"];
437--4425[label="1;177pkt 177fpkt"];
3522--4425[label="1;201pkt 201fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.132.240.149" src_port="1025"/>
    </slice>
    <from sec="1075698245" usec="0"/>
    <to sec="1075698277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02483,1.85499,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_78{
style=filled;
color=gray75;
276[label="53.1.20.153s;239pkt 239fpkt", shape=rectangle, color=red];
439[label="53.1.20.153s;235pkt 235fpkt", shape=ellipse, color=green];
3538[label="53.1.20.153;238pkt 238fpkt", shape=pentagon, color=darkviolet];
stat78[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.1.20.153:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
276--439[label="1;235pkt 235fpkt"];
276--3538[label="1;238pkt 238fpkt"];
439--3538[label="0.995745;234pkt 234fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="53.1.20.153" src_port="1028"/>
    </slice>
    <from sec="1075698273" usec="0"/>
    <to sec="1075698310" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02483,1.85499,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_80{
style=filled;
color=gray75;
293[label="193.16.133.194s;248pkt 248fpkt", shape=rectangle, color=red];
444[label="193.16.133.194s;248pkt 248fpkt", shape=ellipse, color=green];
3716[label="193.16.133.194;248pkt 248fpkt", shape=pentagon, color=darkviolet];
stat80[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.16.133.194:1116, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1116: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
293--444[label="1;248pkt 248fpkt"];
293--3716[label="1;248pkt 248fpkt"];
444--3716[label="1;248pkt 248fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="193.16.133.194" src_port="1116"/>
    </slice>
    <from sec="1075698094" usec="0"/>
    <to sec="1075698113" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07587,1.92714,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_81{
style=filled;
color=gray75;
307[label="202.137.221.218s;251pkt 251fpkt", shape=rectangle, color=red];
448[label="202.137.221.218s;175pkt 175fpkt", shape=ellipse, color=green];
stat81[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.137.221.218:1067, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1067: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
307--448[label="1;175pkt 175fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.137.221.218" src_port="1067"/>
    </slice>
    <from sec="1075698014" usec="0"/>
    <to sec="1075698029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07587,1.92714,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_83{
style=filled;
color=gray75;
312[label="204.166.100.225s;89pkt 89fpkt", shape=rectangle, color=red];
450[label="204.166.100.225s;53pkt 53fpkt", shape=ellipse, color=green];
stat83[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.166.100.225:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
312--450[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="204.166.100.225" src_port="1028"/>
    </slice>
    <from sec="1075698588" usec="0"/>
    <to sec="1075698601" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08482,1.98898,901,0 0 1 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="137.37.215.74" dst_port="137" proto="tcp" src_ip="34.78.5.170" src_port="1025"/>
      <filter dst_ip="137.37.215.74" dst_port="137" proto="udp" src_ip="34.78.5.170" src_port="1025"/>
      <filter dst_ip="137.37.215.74" dst_port="80" proto="tcp" src_ip="34.78.5.170" src_port="1025"/>
      <filter dst_ip="137.37.215.74" dst_port="80" proto="udp" src_ip="34.78.5.170" src_port="1025"/>
      <from sec="1075698525" usec="0"/>
      <to sec="1075698539" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="137.37.215.74" dst_port="137" proto="tcp" src_ip="75.5.29.36" src_port="1025"/>
      <filter dst_ip="137.37.215.74" dst_port="137" proto="udp" src_ip="75.5.29.36" src_port="1025"/>
      <filter dst_ip="137.37.215.74" dst_port="80" proto="tcp" src_ip="75.5.29.36" src_port="1025"/>
      <filter dst_ip="137.37.215.74" dst_port="80" proto="udp" src_ip="75.5.29.36" src_port="1025"/>
      <from sec="1075698527" usec="0"/>
      <to sec="1075698536" usec="0"/>
    </slice>
    <from sec="1075698525" usec="0"/>
    <to sec="1075698539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08482,1.98898,901,0 0 1 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="209.36.37.1" dst_port="137" proto="tcp" src_ip="202.104.247.23" src_port="1064"/>
      <filter dst_ip="209.36.37.1" dst_port="137" proto="udp" src_ip="202.104.247.23" src_port="1064"/>
      <filter dst_ip="209.36.37.1" dst_port="137" proto="tcp" src_ip="202.104.247.23" src_port="80"/>
      <filter dst_ip="209.36.37.1" dst_port="137" proto="udp" src_ip="202.104.247.23" src_port="80"/>
      <from sec="1075698357" usec="0"/>
      <to sec="1075698365" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="209.36.37.1" dst_port="137" proto="tcp" src_ip="201.129.59.23" src_port="1064"/>
      <filter dst_ip="209.36.37.1" dst_port="137" proto="udp" src_ip="201.129.59.23" src_port="1064"/>
      <filter dst_ip="209.36.37.1" dst_port="137" proto="tcp" src_ip="201.129.59.23" src_port="80"/>
      <filter dst_ip="209.36.37.1" dst_port="137" proto="udp" src_ip="201.129.59.23" src_port="80"/>
      <from sec="1075698358" usec="0"/>
      <to sec="1075698365" usec="0"/>
    </slice>
    <from sec="1075698357" usec="0"/>
    <to sec="1075698365" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12769,1.87848,002,1 0 1 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_98{
style=filled;
color=gray75;
182[label="53.37.135.36s;295pkt 295fpkt", shape=rectangle, color=red];
512[label="53.37.135.36s;148pkt 148fpkt", shape=triangle, color=blue];
3721[label="203.90.40.195;123pkt 123fpkt", shape=pentagon, color=darkviolet];
stat98[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.37.135.36:1030, *:137}[63.1737%]&lt;BR/&gt;{203.90.40.195:1026, *:137}[36.8263%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1030: (31.7138%)&lt;BR/&gt; 1026: (18.2862%)&gt;];
}
182--512[label="1;148pkt 148fpkt"];
182--3721[label="0.682927;84pkt 84fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="53.37.135.36" src_port="1030"/>
      <filter dst_port="137" src_ip="203.90.40.195" src_port="1026"/>
    </slice>
    <from sec="1075698090" usec="0"/>
    <to sec="1075698105" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08482,1.98898,901,0 0 1 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="213.217.211.67" dst_port="137" proto="tcp" src_ip="51.101.52.68" src_port="1026"/>
      <filter dst_ip="213.217.211.67" dst_port="137" proto="udp" src_ip="51.101.52.68" src_port="1026"/>
      <filter dst_ip="213.217.211.67" dst_port="80" proto="tcp" src_ip="51.101.52.68" src_port="1026"/>
      <filter dst_ip="213.217.211.67" dst_port="80" proto="udp" src_ip="51.101.52.68" src_port="1026"/>
      <from sec="1075698380" usec="0"/>
      <to sec="1075698388" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="213.217.211.67" dst_port="137" proto="tcp" src_ip="143.111.156.68" src_port="1026"/>
      <filter dst_ip="213.217.211.67" dst_port="137" proto="udp" src_ip="143.111.156.68" src_port="1026"/>
      <filter dst_ip="213.217.211.67" dst_port="80" proto="tcp" src_ip="143.111.156.68" src_port="1026"/>
      <filter dst_ip="213.217.211.67" dst_port="80" proto="udp" src_ip="143.111.156.68" src_port="1026"/>
      <from sec="1075698380" usec="0"/>
      <to sec="1075698387" usec="0"/>
    </slice>
    <from sec="1075698380" usec="0"/>
    <to sec="1075698388" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11702,1.79355,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_107{
style=filled;
color=gray75;
610[label="137.37.155.3;d;5pkt 5fpkt", shape=diamond, color=yellow];
611[label="215.99.252.36;s;5pkt 5fpkt", shape=diamond, color=yellow];
2270[label="215.99.252.36;s;5pkt 5fpkt", shape=hexagon, color=black];
2886[label="215.99.252.36;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4086[label="215.99.252.36;5pkt 5fpkt", shape=invtriangle, color=brown];
4703[label="215.99.252.36;4pkt 4fpkt", shape=invhouse, color=bisque];
stat107[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.99.252.36:80, 137.37.155.3:10146}[20%]&lt;BR/&gt;{215.99.252.36:80, 137.37.155.3:10147}[20%]&lt;BR/&gt;{215.99.252.36:80, 137.37.155.3:10148}[20%]&lt;BR/&gt;{215.99.252.36:80, 137.37.155.3:10149}[20%]&lt;BR/&gt;{215.99.252.36:80, 137.37.155.3:10150}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 10150: (10.3448%)&lt;BR/&gt; 10149: (10.3448%)&lt;BR/&gt; 10148: (10.3448%)&lt;BR/&gt; 10147: (10.3448%)&gt;];
}
610--611[label="1;5pkt 5fpkt"];
610--2270[label="1;5pkt 5fpkt"];
610--2886[label="1;5pkt 5fpkt"];
610--4086[label="1;5pkt 5fpkt"];
610--4703[label="1;4pkt 4fpkt"];
611--2270[label="1;5pkt 5fpkt"];
611--2886[label="1;5pkt 5fpkt"];
611--4086[label="1;5pkt 5fpkt"];
611--4703[label="1;4pkt 4fpkt"];
2270--2886[label="1;5pkt 5fpkt"];
2270--4086[label="1;5pkt 5fpkt"];
2270--4703[label="1;4pkt 4fpkt"];
2886--4086[label="1;5pkt 5fpkt"];
2886--4703[label="1;4pkt 4fpkt"];
4086--4703[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="137.37.155.3" dst_port="10150" src_ip="215.99.252.36" src_port="80"/>
      <filter dst_ip="137.37.155.3" dst_port="10149" src_ip="215.99.252.36" src_port="80"/>
      <filter dst_ip="137.37.155.3" dst_port="10148" src_ip="215.99.252.36" src_port="80"/>
      <filter dst_ip="137.37.155.3" dst_port="10147" src_ip="215.99.252.36" src_port="80"/>
      <filter dst_ip="137.37.155.3" dst_port="10146" src_ip="215.99.252.36" src_port="80"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04711,1.7561,010,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_109{
style=filled;
color=gray75;
7[label="143.111.26.5s;2pkt 2fpkt", shape=rectangle, color=red];
622[label="143.111.26.5;s;60pkt 60fpkt", shape=diamond, color=yellow];
623[label="202.153.34.153;d;1pkt 1fpkt", shape=diamond, color=yellow];
785[label="73.209.13.142;d;1pkt 1fpkt", shape=diamond, color=yellow];
1100[label="204.172.207.159;d;2pkt 2fpkt", shape=diamond, color=yellow];
1180[label="73.96.171.221;d;1pkt 1fpkt", shape=diamond, color=yellow];
1225[label="73.101.117.240;d;2pkt 2fpkt", shape=diamond, color=yellow];
1333[label="203.96.160.228;d;1pkt 1fpkt", shape=diamond, color=yellow];
1390[label="73.98.111.51;d;1pkt 1fpkt", shape=diamond, color=yellow];
1923[label="205.190.248.10;d;1pkt 1fpkt", shape=diamond, color=yellow];
1954[label="143.111.26.5;s;43pkt 43fpkt", shape=hexagon, color=black];
2028[label="73.209.13.142;d;1pkt 1fpkt", shape=hexagon, color=black];
2147[label="204.172.207.159;d;1pkt 1fpkt", shape=hexagon, color=black];
2304[label="73.101.117.240;d;1pkt 1fpkt", shape=hexagon, color=black];
2574[label="205.190.248.10;d;1pkt 1fpkt", shape=hexagon, color=black];
2699[label="143.111.26.5;64pkt 64fpkt", shape=pentagon, color=darkviolet];
3989[label="143.111.26.5;64pkt 64fpkt", shape=invtriangle, color=brown];
stat109[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.26.5:*, 73.238.252.159:7802}[59.375%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7802: (27.3279%)&lt;BR/&gt; 8881: (5.06073%)&lt;BR/&gt; 6881: (3.84615%)&lt;BR/&gt; 8884: (2.22672%)&lt;BR/&gt; 6884: (2.22672%)&gt;];
}
7--622[label="1;2pkt 2fpkt"];
7--623[label="1;1pkt 1fpkt"];
7--1100[label="0.5;1pkt 1fpkt"];
7--1954[label="1;2pkt 2fpkt"];
7--2147[label="1;1pkt 1fpkt"];
7--2699[label="1;2pkt 2fpkt"];
7--3989[label="1;2pkt 2fpkt"];
622--623[label="1;1pkt 1fpkt"];
622--785[label="1;1pkt 1fpkt"];
622--1100[label="1;2pkt 2fpkt"];
622--1180[label="1;1pkt 1fpkt"];
622--1225[label="1;2pkt 2fpkt"];
622--1333[label="1;1pkt 1fpkt"];
622--1390[label="1;1pkt 1fpkt"];
622--1923[label="1;1pkt 1fpkt"];
622--1954[label="1;43pkt 43fpkt"];
622--2028[label="1;1pkt 1fpkt"];
622--2147[label="1;1pkt 1fpkt"];
622--2304[label="1;1pkt 1fpkt"];
622--2574[label="1;1pkt 1fpkt"];
622--2699[label="1;60pkt 60fpkt"];
622--3989[label="1;60pkt 60fpkt"];
623--1954[label="1;1pkt 1fpkt"];
623--2699[label="1;1pkt 1fpkt"];
623--3989[label="1;1pkt 1fpkt"];
785--1954[label="1;1pkt 1fpkt"];
785--2028[label="1;1pkt 1fpkt"];
785--2699[label="1;1pkt 1fpkt"];
785--3989[label="1;1pkt 1fpkt"];
1100--1954[label="0.5;1pkt 1fpkt"];
1100--2147[label="1;1pkt 1fpkt"];
1100--2699[label="1;2pkt 2fpkt"];
1100--3989[label="1;2pkt 2fpkt"];
1180--1954[label="1;1pkt 1fpkt"];
1180--2699[label="1;1pkt 1fpkt"];
1180--3989[label="1;1pkt 1fpkt"];
1225--1954[label="0.5;1pkt 1fpkt"];
1225--2304[label="1;1pkt 1fpkt"];
1225--2699[label="1;2pkt 2fpkt"];
1225--3989[label="1;2pkt 2fpkt"];
1333--1954[label="1;1pkt 1fpkt"];
1333--2699[label="1;1pkt 1fpkt"];
1333--3989[label="1;1pkt 1fpkt"];
1390--1954[label="1;1pkt 1fpkt"];
1390--2699[label="1;1pkt 1fpkt"];
1390--3989[label="1;1pkt 1fpkt"];
1923--2574[label="1;1pkt 1fpkt"];
1923--2699[label="1;1pkt 1fpkt"];
1923--3989[label="1;1pkt 1fpkt"];
1954--2028[label="1;1pkt 1fpkt"];
1954--2147[label="1;1pkt 1fpkt"];
1954--2304[label="1;1pkt 1fpkt"];
1954--2699[label="1;43pkt 43fpkt"];
1954--3989[label="1;43pkt 43fpkt"];
2028--2699[label="1;1pkt 1fpkt"];
2028--3989[label="1;1pkt 1fpkt"];
2147--2699[label="1;1pkt 1fpkt"];
2147--3989[label="1;1pkt 1fpkt"];
2304--2699[label="1;1pkt 1fpkt"];
2304--3989[label="1;1pkt 1fpkt"];
2574--2699[label="1;1pkt 1fpkt"];
2574--3989[label="1;1pkt 1fpkt"];
2699--3989[label="1;64pkt 64fpkt"];
</description>
    <slice>
      <filter dst_ip="73.238.252.159" dst_port="7802" src_ip="143.111.26.5"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989968,1.78644,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_110{
style=filled;
color=gray75;
74[label="203.43.174.102s;1pkt 1fpkt", shape=rectangle, color=red];
100[label="192.91.142.188s;1pkt 1fpkt", shape=rectangle, color=red];
614[label="148.180.128.251;d;8pkt 8fpkt", shape=diamond, color=yellow];
643[label="203.43.174.102;s;4pkt 4fpkt", shape=diamond, color=yellow];
658[label="192.91.142.188;s;1pkt 1fpkt", shape=diamond, color=yellow];
872[label="171.39.110.177;s;1pkt 1fpkt", shape=diamond, color=yellow];
1057[label="192.146.135.124;s;1pkt 1fpkt", shape=diamond, color=yellow];
2003[label="192.91.142.188;s;1pkt 1fpkt", shape=hexagon, color=black];
2056[label="148.180.128.251;d;8pkt 8fpkt", shape=hexagon, color=black];
3277[label="203.43.174.102;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3391[label="192.146.135.124;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3696[label="192.91.142.188;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat110[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.43.174.102:9259, 148.180.128.251:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9259: (10.6061%)&lt;BR/&gt; 15078: (9.09091%)&lt;BR/&gt; 4216: (9.09091%)&lt;BR/&gt; 9256: (7.57576%)&lt;BR/&gt; 4685: (7.57576%)&gt;];
}
74--614[label="1;1pkt 1fpkt"];
74--643[label="1;1pkt 1fpkt"];
74--2056[label="1;1pkt 1fpkt"];
74--3277[label="1;1pkt 1fpkt"];
100--614[label="1;1pkt 1fpkt"];
100--658[label="1;1pkt 1fpkt"];
100--2003[label="1;1pkt 1fpkt"];
100--2056[label="1;1pkt 1fpkt"];
100--3696[label="1;1pkt 1fpkt"];
614--643[label="1;4pkt 4fpkt"];
614--658[label="1;1pkt 1fpkt"];
614--872[label="1;1pkt 1fpkt"];
614--1057[label="1;1pkt 1fpkt"];
614--2003[label="1;1pkt 1fpkt"];
614--2056[label="1;8pkt 8fpkt"];
614--3277[label="0.6;3pkt 3fpkt"];
614--3391[label="1;1pkt 1fpkt"];
614--3696[label="1;1pkt 1fpkt"];
643--2056[label="1;4pkt 4fpkt"];
643--3277[label="0.75;3pkt 3fpkt"];
658--2003[label="1;1pkt 1fpkt"];
658--2056[label="1;1pkt 1fpkt"];
658--3696[label="1;1pkt 1fpkt"];
872--2056[label="1;1pkt 1fpkt"];
1057--2056[label="1;1pkt 1fpkt"];
1057--3391[label="1;1pkt 1fpkt"];
2003--2056[label="1;1pkt 1fpkt"];
2003--3696[label="1;1pkt 1fpkt"];
2056--3277[label="0.6;3pkt 3fpkt"];
2056--3391[label="1;1pkt 1fpkt"];
2056--3696[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.180.128.251" src_ip="203.43.174.102" src_port="9259"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04271,1.86125,010,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_112{
style=filled;
color=gray75;
348[label="203.19.104.142s;50pkt 50fpkt", shape=rectangle, color=red];
803[label="203.19.104.142;s;1746pkt 1746fpkt", shape=diamond, color=yellow];
2238[label="203.19.104.142;s;1746pkt 1746fpkt", shape=hexagon, color=black];
stat112[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.19.104.142:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4247: (0.042349%)&lt;BR/&gt; 4246: (0.042349%)&lt;BR/&gt; 4245: (0.042349%)&lt;BR/&gt; 4244: (0.042349%)&gt;];
}
348--803[label="1;50pkt 50fpkt"];
348--2238[label="1;50pkt 50fpkt"];
803--2238[label="1;1746pkt 1746fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="203.19.104.142"/>
    </slice>
    <from sec="1075698002" usec="0"/>
    <to sec="1075698517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.725226,1.93923,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_113{
style=filled;
color=gray75;
609[label="209.76.147.20;s;1pkt 1fpkt", shape=diamond, color=yellow];
860[label="209.36.37.179;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat113[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.76.147.20:0, 209.36.37.179:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
609--860[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.36.37.179" src_ip="209.76.147.20"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.940848,1.90229,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_114{
style=filled;
color=gray75;
862[label="148.180.216.187;d;2pkt 2fpkt", shape=diamond, color=yellow];
863[label="209.104.127.193;s;2pkt 2fpkt", shape=diamond, color=yellow];
2271[label="148.180.216.187;d;2pkt 2fpkt", shape=hexagon, color=black];
stat114[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.104.127.193:554, 148.180.216.187:35275}[50%]&lt;BR/&gt;{209.104.127.193:6972, 148.180.216.187:6970}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35275: (25%)&lt;BR/&gt; 6972: (25%)&lt;BR/&gt; 6970: (25%)&lt;BR/&gt; 554: (25%)&gt;];
}
862--863[label="1;2pkt 2fpkt"];
862--2271[label="1;2pkt 2fpkt"];
863--2271[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="148.180.216.187" dst_port="6970" src_ip="209.104.127.193" src_port="6972"/>
      <filter dst_ip="148.180.216.187" dst_port="35275" src_ip="209.104.127.193" src_port="554"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.940848,1.90229,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_117{
style=filled;
color=gray75;
920[label="137.198.204.38;d;1pkt 1fpkt", shape=diamond, color=yellow];
921[label="196.66.194.162;s;1pkt 1fpkt", shape=diamond, color=yellow];
2086[label="196.66.194.162;s;1pkt 1fpkt", shape=hexagon, color=black];
stat117[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.66.194.162:554, 137.198.204.38:1525}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1525: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
920--921[label="1;1pkt 1fpkt"];
920--2086[label="1;1pkt 1fpkt"];
921--2086[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="137.198.204.38" dst_port="1525" src_ip="196.66.194.162" src_port="554"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989968,1.78644,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_118{
style=filled;
color=gray75;
83[label="143.111.50.120s;1pkt 1fpkt", shape=rectangle, color=red];
922[label="196.66.194.214;d;1pkt 1fpkt", shape=diamond, color=yellow];
923[label="143.111.50.120;s;1pkt 1fpkt", shape=diamond, color=yellow];
2209[label="143.111.50.120;s;1pkt 1fpkt", shape=hexagon, color=black];
3357[label="143.111.50.120;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat118[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.50.120:11198, 196.66.194.214:7070}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11198: (50%)&lt;BR/&gt; 7070: (50%)&gt;];
}
83--922[label="1;1pkt 1fpkt"];
83--923[label="1;1pkt 1fpkt"];
83--2209[label="1;1pkt 1fpkt"];
83--3357[label="1;1pkt 1fpkt"];
922--923[label="1;1pkt 1fpkt"];
922--2209[label="1;1pkt 1fpkt"];
922--3357[label="1;1pkt 1fpkt"];
923--2209[label="1;1pkt 1fpkt"];
923--3357[label="1;1pkt 1fpkt"];
2209--3357[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.66.194.214" dst_port="7070" src_ip="143.111.50.120" src_port="11198"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.940848,1.90229,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_120{
style=filled;
color=gray75;
728[label="209.36.37.119;d;34pkt 34fpkt", shape=diamond, color=yellow];
957[label="50.148.8.241;s;2pkt 2fpkt", shape=diamond, color=yellow];
1677[label="204.225.228.118;s;1pkt 1fpkt", shape=diamond, color=yellow];
2506[label="209.36.37.119;d;34pkt 34fpkt", shape=hexagon, color=black];
stat120[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 209.36.37.119:1214}[26.4706%]&lt;BR/&gt;{193.116.58.0:2383, 209.36.37.119:*}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (17.6056%)&lt;BR/&gt; 2383: (11.2676%)&lt;BR/&gt; 0: (11.2676%)&lt;BR/&gt; 3441: (4.22535%)&lt;BR/&gt; 1551: (4.22535%)&gt;];
}
728--957[label="1;2pkt 2fpkt"];
728--1677[label="1;1pkt 1fpkt"];
728--2506[label="1;34pkt 34fpkt"];
957--2506[label="1;2pkt 2fpkt"];
1677--2506[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.36.37.119" dst_port="1214"/>
      <filter dst_ip="209.36.37.119" src_ip="193.116.58.0" src_port="2383"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.725226,1.93923,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_122{
style=filled;
color=gray75;
802[label="143.111.81.133;s;129pkt 129fpkt", shape=diamond, color=yellow];
1038[label="220.161.106.146;d;98pkt 98fpkt", shape=diamond, color=yellow];
stat122[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.81.133:*, 220.161.106.146:80}[75.969%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.0176%)&lt;BR/&gt; 443: (1.98238%)&lt;BR/&gt; 49400: (0.440529%)&lt;BR/&gt; 49399: (0.440529%)&lt;BR/&gt; 49398: (0.440529%)&gt;];
}
802--1038[label="1;98pkt 98fpkt"];
802--1121[label="0.00775194;1pkt 1fpkt"];
802--1248[label="0.0232558;3pkt 3fpkt"];
802--2525[label="0.00775194;1pkt 1fpkt"];
802--2644[label="0.155039;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="220.161.106.146" dst_port="80" src_ip="143.111.81.133"/>
    </slice>
    <from sec="1075698002" usec="0"/>
    <to sec="1075698344" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.940848,1.90229,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_123{
style=filled;
color=gray75;
1011[label="75.39.70.121;s;35pkt 35fpkt", shape=diamond, color=yellow];
1044[label="143.110.49.18;d;35pkt 35fpkt", shape=diamond, color=yellow];
2106[label="75.39.70.121;s;35pkt 35fpkt", shape=hexagon, color=black];
stat123[shape=component, label=&lt;Rules:&lt;BR/&gt;{75.39.70.121:80, 143.110.49.18:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1218: (1.42857%)&lt;BR/&gt; 1217: (1.42857%)&lt;BR/&gt; 1216: (1.42857%)&lt;BR/&gt; 1215: (1.42857%)&gt;];
}
1011--1044[label="1;35pkt 35fpkt"];
1011--2106[label="1;35pkt 35fpkt"];
1044--2106[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="143.110.49.18" src_ip="75.39.70.121" src_port="80"/>
    </slice>
    <from sec="1075698565" usec="0"/>
    <to sec="1075698809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.882036,1.82917,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_124{
style=filled;
color=gray75;
885[label="137.198.207.35;s;997pkt 997fpkt", shape=diamond, color=yellow];
1049[label="73.27.65.200;d;1pkt 1fpkt", shape=diamond, color=yellow];
2068[label="137.198.207.35;s;997pkt 997fpkt", shape=hexagon, color=black];
2878[label="137.198.207.35;1075pkt 1075fpkt", shape=pentagon, color=darkviolet];
stat124[shape=component, label=&lt;Rules:&lt;BR/&gt;{137.198.207.35:0, *:0}[98.7907%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.7296%)&lt;BR/&gt; 55303: (0.635179%)&lt;BR/&gt; 53: (0.635179%)&gt;];
}
885--1049[label="1;1pkt 1fpkt"];
885--1525[label="0.030303;1pkt 1fpkt"];
885--2068[label="1;997pkt 997fpkt"];
885--2878[label="1;997pkt 997fpkt"];
1049--2068[label="1;1pkt 1fpkt"];
1049--2878[label="1;1pkt 1fpkt"];
2068--2878[label="1;997pkt 997fpkt"];
</description>
    <slice>
      <filter src_ip="137.198.207.35"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989968,1.78644,503,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_126{
style=filled;
color=gray75;
41[label="75.39.34.46s;4pkt 4fpkt", shape=rectangle, color=red];
1093[label="75.39.34.46;s;139pkt 139fpkt", shape=diamond, color=yellow];
2403[label="75.39.34.46;s;139pkt 139fpkt", shape=hexagon, color=black];
2940[label="75.39.34.46;168pkt 168fpkt", shape=pentagon, color=darkviolet];
stat126[shape=component, label=&lt;Rules:&lt;BR/&gt;{75.39.34.46:80, 164.229.210.255:*}[39.645%]&lt;BR/&gt;{75.39.34.46:80, 143.110.133.67:*}[21.3018%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1140: (0.666667%)&lt;BR/&gt; 1133: (0.666667%)&lt;BR/&gt; 1132: (0.666667%)&lt;BR/&gt; 1129: (0.666667%)&gt;];
}
41--1093[label="1;4pkt 4fpkt"];
41--2403[label="1;4pkt 4fpkt"];
41--2940[label="0.75;3pkt 3fpkt"];
1093--2403[label="1;139pkt 139fpkt"];
1093--2940[label="0.992806;138pkt 138fpkt"];
2403--2940[label="0.992806;138pkt 138fpkt"];
</description>
    <slice>
      <filter dst_ip="164.229.210.255" src_ip="75.39.34.46" src_port="80"/>
      <filter dst_ip="143.110.133.67" src_ip="75.39.34.46" src_port="80"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.725226,1.93923,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="143.110.19.129"/>
      <from sec="1075698000" usec="0"/>
      <to sec="1075698827" usec="0"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989968,1.78644,503,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
266[label="51.108.107.138s;1pkt 1fpkt", shape=rectangle, color=red];
967[label="143.111.195.138;s;37pkt 37fpkt", shape=diamond, color=yellow];
1120[label="218.205.151.158;d;1pkt 1fpkt", shape=diamond, color=yellow];
1458[label="196.90.177.166;d;20pkt 20fpkt", shape=diamond, color=yellow];
2251[label="196.90.177.166;d;20pkt 20fpkt", shape=hexagon, color=black];
2327[label="218.205.151.158;d;1pkt 1fpkt", shape=hexagon, color=black];
3469[label="143.111.195.138;37pkt 37fpkt", shape=pentagon, color=darkviolet];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.195.138:*, 196.90.177.166:80}[54.0541%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.8974%)&lt;BR/&gt; 1863: (5.98291%)&lt;BR/&gt; 7001: (3.4188%)&lt;BR/&gt; 443: (2.5641%)&lt;BR/&gt; 63062: (2.13675%)&gt;];
}
266--967[label="1;1pkt 1fpkt"];
266--1120[label="1;1pkt 1fpkt"];
266--2327[label="1;1pkt 1fpkt"];
266--3469[label="1;1pkt 1fpkt"];
967--1120[label="1;1pkt 1fpkt"];
967--1458[label="1;20pkt 20fpkt"];
967--1742[label="0.0810811;3pkt 3fpkt"];
967--2251[label="1;20pkt 20fpkt"];
967--2327[label="1;1pkt 1fpkt"];
967--2645[label="0.027027;1pkt 1fpkt"];
967--3469[label="1;37pkt 37fpkt"];
1120--2327[label="1;1pkt 1fpkt"];
1120--3469[label="1;1pkt 1fpkt"];
1458--2251[label="1;20pkt 20fpkt"];
1458--3469[label="1;20pkt 20fpkt"];
2251--3469[label="1;20pkt 20fpkt"];
2327--3469[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.90.177.166" dst_port="80" src_ip="143.111.195.138"/>
    </slice>
    <from sec="1075698001" usec="0"/>
    <to sec="1075698900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.940848,1.90229,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_129{
style=filled;
color=gray75;
902[label="164.229.1.53;d;4pkt 4fpkt", shape=diamond, color=yellow];
1167[label="201.116.241.207;s;1pkt 1fpkt", shape=diamond, color=yellow];
2137[label="164.229.1.53;d;4pkt 4fpkt", shape=hexagon, color=black];
stat129[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.217.9.88:1863, 164.229.1.53:1095}[25%]&lt;BR/&gt;{201.116.241.207:1755, 164.229.1.53:1135}[25%]&lt;BR/&gt;{48.4.177.63:80, 164.229.1.53:1133}[25%]&lt;BR/&gt;{48.4.177.63:80, 164.229.1.53:1134}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (22.2222%)&lt;BR/&gt; 1755: (16.6667%)&lt;BR/&gt; 1135: (16.6667%)&lt;BR/&gt; 1863: (11.1111%)&lt;BR/&gt; 1134: (11.1111%)&gt;];
}
902--1167[label="1;1pkt 1fpkt"];
902--2137[label="1;4pkt 4fpkt"];
1167--2137[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.229.1.53" dst_port="1134" src_ip="48.4.177.63" src_port="80"/>
      <filter dst_ip="164.229.1.53" dst_port="1133" src_ip="48.4.177.63" src_port="80"/>
      <filter dst_ip="164.229.1.53" dst_port="1135" src_ip="201.116.241.207" src_port="1755"/>
      <filter dst_ip="164.229.1.53" dst_port="1095" src_ip="213.217.9.88" src_port="1863"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989968,1.78644,503,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_130{
style=filled;
color=gray75;
174[label="202.104.247.23s;1pkt 1fpkt", shape=rectangle, color=red];
1193[label="52.244.78.15;d;10pkt 10fpkt", shape=diamond, color=yellow];
1194[label="208.47.115.180;s;10pkt 10fpkt", shape=diamond, color=yellow];
2115[label="208.47.115.180;s;10pkt 10fpkt", shape=hexagon, color=black];
3663[label="208.47.115.180;15pkt 15fpkt", shape=pentagon, color=darkviolet];
stat130[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.47.115.180:*, 52.244.78.15:80}[80%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1143: (5.43478%)&lt;BR/&gt; 1146: (4.34783%)&lt;BR/&gt; 1142: (4.34783%)&lt;BR/&gt; 1141: (4.34783%)&gt;];
}
174--1193[label="1;1pkt 1fpkt"];
174--1194[label="1;1pkt 1fpkt"];
174--2115[label="1;1pkt 1fpkt"];
174--3663[label="1;1pkt 1fpkt"];
1193--1194[label="1;10pkt 10fpkt"];
1193--2115[label="1;10pkt 10fpkt"];
1193--3663[label="1;10pkt 10fpkt"];
1194--2115[label="1;10pkt 10fpkt"];
1194--3663[label="1;10pkt 10fpkt"];
2115--3663[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="52.244.78.15" dst_port="80" src_ip="208.47.115.180"/>
    </slice>
    <from sec="1075698074" usec="0"/>
    <to sec="1075698774" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.940848,1.90229,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_131{
style=filled;
color=gray75;
1076[label="220.23.155.170;s;161pkt 161fpkt", shape=diamond, color=yellow];
1224[label="148.180.47.59;d;157pkt 157fpkt", shape=diamond, color=yellow];
2185[label="148.180.47.59;d;157pkt 157fpkt", shape=hexagon, color=black];
stat131[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.23.155.170:80, 148.180.47.59:*}[97.5155%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4989: (0.315789%)&lt;BR/&gt; 4988: (0.315789%)&lt;BR/&gt; 4987: (0.315789%)&lt;BR/&gt; 4986: (0.315789%)&gt;];
}
1076--1224[label="1;157pkt 157fpkt"];
1076--2185[label="1;157pkt 157fpkt"];
1224--2185[label="1;157pkt 157fpkt"];
</description>
    <slice>
      <filter dst_ip="148.180.47.59" src_ip="220.23.155.170" src_port="80"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.940848,1.90229,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_132{
style=filled;
color=gray75;
1213[label="143.111.74.98;s;136pkt 136fpkt", shape=diamond, color=yellow];
1231[label="50.191.204.118;d;127pkt 127fpkt", shape=diamond, color=yellow];
2121[label="50.191.204.118;d;127pkt 127fpkt", shape=hexagon, color=black];
stat132[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.74.98:*, 50.191.204.118:80}[93.3824%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49308: (0.384615%)&lt;BR/&gt; 49305: (0.384615%)&lt;BR/&gt; 49302: (0.384615%)&lt;BR/&gt; 49297: (0.384615%)&gt;];
}
1213--1231[label="1;127pkt 127fpkt"];
1213--2121[label="1;127pkt 127fpkt"];
1231--2121[label="1;127pkt 127fpkt"];
</description>
    <slice>
      <filter dst_ip="50.191.204.118" dst_port="80" src_ip="143.111.74.98"/>
    </slice>
    <from sec="1075698132" usec="0"/>
    <to sec="1075698230" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.725226,1.93923,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="110.70.76.177"/>
      <from sec="1075698686" usec="0"/>
      <to sec="1075698733" usec="0"/>
    </slice>
    <from sec="1075698686" usec="0"/>
    <to sec="1075698733" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.725226,1.93923,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="203.97.58.87"/>
      <from sec="1075698418" usec="0"/>
      <to sec="1075698468" usec="0"/>
    </slice>
    <from sec="1075698418" usec="0"/>
    <to sec="1075698468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.940848,1.90229,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_135{
style=filled;
color=gray75;
1255[label="164.133.136.137;d;2pkt 2fpkt", shape=diamond, color=yellow];
1256[label="200.73.118.154;s;2pkt 2fpkt", shape=diamond, color=yellow];
2145[label="164.133.136.137;d;2pkt 2fpkt", shape=hexagon, color=black];
stat135[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.73.118.154:0, 164.133.136.137:0}[50%]&lt;BR/&gt;{200.73.118.154:1603, 164.133.136.137:3306}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (50%)&lt;BR/&gt; 3306: (25%)&lt;BR/&gt; 1603: (25%)&gt;];
}
1255--1256[label="1;2pkt 2fpkt"];
1255--2145[label="1;2pkt 2fpkt"];
1256--2145[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="164.133.136.137" dst_port="3306" src_ip="200.73.118.154" src_port="1603"/>
      <filter dst_ip="164.133.136.137" src_ip="200.73.118.154"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.725226,1.93923,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_136{
style=filled;
color=gray75;
1257[label="209.137.236.18;s;138pkt 138fpkt", shape=diamond, color=yellow];
stat136[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.137.236.18:25, *:*}[99.2754%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.6377%)&lt;BR/&gt; 62457: (0.362319%)&lt;BR/&gt; 50555: (0.362319%)&lt;BR/&gt; 47866: (0.362319%)&lt;BR/&gt; 46604: (0.362319%)&gt;];
}
1257--2645[label="0.00724638;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="209.137.236.18" src_port="25"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.725226,1.93923,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_137{
style=filled;
color=gray75;
1326[label="143.111.82.172;s;81pkt 81fpkt", shape=diamond, color=yellow];
stat137[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.82.172:*, 129.181.127.68:80}[82.716%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.5309%)&lt;BR/&gt; 443: (2.46914%)&lt;BR/&gt; 3012: (0.617284%)&lt;BR/&gt; 3011: (0.617284%)&lt;BR/&gt; 3009: (0.617284%)&gt;];
}
1326--2645[label="0.0123457;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="129.181.127.68" dst_port="80" src_ip="143.111.82.172"/>
    </slice>
    <from sec="1075698055" usec="0"/>
    <to sec="1075698782" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853231,1.89899,999,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_138{
style=filled;
color=gray75;
54[label="143.111.5.69s;1pkt 1fpkt", shape=rectangle, color=red];
1336[label="143.111.5.69;s;81pkt 81fpkt", shape=diamond, color=yellow];
stat138[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.5.69:*, *:25}[96.2963%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.1707%)&lt;BR/&gt; 80: (1.82927%)&lt;BR/&gt; 1034: (1.21951%)&lt;BR/&gt; 1274: (0.609756%)&lt;BR/&gt; 1270: (0.609756%)&gt;];
}
54--1336[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="143.111.5.69"/>
    </slice>
    <from sec="1075698167" usec="0"/>
    <to sec="1075698828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989968,1.78644,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_139{
style=filled;
color=gray75;
131[label="204.61.94.245s;1pkt 1fpkt", shape=rectangle, color=red];
636[label="148.180.31.103;d;7pkt 7fpkt", shape=diamond, color=yellow];
637[label="73.1.18.190;s;2pkt 2fpkt", shape=diamond, color=yellow];
1090[label="204.20.72.89;s;1pkt 1fpkt", shape=diamond, color=yellow];
1342[label="204.61.94.245;s;2pkt 2fpkt", shape=diamond, color=yellow];
2060[label="73.1.18.190;s;2pkt 2fpkt", shape=hexagon, color=black];
2128[label="148.180.31.103;d;7pkt 7fpkt", shape=hexagon, color=black];
3953[label="204.61.94.245;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat139[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 148.180.31.103:8001}[28.5714%]&lt;BR/&gt;{*:7000, 148.180.31.103:*}[28.5714%]&lt;BR/&gt;{73.1.18.190:*, 148.180.31.103:*}[28.5714%]&lt;BR/&gt;{204.61.94.245:*, 148.180.31.103:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8001: (19.5652%)&lt;BR/&gt; 7000: (15.2174%)&lt;BR/&gt; 33467: (10.8696%)&lt;BR/&gt; 36125: (8.69565%)&lt;BR/&gt; 2348: (8.69565%)&gt;];
}
131--636[label="1;1pkt 1fpkt"];
131--1342[label="1;1pkt 1fpkt"];
131--2128[label="1;1pkt 1fpkt"];
131--3953[label="1;1pkt 1fpkt"];
636--637[label="1;2pkt 2fpkt"];
636--1090[label="1;1pkt 1fpkt"];
636--1342[label="1;2pkt 2fpkt"];
636--2060[label="1;2pkt 2fpkt"];
636--2128[label="1;7pkt 7fpkt"];
636--3953[label="1;1pkt 1fpkt"];
637--2060[label="1;2pkt 2fpkt"];
637--2128[label="1;2pkt 2fpkt"];
1090--2128[label="1;1pkt 1fpkt"];
1342--2128[label="1;2pkt 2fpkt"];
1342--3953[label="1;1pkt 1fpkt"];
2060--2128[label="1;2pkt 2fpkt"];
2128--3953[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.180.31.103" src_ip="204.61.94.245"/>
      <filter dst_ip="148.180.31.103" src_ip="73.1.18.190"/>
      <filter dst_ip="148.180.31.103" src_port="7000"/>
      <filter dst_ip="148.180.31.103" dst_port="8001"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04271,1.86125,504,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_141{
style=filled;
color=gray75;
11[label="208.81.34.13s;1pkt 1fpkt", shape=rectangle, color=red];
1347[label="208.81.34.13;s;9pkt 9fpkt", shape=diamond, color=yellow];
1356[label="209.137.236.28;d;5pkt 5fpkt", shape=diamond, color=yellow];
2306[label="208.81.34.13;s;5pkt 5fpkt", shape=hexagon, color=black];
2363[label="209.137.236.28;d;5pkt 5fpkt", shape=hexagon, color=black];
stat141[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.81.34.13:*, 209.137.236.28:443}[55.5556%]&lt;BR/&gt;{208.81.34.13:*, 209.137.236.22:80}[44.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (36%)&lt;BR/&gt; 80: (14%)&lt;BR/&gt; 14259: (8%)&lt;BR/&gt; 12576: (8%)&lt;BR/&gt; 12088: (8%)&gt;];
}
11--1347[label="1;1pkt 1fpkt"];
11--1356[label="1;1pkt 1fpkt"];
11--2363[label="1;1pkt 1fpkt"];
1347--1356[label="1;5pkt 5fpkt"];
1347--2306[label="1;5pkt 5fpkt"];
1347--2363[label="1;5pkt 5fpkt"];
1356--2306[label="0.4;2pkt 2fpkt"];
1356--2363[label="1;5pkt 5fpkt"];
2306--2363[label="0.4;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="209.137.236.28" dst_port="443" src_ip="208.81.34.13"/>
      <filter dst_ip="209.137.236.22" dst_port="80" src_ip="208.81.34.13"/>
    </slice>
    <from sec="1075698253" usec="0"/>
    <to sec="1075698813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.725226,1.93923,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="143.111.88.2"/>
      <from sec="1075698000" usec="0"/>
      <to sec="1075698809" usec="0"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04271,1.86125,504,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_143{
style=filled;
color=gray75;
93[label="143.111.70.148s;1pkt 1fpkt", shape=rectangle, color=red];
1483[label="143.111.70.148;s;44pkt 44fpkt", shape=diamond, color=yellow];
1794[label="220.133.94.150;d;4pkt 4fpkt", shape=diamond, color=yellow];
2559[label="143.111.70.148;s;44pkt 44fpkt", shape=hexagon, color=black];
stat143[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.70.148:*, 201.237.68.102:443}[56.8182%]&lt;BR/&gt;{143.111.70.148:*, 201.237.68.102:80}[34.0909%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (33.871%)&lt;BR/&gt; 80: (16.129%)&lt;BR/&gt; 4619: (2.15054%)&lt;BR/&gt; 4620: (1.6129%)&lt;BR/&gt; 4618: (1.6129%)&gt;];
}
93--1483[label="1;1pkt 1fpkt"];
93--1794[label="1;1pkt 1fpkt"];
93--2559[label="1;1pkt 1fpkt"];
1483--1794[label="1;4pkt 4fpkt"];
1483--2559[label="1;44pkt 44fpkt"];
1794--2559[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="201.237.68.102" dst_port="443" src_ip="143.111.70.148"/>
      <filter dst_ip="201.237.68.102" dst_port="80" src_ip="143.111.70.148"/>
    </slice>
    <from sec="1075698386" usec="0"/>
    <to sec="1075698828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.940848,1.90229,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_144{
style=filled;
color=gray75;
1498[label="137.198.204.38;s;1pkt 1fpkt", shape=diamond, color=yellow];
1499[label="196.66.194.162;d;1pkt 1fpkt", shape=diamond, color=yellow];
2320[label="196.66.194.162;d;1pkt 1fpkt", shape=hexagon, color=black];
2401[label="137.198.204.38;s;1pkt 1fpkt", shape=hexagon, color=black];
stat144[shape=component, label=&lt;Rules:&lt;BR/&gt;{137.198.204.38:1525, 196.66.194.162:554}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1525: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
1498--1499[label="1;1pkt 1fpkt"];
1498--2320[label="1;1pkt 1fpkt"];
1498--2401[label="1;1pkt 1fpkt"];
1499--2320[label="1;1pkt 1fpkt"];
1499--2401[label="1;1pkt 1fpkt"];
2320--2401[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.66.194.162" dst_port="554" src_ip="137.198.204.38" src_port="1525"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.940848,1.90229,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_145{
style=filled;
color=gray75;
1286[label="148.180.220.26;d;3pkt 3fpkt", shape=diamond, color=yellow];
1512[label="197.33.188.113;s;1pkt 1fpkt", shape=diamond, color=yellow];
2329[label="197.33.188.113;s;1pkt 1fpkt", shape=hexagon, color=black];
stat145[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.249.171.55:3852, 148.180.220.26:7144}[33.3333%]&lt;BR/&gt;{213.217.8.100:1863, 148.180.220.26:1038}[33.3333%]&lt;BR/&gt;{197.33.188.113:58661, 148.180.220.26:7144}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7144: (40%)&lt;BR/&gt; 58661: (30%)&lt;BR/&gt; 3852: (10%)&lt;BR/&gt; 1863: (10%)&lt;BR/&gt; 1038: (10%)&gt;];
}
1286--1512[label="1;1pkt 1fpkt"];
1286--2329[label="1;1pkt 1fpkt"];
1512--2329[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.180.220.26" dst_port="7144" src_ip="197.33.188.113" src_port="58661"/>
      <filter dst_ip="148.180.220.26" dst_port="1038" src_ip="213.217.8.100" src_port="1863"/>
      <filter dst_ip="148.180.220.26" dst_port="7144" src_ip="194.249.171.55" src_port="3852"/>
    </slice>
    <from sec="1075698001" usec="0"/>
    <to sec="1075698827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945727,1.79955,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_146{
style=filled;
color=gray75;
1012[label="208.47.118.37;d;114pkt 114fpkt", shape=diamond, color=yellow];
1535[label="50.225.25.26;s;25pkt 25fpkt", shape=diamond, color=yellow];
2168[label="208.47.118.37;d;114pkt 114fpkt", shape=hexagon, color=black];
3375[label="197.149.160.122;70pkt 70fpkt", shape=pentagon, color=darkviolet];
4351[label="197.149.160.122;70pkt 70fpkt", shape=invtriangle, color=brown];
stat146[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.149.160.122:*, 208.47.118.37:80}[62.2807%]&lt;BR/&gt;{50.225.25.26:*, 208.47.118.37:80}[21.9298%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4911%)&lt;BR/&gt; 54040: (0.508906%)&lt;BR/&gt; 54026: (0.508906%)&lt;BR/&gt; 54016: (0.508906%)&lt;BR/&gt; 54006: (0.508906%)&gt;];
}
1012--1048[label="0.00877193;1pkt 1fpkt"];
1012--1320[label="0.00877193;1pkt 1fpkt"];
1012--1409[label="0.00877193;1pkt 1fpkt"];
1012--1414[label="0.00877193;1pkt 1fpkt"];
1012--1439[label="0.00877193;1pkt 1fpkt"];
1012--1484[label="0.0175439;2pkt 2fpkt"];
1012--1535[label="1;25pkt 25fpkt"];
1012--2050[label="0.00877193;1pkt 1fpkt"];
1012--2168[label="1;114pkt 114fpkt"];
1012--2223[label="0.00877193;1pkt 1fpkt"];
1012--2266[label="0.0175439;2pkt 2fpkt"];
1012--2644[label="0.236842;27pkt 27fpkt"];
1012--2645[label="0.00877193;1pkt 1fpkt"];
1012--3375[label="1;70pkt 70fpkt"];
1012--3908[label="0.047619;1pkt 1fpkt"];
1012--4351[label="1;70pkt 70fpkt"];
1535--2168[label="1;25pkt 25fpkt"];
1535--2644[label="0.04;1pkt 1fpkt"];
1535--2645[label="0.04;1pkt 1fpkt"];
2168--2223[label="0.00877193;1pkt 1fpkt"];
2168--2266[label="0.0175439;2pkt 2fpkt"];
2168--2644[label="0.236842;27pkt 27fpkt"];
2168--2645[label="0.00877193;1pkt 1fpkt"];
2168--3375[label="1;70pkt 70fpkt"];
2168--3908[label="0.047619;1pkt 1fpkt"];
2168--4351[label="1;70pkt 70fpkt"];
3375--4351[label="1;70pkt 70fpkt"];
</description>
    <slice>
      <filter dst_ip="208.47.118.37" dst_port="80" src_ip="197.149.160.122"/>
      <filter dst_ip="208.47.118.37" dst_port="80" src_ip="50.225.25.26"/>
    </slice>
    <from sec="1075698016" usec="0"/>
    <to sec="1075698827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.725226,1.93923,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="48.96.76.178"/>
      <from sec="1075698233" usec="0"/>
      <to sec="1075698733" usec="0"/>
    </slice>
    <from sec="1075698233" usec="0"/>
    <to sec="1075698733" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.725226,1.93923,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="203.80.204.239"/>
      <from sec="1075698722" usec="0"/>
      <to sec="1075698777" usec="0"/>
    </slice>
    <from sec="1075698722" usec="0"/>
    <to sec="1075698777" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.725226,1.93923,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="222.41.204.141"/>
      <from sec="1075698001" usec="0"/>
      <to sec="1075698824" usec="0"/>
    </slice>
    <from sec="1075698001" usec="0"/>
    <to sec="1075698824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.940848,1.90229,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_150{
style=filled;
color=gray75;
1514[label="164.229.114.105;d;7pkt 7fpkt", shape=diamond, color=yellow];
1609[label="53.5.89.70;s;7pkt 7fpkt", shape=diamond, color=yellow];
2420[label="164.229.114.105;d;7pkt 7fpkt", shape=hexagon, color=black];
stat150[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.5.89.70:*, 164.229.114.105:14816}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 14816: (50%)&lt;BR/&gt; 2759: (7.14286%)&lt;BR/&gt; 2755: (7.14286%)&lt;BR/&gt; 2753: (7.14286%)&lt;BR/&gt; 2752: (7.14286%)&gt;];
}
1514--1609[label="1;7pkt 7fpkt"];
1514--2420[label="1;7pkt 7fpkt"];
1609--2420[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="164.229.114.105" dst_port="14816" src_ip="53.5.89.70"/>
    </slice>
    <from sec="1075698001" usec="0"/>
    <to sec="1075698827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.18741,1.88166,503,1 1 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_151{
style=filled;
color=gray75;
157[label="143.111.82.51s;26pkt 26fpkt", shape=rectangle, color=red];
386[label="143.111.82.51s;24pkt 24fpkt", shape=ellipse, color=green];
1636[label="143.111.82.51;s;69pkt 69fpkt", shape=diamond, color=yellow];
stat151[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.82.51:*, 50.140.122.60:80}[24.6377%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60900: (1.2605%)&lt;BR/&gt; 60715: (1.2605%)&lt;BR/&gt; 60470: (1.2605%)&lt;BR/&gt; 60469: (1.2605%)&gt;];
}
157--386[label="0.625;15pkt 15fpkt"];
157--1636[label="1;26pkt 26fpkt"];
157--2644[label="0.0384615;1pkt 1fpkt"];
386--1636[label="1;24pkt 24fpkt"];
386--2644[label="0.0833333;2pkt 2fpkt"];
1636--2644[label="0.057971;4pkt 4fpkt"];
1636--2645[label="0.0869565;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="50.140.122.60" dst_port="80" src_ip="143.111.82.51"/>
    </slice>
    <from sec="1075698008" usec="0"/>
    <to sec="1075698646" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.725226,1.93923,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="143.111.105.50"/>
      <from sec="1075698011" usec="0"/>
      <to sec="1075698827" usec="0"/>
    </slice>
    <from sec="1075698011" usec="0"/>
    <to sec="1075698827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.725226,1.93923,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_153{
style=filled;
color=gray75;
1585[label="213.217.12.56;s;5pkt 5fpkt", shape=diamond, color=yellow];
1658[label="137.37.54.170;d;6pkt 6fpkt", shape=diamond, color=yellow];
stat153[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:1863, 137.37.54.170:*}[60%]&lt;BR/&gt;{213.217.12.56:1863, 143.110.69.20:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3209: (9.09091%)&lt;BR/&gt; 49516: (4.54545%)&lt;BR/&gt; 49456: (4.54545%)&lt;BR/&gt; 4009: (4.54545%)&gt;];
}
1585--1658[label="0.2;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="137.37.54.170" src_port="1863"/>
      <filter dst_ip="143.110.69.20" src_ip="213.217.12.56" src_port="1863"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.731545,1.83855,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_154{
style=filled;
color=gray75;
1557[label="50.95.126.165;s;2pkt 2fpkt", shape=diamond, color=yellow];
1678[label="162.159.19.150;d;2pkt 2fpkt", shape=diamond, color=yellow];
3591[label="50.95.126.165;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4462[label="50.95.126.165;2pkt 2fpkt", shape=invtriangle, color=brown];
stat154[shape=component, label=&lt;Rules:&lt;BR/&gt;{50.95.126.165:42170, 162.159.19.150:25}[50%]&lt;BR/&gt;{50.95.126.165:42171, 162.159.19.150:25}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 42171: (28.5714%)&lt;BR/&gt; 42170: (21.4286%)&gt;];
}
1557--1678[label="1;2pkt 2fpkt"];
1557--3591[label="1;1pkt 1fpkt"];
1557--4462[label="1;2pkt 2fpkt"];
1678--3591[label="1;1pkt 1fpkt"];
1678--4462[label="1;2pkt 2fpkt"];
3591--4462[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.159.19.150" dst_port="25" src_ip="50.95.126.165" src_port="42171"/>
      <filter dst_ip="162.159.19.150" dst_port="25" src_ip="50.95.126.165" src_port="42170"/>
    </slice>
    <from sec="1075698395" usec="0"/>
    <to sec="1075698518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945727,1.79955,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_155{
style=filled;
color=gray75;
1563[label="143.111.50.197;d;15pkt 15fpkt", shape=diamond, color=yellow];
1688[label="219.103.243.185;s;14pkt 14fpkt", shape=diamond, color=yellow];
2563[label="143.111.50.197;d;16pkt 16fpkt", shape=hexagon, color=black];
3684[label="219.103.243.185;13pkt 13fpkt", shape=pentagon, color=darkviolet];
4519[label="219.103.243.185;14pkt 14fpkt", shape=invtriangle, color=brown];
stat155[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.103.243.185:80, 143.111.50.197:*}[87.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.6111%)&lt;BR/&gt; 1321: (3.47222%)&lt;BR/&gt; 1320: (3.47222%)&lt;BR/&gt; 1319: (3.47222%)&lt;BR/&gt; 1318: (3.47222%)&gt;];
}
1563--1688[label="1;14pkt 14fpkt"];
1563--2563[label="1;15pkt 15fpkt"];
1563--3684[label="1;13pkt 13fpkt"];
1563--4519[label="1;14pkt 14fpkt"];
1688--2563[label="1;14pkt 14fpkt"];
1688--3684[label="1;13pkt 13fpkt"];
1688--4519[label="1;14pkt 14fpkt"];
2563--3296[label="0.0625;1pkt 1fpkt"];
2563--3684[label="1;13pkt 13fpkt"];
2563--4519[label="1;14pkt 14fpkt"];
3684--4519[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="143.111.50.197" src_ip="219.103.243.185" src_port="80"/>
    </slice>
    <from sec="1075698440" usec="0"/>
    <to sec="1075698821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.725226,1.93923,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="195.128.98.115"/>
      <from sec="1075698558" usec="0"/>
      <to sec="1075698828" usec="0"/>
    </slice>
    <from sec="1075698558" usec="0"/>
    <to sec="1075698828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.725226,1.93923,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_157{
style=filled;
color=gray75;
1713[label="148.180.88.242;d;1pkt 1fpkt", shape=diamond, color=yellow];
1714[label="213.118.192.141;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat157[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.118.192.141:80, 148.180.88.242:2571}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2571: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1713--1714[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.180.88.242" dst_port="2571" src_ip="213.118.192.141" src_port="80"/>
    </slice>
    <from sec="1075698619" usec="0"/>
    <to sec="1075698739" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.940848,1.90229,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_158{
style=filled;
color=gray75;
1708[label="201.138.60.252;s;37pkt 37fpkt", shape=diamond, color=yellow];
1800[label="209.43.82.180;d;65pkt 65fpkt", shape=diamond, color=yellow];
2478[label="209.43.82.180;d;65pkt 65fpkt", shape=hexagon, color=black];
stat158[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.138.60.252:80, 209.43.82.180:*}[56.9231%]&lt;BR/&gt;{50.116.76.188:80, 209.43.82.180:*}[21.5385%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4012%)&lt;BR/&gt; 2711: (0.898204%)&lt;BR/&gt; 2710: (0.898204%)&lt;BR/&gt; 2709: (0.898204%)&lt;BR/&gt; 2708: (0.898204%)&gt;];
}
1708--1800[label="1;37pkt 37fpkt"];
1708--2478[label="1;37pkt 37fpkt"];
1800--2478[label="1;65pkt 65fpkt"];
</description>
    <slice>
      <filter dst_ip="209.43.82.180" src_ip="201.138.60.252" src_port="80"/>
      <filter dst_ip="209.43.82.180" src_ip="50.116.76.188" src_port="80"/>
    </slice>
    <from sec="1075698484" usec="0"/>
    <to sec="1075698825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.731545,1.83855,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_159{
style=filled;
color=gray75;
1771[label="143.111.70.164;s;33pkt 33fpkt", shape=diamond, color=yellow];
1822[label="204.1.22.143;d;1pkt 1fpkt", shape=diamond, color=yellow];
3587[label="143.111.70.164;34pkt 34fpkt", shape=pentagon, color=darkviolet];
4459[label="143.111.70.164;34pkt 34fpkt", shape=invtriangle, color=brown];
stat159[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.70.164:*, 204.1.20.47:80}[40%]&lt;BR/&gt;{143.111.70.164:*, 204.1.20.0:80}[31.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2510: (1.96078%)&lt;BR/&gt; 2523: (1.47059%)&lt;BR/&gt; 2522: (1.47059%)&lt;BR/&gt; 2513: (1.47059%)&gt;];
}
1771--1822[label="1;1pkt 1fpkt"];
1771--2237[label="0.030303;1pkt 1fpkt"];
1771--2644[label="0.212121;7pkt 7fpkt"];
1771--2645[label="0.0909091;3pkt 3fpkt"];
1771--3587[label="0.969697;32pkt 32fpkt"];
1771--4459[label="0.969697;32pkt 32fpkt"];
1822--3587[label="1;1pkt 1fpkt"];
1822--4459[label="1;1pkt 1fpkt"];
3587--4459[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="204.1.20.47" dst_port="80" src_ip="143.111.70.164"/>
      <filter dst_ip="204.1.20.0" dst_port="80" src_ip="143.111.70.164"/>
    </slice>
    <from sec="1075698014" usec="0"/>
    <to sec="1075698900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.882036,1.82917,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_160{
style=filled;
color=gray75;
1766[label="148.180.129.78;d;5pkt 5fpkt", shape=diamond, color=yellow];
1829[label="73.229.161.191;s;2pkt 2fpkt", shape=diamond, color=yellow];
2445[label="148.180.129.78;d;5pkt 5fpkt", shape=hexagon, color=black];
3703[label="73.229.161.191;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat160[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.210.60.136:8000, 148.180.129.78:4002}[20%]&lt;BR/&gt;{209.210.60.142:8000, 148.180.129.78:4001}[20%]&lt;BR/&gt;{73.241.176.225:8000, 148.180.129.78:4002}[20%]&lt;BR/&gt;{73.229.161.191:3022, 148.180.129.78:2595}[20%]&lt;BR/&gt;{73.229.161.191:3023, 148.180.129.78:2596}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8000: (21.4286%)&lt;BR/&gt; 4002: (14.2857%)&lt;BR/&gt; 3023: (14.2857%)&lt;BR/&gt; 3022: (14.2857%)&lt;BR/&gt; 2596: (14.2857%)&gt;];
}
1766--1829[label="1;2pkt 2fpkt"];
1766--2445[label="1;5pkt 5fpkt"];
1766--3703[label="1;2pkt 2fpkt"];
1829--2445[label="1;2pkt 2fpkt"];
1829--3703[label="1;2pkt 2fpkt"];
2445--3703[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="148.180.129.78" dst_port="2596" src_ip="73.229.161.191" src_port="3023"/>
      <filter dst_ip="148.180.129.78" dst_port="2595" src_ip="73.229.161.191" src_port="3022"/>
      <filter dst_ip="148.180.129.78" dst_port="4002" src_ip="73.241.176.225" src_port="8000"/>
      <filter dst_ip="148.180.129.78" dst_port="4001" src_ip="209.210.60.142" src_port="8000"/>
      <filter dst_ip="148.180.129.78" dst_port="4002" src_ip="209.210.60.136" src_port="8000"/>
    </slice>
    <from sec="1075698008" usec="0"/>
    <to sec="1075698842" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0008,1.87383,503,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_161{
style=filled;
color=gray75;
1842[label="214.188.66.212;d;1pkt 1fpkt", shape=diamond, color=yellow];
1843[label="137.198.206.201;s;1pkt 1fpkt", shape=diamond, color=yellow];
2493[label="137.198.206.201;s;1pkt 1fpkt", shape=hexagon, color=black];
4560[label="137.198.206.201;1pkt 1fpkt", shape=invtriangle, color=brown];
stat161[shape=component, label=&lt;Rules:&lt;BR/&gt;{137.198.206.201:63736, 214.188.66.212:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63736: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1842--1843[label="1;1pkt 1fpkt"];
1842--2493[label="1;1pkt 1fpkt"];
1842--4560[label="1;1pkt 1fpkt"];
1843--2493[label="1;1pkt 1fpkt"];
1843--4560[label="1;1pkt 1fpkt"];
2493--4560[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.188.66.212" dst_port="80" src_ip="137.198.206.201" src_port="63736"/>
    </slice>
    <from sec="1075698704" usec="0"/>
    <to sec="1075698725" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.882036,1.82917,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_162{
style=filled;
color=gray75;
1268[label="143.111.98.68;s;223pkt 223fpkt", shape=diamond, color=yellow];
1851[label="35.229.159.8;d;76pkt 76fpkt", shape=diamond, color=yellow];
1852[label="35.229.159.9;d;76pkt 76fpkt", shape=diamond, color=yellow];
2149[label="143.111.98.68;s;151pkt 151fpkt", shape=hexagon, color=black];
2514[label="35.229.159.8;d;76pkt 76fpkt", shape=hexagon, color=black];
3074[label="143.111.98.68;236pkt 236fpkt", shape=pentagon, color=darkviolet];
stat162[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.98.68:*, 35.229.159.9:80}[35.0211%]&lt;BR/&gt;{143.111.98.68:*, 35.229.159.8:80}[34.5992%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.8067%)&lt;BR/&gt; 1863: (0.656325%)&lt;BR/&gt; 7001: (0.357995%)&lt;BR/&gt; 59919: (0.298329%)&lt;BR/&gt; 59909: (0.298329%)&gt;];
}
1268--1373[label="0.00904977;2pkt 2fpkt"];
1268--1716[label="0.0232558;2pkt 2fpkt"];
1268--1742[label="0.0108696;1pkt 1fpkt"];
1268--1851[label="1;76pkt 76fpkt"];
1268--1852[label="1;76pkt 76fpkt"];
1268--2091[label="0.00694444;1pkt 1fpkt"];
1268--2149[label="1;151pkt 151fpkt"];
1268--2275[label="0.0128205;2pkt 2fpkt"];
1268--2381[label="0.025;2pkt 2fpkt"];
1268--2514[label="1;76pkt 76fpkt"];
1268--2627[label="0.025;2pkt 2fpkt"];
1268--2644[label="0.0493274;11pkt 11fpkt"];
1268--2645[label="0.134529;30pkt 30fpkt"];
1268--3074[label="0.995516;222pkt 222fpkt"];
1851--2149[label="0.671053;51pkt 51fpkt"];
1851--2514[label="1;76pkt 76fpkt"];
1851--2644[label="0.0789474;6pkt 6fpkt"];
1851--2645[label="0.0657895;5pkt 5fpkt"];
1851--3074[label="1;76pkt 76fpkt"];
1852--2149[label="0.684211;52pkt 52fpkt"];
1852--2644[label="0.0657895;5pkt 5fpkt"];
1852--2645[label="0.0657895;5pkt 5fpkt"];
1852--3074[label="1;76pkt 76fpkt"];
2149--2275[label="0.013245;2pkt 2fpkt"];
2149--2514[label="0.671053;51pkt 51fpkt"];
2149--2644[label="0.0728477;11pkt 11fpkt"];
2149--2645[label="0.0794702;12pkt 12fpkt"];
2149--3074[label="0.993377;150pkt 150fpkt"];
2514--2644[label="0.0789474;6pkt 6fpkt"];
2514--2645[label="0.0657895;5pkt 5fpkt"];
2514--3074[label="1;76pkt 76fpkt"];
</description>
    <slice>
      <filter dst_ip="35.229.159.9" dst_port="80" src_ip="143.111.98.68"/>
      <filter dst_ip="35.229.159.8" dst_port="80" src_ip="143.111.98.68"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11702,1.79355,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_163{
style=filled;
color=gray75;
1084[label="208.47.114.89;d;152pkt 152fpkt", shape=diamond, color=yellow];
1901[label="110.212.31.158;s;7pkt 7fpkt", shape=diamond, color=yellow];
1932[label="52.218.192.1;s;13pkt 13fpkt", shape=diamond, color=yellow];
2080[label="208.47.114.89;d;152pkt 152fpkt", shape=hexagon, color=black];
2926[label="50.225.25.44;15pkt 15fpkt", shape=pentagon, color=darkviolet];
3282[label="201.1.83.104;15pkt 15fpkt", shape=pentagon, color=darkviolet];
3607[label="50.225.25.168;41pkt 41fpkt", shape=pentagon, color=darkviolet];
4106[label="50.225.25.44;16pkt 16fpkt", shape=invtriangle, color=brown];
4712[label="50.225.25.44;16pkt 16fpkt", shape=invhouse, color=bisque];
stat163[shape=component, label=&lt;Rules:&lt;BR/&gt;{50.225.25.168:*, 208.47.114.89:80}[26.4516%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.9016%)&lt;BR/&gt; 554: (1.99063%)&lt;BR/&gt; 6972: (0.58548%)&lt;BR/&gt; 4894: (0.58548%)&lt;BR/&gt; 4629: (0.58548%)&gt;];
}
1084--1901[label="1;7pkt 7fpkt"];
1084--1932[label="0.846154;11pkt 11fpkt"];
1084--2050[label="0.00657895;1pkt 1fpkt"];
1084--2080[label="1;152pkt 152fpkt"];
1084--2223[label="0.00657895;1pkt 1fpkt"];
1084--2644[label="0.0263158;4pkt 4fpkt"];
1084--2645[label="0.0657895;10pkt 10fpkt"];
1084--2649[label="0.00657895;1pkt 1fpkt"];
1084--2926[label="1;15pkt 15fpkt"];
1084--3282[label="1;15pkt 15fpkt"];
1084--3559[label="0.0454545;1pkt 1fpkt"];
1084--3607[label="0.97561;40pkt 40fpkt"];
1084--3908[label="0.047619;1pkt 1fpkt"];
1084--4106[label="1;16pkt 16fpkt"];
1084--4712[label="1;16pkt 16fpkt"];
1901--2080[label="1;7pkt 7fpkt"];
1932--2080[label="0.846154;11pkt 11fpkt"];
2080--2223[label="0.00657895;1pkt 1fpkt"];
2080--2644[label="0.0263158;4pkt 4fpkt"];
2080--2645[label="0.0657895;10pkt 10fpkt"];
2080--2649[label="0.00657895;1pkt 1fpkt"];
2080--2926[label="1;15pkt 15fpkt"];
2080--3282[label="1;15pkt 15fpkt"];
2080--3559[label="0.0454545;1pkt 1fpkt"];
2080--3607[label="0.97561;40pkt 40fpkt"];
2080--3908[label="0.047619;1pkt 1fpkt"];
2080--4106[label="1;16pkt 16fpkt"];
2080--4712[label="1;16pkt 16fpkt"];
2926--4106[label="1;15pkt 15fpkt"];
2926--4712[label="1;15pkt 15fpkt"];
4106--4712[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="208.47.114.89" dst_port="80" src_ip="50.225.25.168"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11702,1.79355,504,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_164{
style=filled;
color=gray75;
1899[label="208.81.34.13;d;4pkt 4fpkt", shape=diamond, color=yellow];
1904[label="209.137.236.28;s;4pkt 4fpkt", shape=diamond, color=yellow];
2556[label="208.81.34.13;d;5pkt 5fpkt", shape=hexagon, color=black];
2845[label="209.137.236.28;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4063[label="209.137.236.28;4pkt 4fpkt", shape=invtriangle, color=brown];
4694[label="209.137.236.28;3pkt 3fpkt", shape=invhouse, color=bisque];
stat164[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.137.236.22:80, 208.81.34.13:52052}[20%]&lt;BR/&gt;{209.137.236.28:443, 208.81.34.13:12576}[20%]&lt;BR/&gt;{209.137.236.28:443, 208.81.34.13:14259}[20%]&lt;BR/&gt;{209.137.236.28:443, 208.81.34.13:16153}[20%]&lt;BR/&gt;{209.137.236.28:443, 208.81.34.13:16548}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (47.9167%)&lt;BR/&gt; 16548: (12.5%)&lt;BR/&gt; 16153: (12.5%)&lt;BR/&gt; 14259: (12.5%)&lt;BR/&gt; 12576: (10.4167%)&gt;];
}
1899--1904[label="1;4pkt 4fpkt"];
1899--2556[label="1;4pkt 4fpkt"];
1899--2845[label="1;4pkt 4fpkt"];
1899--4063[label="1;4pkt 4fpkt"];
1899--4694[label="1;3pkt 3fpkt"];
1904--2556[label="1;4pkt 4fpkt"];
1904--2845[label="1;4pkt 4fpkt"];
1904--4063[label="1;4pkt 4fpkt"];
1904--4694[label="1;3pkt 3fpkt"];
2556--2845[label="1;4pkt 4fpkt"];
2556--4063[label="1;4pkt 4fpkt"];
2556--4694[label="1;3pkt 3fpkt"];
2845--4063[label="1;4pkt 4fpkt"];
2845--4694[label="1;3pkt 3fpkt"];
4063--4694[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="208.81.34.13" dst_port="16548" src_ip="209.137.236.28" src_port="443"/>
      <filter dst_ip="208.81.34.13" dst_port="16153" src_ip="209.137.236.28" src_port="443"/>
      <filter dst_ip="208.81.34.13" dst_port="14259" src_ip="209.137.236.28" src_port="443"/>
      <filter dst_ip="208.81.34.13" dst_port="12576" src_ip="209.137.236.28" src_port="443"/>
      <filter dst_ip="208.81.34.13" dst_port="52052" src_ip="209.137.236.22" src_port="80"/>
    </slice>
    <from sec="1075698253" usec="0"/>
    <to sec="1075698813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04271,1.86125,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_165{
style=filled;
color=gray75;
26[label="202.138.133.30s;2pkt 2fpkt", shape=rectangle, color=red];
1916[label="148.180.216.195;d;30pkt 30fpkt", shape=diamond, color=yellow];
1920[label="202.138.133.30;s;6pkt 6fpkt", shape=diamond, color=yellow];
2571[label="148.180.216.195;d;30pkt 30fpkt", shape=hexagon, color=black];
stat165[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.138.133.30:80, 148.180.216.195:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1442: (2.94118%)&lt;BR/&gt; 1435: (2.94118%)&lt;BR/&gt; 1434: (2.20588%)&lt;BR/&gt; 1433: (2.20588%)&gt;];
}
26--1916[label="1;2pkt 2fpkt"];
26--1920[label="1;2pkt 2fpkt"];
26--2571[label="1;2pkt 2fpkt"];
1916--1920[label="1;6pkt 6fpkt"];
1916--2571[label="1;30pkt 30fpkt"];
1920--2571[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="148.180.216.195" src_ip="202.138.133.30" src_port="80"/>
    </slice>
    <from sec="1075698599" usec="0"/>
    <to sec="1075698795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.725226,1.93923,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="110.252.175.109"/>
      <from sec="1075698638" usec="0"/>
      <to sec="1075698781" usec="0"/>
    </slice>
    <from sec="1075698638" usec="0"/>
    <to sec="1075698781" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.725226,1.93923,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_167{
style=filled;
color=gray75;
1489[label="143.110.10.108;d;32pkt 32fpkt", shape=diamond, color=yellow];
1929[label="73.251.167.196;s;10pkt 10fpkt", shape=diamond, color=yellow];
stat167[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.251.167.203:80, 143.110.10.108:*}[43.75%]&lt;BR/&gt;{73.251.167.196:80, 143.110.10.108:*}[31.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2553: (2.38095%)&lt;BR/&gt; 2552: (2.38095%)&lt;BR/&gt; 2551: (2.38095%)&lt;BR/&gt; 2548: (2.38095%)&gt;];
}
1489--1929[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="143.110.10.108" src_ip="73.251.167.203" src_port="80"/>
      <filter dst_ip="143.110.10.108" src_ip="73.251.167.196" src_port="80"/>
    </slice>
    <from sec="1075698685" usec="0"/>
    <to sec="1075698754" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.725226,1.93923,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="75.48.1.152"/>
      <from sec="1075698703" usec="0"/>
      <to sec="1075698828" usec="0"/>
    </slice>
    <from sec="1075698703" usec="0"/>
    <to sec="1075698828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.731545,1.83855,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_169{
style=filled;
color=gray75;
1935[label="137.37.71.224;d;3pkt 3fpkt", shape=diamond, color=yellow];
1936[label="201.221.211.52;s;3pkt 3fpkt", shape=diamond, color=yellow];
2988[label="201.221.211.52;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4137[label="201.221.211.52;1pkt 1fpkt", shape=invtriangle, color=brown];
stat169[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.221.211.52:80, 137.37.71.224:1455}[33.3333%]&lt;BR/&gt;{201.221.211.52:80, 137.37.71.224:1456}[33.3333%]&lt;BR/&gt;{201.221.211.52:80, 137.37.71.224:1457}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1456: (25%)&lt;BR/&gt; 1457: (12.5%)&lt;BR/&gt; 1455: (12.5%)&gt;];
}
1935--1936[label="1;3pkt 3fpkt"];
1935--2988[label="1;1pkt 1fpkt"];
1935--4137[label="1;1pkt 1fpkt"];
1936--2988[label="1;1pkt 1fpkt"];
1936--4137[label="1;1pkt 1fpkt"];
2988--4137[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="137.37.71.224" dst_port="1457" src_ip="201.221.211.52" src_port="80"/>
      <filter dst_ip="137.37.71.224" dst_port="1456" src_ip="201.221.211.52" src_port="80"/>
      <filter dst_ip="137.37.71.224" dst_port="1455" src_ip="201.221.211.52" src_port="80"/>
    </slice>
    <from sec="1075698703" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04271,1.86125,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_170{
style=filled;
color=gray75;
141[label="73.193.236.1s;1pkt 1fpkt", shape=rectangle, color=red];
1939[label="73.193.236.1;s;39pkt 39fpkt", shape=diamond, color=yellow];
2579[label="73.193.236.1;s;39pkt 39fpkt", shape=hexagon, color=black];
stat170[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.193.236.1:80, 148.180.253.75:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4921: (1.89873%)&lt;BR/&gt; 4989: (1.26582%)&lt;BR/&gt; 4979: (1.26582%)&lt;BR/&gt; 4977: (1.26582%)&gt;];
}
141--1939[label="1;1pkt 1fpkt"];
141--2579[label="1;1pkt 1fpkt"];
1939--2579[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="148.180.253.75" src_ip="73.193.236.1" src_port="80"/>
    </slice>
    <from sec="1075698733" usec="0"/>
    <to sec="1075698824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.882036,1.82917,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_171{
style=filled;
color=gray75;
877[label="65.191.251.212;d;69pkt 69fpkt", shape=diamond, color=yellow];
878[label="65.191.251.212;s;80pkt 80fpkt", shape=diamond, color=yellow];
2004[label="65.191.251.212;d;43pkt 43fpkt", shape=hexagon, color=black];
3812[label="65.191.251.212;87pkt 87fpkt", shape=pentagon, color=darkviolet];
stat171[shape=component, label=&lt;Rules:&lt;BR/&gt;{65.191.251.212:13364, 65.191.251.212:*}[91.954%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13364: (45.6989%)&lt;BR/&gt; 0: (5.37634%)&lt;BR/&gt; 13365: (1.79211%)&lt;BR/&gt; 80: (1.79211%)&lt;BR/&gt; 13392: (1.25448%)&gt;];
}
877--878[label="1;69pkt 69fpkt"];
877--2004[label="1;43pkt 43fpkt"];
877--2644[label="0.0144928;1pkt 1fpkt"];
877--2645[label="0.0144928;1pkt 1fpkt"];
877--2652[label="0.0144928;1pkt 1fpkt"];
877--3812[label="1;69pkt 69fpkt"];
878--2004[label="1;43pkt 43fpkt"];
878--2644[label="0.0125;1pkt 1fpkt"];
878--2645[label="0.0125;1pkt 1fpkt"];
878--2652[label="0.0125;1pkt 1fpkt"];
878--3812[label="1;80pkt 80fpkt"];
2004--2644[label="0.0232558;1pkt 1fpkt"];
2004--2645[label="0.0232558;1pkt 1fpkt"];
2004--3812[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_ip="65.191.251.212" src_ip="65.191.251.212" src_port="13364"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.940848,1.90229,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_172{
style=filled;
color=gray75;
691[label="203.12.49.27;s;6751pkt 6751fpkt", shape=diamond, color=yellow];
2011[label="203.12.49.27;s;2307pkt 2307fpkt", shape=hexagon, color=black];
stat172[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.12.49.27:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 34452: (0.0331199%)&lt;BR/&gt; 41971: (0.0275999%)&lt;BR/&gt; 39611: (0.0275999%)&lt;BR/&gt; 39042: (0.0275999%)&gt;];
}
691--1461[label="0.00625;1pkt 1fpkt"];
691--2011[label="1;2307pkt 2307fpkt"];
</description>
    <slice>
      <filter src_ip="203.12.49.27" src_port="80"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.940848,1.90229,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_174{
style=filled;
color=gray75;
933[label="143.111.108.131;d;786pkt 786fpkt", shape=diamond, color=yellow];
2019[label="143.111.108.131;d;728pkt 728fpkt", shape=hexagon, color=black];
stat174[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 143.111.108.131:25863}[99.3639%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25863: (49.6697%)&lt;BR/&gt; 33033: (0.792602%)&lt;BR/&gt; 1025: (0.330251%)&lt;BR/&gt; 0: (0.264201%)&lt;BR/&gt; 80: (0.198151%)&gt;];
}
933--2019[label="1;728pkt 728fpkt"];
933--2644[label="0.00254453;2pkt 2fpkt"];
933--2645[label="0.00254453;2pkt 2fpkt"];
2019--2644[label="0.00274725;2pkt 2fpkt"];
2019--2645[label="0.00274725;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="143.111.108.131" dst_port="25863"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.79545,1.94729,503,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="143.110.49.18"/>
      <from sec="1075698076" usec="0"/>
      <to sec="1075698196" usec="0"/>
    </slice>
    <from sec="1075698076" usec="0"/>
    <to sec="1075698196" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.882036,1.82917,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_177{
style=filled;
color=gray75;
1062[label="148.180.163.40;d;392pkt 392fpkt", shape=diamond, color=yellow];
2064[label="148.180.163.40;d;360pkt 360fpkt", shape=hexagon, color=black];
3690[label="35.174.51.187;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat177[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 148.180.163.40:25}[96.7005%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.4828%)&lt;BR/&gt; 0: (2.63852%)&lt;BR/&gt; 52933: (0.263852%)&lt;BR/&gt; 4643: (0.263852%)&lt;BR/&gt; 4610: (0.263852%)&gt;];
}
1062--2064[label="1;360pkt 360fpkt"];
1062--2650[label="0.00255102;1pkt 1fpkt"];
1062--3690[label="0.666667;4pkt 4fpkt"];
2064--3690[label="0.666667;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="148.180.163.40" dst_port="25"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04711,1.7561,503,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_178{
style=filled;
color=gray75;
63[label="143.111.98.88s;2pkt 2fpkt", shape=rectangle, color=red];
866[label="143.111.98.88;s;284pkt 284fpkt", shape=diamond, color=yellow];
867[label="53.106.253.127;d;1pkt 1fpkt", shape=diamond, color=yellow];
1089[label="74.132.29.129;d;2pkt 2fpkt", shape=diamond, color=yellow];
1700[label="49.242.65.121;d;90pkt 90fpkt", shape=diamond, color=yellow];
1769[label="53.184.53.235;d;1pkt 1fpkt", shape=diamond, color=yellow];
2061[label="53.106.253.127;d;1pkt 1fpkt", shape=hexagon, color=black];
2143[label="74.132.29.129;d;1pkt 1fpkt", shape=hexagon, color=black];
2385[label="143.111.98.88;s;284pkt 284fpkt", shape=hexagon, color=black];
3206[label="143.111.98.88;314pkt 314fpkt", shape=pentagon, color=darkviolet];
4259[label="143.111.98.88;314pkt 314fpkt", shape=invtriangle, color=brown];
stat178[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.98.88:*, 49.242.65.121:80}[28.6624%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.6306%)&lt;BR/&gt; 6881: (5.37094%)&lt;BR/&gt; 6882: (1.12056%)&lt;BR/&gt; 33100: (1.08192%)&lt;BR/&gt; 6883: (0.772798%)&gt;];
}
63--866[label="1;2pkt 2fpkt"];
63--867[label="1;1pkt 1fpkt"];
63--1089[label="0.5;1pkt 1fpkt"];
63--2061[label="1;1pkt 1fpkt"];
63--2143[label="1;1pkt 1fpkt"];
63--2385[label="1;2pkt 2fpkt"];
63--3206[label="1;2pkt 2fpkt"];
63--4259[label="1;2pkt 2fpkt"];
866--867[label="1;1pkt 1fpkt"];
866--945[label="0.0107527;2pkt 2fpkt"];
866--1082[label="0.0153061;3pkt 3fpkt"];
866--1089[label="1;2pkt 2fpkt"];
866--1700[label="1;90pkt 90fpkt"];
866--1769[label="1;1pkt 1fpkt"];
866--2061[label="1;1pkt 1fpkt"];
866--2091[label="0.0138889;2pkt 2fpkt"];
866--2143[label="1;1pkt 1fpkt"];
866--2385[label="1;284pkt 284fpkt"];
866--2644[label="0.00352113;1pkt 1fpkt"];
866--2645[label="0.34507;98pkt 98fpkt"];
866--3206[label="1;284pkt 284fpkt"];
866--4259[label="1;284pkt 284fpkt"];
867--2061[label="1;1pkt 1fpkt"];
867--2385[label="1;1pkt 1fpkt"];
867--3206[label="1;1pkt 1fpkt"];
867--4259[label="1;1pkt 1fpkt"];
1089--2143[label="1;1pkt 1fpkt"];
1089--2385[label="1;2pkt 2fpkt"];
1089--3206[label="1;2pkt 2fpkt"];
1089--4259[label="1;2pkt 2fpkt"];
1700--2385[label="1;90pkt 90fpkt"];
1700--2645[label="1;90pkt 90fpkt"];
1700--3206[label="1;90pkt 90fpkt"];
1700--4259[label="1;90pkt 90fpkt"];
1769--2385[label="1;1pkt 1fpkt"];
1769--3206[label="1;1pkt 1fpkt"];
1769--4259[label="1;1pkt 1fpkt"];
2061--2385[label="1;1pkt 1fpkt"];
2061--3206[label="1;1pkt 1fpkt"];
2061--4259[label="1;1pkt 1fpkt"];
2143--2385[label="1;1pkt 1fpkt"];
2143--3206[label="1;1pkt 1fpkt"];
2143--4259[label="1;1pkt 1fpkt"];
2385--2644[label="0.00352113;1pkt 1fpkt"];
2385--2645[label="0.34507;98pkt 98fpkt"];
2385--3206[label="1;284pkt 284fpkt"];
2385--4259[label="1;284pkt 284fpkt"];
3206--4259[label="1;314pkt 314fpkt"];
</description>
    <slice>
      <filter dst_ip="49.242.65.121" dst_port="80" src_ip="143.111.98.88"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.940848,1.90229,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_179{
style=filled;
color=gray75;
1142[label="164.229.133.24;d;12pkt 12fpkt", shape=diamond, color=yellow];
2100[label="164.229.133.24;d;12pkt 12fpkt", shape=hexagon, color=black];
stat179[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.22.140.142:80, 164.229.133.24:*}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.8333%)&lt;BR/&gt; 3883: (4.16667%)&lt;BR/&gt; 3607: (4.16667%)&lt;BR/&gt; 3603: (4.16667%)&lt;BR/&gt; 3602: (4.16667%)&gt;];
}
1142--2100[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="164.229.133.24" src_ip="197.22.140.142" src_port="80"/>
    </slice>
    <from sec="1075698002" usec="0"/>
    <to sec="1075698827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945727,1.79955,020,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_180{
style=filled;
color=gray75;
642[label="193.35.184.189;s;1776pkt 1776fpkt", shape=diamond, color=yellow];
2129[label="193.35.184.189;s;1776pkt 1776fpkt", shape=hexagon, color=black];
3699[label="193.35.184.189;2164pkt 2164fpkt", shape=pentagon, color=darkviolet];
4526[label="193.35.184.189;2164pkt 2164fpkt", shape=invtriangle, color=brown];
stat180[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.35.184.189:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
642--2129[label="1;1776pkt 1776fpkt"];
642--3699[label="1;1776pkt 1776fpkt"];
642--4526[label="1;1776pkt 1776fpkt"];
2129--3699[label="1;1776pkt 1776fpkt"];
2129--4526[label="1;1776pkt 1776fpkt"];
3699--4526[label="1;2164pkt 2164fpkt"];
</description>
    <slice>
      <filter src_ip="193.35.184.189"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.882036,1.82917,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_181{
style=filled;
color=gray75;
1269[label="143.111.50.16;d;110pkt 110fpkt", shape=diamond, color=yellow];
2151[label="143.111.50.16;d;93pkt 93fpkt", shape=hexagon, color=black];
3010[label="213.217.8.56;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat181[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 143.111.50.16:*}[75.4386%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.7404%)&lt;BR/&gt; 3128: (6.73077%)&lt;BR/&gt; 8080: (1.92308%)&lt;BR/&gt; 1863: (1.68269%)&lt;BR/&gt; 4274: (0.961538%)&gt;];
}
1269--2151[label="1;93pkt 93fpkt"];
1269--3010[label="0.2;1pkt 1fpkt"];
2151--3010[label="0.2;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.111.50.16" src_port="80"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945727,1.79955,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_182{
style=filled;
color=gray75;
1115[label="143.111.113.101;s;152pkt 152fpkt", shape=diamond, color=yellow];
2154[label="143.111.113.101;s;152pkt 152fpkt", shape=hexagon, color=black];
3272[label="143.111.113.101;159pkt 159fpkt", shape=pentagon, color=darkviolet];
4292[label="143.111.113.101;158pkt 158fpkt", shape=invtriangle, color=brown];
stat182[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.113.101:*, *:80}[55.9748%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (28.3414%)&lt;BR/&gt; 1863: (2.57649%)&lt;BR/&gt; 1782: (2.57649%)&lt;BR/&gt; 1958: (2.01288%)&lt;BR/&gt; 2078: (1.93237%)&gt;];
}
1115--1248[label="0.00714286;1pkt 1fpkt"];
1115--1373[label="0.00657895;1pkt 1fpkt"];
1115--1416[label="0.0246914;2pkt 2fpkt"];
1115--2154[label="1;152pkt 152fpkt"];
1115--2158[label="0.00657895;1pkt 1fpkt"];
1115--2275[label="0.00657895;1pkt 1fpkt"];
1115--2437[label="0.025974;2pkt 2fpkt"];
1115--2644[label="0.0197368;3pkt 3fpkt"];
1115--2645[label="0.0197368;3pkt 3fpkt"];
1115--3272[label="1;152pkt 152fpkt"];
1115--4292[label="0.993421;151pkt 151fpkt"];
2154--2158[label="0.00657895;1pkt 1fpkt"];
2154--2275[label="0.00657895;1pkt 1fpkt"];
2154--2437[label="0.025974;2pkt 2fpkt"];
2154--2644[label="0.0197368;3pkt 3fpkt"];
2154--2645[label="0.0197368;3pkt 3fpkt"];
2154--3272[label="1;152pkt 152fpkt"];
2154--4292[label="0.993421;151pkt 151fpkt"];
3272--4292[label="1;158pkt 158fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="143.111.113.101"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945727,1.79955,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_184{
style=filled;
color=gray75;
811[label="143.111.9.12;s;243pkt 243fpkt", shape=diamond, color=yellow];
840[label="52.184.116.10;d;28pkt 28fpkt", shape=diamond, color=yellow];
1220[label="52.184.116.137;d;42pkt 42fpkt", shape=diamond, color=yellow];
2184[label="52.184.116.137;d;42pkt 42fpkt", shape=hexagon, color=black];
2745[label="143.111.9.12;253pkt 253fpkt", shape=pentagon, color=darkviolet];
4017[label="143.111.9.12;253pkt 253fpkt", shape=invtriangle, color=brown];
stat184[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.9.12:*, *:80}[98.8189%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5935%)&lt;BR/&gt; 1863: (0.348432%)&lt;BR/&gt; 1701: (0.29036%)&lt;BR/&gt; 1700: (0.29036%)&lt;BR/&gt; 1699: (0.29036%)&gt;];
}
811--840[label="0.964286;27pkt 27fpkt"];
811--1220[label="1;42pkt 42fpkt"];
811--1373[label="0.00904977;2pkt 2fpkt"];
811--2184[label="1;42pkt 42fpkt"];
811--2644[label="0.111111;27pkt 27fpkt"];
811--2645[label="0.00411523;1pkt 1fpkt"];
811--2745[label="1;243pkt 243fpkt"];
811--4017[label="1;243pkt 243fpkt"];
840--2644[label="0.785714;22pkt 22fpkt"];
840--2745[label="0.964286;27pkt 27fpkt"];
840--4017[label="0.964286;27pkt 27fpkt"];
1220--2184[label="1;42pkt 42fpkt"];
1220--2745[label="1;42pkt 42fpkt"];
1220--4017[label="1;42pkt 42fpkt"];
2184--2745[label="1;42pkt 42fpkt"];
2184--4017[label="1;42pkt 42fpkt"];
2745--4017[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="143.111.9.12"/>
    </slice>
    <from sec="1075698006" usec="0"/>
    <to sec="1075698895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.882036,1.82917,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_186{
style=filled;
color=gray75;
941[label="73.235.66.46;s;1452pkt 1452fpkt", shape=diamond, color=yellow];
2214[label="73.235.66.46;s;850pkt 850fpkt", shape=hexagon, color=black];
2941[label="73.235.66.46;1568pkt 1568fpkt", shape=pentagon, color=darkviolet];
stat186[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.235.66.46:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54818: (0.0904393%)&lt;BR/&gt; 39500: (0.0904393%)&lt;BR/&gt; 64780: (0.0775194%)&lt;BR/&gt; 58211: (0.0775194%)&gt;];
}
941--1064[label="0.00436681;1pkt 1fpkt"];
941--2214[label="1;850pkt 850fpkt"];
941--2941[label="0.999311;1451pkt 1451fpkt"];
2214--2941[label="0.998824;849pkt 849fpkt"];
</description>
    <slice>
      <filter src_ip="73.235.66.46" src_port="80"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.940848,1.90229,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_191{
style=filled;
color=gray75;
753[label="143.111.88.53;s;644pkt 644fpkt", shape=diamond, color=yellow];
2277[label="143.111.88.53;s;372pkt 372fpkt", shape=hexagon, color=black];
stat191[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.88.53:*, *:25}[67.8571%]&lt;BR/&gt;{143.111.88.53:25, *:*}[30.4348%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.1634%)&lt;BR/&gt; 113: (0.836614%)&lt;BR/&gt; 2103: (0.295276%)&lt;BR/&gt; 2194: (0.246063%)&lt;BR/&gt; 3048: (0.19685%)&gt;];
}
753--2277[label="1;372pkt 372fpkt"];
</description>
    <slice>
      <filter src_ip="143.111.88.53" src_port="25"/>
      <filter dst_port="25" src_ip="143.111.88.53"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.940848,1.90229,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_192{
style=filled;
color=gray75;
1385[label="209.226.194.126;s;5pkt 5fpkt", shape=diamond, color=yellow];
2280[label="209.226.194.126;s;5pkt 5fpkt", shape=hexagon, color=black];
stat192[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.226.194.126:6668, 162.159.91.216:2978}[20%]&lt;BR/&gt;{209.226.194.126:27941, 162.159.16.101:113}[20%]&lt;BR/&gt;{209.226.194.126:6667, 162.159.16.101:2687}[20%]&lt;BR/&gt;{209.226.194.126:33531, 162.159.17.115:113}[20%]&lt;BR/&gt;{209.226.194.126:6667, 162.159.17.115:1560}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (20%)&lt;BR/&gt; 113: (20%)&lt;BR/&gt; 33531: (10%)&lt;BR/&gt; 27941: (10%)&lt;BR/&gt; 6668: (10%)&gt;];
}
1385--2280[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="162.159.17.115" dst_port="1560" src_ip="209.226.194.126" src_port="6667"/>
      <filter dst_ip="162.159.17.115" dst_port="113" src_ip="209.226.194.126" src_port="33531"/>
      <filter dst_ip="162.159.16.101" dst_port="2687" src_ip="209.226.194.126" src_port="6667"/>
      <filter dst_ip="162.159.16.101" dst_port="113" src_ip="209.226.194.126" src_port="27941"/>
      <filter dst_ip="162.159.91.216" dst_port="2978" src_ip="209.226.194.126" src_port="6668"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989968,1.78644,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_193{
style=filled;
color=gray75;
38[label="110.14.165.42s;1pkt 1fpkt", shape=rectangle, color=red];
756[label="162.159.13.135;d;20pkt 20fpkt", shape=diamond, color=yellow];
757[label="197.199.194.232;s;1pkt 1fpkt", shape=diamond, color=yellow];
761[label="75.11.77.128;s;1pkt 1fpkt", shape=diamond, color=yellow];
1156[label="53.19.22.124;s;1pkt 1fpkt", shape=diamond, color=yellow];
1452[label="110.14.165.42;s;1pkt 1fpkt", shape=diamond, color=yellow];
1725[label="110.49.19.30;s;1pkt 1fpkt", shape=diamond, color=yellow];
2290[label="53.19.22.124;s;1pkt 1fpkt", shape=hexagon, color=black];
2510[label="110.49.19.30;s;1pkt 1fpkt", shape=hexagon, color=black];
3407[label="75.11.77.128;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3720[label="35.136.210.194;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat193[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6881, 162.159.13.135:*}[35%]&lt;BR/&gt;{*:6882, 162.159.13.135:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (15%)&lt;BR/&gt; 6882: (13.3333%)&lt;BR/&gt; 37321: (5%)&lt;BR/&gt; 35781: (5%)&lt;BR/&gt; 34594: (5%)&gt;];
}
38--756[label="1;1pkt 1fpkt"];
38--1452[label="1;1pkt 1fpkt"];
756--757[label="1;1pkt 1fpkt"];
756--761[label="1;1pkt 1fpkt"];
756--1156[label="1;1pkt 1fpkt"];
756--1452[label="1;1pkt 1fpkt"];
756--1725[label="1;1pkt 1fpkt"];
756--1873[label="0.0909091;1pkt 1fpkt"];
756--2290[label="1;1pkt 1fpkt"];
756--2510[label="1;1pkt 1fpkt"];
756--2536[label="0.0909091;1pkt 1fpkt"];
756--3202[label="0.1;1pkt 1fpkt"];
756--3407[label="1;1pkt 1fpkt"];
756--3720[label="1;1pkt 1fpkt"];
756--4255[label="0.1;1pkt 1fpkt"];
761--3407[label="1;1pkt 1fpkt"];
1156--2290[label="1;1pkt 1fpkt"];
1725--2510[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.159.13.135" src_port="6881"/>
      <filter dst_ip="162.159.13.135" src_port="6882"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.882036,1.82917,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_194{
style=filled;
color=gray75;
808[label="112.15.172.173;d;35pkt 35fpkt", shape=diamond, color=yellow];
973[label="143.111.21.169;s;61pkt 61fpkt", shape=diamond, color=yellow];
2293[label="112.15.172.173;d;31pkt 31fpkt", shape=hexagon, color=black];
3613[label="143.111.21.169;65pkt 65fpkt", shape=pentagon, color=darkviolet];
stat194[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.21.169:*, 112.15.172.173:80}[57.5758%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4792%)&lt;BR/&gt; 4821: (1.04167%)&lt;BR/&gt; 4817: (1.04167%)&lt;BR/&gt; 4816: (1.04167%)&lt;BR/&gt; 4815: (1.04167%)&gt;];
}
808--973[label="1;35pkt 35fpkt"];
808--2293[label="1;31pkt 31fpkt"];
808--2644[label="0.0571429;2pkt 2fpkt"];
808--2645[label="0.0857143;3pkt 3fpkt"];
808--3613[label="1;35pkt 35fpkt"];
973--978[label="0.0327869;2pkt 2fpkt"];
973--1121[label="0.0163934;1pkt 1fpkt"];
973--1129[label="0.0163934;1pkt 1fpkt"];
973--2158[label="0.0163934;1pkt 1fpkt"];
973--2293[label="1;31pkt 31fpkt"];
973--2525[label="0.0163934;1pkt 1fpkt"];
973--2644[label="0.0655738;4pkt 4fpkt"];
973--2645[label="0.0983607;6pkt 6fpkt"];
973--3613[label="0.983607;60pkt 60fpkt"];
2293--2644[label="0.0645161;2pkt 2fpkt"];
2293--2645[label="0.0967742;3pkt 3fpkt"];
2293--3613[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="112.15.172.173" dst_port="80" src_ip="143.111.21.169"/>
    </slice>
    <from sec="1075698001" usec="0"/>
    <to sec="1075698895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.940848,1.90229,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_198{
style=filled;
color=gray75;
751[label="143.111.117.79;s;524pkt 524fpkt", shape=diamond, color=yellow];
846[label="203.1.5.179;d;382pkt 382fpkt", shape=diamond, color=yellow];
2175[label="203.1.5.179;d;382pkt 382fpkt", shape=hexagon, color=black];
stat198[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.117.79:*, 203.1.5.179:80}[72.9008%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8835%)&lt;BR/&gt; 63393: (0.232919%)&lt;BR/&gt; 63561: (0.194099%)&lt;BR/&gt; 63506: (0.194099%)&lt;BR/&gt; 63395: (0.194099%)&gt;];
}
751--846[label="1;382pkt 382fpkt"];
751--1004[label="0.3;9pkt 9fpkt"];
751--2175[label="1;382pkt 382fpkt"];
751--2344[label="0.310345;9pkt 9fpkt"];
751--2644[label="0.0229008;12pkt 12fpkt"];
751--2645[label="0.0438931;23pkt 23fpkt"];
846--2175[label="1;382pkt 382fpkt"];
</description>
    <slice>
      <filter dst_ip="203.1.5.179" dst_port="80" src_ip="143.111.117.79"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.79545,1.94729,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="48.96.76.178"/>
      <from sec="1075698233" usec="0"/>
      <to sec="1075698733" usec="0"/>
    </slice>
    <from sec="1075698233" usec="0"/>
    <to sec="1075698733" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945727,1.79955,010,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_200{
style=filled;
color=gray75;
1487[label="110.14.39.45;s;510pkt 510fpkt", shape=diamond, color=yellow];
2367[label="110.14.39.45;s;510pkt 510fpkt", shape=hexagon, color=black];
2934[label="110.14.39.45;509pkt 509fpkt", shape=pentagon, color=darkviolet];
4112[label="110.14.39.45;510pkt 510fpkt", shape=invtriangle, color=brown];
stat200[shape=component, label=&lt;Rules:&lt;BR/&gt;{110.14.39.45:*, *:139}[49.8039%]&lt;BR/&gt;{110.14.39.45:*, *:445}[49.8039%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (24.9142%)&lt;BR/&gt; 139: (24.8897%)&lt;BR/&gt; 0: (0.392349%)&lt;BR/&gt; 4996: (0.0980873%)&lt;BR/&gt; 4995: (0.0980873%)&gt;];
}
1487--2367[label="1;510pkt 510fpkt"];
1487--2934[label="1;509pkt 509fpkt"];
1487--4112[label="1;510pkt 510fpkt"];
2367--2934[label="1;509pkt 509fpkt"];
2367--4112[label="1;510pkt 510fpkt"];
2934--4112[label="1;509pkt 509fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="110.14.39.45"/>
      <filter dst_port="139" src_ip="110.14.39.45"/>
    </slice>
    <from sec="1075698410" usec="0"/>
    <to sec="1075698543" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.940848,1.90229,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_201{
style=filled;
color=gray75;
1773[label="143.111.227.145;s;52pkt 52fpkt", shape=diamond, color=yellow];
1922[label="192.108.65.14;d;1pkt 1fpkt", shape=diamond, color=yellow];
2548[label="143.111.227.145;s;52pkt 52fpkt", shape=hexagon, color=black];
stat201[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.227.145:32867, *:6868}[53.8462%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32867: (37.1429%)&lt;BR/&gt; 6868: (26.6667%)&lt;BR/&gt; 6869: (4.7619%)&lt;BR/&gt; 80: (4.7619%)&lt;BR/&gt; 1863: (1.90476%)&gt;];
}
1773--1922[label="1;1pkt 1fpkt"];
1773--2373[label="0.0192308;1pkt 1fpkt"];
1773--2548[label="1;52pkt 52fpkt"];
1773--2645[label="0.0384615;2pkt 2fpkt"];
1922--2548[label="1;1pkt 1fpkt"];
2548--2645[label="0.0384615;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="6868" src_ip="143.111.227.145" src_port="32867"/>
    </slice>
    <from sec="1075698019" usec="0"/>
    <to sec="1075698828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04711,1.7561,011,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_202{
style=filled;
color=gray75;
30[label="197.144.68.33s;1pkt 1fpkt", shape=rectangle, color=red];
1674[label="164.229.175.84;d;34pkt 34fpkt", shape=diamond, color=yellow];
1701[label="33.4.116.144;s;1pkt 1fpkt", shape=diamond, color=yellow];
1709[label="197.144.68.33;s;1pkt 1fpkt", shape=diamond, color=yellow];
1754[label="209.222.95.174;s;590pkt 590fpkt", shape=diamond, color=yellow];
1816[label="73.4.194.8;s;2pkt 2fpkt", shape=diamond, color=yellow];
2374[label="33.4.116.144;s;1pkt 1fpkt", shape=hexagon, color=black];
2572[label="73.4.194.8;s;2pkt 2fpkt", shape=hexagon, color=black];
2681[label="213.217.9.3;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3552[label="74.86.134.156;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4439[label="74.86.134.156;1pkt 1fpkt", shape=invtriangle, color=brown];
stat202[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.222.95.174:21, *:*}[94.0989%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (46.2441%)&lt;BR/&gt; 4662: (1.87793%)&lt;BR/&gt; 4087: (0.469484%)&lt;BR/&gt; 1863: (0.469484%)&lt;BR/&gt; 5832: (0.234742%)&gt;];
}
30--1674[label="1;1pkt 1fpkt"];
30--1709[label="1;1pkt 1fpkt"];
1674--1701[label="1;1pkt 1fpkt"];
1674--1709[label="1;1pkt 1fpkt"];
1674--1754[label="0.0294118;1pkt 1fpkt"];
1674--1816[label="1;2pkt 2fpkt"];
1674--2374[label="1;1pkt 1fpkt"];
1674--2572[label="1;2pkt 2fpkt"];
1674--2681[label="0.2;1pkt 1fpkt"];
1674--3552[label="1;1pkt 1fpkt"];
1674--4439[label="1;1pkt 1fpkt"];
1701--2374[label="1;1pkt 1fpkt"];
1816--2572[label="1;2pkt 2fpkt"];
3552--4439[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="209.222.95.174" src_port="21"/>
    </slice>
    <from sec="1075698003" usec="0"/>
    <to sec="1075698899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.940848,1.90229,011,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_204{
style=filled;
color=gray75;
1386[label="73.240.223.165;s;756pkt 756fpkt", shape=diamond, color=yellow];
2410[label="73.240.223.165;s;756pkt 756fpkt", shape=hexagon, color=black];
stat204[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.240.223.165:7000, *:*}[95.3704%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (47.6852%)&lt;BR/&gt; 1029: (2.31481%)&lt;BR/&gt; 137: (2.31481%)&lt;BR/&gt; 40501: (0.132275%)&lt;BR/&gt; 27789: (0.132275%)&gt;];
}
1386--2410[label="1;756pkt 756fpkt"];
1386--2502[label="0.00132275;1pkt 1fpkt"];
1386--2647[label="0.0132275;10pkt 10fpkt"];
2410--2502[label="0.00132275;1pkt 1fpkt"];
2410--2647[label="0.0132275;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="73.240.223.165" src_port="7000"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945727,1.79955,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_205{
style=filled;
color=gray75;
995[label="143.110.148.117;d;23pkt 23fpkt", shape=diamond, color=yellow];
996[label="50.225.25.186;s;50pkt 50fpkt", shape=diamond, color=yellow];
1639[label="208.47.116.128;d;28pkt 28fpkt", shape=diamond, color=yellow];
2441[label="143.110.148.117;d;23pkt 23fpkt", shape=hexagon, color=black];
3687[label="50.225.25.186;54pkt 54fpkt", shape=pentagon, color=darkviolet];
4521[label="50.225.25.186;54pkt 54fpkt", shape=invtriangle, color=brown];
stat205[shape=component, label=&lt;Rules:&lt;BR/&gt;{50.225.25.186:*, 208.47.116.128:80}[52.7273%]&lt;BR/&gt;{50.225.25.186:*, 143.110.148.117:80}[45.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7845%)&lt;BR/&gt; 4876: (1.07759%)&lt;BR/&gt; 4777: (1.07759%)&lt;BR/&gt; 4526: (1.07759%)&lt;BR/&gt; 4151: (1.07759%)&gt;];
}
995--996[label="1;23pkt 23fpkt"];
995--2441[label="1;23pkt 23fpkt"];
995--2644[label="0.0869565;2pkt 2fpkt"];
995--2645[label="0.0869565;2pkt 2fpkt"];
995--3687[label="1;23pkt 23fpkt"];
995--4521[label="1;23pkt 23fpkt"];
996--1639[label="0.964286;27pkt 27fpkt"];
996--2441[label="1;23pkt 23fpkt"];
996--2644[label="0.1;5pkt 5fpkt"];
996--2645[label="0.06;3pkt 3fpkt"];
996--3687[label="1;50pkt 50fpkt"];
996--4521[label="1;50pkt 50fpkt"];
1639--2223[label="0.0357143;1pkt 1fpkt"];
1639--2644[label="0.107143;3pkt 3fpkt"];
1639--2645[label="0.0357143;1pkt 1fpkt"];
1639--3687[label="0.964286;27pkt 27fpkt"];
1639--4521[label="0.964286;27pkt 27fpkt"];
2441--2644[label="0.0869565;2pkt 2fpkt"];
2441--2645[label="0.0869565;2pkt 2fpkt"];
2441--3687[label="1;23pkt 23fpkt"];
2441--4521[label="1;23pkt 23fpkt"];
3687--4521[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter dst_ip="208.47.116.128" dst_port="80" src_ip="50.225.25.186"/>
      <filter dst_ip="143.110.148.117" dst_port="80" src_ip="50.225.25.186"/>
    </slice>
    <from sec="1075698005" usec="0"/>
    <to sec="1075698896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.940848,1.90229,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_206{
style=filled;
color=gray75;
1772[label="143.111.227.34;s;28pkt 28fpkt", shape=diamond, color=yellow];
2450[label="143.111.227.34;s;28pkt 28fpkt", shape=hexagon, color=black];
stat206[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.227.34:*, 201.209.79.226:80}[46.4286%]&lt;BR/&gt;{143.111.227.34:*, 142.16.135.179:80}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.4286%)&lt;BR/&gt; 1863: (3.57143%)&lt;BR/&gt; 33708: (1.78571%)&lt;BR/&gt; 33678: (1.78571%)&lt;BR/&gt; 33663: (1.78571%)&gt;];
}
1772--2450[label="1;28pkt 28fpkt"];
1772--2645[label="0.0357143;1pkt 1fpkt"];
2450--2645[label="0.0357143;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.209.79.226" dst_port="80" src_ip="143.111.227.34"/>
      <filter dst_ip="142.16.135.179" dst_port="80" src_ip="143.111.227.34"/>
    </slice>
    <from sec="1075698017" usec="0"/>
    <to sec="1075698826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.882036,1.82917,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_207{
style=filled;
color=gray75;
1542[label="200.32.8.86;s;125pkt 125fpkt", shape=diamond, color=yellow];
1653[label="143.110.212.180;d;128pkt 128fpkt", shape=diamond, color=yellow];
2456[label="143.110.212.180;d;111pkt 111fpkt", shape=hexagon, color=black];
3183[label="200.32.8.86;134pkt 134fpkt", shape=pentagon, color=darkviolet];
stat207[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.32.8.86:80, 143.110.212.180:*}[57.971%]&lt;BR/&gt;{200.32.8.86:8080, 143.110.212.180:*}[39.8551%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (28.9157%)&lt;BR/&gt; 8080: (20.8835%)&lt;BR/&gt; 3344: (0.401606%)&lt;BR/&gt; 3337: (0.401606%)&lt;BR/&gt; 3336: (0.401606%)&gt;];
}
1542--1653[label="1;125pkt 125fpkt"];
1542--2456[label="0.972973;108pkt 108fpkt"];
1542--3183[label="0.992;124pkt 124fpkt"];
1653--2456[label="1;111pkt 111fpkt"];
1653--3183[label="0.96875;124pkt 124fpkt"];
2456--3183[label="0.963964;107pkt 107fpkt"];
</description>
    <slice>
      <filter dst_ip="143.110.212.180" src_ip="200.32.8.86" src_port="80"/>
      <filter dst_ip="143.110.212.180" src_ip="200.32.8.86" src_port="8080"/>
    </slice>
    <from sec="1075698030" usec="0"/>
    <to sec="1075698889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.882036,1.82917,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_209{
style=filled;
color=gray75;
1065[label="143.111.46.108;s;265pkt 265fpkt", shape=diamond, color=yellow];
1804[label="193.60.46.181;d;100pkt 100fpkt", shape=diamond, color=yellow];
2482[label="193.60.46.181;d;90pkt 90fpkt", shape=hexagon, color=black];
3295[label="143.111.46.108;283pkt 283fpkt", shape=pentagon, color=darkviolet];
stat209[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.46.108:*, 193.60.46.181:80}[36.0424%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5935%)&lt;BR/&gt; 1904: (0.271003%)&lt;BR/&gt; 1902: (0.271003%)&lt;BR/&gt; 1878: (0.271003%)&lt;BR/&gt; 1877: (0.271003%)&gt;];
}
1065--1121[label="0.0150943;4pkt 4fpkt"];
1065--1123[label="0.00392157;1pkt 1fpkt"];
1065--1248[label="0.0142857;2pkt 2fpkt"];
1065--1298[label="0.0368664;8pkt 8fpkt"];
1065--1373[label="0.00452489;1pkt 1fpkt"];
1065--1418[label="0.0045045;1pkt 1fpkt"];
1065--1747[label="0.012987;1pkt 1fpkt"];
1065--1804[label="1;100pkt 100fpkt"];
1065--1880[label="0.0123457;1pkt 1fpkt"];
1065--1968[label="0.0457516;7pkt 7fpkt"];
1065--2158[label="0.0118577;3pkt 3fpkt"];
1065--2275[label="0.00641026;1pkt 1fpkt"];
1065--2428[label="0.012987;1pkt 1fpkt"];
1065--2436[label="0.0307692;6pkt 6fpkt"];
1065--2482[label="1;90pkt 90fpkt"];
1065--2497[label="0.00377358;1pkt 1fpkt"];
1065--2525[label="0.0150943;4pkt 4fpkt"];
1065--2543[label="0.0123457;1pkt 1fpkt"];
1065--2592[label="0.0457516;7pkt 7fpkt"];
1065--2639[label="0.012987;1pkt 1fpkt"];
1065--2644[label="0.120755;32pkt 32fpkt"];
1065--2645[label="0.0830189;22pkt 22fpkt"];
1065--3295[label="1;265pkt 265fpkt"];
1804--2482[label="1;90pkt 90fpkt"];
1804--2645[label="0.08;8pkt 8fpkt"];
1804--3295[label="1;100pkt 100fpkt"];
2482--2645[label="0.0888889;8pkt 8fpkt"];
2482--3295[label="1;90pkt 90fpkt"];
</description>
    <slice>
      <filter dst_ip="193.60.46.181" dst_port="80" src_ip="143.111.46.108"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.882036,1.82917,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_210{
style=filled;
color=gray75;
1761[label="143.111.244.7;s;20pkt 20fpkt", shape=diamond, color=yellow];
1841[label="217.15.236.8;d;1pkt 1fpkt", shape=diamond, color=yellow];
2492[label="217.15.236.8;d;1pkt 1fpkt", shape=hexagon, color=black];
2714[label="143.111.244.7;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat210[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.244.7:*, *:80}[60%]&lt;BR/&gt;{143.111.244.7:*, *:1863}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (32.6087%)&lt;BR/&gt; 63714: (8.69565%)&lt;BR/&gt; 1863: (8.69565%)&lt;BR/&gt; 0: (4.34783%)&lt;BR/&gt; 64868: (2.17391%)&gt;];
}
1761--1841[label="1;1pkt 1fpkt"];
1761--2275[label="0.05;1pkt 1fpkt"];
1761--2492[label="1;1pkt 1fpkt"];
1761--2645[label="0.15;3pkt 3fpkt"];
1761--2714[label="1;1pkt 1fpkt"];
1841--2492[label="1;1pkt 1fpkt"];
1841--2714[label="1;1pkt 1fpkt"];
2492--2714[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="143.111.244.7"/>
      <filter dst_port="1863" src_ip="143.111.244.7"/>
    </slice>
    <from sec="1075698006" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.940848,1.90229,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_212{
style=filled;
color=gray75;
1504[label="143.111.50.16;s;68pkt 68fpkt", shape=diamond, color=yellow];
2518[label="143.111.50.16;s;68pkt 68fpkt", shape=hexagon, color=black];
stat212[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.50.16:*, *:80}[77.9412%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.9706%)&lt;BR/&gt; 3128: (5.88235%)&lt;BR/&gt; 8080: (2.94118%)&lt;BR/&gt; 88: (1.47059%)&lt;BR/&gt; 4369: (0.735294%)&gt;];
}
1504--2518[label="1;68pkt 68fpkt"];
1504--2644[label="0.0588235;4pkt 4fpkt"];
1504--2645[label="0.0441176;3pkt 3fpkt"];
2518--2644[label="0.0588235;4pkt 4fpkt"];
2518--2645[label="0.0441176;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="143.111.50.16"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.882036,1.82917,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_213{
style=filled;
color=gray75;
1392[label="218.2.59.225;s;465pkt 465fpkt", shape=diamond, color=yellow];
2526[label="218.2.59.225;s;465pkt 465fpkt", shape=hexagon, color=black];
3878[label="218.2.59.225;471pkt 471fpkt", shape=pentagon, color=darkviolet];
stat213[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.2.59.225:6667, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (50%)&lt;BR/&gt; 1937: (0.321199%)&lt;BR/&gt; 1200: (0.321199%)&lt;BR/&gt; 3972: (0.214133%)&lt;BR/&gt; 3949: (0.214133%)&gt;];
}
1392--2526[label="1;465pkt 465fpkt"];
1392--3878[label="1;465pkt 465fpkt"];
2526--3878[label="1;465pkt 465fpkt"];
</description>
    <slice>
      <filter src_ip="218.2.59.225" src_port="6667"/>
    </slice>
    <from sec="1075698001" usec="0"/>
    <to sec="1075698897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.940848,1.90229,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_214{
style=filled;
color=gray75;
1887[label="164.229.28.245;d;60pkt 60fpkt", shape=diamond, color=yellow];
2545[label="164.229.28.245;d;60pkt 60fpkt", shape=hexagon, color=black];
stat214[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 164.229.28.245:25}[90%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 64818: (0.833333%)&lt;BR/&gt; 64767: (0.833333%)&lt;BR/&gt; 64667: (0.833333%)&lt;BR/&gt; 64639: (0.833333%)&gt;];
}
1887--2545[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_ip="164.229.28.245" dst_port="25"/>
    </slice>
    <from sec="1075698013" usec="0"/>
    <to sec="1075698828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.882036,1.82917,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_215{
style=filled;
color=gray75;
1679[label="209.145.108.160;s;256pkt 256fpkt", shape=diamond, color=yellow];
2562[label="209.145.108.160;s;256pkt 256fpkt", shape=hexagon, color=black];
3568[label="209.145.108.160;256pkt 256fpkt", shape=pentagon, color=darkviolet];
stat215[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.145.108.160:*, *:445}[96.875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (48.4375%)&lt;BR/&gt; 135: (1.5625%)&lt;BR/&gt; 4699: (0.390625%)&lt;BR/&gt; 4697: (0.390625%)&lt;BR/&gt; 4645: (0.390625%)&gt;];
}
1679--2562[label="1;256pkt 256fpkt"];
1679--3568[label="1;256pkt 256fpkt"];
2562--3568[label="1;256pkt 256fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="209.145.108.160"/>
    </slice>
    <from sec="1075698399" usec="0"/>
    <to sec="1075698758" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11702,1.79355,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_217{
style=filled;
color=gray75;
703[label="143.111.195.161;s;339pkt 339fpkt", shape=diamond, color=yellow];
822[label="209.210.68.174;d;202pkt 202fpkt", shape=diamond, color=yellow];
982[label="143.111.123.161;s;200pkt 200fpkt", shape=diamond, color=yellow];
1009[label="50.12.115.115;d;26pkt 26fpkt", shape=diamond, color=yellow];
1294[label="192.41.230.124;d;191pkt 191fpkt", shape=diamond, color=yellow];
1586[label="73.238.236.131;d;1pkt 1fpkt", shape=diamond, color=yellow];
1830[label="73.251.170.108;d;11pkt 11fpkt", shape=diamond, color=yellow];
2335[label="192.41.230.124;d;191pkt 191fpkt", shape=hexagon, color=black];
2575[label="73.251.170.108;d;11pkt 11fpkt", shape=hexagon, color=black];
3576[label="143.111.195.161;346pkt 346fpkt", shape=pentagon, color=darkviolet];
4453[label="143.111.195.161;345pkt 345fpkt", shape=invtriangle, color=brown];
4846[label="143.111.195.161;346pkt 346fpkt", shape=invhouse, color=bisque];
stat217[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.195.161:*, 209.210.68.174:80}[37.1115%]&lt;BR/&gt;{143.111.123.161:*, 192.41.230.124:80}[31.4442%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.751%)&lt;BR/&gt; 1195: (0.135808%)&lt;BR/&gt; 1194: (0.135808%)&lt;BR/&gt; 1192: (0.135808%)&lt;BR/&gt; 1191: (0.135808%)&gt;];
}
703--822[label="0.99505;201pkt 201fpkt"];
703--1009[label="1;26pkt 26fpkt"];
703--1022[label="0.0425532;4pkt 4fpkt"];
703--1294[label="0.0994764;19pkt 19fpkt"];
703--1373[label="0.00452489;1pkt 1fpkt"];
703--1586[label="1;1pkt 1fpkt"];
703--1607[label="0.00793651;1pkt 1fpkt"];
703--1830[label="1;11pkt 11fpkt"];
703--1845[label="0.5;1pkt 1fpkt"];
703--2130[label="0.00706714;2pkt 2fpkt"];
703--2172[label="0.0526316;4pkt 4fpkt"];
703--2335[label="0.0994764;19pkt 19fpkt"];
703--2504[label="0.5;1pkt 1fpkt"];
703--2575[label="1;11pkt 11fpkt"];
703--2644[label="0.0235988;8pkt 8fpkt"];
703--2645[label="0.0265487;9pkt 9fpkt"];
703--3576[label="1;339pkt 339fpkt"];
703--4453[label="0.99705;338pkt 338fpkt"];
703--4846[label="1;339pkt 339fpkt"];
822--892[label="0.0049505;1pkt 1fpkt"];
822--3576[label="0.99505;201pkt 201fpkt"];
822--4453[label="0.99505;201pkt 201fpkt"];
822--4846[label="0.99505;201pkt 201fpkt"];
982--1082[label="0.0204082;4pkt 4fpkt"];
982--1294[label="0.900524;172pkt 172fpkt"];
982--2078[label="0.0126582;1pkt 1fpkt"];
982--2091[label="0.0555556;8pkt 8fpkt"];
982--2335[label="0.900524;172pkt 172fpkt"];
982--2644[label="0.145;29pkt 29fpkt"];
982--2645[label="0.075;15pkt 15fpkt"];
1009--2644[label="0.0769231;2pkt 2fpkt"];
1009--3576[label="1;26pkt 26fpkt"];
1009--4453[label="1;26pkt 26fpkt"];
1009--4846[label="1;26pkt 26fpkt"];
1294--2335[label="1;191pkt 191fpkt"];
1294--2644[label="0.0837696;16pkt 16fpkt"];
1294--2645[label="0.0942408;18pkt 18fpkt"];
1294--3576[label="0.0994764;19pkt 19fpkt"];
1294--4453[label="0.0994764;19pkt 19fpkt"];
1294--4846[label="0.0994764;19pkt 19fpkt"];
1586--3576[label="1;1pkt 1fpkt"];
1586--4453[label="1;1pkt 1fpkt"];
1586--4846[label="1;1pkt 1fpkt"];
1830--2575[label="1;11pkt 11fpkt"];
1830--3576[label="1;11pkt 11fpkt"];
1830--4453[label="1;11pkt 11fpkt"];
1830--4846[label="1;11pkt 11fpkt"];
2335--2644[label="0.0837696;16pkt 16fpkt"];
2335--2645[label="0.0942408;18pkt 18fpkt"];
2335--3576[label="0.0994764;19pkt 19fpkt"];
2335--4453[label="0.0994764;19pkt 19fpkt"];
2335--4846[label="0.0994764;19pkt 19fpkt"];
2575--3576[label="1;11pkt 11fpkt"];
2575--4453[label="1;11pkt 11fpkt"];
2575--4846[label="1;11pkt 11fpkt"];
3576--4453[label="1;345pkt 345fpkt"];
3576--4846[label="1;346pkt 346fpkt"];
4453--4846[label="1;345pkt 345fpkt"];
</description>
    <slice>
      <filter dst_ip="209.210.68.174" dst_port="80" src_ip="143.111.195.161"/>
      <filter dst_ip="192.41.230.124" dst_port="80" src_ip="143.111.123.161"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.940848,1.90229,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_218{
style=filled;
color=gray75;
1840[label="203.28.81.240;s;510pkt 510fpkt", shape=diamond, color=yellow];
2578[label="203.28.81.240;s;510pkt 510fpkt", shape=hexagon, color=black];
stat218[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.28.81.240:*, *:139}[49.8039%]&lt;BR/&gt;{203.28.81.240:*, *:445}[49.8039%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (24.902%)&lt;BR/&gt; 139: (24.902%)&lt;BR/&gt; 0: (0.392157%)&lt;BR/&gt; 4467: (0.0980392%)&lt;BR/&gt; 4466: (0.0980392%)&gt;];
}
1840--2578[label="1;510pkt 510fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="203.28.81.240"/>
      <filter dst_port="139" src_ip="203.28.81.240"/>
    </slice>
    <from sec="1075698697" usec="0"/>
    <to sec="1075698812" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.156.0.0"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.157.97.1"/>
    </slice>
    <from sec="1075698041" usec="0"/>
    <to sec="1075698066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.647105,1.86755,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_226{
style=filled;
color=gray75;
900[label="143.111.245.1;s;157pkt 157fpkt", shape=diamond, color=yellow];
2671[label="143.111.245.1;191pkt 191fpkt", shape=pentagon, color=darkviolet];
stat226[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.245.1:*, *:25}[53.4031%]&lt;BR/&gt;{143.111.245.1:25, *:*}[46.5969%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 2994: (0.574713%)&lt;BR/&gt; 2876: (0.574713%)&lt;BR/&gt; 2857: (0.574713%)&lt;BR/&gt; 2595: (0.574713%)&gt;];
}
900--960[label="0.0127389;2pkt 2fpkt"];
900--2027[label="0.00636943;1pkt 1fpkt"];
900--2600[label="0.00636943;1pkt 1fpkt"];
900--2671[label="1;157pkt 157fpkt"];
</description>
    <slice>
      <filter src_ip="143.111.245.1" src_port="25"/>
      <filter dst_port="25" src_ip="143.111.245.1"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04711,1.7561,503,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_227{
style=filled;
color=gray75;
2[label="143.111.18.2s;3pkt 3fpkt", shape=rectangle, color=red];
800[label="143.111.18.2;s;208pkt 208fpkt", shape=diamond, color=yellow];
2099[label="143.111.18.2;s;208pkt 208fpkt", shape=hexagon, color=black];
2674[label="143.111.18.2;216pkt 216fpkt", shape=pentagon, color=darkviolet];
3980[label="143.111.18.2;217pkt 217fpkt", shape=invtriangle, color=brown];
stat227[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.18.2:*, 73.6.4.65:80}[32.5688%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.946%)&lt;BR/&gt; 1863: (1.11502%)&lt;BR/&gt; 7001: (0.469484%)&lt;BR/&gt; 31972: (0.293427%)&lt;BR/&gt; 23695: (0.293427%)&gt;];
}
2--800[label="1;3pkt 3fpkt"];
2--2099[label="1;3pkt 3fpkt"];
2--2674[label="1;3pkt 3fpkt"];
2--3980[label="1;3pkt 3fpkt"];
800--1742[label="0.0108696;1pkt 1fpkt"];
800--2099[label="1;208pkt 208fpkt"];
800--2644[label="0.173077;36pkt 36fpkt"];
800--2674[label="0.990385;206pkt 206fpkt"];
800--3980[label="0.995192;207pkt 207fpkt"];
2099--2644[label="0.173077;36pkt 36fpkt"];
2099--2674[label="0.990385;206pkt 206fpkt"];
2099--3980[label="0.995192;207pkt 207fpkt"];
2674--3980[label="1;216pkt 216fpkt"];
</description>
    <slice>
      <filter dst_ip="73.6.4.65" dst_port="80" src_ip="143.111.18.2"/>
    </slice>
    <from sec="1075698002" usec="0"/>
    <to sec="1075698891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.218.104.2"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.101.105.2"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.213.172.2"/>
    </slice>
    <from sec="1075698441" usec="0"/>
    <to sec="1075698515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.0.193.2"/>
    </slice>
    <from sec="1075698869" usec="0"/>
    <to sec="1075698900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.206.200.6"/>
    </slice>
    <from sec="1075698023" usec="0"/>
    <to sec="1075698442" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="143.111.203.6"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.196.34.7"/>
    </slice>
    <from sec="1075698832" usec="0"/>
    <to sec="1075698891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.12.34.11"/>
    </slice>
    <from sec="1075698017" usec="0"/>
    <to sec="1075698896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11702,1.79355,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_239{
style=filled;
color=gray75;
1218[label="143.111.5.69;d;122pkt 122fpkt", shape=diamond, color=yellow];
2119[label="143.111.5.69;d;93pkt 93fpkt", shape=hexagon, color=black];
2669[label="73.246.120.1;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2744[label="209.234.1.12;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2982[label="73.246.120.52;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4016[label="209.234.1.12;12pkt 12fpkt", shape=invtriangle, color=brown];
4677[label="209.234.1.12;12pkt 12fpkt", shape=invhouse, color=bisque];
stat239[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, 143.111.5.69:*}[87.7049%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (43.8492%)&lt;BR/&gt; 80: (5.95238%)&lt;BR/&gt; 1192: (0.992063%)&lt;BR/&gt; 1191: (0.992063%)&lt;BR/&gt; 1173: (0.992063%)&gt;];
}
1218--2119[label="1;93pkt 93fpkt"];
1218--2669[label="1;1pkt 1fpkt"];
1218--2744[label="1;11pkt 11fpkt"];
1218--2982[label="1;1pkt 1fpkt"];
1218--4016[label="1;12pkt 12fpkt"];
1218--4677[label="1;12pkt 12fpkt"];
2119--2669[label="1;1pkt 1fpkt"];
2119--2744[label="0.545455;6pkt 6fpkt"];
2119--2982[label="1;1pkt 1fpkt"];
2119--4016[label="0.583333;7pkt 7fpkt"];
2119--4677[label="0.583333;7pkt 7fpkt"];
2744--4016[label="1;11pkt 11fpkt"];
2744--4677[label="1;11pkt 11fpkt"];
4016--4677[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="143.111.5.69" src_port="25"/>
    </slice>
    <from sec="1075698167" usec="0"/>
    <to sec="1075698828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.217.9.12"/>
    </slice>
    <from sec="1075698001" usec="0"/>
    <to sec="1075698893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.217.12.12"/>
    </slice>
    <from sec="1075698007" usec="0"/>
    <to sec="1075698900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.214.51.12"/>
    </slice>
    <from sec="1075698757" usec="0"/>
    <to sec="1075698793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.213.212.12"/>
    </slice>
    <from sec="1075698446" usec="0"/>
    <to sec="1075698456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.217.8.14"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.696243,1.84364,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_245{
style=filled;
color=gray75;
166[label="110.38.16.14s;127pkt 127fpkt", shape=rectangle, color=red];
2762[label="110.38.16.14;127pkt 127fpkt", shape=pentagon, color=darkviolet];
4024[label="110.38.16.14;127pkt 127fpkt", shape=invtriangle, color=brown];
stat245[shape=component, label=&lt;Rules:&lt;BR/&gt;{110.38.16.14:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
166--2762[label="1;127pkt 127fpkt"];
166--4024[label="1;127pkt 127fpkt"];
2762--4024[label="1;127pkt 127fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="110.38.16.14" src_port="1025"/>
    </slice>
    <from sec="1075698464" usec="0"/>
    <to sec="1075698485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606912,1.87257,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_246{
style=filled;
color=gray75;
171[label="48.110.134.16s;229pkt 229fpkt", shape=rectangle, color=red];
2781[label="48.110.134.16;228pkt 228fpkt", shape=pentagon, color=darkviolet];
stat246[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.110.134.16:1034, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1034: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
171--2781[label="1;228pkt 228fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="48.110.134.16" src_port="1034"/>
    </slice>
    <from sec="1075698002" usec="0"/>
    <to sec="1075698030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.217.8.17"/>
    </slice>
    <from sec="1075698026" usec="0"/>
    <to sec="1075698892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="143.111.9.18"/>
    </slice>
    <from sec="1075698152" usec="0"/>
    <to sec="1075698429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.123.251.18"/>
    </slice>
    <from sec="1075698775" usec="0"/>
    <to sec="1075698834" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.157.15.19"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.74.200.20"/>
    </slice>
    <from sec="1075698692" usec="0"/>
    <to sec="1075698806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.170.133.21"/>
    </slice>
    <from sec="1075698427" usec="0"/>
    <to sec="1075698883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.108.156.23"/>
    </slice>
    <from sec="1075698249" usec="0"/>
    <to sec="1075698521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606912,1.87257,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_254{
style=filled;
color=gray75;
173[label="203.69.214.23s;152pkt 152fpkt", shape=rectangle, color=red];
2822[label="203.69.214.23;177pkt 177fpkt", shape=pentagon, color=darkviolet];
stat254[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.69.214.23:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
173--2822[label="0.993421;151pkt 151fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="203.69.214.23" src_port="1027"/>
    </slice>
    <from sec="1075698144" usec="0"/>
    <to sec="1075698172" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606912,1.87257,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_255{
style=filled;
color=gray75;
176[label="216.52.152.24s;142pkt 142fpkt", shape=rectangle, color=red];
2827[label="216.52.152.24;226pkt 226fpkt", shape=pentagon, color=darkviolet];
stat255[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.52.152.24:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
176--2827[label="1;142pkt 142fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="216.52.152.24" src_port="1031"/>
    </slice>
    <from sec="1075698833" usec="0"/>
    <to sec="1075698847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.203.26.25"/>
    </slice>
    <from sec="1075698338" usec="0"/>
    <to sec="1075698894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.153.18.27"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915476,1.83779,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_259{
style=filled;
color=gray75;
177[label="203.80.230.27s;180pkt 180fpkt", shape=rectangle, color=red];
2840[label="203.80.230.27;183pkt 183fpkt", shape=pentagon, color=darkviolet];
4061[label="203.80.230.27;182pkt 182fpkt", shape=invtriangle, color=brown];
4692[label="203.80.230.27;183pkt 183fpkt", shape=invhouse, color=bisque];
stat259[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.80.230.27:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
177--2840[label="1;180pkt 180fpkt"];
177--4061[label="0.994444;179pkt 179fpkt"];
177--4692[label="1;180pkt 180fpkt"];
2840--4061[label="1;182pkt 182fpkt"];
2840--4692[label="1;183pkt 183fpkt"];
4061--4692[label="1;182pkt 182fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="203.80.230.27" src_port="1030"/>
    </slice>
    <from sec="1075698255" usec="0"/>
    <to sec="1075698308" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.27.218.28"/>
    </slice>
    <from sec="1075698134" usec="0"/>
    <to sec="1075698895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="143.111.221.32"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.45.81.33"/>
    </slice>
    <from sec="1075698036" usec="0"/>
    <to sec="1075698885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="143.111.70.34"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.176.39.35"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_265{
style=filled;
color=gray75;
2879[label="73.91.209.35;55pkt 55fpkt", shape=pentagon, color=darkviolet];
stat265[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.91.209.35:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2010: (1.81818%)&lt;BR/&gt; 4628: (0.909091%)&lt;BR/&gt; 4520: (0.909091%)&lt;BR/&gt; 4500: (0.909091%)&gt;];
}
</description>
    <slice>
      <filter dst_port="80" src_ip="73.91.209.35"/>
    </slice>
    <from sec="1075698029" usec="0"/>
    <to sec="1075698862" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.133.219.36"/>
    </slice>
    <from sec="1075698286" usec="0"/>
    <to sec="1075698900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606912,1.87257,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_267{
style=filled;
color=gray75;
183[label="203.29.19.37s;252pkt 252fpkt", shape=rectangle, color=red];
2889[label="203.29.19.37;252pkt 252fpkt", shape=pentagon, color=darkviolet];
stat267[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.29.19.37:1032, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1032: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
183--2889[label="1;252pkt 252fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="203.29.19.37" src_port="1032"/>
    </slice>
    <from sec="1075698316" usec="0"/>
    <to sec="1075698340" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606912,1.87257,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_268{
style=filled;
color=gray75;
185[label="73.192.85.37s;252pkt 252fpkt", shape=rectangle, color=red];
2891[label="73.192.85.37;252pkt 252fpkt", shape=pentagon, color=darkviolet];
stat268[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.192.85.37:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
185--1560[label="0.0111111;1pkt 1fpkt"];
185--1654[label="0.00980392;1pkt 1fpkt"];
185--2891[label="1;252pkt 252fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="73.192.85.37" src_port="1027"/>
    </slice>
    <from sec="1075698699" usec="0"/>
    <to sec="1075698720" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606912,1.87257,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_269{
style=filled;
color=gray75;
186[label="203.88.2.38s;104pkt 104fpkt", shape=rectangle, color=red];
2893[label="203.88.2.38;168pkt 168fpkt", shape=pentagon, color=darkviolet];
stat269[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.88.2.38:64618, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64618: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
186--2893[label="1;104pkt 104fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="203.88.2.38" src_port="64618"/>
    </slice>
    <from sec="1075698169" usec="0"/>
    <to sec="1075698202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.217.8.38"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="137.198.204.38"/>
    </slice>
    <from sec="1075698056" usec="0"/>
    <to sec="1075698777" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="110.125.74.39"/>
    </slice>
    <from sec="1075698004" usec="0"/>
    <to sec="1075698892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.696243,1.84364,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_274{
style=filled;
color=gray75;
188[label="35.142.104.41s;84pkt 84fpkt", shape=rectangle, color=red];
2911[label="35.142.104.41;149pkt 149fpkt", shape=pentagon, color=darkviolet];
4101[label="35.142.104.41;148pkt 148fpkt", shape=invtriangle, color=brown];
stat274[shape=component, label=&lt;Rules:&lt;BR/&gt;{35.142.104.41:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
188--2911[label="1;84pkt 84fpkt"];
188--4101[label="0.988095;83pkt 83fpkt"];
2911--4101[label="1;148pkt 148fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="35.142.104.41" src_port="1025"/>
    </slice>
    <from sec="1075698434" usec="0"/>
    <to sec="1075698461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.172.42.42"/>
    </slice>
    <from sec="1075698539" usec="0"/>
    <to sec="1075698899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.9.54.42"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="110.14.165.42"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.172.34.44"/>
    </slice>
    <from sec="1075698014" usec="0"/>
    <to sec="1075698878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.31.71.44"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.96.139.44"/>
    </slice>
    <from sec="1075698001" usec="0"/>
    <to sec="1075698900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.731545,1.83855,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_281{
style=filled;
color=gray75;
775[label="221.206.200.44;s;2pkt 2fpkt", shape=diamond, color=yellow];
2931[label="221.206.200.44;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4110[label="221.206.200.44;1pkt 1fpkt", shape=invtriangle, color=brown];
stat281[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.206.200.44:80, 137.37.21.130:49744}[50%]&lt;BR/&gt;{221.206.200.44:80, 137.37.21.130:49835}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49835: (37.5%)&lt;BR/&gt; 49744: (12.5%)&gt;];
}
775--2931[label="1;1pkt 1fpkt"];
775--4110[label="1;1pkt 1fpkt"];
2931--4110[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="137.37.21.130" dst_port="49835" src_ip="221.206.200.44" src_port="80"/>
      <filter dst_ip="137.37.21.130" dst_port="49744" src_ip="221.206.200.44" src_port="80"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698177" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.31.71.45"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.21.147.45"/>
    </slice>
    <from sec="1075698004" usec="0"/>
    <to sec="1075698888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.696243,1.84364,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_284{
style=filled;
color=gray75;
191[label="203.139.196.46s;425pkt 425fpkt", shape=rectangle, color=red];
2945[label="203.139.196.46;240pkt 240fpkt", shape=pentagon, color=darkviolet];
4118[label="203.139.196.46;240pkt 240fpkt", shape=invtriangle, color=brown];
stat284[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.139.196.46:1034, *:137}[56.7059%]&lt;BR/&gt;{200.237.108.46:1026, *:137}[43.2941%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1034: (39.8343%)&lt;BR/&gt; 1026: (10.1657%)&gt;];
}
191--2945[label="1;240pkt 240fpkt"];
191--4118[label="1;240pkt 240fpkt"];
2945--4118[label="1;240pkt 240fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="203.139.196.46" src_port="1034"/>
      <filter dst_port="137" src_ip="200.237.108.46" src_port="1026"/>
    </slice>
    <from sec="1075698030" usec="0"/>
    <to sec="1075698067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.26.131.47"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.66.214.47"/>
    </slice>
    <from sec="1075698001" usec="0"/>
    <to sec="1075698900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.84.0.48"/>
    </slice>
    <from sec="1075698241" usec="0"/>
    <to sec="1075698777" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="143.111.70.50"/>
    </slice>
    <from sec="1075698009" usec="0"/>
    <to sec="1075698887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="143.111.105.50"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="143.111.206.50"/>
    </slice>
    <from sec="1075698801" usec="0"/>
    <to sec="1075698833" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.217.8.51"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="143.111.118.51"/>
    </slice>
    <from sec="1075698029" usec="0"/>
    <to sec="1075698868" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.217.12.52"/>
    </slice>
    <from sec="1075698002" usec="0"/>
    <to sec="1075698899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.133.136.52"/>
    </slice>
    <from sec="1075698004" usec="0"/>
    <to sec="1075698900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="110.27.160.52"/>
    </slice>
    <from sec="1075698003" usec="0"/>
    <to sec="1075698892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.217.8.54"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.239.104.55"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.209.113.55"/>
    </slice>
    <from sec="1075698856" usec="0"/>
    <to sec="1075698878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.249.171.55"/>
    </slice>
    <from sec="1075698002" usec="0"/>
    <to sec="1075698736" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.75.198.55"/>
    </slice>
    <from sec="1075698183" usec="0"/>
    <to sec="1075698525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.169.167.56"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.206.174.56"/>
    </slice>
    <from sec="1075698592" usec="0"/>
    <to sec="1075698609" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606912,1.87257,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_303{
style=filled;
color=gray75;
337[label="192.39.5.58s;136pkt 136fpkt", shape=rectangle, color=red];
3019[label="192.39.5.58;188pkt 188fpkt", shape=pentagon, color=darkviolet];
stat303[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.39.5.58:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 8175: (0.308642%)&lt;BR/&gt; 8160: (0.308642%)&lt;BR/&gt; 8132: (0.308642%)&lt;BR/&gt; 8073: (0.308642%)&gt;];
}
337--3019[label="0.992647;135pkt 135fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="192.39.5.58"/>
    </slice>
    <from sec="1075698398" usec="0"/>
    <to sec="1075698428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.118.33.58"/>
    </slice>
    <from sec="1075698210" usec="0"/>
    <to sec="1075698233" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.731545,1.83855,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_305{
style=filled;
color=gray75;
1308[label="143.111.244.59;s;57pkt 57fpkt", shape=diamond, color=yellow];
3030[label="143.111.244.59;58pkt 58fpkt", shape=pentagon, color=darkviolet];
4155[label="143.111.244.59;58pkt 58fpkt", shape=invtriangle, color=brown];
stat305[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.244.59:*, 49.113.177.69:80}[24.1379%]&lt;BR/&gt;{143.111.244.59:*, 140.131.199.97:80}[22.4138%]&lt;BR/&gt;{143.111.244.59:*, 213.232.168.70:80}[20.6897%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.3988%)&lt;BR/&gt; 5190: (0.867052%)&lt;BR/&gt; 4868: (0.867052%)&lt;BR/&gt; 4856: (0.867052%)&lt;BR/&gt; 4848: (0.867052%)&gt;];
}
1308--2644[label="0.0350877;2pkt 2fpkt"];
1308--3030[label="1;57pkt 57fpkt"];
1308--4155[label="1;57pkt 57fpkt"];
3030--4155[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_ip="49.113.177.69" dst_port="80" src_ip="143.111.244.59"/>
      <filter dst_ip="140.131.199.97" dst_port="80" src_ip="143.111.244.59"/>
      <filter dst_ip="213.232.168.70" dst_port="80" src_ip="143.111.244.59"/>
    </slice>
    <from sec="1075698006" usec="0"/>
    <to sec="1075698878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="143.111.48.60"/>
    </slice>
    <from sec="1075698316" usec="0"/>
    <to sec="1075698339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.134.76.61"/>
    </slice>
    <from sec="1075698796" usec="0"/>
    <to sec="1075698887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.83.147.61"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.149.2.62"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="143.111.202.64"/>
    </slice>
    <from sec="1075698008" usec="0"/>
    <to sec="1075698888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.64.202.65"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.65.14.66"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.731545,1.83855,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_314{
style=filled;
color=gray75;
1867[label="143.111.61.51;d;6pkt 6fpkt", shape=diamond, color=yellow];
3068[label="203.11.181.67;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4178[label="203.11.181.67;1pkt 1fpkt", shape=invtriangle, color=brown];
stat314[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.11.181.67:80, 143.111.61.51:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 7345: (18.75%)&lt;BR/&gt; 7435: (6.25%)&lt;BR/&gt; 7434: (6.25%)&lt;BR/&gt; 7432: (6.25%)&gt;];
}
1867--3068[label="1;1pkt 1fpkt"];
1867--4178[label="1;1pkt 1fpkt"];
3068--4178[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.111.61.51" src_ip="203.11.181.67" src_port="80"/>
    </slice>
    <from sec="1075698003" usec="0"/>
    <to sec="1075698898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.696243,1.84364,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_315{
style=filled;
color=gray75;
212[label="51.101.52.68s;252pkt 252fpkt", shape=rectangle, color=red];
3072[label="51.101.52.68;251pkt 251fpkt", shape=pentagon, color=darkviolet];
4182[label="51.101.52.68;251pkt 251fpkt", shape=invtriangle, color=brown];
stat315[shape=component, label=&lt;Rules:&lt;BR/&gt;{51.101.52.68:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
212--3072[label="1;251pkt 251fpkt"];
212--4182[label="1;251pkt 251fpkt"];
3072--4182[label="1;251pkt 251fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="51.101.52.68" src_port="1026"/>
    </slice>
    <from sec="1075698380" usec="0"/>
    <to sec="1075698394" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606912,1.87257,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_316{
style=filled;
color=gray75;
213[label="75.3.88.69s;59pkt 59fpkt", shape=rectangle, color=red];
3083[label="75.3.88.69;106pkt 106fpkt", shape=pentagon, color=darkviolet];
stat316[shape=component, label=&lt;Rules:&lt;BR/&gt;{75.3.88.69:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
213--3083[label="0.983051;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="75.3.88.69" src_port="1026"/>
    </slice>
    <from sec="1075698242" usec="0"/>
    <to sec="1075698259" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606912,1.87257,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_317{
style=filled;
color=gray75;
214[label="203.66.129.69s;166pkt 166fpkt", shape=rectangle, color=red];
3085[label="203.66.129.69;202pkt 202fpkt", shape=pentagon, color=darkviolet];
stat317[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.66.129.69:1033, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1033: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
214--3085[label="1;166pkt 166fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="203.66.129.69" src_port="1033"/>
    </slice>
    <from sec="1075698604" usec="0"/>
    <to sec="1075698641" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="140.137.21.72"/>
    </slice>
    <from sec="1075698764" usec="0"/>
    <to sec="1075698774" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.70.181.72"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.217.8.74"/>
    </slice>
    <from sec="1075698009" usec="0"/>
    <to sec="1075698881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.109.10.75"/>
    </slice>
    <from sec="1075698717" usec="0"/>
    <to sec="1075698737" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11702,1.79355,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_322{
style=filled;
color=gray75;
1309[label="143.110.10.114;d;32pkt 32fpkt", shape=diamond, color=yellow];
1310[label="132.46.248.75;s;16pkt 16fpkt", shape=diamond, color=yellow];
2246[label="143.110.10.114;d;24pkt 24fpkt", shape=hexagon, color=black];
3120[label="132.46.248.74;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3127[label="132.46.248.75;16pkt 16fpkt", shape=pentagon, color=darkviolet];
3349[label="49.120.72.118;55pkt 55fpkt", shape=pentagon, color=darkviolet];
4210[label="132.46.248.74;8pkt 8fpkt", shape=invtriangle, color=brown];
4217[label="132.46.248.75;16pkt 16fpkt", shape=invtriangle, color=brown];
4750[label="132.46.248.75;15pkt 15fpkt", shape=invhouse, color=bisque];
stat322[shape=component, label=&lt;Rules:&lt;BR/&gt;{49.120.72.118:80, 209.43.69.45:*}[24.0964%]&lt;BR/&gt;{49.120.72.118:80, 164.229.209.156:*}[20.4819%]&lt;BR/&gt;{*:80, 143.110.10.114:*}[20.4819%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (32.5397%)&lt;BR/&gt; 443: (17.4603%)&lt;BR/&gt; 4741: (1.5873%)&lt;BR/&gt; 4740: (1.5873%)&lt;BR/&gt; 4739: (1.5873%)&gt;];
}
1309--1310[label="1;16pkt 16fpkt"];
1309--2246[label="1;24pkt 24fpkt"];
1309--3120[label="1;7pkt 7fpkt"];
1309--3127[label="1;16pkt 16fpkt"];
1309--3349[label="0.125;4pkt 4fpkt"];
1309--4210[label="1;8pkt 8fpkt"];
1309--4217[label="1;16pkt 16fpkt"];
1309--4750[label="1;15pkt 15fpkt"];
1310--2246[label="0.75;12pkt 12fpkt"];
1310--3127[label="1;16pkt 16fpkt"];
1310--4217[label="1;16pkt 16fpkt"];
1310--4750[label="1;15pkt 15fpkt"];
2246--3120[label="0.428571;3pkt 3fpkt"];
2246--3127[label="0.75;12pkt 12fpkt"];
2246--3349[label="0.166667;4pkt 4fpkt"];
2246--4210[label="0.5;4pkt 4fpkt"];
2246--4217[label="0.75;12pkt 12fpkt"];
2246--4750[label="0.733333;11pkt 11fpkt"];
3120--4210[label="1;7pkt 7fpkt"];
3127--4217[label="1;16pkt 16fpkt"];
3127--4750[label="1;15pkt 15fpkt"];
4217--4750[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="143.110.10.114" src_port="80"/>
      <filter dst_ip="209.43.69.45" src_ip="49.120.72.118" src_port="80"/>
      <filter dst_ip="164.229.209.156" src_ip="49.120.72.118" src_port="80"/>
    </slice>
    <from sec="1075698006" usec="0"/>
    <to sec="1075698820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.222.227.76"/>
    </slice>
    <from sec="1075698002" usec="0"/>
    <to sec="1075698899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.236.78.77"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="143.111.46.78"/>
    </slice>
    <from sec="1075698001" usec="0"/>
    <to sec="1075698899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.11.180.78"/>
    </slice>
    <from sec="1075698477" usec="0"/>
    <to sec="1075698816" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.84.211.78"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.26.155.79"/>
    </slice>
    <from sec="1075698330" usec="0"/>
    <to sec="1075698371" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.18.153.80"/>
    </slice>
    <from sec="1075698018" usec="0"/>
    <to sec="1075698860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.49.146.81"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.129.166.82"/>
    </slice>
    <from sec="1075698012" usec="0"/>
    <to sec="1075698893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.117.153.84"/>
    </slice>
    <from sec="1075698821" usec="0"/>
    <to sec="1075698855" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.217.8.85"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="110.11.21.85"/>
    </slice>
    <from sec="1075698109" usec="0"/>
    <to sec="1075698341" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.199.26.86"/>
    </slice>
    <from sec="1075698298" usec="0"/>
    <to sec="1075698382" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.942603,1.83268,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_336{
style=filled;
color=gray75;
774[label="137.37.21.130;d;3pkt 3fpkt", shape=diamond, color=yellow];
3186[label="75.39.66.86;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4247[label="75.39.66.86;2pkt 2fpkt", shape=invtriangle, color=brown];
4763[label="75.39.66.86;2pkt 2fpkt", shape=invhouse, color=bisque];
stat336[shape=component, label=&lt;Rules:&lt;BR/&gt;{75.48.1.159:80, 137.37.21.130:49966}[33.3333%]&lt;BR/&gt;{75.39.66.86:80, 137.37.21.130:49967}[33.3333%]&lt;BR/&gt;{75.39.66.86:80, 137.37.21.130:49968}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49968: (25%)&lt;BR/&gt; 49967: (18.75%)&lt;BR/&gt; 49966: (6.25%)&gt;];
}
774--3186[label="1;1pkt 1fpkt"];
774--4247[label="1;2pkt 2fpkt"];
774--4763[label="1;2pkt 2fpkt"];
3186--4247[label="1;1pkt 1fpkt"];
3186--4763[label="1;1pkt 1fpkt"];
4247--4763[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="137.37.21.130" dst_port="49968" src_ip="75.39.66.86" src_port="80"/>
      <filter dst_ip="137.37.21.130" dst_port="49967" src_ip="75.39.66.86" src_port="80"/>
      <filter dst_ip="137.37.21.130" dst_port="49966" src_ip="75.48.1.159" src_port="80"/>
    </slice>
    <from sec="1075698523" usec="0"/>
    <to sec="1075698606" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.168.165.86"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.104.173.86"/>
    </slice>
    <from sec="1075698184" usec="0"/>
    <to sec="1075698198" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606912,1.87257,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_340{
style=filled;
color=gray75;
228[label="203.93.148.87s;106pkt 106fpkt", shape=rectangle, color=red];
3199[label="203.93.148.87;188pkt 188fpkt", shape=pentagon, color=darkviolet];
stat340[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.93.148.87:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
228--3199[label="1;106pkt 106fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="203.93.148.87" src_port="1029"/>
    </slice>
    <from sec="1075698625" usec="0"/>
    <to sec="1075698654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.168.241.87"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.20.72.89"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.187.153.89"/>
    </slice>
    <from sec="1075698001" usec="0"/>
    <to sec="1075698447" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.113.160.89"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.155.161.90"/>
    </slice>
    <from sec="1075698844" usec="0"/>
    <to sec="1075698859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.217.12.92"/>
    </slice>
    <from sec="1075698003" usec="0"/>
    <to sec="1075698881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.126.141.92"/>
    </slice>
    <from sec="1075698231" usec="0"/>
    <to sec="1075698322" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.203.165.92"/>
    </slice>
    <from sec="1075698869" usec="0"/>
    <to sec="1075698894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.217.8.93"/>
    </slice>
    <from sec="1075698024" usec="0"/>
    <to sec="1075698892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.29.242.93"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.120.113.94"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.217.8.95"/>
    </slice>
    <from sec="1075698013" usec="0"/>
    <to sec="1075698874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.3.39.95"/>
    </slice>
    <from sec="1075698029" usec="0"/>
    <to sec="1075698790" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.41.154.95"/>
    </slice>
    <from sec="1075698006" usec="0"/>
    <to sec="1075698038" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.217.12.96"/>
    </slice>
    <from sec="1075698005" usec="0"/>
    <to sec="1075698897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.79.97.96"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.58.98.97"/>
    </slice>
    <from sec="1075698010" usec="0"/>
    <to sec="1075698879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.18.86.98"/>
    </slice>
    <from sec="1075698634" usec="0"/>
    <to sec="1075698882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.71.80.99"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="110.156.174.99"/>
    </slice>
    <from sec="1075698031" usec="0"/>
    <to sec="1075698874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.239.96.101"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.696243,1.84364,503,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_364{
style=filled;
color=gray75;
236[label="143.111.92.103s;1pkt 1fpkt", shape=rectangle, color=red];
3279[label="143.111.92.103;20pkt 20fpkt", shape=pentagon, color=darkviolet];
4297[label="143.111.92.103;20pkt 20fpkt", shape=invtriangle, color=brown];
stat364[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.92.103:*, 48.235.84.78:80}[20%]&lt;BR/&gt;{143.111.92.103:*, 130.142.180.146:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.561%)&lt;BR/&gt; 1154: (3.65854%)&lt;BR/&gt; 6301: (2.43902%)&lt;BR/&gt; 1165: (2.43902%)&lt;BR/&gt; 1164: (2.43902%)&gt;];
}
236--3279[label="1;1pkt 1fpkt"];
236--4297[label="1;1pkt 1fpkt"];
3279--4297[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="130.142.180.146" dst_port="80" src_ip="143.111.92.103"/>
      <filter dst_ip="48.235.84.78" dst_port="80" src_ip="143.111.92.103"/>
    </slice>
    <from sec="1075698017" usec="0"/>
    <to sec="1075698899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.217.8.109"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.14.85.112"/>
    </slice>
    <from sec="1075698018" usec="0"/>
    <to sec="1075698898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.196.196.112"/>
    </slice>
    <from sec="1075698070" usec="0"/>
    <to sec="1075698833" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606912,1.87257,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_368{
style=filled;
color=gray75;
247[label="209.170.82.113s;230pkt 230fpkt", shape=rectangle, color=red];
3323[label="209.170.82.113;240pkt 240fpkt", shape=pentagon, color=darkviolet];
stat368[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.170.82.113:11365, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11365: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
247--3323[label="0.995652;229pkt 229fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="209.170.82.113" src_port="11365"/>
    </slice>
    <from sec="1075698283" usec="0"/>
    <to sec="1075698322" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.217.12.115"/>
    </slice>
    <from sec="1075698230" usec="0"/>
    <to sec="1075698294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.117.193.115"/>
    </slice>
    <from sec="1075698543" usec="0"/>
    <to sec="1075698750" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.171.225.116"/>
    </slice>
    <from sec="1075698001" usec="0"/>
    <to sec="1075698898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915476,1.83779,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_372{
style=filled;
color=gray75;
252[label="75.5.154.117s;144pkt 144fpkt", shape=rectangle, color=red];
3346[label="75.5.154.117;143pkt 143fpkt", shape=pentagon, color=darkviolet];
4336[label="75.5.154.117;144pkt 144fpkt", shape=invtriangle, color=brown];
4802[label="75.5.154.117;144pkt 144fpkt", shape=invhouse, color=bisque];
stat372[shape=component, label=&lt;Rules:&lt;BR/&gt;{75.5.154.117:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
252--3346[label="1;143pkt 143fpkt"];
252--4336[label="1;144pkt 144fpkt"];
252--4802[label="1;144pkt 144fpkt"];
3346--4336[label="1;143pkt 143fpkt"];
3346--4802[label="1;143pkt 143fpkt"];
4336--4802[label="1;144pkt 144fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="75.5.154.117" src_port="1025"/>
    </slice>
    <from sec="1075698456" usec="0"/>
    <to sec="1075698478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.103.235.117"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.225.228.118"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.27.128.120"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.26.144.120"/>
    </slice>
    <from sec="1075698587" usec="0"/>
    <to sec="1075698856" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.19.164.120"/>
    </slice>
    <from sec="1075698695" usec="0"/>
    <to sec="1075698731" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.19.22.124"/>
    </slice>
    <from sec="1075698007" usec="0"/>
    <to sec="1075698676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.171.67.124"/>
    </slice>
    <from sec="1075698849" usec="0"/>
    <to sec="1075698889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.106.253.127"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.38.185.128"/>
    </slice>
    <from sec="1075698006" usec="0"/>
    <to sec="1075698896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.66.194.128"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.46.196.128"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02483,1.85499,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_386{
style=filled;
color=gray75;
260[label="203.25.1.130s;193pkt 193fpkt", shape=rectangle, color=red];
262[label="75.14.81.134s;297pkt 297fpkt", shape=rectangle, color=red];
433[label="75.14.81.134s;247pkt 247fpkt", shape=ellipse, color=green];
3418[label="203.25.1.130;249pkt 249fpkt", shape=pentagon, color=darkviolet];
stat386[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.25.1.130:1035, *:137}[45.7038%]&lt;BR/&gt;{75.14.81.134:1032, *:137}[42.0475%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1035: (24.8479%)&lt;BR/&gt; 1032: (18.6613%)&lt;BR/&gt; 1049: (6.49087%)&gt;];
}
260--433[label="0.248705;48pkt 48fpkt"];
260--3418[label="0.994819;192pkt 192fpkt"];
262--433[label="0.805668;199pkt 199fpkt"];
433--3418[label="0.194332;48pkt 48fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="203.25.1.130" src_port="1035"/>
      <filter dst_port="137" src_ip="75.14.81.134" src_port="1032"/>
    </slice>
    <from sec="1075698156" usec="0"/>
    <to sec="1075698215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.235.29.130"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.75.68.130"/>
    </slice>
    <from sec="1075698092" usec="0"/>
    <to sec="1075698895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.40.183.130"/>
    </slice>
    <from sec="1075698280" usec="0"/>
    <to sec="1075698492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.942603,1.83268,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_390{
style=filled;
color=gray75;
762[label="143.111.108.131;s;1511pkt 1511fpkt", shape=diamond, color=yellow];
3432[label="143.111.108.131;1609pkt 1609fpkt", shape=pentagon, color=darkviolet];
4379[label="143.111.108.131;1609pkt 1609fpkt", shape=invtriangle, color=brown];
4821[label="143.111.108.131;1609pkt 1609fpkt", shape=invhouse, color=bisque];
stat390[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.108.131:25863, *:*}[99.2542%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25863: (49.6213%)&lt;BR/&gt; 80: (0.378668%)&lt;BR/&gt; 1025: (0.339224%)&lt;BR/&gt; 65345: (0.0631114%)&lt;BR/&gt; 65083: (0.0631114%)&gt;];
}
762--2644[label="0.000661813;1pkt 1fpkt"];
762--2645[label="0.000661813;1pkt 1fpkt"];
762--3432[label="1;1511pkt 1511fpkt"];
762--4379[label="1;1511pkt 1511fpkt"];
762--4821[label="1;1511pkt 1511fpkt"];
3432--4379[label="1;1609pkt 1609fpkt"];
3432--4821[label="1;1609pkt 1609fpkt"];
4379--4821[label="1;1609pkt 1609fpkt"];
</description>
    <slice>
      <filter src_ip="143.111.108.131" src_port="25863"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.238.236.131"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="143.111.247.131"/>
    </slice>
    <from sec="1075698019" usec="0"/>
    <to sec="1075698897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.8.2.134"/>
    </slice>
    <from sec="1075698128" usec="0"/>
    <to sec="1075698153" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.217.8.134"/>
    </slice>
    <from sec="1075698006" usec="0"/>
    <to sec="1075698888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="110.20.33.135"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606912,1.87257,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_396{
style=filled;
color=gray75;
264[label="34.230.165.135s;141pkt 141fpkt", shape=rectangle, color=red];
3453[label="34.230.165.135;181pkt 181fpkt", shape=pentagon, color=darkviolet];
stat396[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.230.165.135:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
264--3453[label="1;141pkt 141fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="34.230.165.135" src_port="1028"/>
    </slice>
    <from sec="1075698302" usec="0"/>
    <to sec="1075698324" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.12.208.135"/>
    </slice>
    <from sec="1075698136" usec="0"/>
    <to sec="1075698876" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="143.111.70.136"/>
    </slice>
    <from sec="1075698016" usec="0"/>
    <to sec="1075698893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.139.87.137"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.160.2.139"/>
    </slice>
    <from sec="1075698004" usec="0"/>
    <to sec="1075698876" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.95.122.139"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915476,1.83779,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_402{
style=filled;
color=gray75;
346[label="205.182.18.140s;59pkt 59fpkt", shape=rectangle, color=red];
3476[label="205.182.18.140;207pkt 207fpkt", shape=pentagon, color=darkviolet];
4401[label="205.182.18.140;207pkt 207fpkt", shape=invtriangle, color=brown];
4831[label="205.182.18.140;208pkt 208fpkt", shape=invhouse, color=bisque];
stat402[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.182.18.140:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 40279: (0.51395%)&lt;BR/&gt; 39435: (0.51395%)&lt;BR/&gt; 36793: (0.440529%)&lt;BR/&gt; 64456: (0.293686%)&gt;];
}
346--3476[label="1;59pkt 59fpkt"];
346--4401[label="1;59pkt 59fpkt"];
346--4831[label="1;59pkt 59fpkt"];
3476--4401[label="1;207pkt 207fpkt"];
3476--4831[label="1;207pkt 207fpkt"];
4401--4831[label="1;207pkt 207fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="205.182.18.140"/>
    </slice>
    <from sec="1075698147" usec="0"/>
    <to sec="1075698180" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.36.197.141"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,011,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.241.165.142"/>
    </slice>
    <from sec="1075698019" usec="0"/>
    <to sec="1075698890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.248.78.143"/>
    </slice>
    <from sec="1075698689" usec="0"/>
    <to sec="1075698712" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.28.81.143"/>
    </slice>
    <from sec="1075698194" usec="0"/>
    <to sec="1075698221" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.152.51.144"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.136.148.144"/>
    </slice>
    <from sec="1075698031" usec="0"/>
    <to sec="1075698892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.31.24.148"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="143.111.48.148"/>
    </slice>
    <from sec="1075698001" usec="0"/>
    <to sec="1075698896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.141.28.150"/>
    </slice>
    <from sec="1075698039" usec="0"/>
    <to sec="1075698898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.201.35.151"/>
    </slice>
    <from sec="1075698010" usec="0"/>
    <to sec="1075698889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.221.183.151"/>
    </slice>
    <from sec="1075698012" usec="0"/>
    <to sec="1075698899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.173.42.152"/>
    </slice>
    <from sec="1075698034" usec="0"/>
    <to sec="1075698900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="137.198.206.152"/>
    </slice>
    <from sec="1075698010" usec="0"/>
    <to sec="1075698717" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_416{
style=filled;
color=gray75;
3537[label="143.111.0.153;63pkt 63fpkt", shape=pentagon, color=darkviolet];
stat416[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.0.153:*, 192.153.171.205:80}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2063%)&lt;BR/&gt; 1863: (0.793651%)&lt;BR/&gt; 1586: (0.793651%)&lt;BR/&gt; 1585: (0.793651%)&lt;BR/&gt; 1584: (0.793651%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="192.153.171.205" dst_port="80" src_ip="143.111.0.153"/>
    </slice>
    <from sec="1075698112" usec="0"/>
    <to sec="1075698775" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.153.171.156"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,053,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.206.200.159"/>
    </slice>
    <from sec="1075698019" usec="0"/>
    <to sec="1075698442" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.122.132.163"/>
    </slice>
    <from sec="1075698241" usec="0"/>
    <to sec="1075698254" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.192.144.163"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.240.223.165"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.1.5.167"/>
    </slice>
    <from sec="1075698733" usec="0"/>
    <to sec="1075698823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.149.63.167"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_424{
style=filled;
color=gray75;
3609[label="143.111.67.168;19pkt 19fpkt", shape=pentagon, color=darkviolet];
stat424[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.67.168:*, 209.213.5.16:80}[21.0526%]&lt;BR/&gt;{143.111.67.168:*, 209.213.1.75:80}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1168: (2.63158%)&lt;BR/&gt; 1167: (2.63158%)&lt;BR/&gt; 1166: (2.63158%)&lt;BR/&gt; 1165: (2.63158%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="209.213.1.75" dst_port="80" src_ip="143.111.67.168"/>
      <filter dst_ip="209.213.5.16" dst_port="80" src_ip="143.111.67.168"/>
    </slice>
    <from sec="1075698012" usec="0"/>
    <to sec="1075698900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.180.194.168"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="131.157.104.170"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.171.69.173"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.110.165.173"/>
    </slice>
    <from sec="1075698001" usec="0"/>
    <to sec="1075698900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.696243,1.84364,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_430{
style=filled;
color=gray75;
282[label="73.186.136.174s;193pkt 193fpkt", shape=rectangle, color=red];
3638[label="73.186.136.174;192pkt 192fpkt", shape=pentagon, color=darkviolet];
4493[label="73.186.136.174;193pkt 193fpkt", shape=invtriangle, color=brown];
stat430[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.186.136.174:65132, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65132: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
282--3638[label="1;192pkt 192fpkt"];
282--4493[label="1;193pkt 193fpkt"];
3638--4493[label="1;192pkt 192fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="73.186.136.174" src_port="65132"/>
    </slice>
    <from sec="1075698116" usec="0"/>
    <to sec="1075698149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606912,1.87257,503,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_431{
style=filled;
color=gray75;
99[label="192.219.179.174s;2pkt 2fpkt", shape=rectangle, color=red];
3640[label="192.219.179.174;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat431[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.219.179.174:80, 143.110.10.116:2732}[50%]&lt;BR/&gt;{192.219.179.174:80, 143.110.10.116:2733}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2733: (25%)&lt;BR/&gt; 2732: (25%)&gt;];
}
99--3640[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="143.110.10.116" dst_port="2733" src_ip="192.219.179.174" src_port="80"/>
      <filter dst_ip="143.110.10.116" dst_port="2732" src_ip="192.219.179.174" src_port="80"/>
    </slice>
    <from sec="1075698789" usec="0"/>
    <to sec="1075698821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.114.29.176"/>
    </slice>
    <from sec="1075698015" usec="0"/>
    <to sec="1075698900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.56.40.176"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="171.39.110.177"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.214.175.177"/>
    </slice>
    <from sec="1075698024" usec="0"/>
    <to sec="1075698898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.117.136.178"/>
    </slice>
    <from sec="1075698021" usec="0"/>
    <to sec="1075698187" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915476,1.83779,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_437{
style=filled;
color=gray75;
285[label="210.233.38.179s;56pkt 56fpkt", shape=rectangle, color=red];
3658[label="210.233.38.179;207pkt 207fpkt", shape=pentagon, color=darkviolet];
4504[label="210.233.38.179;207pkt 207fpkt", shape=invtriangle, color=brown];
4869[label="210.233.38.179;208pkt 208fpkt", shape=invhouse, color=bisque];
stat437[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.233.38.179:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
285--3658[label="1;56pkt 56fpkt"];
285--4504[label="1;56pkt 56fpkt"];
285--4869[label="1;56pkt 56fpkt"];
3658--4504[label="1;207pkt 207fpkt"];
3658--4869[label="1;207pkt 207fpkt"];
4504--4869[label="1;207pkt 207fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="210.233.38.179" src_port="1027"/>
    </slice>
    <from sec="1075698411" usec="0"/>
    <to sec="1075698444" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.696243,1.84364,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_438{
style=filled;
color=gray75;
286[label="53.34.216.179s;41pkt 41fpkt", shape=rectangle, color=red];
3661[label="53.34.216.179;110pkt 110fpkt", shape=pentagon, color=darkviolet];
4506[label="53.34.216.179;109pkt 109fpkt", shape=invtriangle, color=brown];
stat438[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.34.216.179:32777, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32777: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
286--3661[label="1;41pkt 41fpkt"];
286--4506[label="0.97561;40pkt 40fpkt"];
3661--4506[label="1;109pkt 109fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="53.34.216.179" src_port="32777"/>
    </slice>
    <from sec="1075698075" usec="0"/>
    <to sec="1075698099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.200.132.180"/>
    </slice>
    <from sec="1075698003" usec="0"/>
    <to sec="1075698545" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606912,1.87257,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_440{
style=filled;
color=gray75;
287[label="151.121.82.181s;109pkt 109fpkt", shape=rectangle, color=red];
3668[label="151.121.82.181;183pkt 183fpkt", shape=pentagon, color=darkviolet];
stat440[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.121.82.181:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
287--3668[label="0.990826;108pkt 108fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="151.121.82.181" src_port="1028"/>
    </slice>
    <from sec="1075698077" usec="0"/>
    <to sec="1075698106" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.152.74.182"/>
    </slice>
    <from sec="1075698164" usec="0"/>
    <to sec="1075698194" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.217.205.183"/>
    </slice>
    <from sec="1075698347" usec="0"/>
    <to sec="1075698364" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.174.90.185"/>
    </slice>
    <from sec="1075698131" usec="0"/>
    <to sec="1075698151" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.940848,1.90229,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_444{
style=filled;
color=gray75;
1650[label="148.180.248.100;d;46pkt 46fpkt", shape=diamond, color=yellow];
1907[label="194.55.184.97;s;7pkt 7fpkt", shape=diamond, color=yellow];
2560[label="194.55.184.97;s;7pkt 7fpkt", shape=hexagon, color=black];
stat444[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.128.247.209:80, 148.180.248.100:*}[38.2979%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.6667%)&lt;BR/&gt; 2790: (2.5%)&lt;BR/&gt; 2774: (2.5%)&lt;BR/&gt; 2770: (2.5%)&lt;BR/&gt; 2763: (2.5%)&gt;];
}
1650--1907[label="0.857143;6pkt 6fpkt"];
1650--2560[label="0.857143;6pkt 6fpkt"];
1907--2560[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="148.180.248.100" src_ip="48.128.247.209" src_port="80"/>
    </slice>
    <from sec="1075698019" usec="0"/>
    <to sec="1075698758" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.198.82.192"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="143.111.35.193"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.55.81.194"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.696243,1.84364,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_448{
style=filled;
color=gray75;
294[label="208.53.197.194s;236pkt 236fpkt", shape=rectangle, color=red];
3719[label="208.53.197.194;247pkt 247fpkt", shape=pentagon, color=darkviolet];
4538[label="208.53.197.194;246pkt 246fpkt", shape=invtriangle, color=brown];
stat448[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.53.197.194:43327, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43327: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
294--3719[label="1;236pkt 236fpkt"];
294--4538[label="0.995763;235pkt 235fpkt"];
3719--4538[label="1;246pkt 246fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.53.197.194" src_port="43327"/>
    </slice>
    <from sec="1075698738" usec="0"/>
    <to sec="1075698753" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.142.101.197"/>
    </slice>
    <from sec="1075698117" usec="0"/>
    <to sec="1075698872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606912,1.87257,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_451{
style=filled;
color=gray75;
296[label="73.192.103.199s;249pkt 249fpkt", shape=rectangle, color=red];
3744[label="73.192.103.199;248pkt 248fpkt", shape=pentagon, color=darkviolet];
stat451[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.192.103.199:64593, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64593: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
296--3744[label="1;248pkt 248fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="73.192.103.199" src_port="64593"/>
    </slice>
    <from sec="1075698692" usec="0"/>
    <to sec="1075698708" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.157.46.200"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606912,1.87257,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_454{
style=filled;
color=gray75;
184[label="203.55.77.37s;190pkt 190fpkt", shape=rectangle, color=red];
3751[label="193.91.169.200;179pkt 179fpkt", shape=pentagon, color=darkviolet];
stat454[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.91.169.200:1025, *:137}[60.8844%]&lt;BR/&gt;{203.55.77.37:1026, *:137}[39.1156%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1025: (34.4173%)&lt;BR/&gt; 1026: (15.5827%)&gt;];
}
184--3751[label="0.418994;75pkt 75fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="193.91.169.200" src_port="1025"/>
      <filter dst_port="137" src_ip="203.55.77.37" src_port="1026"/>
    </slice>
    <from sec="1075698667" usec="0"/>
    <to sec="1075698718" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606912,1.87257,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_455{
style=filled;
color=gray75;
298[label="203.94.184.200s;155pkt 155fpkt", shape=rectangle, color=red];
3752[label="203.94.184.200;190pkt 190fpkt", shape=pentagon, color=darkviolet];
stat455[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.94.184.200:61365, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61365: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
298--3752[label="0.993548;154pkt 154fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="203.94.184.200" src_port="61365"/>
    </slice>
    <from sec="1075698093" usec="0"/>
    <to sec="1075698123" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="137.198.206.201"/>
    </slice>
    <from sec="1075698704" usec="0"/>
    <to sec="1075698725" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="143.111.10.202"/>
    </slice>
    <from sec="1075698605" usec="0"/>
    <to sec="1075698877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606912,1.87257,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_458{
style=filled;
color=gray75;
299[label="51.105.228.202s;58pkt 58fpkt", shape=rectangle, color=red];
3766[label="51.105.228.202;162pkt 162fpkt", shape=pentagon, color=darkviolet];
stat458[shape=component, label=&lt;Rules:&lt;BR/&gt;{51.105.228.202:64757, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64757: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
299--3766[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="51.105.228.202" src_port="64757"/>
    </slice>
    <from sec="1075698239" usec="0"/>
    <to sec="1075698267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.858608,1.79605,503,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_459{
style=filled;
color=gray75;
96[label="204.61.56.162s;1pkt 1fpkt", shape=rectangle, color=red];
137[label="143.111.97.140d;1pkt 1fpkt", shape=rectangle, color=red];
850[label="204.61.56.162;s;1pkt 1fpkt", shape=diamond, color=yellow];
1054[label="143.111.97.140;d;111pkt 111fpkt", shape=diamond, color=yellow];
1228[label="192.87.133.205;s;97pkt 97fpkt", shape=diamond, color=yellow];
3578[label="204.61.56.162;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3779[label="192.87.133.205;96pkt 96fpkt", shape=pentagon, color=darkviolet];
4573[label="192.87.133.205;97pkt 97fpkt", shape=invtriangle, color=brown];
stat459[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.87.133.205:80, 143.111.97.140:*}[87.3874%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.642%)&lt;BR/&gt; 4312: (0.617284%)&lt;BR/&gt; 3298: (0.617284%)&lt;BR/&gt; 1164: (0.493827%)&lt;BR/&gt; 1163: (0.493827%)&gt;];
}
96--137[label="1;1pkt 1fpkt"];
96--850[label="1;1pkt 1fpkt"];
96--1054[label="1;1pkt 1fpkt"];
96--3578[label="1;1pkt 1fpkt"];
137--850[label="1;1pkt 1fpkt"];
137--1054[label="1;1pkt 1fpkt"];
137--3578[label="1;1pkt 1fpkt"];
850--1054[label="1;1pkt 1fpkt"];
850--3578[label="1;1pkt 1fpkt"];
1054--1228[label="1;97pkt 97fpkt"];
1054--2218[label="0.036036;4pkt 4fpkt"];
1054--2242[label="0.00900901;1pkt 1fpkt"];
1054--2396[label="0.00900901;1pkt 1fpkt"];
1054--2614[label="0.027027;3pkt 3fpkt"];
1054--2846[label="0.125;1pkt 1fpkt"];
1054--3290[label="0.045045;5pkt 5fpkt"];
1054--3374[label="0.00900901;1pkt 1fpkt"];
1054--3578[label="1;1pkt 1fpkt"];
1054--3779[label="1;96pkt 96fpkt"];
1054--4064[label="0.125;1pkt 1fpkt"];
1054--4304[label="0.045045;5pkt 5fpkt"];
1054--4573[label="1;97pkt 97fpkt"];
1054--4695[label="0.142857;1pkt 1fpkt"];
1054--4789[label="0.045045;5pkt 5fpkt"];
1228--3779[label="1;96pkt 96fpkt"];
1228--4573[label="1;97pkt 97fpkt"];
3779--4573[label="1;96pkt 96fpkt"];
</description>
    <slice>
      <filter dst_ip="143.111.97.140" src_ip="192.87.133.205" src_port="80"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.109.192.207"/>
    </slice>
    <from sec="1075698657" usec="0"/>
    <to sec="1075698749" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.75.204.207"/>
    </slice>
    <from sec="1075698046" usec="0"/>
    <to sec="1075698079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.116.241.207"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.172.1.211"/>
    </slice>
    <from sec="1075698038" usec="0"/>
    <to sec="1075698545" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606912,1.87257,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_464{
style=filled;
color=gray75;
303[label="73.231.88.213s;93pkt 93fpkt", shape=rectangle, color=red];
3815[label="73.231.88.213;117pkt 117fpkt", shape=pentagon, color=darkviolet];
stat464[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.231.88.213:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
303--3815[label="1;93pkt 93fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="73.231.88.213" src_port="1025"/>
    </slice>
    <from sec="1075698153" usec="0"/>
    <to sec="1075698174" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.217.8.214"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.173.161.214"/>
    </slice>
    <from sec="1075698634" usec="0"/>
    <to sec="1075698687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.219.52.215"/>
    </slice>
    <from sec="1075698040" usec="0"/>
    <to sec="1075698887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.184.97.216"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915476,1.83779,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_470{
style=filled;
color=gray75;
309[label="203.75.105.220s;150pkt 150fpkt", shape=rectangle, color=red];
3850[label="203.75.105.220;242pkt 242fpkt", shape=pentagon, color=darkviolet];
4610[label="203.75.105.220;243pkt 243fpkt", shape=invtriangle, color=brown];
4908[label="203.75.105.220;242pkt 242fpkt", shape=invhouse, color=bisque];
stat470[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.75.105.220:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
309--3850[label="1;150pkt 150fpkt"];
309--4610[label="1;150pkt 150fpkt"];
309--4908[label="1;150pkt 150fpkt"];
3850--4610[label="1;242pkt 242fpkt"];
3850--4908[label="1;242pkt 242fpkt"];
4610--4908[label="1;242pkt 242fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="203.75.105.220" src_port="1025"/>
    </slice>
    <from sec="1075698502" usec="0"/>
    <to sec="1075698540" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.117.120.220"/>
    </slice>
    <from sec="1075698028" usec="0"/>
    <to sec="1075698893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04429,1.79004,503,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_472{
style=filled;
color=gray75;
116[label="143.111.227.220s;2pkt 2fpkt", shape=rectangle, color=red];
630[label="49.121.162.171;d;1pkt 1fpkt", shape=diamond, color=yellow];
694[label="73.236.78.77;d;1pkt 1fpkt", shape=diamond, color=yellow];
864[label="143.111.227.220;s;180pkt 180fpkt", shape=diamond, color=yellow];
3855[label="143.111.227.220;180pkt 180fpkt", shape=pentagon, color=darkviolet];
4612[label="143.111.227.220;180pkt 180fpkt", shape=invtriangle, color=brown];
4910[label="143.111.227.220;179pkt 179fpkt", shape=invhouse, color=bisque];
stat472[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.227.220:*, 203.1.5.178:80}[43.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.9516%)&lt;BR/&gt; 1863: (4.63347%)&lt;BR/&gt; 1234: (0.691563%)&lt;BR/&gt; 1030: (0.55325%)&lt;BR/&gt; 1027: (0.55325%)&gt;];
}
116--630[label="1;1pkt 1fpkt"];
116--694[label="1;1pkt 1fpkt"];
116--864[label="1;2pkt 2fpkt"];
116--2644[label="0.5;1pkt 1fpkt"];
116--3855[label="1;2pkt 2fpkt"];
116--4612[label="1;2pkt 2fpkt"];
116--4910[label="1;2pkt 2fpkt"];
630--864[label="1;1pkt 1fpkt"];
630--2644[label="1;1pkt 1fpkt"];
630--3855[label="1;1pkt 1fpkt"];
630--4612[label="1;1pkt 1fpkt"];
630--4910[label="1;1pkt 1fpkt"];
694--864[label="1;1pkt 1fpkt"];
694--3855[label="1;1pkt 1fpkt"];
694--4612[label="1;1pkt 1fpkt"];
694--4910[label="1;1pkt 1fpkt"];
864--1373[label="0.00555556;1pkt 1fpkt"];
864--2644[label="0.0166667;3pkt 3fpkt"];
864--3855[label="1;180pkt 180fpkt"];
864--4612[label="1;180pkt 180fpkt"];
864--4910[label="1;179pkt 179fpkt"];
3855--4612[label="1;180pkt 180fpkt"];
3855--4910[label="1;179pkt 179fpkt"];
4612--4910[label="1;179pkt 179fpkt"];
</description>
    <slice>
      <filter dst_ip="203.1.5.178" dst_port="80" src_ip="143.111.227.220"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.217.14.222"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.26.131.222"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.217.14.224"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="110.105.106.224"/>
    </slice>
    <from sec="1075698584" usec="0"/>
    <to sec="1075698596" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.606912,1.87257,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_477{
style=filled;
color=gray75;
352[label="73.103.210.226s;53pkt 53fpkt", shape=rectangle, color=red];
3880[label="73.103.210.226;176pkt 176fpkt", shape=pentagon, color=darkviolet];
stat477[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.103.210.226:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 50135: (0.436681%)&lt;BR/&gt; 50134: (0.436681%)&lt;BR/&gt; 50133: (0.436681%)&lt;BR/&gt; 50132: (0.436681%)&gt;];
}
352--3880[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="73.103.210.226"/>
    </slice>
    <from sec="1075698401" usec="0"/>
    <to sec="1075698429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.16.145.227"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.217.8.230"/>
    </slice>
    <from sec="1075698015" usec="0"/>
    <to sec="1075698894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.67.113.232"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698129" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.178.9.234"/>
    </slice>
    <from sec="1075698579" usec="0"/>
    <to sec="1075698586" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.128.8.236"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.217.8.236"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.129.62.236"/>
    </slice>
    <from sec="1075698040" usec="0"/>
    <to sec="1075698885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.217.8.237"/>
    </slice>
    <from sec="1075698002" usec="0"/>
    <to sec="1075698898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.44.90.238"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.217.8.239"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945727,1.79955,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_489{
style=filled;
color=gray75;
638[label="148.180.128.248;d;281pkt 281fpkt", shape=diamond, color=yellow];
639[label="192.212.16.79;s;5pkt 5fpkt", shape=diamond, color=yellow];
1079[label="203.74.51.239;s;275pkt 275fpkt", shape=diamond, color=yellow];
1958[label="148.180.128.248;d;281pkt 281fpkt", shape=hexagon, color=black];
1959[label="192.212.16.79;s;5pkt 5fpkt", shape=hexagon, color=black];
2203[label="203.74.51.239;s;275pkt 275fpkt", shape=hexagon, color=black];
2787[label="213.217.9.17;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3144[label="192.212.16.79;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3931[label="203.74.51.239;298pkt 298fpkt", shape=pentagon, color=darkviolet];
4227[label="192.212.16.79;4pkt 4fpkt", shape=invtriangle, color=brown];
4643[label="203.74.51.239;298pkt 298fpkt", shape=invtriangle, color=brown];
stat489[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.74.51.239:81, 148.180.128.248:*}[96.129%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 81: (48.9325%)&lt;BR/&gt; 80: (0.807848%)&lt;BR/&gt; 1863: (0.259665%)&lt;BR/&gt; 1099: (0.201962%)&lt;BR/&gt; 1054: (0.201962%)&gt;];
}
638--639[label="1;5pkt 5fpkt"];
638--1079[label="1;275pkt 275fpkt"];
638--1958[label="1;281pkt 281fpkt"];
638--1959[label="1;5pkt 5fpkt"];
638--2203[label="1;275pkt 275fpkt"];
638--2787[label="0.142857;1pkt 1fpkt"];
638--3144[label="1;4pkt 4fpkt"];
638--3931[label="0.978648;275pkt 275fpkt"];
638--4227[label="1;4pkt 4fpkt"];
638--4643[label="0.978648;275pkt 275fpkt"];
639--1958[label="1;5pkt 5fpkt"];
639--1959[label="1;5pkt 5fpkt"];
639--3144[label="1;4pkt 4fpkt"];
639--4227[label="1;4pkt 4fpkt"];
1079--1958[label="1;275pkt 275fpkt"];
1079--2203[label="1;275pkt 275fpkt"];
1079--3931[label="1;275pkt 275fpkt"];
1079--4643[label="1;275pkt 275fpkt"];
1958--1959[label="1;5pkt 5fpkt"];
1958--2203[label="1;275pkt 275fpkt"];
1958--2787[label="0.142857;1pkt 1fpkt"];
1958--3144[label="1;4pkt 4fpkt"];
1958--3931[label="0.978648;275pkt 275fpkt"];
1958--4227[label="1;4pkt 4fpkt"];
1958--4643[label="0.978648;275pkt 275fpkt"];
1959--3144[label="1;4pkt 4fpkt"];
1959--4227[label="1;4pkt 4fpkt"];
2203--3931[label="1;275pkt 275fpkt"];
2203--4643[label="1;275pkt 275fpkt"];
3144--4227[label="1;4pkt 4fpkt"];
3931--4643[label="1;298pkt 298fpkt"];
</description>
    <slice>
      <filter dst_ip="148.180.128.248" src_ip="203.74.51.239" src_port="81"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.80.204.239"/>
    </slice>
    <from sec="1075698440" usec="0"/>
    <to sec="1075698777" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11702,1.79355,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_491{
style=filled;
color=gray75;
1646[label="143.111.70.164;d;47pkt 47fpkt", shape=diamond, color=yellow];
1654[label="148.180.206.215;d;102pkt 102fpkt", shape=diamond, color=yellow];
1783[label="143.111.221.67;d;116pkt 116fpkt", shape=diamond, color=yellow];
1817[label="203.171.66.98;s;14pkt 14fpkt", shape=diamond, color=yellow];
1823[label="204.1.22.143;s;1pkt 1fpkt", shape=diamond, color=yellow];
1928[label="204.1.86.16;s;101pkt 101fpkt", shape=diamond, color=yellow];
2573[label="203.171.66.98;s;14pkt 14fpkt", shape=hexagon, color=black];
2664[label="204.1.20.0;43pkt 43fpkt", shape=pentagon, color=darkviolet];
2777[label="204.1.86.16;198pkt 198fpkt", shape=pentagon, color=darkviolet];
2843[label="192.153.168.28;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3251[label="203.171.66.98;20pkt 20fpkt", shape=pentagon, color=darkviolet];
3438[label="203.166.35.132;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3934[label="213.217.8.240;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4034[label="204.1.86.16;198pkt 198fpkt", shape=invtriangle, color=brown];
4283[label="203.171.66.98;20pkt 20fpkt", shape=invtriangle, color=brown];
4383[label="203.166.35.132;2pkt 2fpkt", shape=invtriangle, color=brown];
4779[label="203.171.66.98;20pkt 20fpkt", shape=invhouse, color=bisque];
4824[label="203.166.35.132;1pkt 1fpkt", shape=invhouse, color=bisque];
stat491[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.1.86.16:80, 143.111.221.67:*}[40.2667%]&lt;BR/&gt;{*:80, 148.180.206.215:*}[26.9333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3956%)&lt;BR/&gt; 1863: (0.384615%)&lt;BR/&gt; 33489: (0.32967%)&lt;BR/&gt; 33488: (0.32967%)&lt;BR/&gt; 33487: (0.32967%)&gt;];
}
1646--1823[label="1;1pkt 1fpkt"];
1646--2664[label="0.209302;9pkt 9fpkt"];
1654--2455[label="0.00980392;1pkt 1fpkt"];
1654--2664[label="0.744186;32pkt 32fpkt"];
1654--2843[label="1;6pkt 6fpkt"];
1654--2891[label="0.00980392;1pkt 1fpkt"];
1654--3017[label="0.00980392;1pkt 1fpkt"];
1654--3319[label="0.0784314;8pkt 8fpkt"];
1654--3438[label="1;2pkt 2fpkt"];
1654--3934[label="0.2;1pkt 1fpkt"];
1654--4151[label="0.00980392;1pkt 1fpkt"];
1654--4383[label="1;2pkt 2fpkt"];
1654--4729[label="0.00980392;1pkt 1fpkt"];
1654--4824[label="1;1pkt 1fpkt"];
1783--1817[label="1;14pkt 14fpkt"];
1783--1928[label="0.990099;100pkt 100fpkt"];
1783--2396[label="0.00862069;1pkt 1fpkt"];
1783--2573[label="1;14pkt 14fpkt"];
1783--2777[label="0.862069;100pkt 100fpkt"];
1783--3251[label="0.65;13pkt 13fpkt"];
1783--3934[label="0.2;1pkt 1fpkt"];
1783--4034[label="0.862069;100pkt 100fpkt"];
1783--4283[label="0.65;13pkt 13fpkt"];
1783--4779[label="0.65;13pkt 13fpkt"];
1817--2573[label="1;14pkt 14fpkt"];
1817--3251[label="0.928571;13pkt 13fpkt"];
1817--4283[label="0.928571;13pkt 13fpkt"];
1817--4779[label="0.928571;13pkt 13fpkt"];
1928--2777[label="1;101pkt 101fpkt"];
1928--4034[label="1;101pkt 101fpkt"];
2573--3251[label="0.928571;13pkt 13fpkt"];
2573--4283[label="0.928571;13pkt 13fpkt"];
2573--4779[label="0.928571;13pkt 13fpkt"];
2777--4034[label="1;198pkt 198fpkt"];
3251--4283[label="1;20pkt 20fpkt"];
3251--4779[label="1;20pkt 20fpkt"];
3438--4383[label="1;2pkt 2fpkt"];
3438--4824[label="1;1pkt 1fpkt"];
4283--4779[label="1;20pkt 20fpkt"];
4383--4824[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.180.206.215" src_port="80"/>
      <filter dst_ip="143.111.221.67" src_ip="204.1.86.16" src_port="80"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.56.198.240"/>
    </slice>
    <from sec="1075698010" usec="0"/>
    <to sec="1075698899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.36.182.244"/>
    </slice>
    <from sec="1075698002" usec="0"/>
    <to sec="1075698897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.134.13.249"/>
    </slice>
    <from sec="1075698062" usec="0"/>
    <to sec="1075698870" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.407789,1.91337,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.91.136.252"/>
    </slice>
    <from sec="1075698372" usec="0"/>
    <to sec="1075698376" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.156.0.0"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.797526,1.87935,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_498{
style=filled;
color=gray75;
2692[label="194.104.70.4;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3986[label="194.104.70.4;1pkt 1fpkt", shape=invtriangle, color=brown];
4666[label="194.104.70.4;1pkt 1fpkt", shape=invhouse, color=bisque];
stat498[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.104.70.4:80, 164.133.78.16:3955}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3955: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2692--3986[label="1;1pkt 1fpkt"];
2692--4666[label="1;1pkt 1fpkt"];
3986--4666[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.133.78.16" dst_port="3955" src_ip="194.104.70.4" src_port="80"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_499{
style=filled;
color=gray75;
2719[label="143.111.18.8;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4000[label="143.111.18.8;10pkt 10fpkt", shape=invtriangle, color=brown];
stat499[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.18.8:*, 50.60.172.202:80}[40%]&lt;BR/&gt;{143.111.18.8:*, 50.60.173.69:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 19080: (5%)&lt;BR/&gt; 18914: (5%)&lt;BR/&gt; 18902: (5%)&lt;BR/&gt; 18873: (5%)&gt;];
}
2719--4000[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="50.60.173.69" src_ip="143.111.18.8"/>
      <filter dst_ip="50.60.172.202" dst_port="80" src_ip="143.111.18.8"/>
    </slice>
    <from sec="1075698008" usec="0"/>
    <to sec="1075698899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.153.171.8"/>
    </slice>
    <from sec="1075698094" usec="0"/>
    <to sec="1075698106" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_501{
style=filled;
color=gray75;
2723[label="143.111.192.8;19pkt 19fpkt", shape=pentagon, color=darkviolet];
4003[label="143.111.192.8;19pkt 19fpkt", shape=invtriangle, color=brown];
stat501[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.192.8:*, 201.159.24.69:80}[36.8421%]&lt;BR/&gt;{143.111.192.8:*, 200.48.74.94:80}[31.5789%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.7368%)&lt;BR/&gt; 33764: (2.63158%)&lt;BR/&gt; 33763: (2.63158%)&lt;BR/&gt; 33737: (2.63158%)&lt;BR/&gt; 33729: (2.63158%)&gt;];
}
2723--4003[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="201.159.24.69" dst_port="80" src_ip="143.111.192.8"/>
      <filter dst_ip="200.48.74.94" dst_port="80" src_ip="143.111.192.8"/>
    </slice>
    <from sec="1075698018" usec="0"/>
    <to sec="1075698900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_502{
style=filled;
color=gray75;
2728[label="217.180.93.9;178pkt 178fpkt", shape=pentagon, color=darkviolet];
4007[label="217.180.93.9;178pkt 178fpkt", shape=invtriangle, color=brown];
stat502[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.180.93.9:53, *:*}[95.5056%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (55.618%)&lt;BR/&gt; 25: (2.24719%)&lt;BR/&gt; 32769: (1.40449%)&lt;BR/&gt; 9253: (1.1236%)&lt;BR/&gt; 1024: (1.1236%)&gt;];
}
2728--4007[label="1;178pkt 178fpkt"];
</description>
    <slice>
      <filter src_ip="217.180.93.9" src_port="53"/>
    </slice>
    <from sec="1075698010" usec="0"/>
    <to sec="1075698894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.12.34.11"/>
    </slice>
    <from sec="1075698017" usec="0"/>
    <to sec="1075698896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_504{
style=filled;
color=gray75;
2743[label="73.193.198.11;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4015[label="73.193.198.11;2pkt 2fpkt", shape=invtriangle, color=brown];
stat504[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.193.198.11:25, 143.110.9.179:41720}[50%]&lt;BR/&gt;{73.193.198.11:25, 143.110.9.179:41721}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 41721: (25%)&lt;BR/&gt; 41720: (25%)&gt;];
}
2743--4015[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="143.110.9.179" dst_port="41721" src_ip="73.193.198.11" src_port="25"/>
      <filter dst_ip="143.110.9.179" dst_port="41720" src_ip="73.193.198.11" src_port="25"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_505{
style=filled;
color=gray75;
2752[label="201.78.162.12;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4019[label="201.78.162.12;2pkt 2fpkt", shape=invtriangle, color=brown];
stat505[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.78.162.12:80, 164.229.215.88:1483}[50%]&lt;BR/&gt;{201.78.162.12:80, 148.180.206.242:3419}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3419: (25%)&lt;BR/&gt; 1483: (25%)&gt;];
}
2752--4019[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="148.180.206.242" dst_port="3419" src_ip="201.78.162.12" src_port="80"/>
      <filter dst_ip="164.229.215.88" dst_port="1483" src_ip="201.78.162.12" src_port="80"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_506{
style=filled;
color=gray75;
2756[label="143.111.18.13;13pkt 13fpkt", shape=pentagon, color=darkviolet];
4021[label="143.111.18.13;14pkt 14fpkt", shape=invtriangle, color=brown];
stat506[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.18.13:*, 49.113.181.100:80}[28.5714%]&lt;BR/&gt;{143.111.18.13:*, *:1863}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (29.6296%)&lt;BR/&gt; 1863: (12.963%)&lt;BR/&gt; 27074: (3.7037%)&lt;BR/&gt; 27062: (3.7037%)&lt;BR/&gt; 26815: (3.7037%)&gt;];
}
2756--4021[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_port="1863" src_ip="143.111.18.13"/>
      <filter dst_ip="49.113.181.100" dst_port="80" src_ip="143.111.18.13"/>
    </slice>
    <from sec="1075698004" usec="0"/>
    <to sec="1075698894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.217.8.14"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.797526,1.87935,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_509{
style=filled;
color=gray75;
2778[label="143.111.88.16;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4035[label="143.111.88.16;9pkt 9fpkt", shape=invtriangle, color=brown];
4684[label="143.111.88.16;9pkt 9fpkt", shape=invhouse, color=bisque];
stat509[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.88.16:*, 219.196.14.165:25}[77.7778%]&lt;BR/&gt;{143.111.88.16:*, 73.251.227.156:25}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 4600: (5.55556%)&lt;BR/&gt; 4599: (5.55556%)&lt;BR/&gt; 4598: (5.55556%)&lt;BR/&gt; 4597: (5.55556%)&gt;];
}
2778--4035[label="1;9pkt 9fpkt"];
2778--4684[label="1;9pkt 9fpkt"];
4035--4684[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="219.196.14.165" dst_port="25" src_ip="143.111.88.16"/>
      <filter dst_ip="73.251.227.156" dst_port="25" src_ip="143.111.88.16"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11702,1.79355,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_510{
style=filled;
color=gray75;
1272[label="143.111.67.101;s;26pkt 26fpkt", shape=diamond, color=yellow];
1318[label="48.31.24.148;d;15pkt 15fpkt", shape=diamond, color=yellow];
1447[label="143.111.227.138;s;54pkt 54fpkt", shape=diamond, color=yellow];
2152[label="143.111.67.101;s;26pkt 26fpkt", shape=hexagon, color=black];
2296[label="48.31.24.148;d;15pkt 15fpkt", shape=hexagon, color=black];
2451[label="143.111.227.138;s;47pkt 47fpkt", shape=hexagon, color=black];
2779[label="143.111.102.16;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3268[label="143.111.67.101;26pkt 26fpkt", shape=pentagon, color=darkviolet];
4036[label="143.111.102.16;10pkt 10fpkt", shape=invtriangle, color=brown];
4685[label="143.111.102.16;11pkt 11fpkt", shape=invhouse, color=bisque];
stat510[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.227.138:*, *:80}[38.4615%]&lt;BR/&gt;{143.111.67.101:*, *:80}[26.3736%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.1667%)&lt;BR/&gt; 1863: (4.16667%)&lt;BR/&gt; 443: (2.70833%)&lt;BR/&gt; 33602: (1.66667%)&lt;BR/&gt; 53: (1.66667%)&gt;];
}
1272--1298[label="0.0384615;1pkt 1fpkt"];
1272--1318[label="0.2;3pkt 3fpkt"];
1272--1373[label="0.0769231;2pkt 2fpkt"];
1272--1785[label="0.115385;3pkt 3fpkt"];
1272--1846[label="0.0625;1pkt 1fpkt"];
1272--2078[label="0.0384615;1pkt 1fpkt"];
1272--2091[label="0.0384615;1pkt 1fpkt"];
1272--2152[label="1;26pkt 26fpkt"];
1272--2275[label="0.0769231;2pkt 2fpkt"];
1272--2296[label="0.2;3pkt 3fpkt"];
1272--2436[label="0.0384615;1pkt 1fpkt"];
1272--2460[label="0.115385;3pkt 3fpkt"];
1272--2497[label="0.0384615;1pkt 1fpkt"];
1272--2644[label="0.115385;3pkt 3fpkt"];
1272--2645[label="0.0769231;2pkt 2fpkt"];
1272--3268[label="1;26pkt 26fpkt"];
1318--1447[label="0.533333;8pkt 8fpkt"];
1318--2152[label="0.2;3pkt 3fpkt"];
1318--2296[label="1;15pkt 15fpkt"];
1318--2451[label="0.533333;8pkt 8fpkt"];
1318--2779[label="0.3;3pkt 3fpkt"];
1318--3268[label="0.2;3pkt 3fpkt"];
1318--4036[label="0.3;3pkt 3fpkt"];
1318--4685[label="0.363636;4pkt 4fpkt"];
1447--1742[label="0.037037;2pkt 2fpkt"];
1447--2296[label="0.533333;8pkt 8fpkt"];
1447--2451[label="1;47pkt 47fpkt"];
1447--2644[label="0.0185185;1pkt 1fpkt"];
1447--2645[label="0.0740741;4pkt 4fpkt"];
2152--2275[label="0.0769231;2pkt 2fpkt"];
2152--2296[label="0.2;3pkt 3fpkt"];
2152--2436[label="0.0384615;1pkt 1fpkt"];
2152--2460[label="0.115385;3pkt 3fpkt"];
2152--2497[label="0.0384615;1pkt 1fpkt"];
2152--2644[label="0.115385;3pkt 3fpkt"];
2152--2645[label="0.0769231;2pkt 2fpkt"];
2152--3268[label="1;26pkt 26fpkt"];
2296--2451[label="0.533333;8pkt 8fpkt"];
2296--2779[label="0.3;3pkt 3fpkt"];
2296--3268[label="0.2;3pkt 3fpkt"];
2296--4036[label="0.3;3pkt 3fpkt"];
2296--4685[label="0.363636;4pkt 4fpkt"];
2451--2644[label="0.0212766;1pkt 1fpkt"];
2451--2645[label="0.0851064;4pkt 4fpkt"];
2779--4036[label="1;10pkt 10fpkt"];
2779--4685[label="1;10pkt 10fpkt"];
4036--4685[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="143.111.227.138"/>
      <filter dst_port="80" src_ip="143.111.67.101"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_511{
style=filled;
color=gray75;
2789[label="193.128.216.17;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4040[label="193.128.216.17;6pkt 6fpkt", shape=invtriangle, color=brown];
stat511[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.128.216.17:80, 143.110.3.42:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1260: (7.69231%)&lt;BR/&gt; 1243: (7.69231%)&lt;BR/&gt; 1242: (7.69231%)&lt;BR/&gt; 1241: (7.69231%)&gt;];
}
2789--4040[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="143.110.3.42" src_ip="193.128.216.17" src_port="80"/>
    </slice>
    <from sec="1075698673" usec="0"/>
    <to sec="1075698723" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.157.15.19"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.74.200.20"/>
    </slice>
    <from sec="1075698692" usec="0"/>
    <to sec="1075698806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_515{
style=filled;
color=gray75;
2806[label="213.217.8.21;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4047[label="213.217.8.21;4pkt 4fpkt", shape=invtriangle, color=brown];
stat515[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.217.8.21:1863, 143.111.61.20:1230}[20%]&lt;BR/&gt;{213.217.8.21:1863, 148.180.31.116:2084}[20%]&lt;BR/&gt;{213.217.8.21:1863, 137.37.71.136:1036}[20%]&lt;BR/&gt;{213.217.8.21:1863, 148.180.92.190:1985}[20%]&lt;BR/&gt;{213.217.8.21:1863, 143.111.61.198:25602}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 2084: (11.1111%)&lt;BR/&gt; 1985: (11.1111%)&lt;BR/&gt; 1230: (11.1111%)&lt;BR/&gt; 1036: (11.1111%)&gt;];
}
2806--4047[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="143.111.61.198" dst_port="25602" src_ip="213.217.8.21" src_port="1863"/>
      <filter dst_ip="148.180.92.190" dst_port="1985" src_ip="213.217.8.21" src_port="1863"/>
      <filter dst_ip="137.37.71.136" dst_port="1036" src_ip="213.217.8.21" src_port="1863"/>
      <filter dst_ip="148.180.31.116" dst_port="2084" src_ip="213.217.8.21" src_port="1863"/>
      <filter dst_ip="143.111.61.20" dst_port="1230" src_ip="213.217.8.21" src_port="1863"/>
    </slice>
    <from sec="1075698005" usec="0"/>
    <to sec="1075698892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945727,1.79955,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_516{
style=filled;
color=gray75;
1691[label="148.180.20.209;d;55pkt 55fpkt", shape=diamond, color=yellow];
2476[label="148.180.20.209;d;53pkt 53fpkt", shape=hexagon, color=black];
2818[label="201.163.86.23;20pkt 20fpkt", shape=pentagon, color=darkviolet];
3835[label="50.95.125.216;29pkt 29fpkt", shape=pentagon, color=darkviolet];
4052[label="201.163.86.23;19pkt 19fpkt", shape=invtriangle, color=brown];
stat516[shape=component, label=&lt;Rules:&lt;BR/&gt;{50.95.125.216:80, 148.180.20.209:*}[39.1892%]&lt;BR/&gt;{201.163.86.23:80, *:*}[27.027%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3938: (1.13636%)&lt;BR/&gt; 4020: (0.852273%)&lt;BR/&gt; 4018: (0.852273%)&lt;BR/&gt; 4010: (0.852273%)&gt;];
}
1691--1778[label="0.0181818;1pkt 1fpkt"];
1691--2476[label="1;53pkt 53fpkt"];
1691--2818[label="0.05;1pkt 1fpkt"];
1691--3835[label="1;29pkt 29fpkt"];
1691--4052[label="0.0526316;1pkt 1fpkt"];
2476--2818[label="0.05;1pkt 1fpkt"];
2476--3835[label="0.931034;27pkt 27fpkt"];
2476--4052[label="0.0526316;1pkt 1fpkt"];
2818--4052[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter src_ip="201.163.86.23" src_port="80"/>
      <filter dst_ip="148.180.20.209" src_ip="50.95.125.216" src_port="80"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_517{
style=filled;
color=gray75;
2854[label="49.26.131.30;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4068[label="49.26.131.30;1pkt 1fpkt", shape=invtriangle, color=brown];
stat517[shape=component, label=&lt;Rules:&lt;BR/&gt;{49.26.131.30:64969, 143.110.25.232:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64969: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2854--4068[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.110.25.232" dst_port="80" src_ip="49.26.131.30" src_port="64969"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_518{
style=filled;
color=gray75;
2855[label="49.113.145.30;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4069[label="49.113.145.30;1pkt 1fpkt", shape=invtriangle, color=brown];
stat518[shape=component, label=&lt;Rules:&lt;BR/&gt;{49.113.145.30:80, 143.110.133.37:2502}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2502: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2855--4069[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.110.133.37" dst_port="2502" src_ip="49.113.145.30" src_port="80"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_519{
style=filled;
color=gray75;
2876[label="75.95.65.35;101pkt 101fpkt", shape=pentagon, color=darkviolet];
4080[label="75.95.65.35;101pkt 101fpkt", shape=invtriangle, color=brown];
stat519[shape=component, label=&lt;Rules:&lt;BR/&gt;{75.95.65.35:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4971: (0.49505%)&lt;BR/&gt; 4880: (0.49505%)&lt;BR/&gt; 4812: (0.49505%)&lt;BR/&gt; 4803: (0.49505%)&gt;];
}
2876--4080[label="1;101pkt 101fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="75.95.65.35"/>
    </slice>
    <from sec="1075698022" usec="0"/>
    <to sec="1075698885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_520{
style=filled;
color=gray75;
2881[label="213.217.12.36;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4082[label="213.217.12.36;2pkt 2fpkt", shape=invtriangle, color=brown];
stat520[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.217.12.36:1863, 137.37.183.104:4291}[50%]&lt;BR/&gt;{213.217.12.36:1863, 143.111.66.237:1373}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4291: (25%)&lt;BR/&gt; 1373: (25%)&gt;];
}
2881--4082[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="143.111.66.237" dst_port="1373" src_ip="213.217.12.36" src_port="1863"/>
      <filter dst_ip="137.37.183.104" dst_port="4291" src_ip="213.217.12.36" src_port="1863"/>
    </slice>
    <from sec="1075698003" usec="0"/>
    <to sec="1075698890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.109.199.36"/>
    </slice>
    <from sec="1075698405" usec="0"/>
    <to sec="1075698786" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="51.133.219.36"/>
    </slice>
    <from sec="1075698286" usec="0"/>
    <to sec="1075698900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_523{
style=filled;
color=gray75;
2887[label="73.130.8.37;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4087[label="73.130.8.37;6pkt 6fpkt", shape=invtriangle, color=brown];
stat523[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.130.8.37:*, 209.137.236.26:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59433: (9.09091%)&lt;BR/&gt; 59431: (9.09091%)&lt;BR/&gt; 59430: (9.09091%)&lt;BR/&gt; 59429: (9.09091%)&gt;];
}
2887--4087[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="209.137.236.26" dst_port="80" src_ip="73.130.8.37"/>
    </slice>
    <from sec="1075698874" usec="0"/>
    <to sec="1075698895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.797526,1.87935,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_524{
style=filled;
color=gray75;
2895[label="217.65.98.38;155pkt 155fpkt", shape=pentagon, color=darkviolet];
4089[label="217.65.98.38;155pkt 155fpkt", shape=invtriangle, color=brown];
4704[label="217.65.98.38;154pkt 154fpkt", shape=invhouse, color=bisque];
stat524[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.65.98.38:6667, *:*}[32.2581%]&lt;BR/&gt;{217.65.98.38:*, *:113}[24.5161%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (16.056%)&lt;BR/&gt; 113: (12.2845%)&lt;BR/&gt; 1080: (7.11207%)&lt;BR/&gt; 8080: (4.84914%)&lt;BR/&gt; 10080: (3.23276%)&gt;];
}
2895--4089[label="1;155pkt 155fpkt"];
2895--4704[label="1;154pkt 154fpkt"];
4089--4704[label="1;154pkt 154fpkt"];
</description>
    <slice>
      <filter src_ip="217.65.98.38" src_port="6667"/>
      <filter dst_port="113" src_ip="217.65.98.38"/>
    </slice>
    <from sec="1075698005" usec="0"/>
    <to sec="1075698892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.797526,1.87935,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_525{
style=filled;
color=gray75;
2914[label="143.111.245.41;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4103[label="143.111.245.41;2pkt 2fpkt", shape=invtriangle, color=brown];
4710[label="143.111.245.41;2pkt 2fpkt", shape=invhouse, color=bisque];
stat525[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.245.41:53, 49.10.140.113:32997}[50%]&lt;BR/&gt;{143.111.245.41:53, 87.170.191.206:56950}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 56950: (25%)&lt;BR/&gt; 32997: (25%)&gt;];
}
2914--4103[label="1;2pkt 2fpkt"];
2914--4710[label="1;2pkt 2fpkt"];
4103--4710[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="87.170.191.206" dst_port="56950" src_ip="143.111.245.41" src_port="53"/>
      <filter dst_ip="49.10.140.113" dst_port="32997" src_ip="143.111.245.41" src_port="53"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.797526,1.87935,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_526{
style=filled;
color=gray75;
2922[label="73.193.236.42;56pkt 56fpkt", shape=pentagon, color=darkviolet];
4104[label="73.193.236.42;55pkt 55fpkt", shape=invtriangle, color=brown];
4711[label="73.193.236.42;55pkt 55fpkt", shape=invhouse, color=bisque];
stat526[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.193.236.42:80, 143.111.88.101:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 30685: (0.903614%)&lt;BR/&gt; 30409: (0.903614%)&lt;BR/&gt; 29722: (0.903614%)&lt;BR/&gt; 29721: (0.903614%)&gt;];
}
2922--4104[label="1;55pkt 55fpkt"];
2922--4711[label="1;55pkt 55fpkt"];
4104--4711[label="1;55pkt 55fpkt"];
</description>
    <slice>
      <filter dst_ip="143.111.88.101" src_ip="73.193.236.42" src_port="80"/>
    </slice>
    <from sec="1075698828" usec="0"/>
    <to sec="1075698858" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_527{
style=filled;
color=gray75;
2925[label="213.217.9.44;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4105[label="213.217.9.44;1pkt 1fpkt", shape=invtriangle, color=brown];
stat527[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.217.9.44:1863, 143.110.234.172:54752}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54752: (50%)&lt;BR/&gt; 1863: (50%)&gt;];
}
2925--4105[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.110.234.172" dst_port="54752" src_ip="213.217.9.44" src_port="1863"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.172.34.44"/>
    </slice>
    <from sec="1075698014" usec="0"/>
    <to sec="1075698878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.31.71.44"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.797526,1.87935,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_530{
style=filled;
color=gray75;
2930[label="209.43.184.44;39pkt 39fpkt", shape=pentagon, color=darkviolet];
4109[label="209.43.184.44;39pkt 39fpkt", shape=invtriangle, color=brown];
4715[label="209.43.184.44;39pkt 39fpkt", shape=invhouse, color=bisque];
stat530[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.43.184.44:*, *:80}[87.1795%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.1538%)&lt;BR/&gt; 0: (7.69231%)&lt;BR/&gt; 47203: (1.28205%)&lt;BR/&gt; 47137: (1.28205%)&lt;BR/&gt; 47103: (1.28205%)&gt;];
}
2930--4109[label="1;39pkt 39fpkt"];
2930--4715[label="1;39pkt 39fpkt"];
4109--4715[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="209.43.184.44"/>
    </slice>
    <from sec="1075698010" usec="0"/>
    <to sec="1075698872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_531{
style=filled;
color=gray75;
2933[label="213.217.9.45;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4111[label="213.217.9.45;8pkt 8fpkt", shape=invtriangle, color=brown];
stat531[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.217.9.45:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 16250: (6.25%)&lt;BR/&gt; 4562: (6.25%)&lt;BR/&gt; 3241: (6.25%)&lt;BR/&gt; 3009: (6.25%)&gt;];
}
2933--4111[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter src_ip="213.217.9.45" src_port="1863"/>
    </slice>
    <from sec="1075698017" usec="0"/>
    <to sec="1075698899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.31.71.45"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_533{
style=filled;
color=gray75;
2947[label="209.209.114.47;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4120[label="209.209.114.47;2pkt 2fpkt", shape=invtriangle, color=brown];
stat533[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.209.114.47:25, 143.111.5.69:1298}[50%]&lt;BR/&gt;{209.209.114.47:25, 143.111.5.69:1306}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 1306: (25%)&lt;BR/&gt; 1298: (25%)&gt;];
}
2947--4120[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="143.111.5.69" dst_port="1306" src_ip="209.209.114.47" src_port="25"/>
      <filter dst_ip="143.111.5.69" dst_port="1298" src_ip="209.209.114.47" src_port="25"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.797526,1.87935,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_534{
style=filled;
color=gray75;
2957[label="73.226.148.48;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4124[label="73.226.148.48;7pkt 7fpkt", shape=invtriangle, color=brown];
4719[label="73.226.148.48;7pkt 7fpkt", shape=invhouse, color=bisque];
stat534[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.226.148.48:81, 209.36.37.67:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 81: (50%)&lt;BR/&gt; 4265: (7.14286%)&lt;BR/&gt; 4264: (7.14286%)&lt;BR/&gt; 4262: (7.14286%)&lt;BR/&gt; 4260: (7.14286%)&gt;];
}
2957--4124[label="1;7pkt 7fpkt"];
2957--4719[label="1;7pkt 7fpkt"];
4124--4719[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="209.36.37.67" src_ip="73.226.148.48" src_port="81"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.797526,1.87935,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_535{
style=filled;
color=gray75;
2981[label="193.3.58.52;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4135[label="193.3.58.52;14pkt 14fpkt", shape=invtriangle, color=brown];
4723[label="193.3.58.52;15pkt 15fpkt", shape=invhouse, color=bisque];
stat535[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.3.58.52:*, 143.110.4.0:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57485: (3.48837%)&lt;BR/&gt; 55272: (3.48837%)&lt;BR/&gt; 51882: (3.48837%)&lt;BR/&gt; 50390: (3.48837%)&gt;];
}
2981--4135[label="1;14pkt 14fpkt"];
2981--4723[label="1;14pkt 14fpkt"];
4135--4723[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="143.110.4.0" dst_port="80" src_ip="193.3.58.52"/>
    </slice>
    <from sec="1075698088" usec="0"/>
    <to sec="1075698884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.217.8.54"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.797526,1.87935,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_537{
style=filled;
color=gray75;
2999[label="209.212.141.54;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4144[label="209.212.141.54;3pkt 3fpkt", shape=invtriangle, color=brown];
4727[label="209.212.141.54;4pkt 4fpkt", shape=invhouse, color=bisque];
stat537[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.212.141.54:53, 143.111.88.5:2103}[25%]&lt;BR/&gt;{209.212.141.54:80, 143.111.123.213:3413}[25%]&lt;BR/&gt;{209.212.141.54:80, 143.111.123.213:3415}[25%]&lt;BR/&gt;{209.212.141.54:80, 143.111.123.213:3450}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.3636%)&lt;BR/&gt; 3450: (13.6364%)&lt;BR/&gt; 3415: (13.6364%)&lt;BR/&gt; 2103: (13.6364%)&lt;BR/&gt; 53: (13.6364%)&gt;];
}
2999--4144[label="1;3pkt 3fpkt"];
2999--4727[label="1;4pkt 4fpkt"];
4144--4727[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="143.111.123.213" dst_port="3450" src_ip="209.212.141.54" src_port="80"/>
      <filter dst_ip="143.111.123.213" dst_port="3415" src_ip="209.212.141.54" src_port="80"/>
      <filter dst_ip="143.111.123.213" dst_port="3413" src_ip="209.212.141.54" src_port="80"/>
      <filter dst_ip="143.111.88.5" dst_port="2103" src_ip="209.212.141.54" src_port="53"/>
    </slice>
    <from sec="1075698838" usec="0"/>
    <to sec="1075698877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_538{
style=filled;
color=gray75;
3002[label="213.217.14.55;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4145[label="213.217.14.55;2pkt 2fpkt", shape=invtriangle, color=brown];
stat538[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.217.14.55:80, 143.111.88.101:36563}[50%]&lt;BR/&gt;{213.217.14.55:80, 143.111.88.102:10720}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 36563: (25%)&lt;BR/&gt; 10720: (25%)&gt;];
}
3002--4145[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="143.111.88.102" dst_port="10720" src_ip="213.217.14.55" src_port="80"/>
      <filter dst_ip="143.111.88.101" dst_port="36563" src_ip="213.217.14.55" src_port="80"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.149.2.62"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.797526,1.87935,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_541{
style=filled;
color=gray75;
3064[label="49.120.72.66;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4175[label="49.120.72.66;1pkt 1fpkt", shape=invtriangle, color=brown];
4736[label="49.120.72.66;1pkt 1fpkt", shape=invhouse, color=bisque];
stat541[shape=component, label=&lt;Rules:&lt;BR/&gt;{49.120.72.66:20, 162.159.20.165:1303}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1303: (50%)&lt;BR/&gt; 20: (50%)&gt;];
}
3064--4175[label="1;1pkt 1fpkt"];
3064--4736[label="1;1pkt 1fpkt"];
4175--4736[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.159.20.165" dst_port="1303" src_ip="49.120.72.66" src_port="20"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_542{
style=filled;
color=gray75;
3066[label="161.104.249.66;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4176[label="161.104.249.66;5pkt 5fpkt", shape=invtriangle, color=brown];
stat542[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.104.249.66:443, 137.236.206.145:58624}[20%]&lt;BR/&gt;{161.104.249.66:443, 137.236.206.145:58627}[20%]&lt;BR/&gt;{161.104.249.66:443, 137.236.206.145:58628}[20%]&lt;BR/&gt;{161.104.249.66:443, 137.236.206.145:58631}[20%]&lt;BR/&gt;{161.104.249.66:443, 137.236.206.145:58644}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 58644: (11.1111%)&lt;BR/&gt; 58631: (11.1111%)&lt;BR/&gt; 58628: (11.1111%)&lt;BR/&gt; 58627: (11.1111%)&gt;];
}
3066--4176[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="137.236.206.145" dst_port="58644" src_ip="161.104.249.66" src_port="443"/>
      <filter dst_ip="137.236.206.145" dst_port="58631" src_ip="161.104.249.66" src_port="443"/>
      <filter dst_ip="137.236.206.145" dst_port="58628" src_ip="161.104.249.66" src_port="443"/>
      <filter dst_ip="137.236.206.145" dst_port="58627" src_ip="161.104.249.66" src_port="443"/>
      <filter dst_ip="137.236.206.145" dst_port="58624" src_ip="161.104.249.66" src_port="443"/>
    </slice>
    <from sec="1075698794" usec="0"/>
    <to sec="1075698883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.797526,1.87935,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_543{
style=filled;
color=gray75;
3069[label="213.217.211.67;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4179[label="213.217.211.67;1pkt 1fpkt", shape=invtriangle, color=brown];
4737[label="213.217.211.67;1pkt 1fpkt", shape=invhouse, color=bisque];
stat543[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.217.211.67:80, 143.111.227.138:32776}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32776: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3069--4179[label="1;1pkt 1fpkt"];
3069--4737[label="1;1pkt 1fpkt"];
4179--4737[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.111.227.138" dst_port="32776" src_ip="213.217.211.67" src_port="80"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_544{
style=filled;
color=gray75;
3077[label="143.111.5.69;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4184[label="143.111.5.69;2pkt 2fpkt", shape=invtriangle, color=brown];
stat544[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.5.69:1298, 209.209.114.47:25}[50%]&lt;BR/&gt;{143.111.5.69:1306, 209.209.114.47:25}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 1306: (25%)&lt;BR/&gt; 1298: (25%)&gt;];
}
3077--4184[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="209.209.114.47" dst_port="25" src_ip="143.111.5.69" src_port="1306"/>
      <filter dst_ip="209.209.114.47" dst_port="25" src_ip="143.111.5.69" src_port="1298"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_545{
style=filled;
color=gray75;
3080[label="203.22.17.69;174pkt 174fpkt", shape=pentagon, color=darkviolet];
4185[label="203.22.17.69;174pkt 174fpkt", shape=invtriangle, color=brown];
stat545[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.22.17.69:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3080--4185[label="1;174pkt 174fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="203.22.17.69" src_port="1025"/>
    </slice>
    <from sec="1075698332" usec="0"/>
    <to sec="1075698346" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.797526,1.87935,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_546{
style=filled;
color=gray75;
3082[label="48.31.26.69;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4187[label="48.31.26.69;1pkt 1fpkt", shape=invtriangle, color=brown];
4739[label="48.31.26.69;1pkt 1fpkt", shape=invhouse, color=bisque];
stat546[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.31.26.69:80, 143.111.88.101:36607}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 36607: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3082--4187[label="1;1pkt 1fpkt"];
3082--4739[label="1;1pkt 1fpkt"];
4187--4739[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.111.88.101" dst_port="36607" src_ip="48.31.26.69" src_port="80"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_547{
style=filled;
color=gray75;
3091[label="159.32.9.70;42pkt 42fpkt", shape=pentagon, color=darkviolet];
4191[label="159.32.9.70;42pkt 42fpkt", shape=invtriangle, color=brown];
stat547[shape=component, label=&lt;Rules:&lt;BR/&gt;{159.32.9.70:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4909: (1.19048%)&lt;BR/&gt; 4868: (1.19048%)&lt;BR/&gt; 4727: (1.19048%)&lt;BR/&gt; 4563: (1.19048%)&gt;];
}
3091--4191[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="159.32.9.70"/>
    </slice>
    <from sec="1075698019" usec="0"/>
    <to sec="1075698899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.73.67.71"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_550{
style=filled;
color=gray75;
3105[label="73.251.145.72;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4199[label="73.251.145.72;7pkt 7fpkt", shape=invtriangle, color=brown];
stat550[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.251.145.72:60543, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60543: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3105--4199[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="73.251.145.72" src_port="60543"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_551{
style=filled;
color=gray75;
3108[label="50.147.0.73;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4201[label="50.147.0.73;8pkt 8fpkt", shape=invtriangle, color=brown];
stat551[shape=component, label=&lt;Rules:&lt;BR/&gt;{50.147.0.73:80, 143.111.81.133:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49277: (6.25%)&lt;BR/&gt; 49276: (6.25%)&lt;BR/&gt; 49275: (6.25%)&lt;BR/&gt; 49274: (6.25%)&gt;];
}
3108--4201[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="143.111.81.133" src_ip="50.147.0.73" src_port="80"/>
    </slice>
    <from sec="1075698021" usec="0"/>
    <to sec="1075698040" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.797526,1.87935,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_552{
style=filled;
color=gray75;
3119[label="193.86.163.74;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4209[label="193.86.163.74;1pkt 1fpkt", shape=invtriangle, color=brown];
4749[label="193.86.163.74;1pkt 1fpkt", shape=invhouse, color=bisque];
stat552[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.86.163.74:80, 143.111.67.128:2295}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2295: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3119--4209[label="1;1pkt 1fpkt"];
3119--4749[label="1;1pkt 1fpkt"];
4209--4749[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.111.67.128" dst_port="2295" src_ip="193.86.163.74" src_port="80"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_553{
style=filled;
color=gray75;
3121[label="213.217.8.75;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4211[label="213.217.8.75;7pkt 7fpkt", shape=invtriangle, color=brown];
stat553[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.217.8.75:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 54921: (7.14286%)&lt;BR/&gt; 25884: (7.14286%)&lt;BR/&gt; 3110: (7.14286%)&lt;BR/&gt; 3022: (7.14286%)&gt;];
}
3121--4211[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter src_ip="213.217.8.75" src_port="1863"/>
    </slice>
    <from sec="1075698015" usec="0"/>
    <to sec="1075698894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.31.25.75"/>
    </slice>
    <from sec="1075698122" usec="0"/>
    <to sec="1075698127" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.3.162.75"/>
    </slice>
    <from sec="1075698012" usec="0"/>
    <to sec="1075698893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.222.227.76"/>
    </slice>
    <from sec="1075698002" usec="0"/>
    <to sec="1075698899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="51.84.211.78"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.797526,1.87935,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_559{
style=filled;
color=gray75;
3160[label="73.130.165.81;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4237[label="73.130.165.81;2pkt 2fpkt", shape=invtriangle, color=brown];
4758[label="73.130.165.81;1pkt 1fpkt", shape=invhouse, color=bisque];
stat559[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.130.165.81:5811, 162.159.87.127:80}[50%]&lt;BR/&gt;{73.130.165.81:62940, 162.159.87.127:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 5811: (30%)&lt;BR/&gt; 62940: (20%)&gt;];
}
3160--4237[label="1;2pkt 2fpkt"];
3160--4758[label="1;1pkt 1fpkt"];
4237--4758[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.159.87.127" dst_port="80" src_ip="73.130.165.81" src_port="62940"/>
      <filter dst_ip="162.159.87.127" dst_port="80" src_ip="73.130.165.81" src_port="5811"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.797526,1.87935,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_560{
style=filled;
color=gray75;
3168[label="214.27.70.83;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4239[label="214.27.70.83;2pkt 2fpkt", shape=invtriangle, color=brown];
4760[label="214.27.70.83;2pkt 2fpkt", shape=invhouse, color=bisque];
stat560[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.27.70.83:80, 137.37.198.190:3487}[50%]&lt;BR/&gt;{214.27.70.83:80, 137.37.198.190:3488}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3488: (25%)&lt;BR/&gt; 3487: (25%)&gt;];
}
3168--4239[label="1;2pkt 2fpkt"];
3168--4760[label="1;2pkt 2fpkt"];
4239--4760[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="137.37.198.190" dst_port="3488" src_ip="214.27.70.83" src_port="80"/>
      <filter dst_ip="137.37.198.190" dst_port="3487" src_ip="214.27.70.83" src_port="80"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.797526,1.87935,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_561{
style=filled;
color=gray75;
3171[label="213.217.12.84;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4241[label="213.217.12.84;3pkt 3fpkt", shape=invtriangle, color=brown];
4761[label="213.217.12.84;3pkt 3fpkt", shape=invhouse, color=bisque];
stat561[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.217.12.84:1863, 143.110.144.5:18271}[33.3333%]&lt;BR/&gt;{213.217.12.84:1863, 209.43.69.161:1217}[33.3333%]&lt;BR/&gt;{213.217.12.84:1863, 209.43.69.161:1391}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 18271: (18.75%)&lt;BR/&gt; 1391: (18.75%)&lt;BR/&gt; 1217: (12.5%)&gt;];
}
3171--4241[label="1;2pkt 2fpkt"];
3171--4761[label="1;2pkt 2fpkt"];
4241--4761[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="209.43.69.161" dst_port="1391" src_ip="213.217.12.84" src_port="1863"/>
      <filter dst_ip="209.43.69.161" dst_port="1217" src_ip="213.217.12.84" src_port="1863"/>
      <filter dst_ip="143.110.144.5" dst_port="18271" src_ip="213.217.12.84" src_port="1863"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698844" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.731545,1.83855,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_562{
style=filled;
color=gray75;
1560[label="148.180.206.164;d;90pkt 90fpkt", shape=diamond, color=yellow];
1681[label="201.70.130.84;s;54pkt 54fpkt", shape=diamond, color=yellow];
1796[label="201.70.130.80;s;18pkt 18fpkt", shape=diamond, color=yellow];
3155[label="201.70.130.80;18pkt 18fpkt", shape=pentagon, color=darkviolet];
3174[label="201.70.130.84;70pkt 70fpkt", shape=pentagon, color=darkviolet];
4233[label="201.70.130.80;18pkt 18fpkt", shape=invtriangle, color=brown];
4242[label="201.70.130.84;71pkt 71fpkt", shape=invtriangle, color=brown];
stat562[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.70.130.84:80, 148.180.206.164:*}[78.8889%]&lt;BR/&gt;{201.70.130.80:*, 148.180.206.164:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2625%)&lt;BR/&gt; 49865: (0.589971%)&lt;BR/&gt; 49864: (0.589971%)&lt;BR/&gt; 49861: (0.589971%)&lt;BR/&gt; 49860: (0.589971%)&gt;];
}
1560--1681[label="1;54pkt 54fpkt"];
1560--1796[label="1;18pkt 18fpkt"];
1560--2891[label="0.0111111;1pkt 1fpkt"];
1560--3155[label="1;18pkt 18fpkt"];
1560--3174[label="1;70pkt 70fpkt"];
1560--4233[label="1;18pkt 18fpkt"];
1560--4242[label="1;71pkt 71fpkt"];
1681--3174[label="0.981481;53pkt 53fpkt"];
1681--4242[label="1;54pkt 54fpkt"];
1796--3155[label="1;18pkt 18fpkt"];
1796--4233[label="1;18pkt 18fpkt"];
3155--4233[label="1;18pkt 18fpkt"];
3174--4242[label="1;70pkt 70fpkt"];
</description>
    <slice>
      <filter dst_ip="148.180.206.164" src_ip="201.70.130.80"/>
      <filter dst_ip="148.180.206.164" src_ip="201.70.130.84" src_port="80"/>
    </slice>
    <from sec="1075698430" usec="0"/>
    <to sec="1075698715" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_563{
style=filled;
color=gray75;
3188[label="143.111.92.86;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4248[label="143.111.92.86;13pkt 13fpkt", shape=invtriangle, color=brown];
stat563[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.92.86:*, 209.171.118.146:80}[35.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.2963%)&lt;BR/&gt; 3225: (3.7037%)&lt;BR/&gt; 3224: (3.7037%)&lt;BR/&gt; 3163: (3.7037%)&lt;BR/&gt; 3162: (3.7037%)&gt;];
}
3188--4248[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="209.171.118.146" dst_port="80" src_ip="143.111.92.86"/>
    </slice>
    <from sec="1075698009" usec="0"/>
    <to sec="1075698854" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="51.168.241.87"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_565{
style=filled;
color=gray75;
3203[label="209.36.12.88;26pkt 26fpkt", shape=pentagon, color=darkviolet];
4256[label="209.36.12.88;26pkt 26fpkt", shape=invtriangle, color=brown];
stat565[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.36.12.88:25, *:*}[50%]&lt;BR/&gt;{209.36.12.88:53, *:*}[38.4615%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (25%)&lt;BR/&gt; 53: (19.2308%)&lt;BR/&gt; 0: (7.69231%)&lt;BR/&gt; 58751: (1.92308%)&lt;BR/&gt; 55038: (1.92308%)&gt;];
}
3203--4256[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter src_ip="209.36.12.88" src_port="25"/>
      <filter src_ip="209.36.12.88" src_port="53"/>
    </slice>
    <from sec="1075698260" usec="0"/>
    <to sec="1075698867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.797526,1.87935,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_566{
style=filled;
color=gray75;
3208[label="143.111.48.89;22pkt 22fpkt", shape=pentagon, color=darkviolet];
4261[label="143.111.48.89;22pkt 22fpkt", shape=invtriangle, color=brown];
4770[label="143.111.48.89;23pkt 23fpkt", shape=invhouse, color=bisque];
stat566[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.48.89:*, 196.15.139.36:80}[69.5652%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60841: (2.23881%)&lt;BR/&gt; 60840: (2.23881%)&lt;BR/&gt; 60838: (2.23881%)&lt;BR/&gt; 60837: (2.23881%)&gt;];
}
3208--4261[label="1;22pkt 22fpkt"];
3208--4770[label="1;22pkt 22fpkt"];
4261--4770[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="196.15.139.36" dst_port="80" src_ip="143.111.48.89"/>
    </slice>
    <from sec="1075698090" usec="0"/>
    <to sec="1075698832" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11702,1.79355,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_567{
style=filled;
color=gray75;
754[label="137.37.154.179;d;45pkt 45fpkt", shape=diamond, color=yellow];
881[label="143.111.40.253;d;288pkt 288fpkt", shape=diamond, color=yellow];
932[label="208.12.80.85;d;123pkt 123fpkt", shape=diamond, color=yellow];
1026[label="50.146.51.61;s;3pkt 3fpkt", shape=diamond, color=yellow];
1072[label="209.43.82.133;d;230pkt 230fpkt", shape=diamond, color=yellow];
1073[label="50.191.204.91;s;276pkt 276fpkt", shape=diamond, color=yellow];
1095[label="219.52.135.182;s;2pkt 2fpkt", shape=diamond, color=yellow];
1170[label="140.137.21.0;s;85pkt 85fpkt", shape=diamond, color=yellow];
1249[label="143.111.224.16;d;69pkt 69fpkt", shape=diamond, color=yellow];
1359[label="137.236.212.117;d;11pkt 11fpkt", shape=diamond, color=yellow];
1360[label="217.236.29.50;s;6pkt 6fpkt", shape=diamond, color=yellow];
1412[label="143.111.50.65;d;72pkt 72fpkt", shape=diamond, color=yellow];
1532[label="143.110.248.22;d;59pkt 59fpkt", shape=diamond, color=yellow];
1569[label="48.4.134.136;s;8pkt 8fpkt", shape=diamond, color=yellow];
1634[label="50.191.204.83;s;31pkt 31fpkt", shape=diamond, color=yellow];
1810[label="194.54.161.118;s;1pkt 1fpkt", shape=diamond, color=yellow];
1827[label="143.110.186.73;d;125pkt 125fpkt", shape=diamond, color=yellow];
2144[label="137.37.154.179;d;45pkt 45fpkt", shape=hexagon, color=black];
2210[label="219.52.135.182;s;2pkt 2fpkt", shape=hexagon, color=black];
2276[label="143.111.224.16;d;66pkt 66fpkt", shape=hexagon, color=black];
2810[label="213.217.9.22;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2831[label="50.191.204.25;68pkt 68fpkt", shape=pentagon, color=darkviolet];
2908[label="213.217.8.41;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2971[label="49.241.160.50;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3098[label="219.132.18.71;18pkt 18fpkt", shape=pentagon, color=darkviolet];
3169[label="50.191.204.83;32pkt 32fpkt", shape=pentagon, color=darkviolet];
3210[label="194.195.134.89;23pkt 23fpkt", shape=pentagon, color=darkviolet];
3233[label="194.195.134.94;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3286[label="194.195.134.105;16pkt 16fpkt", shape=pentagon, color=darkviolet];
3335[label="201.78.86.115;48pkt 48fpkt", shape=pentagon, color=darkviolet];
3355[label="50.191.204.119;30pkt 30fpkt", shape=pentagon, color=darkviolet];
3416[label="201.208.242.129;48pkt 48fpkt", shape=pentagon, color=darkviolet];
3443[label="48.4.134.133;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3673[label="219.52.135.182;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3675[label="201.66.195.183;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3875[label="34.178.9.225;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4098[label="213.217.8.41;9pkt 9fpkt", shape=invtriangle, color=brown];
4240[label="50.191.204.83;32pkt 32fpkt", shape=invtriangle, color=brown];
4262[label="194.195.134.89;23pkt 23fpkt", shape=invtriangle, color=brown];
4300[label="194.195.134.105;15pkt 15fpkt", shape=invtriangle, color=brown];
4511[label="219.52.135.182;1pkt 1fpkt", shape=invtriangle, color=brown];
4513[label="201.66.195.183;9pkt 9fpkt", shape=invtriangle, color=brown];
4620[label="34.178.9.225;7pkt 7fpkt", shape=invtriangle, color=brown];
4709[label="213.217.8.41;9pkt 9fpkt", shape=invhouse, color=bisque];
4771[label="194.195.134.89;24pkt 24fpkt", shape=invhouse, color=bisque];
4787[label="194.195.134.105;15pkt 15fpkt", shape=invhouse, color=bisque];
4873[label="219.52.135.182;1pkt 1fpkt", shape=invhouse, color=bisque];
4914[label="34.178.9.225;7pkt 7fpkt", shape=invhouse, color=bisque];
stat567[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 143.111.40.253:*}[23.7522%]&lt;BR/&gt;{50.191.204.91:80, *:*}[23.7522%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.5122%)&lt;BR/&gt; 443: (1.60976%)&lt;BR/&gt; 1863: (1.14634%)&lt;BR/&gt; 1024: (0.292683%)&lt;BR/&gt; 53: (0.292683%)&gt;];
}
754--1026[label="1;3pkt 3fpkt"];
754--1073[label="0.0444444;2pkt 2fpkt"];
754--2144[label="1;45pkt 45fpkt"];
754--2831[label="0.622222;28pkt 28fpkt"];
881--909[label="0.0486111;14pkt 14fpkt"];
881--2218[label="0.0416667;12pkt 12fpkt"];
881--2396[label="0.0347222;10pkt 10fpkt"];
881--2614[label="0.042735;10pkt 10fpkt"];
881--2737[label="0.147059;5pkt 5fpkt"];
881--3210[label="0.73913;17pkt 17fpkt"];
881--3233[label="0.588235;10pkt 10fpkt"];
881--3290[label="0.0520833;15pkt 15fpkt"];
881--3335[label="1;48pkt 48fpkt"];
881--3416[label="1;48pkt 48fpkt"];
881--3477[label="0.0333333;1pkt 1fpkt"];
881--3895[label="0.0169492;1pkt 1fpkt"];
881--4262[label="0.73913;17pkt 17fpkt"];
881--4304[label="0.0520833;15pkt 15fpkt"];
881--4402[label="0.0344828;1pkt 1fpkt"];
881--4771[label="0.708333;17pkt 17fpkt"];
881--4789[label="0.0520833;15pkt 15fpkt"];
932--1007[label="0.0392157;4pkt 4fpkt"];
932--1095[label="1;2pkt 2fpkt"];
932--1810[label="1;1pkt 1fpkt"];
932--2210[label="1;2pkt 2fpkt"];
932--2971[label="0.352941;6pkt 6fpkt"];
932--3098[label="0.5;9pkt 9fpkt"];
932--3440[label="0.12069;7pkt 7fpkt"];
932--3673[label="1;1pkt 1fpkt"];
932--4511[label="1;1pkt 1fpkt"];
932--4626[label="0.0277778;1pkt 1fpkt"];
932--4873[label="1;1pkt 1fpkt"];
1026--2144[label="1;3pkt 3fpkt"];
1072--1073[label="0.608696;140pkt 140fpkt"];
1072--2092[label="0.00434783;1pkt 1fpkt"];
1072--2971[label="0.647059;11pkt 11fpkt"];
1072--3051[label="0.00434783;1pkt 1fpkt"];
1072--3210[label="0.217391;5pkt 5fpkt"];
1072--3355[label="1;30pkt 30fpkt"];
1072--3675[label="1;8pkt 8fpkt"];
1072--4262[label="0.217391;5pkt 5fpkt"];
1072--4513[label="1;9pkt 9fpkt"];
1072--4771[label="0.25;6pkt 6fpkt"];
1073--1827[label="0.688;86pkt 86fpkt"];
1073--2144[label="0.0444444;2pkt 2fpkt"];
1073--2161[label="0.00362319;1pkt 1fpkt"];
1095--2210[label="1;2pkt 2fpkt"];
1095--3673[label="1;1pkt 1fpkt"];
1095--4511[label="1;1pkt 1fpkt"];
1095--4873[label="1;1pkt 1fpkt"];
1170--1249[label="0.594203;41pkt 41fpkt"];
1170--1412[label="0.597222;43pkt 43fpkt"];
1170--2075[label="0.0117647;1pkt 1fpkt"];
1170--2276[label="0.621212;41pkt 41fpkt"];
1249--1976[label="0.0144928;1pkt 1fpkt"];
1249--2206[label="0.0144928;1pkt 1fpkt"];
1249--2276[label="1;66pkt 66fpkt"];
1249--2616[label="0.0144928;1pkt 1fpkt"];
1249--2810[label="0.125;1pkt 1fpkt"];
1249--2842[label="0.0144928;1pkt 1fpkt"];
1249--2908[label="0.125;1pkt 1fpkt"];
1249--3098[label="0.277778;5pkt 5fpkt"];
1249--3374[label="0.0144928;1pkt 1fpkt"];
1249--3875[label="1;6pkt 6fpkt"];
1249--4098[label="0.111111;1pkt 1fpkt"];
1249--4620[label="1;7pkt 7fpkt"];
1249--4709[label="0.111111;1pkt 1fpkt"];
1249--4914[label="1;7pkt 7fpkt"];
1359--1360[label="1;6pkt 6fpkt"];
1359--3098[label="0.0909091;1pkt 1fpkt"];
1412--1429[label="0.125;9pkt 9fpkt"];
1412--2380[label="0.04;2pkt 2fpkt"];
1412--3319[label="0.125;9pkt 9fpkt"];
1532--1569[label="0.75;6pkt 6fpkt"];
1532--1634[label="0.16129;5pkt 5fpkt"];
1532--2206[label="0.0508475;3pkt 3fpkt"];
1532--2512[label="0.0338983;2pkt 2fpkt"];
1532--2644[label="0.0169492;1pkt 1fpkt"];
1532--3169[label="0.15625;5pkt 5fpkt"];
1532--3233[label="0.294118;5pkt 5fpkt"];
1532--3443[label="1;3pkt 3fpkt"];
1532--4240[label="0.15625;5pkt 5fpkt"];
1634--1682[label="0.0322581;1pkt 1fpkt"];
1634--2161[label="0.0322581;1pkt 1fpkt"];
1634--3169[label="0.967742;30pkt 30fpkt"];
1634--4240[label="0.967742;30pkt 30fpkt"];
1827--3286[label="1;16pkt 16fpkt"];
1827--4300[label="1;15pkt 15fpkt"];
1827--4787[label="1;15pkt 15fpkt"];
2144--2831[label="0.622222;28pkt 28fpkt"];
2210--3673[label="1;1pkt 1fpkt"];
2210--4511[label="1;1pkt 1fpkt"];
2210--4873[label="1;1pkt 1fpkt"];
2276--2616[label="0.0151515;1pkt 1fpkt"];
2276--2810[label="0.125;1pkt 1fpkt"];
2276--2842[label="0.0151515;1pkt 1fpkt"];
2276--2908[label="0.125;1pkt 1fpkt"];
2276--3098[label="0.277778;5pkt 5fpkt"];
2276--3374[label="0.0151515;1pkt 1fpkt"];
2276--3875[label="0.666667;4pkt 4fpkt"];
2276--4098[label="0.111111;1pkt 1fpkt"];
2276--4620[label="0.714286;5pkt 5fpkt"];
2276--4709[label="0.111111;1pkt 1fpkt"];
2276--4914[label="0.714286;5pkt 5fpkt"];
2908--4098[label="1;8pkt 8fpkt"];
2908--4709[label="1;8pkt 8fpkt"];
3169--4240[label="1;32pkt 32fpkt"];
3210--4262[label="1;23pkt 23fpkt"];
3210--4771[label="1;23pkt 23fpkt"];
3286--4300[label="1;15pkt 15fpkt"];
3286--4787[label="1;15pkt 15fpkt"];
3673--4511[label="1;1pkt 1fpkt"];
3673--4873[label="1;1pkt 1fpkt"];
3675--4513[label="1;8pkt 8fpkt"];
3875--4620[label="1;6pkt 6fpkt"];
3875--4914[label="1;6pkt 6fpkt"];
4098--4709[label="1;9pkt 9fpkt"];
4262--4771[label="1;23pkt 23fpkt"];
4300--4787[label="1;15pkt 15fpkt"];
4511--4873[label="1;1pkt 1fpkt"];
4620--4914[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter src_ip="50.191.204.91" src_port="80"/>
      <filter dst_ip="143.111.40.253" src_port="80"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.187.153.89"/>
    </slice>
    <from sec="1075698001" usec="0"/>
    <to sec="1075698447" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.29.242.93"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.120.113.94"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.3.39.95"/>
    </slice>
    <from sec="1075698029" usec="0"/>
    <to sec="1075698790" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.41.154.95"/>
    </slice>
    <from sec="1075698006" usec="0"/>
    <to sec="1075698038" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.217.12.96"/>
    </slice>
    <from sec="1075698005" usec="0"/>
    <to sec="1075698897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_576{
style=filled;
color=gray75;
3249[label="213.217.12.98;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4281[label="213.217.12.98;4pkt 4fpkt", shape=invtriangle, color=brown];
stat576[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.217.12.98:1863, 137.37.54.19:1289}[25%]&lt;BR/&gt;{213.217.12.98:1863, 148.180.20.137:1589}[25%]&lt;BR/&gt;{213.217.12.98:1863, 137.236.177.163:1132}[25%]&lt;BR/&gt;{213.217.12.98:1863, 137.37.25.229:1140}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1589: (12.5%)&lt;BR/&gt; 1289: (12.5%)&lt;BR/&gt; 1140: (12.5%)&lt;BR/&gt; 1132: (12.5%)&gt;];
}
3249--4281[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="137.37.25.229" dst_port="1140" src_ip="213.217.12.98" src_port="1863"/>
      <filter dst_ip="137.236.177.163" dst_port="1132" src_ip="213.217.12.98" src_port="1863"/>
      <filter dst_ip="148.180.20.137" dst_port="1589" src_ip="213.217.12.98" src_port="1863"/>
      <filter dst_ip="137.37.54.19" dst_port="1289" src_ip="213.217.12.98" src_port="1863"/>
    </slice>
    <from sec="1075698004" usec="0"/>
    <to sec="1075698765" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.797526,1.87935,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_577{
style=filled;
color=gray75;
3254[label="201.24.181.98;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4285[label="201.24.181.98;1pkt 1fpkt", shape=invtriangle, color=brown];
4781[label="201.24.181.98;1pkt 1fpkt", shape=invhouse, color=bisque];
stat577[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.24.181.98:80, 137.236.197.16:1386}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1386: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3254--4285[label="1;1pkt 1fpkt"];
3254--4781[label="1;1pkt 1fpkt"];
4285--4781[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="137.236.197.16" dst_port="1386" src_ip="201.24.181.98" src_port="80"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_578{
style=filled;
color=gray75;
3258[label="212.220.123.99;18pkt 18fpkt", shape=pentagon, color=darkviolet];
4286[label="212.220.123.99;18pkt 18fpkt", shape=invtriangle, color=brown];
stat578[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.220.123.99:80, 148.180.241.77:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1560: (2.77778%)&lt;BR/&gt; 1559: (2.77778%)&lt;BR/&gt; 1558: (2.77778%)&lt;BR/&gt; 1557: (2.77778%)&gt;];
}
3258--4286[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="148.180.241.77" src_ip="212.220.123.99" src_port="80"/>
    </slice>
    <from sec="1075698108" usec="0"/>
    <to sec="1075698900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_579{
style=filled;
color=gray75;
3262[label="213.217.9.100;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4287[label="213.217.9.100;5pkt 5fpkt", shape=invtriangle, color=brown];
stat579[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.217.9.100:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3055: (9.09091%)&lt;BR/&gt; 3017: (9.09091%)&lt;BR/&gt; 1062: (9.09091%)&lt;BR/&gt; 1038: (9.09091%)&gt;];
}
3262--4287[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="213.217.9.100" src_port="1863"/>
    </slice>
    <from sec="1075698004" usec="0"/>
    <to sec="1075698897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.239.96.101"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_581{
style=filled;
color=gray75;
3281[label="203.137.228.103;155pkt 155fpkt", shape=pentagon, color=darkviolet];
4298[label="203.137.228.103;154pkt 154fpkt", shape=invtriangle, color=brown];
stat581[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.137.228.103:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3281--4298[label="1;154pkt 154fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="203.137.228.103" src_port="1027"/>
    </slice>
    <from sec="1075698149" usec="0"/>
    <to sec="1075698164" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_582{
style=filled;
color=gray75;
2991[label="213.217.12.53;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4139[label="213.217.12.53;10pkt 10fpkt", shape=invtriangle, color=brown];
stat582[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.217.12.53:1863, 208.47.120.36:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 65390: (5.26316%)&lt;BR/&gt; 65381: (5.26316%)&lt;BR/&gt; 52689: (5.26316%)&lt;BR/&gt; 4286: (5.26316%)&gt;];
}
2991--4139[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="208.47.120.36" src_ip="213.217.12.53" src_port="1863"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_583{
style=filled;
color=gray75;
3292[label="213.217.8.107;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4305[label="213.217.8.107;6pkt 6fpkt", shape=invtriangle, color=brown];
stat583[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.217.8.107:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4006: (8.33333%)&lt;BR/&gt; 2645: (8.33333%)&lt;BR/&gt; 1363: (8.33333%)&lt;BR/&gt; 1066: (8.33333%)&gt;];
}
3292--4305[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="213.217.8.107" src_port="1863"/>
    </slice>
    <from sec="1075698015" usec="0"/>
    <to sec="1075698900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.797526,1.87935,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_584{
style=filled;
color=gray75;
3293[label="49.107.104.107;12pkt 12fpkt", shape=pentagon, color=darkviolet];
4306[label="49.107.104.107;11pkt 11fpkt", shape=invtriangle, color=brown];
4790[label="49.107.104.107;12pkt 12fpkt", shape=invhouse, color=bisque];
stat584[shape=component, label=&lt;Rules:&lt;BR/&gt;{49.107.104.107:80, 148.180.252.74:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1145: (4.28571%)&lt;BR/&gt; 1144: (4.28571%)&lt;BR/&gt; 1141: (4.28571%)&lt;BR/&gt; 1140: (4.28571%)&gt;];
}
3293--4306[label="1;11pkt 11fpkt"];
3293--4790[label="1;12pkt 12fpkt"];
4306--4790[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="148.180.252.74" src_ip="49.107.104.107" src_port="80"/>
    </slice>
    <from sec="1075698223" usec="0"/>
    <to sec="1075698896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.797526,1.87935,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_585{
style=filled;
color=gray75;
3300[label="50.42.191.108;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4311[label="50.42.191.108;1pkt 1fpkt", shape=invtriangle, color=brown];
4792[label="50.42.191.108;1pkt 1fpkt", shape=invhouse, color=bisque];
stat585[shape=component, label=&lt;Rules:&lt;BR/&gt;{50.42.191.108:48987, 209.43.190.104:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 48987: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3300--4311[label="1;1pkt 1fpkt"];
3300--4792[label="1;1pkt 1fpkt"];
4311--4792[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.43.190.104" dst_port="80" src_ip="50.42.191.108" src_port="48987"/>
    </slice>
    <from sec="1075698249" usec="0"/>
    <to sec="1075698250" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.696243,1.84364,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_587{
style=filled;
color=gray75;
239[label="73.135.90.109s;162pkt 162fpkt", shape=rectangle, color=red];
3306[label="73.135.90.109;161pkt 161fpkt", shape=pentagon, color=darkviolet];
4313[label="73.135.90.109;161pkt 161fpkt", shape=invtriangle, color=brown];
stat587[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.135.90.109:63456, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63456: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
239--3306[label="0.993789;160pkt 160fpkt"];
239--4313[label="0.993789;160pkt 160fpkt"];
3306--4313[label="1;161pkt 161fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="73.135.90.109" src_port="63456"/>
    </slice>
    <from sec="1075698601" usec="0"/>
    <to sec="1075698633" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="143.111.9.111"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.797526,1.87935,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_589{
style=filled;
color=gray75;
3310[label="49.113.164.111;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4316[label="49.113.164.111;1pkt 1fpkt", shape=invtriangle, color=brown];
4794[label="49.113.164.111;1pkt 1fpkt", shape=invhouse, color=bisque];
stat589[shape=component, label=&lt;Rules:&lt;BR/&gt;{49.113.164.111:80, 143.111.98.88:2764}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2764: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3310--4316[label="1;1pkt 1fpkt"];
3310--4794[label="1;1pkt 1fpkt"];
4316--4794[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.111.98.88" dst_port="2764" src_ip="49.113.164.111" src_port="80"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.797526,1.87935,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_590{
style=filled;
color=gray75;
3312[label="75.10.1.112;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4318[label="75.10.1.112;1pkt 1fpkt", shape=invtriangle, color=brown];
4795[label="75.10.1.112;1pkt 1fpkt", shape=invhouse, color=bisque];
stat590[shape=component, label=&lt;Rules:&lt;BR/&gt;{75.10.1.112:25, 162.159.28.55:3963}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3963: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
3312--4318[label="1;1pkt 1fpkt"];
3312--4795[label="1;1pkt 1fpkt"];
4318--4795[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.159.28.55" dst_port="3963" src_ip="75.10.1.112" src_port="25"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.797526,1.87935,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_591{
style=filled;
color=gray75;
3320[label="213.217.8.113;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4322[label="213.217.8.113;8pkt 8fpkt", shape=invtriangle, color=brown];
4797[label="213.217.8.113;9pkt 9fpkt", shape=invhouse, color=bisque];
stat591[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.217.8.113:1863, 143.111.48.186:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3351: (6%)&lt;BR/&gt; 3021: (6%)&lt;BR/&gt; 2594: (6%)&lt;BR/&gt; 2592: (6%)&gt;];
}
3320--4322[label="1;8pkt 8fpkt"];
3320--4797[label="1;8pkt 8fpkt"];
4322--4797[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="143.111.48.186" src_ip="213.217.8.113" src_port="1863"/>
    </slice>
    <from sec="1075698005" usec="0"/>
    <to sec="1075698897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_592{
style=filled;
color=gray75;
3326[label="213.217.12.114;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4326[label="213.217.12.114;6pkt 6fpkt", shape=invtriangle, color=brown];
stat592[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.217.12.114:1863, 137.236.186.233:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 49264: (9.09091%)&lt;BR/&gt; 49252: (9.09091%)&lt;BR/&gt; 2656: (9.09091%)&lt;BR/&gt; 1955: (9.09091%)&gt;];
}
3326--4326[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="137.236.186.233" src_ip="213.217.12.114" src_port="1863"/>
    </slice>
    <from sec="1075698118" usec="0"/>
    <to sec="1075698898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11702,1.79355,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_593{
style=filled;
color=gray75;
1067[label="208.47.118.75;d;72pkt 72fpkt", shape=diamond, color=yellow];
1212[label="203.171.64.164;s;10pkt 10fpkt", shape=diamond, color=yellow];
2274[label="208.47.118.75;d;53pkt 53fpkt", shape=hexagon, color=black];
3331[label="73.91.170.114;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3586[label="203.171.64.164;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4328[label="73.91.170.114;17pkt 17fpkt", shape=invtriangle, color=brown];
4458[label="203.171.64.164;9pkt 9fpkt", shape=invtriangle, color=brown];
4849[label="203.171.64.164;10pkt 10fpkt", shape=invhouse, color=bisque];
stat593[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.91.170.114:*, 208.47.118.75:80}[21.9178%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.0863%)&lt;BR/&gt; 53: (10.4061%)&lt;BR/&gt; 1035: (4.56853%)&lt;BR/&gt; 65105: (1.52284%)&lt;BR/&gt; 65104: (1.52284%)&gt;];
}
1067--1212[label="1;10pkt 10fpkt"];
1067--1414[label="0.0138889;1pkt 1fpkt"];
1067--1439[label="0.0138889;1pkt 1fpkt"];
1067--2223[label="0.0138889;1pkt 1fpkt"];
1067--2274[label="1;53pkt 53fpkt"];
1067--2644[label="0.0555556;4pkt 4fpkt"];
1067--2645[label="0.0416667;3pkt 3fpkt"];
1067--3331[label="0.941176;16pkt 16fpkt"];
1067--3586[label="1;9pkt 9fpkt"];
1067--4328[label="0.941176;16pkt 16fpkt"];
1067--4458[label="1;9pkt 9fpkt"];
1067--4849[label="1;10pkt 10fpkt"];
1212--2274[label="1;10pkt 10fpkt"];
1212--3586[label="1;9pkt 9fpkt"];
1212--4458[label="1;9pkt 9fpkt"];
1212--4849[label="1;10pkt 10fpkt"];
2274--2644[label="0.0754717;4pkt 4fpkt"];
2274--2645[label="0.0566038;3pkt 3fpkt"];
2274--3586[label="1;9pkt 9fpkt"];
2274--4458[label="1;9pkt 9fpkt"];
2274--4849[label="1;10pkt 10fpkt"];
3331--4328[label="1;17pkt 17fpkt"];
3586--4458[label="1;9pkt 9fpkt"];
3586--4849[label="1;9pkt 9fpkt"];
4458--4849[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="208.47.118.75" dst_port="80" src_ip="73.91.170.114"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04711,1.7561,503,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_594{
style=filled;
color=gray75;
153[label="143.111.202.1s;67pkt 67fpkt", shape=rectangle, color=red];
1449[label="201.78.162.12;d;262pkt 262fpkt", shape=diamond, color=yellow];
1490[label="143.111.50.197;s;92pkt 92fpkt", shape=diamond, color=yellow];
1687[label="219.103.243.185;d;14pkt 14fpkt", shape=diamond, color=yellow];
1862[label="143.111.18.12;s;29pkt 29fpkt", shape=diamond, color=yellow];
2368[label="143.111.50.197;s;92pkt 92fpkt", shape=hexagon, color=black];
2670[label="143.111.202.1;70pkt 70fpkt", shape=pentagon, color=darkviolet];
3345[label="143.111.67.117;44pkt 44fpkt", shape=pentagon, color=darkviolet];
3731[label="143.111.50.197;122pkt 122fpkt", shape=pentagon, color=darkviolet];
4335[label="143.111.67.117;45pkt 45fpkt", shape=invtriangle, color=brown];
4546[label="143.111.50.197;121pkt 121fpkt", shape=invtriangle, color=brown];
stat594[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.50.197:*, 201.78.162.12:80}[30.303%]&lt;BR/&gt;{143.111.202.1:*, 201.78.162.12:80}[20.303%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8434%)&lt;BR/&gt; 4037: (0.26096%)&lt;BR/&gt; 4036: (0.26096%)&lt;BR/&gt; 4035: (0.26096%)&lt;BR/&gt; 4033: (0.26096%)&gt;];
}
153--1449[label="1;67pkt 67fpkt"];
153--2670[label="1;67pkt 67fpkt"];
1449--1490[label="0.847826;78pkt 78fpkt"];
1449--1862[label="0.275862;8pkt 8fpkt"];
1449--1949[label="0.00763359;2pkt 2fpkt"];
1449--2368[label="0.847826;78pkt 78fpkt"];
1449--2644[label="0.0687023;18pkt 18fpkt"];
1449--2645[label="0.0267176;7pkt 7fpkt"];
1449--2670[label="0.957143;67pkt 67fpkt"];
1449--3270[label="0.00763359;2pkt 2fpkt"];
1449--3345[label="1;44pkt 44fpkt"];
1449--3731[label="0.639344;78pkt 78fpkt"];
1449--4335[label="1;45pkt 45fpkt"];
1449--4546[label="0.644628;78pkt 78fpkt"];
1490--1687[label="1;14pkt 14fpkt"];
1490--2368[label="1;92pkt 92fpkt"];
1490--2645[label="0.163043;15pkt 15fpkt"];
1490--3731[label="1;92pkt 92fpkt"];
1490--4546[label="1;92pkt 92fpkt"];
1687--2368[label="1;14pkt 14fpkt"];
1687--2645[label="0.571429;8pkt 8fpkt"];
1687--3731[label="1;14pkt 14fpkt"];
1687--4546[label="1;14pkt 14fpkt"];
2368--2645[label="0.163043;15pkt 15fpkt"];
2368--3731[label="1;92pkt 92fpkt"];
2368--4546[label="1;92pkt 92fpkt"];
3345--4335[label="1;44pkt 44fpkt"];
3731--4546[label="1;121pkt 121fpkt"];
</description>
    <slice>
      <filter dst_ip="201.78.162.12" dst_port="80" src_ip="143.111.50.197"/>
      <filter dst_ip="201.78.162.12" dst_port="80" src_ip="143.111.202.1"/>
    </slice>
    <from sec="1075698002" usec="0"/>
    <to sec="1075698895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_595{
style=filled;
color=gray75;
3356[label="213.217.9.120;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4338[label="213.217.9.120;6pkt 6fpkt", shape=invtriangle, color=brown];
stat595[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.217.9.120:1863, 143.111.48.184:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 33194: (9.09091%)&lt;BR/&gt; 28243: (9.09091%)&lt;BR/&gt; 4346: (9.09091%)&lt;BR/&gt; 1118: (9.09091%)&gt;];
}
3356--4338[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="143.111.48.184" src_ip="213.217.9.120" src_port="1863"/>
    </slice>
    <from sec="1075698024" usec="0"/>
    <to sec="1075698898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="143.111.50.120"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.27.128.120"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_598{
style=filled;
color=gray75;
3362[label="201.24.169.120;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4341[label="201.24.169.120;1pkt 1fpkt", shape=invtriangle, color=brown];
stat598[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.24.169.120:80, 164.229.26.161:2155}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2155: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3362--4341[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.229.26.161" dst_port="2155" src_ip="201.24.169.120" src_port="80"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.797526,1.87935,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_599{
style=filled;
color=gray75;
3368[label="213.217.225.121;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4347[label="213.217.225.121;1pkt 1fpkt", shape=invtriangle, color=brown];
4808[label="213.217.225.121;1pkt 1fpkt", shape=invhouse, color=bisque];
stat599[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.217.225.121:80, 209.36.17.163:49114}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49114: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3368--4347[label="1;1pkt 1fpkt"];
3368--4808[label="1;1pkt 1fpkt"];
4347--4808[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.36.17.163" dst_port="49114" src_ip="213.217.225.121" src_port="80"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915476,1.83779,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_601{
style=filled;
color=gray75;
256[label="49.67.84.123s;93pkt 93fpkt", shape=rectangle, color=red];
3383[label="49.67.84.123;107pkt 107fpkt", shape=pentagon, color=darkviolet];
4358[label="49.67.84.123;107pkt 107fpkt", shape=invtriangle, color=brown];
4813[label="49.67.84.123;107pkt 107fpkt", shape=invhouse, color=bisque];
stat601[shape=component, label=&lt;Rules:&lt;BR/&gt;{49.67.84.123:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
256--3383[label="0.989247;92pkt 92fpkt"];
256--4358[label="0.989247;92pkt 92fpkt"];
256--4813[label="0.989247;92pkt 92fpkt"];
3383--4358[label="1;107pkt 107fpkt"];
3383--4813[label="1;107pkt 107fpkt"];
4358--4813[label="1;107pkt 107fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="49.67.84.123" src_port="1028"/>
    </slice>
    <from sec="1075698472" usec="0"/>
    <to sec="1075698490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_602{
style=filled;
color=gray75;
3404[label="213.217.8.128;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4365[label="213.217.8.128;1pkt 1fpkt", shape=invtriangle, color=brown];
stat602[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.217.8.128:1863, 137.37.25.195:3786}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3786: (50%)&lt;BR/&gt; 1863: (50%)&gt;];
}
3404--4365[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="137.37.25.195" dst_port="3786" src_ip="213.217.8.128" src_port="1863"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="75.11.77.128"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.797526,1.87935,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_604{
style=filled;
color=gray75;
3434[label="213.217.210.131;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4380[label="213.217.210.131;4pkt 4fpkt", shape=invtriangle, color=brown];
4822[label="213.217.210.131;4pkt 4fpkt", shape=invhouse, color=bisque];
stat604[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.217.210.131:80, 209.43.184.205:1087}[25%]&lt;BR/&gt;{213.217.210.131:80, 209.43.184.205:1089}[25%]&lt;BR/&gt;{213.217.210.131:80, 209.43.184.205:1090}[25%]&lt;BR/&gt;{213.217.210.131:80, 209.43.184.205:1100}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1100: (12.5%)&lt;BR/&gt; 1090: (12.5%)&lt;BR/&gt; 1089: (12.5%)&lt;BR/&gt; 1087: (12.5%)&gt;];
}
3434--4380[label="1;4pkt 4fpkt"];
3434--4822[label="1;4pkt 4fpkt"];
4380--4822[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="209.43.184.205" dst_port="1100" src_ip="213.217.210.131" src_port="80"/>
      <filter dst_ip="209.43.184.205" dst_port="1090" src_ip="213.217.210.131" src_port="80"/>
      <filter dst_ip="209.43.184.205" dst_port="1089" src_ip="213.217.210.131" src_port="80"/>
      <filter dst_ip="209.43.184.205" dst_port="1087" src_ip="213.217.210.131" src_port="80"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="73.238.236.131"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="143.111.247.131"/>
    </slice>
    <from sec="1075698019" usec="0"/>
    <to sec="1075698897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_607{
style=filled;
color=gray75;
3451[label="50.191.50.135;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4388[label="50.191.50.135;4pkt 4fpkt", shape=invtriangle, color=brown];
stat607[shape=component, label=&lt;Rules:&lt;BR/&gt;{50.191.50.135:80, 148.180.233.43:3282}[25%]&lt;BR/&gt;{50.191.50.135:80, 148.180.233.43:3283}[25%]&lt;BR/&gt;{50.191.50.135:80, 148.180.166.188:39332}[25%]&lt;BR/&gt;{50.191.50.135:80, 148.180.166.188:39333}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 39333: (12.5%)&lt;BR/&gt; 39332: (12.5%)&lt;BR/&gt; 3283: (12.5%)&lt;BR/&gt; 3282: (12.5%)&gt;];
}
3451--4388[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="148.180.166.188" dst_port="39333" src_ip="50.191.50.135" src_port="80"/>
      <filter dst_ip="148.180.166.188" dst_port="39332" src_ip="50.191.50.135" src_port="80"/>
      <filter dst_ip="148.180.233.43" dst_port="3283" src_ip="50.191.50.135" src_port="80"/>
      <filter dst_ip="148.180.233.43" dst_port="3282" src_ip="50.191.50.135" src_port="80"/>
    </slice>
    <from sec="1075698425" usec="0"/>
    <to sec="1075698770" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_609{
style=filled;
color=gray75;
3461[label="34.105.169.136;59pkt 59fpkt", shape=pentagon, color=darkviolet];
4394[label="34.105.169.136;58pkt 58fpkt", shape=invtriangle, color=brown];
stat609[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.105.169.136:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4825: (0.854701%)&lt;BR/&gt; 4593: (0.854701%)&lt;BR/&gt; 4572: (0.854701%)&lt;BR/&gt; 4568: (0.854701%)&gt;];
}
3461--4394[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="34.105.169.136"/>
    </slice>
    <from sec="1075698011" usec="0"/>
    <to sec="1075698898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_610{
style=filled;
color=gray75;
3463[label="209.36.48.137;190pkt 190fpkt", shape=pentagon, color=darkviolet];
4395[label="209.36.48.137;189pkt 189fpkt", shape=invtriangle, color=brown];
stat610[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.36.48.137:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3463--4395[label="1;189pkt 189fpkt"];
</description>
    <slice>
      <filter src_ip="209.36.48.137"/>
    </slice>
    <from sec="1075698013" usec="0"/>
    <to sec="1075698894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.797526,1.87935,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_611{
style=filled;
color=gray75;
3464[label="50.50.65.137;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4396[label="50.50.65.137;1pkt 1fpkt", shape=invtriangle, color=brown];
4829[label="50.50.65.137;1pkt 1fpkt", shape=invhouse, color=bisque];
stat611[shape=component, label=&lt;Rules:&lt;BR/&gt;{50.50.65.137:80, 209.36.37.96:21232}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21232: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3464--4396[label="1;1pkt 1fpkt"];
3464--4829[label="1;1pkt 1fpkt"];
4396--4829[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.36.37.96" dst_port="21232" src_ip="50.50.65.137" src_port="80"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.139.87.137"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="51.67.204.137"/>
    </slice>
    <from sec="1075698063" usec="0"/>
    <to sec="1075698855" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.797526,1.87935,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_615{
style=filled;
color=gray75;
3489[label="49.46.79.142;86pkt 86fpkt", shape=pentagon, color=darkviolet];
4407[label="49.46.79.142;85pkt 85fpkt", shape=invtriangle, color=brown];
4832[label="49.46.79.142;85pkt 85fpkt", shape=invhouse, color=bisque];
stat615[shape=component, label=&lt;Rules:&lt;BR/&gt;{49.46.79.142:*, *:445}[51.1628%]&lt;BR/&gt;{49.46.79.142:*, *:135}[48.8372%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.7812%)&lt;BR/&gt; 135: (24.2188%)&lt;BR/&gt; 4368: (1.17188%)&lt;BR/&gt; 4316: (1.17188%)&lt;BR/&gt; 3830: (1.17188%)&gt;];
}
3489--4407[label="1;85pkt 85fpkt"];
3489--4832[label="1;85pkt 85fpkt"];
4407--4832[label="1;85pkt 85fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="49.46.79.142"/>
      <filter dst_port="135" src_ip="49.46.79.142"/>
    </slice>
    <from sec="1075698005" usec="0"/>
    <to sec="1075698897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_616{
style=filled;
color=gray75;
3496[label="193.60.46.143;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4411[label="193.60.46.143;2pkt 2fpkt", shape=invtriangle, color=brown];
stat616[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.60.46.143:80, 143.111.46.108:2199}[50%]&lt;BR/&gt;{193.60.46.143:80, 164.133.137.116:3197}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3197: (33.3333%)&lt;BR/&gt; 2199: (16.6667%)&gt;];
}
3496--4411[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.133.137.116" dst_port="3197" src_ip="193.60.46.143" src_port="80"/>
      <filter dst_ip="143.111.46.108" dst_port="2199" src_ip="193.60.46.143" src_port="80"/>
    </slice>
    <from sec="1075698162" usec="0"/>
    <to sec="1075698896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_617{
style=filled;
color=gray75;
3499[label="48.73.98.143;103pkt 103fpkt", shape=pentagon, color=darkviolet];
4412[label="48.73.98.143;102pkt 102fpkt", shape=invtriangle, color=brown];
stat617[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.73.98.143:0, *:0}[96.1165%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.0976%)&lt;BR/&gt; 135: (1.46341%)&lt;BR/&gt; 55423: (0.487805%)&lt;BR/&gt; 54361: (0.487805%)&lt;BR/&gt; 50537: (0.487805%)&gt;];
}
3499--4412[label="1;102pkt 102fpkt"];
</description>
    <slice>
      <filter src_ip="48.73.98.143"/>
    </slice>
    <from sec="1075698059" usec="0"/>
    <to sec="1075698881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_618{
style=filled;
color=gray75;
3503[label="52.184.116.144;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4414[label="52.184.116.144;3pkt 3fpkt", shape=invtriangle, color=brown];
stat618[shape=component, label=&lt;Rules:&lt;BR/&gt;{52.184.116.144:80, 209.36.37.67:3805}[33.3333%]&lt;BR/&gt;{52.184.116.144:80, 209.36.37.67:3806}[33.3333%]&lt;BR/&gt;{52.184.116.144:80, 209.36.37.67:3867}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3867: (16.6667%)&lt;BR/&gt; 3806: (16.6667%)&lt;BR/&gt; 3805: (16.6667%)&gt;];
}
3503--4414[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="209.36.37.67" dst_port="3867" src_ip="52.184.116.144" src_port="80"/>
      <filter dst_ip="209.36.37.67" dst_port="3806" src_ip="52.184.116.144" src_port="80"/>
      <filter dst_ip="209.36.37.67" dst_port="3805" src_ip="52.184.116.144" src_port="80"/>
    </slice>
    <from sec="1075698828" usec="0"/>
    <to sec="1075698863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.942603,1.83268,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_619{
style=filled;
color=gray75;
795[label="164.229.177.17;d;72pkt 72fpkt", shape=diamond, color=yellow];
974[label="197.174.151.223;s;12pkt 12fpkt", shape=diamond, color=yellow];
3513[label="197.174.172.147;37pkt 37fpkt", shape=pentagon, color=darkviolet];
3865[label="197.174.151.223;13pkt 13fpkt", shape=pentagon, color=darkviolet];
4420[label="197.174.172.147;37pkt 37fpkt", shape=invtriangle, color=brown];
4837[label="197.174.172.147;37pkt 37fpkt", shape=invhouse, color=bisque];
stat619[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.174.172.147:80, 164.229.177.17:*}[49.3506%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7596%)&lt;BR/&gt; 3488: (0.961538%)&lt;BR/&gt; 3487: (0.961538%)&lt;BR/&gt; 3480: (0.961538%)&lt;BR/&gt; 3479: (0.961538%)&gt;];
}
795--946[label="0.0277778;2pkt 2fpkt"];
795--974[label="1;12pkt 12fpkt"];
795--1133[label="0.0277778;2pkt 2fpkt"];
795--1977[label="0.0138889;1pkt 1fpkt"];
795--2512[label="0.0277778;2pkt 2fpkt"];
795--2686[label="0.0487805;2pkt 2fpkt"];
795--3513[label="0.891892;33pkt 33fpkt"];
795--3784[label="0.0138889;1pkt 1fpkt"];
795--3865[label="0.923077;12pkt 12fpkt"];
795--4420[label="0.891892;33pkt 33fpkt"];
795--4837[label="0.891892;33pkt 33fpkt"];
974--3865[label="1;12pkt 12fpkt"];
3513--4420[label="1;37pkt 37fpkt"];
3513--4837[label="1;37pkt 37fpkt"];
4420--4837[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_ip="164.229.177.17" src_ip="197.174.172.147" src_port="80"/>
    </slice>
    <from sec="1075698001" usec="0"/>
    <to sec="1075698811" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_620{
style=filled;
color=gray75;
3514[label="203.25.5.148;233pkt 233fpkt", shape=pentagon, color=darkviolet];
4421[label="203.25.5.148;233pkt 233fpkt", shape=invtriangle, color=brown];
stat620[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.25.5.148:10191, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10191: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3514--4421[label="1;233pkt 233fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="203.25.5.148" src_port="10191"/>
    </slice>
    <from sec="1075698587" usec="0"/>
    <to sec="1075698635" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="143.111.48.148"/>
    </slice>
    <from sec="1075698001" usec="0"/>
    <to sec="1075698896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_622{
style=filled;
color=gray75;
3521[label="143.111.232.148;11pkt 11fpkt", shape=pentagon, color=darkviolet];
4424[label="143.111.232.148;11pkt 11fpkt", shape=invtriangle, color=brown];
stat622[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.232.148:*, 213.217.133.233:80}[27.2727%]&lt;BR/&gt;{143.111.232.148:*, *:1863}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.8182%)&lt;BR/&gt; 1863: (13.6364%)&lt;BR/&gt; 33699: (4.54545%)&lt;BR/&gt; 33643: (4.54545%)&lt;BR/&gt; 33587: (4.54545%)&gt;];
}
3521--4424[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_port="1863" src_ip="143.111.232.148"/>
      <filter dst_ip="213.217.133.233" dst_port="80" src_ip="143.111.232.148"/>
    </slice>
    <from sec="1075698026" usec="0"/>
    <to sec="1075698872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.141.28.150"/>
    </slice>
    <from sec="1075698039" usec="0"/>
    <to sec="1075698898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.173.42.152"/>
    </slice>
    <from sec="1075698034" usec="0"/>
    <to sec="1075698900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_625{
style=filled;
color=gray75;
3562[label="143.111.86.158;38pkt 38fpkt", shape=pentagon, color=darkviolet];
4443[label="143.111.86.158;38pkt 38fpkt", shape=invtriangle, color=brown];
stat625[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.86.158:*, *:80}[50%]&lt;BR/&gt;{143.111.86.158:*, 196.129.163.168:110}[39.4737%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 110: (19.7368%)&lt;BR/&gt; 5190: (2.63158%)&lt;BR/&gt; 53095: (1.31579%)&lt;BR/&gt; 53094: (1.31579%)&gt;];
}
3562--4443[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="143.111.86.158"/>
      <filter dst_ip="196.129.163.168" dst_port="110" src_ip="143.111.86.158"/>
    </slice>
    <from sec="1075698009" usec="0"/>
    <to sec="1075698885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_626{
style=filled;
color=gray75;
3575[label="209.43.187.161;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4452[label="209.43.187.161;5pkt 5fpkt", shape=invtriangle, color=brown];
stat626[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.43.187.161:0, 110.174.138.20:0}[20%]&lt;BR/&gt;{209.43.187.161:0, 203.14.163.68:0}[20%]&lt;BR/&gt;{209.43.187.161:1779, 49.113.136.143:80}[20%]&lt;BR/&gt;{209.43.187.161:1456, 49.113.170.48:80}[20%]&lt;BR/&gt;{209.43.187.161:1787, 49.113.170.48:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 0: (33.3333%)&lt;BR/&gt; 1787: (11.1111%)&lt;BR/&gt; 1779: (11.1111%)&lt;BR/&gt; 1456: (11.1111%)&gt;];
}
3575--4452[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="49.113.170.48" dst_port="80" src_ip="209.43.187.161" src_port="1787"/>
      <filter dst_ip="49.113.170.48" dst_port="80" src_ip="209.43.187.161" src_port="1456"/>
      <filter dst_ip="49.113.136.143" dst_port="80" src_ip="209.43.187.161" src_port="1779"/>
      <filter dst_ip="203.14.163.68" src_ip="209.43.187.161"/>
      <filter dst_ip="110.174.138.20" src_ip="209.43.187.161"/>
    </slice>
    <from sec="1075698166" usec="0"/>
    <to sec="1075698639" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915476,1.83779,503,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_627{
style=filled;
color=gray75;
161[label="143.111.82.162s;8pkt 8fpkt", shape=rectangle, color=red];
3579[label="143.111.82.162;22pkt 22fpkt", shape=pentagon, color=darkviolet];
4454[label="143.111.82.162;23pkt 23fpkt", shape=invtriangle, color=brown];
4847[label="143.111.82.162;23pkt 23fpkt", shape=invhouse, color=bisque];
stat627[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.82.162:*, 49.113.154.145:80}[70.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1429: (2.63158%)&lt;BR/&gt; 1428: (2.63158%)&lt;BR/&gt; 1425: (2.63158%)&lt;BR/&gt; 1424: (2.63158%)&gt;];
}
161--647[label="0.125;1pkt 1fpkt"];
161--1122[label="0.125;1pkt 1fpkt"];
161--1960[label="0.125;1pkt 1fpkt"];
161--3579[label="0.875;7pkt 7fpkt"];
161--4454[label="0.875;7pkt 7fpkt"];
161--4847[label="0.875;7pkt 7fpkt"];
3579--4454[label="1;22pkt 22fpkt"];
3579--4847[label="1;22pkt 22fpkt"];
4454--4847[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="49.113.154.145" dst_port="80" src_ip="143.111.82.162"/>
    </slice>
    <from sec="1075698812" usec="0"/>
    <to sec="1075698880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.192.144.163"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_629{
style=filled;
color=gray75;
3592[label="208.117.157.165;88pkt 88fpkt", shape=pentagon, color=darkviolet];
4463[label="208.117.157.165;88pkt 88fpkt", shape=invtriangle, color=brown];
stat629[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.117.157.165:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4861: (1.13636%)&lt;BR/&gt; 4436: (1.13636%)&lt;BR/&gt; 4089: (1.13636%)&lt;BR/&gt; 4981: (0.568182%)&gt;];
}
3592--4463[label="1;88pkt 88fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="208.117.157.165"/>
    </slice>
    <from sec="1075698018" usec="0"/>
    <to sec="1075698890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.731545,1.83855,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_631{
style=filled;
color=gray75;
1777[label="137.236.212.10;d;91pkt 91fpkt", shape=diamond, color=yellow];
3053[label="203.11.181.64;51pkt 51fpkt", shape=pentagon, color=darkviolet];
3602[label="73.238.249.166;34pkt 34fpkt", shape=pentagon, color=darkviolet];
4169[label="203.11.181.64;52pkt 52fpkt", shape=invtriangle, color=brown];
4469[label="73.238.249.166;33pkt 33fpkt", shape=invtriangle, color=brown];
stat631[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.11.181.64:80, 137.236.212.10:*}[39.6226%]&lt;BR/&gt;{73.238.249.166:80, 137.236.212.10:*}[32.0755%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.0421%)&lt;BR/&gt; 4201: (0.574713%)&lt;BR/&gt; 4200: (0.574713%)&lt;BR/&gt; 4199: (0.574713%)&lt;BR/&gt; 4198: (0.574713%)&gt;];
}
1777--3053[label="0.745098;38pkt 38fpkt"];
1777--3602[label="0.970588;33pkt 33fpkt"];
1777--4169[label="0.730769;38pkt 38fpkt"];
1777--4469[label="0.969697;32pkt 32fpkt"];
3053--4169[label="1;51pkt 51fpkt"];
3602--4469[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="137.236.212.10" src_ip="203.11.181.64" src_port="80"/>
      <filter dst_ip="137.236.212.10" src_ip="73.238.249.166" src_port="80"/>
    </slice>
    <from sec="1075698010" usec="0"/>
    <to sec="1075698895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.149.63.167"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_634{
style=filled;
color=gray75;
3608[label="73.250.56.168;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4472[label="73.250.56.168;2pkt 2fpkt", shape=invtriangle, color=brown];
stat634[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.250.56.168:80, 148.180.128.164:1168}[50%]&lt;BR/&gt;{73.250.56.168:80, 148.180.128.164:1169}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1169: (25%)&lt;BR/&gt; 1168: (25%)&gt;];
}
3608--4472[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="148.180.128.164" dst_port="1169" src_ip="73.250.56.168" src_port="80"/>
      <filter dst_ip="148.180.128.164" dst_port="1168" src_ip="73.250.56.168" src_port="80"/>
    </slice>
    <from sec="1075698147" usec="0"/>
    <to sec="1075698159" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_636{
style=filled;
color=gray75;
3616[label="197.51.155.169;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4476[label="197.51.155.169;4pkt 4fpkt", shape=invtriangle, color=brown];
stat636[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.51.155.169:80, 162.159.13.25:2339}[25%]&lt;BR/&gt;{197.51.155.169:80, 209.36.37.67:3965}[25%]&lt;BR/&gt;{197.51.155.169:80, 209.36.37.67:3968}[25%]&lt;BR/&gt;{197.51.155.169:80, 209.36.37.67:3969}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3969: (14.2857%)&lt;BR/&gt; 3968: (14.2857%)&lt;BR/&gt; 2339: (14.2857%)&lt;BR/&gt; 3965: (7.14286%)&gt;];
}
3616--4476[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="209.36.37.67" dst_port="3969" src_ip="197.51.155.169" src_port="80"/>
      <filter dst_ip="209.36.37.67" dst_port="3968" src_ip="197.51.155.169" src_port="80"/>
      <filter dst_ip="209.36.37.67" dst_port="3965" src_ip="197.51.155.169" src_port="80"/>
      <filter dst_ip="162.159.13.25" dst_port="2339" src_ip="197.51.155.169" src_port="80"/>
    </slice>
    <from sec="1075698854" usec="0"/>
    <to sec="1075698889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.797526,1.87935,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_637{
style=filled;
color=gray75;
3618[label="34.78.5.170;253pkt 253fpkt", shape=pentagon, color=darkviolet];
4478[label="34.78.5.170;252pkt 252fpkt", shape=invtriangle, color=brown];
4857[label="34.78.5.170;253pkt 253fpkt", shape=invhouse, color=bisque];
stat637[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.78.5.170:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3618--4478[label="1;252pkt 252fpkt"];
3618--4857[label="1;253pkt 253fpkt"];
4478--4857[label="1;252pkt 252fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="34.78.5.170" src_port="1025"/>
    </slice>
    <from sec="1075698525" usec="0"/>
    <to sec="1075698539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="131.157.104.170"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_639{
style=filled;
color=gray75;
3626[label="73.91.248.170;191pkt 191fpkt", shape=pentagon, color=darkviolet];
4484[label="73.91.248.170;191pkt 191fpkt", shape=invtriangle, color=brown];
stat639[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.91.248.170:10285, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10285: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3626--4484[label="1;191pkt 191fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="73.91.248.170" src_port="10285"/>
    </slice>
    <from sec="1075698855" usec="0"/>
    <to sec="1075698894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.797526,1.87935,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_641{
style=filled;
color=gray75;
3630[label="50.214.186.171;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4488[label="50.214.186.171;1pkt 1fpkt", shape=invtriangle, color=brown];
4862[label="50.214.186.171;1pkt 1fpkt", shape=invhouse, color=bisque];
stat641[shape=component, label=&lt;Rules:&lt;BR/&gt;{50.214.186.171:80, 162.159.13.24:4391}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4391: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3630--4488[label="1;1pkt 1fpkt"];
3630--4862[label="1;1pkt 1fpkt"];
4488--4862[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.159.13.24" dst_port="4391" src_ip="50.214.186.171" src_port="80"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_642{
style=filled;
color=gray75;
3631[label="143.111.228.171;39pkt 39fpkt", shape=pentagon, color=darkviolet];
4489[label="143.111.228.171;39pkt 39fpkt", shape=invtriangle, color=brown];
stat642[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.228.171:*, 213.217.14.210:80}[28.2051%]&lt;BR/&gt;{143.111.228.171:*, 213.217.14.241:80}[28.2051%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.0256%)&lt;BR/&gt; 10001: (5.12821%)&lt;BR/&gt; 443: (3.84615%)&lt;BR/&gt; 51656: (1.28205%)&lt;BR/&gt; 51655: (1.28205%)&gt;];
}
3631--4489[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="213.217.14.241" dst_port="80" src_ip="143.111.228.171"/>
      <filter dst_ip="213.217.14.210" dst_port="80" src_ip="143.111.228.171"/>
    </slice>
    <from sec="1075698006" usec="0"/>
    <to sec="1075698896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.110.165.173"/>
    </slice>
    <from sec="1075698001" usec="0"/>
    <to sec="1075698900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.114.29.176"/>
    </slice>
    <from sec="1075698015" usec="0"/>
    <to sec="1075698900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="171.39.110.177"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.797526,1.87935,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_646{
style=filled;
color=gray75;
3667[label="50.123.42.181;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4509[label="50.123.42.181;1pkt 1fpkt", shape=invtriangle, color=brown];
4872[label="50.123.42.181;2pkt 2fpkt", shape=invhouse, color=bisque];
stat646[shape=component, label=&lt;Rules:&lt;BR/&gt;{50.123.42.181:8200, 143.111.244.49:3240}[50%]&lt;BR/&gt;{50.123.42.181:8200, 143.111.244.49:3315}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8200: (50%)&lt;BR/&gt; 3315: (37.5%)&lt;BR/&gt; 3240: (12.5%)&gt;];
}
3667--4509[label="1;1pkt 1fpkt"];
3667--4872[label="1;1pkt 1fpkt"];
4509--4872[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.111.244.49" dst_port="3315" src_ip="50.123.42.181" src_port="8200"/>
      <filter dst_ip="143.111.244.49" dst_port="3240" src_ip="50.123.42.181" src_port="8200"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945727,1.79955,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_647{
style=filled;
color=gray75;
686[label="143.110.52.184;d;92pkt 92fpkt", shape=diamond, color=yellow];
1005[label="48.31.26.69;s;61pkt 61fpkt", shape=diamond, color=yellow];
1316[label="48.31.26.148;s;196pkt 196fpkt", shape=diamond, color=yellow];
1621[label="143.110.234.76;d;74pkt 74fpkt", shape=diamond, color=yellow];
1764[label="164.229.98.8;d;167pkt 167fpkt", shape=diamond, color=yellow];
2071[label="143.110.52.184;d;92pkt 92fpkt", shape=hexagon, color=black];
2336[label="143.110.234.76;d;71pkt 71fpkt", shape=hexagon, color=black];
2680[label="73.193.236.2;28pkt 28fpkt", shape=pentagon, color=darkviolet];
3207[label="213.217.8.89;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3517[label="48.31.26.148;238pkt 238fpkt", shape=pentagon, color=darkviolet];
3704[label="213.217.8.192;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3762[label="213.217.8.202;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4260[label="213.217.8.89;3pkt 3fpkt", shape=invtriangle, color=brown];
4529[label="213.217.8.192;5pkt 5fpkt", shape=invtriangle, color=brown];
4563[label="213.217.8.202;9pkt 9fpkt", shape=invtriangle, color=brown];
stat647[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.31.26.148:80, *:*}[46.7583%]&lt;BR/&gt;{*:80, 164.229.98.8:*}[32.8094%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.0114%)&lt;BR/&gt; 1863: (2.32448%)&lt;BR/&gt; 443: (0.56926%)&lt;BR/&gt; 1366: (0.28463%)&lt;BR/&gt; 1365: (0.28463%)&gt;];
}
686--687[label="0.0322581;2pkt 2fpkt"];
686--989[label="0.0217391;2pkt 2fpkt"];
686--1005[label="0.311475;19pkt 19fpkt"];
686--1236[label="0.0434783;4pkt 4fpkt"];
686--1316[label="0.543478;50pkt 50fpkt"];
686--2071[label="1;92pkt 92fpkt"];
686--2242[label="0.0217391;2pkt 2fpkt"];
686--2496[label="0.0434783;4pkt 4fpkt"];
686--2888[label="0.210526;4pkt 4fpkt"];
686--3517[label="0.543478;50pkt 50fpkt"];
686--3612[label="0.0943396;5pkt 5fpkt"];
686--3702[label="0.0108696;1pkt 1fpkt"];
686--3756[label="0.0555556;2pkt 2fpkt"];
686--4528[label="0.0108696;1pkt 1fpkt"];
1005--1621[label="0.0983607;6pkt 6fpkt"];
1005--1764[label="0.147541;9pkt 9fpkt"];
1005--1948[label="0.0491803;3pkt 3fpkt"];
1005--1960[label="0.0491803;3pkt 3fpkt"];
1005--2071[label="0.311475;19pkt 19fpkt"];
1005--2138[label="0.213115;13pkt 13fpkt"];
1005--2336[label="0.0983607;6pkt 6fpkt"];
1005--2583[label="0.0491803;3pkt 3fpkt"];
1005--2585[label="0.0491803;3pkt 3fpkt"];
1316--1554[label="0.0104167;1pkt 1fpkt"];
1316--1621[label="0.540541;40pkt 40fpkt"];
1316--1707[label="0.0142857;1pkt 1fpkt"];
1316--1764[label="0.245509;41pkt 41fpkt"];
1316--1960[label="0.00510204;1pkt 1fpkt"];
1316--2071[label="0.543478;50pkt 50fpkt"];
1316--2138[label="0.02;2pkt 2fpkt"];
1316--2336[label="0.56338;40pkt 40fpkt"];
1316--2366[label="0.0104167;1pkt 1fpkt"];
1316--2376[label="0.0142857;1pkt 1fpkt"];
1316--2585[label="0.00510204;1pkt 1fpkt"];
1316--3517[label="1;196pkt 196fpkt"];
1621--2242[label="0.0540541;4pkt 4fpkt"];
1621--2336[label="1;71pkt 71fpkt"];
1621--2496[label="0.0540541;4pkt 4fpkt"];
1621--3207[label="0.333333;1pkt 1fpkt"];
1621--3411[label="0.027027;2pkt 2fpkt"];
1621--3517[label="0.540541;40pkt 40fpkt"];
1621--3704[label="0.166667;1pkt 1fpkt"];
1621--3762[label="0.111111;1pkt 1fpkt"];
1621--3795[label="0.015873;1pkt 1fpkt"];
1621--4260[label="0.333333;1pkt 1fpkt"];
1621--4529[label="0.2;1pkt 1fpkt"];
1621--4563[label="0.111111;1pkt 1fpkt"];
1621--4580[label="0.016129;1pkt 1fpkt"];
1621--4626[label="0.0277778;1pkt 1fpkt"];
1764--1984[label="0.011976;2pkt 2fpkt"];
1764--2206[label="0.0658683;11pkt 11fpkt"];
1764--2242[label="0.00598802;1pkt 1fpkt"];
1764--2495[label="0.00917431;1pkt 1fpkt"];
1764--2496[label="0.0239521;4pkt 4fpkt"];
1764--2512[label="0.0778443;13pkt 13fpkt"];
1764--2527[label="0.0105263;1pkt 1fpkt"];
1764--2680[label="0.0357143;1pkt 1fpkt"];
1764--2903[label="0.0666667;1pkt 1fpkt"];
1764--3372[label="0.037037;1pkt 1fpkt"];
1764--3452[label="0.010101;1pkt 1fpkt"];
1764--3517[label="0.245509;41pkt 41fpkt"];
1764--3864[label="0.0277778;1pkt 1fpkt"];
1764--4095[label="0.0714286;1pkt 1fpkt"];
1764--4389[label="0.0102041;1pkt 1fpkt"];
1764--4614[label="0.0277778;1pkt 1fpkt"];
1764--4707[label="0.0714286;1pkt 1fpkt"];
1764--4827[label="0.0102041;1pkt 1fpkt"];
2071--2242[label="0.0217391;2pkt 2fpkt"];
2071--2496[label="0.0434783;4pkt 4fpkt"];
2071--2888[label="0.210526;4pkt 4fpkt"];
2071--3517[label="0.543478;50pkt 50fpkt"];
2071--3612[label="0.0943396;5pkt 5fpkt"];
2071--3702[label="0.0108696;1pkt 1fpkt"];
2071--3756[label="0.0555556;2pkt 2fpkt"];
2071--4528[label="0.0108696;1pkt 1fpkt"];
2336--2496[label="0.0422535;3pkt 3fpkt"];
2336--3207[label="0.333333;1pkt 1fpkt"];
2336--3411[label="0.028169;2pkt 2fpkt"];
2336--3517[label="0.56338;40pkt 40fpkt"];
2336--3704[label="0.166667;1pkt 1fpkt"];
2336--3762[label="0.111111;1pkt 1fpkt"];
2336--3795[label="0.015873;1pkt 1fpkt"];
2336--4260[label="0.333333;1pkt 1fpkt"];
2336--4529[label="0.2;1pkt 1fpkt"];
2336--4563[label="0.111111;1pkt 1fpkt"];
2336--4580[label="0.016129;1pkt 1fpkt"];
2336--4626[label="0.0277778;1pkt 1fpkt"];
3207--4260[label="1;3pkt 3fpkt"];
3704--4529[label="1;5pkt 5fpkt"];
3762--4563[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter src_ip="48.31.26.148" src_port="80"/>
      <filter dst_ip="164.229.98.8" src_port="80"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="110.237.123.184"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_649{
style=filled;
color=gray75;
3685[label="74.160.0.186;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4520[label="74.160.0.186;3pkt 3fpkt", shape=invtriangle, color=brown];
stat649[shape=component, label=&lt;Rules:&lt;BR/&gt;{74.160.0.186:80, 143.110.12.25:2584}[33.3333%]&lt;BR/&gt;{74.160.0.186:1755, 143.110.12.25:2585}[33.3333%]&lt;BR/&gt;{74.160.0.186:2609, 143.110.12.25:2587}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2609: (16.6667%)&lt;BR/&gt; 2587: (16.6667%)&lt;BR/&gt; 2585: (16.6667%)&lt;BR/&gt; 2584: (16.6667%)&lt;BR/&gt; 1755: (16.6667%)&gt;];
}
3685--4520[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="143.110.12.25" dst_port="2587" src_ip="74.160.0.186" src_port="2609"/>
      <filter dst_ip="143.110.12.25" dst_port="2585" src_ip="74.160.0.186" src_port="1755"/>
      <filter dst_ip="143.110.12.25" dst_port="2584" src_ip="74.160.0.186" src_port="80"/>
    </slice>
    <from sec="1075698681" usec="0"/>
    <to sec="1075698728" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_652{
style=filled;
color=gray75;
3711[label="50.146.168.193;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4532[label="50.146.168.193;7pkt 7fpkt", shape=invtriangle, color=brown];
stat652[shape=component, label=&lt;Rules:&lt;BR/&gt;{50.146.168.193:80, 137.236.205.235:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4389: (7.69231%)&lt;BR/&gt; 4388: (7.69231%)&lt;BR/&gt; 4387: (7.69231%)&lt;BR/&gt; 4386: (7.69231%)&gt;];
}
3711--4532[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="137.236.205.235" src_ip="50.146.168.193" src_port="80"/>
    </slice>
    <from sec="1075698889" usec="0"/>
    <to sec="1075698900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.55.81.194"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.136.210.194"/>
    </slice>
    <from sec="1075698006" usec="0"/>
    <to sec="1075698899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.797526,1.87935,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_656{
style=filled;
color=gray75;
3728[label="49.234.66.196;51pkt 51fpkt", shape=pentagon, color=darkviolet];
4543[label="49.234.66.196;51pkt 51fpkt", shape=invtriangle, color=brown];
4880[label="49.234.66.196;52pkt 52fpkt", shape=invhouse, color=bisque];
stat656[shape=component, label=&lt;Rules:&lt;BR/&gt;{49.234.66.196:80, 148.180.250.32:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4678: (0.974026%)&lt;BR/&gt; 4677: (0.974026%)&lt;BR/&gt; 4676: (0.974026%)&lt;BR/&gt; 4675: (0.974026%)&gt;];
}
3728--4543[label="1;51pkt 51fpkt"];
3728--4880[label="1;51pkt 51fpkt"];
4543--4880[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter dst_ip="148.180.250.32" src_ip="49.234.66.196" src_port="80"/>
    </slice>
    <from sec="1075698435" usec="0"/>
    <to sec="1075698510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.797526,1.87935,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_657{
style=filled;
color=gray75;
3730[label="213.217.14.197;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4545[label="213.217.14.197;2pkt 2fpkt", shape=invtriangle, color=brown];
4881[label="213.217.14.197;2pkt 2fpkt", shape=invhouse, color=bisque];
stat657[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.217.14.197:80, 143.111.88.101:36715}[33.3333%]&lt;BR/&gt;{213.217.14.197:80, 143.111.88.102:10671}[33.3333%]&lt;BR/&gt;{213.217.14.197:80, 137.37.46.231:1300}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 36715: (21.4286%)&lt;BR/&gt; 10671: (21.4286%)&lt;BR/&gt; 1300: (7.14286%)&gt;];
}
3730--4545[label="1;2pkt 2fpkt"];
3730--4881[label="1;2pkt 2fpkt"];
4545--4881[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="137.37.46.231" dst_port="1300" src_ip="213.217.14.197" src_port="80"/>
      <filter dst_ip="143.111.88.102" dst_port="10671" src_ip="213.217.14.197" src_port="80"/>
      <filter dst_ip="143.111.88.101" dst_port="36715" src_ip="213.217.14.197" src_port="80"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.797526,1.87935,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_658{
style=filled;
color=gray75;
3735[label="197.69.156.197;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4548[label="197.69.156.197;1pkt 1fpkt", shape=invtriangle, color=brown];
4883[label="197.69.156.197;1pkt 1fpkt", shape=invhouse, color=bisque];
stat658[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.69.156.197:80, 143.111.115.56:4902}[50%]&lt;BR/&gt;{197.69.156.197:80, 143.111.115.56:4903}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4903: (37.5%)&lt;BR/&gt; 4902: (12.5%)&gt;];
}
3735--4548[label="1;1pkt 1fpkt"];
3735--4883[label="1;1pkt 1fpkt"];
4548--4883[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.111.115.56" dst_port="4903" src_ip="197.69.156.197" src_port="80"/>
      <filter dst_ip="143.111.115.56" dst_port="4902" src_ip="197.69.156.197" src_port="80"/>
    </slice>
    <from sec="1075698879" usec="0"/>
    <to sec="1075698898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_659{
style=filled;
color=gray75;
3736[label="213.217.8.198;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4549[label="213.217.8.198;4pkt 4fpkt", shape=invtriangle, color=brown];
stat659[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.217.8.198:1863, 143.111.53.9:1034}[25%]&lt;BR/&gt;{213.217.8.198:1863, 148.180.30.71:1029}[25%]&lt;BR/&gt;{213.217.8.198:1863, 209.43.95.115:3962}[25%]&lt;BR/&gt;{213.217.8.198:1863, 148.180.92.166:1037}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3962: (12.5%)&lt;BR/&gt; 1037: (12.5%)&lt;BR/&gt; 1034: (12.5%)&lt;BR/&gt; 1029: (12.5%)&gt;];
}
3736--4549[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="148.180.92.166" dst_port="1037" src_ip="213.217.8.198" src_port="1863"/>
      <filter dst_ip="209.43.95.115" dst_port="3962" src_ip="213.217.8.198" src_port="1863"/>
      <filter dst_ip="148.180.30.71" dst_port="1029" src_ip="213.217.8.198" src_port="1863"/>
      <filter dst_ip="143.111.53.9" dst_port="1034" src_ip="213.217.8.198" src_port="1863"/>
    </slice>
    <from sec="1075698004" usec="0"/>
    <to sec="1075698890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.942603,1.83268,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_660{
style=filled;
color=gray75;
940[label="217.65.98.37;d;93pkt 93fpkt", shape=diamond, color=yellow];
1290[label="217.65.98.38;d;320pkt 320fpkt", shape=diamond, color=yellow];
2807[label="74.146.57.21;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3749[label="74.219.122.200;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4048[label="74.146.57.21;1pkt 1fpkt", shape=invtriangle, color=brown];
4556[label="74.219.122.200;8pkt 8fpkt", shape=invtriangle, color=brown];
4688[label="74.146.57.21;1pkt 1fpkt", shape=invhouse, color=bisque];
stat660[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 217.65.98.38:6667}[22.7603%]&lt;BR/&gt;{*:*, 217.65.98.37:*}[22.5182%]&lt;BR/&gt;{*:113, *:*}[20.339%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (21.0648%)&lt;BR/&gt; 113: (10.4167%)&lt;BR/&gt; 10080: (3.24074%)&lt;BR/&gt; 3128: (3.24074%)&lt;BR/&gt; 80: (3.24074%)&gt;];
}
940--2651[label="0.0107527;1pkt 1fpkt"];
940--2742[label="0.0107527;1pkt 1fpkt"];
940--2807[label="1;1pkt 1fpkt"];
940--2910[label="0.0107527;1pkt 1fpkt"];
940--3475[label="0.0107527;1pkt 1fpkt"];
940--3749[label="0.25;2pkt 2fpkt"];
940--4014[label="0.0107527;1pkt 1fpkt"];
940--4048[label="1;1pkt 1fpkt"];
940--4100[label="0.0107527;1pkt 1fpkt"];
940--4556[label="0.25;2pkt 2fpkt"];
940--4688[label="1;1pkt 1fpkt"];
1290--2651[label="0.003125;1pkt 1fpkt"];
1290--2742[label="0.00392157;1pkt 1fpkt"];
1290--2910[label="0.00413223;1pkt 1fpkt"];
1290--3475[label="0.00398406;1pkt 1fpkt"];
1290--3749[label="0.75;6pkt 6fpkt"];
1290--4014[label="0.00393701;1pkt 1fpkt"];
1290--4100[label="0.00413223;1pkt 1fpkt"];
1290--4556[label="0.75;6pkt 6fpkt"];
2807--4048[label="1;1pkt 1fpkt"];
2807--4688[label="1;1pkt 1fpkt"];
3749--4556[label="1;8pkt 8fpkt"];
4048--4688[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="217.65.98.37"/>
      <filter src_port="113"/>
      <filter dst_ip="217.65.98.38" dst_port="6667"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_662{
style=filled;
color=gray75;
3755[label="203.77.45.201;175pkt 175fpkt", shape=pentagon, color=darkviolet];
4559[label="203.77.45.201;175pkt 175fpkt", shape=invtriangle, color=brown];
stat662[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.77.45.201:46202, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 46202: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3755--4559[label="1;175pkt 175fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="203.77.45.201" src_port="46202"/>
    </slice>
    <from sec="1075698421" usec="0"/>
    <to sec="1075698462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.116.241.207"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_666{
style=filled;
color=gray75;
3792[label="192.32.154.208;244pkt 244fpkt", shape=pentagon, color=darkviolet];
4577[label="192.32.154.208;244pkt 244fpkt", shape=invtriangle, color=brown];
stat666[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.32.154.208:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3792--4577[label="1;244pkt 244fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="192.32.154.208" src_port="1027"/>
    </slice>
    <from sec="1075698109" usec="0"/>
    <to sec="1075698130" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.797526,1.87935,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_667{
style=filled;
color=gray75;
3793[label="220.5.187.208;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4578[label="220.5.187.208;1pkt 1fpkt", shape=invtriangle, color=brown];
4889[label="220.5.187.208;1pkt 1fpkt", shape=invhouse, color=bisque];
stat667[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.5.187.208:1315, 143.111.128.185:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1315: (50%)&gt;];
}
3793--4578[label="1;1pkt 1fpkt"];
3793--4889[label="1;1pkt 1fpkt"];
4578--4889[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.111.128.185" dst_port="1434" src_ip="220.5.187.208" src_port="1315"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.797526,1.87935,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_668{
style=filled;
color=gray75;
3797[label="143.111.114.209;13pkt 13fpkt", shape=pentagon, color=darkviolet];
4582[label="143.111.114.209;13pkt 13fpkt", shape=invtriangle, color=brown];
4891[label="143.111.114.209;12pkt 12fpkt", shape=invhouse, color=bisque];
stat668[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.111.114.209:*, 48.31.26.69:80}[53.8462%]&lt;BR/&gt;{143.111.114.209:*, 213.174.90.112:80}[46.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2151: (3.94737%)&lt;BR/&gt; 2149: (3.94737%)&lt;BR/&gt; 2147: (3.94737%)&lt;BR/&gt; 2145: (3.94737%)&gt;];
}
3797--4582[label="1;13pkt 13fpkt"];
3797--4891[label="1;12pkt 12fpkt"];
4582--4891[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="48.31.26.69" dst_port="80" src_ip="143.111.114.209"/>
      <filter dst_ip="213.174.90.112" dst_port="80" src_ip="143.111.114.209"/>
    </slice>
    <from sec="1075698790" usec="0"/>
    <to sec="1075698844" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_669{
style=filled;
color=gray75;
3811[label="74.216.223.212;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4590[label="74.216.223.212;5pkt 5fpkt", shape=invtriangle, color=brown];
stat669[shape=component, label=&lt;Rules:&lt;BR/&gt;{74.216.223.212:6667, 162.159.62.85:1044}[20%]&lt;BR/&gt;{74.216.223.212:35465, 162.159.57.40:113}[20%]&lt;BR/&gt;{74.216.223.212:39113, 162.159.57.40:113}[20%]&lt;BR/&gt;{74.216.223.212:6667, 162.159.57.40:1139}[20%]&lt;BR/&gt;{74.216.223.212:6667, 162.159.57.40:1170}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (27.7778%)&lt;BR/&gt; 113: (22.2222%)&lt;BR/&gt; 39113: (11.1111%)&lt;BR/&gt; 35465: (11.1111%)&lt;BR/&gt; 1170: (11.1111%)&gt;];
}
3811--4590[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="162.159.57.40" dst_port="1170" src_ip="74.216.223.212" src_port="6667"/>
      <filter dst_ip="162.159.57.40" dst_port="1139" src_ip="74.216.223.212" src_port="6667"/>
      <filter dst_ip="162.159.57.40" dst_port="113" src_ip="74.216.223.212" src_port="39113"/>
      <filter dst_ip="162.159.57.40" dst_port="113" src_ip="74.216.223.212" src_port="35465"/>
      <filter dst_ip="162.159.62.85" dst_port="1044" src_ip="74.216.223.212" src_port="6667"/>
    </slice>
    <from sec="1075698075" usec="0"/>
    <to sec="1075698864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.217.8.214"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.797526,1.87935,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_671{
style=filled;
color=gray75;
3830[label="204.173.148.215;140pkt 140fpkt", shape=pentagon, color=darkviolet];
4598[label="204.173.148.215;140pkt 140fpkt", shape=invtriangle, color=brown];
4902[label="204.173.148.215;140pkt 140fpkt", shape=invhouse, color=bisque];
stat671[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.173.148.215:29008, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 29008: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3830--4598[label="1;140pkt 140fpkt"];
3830--4902[label="1;140pkt 140fpkt"];
4598--4902[label="1;140pkt 140fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="204.173.148.215" src_port="29008"/>
    </slice>
    <from sec="1075698389" usec="0"/>
    <to sec="1075698412" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.184.97.216"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11702,1.79355,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_673{
style=filled;
color=gray75;
954[label="143.111.227.232;d;186pkt 186fpkt", shape=diamond, color=yellow];
1053[label="209.43.187.161;d;4pkt 4fpkt", shape=diamond, color=yellow];
1114[label="143.111.113.101;d;222pkt 222fpkt", shape=diamond, color=yellow];
1171[label="49.113.170.48;s;13pkt 13fpkt", shape=diamond, color=yellow];
1399[label="49.113.181.100;s;80pkt 80fpkt", shape=diamond, color=yellow];
1421[label="192.84.84.1;s;33pkt 33fpkt", shape=diamond, color=yellow];
1523[label="48.31.15.35;s;112pkt 112fpkt", shape=diamond, color=yellow];
1529[label="73.6.4.76;s;43pkt 43fpkt", shape=diamond, color=yellow];
1583[label="49.113.154.45;s;43pkt 43fpkt", shape=diamond, color=yellow];
1630[label="137.37.100.24;d;4pkt 4fpkt", shape=diamond, color=yellow];
1786[label="148.180.7.3;d;97pkt 97fpkt", shape=diamond, color=yellow];
2052[label="209.43.187.161;d;4pkt 4fpkt", shape=hexagon, color=black];
2439[label="48.31.15.35;s;112pkt 112fpkt", shape=hexagon, color=black];
2542[label="137.37.100.24;d;4pkt 4fpkt", shape=hexagon, color=black];
2551[label="148.180.7.3;d;97pkt 97fpkt", shape=hexagon, color=black];
2874[label="48.31.15.35;124pkt 124fpkt", shape=pentagon, color=darkviolet];
2923[label="48.31.15.43;54pkt 54fpkt", shape=pentagon, color=darkviolet];
3078[label="213.217.8.69;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3090[label="213.217.8.70;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3136[label="213.217.12.78;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3182[label="50.42.191.85;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3385[label="213.217.12.124;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3412[label="213.217.8.129;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3500[label="49.113.136.143;76pkt 76fpkt", shape=pentagon, color=darkviolet];
3502[label="213.174.66.144;55pkt 55fpkt", shape=pentagon, color=darkviolet];
3838[label="213.217.8.217;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4079[label="48.31.15.35;124pkt 124fpkt", shape=invtriangle, color=brown];
4224[label="213.217.12.78;7pkt 7fpkt", shape=invtriangle, color=brown];
4359[label="213.217.12.124;3pkt 3fpkt", shape=invtriangle, color=brown];
4367[label="213.217.8.129;8pkt 8fpkt", shape=invtriangle, color=brown];
4413[label="49.113.136.143;77pkt 77fpkt", shape=invtriangle, color=brown];
4601[label="213.217.8.217;5pkt 5fpkt", shape=invtriangle, color=brown];
4702[label="48.31.15.35;123pkt 123fpkt", shape=invhouse, color=bisque];
4833[label="49.113.136.143;76pkt 76fpkt", shape=invhouse, color=bisque];
stat673[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, *:*}[69.9774%]&lt;BR/&gt;{*:*, 143.111.113.101:*}[25.0564%]&lt;BR/&gt;{*:*, 143.111.227.232:*}[20.9932%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.9577%)&lt;BR/&gt; 443: (6.97419%)&lt;BR/&gt; 1863: (2.33388%)&lt;BR/&gt; 2047: (0.329489%)&lt;BR/&gt; 1035: (0.329489%)&gt;];
}
954--961[label="0.00884956;1pkt 1fpkt"];
954--989[label="0.0107527;2pkt 2fpkt"];
954--1122[label="0.016129;3pkt 3fpkt"];
954--1133[label="0.0107527;2pkt 2fpkt"];
954--1380[label="0.00621118;1pkt 1fpkt"];
954--1421[label="0.69697;23pkt 23fpkt"];
954--1429[label="0.134328;18pkt 18fpkt"];
954--1529[label="0.906977;39pkt 39fpkt"];
954--1599[label="0.0481928;4pkt 4fpkt"];
954--1778[label="0.0178571;1pkt 1fpkt"];
954--1976[label="0.00537634;1pkt 1fpkt"];
954--2218[label="0.00537634;1pkt 1fpkt"];
954--2235[label="0.016129;3pkt 3fpkt"];
954--2242[label="0.0107527;2pkt 2fpkt"];
954--2406[label="0.00621118;1pkt 1fpkt"];
954--2412[label="0.04;3pkt 3fpkt"];
954--2614[label="0.00537634;1pkt 1fpkt"];
954--2616[label="0.00537634;1pkt 1fpkt"];
954--2842[label="0.00537634;1pkt 1fpkt"];
954--3078[label="0.2;1pkt 1fpkt"];
954--3090[label="0.166667;1pkt 1fpkt"];
954--3136[label="0.142857;1pkt 1fpkt"];
954--3157[label="0.0465116;4pkt 4fpkt"];
954--3182[label="0.5;1pkt 1fpkt"];
954--3290[label="0.00537634;1pkt 1fpkt"];
954--3319[label="0.125874;18pkt 18fpkt"];
954--3412[label="0.142857;1pkt 1fpkt"];
954--3680[label="0.0172414;1pkt 1fpkt"];
954--4224[label="0.142857;1pkt 1fpkt"];
954--4234[label="0.0465116;4pkt 4fpkt"];
954--4304[label="0.00537634;1pkt 1fpkt"];
954--4367[label="0.125;1pkt 1fpkt"];
954--4516[label="0.0175439;1pkt 1fpkt"];
954--4626[label="0.0277778;1pkt 1fpkt"];
954--4789[label="0.00537634;1pkt 1fpkt"];
1053--1171[label="0.5;2pkt 2fpkt"];
1053--2052[label="1;4pkt 4fpkt"];
1053--3500[label="0.25;1pkt 1fpkt"];
1053--4413[label="0.25;1pkt 1fpkt"];
1053--4833[label="0.25;1pkt 1fpkt"];
1114--1118[label="0.0394737;3pkt 3fpkt"];
1114--1133[label="0.0045045;1pkt 1fpkt"];
1114--1238[label="0.0045045;1pkt 1fpkt"];
1114--1289[label="0.0225225;5pkt 5fpkt"];
1114--1363[label="0.0183486;2pkt 2fpkt"];
1114--1417[label="0.0151515;2pkt 2fpkt"];
1114--1523[label="0.0803571;9pkt 9fpkt"];
1114--1661[label="0.0384615;1pkt 1fpkt"];
1114--2192[label="0.0045045;1pkt 1fpkt"];
1114--2227[label="0.0394737;3pkt 3fpkt"];
1114--2233[label="0.0225225;5pkt 5fpkt"];
1114--2242[label="0.0045045;1pkt 1fpkt"];
1114--2354[label="0.0588235;1pkt 1fpkt"];
1114--2439[label="0.0803571;9pkt 9fpkt"];
1114--2495[label="0.0183486;2pkt 2fpkt"];
1114--2630[label="0.0225225;5pkt 5fpkt"];
1114--2874[label="0.0725806;9pkt 9fpkt"];
1114--2908[label="0.125;1pkt 1fpkt"];
1114--2946[label="0.125;1pkt 1fpkt"];
1114--3114[label="0.0045045;1pkt 1fpkt"];
1114--3162[label="0.0416667;1pkt 1fpkt"];
1114--3324[label="0.0225225;5pkt 5fpkt"];
1114--3412[label="0.142857;1pkt 1fpkt"];
1114--3500[label="0.0526316;4pkt 4fpkt"];
1114--3660[label="0.0740741;14pkt 14fpkt"];
1114--3785[label="0.0357143;1pkt 1fpkt"];
1114--3838[label="0.166667;1pkt 1fpkt"];
1114--4079[label="0.0725806;9pkt 9fpkt"];
1114--4098[label="0.111111;1pkt 1fpkt"];
1114--4119[label="0.125;1pkt 1fpkt"];
1114--4324[label="0.0225225;5pkt 5fpkt"];
1114--4359[label="0.333333;1pkt 1fpkt"];
1114--4367[label="0.125;1pkt 1fpkt"];
1114--4413[label="0.0519481;4pkt 4fpkt"];
1114--4505[label="0.0736842;14pkt 14fpkt"];
1114--4601[label="0.2;1pkt 1fpkt"];
1114--4702[label="0.0731707;9pkt 9fpkt"];
1114--4709[label="0.111111;1pkt 1fpkt"];
1114--4799[label="0.0225225;5pkt 5fpkt"];
1114--4833[label="0.0526316;4pkt 4fpkt"];
1114--4870[label="0.0736842;14pkt 14fpkt"];
1171--1960[label="0.153846;2pkt 2fpkt"];
1171--2052[label="0.5;2pkt 2fpkt"];
1171--2585[label="0.153846;2pkt 2fpkt"];
1399--1405[label="0.131579;5pkt 5fpkt"];
1399--1786[label="0.2;16pkt 16fpkt"];
1399--1883[label="0.255814;11pkt 11fpkt"];
1399--2316[label="0.0125;1pkt 1fpkt"];
1399--2551[label="0.2;16pkt 16fpkt"];
1421--1948[label="0.0909091;3pkt 3fpkt"];
1421--1960[label="0.212121;7pkt 7fpkt"];
1421--2583[label="0.0909091;3pkt 3fpkt"];
1421--2585[label="0.212121;7pkt 7fpkt"];
1523--1786[label="0.309278;30pkt 30fpkt"];
1523--1811[label="0.025974;2pkt 2fpkt"];
1523--1948[label="0.0982143;11pkt 11fpkt"];
1523--2075[label="0.0178571;2pkt 2fpkt"];
1523--2134[label="0.0151515;1pkt 1fpkt"];
1523--2161[label="0.0267857;3pkt 3fpkt"];
1523--2399[label="0.00892857;1pkt 1fpkt"];
1523--2439[label="1;112pkt 112fpkt"];
1523--2551[label="0.309278;30pkt 30fpkt"];
1523--2583[label="0.0982143;11pkt 11fpkt"];
1523--2874[label="1;112pkt 112fpkt"];
1523--4079[label="1;112pkt 112fpkt"];
1523--4702[label="0.991071;111pkt 111fpkt"];
1529--1948[label="0.0232558;1pkt 1fpkt"];
1529--1960[label="0.0697674;3pkt 3fpkt"];
1529--2583[label="0.0232558;1pkt 1fpkt"];
1529--2585[label="0.0697674;3pkt 3fpkt"];
1583--1630[label="0.75;3pkt 3fpkt"];
1583--1786[label="0.744186;32pkt 32fpkt"];
1583--2055[label="0.0697674;3pkt 3fpkt"];
1583--2542[label="0.75;3pkt 3fpkt"];
1583--2551[label="0.744186;32pkt 32fpkt"];
1630--2542[label="1;4pkt 4fpkt"];
1786--2439[label="0.309278;30pkt 30fpkt"];
1786--2551[label="1;97pkt 97fpkt"];
1786--2874[label="0.309278;30pkt 30fpkt"];
1786--2923[label="0.0925926;5pkt 5fpkt"];
1786--3502[label="0.254545;14pkt 14fpkt"];
1786--4079[label="0.309278;30pkt 30fpkt"];
1786--4702[label="0.309278;30pkt 30fpkt"];
2052--3500[label="0.25;1pkt 1fpkt"];
2052--4413[label="0.25;1pkt 1fpkt"];
2052--4833[label="0.25;1pkt 1fpkt"];
2439--2551[label="0.309278;30pkt 30fpkt"];
2439--2583[label="0.0982143;11pkt 11fpkt"];
2439--2874[label="1;112pkt 112fpkt"];
2439--4079[label="1;112pkt 112fpkt"];
2439--4702[label="0.991071;111pkt 111fpkt"];
2551--2874[label="0.309278;30pkt 30fpkt"];
2551--2923[label="0.0925926;5pkt 5fpkt"];
2551--3502[label="0.254545;14pkt 14fpkt"];
2551--4079[label="0.309278;30pkt 30fpkt"];
2551--4702[label="0.309278;30pkt 30fpkt"];
2874--4079[label="1;124pkt 124fpkt"];
2874--4702[label="1;123pkt 123fpkt"];
3136--4224[label="1;7pkt 7fpkt"];
3385--4359[label="1;2pkt 2fpkt"];
3412--4367[label="1;7pkt 7fpkt"];
3500--4413[label="1;76pkt 76fpkt"];
3500--4833[label="1;76pkt 76fpkt"];
3838--4601[label="1;5pkt 5fpkt"];
4079--4702[label="1;123pkt 123fpkt"];
4413--4833[label="1;76pkt 76fpkt"];
</description>
    <slice>
      <filter dst_ip="143.111.113.101"/>
      <filter dst_ip="143.111.227.232"/>
      <filter src_port="80"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.797526,1.87935,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_674{
style=filled;
color=gray75;
3844[label="73.135.138.218;18pkt 18fpkt", shape=pentagon, color=darkviolet];
4605[label="73.135.138.218;18pkt 18fpkt", shape=invtriangle, color=brown];
4904[label="73.135.138.218;19pkt 19fpkt", shape=invhouse, color=bisque];
stat674[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.135.138.218:*, *:135}[36.8421%]&lt;BR/&gt;{73.135.138.218:*, *:139}[31.5789%]&lt;BR/&gt;{73.135.138.218:*, *:445}[31.5789%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (17.2727%)&lt;BR/&gt; 445: (16.3636%)&lt;BR/&gt; 139: (16.3636%)&lt;BR/&gt; 1406: (2.72727%)&lt;BR/&gt; 1405: (2.72727%)&gt;];
}
3844--4605[label="1;18pkt 18fpkt"];
3844--4904[label="1;18pkt 18fpkt"];
4605--4904[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="73.135.138.218"/>
      <filter dst_port="445" src_ip="73.135.138.218"/>
      <filter dst_port="139" src_ip="73.135.138.218"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="110.105.106.224"/>
    </slice>
    <from sec="1075698584" usec="0"/>
    <to sec="1075698596" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.797526,1.87935,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_676{
style=filled;
color=gray75;
3873[label="49.26.131.224;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4619[label="49.26.131.224;4pkt 4fpkt", shape=invtriangle, color=brown];
4913[label="49.26.131.224;4pkt 4fpkt", shape=invhouse, color=bisque];
stat676[shape=component, label=&lt;Rules:&lt;BR/&gt;{49.26.131.224:53879, 137.37.10.0:80}[25%]&lt;BR/&gt;{49.26.131.224:55373, 143.111.88.2:80}[25%]&lt;BR/&gt;{49.26.131.224:55401, 137.37.215.74:80}[25%]&lt;BR/&gt;{49.26.131.224:55562, 143.110.20.135:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55401: (13.6364%)&lt;BR/&gt; 55373: (13.6364%)&lt;BR/&gt; 53879: (13.6364%)&lt;BR/&gt; 55562: (9.09091%)&gt;];
}
3873--4619[label="1;3pkt 3fpkt"];
3873--4913[label="1;3pkt 3fpkt"];
4619--4913[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="143.110.20.135" dst_port="80" src_ip="49.26.131.224" src_port="55562"/>
      <filter dst_ip="137.37.215.74" dst_port="80" src_ip="49.26.131.224" src_port="55401"/>
      <filter dst_ip="143.111.88.2" dst_port="80" src_ip="49.26.131.224" src_port="55373"/>
      <filter dst_ip="137.37.10.0" dst_port="80" src_ip="49.26.131.224" src_port="53879"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_677{
style=filled;
color=gray75;
3879[label="213.217.8.226;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4621[label="213.217.8.226;1pkt 1fpkt", shape=invtriangle, color=brown];
stat677[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.217.8.226:1863, 137.37.197.190:4753}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4753: (50%)&lt;BR/&gt; 1863: (50%)&gt;];
}
3879--4621[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="137.37.197.190" dst_port="4753" src_ip="213.217.8.226" src_port="1863"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.16.145.227"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531699,1.88507,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_679{
style=filled;
color=gray75;
3897[label="201.105.109.232;172pkt 172fpkt", shape=pentagon, color=darkviolet];
4627[label="201.105.109.232;171pkt 171fpkt", shape=invtriangle, color=brown];
stat679[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.105.109.232:31406, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 31406: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3897--4627[label="1;171pkt 171fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.105.109.232" src_port="31406"/>
    </slice>
    <from sec="1075698201" usec="0"/>
    <to sec="1075698229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.55.81.233"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.217.8.236"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.129.62.236"/>
    </slice>
    <from sec="1075698040" usec="0"/>
    <to sec="1075698885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.624429,1.95611,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.56.198.240"/>
    </slice>
    <from sec="1075698010" usec="0"/>
    <to sec="1075698899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791734,1.97796,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.153.171.8"/>
    </slice>
    <from sec="1075698094" usec="0"/>
    <to sec="1075698106" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791734,1.97796,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.217.8.14"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791734,1.97796,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.157.15.19"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791734,1.97796,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.172.34.44"/>
    </slice>
    <from sec="1075698014" usec="0"/>
    <to sec="1075698878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791734,1.97796,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.31.71.44"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791734,1.97796,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.31.71.45"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791734,1.97796,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="73.236.78.77"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791734,1.97796,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="51.84.211.78"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791734,1.97796,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="51.49.146.81"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791734,1.97796,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="51.168.241.87"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791734,1.97796,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.187.153.89"/>
    </slice>
    <from sec="1075698001" usec="0"/>
    <to sec="1075698447" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791734,1.97796,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="49.120.113.94"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791734,1.97796,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="53.41.154.95"/>
    </slice>
    <from sec="1075698006" usec="0"/>
    <to sec="1075698038" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791734,1.97796,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="143.111.50.120"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791734,1.97796,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.27.128.120"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791734,1.97796,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="143.111.0.130"/>
    </slice>
    <from sec="1075698005" usec="0"/>
    <to sec="1075698898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791734,1.97796,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="73.238.236.131"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791734,1.97796,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="131.157.104.170"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791734,1.97796,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="48.110.165.173"/>
    </slice>
    <from sec="1075698001" usec="0"/>
    <to sec="1075698897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791734,1.97796,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.117.136.178"/>
    </slice>
    <from sec="1075698024" usec="0"/>
    <to sec="1075698187" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791734,1.97796,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="137.198.206.201"/>
    </slice>
    <from sec="1075698704" usec="0"/>
    <to sec="1075698725" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791734,1.97796,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="75.49.182.213"/>
    </slice>
    <from sec="1075698001" usec="0"/>
    <to sec="1075698345" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791734,1.97796,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.217.8.214"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791734,1.97796,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="110.105.106.224"/>
    </slice>
    <from sec="1075698584" usec="0"/>
    <to sec="1075698596" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791734,1.97796,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.55.81.233"/>
    </slice>
    <from sec="1075698000" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791734,1.97796,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.44.90.238"/>
    </slice>
    <from sec="1075698900" usec="0"/>
    <to sec="1075698901" usec="0"/>
  </anomaly>

</admd:annotation>
